Implementation Of Security System Research Articles

Raspberry Pi based Web Monitoring Smart Security System

The surveillance system has been utilized over the years on public property in order to provide security and prevent unauthorized entrance. Lately, more private homeowners are choosing to implement security systems. There are many problems with the video surveillance system. These disadvantages are the indistinctiveness of the pictures/video and the need for a lot of storage space to save surveillance information. This paper describes the design and implementation of a low-cost Web Monitoring System based on Raspberry Pi. Also, a web application is designed for the purposes of controlling the camera and for live streaming. The live stream from a web camera can be viewed from any web browser, even mobile, in real-time. Controlling the camera is possible with the web application using four commands (up/down, left/right). Also, the camera moves depending on the detection of an object located in the visible area of the PIR Motion sensor, thereby issuing a warning message about object detection.

Kegiatan preservasi koleksi di Perpustakaan Institut Teknologi Nasional

The Library of the National Institute of Technology (Itenas) has many collection of organic materials. The collection in this library is vulnerable to collection mild damage to severe levels so that preservation activities are one way to overcome them. The purpose of this research to find out preservation activity collection at The Library of the National Institute of Technology through preventive, curative, and restorative. The research method used qualitative descriptive. The results showed that biota like termite, and human factors like vandalism were the causes of the damage to the library collections. Librarian have been done preservation activity to minimize collection damage through preventive, curative, and restorative. Preventive preservation activity carried out through educational programs for library staff, provision and arrangement of collection storage areas, environmental control programs and implementation of security systems using CCTV. Curative preservation activity carried out through library cleaning as a periodically, it’s name Jumat Bersih (Clean Friday) Program, and fumigation activities. Restorative preservation activity carried out through binding and mending of damaged library collections. The preservation activities at The Library of National Institute of Technology has some constrains including lack of budget, facilities, and the small number of librarian who worked in preservation activities. Conclusion this research is librarian at The Library of National Institute of Technology has conducted preservation activities with proper procedure consist of preventive, curative, and restorative activities.

УПРАВЛІННЯ МІЖНАРОДНОЮ ПОЛІТИКОЮ ЄС У СФЕРІ ЗАХИСТУ КРИТИЧНОЇ ІНФРАСТРУКТУРИ

The article defines the principles of management of the protection of critical infrastructure objects from the position of international policy of the EU countries. The main stages of development of EU cooperation in this area were studied. The possibility of implementing the EU experience in the management of the security of critical infrastructure in Ukraine has been justified. The structure of protection of critical infrastructure objects in the EU is analyzed. The place of the corporate sector in these issues is considered. The importance of insurance companies and medical centers in this sphere was underlined. Analysis of critical infrastructure protection programs helps to identify the principles, processes and tools that propose the implementation of security systems. Implementation of these projects will be completed in appropriate cases specific to the communications sector. The authors emphasize that nuclear safety should be the focus of the EU and each country’s governance bodies, so the EU Joint Research Center solves key scientific and technological challenges in nuclear safety. Based on the analysis of foreign experience, it is noted that the scientific and practical interest for use in Ukraine in the process of protection of critical infrastructure objects can be the activity of structures created for the purpose of monitoring and analysis of open information. On this basis, the ways of ensuring the security of the objects of the critical infrastructure of Ukraine have been defined. It is noted that international policy should be based on legislative acts, which are coordinated for coordination by a single center. It is concluded that Ukraine’s security policy is developing in the context of implementation of European standards of formation and operation of critical infrastructure.

The Status Quo and Solution of Chinese Social Insurance Audit Under the Perspective of International Comparison: Quantitative Analysis Was Based on HistCite Map

Social security system as the "stabilizer" of social development; The "booster" of economic development; The "regulator" of residents' income is playing an important role in People's Daily life. The receivables and payables of social insurance funds are the key points of social security system implementation and the most important purpose of social insurance audit. Firstly, using HistCite software, this paper analyzes the current situation and trend of global research on social insurance audit, finds out the research hotspots and important authoritative literature in the field of social insurance audit, and analyzes the latest direction and measures of social insurance audit in the authoritative literature. Then it analyzes the current operational resistance and environmental resistance of social insurance audit in China, and finds out feasible measures to reduce the resistance through international comparison of social insurance audit. Finally, based on China's social insurance audit status in our country, draw lessons from international experience and authoritative literature frontier measures, put forward the social insurance audit "Peri-Auditing" model, effectively cope with China's social insurance audit today, will be conducive to the smooth running of social insurance fund in our country, for the domestic and international social security audit work provides a new model of effective.

The Influence of Customer Experience and Electronic Word of Mouth on the Participants’ Loyalty Through Customer Value as an Intervening Variable in BPJamsostek, Medan City Branch

Indonesia's social security system implementation has entered a new stage. Since the implementation of Law No. 40 of 2004 about the National Social Security System and Law No. 24 of 2011 regarding the Social Security Administering Body or “BPJS,” the social security system has also been implemented on a national scale. Social security implementation may rely heavily on customer experience and word of mouth. Participants in BPJamsostek will get personal experience using BPJamsostek services. Satisfaction influences whether or not participants will stay loyal to participants at their productive age and even recommend them to others. Experience determines whether or not participants will remain loyal to them and even recommend them to others. This research intends to examine the impact of customer experience and electronic word-of-mouth on participants' loyalty at the BPJamsostek branch in Medan City, Indonesia, using customer value as an intervening variable. Accidental sampling is used for sampling. The population of this research consisted of claimants for JHT under the age of retirement, with a total of 100 respondents. Using the SmartPLS 3.0 application, PLS-SEM was used for data analysis. The findings indicate that customer experience has a significant and positive impact on customer loyalty. Customer loyalty is positively and significantly affected by electronic word of mouth. Customer value has a significantly positive influence on customer loyalty. Customer experience has a significantly positive impact on customer value. Customer value is positively and significantly affected by electronic word of mouth. Customer value may mediate the link between customer experience and customer loyalty, as well as electronic word of mouth's effect on customer loyalty. Keywords: Customer Experience, Electronic Word of Mouth, Loyalty, Customer Value

Evaluation of Social Security System Implementation for Indonesian Nurses in Saudi Arabia: A Case Study

The employment social security administration or BPJS Ketenagakerjaan for Indonesian Migrant Workers (IMW) still leaves problems in the number of participation and socialization. This study aims to evaluate the implementation of social security system for Indonesian nurses in the Kingdom of Saudi Arabia. The research method was descriptive quantitative with a case study. The instrument used a CIPP Evaluation Model (Context, Input, Process, Products). There were 74 nurses as respondents and participated in the study. The indicators evaluated are membership, socialization, objectives program, benefit program and participation of the program. The results showed that 64.9% of respondents did not have BPJS membership (Context), 83.8% of respondents did not know the socialization of the BPJS program (Input), 66.2% of respondents did not know the purpose of the program and 60.8% of respondents did not know the benefits of the program (Process), while 86.5% of respondents were willing to participated in the BPJS program (Product). The conclusion of the study indicates the need for an evaluation of BPJS membership for Indonesian migrant workers, especially nurses in Saudi Arabia

Cyber Security Frameworks

Abstract: In this paper we attempt to explain and establish certain frameworks that can be assessed for implementing security systems against cyber-threats and cyber-criminals. We give a brief overview of electronic signature generation procedures which include its validation and efficiency for promoting cyber security for confidential documents and information stored in the cloud. We strictly avoid the mathematical modelling of the electronic signature generation process as it is beyond the scope of this paper, instead we take a theoretical approach to explain the procedures. We also model the threats posed by a malicious hacker seeking to induce disturbances in the functioning of a power transmission grid via the means of cyber-physical networks and systems. We use the strategy of a load redistribution attack, while clearly acknowledging that the hacker would form its decision policy on inadequate information. Our research indicate that inaccurate admittance values often cause moderately invasive cyber-attacks that still compromise the grid security, while inadequate capacity values result in comparatively less efficient attacks. In the end we propose a security framework for the security systems utilised by companies and corporations at global scale to conduct cyber-security related operations. Keywords: Electronic signature, Key pair, sequence modelling, hacker, power transmission grid, Threat response, framework.

Организация охраны медицинских учреждений

Медицинские учреждения часто становятся объектами совершения противоправных действий из-за наличия наркотических, спиртосодержащих и дорогих медицинских препаратов, а также ценного диагностического оборудования и оргтехники. Ситуация осложняется тем, что медицинский и вспомогательный персонал, пациенты и посетители в случае нападения не могут в полной мере противостоять преступным элементам. Руководство учреждений здравоохранения в первую очередь должно обеспечить безопасность, то есть охрану учреждений, персонала, пациентов и посетителей, а потому должно выполнить необходимое планирование, тщательную разработку и внедрение охранных систем вместе с комплексом мероприятий административного характера. Целью работы является определение особенностей охранной деятельности в сфере защиты учреждений здравоохранения, проведение анализа законодательного и нормативно-правового обеспечения деятельности лицензированных охранных структур, а также их деятельности в сфере здравоохранения, определение потребности в организации таких служб и обоснование концептуальных основ построения интегрированных систем безопасности учреждений здравоохранения. Проведен общий и целенаправленный анализ и оценка законодательной и нормативно-правовой базы охранной деятельности в Украине с целью возможности ее использования для создания служб охраны и обеспечения предупреждения совершения преступлений в учреждениях здравоохранения. Проведено аналитическое исследование по обработке большого количества информационных источников (более 110) относительно создания и деятельности служб охраны в Украине и иностранных государствах с использованием методов Content analysis и Open Source Intelligence (OSINT). Исследована профессиональная отечественная и иностранная специальная литература, а также информация из Интернета об организации, деятельности, управлении и техническом оснащении служб охраны в различных учреждениях, в том числе и в учреждениях здравоохранения. В результате исследования, проведенного с привлечением профессиональных экспертов службы охраны труда, службы безопасности, пожарной охраны, Государственной службы охраны при Министерстве внутренних дел Украины, относительно организации и урегулирования оптимального функционирования служб охраны в учреждениях здравоохранения выявена насущная необходимость в их создании для обеспечения безопасности, защиты персонала и пациентов, что будет способствовать предупреждению совершения противоправных действий. Рассмотренная проблематика функционирования служб охраны в учреждениях здравоохранения актуальна, требует дальнейшей разработки и обсуждения на страницах журнала с привлечением руководителей отрасли и учреждений здравоохранения, специалистов охранных служб и правоохранительных органов.

Complementary Cooperation of CCTV and UAV Systems for Tourism Security and Sustainability

The meaning of sustainability is very broad and has many pillars such as the economy, environment and society. In the tourism industry, another important pillar is security. Tourism security affects the satisfaction and pleasure of tourists on a trivial level, and life and injuries on a significant level. Thus, unless security is guaranteed, tourists will not be able to fully enjoy the attractions and will not even consider the travel itself. Such tourist behavior has a significant impact on short-term and long-term tourism sustainability. Therefore, to enhance tourism security, many policies and frameworks have been suggested and announced in recent years. However, without efficient guidelines for the installation and operation of security devices, it may be hard to obtain actual effectiveness. To support real implementation of security systems in the tourism industry, this study quantitatively addresses the installation and operation issue of security devices in an optimal manner. A complementary cooperation of Closed-Circuit Television (CCTV) and Unmanned Aerial Vehicles (UAV) is suggested to efficiently monitor the key locations of tourism destinations and improve the security. Two mathematical models are developed to derive the optimal location of CCTVs, and the optimal operation schedule of UAVs over multiple time periods. Security requirements, service range, and budget are considered as realistic constraints. The validity of the models is demonstrated through a realistic case study of Nice, France.

Ensuring Social Security for All: Key Considerations for Policy Options in Indonesia

Social security is an essential instrument for protecting people from falling into poverty due to economic shocks in the event of sickness, work-accident, old age, and death of income producers. Indonesia introduced Law no. 40 Year 2004 on National Social Security System to implement mandatory social security programs for all. Despite the compulsory participation for all, the national social security system's coverage continues to be low and mostly relies on government aids. This study explores and analyzes key factors that need to be considered during the policy options formulation process to ensure the intended policy can support the national social security system's implementation. The findings show the need to build an integrated ecosystem model that is critical for social security implementation by considering the combined use of decision-making approaches and five consideration factors during the policy options formulation. An integrated ecosystem model contributes better policy options formulation that can support the effective implementation of the national social security programs while minimizing implementation risks.

ASPECTS OF EXTERNAL AND INTERNAL THREATS TO THE ECONOMIC SECURITY OF THE ORGANIZATION

The article discusses the theoretical aspects of the implementation of the economic security system of the organization, defines the main elements of the implementation of the economic security system of the organization. The tasks that contribute to the achievement of the goal of implementing the organization's economic security system are outlined. The implementation of a permanent system for tracking and monitoring all potential threats to the economic security of the business should be the result of the work of all parts of the organization. The process elements that contribute to the implementation of the security system are highlighted, as well as tactical measures that contribute to the solution of tasks for the implementation of the economic security system. In the author's opinion, the consideration of internal threats to the economic security of the enterprise is relevant. It is emphasized that the implemented system of economic security of the organization should be constantly updated and modernized, which will ensure financial stability and long-term development in a market economy.

THE MODELING OF INFORMATION SECURITY SYSTEM DESIGN PROCESSES IN STATE INFORMATION SYSTEMS

The relevance and necessity of implementing measures to protect information in state information systems today is obvious both from the point of view of existing legislation, and from the point of view of the objective presence of a large number of threats of a very different nature. Protective measures should take into account such factors as the growth of the volume of processed information, the use of various data processing technologies, the multi-user nature of access to information resources, and the complexity of the modes of operation of technical means [Schneier, 2003]. Thus, ensuring information security is a complex of interrelated business processes of an organizational, legal and technical nature. The complexity of the processes of implementing security systems makes it necessary to perform the planning stage of this process, which is closely related to the need to develop a domain model. This determines the relevance of writing this work. The purpose of this article is to develop a set of models that describe the features of organizational, legal and technical processes that arise at the design stages of information security systems in state information systems. The methodological basis for writing the work is the normative legal acts of the FSTEC of Russia. A comparative analysis of possible methods of modeling the described subject area allowed us to determine the tools used. To describe the ongoing processes in the design of the information security system, the SADT functional graphical modeling methodology was used. Mathematical modeling methods were used to model the process of rational choice of information security tools. The result of the research presented in this paper is a set of models that describes the processes characteristic of the design stage of the information security system in state information systems.

Vulnerability analysis in RF locking systems of vehicles in Bogotá, Colombia.

A car electronic security system aims to prevent its theft, the theft of its parts or of elements in its interior. Studying these systems allows identifying and mitigating vulnerabilities. Nowadays, there are different types of attacks on these systems to exploit their vulnerabilities, such as replay, relay, brute-force or jamming attacks, among others. In the last five years in Bogotá, Colombia, the average number of stolen vehicles was 3,073 per year. This research project proposes the detection of vulnerabilities in the security system of vehicles in this city. A sample of 43 vehicles of different brands sold and registered in the city is taken. The replay attack was executed, as well as a modification of the brute-force attack. Results show that most of the implemented security systems in Bogotá are susceptible of being successfully attacked through the proposed methods. The analysis done on the brute-force attack highlights a considerable reduction in time for unlocking the vehicle compared to the conventional attack in more vulnerable RKE systems. Replay attacks turn successful in great part of the sample and, furthermore, it is concluded that the unlocking key code can be generated from the locking one.

Design and implementation of security system for smart home based on IOT technology

Abstract In the world today, home security is becoming necessary nowadays as the possibilities of intrusion are increasing day by day. This design adopts the idea of “Internet of Things close to life and easy to use” as a design concept, and builds a smart home system based on the internet of things. The modules included in this design include a getaway board module, a node module, and an APP module. The main functions realized are: the PC can display the temperature and humidity data collected by the node board through the browser and control the switch state of the LED Light of the control node board through the browser, and can also display the temperature and humidity data collected by the node board through an APP and control the switch state of the LED Light of the gusset plate. The communication between the PC and the node board and communication between an APP and the node board need to transfer through the gateway board, so the gateway board is the communication bridge of the whole system. In order to realize the role of the gateway board communication bridge, the design of the gateway board uses NPC’s LPC1769 as the master MCU. The system builds an Ethernet service controller by the LPC1769 embedded Ethernet module and DP83848 chip. Built a gateway system with the wifi module, NB-IOT module and W25Q128 memory chip. The software is based on the uC/OS-II real-time operating system, equipped with uIP protocol tasks and other task modules, and built into a webserver function.

FPGA Design of Elliptic Curve Cryptosystem (ECC) for Isomorphic Transformation and EC ElGamal Encryption

Attacking or tampering with sensitive data continues to increase risks to economic processes or human activities. These risks are significant key factors to improve the development and implementation of security systems. Therefore, improving cryptography is essentially needed to enhance the security of critical data. For example, elliptic curve cryptography (ECC) over the Galois field GF(2 <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">163</sup> ) is one of the public-key (asymmetric) cryptographic techniques, in which demands mapping a message (163-bit) to a point in the prime subgroup of the elliptic curve. To the best of our knowledge, mapping methods are not yet available on Field-Programmable Gate Arrays (FPGAs). Also, asymmetric encryption schemes often do not consider encrypting/decrypting data packets because of their computation complexity and performance limitations. In this letter, we propose and develop a concurrent reconfigurable cryptosystem to encrypt and decrypt stream of data using ECC on FPGA. First, we present hardware design and implementation to map a plain message on the elliptic curve based on isomorphic transformation, then second, we architect the elliptic curve ElGamal public-key encryption method by using point addition and multiplication on Koblitz elliptic curve on FPGA. Our proposed cryptosystem is synthesized and implemented on Intel Cyclone 10 GX and Xilinx Kintex-7 FPGAs to evaluate throughput, and it achieves 25.73-57.1 Mbps.

SynERGY: Cross-correlation of operational and contextual data to timely detect and mitigate attacks to cyber-physical systems

The degree of sophistication of modern cyber-attacks has increased in recent years, and in the future these attacks will more and more target cyber-physical systems (CPS). Unfortunately, today’s security solutions that are used for enterprise information technology (IT) infrastructures are not sufficient to protect CPS, which have largely different properties, involve heterogeneous technologies, and have an architecture that is tailored to specific physical processes. The objective of the synERGY project was to develop new methods, tools and processes for cross-layer anomaly detection (AD) to enable the early discovery of both cyber- and physical-attacks with impact on CPS. To this end, synERGY developed novel machine learning approaches to understand a system’s normal behaviour and detect consequences of security issues as deviations from the norm. The solution proposed by synERGY are flexibly adaptable to specific CPS layers, thus improving the detection capabilities. Moreover, synERGY interfaces with various organizational data sources, such as asset databases, configuration management, and risk data to facilitate the semi-automatic interpretation of detected anomalies. The synERGY approach was evaluated in a utility provider’s environment. This paper reports on the general architecture and the specific pitfalls that needed to be solved, during the design, implementation and deployment of the synERGY system. We foresee this work to be of benefit for researchers and practitioners, who design and implement security systems that correlate massive data from computer logs, the network or organizational context sources, to timely detect cyber attacks.

Implementation of Secure System for Blockchain-based Smart Meter Aggregation

Implementation of Secure System for Blockchain-based Smart Meter Aggregation

A Multi-Layered Data Encryption and Decryption Scheme Based on Genetic Algorithm and Residual Numbers

Over the years, Steganography and Cryptography have been complementary techniques for enforcing security of digital data. The need for the development of robust multi-layered schemes to counter the exponential grow in the power of computing devices that can compromise security is critical in the design and implementation of security systems. Therefore, we propose a new combined steganographic and cryptographic scheme using the operators of genetic algorithm (GA) such selection, crossover and mutation, and some properties of the residue number system (RNS) with an appropriate fusing technique in order to embed encrypted text within images. The proposed scheme was tested using MatLab <sup xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">®</sup> R2017b and a CORE™i7 processor. Simulation results show that the proposed scheme can be deployed at one level with only the stego image containing the encrypted hidden message and at another level where the stego message is further encrypted. An analysis based on standard key metrics such as visual perception and statistical methods on steganalysis and cryptanalysis show that the proposed scheme is robust, is not complex with reduced runtime and will consume less power due to the use of residue numbers when compared to similar existing schemes.

Implementation of security system on humanitarian organization: case study of dompet dhuafa foundation

System security management can increase public confidence in the information produced and processed by a company and increase the quality assurance of information. To reduce the threat to the company’s business process information system, there must be an assessment of information system security management needed to support the company’s business processes, especially in the humanitarian foundation, in this case, is “Dompet Dhuafa Foundation.” In the use of information systems, security risks will arise, which will hurt the institution. In order to reduce the negative impact, it is necessary to handle the security risks of the system. ISO / IEC 27001 offers a set of specifications, a code of ethics, and best practice guidelines to ensure the management of IT (Information Technology) services. ISO 27001 is a standard that is often used to determine the need to implement information system security. With the application of ISO / IEC 27001, It can protect aspects of information security, namely confidentiality, integrity, and availability.

Organizational and economic mechanism of a business security as a guarantee of its sustainable development

In the process of the writing of this article, it was established that the organizational and economic mechanism of a business security ensuring involves the use of various techniques, methods, and tools. Their combination is necessary to ensure a reliable security system and stable sustainable development of a business activity as a whole. It has been established that enterprises of different sizes, types, volumes of activity possess unequal organizational and financial capabilities. In addition, various is the level of risk under which business entities are engaged. However, the conclusion is definite that the implementation of the organizational and economic mechanism for the enterprise security ensuring is vital in financial and economic aspects and can be organized in different business areas in different ways. It is proved that the security mechanism action from the point of view of financial and economic aspect implies enterprise adaptation to innovations under the following conditions: the innovations are to be maximally ready for implementation; the motivation to implement them is the need to protect the enterprise interests; the probability of obtaining a positive result in the implementation of innovations should be high. It has been established that significant factors in the process of increasing the level of a business security are the financial and economic measures, which aim to cover losses and to eliminate the causes of their occurrence, to recover (preserve) the liquidity and solvency, to reduce the amount of debt, to improve the working capital structure, etc. It is proved that further research in the field of planning and implementation of tactical measures for ensuring the financial and economic security of business is needed. It is aimed at the assessment and analysis of the level of a business security and its dynamics, which will allow to determine the effectiveness of the implemented measures; an assessment of the efficiency of utilization of the enterprise financial potential, which is the main basis for the implementation of measures to ensure the organizational and economic mechanism of a business security. Since the implementation of organizational and economic tools into the security field often requires the allocation of significant financial resources and opportunities (financial potential), the substantiation of scientific recommendations for assessing cost-effectiveness become significant. It was found that the organizational and economic mechanism of a business security ensuring would effectively use corporate resources, create preconditions for achieving business targets, timely identify and optimize all possible hazards, threats, and risks of the enterprise activity in the conditions of acute competition and changing environment. It is recommended to propose the following measures to enhance business security: development and implementation of security system (structure) in business processes of the enterprise activity; improvement and optimization of the existing enterprise security service; business security outsourcing services; services of the enterprise personnel security; provision of services to provide economic and internal security of the enterprise; providing necessary data and information for the business functioning security insurances; checking (auditing) of existing security services of enterprises for their effective work and reliability; services for the enterprise security employees training (advanced training); personnel selection of professionally trained staff for the enterprise security service.