Implementation Of Security Measures Research Articles

Habsburški mejni kordon proti Osmanskemu cesarstvu kot branik zdravja in njegove kazenskopravne osnove

In the 16th century, the Habsburgs started constructing a defensive buffer zone known as the Military Frontier to deter Ottoman incursions. The region was deliberately militarised and fell under full military administration along with its civilian population. As the Ottoman threat gradually diminished from the late 17th century onwards, the Military Frontier lost its defensive significance. However, due to the severe risk of infectious diseases, especially the plague, spreading from the southeast, the authorities made use of the military regime at the border to combat epidemics. They assigned the military cordon the task of a permanent sanitary cordon, enhancing the existing infrastructure and adapting the health regime to the strict hierarchical system of the military administration. In addition to the norms regulating the cordon’s structure and the implementation of security measures at the border, criminal regulations aimed at ensuring prevention and thereby protecting public health were also drawn up. This contribution presents the genesis of the cordon, analyses the relevant criminal code regulations from the 18th and 19th centuries, and evaluates their effect.

Candidate Authentication using OCR Techniques

This paper explores the application of Optical Character Recognition (OCR) techniques for authenticating candidates based on identity documents. As advancements in technology continue to redefine various industries, the integration of OCR into candidate authentication processes offers a streamlined and efficient solution. The aim is to design a system which gets the image of the identity proof and the details are being retrieved using the character segmentation which is done by a feature extraction optical character recognition algorithm (OCR). The authentication process encompasses document validation and implementation of security measures to safeguard against fraud.By combining YOLO object detection, Optical Character Recognition (OCR) and fuzzy matching technique ,this approach aims to enhance the accuracy and reliability of candidate authentication. This underscores the importance of a comprehensive authentication framework, incorporating both technological and procedural elements, to establish a robust and secure candidate authentication process in diverse contexts. Keywords: ID Verification,Optical Character Recognition (OCR), Text Extraction, YOLO,Object Detection,Image Segmentation, EasyOCR , Fuzzy Matching.

Analysis of Correctional Institution Officer Interaction Patterns and Stress During Implementation of Correctional Revitalization in Nusakambangan Indonesian

The implementation of correctional revitalization is not only related to structural adjustments and security protocols at Super Maximum Security (SMAX), Maximum Security (MAX), and Medium Security (MS) correctional facilities; it may also have an impact on changes in officer-inmate interaction patterns and the psychological stress officers. After the implementation of institutional revitalization, this study intends to investigate the patterns of officer-inmate interaction and the levels of stress experienced by correctional institution personnel in Nusakambangan with various degrees of security. Eight officers were interviewed as part of the research approach, which involved descriptive qualitative analysis, in four prisons on Nusakambangan Island. The analysis's findings give an example of the many ways that SMAX, MAX, and MS prison guards and convicts engage with one another. Because of restrictions on prisoners' freedom of movement, the implementation of security measures, and disparities in treatment within the development program, different interaction patterns result. Comparing convicts in XMAX and MAX prisons to those in MS prisons, authorities believe that MS prisoners spend more time outside of their rooms engaging in activities, which could compromise security and order. The result is that because inmates in MS prisons are free to roam the facility, but inmates in SMAX and MAX prisons engage in more activities in their quarters, the stress level for officers in MS prisons is higher than the stress level in SMAX and MAX prisons.

Defeating Denial of Service Backdoor Attacks

Denial of Service (DoS) backdoor attacks are a significant threat to computer systems. Backdoor attacks involve the installation of unauthorized software on a target system, which is then used to launch various attacks against other systems. In this paper, we explore several techniques that can be used to defeat DoS backdoor attacks, including access control, encryption, network monitoring, patch management, incident response planning, and employee education. Denial of Service (DoS) and Backdoor attacks are common types of cyber-attacks that can cause severe damage to computer systems and networks. DoS attacks aim to disrupt the availability of a system by overwhelming it with traffic or exploiting vulnerabilities, while Backdoor attacks provide attackers with unauthorized access to a system. This paper proposes a framework for defeating both types of attacks by implementing security measures at multiple levels, including the application layer, network layer, and host layer. The proposed framework involves techniques such as traffic filtering, load balancing, network segmentation, access control, and anomaly detection. At the application layer, the framework proposes implementing security measures such as input validation, error handling, and resource allocation to prevent DoS attacks. At the network layer, the framework recommends deploying firewalls, routers, and intrusion detection systems to filter traffic and detect anomalies. At the host layer, the framework proposes implementing security measures such as operating system hardening, patch management, and antivirus software to prevent Backdoor attacks. The proposed framework aims to provide a comprehensive approach to defeating DoS and Backdoor attacks by combining multiple security measures to provide a layered defense. By implementing the proposed framework, organizations can enhance the security of their computer systems and networks and prevent these types of attacks from causing damage.

Wybrane zagadnienia praktyki stosowania przerwy i odroczenia wykonania kary

Selected issues of the practice of interruption and postponement of the execution of a sentence This article focuses on selected issues in the practice of parole, postponed execution of sentences and the challenges arising from their implementation. It attempts to analyse the institution of a conditional early release from the remainder of a prison sentence under Article 155 of the Polish Executive Penal Code, which introduces a probationary element into the process of granting parole. It addresses the aspects that are most difficult to interpret. In the context of postponed executions of sentences, the article draws attention to the problem of competition with the electronic monitoring system. Furthermore, the article discusses the provisions of Article 9 § 4 of the Polish Executive Penal Code in light of amendments effective on January 1, 2023. The study also looks at a topic rarely discussed in the literature, namely the gap in the scope of parole and postponement during the implementation of security measures. The analysis examines the current regulations in the context of the aims and nature of psychiatric detention, parole and deferred sentences. The article concludes by proposing a direction for interpreting the current legislation and makes de lege lata and de lege ferenda suggestions.

Securing SDN: Hybrid autoencoder-random forest for intrusion detection and attack mitigation

Software Defined Networking (SDN) has revolutionized network administration by providing centralized management through software, enabling traffic adjustment independent of the data plane. Despite the benefits, SDN networks are prone to security threats from external sources, thus necessitating the implementation of security measures. Unfortunately, most existing efforts have been just a simple mapping of earlier solutions into the SDN environments. This paper addresses the problem of SDN security based on deep learning in a purely native SDN environment, where a Deep Learning intrusion detection module is tailored to a native SDN environment. In particular, we propose a hybrid Deep AutoEncoder with a Random Forest classifier model (DAERF) to enhance intrusion detection performance in a native SDN environment. The proposed model is incorporated into a novel adaptive framework for attack mitigation in SDN environments. The proposed framework consists of a three-layer protection mechanism for detecting and preventing attacks. It is based on entropy-based detection, hybrid machine learning in the control layer and proactive services monitoring in the application layer. Experimental results have shown that our DEARF proposed autoencoder model achieved anomaly detection rates in excess of 98% in stand-alone mode as well as when incorporated within the framework, making it highly solution for next generation SDN networks.

Analysis Of The 2nd Principle Of Pancasila On The Instagram Privacy Disclaimer

The article discusses the importance of user privacy on Instagram, a popular social media platform. In the digital era, millions of users share aspects of their personal lives, creating risks of data misuse and security threats. The right to privacy is recognized as a human right, including in the Indonesian Privacy Rights Law. Privacy Controls: Instagram gives users full control, allowing personal account settings. Data Policy: Instagram has a policy that explains the collection, use, and sharing of data, reflecting civilized principles. Data Security: Instagram claims to implement security measures and collaborate with third parties. Privacy Tools and Features: Instagram is constantly developing new privacy tools and features. In the context of Instagram user privacy, the principle of the 2nd Principle, "Just and Civilized Humanity," reflects fair treatment and respect for human rights. The rights to privacy, freedom of expression, data security, and control over personal information are the emphasis in implementing the 2nd Principle. Assessing the use of Instagram's privacy policy by the 2nd Principle and encouraging users to be wise in sharing information. A mixed method approach with descriptive qualitative methods and literature studies is used to understand the impact of Instagram user privacy. Privacy is a human right, and Instagram is expected to implement the principles of the 2nd Principle with policies that support the control, security, and fair treatment of users' data.

Personal Data Protection in Telemedicine: Comparison of Indonesian and European Union Law

Telemedicine allows patients to receive remote medical consultation, diagnosis, and treatment through a digital platform. However, with the development of telemedicine, personal data protection has become one of the main concerns. This research aims to compare the regulation of personal data protection in telemedicine services in Indonesia and the European Union. The type of research in this scientific article is Normative Juridical Research with a comparative legal approach. The data sources obtained in this paper are primary data and secondary data.   The data collection method is a literature study. The data analysis method in this paper uses a qualitative approach. The results show that personal data protection in Indonesia is regulated by Law Number 27 of 2022 concerning Personal Data Protection (PDP Law). While in the European Union, Personal Data Protection is regulated in the General Data Protection Regulation (GDPR) which regulates the collection and use of personal data by organizations. Some similarities in personal data protection in both telemedicine in Indonesia and in the European Union are that the same consent requires telemedicine providers to obtain clear and explicit consent from patients. Both telemedicine providers must not disclose the patient's personal data to third parties without the patient's consent. Telemedicine providers to implement security measures to protect patient personal data. Both Indonesia and the European Union give patients the right to access, correct, delete, and limit the use of their personal data

Implementation of a Trust-Based Framework for Substation Defense in the Smart Grid

The Smart Grid is a cyber-integrated power grid that manages electricity generation, transmission, and distribution to consumers and central to its functioning is the substation. However, integrating cyber-infrastructure into the substation has increased its attack surface. Notably, sophisticated attacks such as the PipeDream APT exploit multiple device protocols, such as Modbus, DNP3, and IEC61850. The substation’s constraints pose challenges for implementing security measures such as encryption and intrusion detection systems. To address this, we propose a comprehensive trust-based framework aimed at enhancing substation security. The framework comprises a trust model, a risk posture model, and a trust transferability model. The trust model detects protocol-based attacks on Intelligent Electronic Devices and SCADA HMI systems, while the risk posture model dynamically assesses the substation’s risk posture. The trust transferability model evaluates the feasibility of transferring and integrating a device and its trust capabilities into a different substation. The practical substation emulation involves a Docker-based testbed, employing a multi-agent architecture with a real-time Security Operations Center-influenced dashboard. Assessment involves testing against attacks guided by the MITRE ICS ATT&CK framework. Our framework displays resilience against diverse attacks, identifies malicious behavior, and rewards trustworthy devices.

МЕТОДИ ТА ЗАСОБИ ЗАХИСТУ РЕСУРСІВ В КОМП’ЮТЕРНІЙ SDN-МЕРЕЖІ

The work is dedicated to the analysis and improvement of methods and tools for building the architecture of software-defined networks (SDNs). A crucial aspect involves comparing the differences between network management using traditional methods and utilizing an SDN controller. Primary attention is given to the development of security models based on software-defined networks.The research is grounded in the analysis of specific cases involving the use of such networks, including gathering opinions and expert assessments from professionals in the field. It leverages publicly available information on methods and tools for securing the architecture of software-defined networks. SDN technology provides greater flexibility and speed in implementing security measures, allowing real-time responses to threats. In contemporary conditions, where cyber threats are becoming more complex and pronounced, SDN networks enable the detection of attacks, blocking malicious actions, and applying security policies in real-time. However, the increasing complexity of cyber threats and constant technological changes necessitate further development and enhancement of the information security of SDN network resources for companies. There is a need for further analysis and improvement of methods and tools for protecting information and other resources in computer-based SDN networks. The necessity for further analysis and improvement of methods and tools for protecting information and other resources in computer-based SDN networks serves as the foundation for this research. As a result, an enhancement in the level of information security for SDN network resources has been achieved by: 1) reducing the intervention time in the network; 2) applying an improved method of traffic processing based on network security of packet flows, allowing desired network applications to efficiently manage forwarding.

Exploring Social Engineering Attacks Using Spear Phishing in a Universtiy

A thorough investigation of social engineering attacks was performed on the lab environment. Numerous users can be easily attacked through the use of illegitimate emails that may come from trusted users. Organizations often try to implement security measures but they remain susceptible to these attacks. The purpose of this study was to show that university students are at risk of being attacked. The deployment of a dedicated lab environment and the susceptibility of the network to countless social engineering attacks were completely assessed in a controlled lab environment. The targeted audience, students, showed that they were more vulnerable. The findings of these investigations revealed that the network is vulnerable to social engineering attacks, specifically spear phishing attempts. Recommendations were made that included that universities should invest in educating students, staff members, and the faculty at large about certain threats and how to avoid falling prey to them.

Secure Video Communication Using Multi-Equation Multi-Key Hybrid Cryptography

The safeguarding of intellectual property and maintaining privacy for video content are closely linked to the effectiveness of security protocols employed in internet streaming platforms. The inadequate implementation of security measures by content providers has resulted in security breaches within entertainment applications, hence causing a reduction in the client base. This research aimed to enhance the security measures employed for video content by implementing a multi-key approach for encryption and decryption processes. The aforementioned objective was successfully accomplished through the use of hybrid methodologies, the production of dynamic keys, and the implementation of user-attribute-based techniques. The main aim of the study was to improve the security measures associated with the process of generating video material. The proposed methodology integrates a system of mathematical equations and a pseudorandom key within its execution. This novel approach significantly augments the degree of security the encryption mechanism provides. The proposed methodology utilises a set of mathematical equations that are randomly employed to achieve encryption. Using a random selection procedure contributes to the overall enhancement of the system’s security. The suggested methodology entails the division of the video into smaller entities known as chunks. Following this, every segment is subjected to encryption using unique keys that are produced dynamically in real-time. The proposed methodology is executed via Android platforms. The transmitter application is tasked with the responsibility of facilitating the streaming of the video content, whereas the receiver application serves the purpose of presenting the video to the user. A careful study was conducted to compare and contrast the suggested method with other similar methods that were already in use. The results of the study strongly support the safety and dependability of the procedure that was made available.

Scaling the Library Resources with Zscaler

More and more institutions and universities are implementing security measures to prevent wide-spread cyberattacks. When institutions initiate new security applications, the library is often overlooked. Libraries have complex ecosystems where multiple applications and systems converge with user data and online library resources. These ecosystems have various considerations including multi-factor authentication, proxies, multiple virtual private networks (VPNs), knowledgebases, and vendor inconsistencies. Duke University Health recently launched data security software called Zscaler, which prevented on-campus users from accessing the library e-resources. This presentation describes how Duke University Medical Center Library staff discovered the access issue and tested various workarounds to allow patrons to access library e-resources. The discussion covered how staff continue to work with Duke University Health IT security staff and university administration to find resolutions for the complex integration of security software with the library’s online resources.

IoT Vulnerabilities and Attacks: SILEX Malware Case Study

The Internet of Things (IoT) is rapidly growing and is projected to develop in future years. The IoT connects everything from Closed Circuit Television (CCTV) cameras to medical equipment to smart home appliances to smart automobiles and many more gadgets. Connecting these gadgets is revolutionizing our lives today by offering higher efficiency, better customer service, and more effective goods and services in a variety of industries and sectors. With this anticipated expansion, many challenges arise. Recent research ranked IP cameras as the 2nd highest target for IoT attacks. IoT security exhibits an inherent asymmetry where resource-constrained devices face attackers with greater resources and time, creating an imbalanced power dynamic. In cybersecurity, there is a symmetrical aspect where defenders implement security measures while attackers seek symmetrical weaknesses. The SILEX malware case highlights this asymmetry, demonstrating how IoT devices’ limited security made them susceptible to a relatively simple yet destructive attack. These insights underscore the need for robust, proactive IoT security measures to address the asymmetrical risks posed by adversaries and safeguard IoT ecosystems effectively. In this paper, we present the IoT vulnerabilities, their causes, and how to detect them. We focus on SILEX, one of the famous malware that targets IoT, as a case study and present the lessons learned from this malware.

Boosting Holistic Cybersecurity Awareness with Outsourced Wide-Scope CyberSOC: A Generalization from a Spanish Public Organization Study

Public sector organizations are facing an escalating challenge with the increasing volume and complexity of cyberattacks, which disrupt essential public services and jeopardize citizen data and privacy. Effective cybersecurity management has become an urgent necessity. To combat these threats comprehensively, the active involvement of all functional areas is crucial, necessitating a heightened holistic cybersecurity awareness among tactical and operational teams responsible for implementing security measures. Public entities face various challenges in maintaining this awareness, including difficulties in building a skilled cybersecurity workforce, coordinating mixed internal and external teams, and adapting to the outsourcing trend, which includes cybersecurity operations centers (CyberSOCs). Our research began with an extensive literature analysis to expand our insights derived from previous works, followed by a Spanish case study in collaboration with a digitization-focused public organization. The study revealed common features shared by public organizations globally. Collaborating with this public entity, we developed strategies tailored to its characteristics and transferrable to other public organizations. As a result, we propose the “Wide-Scope CyberSOC” as an innovative outsourced solution to enhance holistic awareness among the cross-functional cybersecurity team and facilitate comprehensive cybersecurity adoption within public organizations. We have also documented essential requirements for public entities when contracting Wide-Scope CyberSOC services to ensure alignment with their specific needs, accompanied by a management framework for seamless operation.

Ensuring the safety of participants in the criminal process in the mechanism of prevention of criminal offenses against them

The article is devoted to the scientific analysis of the implementation of security measures of participants of criminal proceedings in the mechanism of prevention of criminal offences against them. It was concluded that an important component of effective prevention of criminal offenses committed against participants of criminal proceedings is the creation of a system to ensure their safety by applying international legal norms of the interdisciplinary institute specified in the national criminal legislation. The specified task can be achieved in the case of: introduction of specific programs for the protection of participants in criminal proceedings (creating a simplified mechanism for choosing and applying short-term security measures and, a detailed mechanism for long-term measures; defining criteria for danger assessment by individualizing the needs of a person in the application of security measures, or a combination of more effective tools developing approaches to the duration of security measures based on the interests of justice and the existence of threats to the person); creation of a special unit to ensure the safety of participants in criminal proceedings, separate from the investigative bodies.

Integrity, Confidentiality, and Equity: Using Inquiry-Based Labs to help students understand AI and Cybersecurity

Recent advances in Artificial Intelligence (AI) have brought society closer to the long-held dream of creating machines to help with both common and complex tasks and functions. From recommending movies to detecting disease in its earliest stages, AI has become an aspect of daily life many people accept without scrutiny. Despite its functionality and promise, AI has inherent security risks that users should understand and programmers must be trained to address. The ICE (integrity, confidentiality, and equity) cybersecurity labs developed by a team of cybersecurity researchers addresses these vulnerabilities to AI models through a series of hands-on, inquiry-based labs. Through experimenting with and manipulating data models, students can experience firsthand how adversarial samples and bias can degrade the integrity, confidentiality, and equity of deep learning neural networks, as well as implement security measures to mitigate these vulnerabilities. This article addresses the pedagogical approach underpinning the ICE labs, and discusses both sample activities and technological considerations for teachers who want to implement these labs with their students.

Relationship between E-Commerce Strategies and Customer Loyalty among Multinational Enterprises in Kenya: A Case of Jumia

Purpose: The purpose of this study was to examine the relationship between customer orientation strategies and customer loyalty among multinational enterprises on ecommerce platforms in Kenya. The study specifically focused establishing the relationship of e-marketing, e-service quality and e-trust on customer loyalty among Multinational Enterprises in Kenya.
 Methodology: The research design adapted in this study was descriptive research design. The population comprised of 1378 of ecommerce managers and ecommerce users. The study employed Taro Yamane’s formula to derive a sample of 310 managers. Primary data was collected using questionnaires on a Likert scale of 1-5, based on the three research questions. Statistical Package for Social Sciences (SPSS) software was used to analyze data using mean, standard deviation, frequency distributions, Pearson coefficient of correlation and simple linear regression analysis techniques. The results were then presented in tables and figures.
 Findings: In terms of influence of e-marketing on customer loyalty in Multinational Enterprises in Kenya, there was a statistically significant positive relationship between e-marketing and customer loyalty, (r=0.519, p<0.05). Linear regression analysis showed that 27% of variability in customer loyalty was explained by integration of e-marketing, which statistically and significantly had a positive effect on effective customer loyalty R2 = .27, 𝛽=.524, 𝑡= 10.419, 𝑝 < .05). In terms of influence of e-service quality on customer loyalty among Multinational Enterprises in Kenya, there was a statistically significant positive relationship between e-marketing and customer loyalty, (r=0.514, p<0.05). Linear regression analysis showed that 26.5% of variability in customer loyalty was explained by integration of e-service quality, which statistically and significantly had a positive effect on effective customer loyalty R2 = .265, 𝛽=.629, 𝑡= 10.147, 𝑝 < .05). In terms of the influence of e-trust on customer loyalty among Multinational Enterprises in Kenya, there was a statistically significant positive relationship between e-trust and customer loyalty, (r=0.597, p<0.05). Linear regression analysis showed that 35.6% of variability in customer loyalty was explained by integration of e-trust, which statistically and significantly had a positive effect on effective customer loyalty R2 = .356, 𝛽=.707, 𝑡= 12.505, 𝑝 < .05). In conclusion, Jumia uses various technologies to make e-commerce lively to customers.
 Unique contribution to theory, practice and policy: The study recommended that Jumia should invest more in personalized and targeted marketing strategies, focus on enhancing their website and mobile app interfaces to make them more user-friendly and intuitive. In addition, Jumia should prioritize building trust with their customers by ensuring the security of their personal and financial information. It is also recommended that for Jumia Kenya should implement security measures and communicate them effectively to customers to reassure them of the safety of their data.

Effects of Ransomware: Analysis, Challenges and Future Perspective

This review paper highlights the challenges and best practices in malware analysis, specifically focusing on the age of ransomware. It provides an overview of malware and its impact on computer systems and user privacy by lists various types of malware, including viruses, Trojans, spyware,adware, worms and highlights major malware attacks including the methods used and the resulting damages. Further, the article explores the challenges faced in ransomware analysis, including advanced encryption and evasion techniques, anti-analysis mechanisms, zero-day exploits and vulnerabilities, polymorphic and dynamic behavior, lack of resources, complexity of ransomware, collaboration difficulties, and cost implications. These challenges make it necessary for security researchers to constantly update their knowledge and techniques to effectively analyze ransomware. This study concludes best practices for ransomware analysis including isolating and segmenting ransomware samples in controlled environments, emphasizing behavior analysis and threat hunting, investing in advanced reverse engineering and automated analysis techniques, promoting collaborative intelligence and information sharing, and implementing security measures to protect against ransomware attacks. Additionally, the article briefly mentions static analysis techniques which explains that static analysis involves examining malware files and code without executing them. It can be used to identify ransomware characteristics, such as encryption algorithms, ransom demands, remote command execution, and obfuscation techniques. Moreover, file and code analysis methods, signature-based detection, code deobfuscation and unpacking techniques, and malicious document analysis and exploit detection are also suggested as part of static analysis.

Social Responsibility of Enterprises in the System of Comprehensive Work Safety Management

The purpose of the article is to study the role of socially responsible behavior of enterprises in the system of integrated labor protection management and to determine its features in the conditions of martial law. It has been proven that the integrated management of occupational health and safety at the enterprise is a systematic approach to organizing and ensuring the safety and health of the enterprise’s employees, which involves coordination, planning, implementation and control of measures aimed at preventing risks and ensuring the safety and well-being of employees, and is based on based on the principles of management leadership, employee participation, risk identification and assessment, implementation of security measures, monitoring and analysis, continuous improvement. It was determined that the main aspects of the social responsibility of enterprises during wartime include ensuring the safety of workers at workplaces, supporting workers and their families, ensuring sustainable operations during a military conflict, preserving production and jobs, participating in public initiatives, observing ethical principles, etc. The peculiarities of the social responsibility of enterprises in the field of labor protection in terms of occupational safety, health of workers, interaction and communication, compliance with social standards and social influence are systematized. In order to promote the development of a safety culture and increase the level of social responsibility of enterprises in the field of labor protection at the state level, a number of measures have been proposed, including the development of a system of standards, criteria and indicators for classifying companies as socially responsible, spreading the experience of social policy of successful corporations in in the field of labor protection, implementation of a campaign to popularize labor safety, creation of a system of financial incentives for enterprises with a high level of social responsibility in the field of labor protection, etc. The direction of further research can be scientific substantiation of effective mechanisms of interaction of state authorities with local self-government bodies, associations of employers and entrepreneurs, trade unions and other organizations in order to implement state policy in the field of labor protection.