Information Security Architecture Research Articles

Addressing the gap in information security: an HR-centric and AI-driven framework for mitigating insider threats

PurposeDespite ongoing reports of insider-driven leakage of confidential data, both academic scholars and practitioners tend to focus on external threats and favour information technology (IT)-centric solutions to secure and strengthen their information security ecosystem. Unfortunately, they pay little attention to human resource management (HRM) solutions. This paper aims to address this gap and proposes an actionable human resource (HR)-centric and artificial intelligence (AI)-driven framework.Design/methodology/approachThe paper highlights the dangers posed by insider threats and presents key findings from a Leximancer-based analysis of a rapid literature review on the role, nature and contribution of HRM for information security, especially in addressing insider threats. The study also discusses the limitations of these solutions and proposes an HR-in-the-loop model, driven by AI and machine learning to mitigate these limitations.FindingsThe paper argues that AI promises to offer many HRM-centric opportunities to fortify the information security architecture if used strategically and intelligently. The HR-in-the-loop model can ensure that the human factors are considered when designing information security solutions. By combining AI and machine learning with human expertise, this model can provide an effective and comprehensive approach to addressing insider threats.Originality/valueThe paper fills the research gap on the critical role of HR in securing and strengthening information security. It makes further contribution in identifying the limitations of HRM solutions in info security and how AI and machine learning can be leveraged to address these limitations to some extent.

Machine-Learning-Based UAV-Assisted Agricultural Information Security Architecture and Intrusion Detection

In recent years, Unmanned Aerial Vehicle (UAV) remote sensing has developed rapidly in the field of farmland information monitoring. Real-time and accurate access to farmland information and crop growth dynamics is a prerequisite for the implementation of precision agriculture. Machine Learning identifies existing knowledge to acquire new knowledge, promotes the development of Artificial Intelligence, and brings a large number of data training sets for Machine Learning. The present work aims to ensure the safe operation of agricultural information systems and guarantee the data security of intelligent agriculture. The Machine Learning method explores the wireless network deployment of the UAV system. The geographical location deployment of agricultural information security can effectively carry out rapid security detection of agricultural information security. Firstly, the UAV-assisted information acquisition system was studied. Besides, a Double Deep Q-network (DDQN) algorithm for location deployment based on Geography Position Information (GPI) was proposed to quickly optimize the deployment location of UAVs. GPI can avoid the complicated calculation process of channel state information. The DDQN algorithm was introduced to obtain the functional relationship between GPI and the optimal UAV deployment position, forming a new GPI-Learning strategy. In addition, the Convolutional Neural Network (CNN) and Long Short-Term Memory (LSTM) are integrated as the CNN-LSTM algorithm to build the intrusion detection system for agricultural IoT for agricultural. In the integrated network structure of the system, LSTM is responsible for data transmission, and CNN is capable of network model building. Combined with the influence of various parameters on the performance of the UAV deployment location algorithm, the simulation experiment set the population size as 36, the discovery probability as 0.25, the step scaling factor as 0.8, and the Levy flight index as 1.25. The network throughput performance of the GPI-Learning algorithm combined with Cuckoo Search was better than other algorithms under different numbers of UAVs. On the KDD-CUP99 data set, the accuracy and detection rate of the agricultural IoT intrusion detection system based on the CNN+LSTM algorithm reached 93.5% and 94.4%, respectively. In general, the agricultural IoT intrusion detection system reported here has crucial practical reference value for the safe operation of agricultural information systems.

Enterprise Information Security Management Using Internet of Things Combined with Artificial Intelligence Technology

This work is conducted to deal with the information security of enterprise management under the background of current global informatization, popularize the modern Internet of Things (IoT) management technology of enterprises, and maintain the information security of enterprises and provide modern upgrading means for enterprise management. In this work, it firstly introduces the application scenarios of current Internet and Artificial Intelligence (AI) technology and expounds the IoT technology. Secondly, the enterprise management platform is designed, the requirements of enterprise modern management are analyzed, and then the design requirements of system functions and the design of the information security architecture of the IoT are proposed. Furthermore, an enterprise information security management platform is designed, which covers four parts: IoT data mining management, equipment management, key management, and database management. In addition, the performance of the security management platform is tested from four parts: concurrency testing, stress testing, large data volume testing, and security testing. The research results show that the IoT-based enterprise information security management platform designed in this work under the background of AI has perfect functions and stable performance of each module. Concurrency testing, stress testing, large data volume testing, and stability testing are performed on it, and the success rate of the platform in each task reaches 100%. The average response time of concurrent testing and stress testing is about 0.13 seconds, and that of the event entry events is 0.25 seconds. The central processing unit (CPU) occupancy rate in each monitoring task is always lower than 20%. Therefore, it is determined that the performance of the IoT-based enterprise information security management platform designed in this work is sufficient to meet the daily management of enterprises. This work can provide a guarantee for enterprise information security management using AI technology, setting an example for future related research.

Choosing an appropriate architecture to protect the information system from multi-level DDOS attacks

The paper examines multi-level DDoS attacks, which are a type of denial of service (DoS) attack, which aims to ban network services by failing target servers or consuming their resources, so that these servers can no longer provide services to legitimate users. DDoS attacks are divided into several classes, which include: Telnet brute force attack, SYN flood attack, ICMP flood attack, Smurf attack, Ping flood, HTTP Get Flooding request attack and HTTP Post. It is concluded that in order to create an effective information security architecture and, at the same time, effective measures to combat DDoS attacks, it is important to understand the different methods of DDoS. The architecture of information system protection against multilevel DDoS-attacks based on SDN and analysis of network traffic correlation is presented. Recommendations for protecting the information system from multi-level DDoS-attacks have been developed. It is noted that in addition to technical measures, organizations also need to implement procedural measures at the level of protection, detection and response.

SHAPES Cyber Secure HealthCare Platform in Digital Environments

The SHAPES project is an ambitious endeavor that gathers stakeholders from across Europe to create, deploy and pilot at large-scale a EU-standardized open platform incorporating and integrating a broad range of solutions, including technological, organizational, clinical, educational and societal, to enable the ageing population of Europe to remain healthy, active and productive, as well as to maintain a high quality of life and sense of wellbeing for the longest time possible. The research question of this design science research (DSR) is how to build and deploy health and care (H&C) services into a future society in such a way that citizens are able to use them safely in their everyday lives? We found that considerable work is needed to develop the required architecture in smart societies: information architecture, integrations architecture, target architecture, security architecture, and security issues. Service chains must be checked against the architectures to ensure no risks are present

Strategy of Enterprise Network Security Protection Based on Cloud Computing

With the rapid development of science and technology in modern society, enterprises are developing in the direction of more openness, standardization and network interconnection. Although enterprises have realized the informationization of production and operation earlier, their network information security architecture is still not perfect, and the existing network information security model cannot be fully applied to some enterprises, which has made some enterprises unable to fully protect their network information security. Therefore, there is an urgent need for a more targeted network security model for enterprises to enhance the security strength of their network information systems. Based on the analysis of the security situation of the enterprise network information system, this thesis combines the security status of the enterprise information system and the main threats to construct a cloud computing-based enterprise network security model. This model is a classic network security model of dynamic closed-loop management consisting of four modules: protection, detection, response and recovery. On this basis, a risk-hardening security hardening scheme is designed and implemented, and the practicability and effectiveness of the improved enterprise network security model are verified. The research in this thesis proves that the improved enterprise network security model can make domestic companies ‘network information systems more robust, and also provides a reference basis for the construction of other small and medium-sized enterprises’ network information systems. Instead, it is developing in the direction of combining technical and management methods to effectively improve the level of enterprise network information security.

KawalPilpres2019: a highly secured real count voting escort architecture

This paper reports on the highly secured information security architecture used by the KawalPilpres 2019 to escort Voting Commission (KPU) data entry. For the first time, a voting escort implements ISO 27001 compliance information security. As of 15 May 2019, 9550 volunteers reported 482,602 voting data of 336,445 voting booths, both in the country and overseas, through the micro-apps KawalPilpres2019. PeSanKita is used as a secure communication channel and to run micro-apps KawalPilpres2019. Double Ratchet Algorithm secures the channel. Different from other voting escort initiatives, KawalPilpres2019 uses (1) primarily C1 Plano photo, (2) no upload limit per voting booth, (3) no web upload, rather via PeSanKita Secured Platform. Behind the scenes, the verification process is done twice before displaying data to the publicly accessible monitoring web. The result is a robust voting escort system, difficult to hack and guarantee data integrity. Guaranteed security, availability, and data integrity are the main requirements for future eVoting systems.

Research and Application of Artificial Intelligence Technology in the Field of Risk Perception

In recent years, the breakthrough of data, algorithms and computing power has made artificial intelligence ushered in the third wave. The rapid development of artificial intelligence will profoundly change human society and the world, promote human understanding, perception and the ability of decision-making in the world. Applying artificial intelligence to disaster risk perception research can improve risk perception and accuracy and effectively avoid risks. Using big data technology, artificial intelligence algorithm and threat intelligence technology to study the construction of information security situational awareness system, the model, architecture and concrete implementation of information security situational awareness system are proposed. This study combines artificial intelligence and risk perception to sort out the application and development trend of artificial intelligence in disaster risk perception in recent years, and proposes factors that affect public disaster risk perception and coping behavior.

Analysis of the Information Security Architecture of Computer Networks

With the development of society, we have entered the information age.Computer network technology is widely used in people’s life and production, and has played an important role in promoting social progress. However, due to its own nature and characteristics, some security risks have appeared in the process of application in the development of computer network technology, which interferes with the safe use of computer networks. This article combines the information security risk of computer network, making an analysis of the information security architecture of computer network based on WPDRRC model, and the strategy of how to prevent computer network security risk.

Information security architecture synthesis in distributed information computation systems

This work considers the task of synthesizing information security architecture in the distributed information computation systems. The synthesis has been based on elementary structures described in the form of diagrams of solving action protection problems in the process of computation in the computer system and during network exchange.

Research on Data Intrusion Detection Technology based on Fuzzy Algorithmn

The computer system is becoming more complex and massive network data, which brings great difficulties to the traditional intrusion detection system. Intrusion detection system is an important part of the network and information security architecture, which is mainly used to distinguish the normal activities of the system and the suspicious and intrusion patterns. But the challenge is how to effectively detect network intrusion behavior in order to reduce the false alarm rate and false negative rate. Based on the shortcomings of existing intrusion detection methods, the fuzzy Cmeans clustering method is proposed to analyze the intrusion detection data, so as to find out the abnormal network behavior patterns. By testing the CUP99 data set, the results show that the IFCA is not only feasible but also accurate and efficient. The improved fuzzy clustering algorithm proposed in this paper can improve the detection rate of intrusion detection and reduce the false detection rate, and can be widely used in intrusion detection system.

Well-known Personality in a Technical World and Information System

We are pleased to share profile of Col. Inderjit Singh (Retd). Inderjit is a an experienced Information Systems and Information Security Professional with experience of more than 25 year across a wide spectrum of areas spanning Solution Architecture, Program/Project Management Telecom, IT Infrastructure Management, Info Security Advisory and Architecture, Cyber Security, Cyber Warfare and Cyber Forensics, Data Centers Design and Operations, Cloud Computing and E-Commerce Startup. An experienced Information Systems Professional with experience of more than 25 year across a wide spectrum of areas spanning Solution Architecture, Program/ Project Management in Telecom, IT Infrastructure Management, Information Security Advisory and Architecture, Cyber Security, Cyber Warfare and Cyber Forensics, Data Centers Design and Operations, Cloud Computing and E-Commerce.

Research on network information security model and system construction

It briefly describes the impact of large data era on China’s network policy, but also brings more opportunities and challenges to the network information security. This paper reviews for the internationally accepted basic model and characteristics of network information security, and analyses the characteristics of network information security and their relationship. On the basis of the NIST security model, this paper describes three security control schemes in safety management model and the relationship between the security service and security mechanism in the network information security architecture. On this basis, a network information security system model is proposed, which is composed of three parts, namely, the core layer, the logic layer and the implementation layer. Finally, this paper points out that the network information security protection technology is important, but it is still indispensable that management is in place.

Is HTTPS enough to protect governments?

The US Government is rapidly trying to shore up its security after a series of devastating attacks, by introducing a new requirement: the use of HTTPS and cryptographic keys and digital certificates. This is a promising start, but to really protect and verify websites, the public key infrastructure needs an immune system to root out untrustworthy certificates that have been stolen or issued from compromised Certificate Authorities (CAs). Here's how we get there. The recent hacks into the US Federal Government's Office of Personnel Management exposed significant weaknesses in its information security architecture. The response – to introduce HTTPS for all US government sites – is only a relatively modest and still inadequate start. What is needed is a more comprehensive management system for certificates along with the adoption of the US Government's own guidelines on preventing and responding to compromises of Certificate Authorities, as Kevin Bocek of Venafi explains.

海云安全体系架构

The processing of information in the 21st century is moving towards a consolidation of human society (human), information networks (cyber), and the physical world (physical) completely fused with total and absolute form and unprecedented speed, depth, and breadth. This supports the trend towards a novel combination and the usage patterns of sensing and human-computer interaction terminals (sea), new network technology (network), and cloud computing (cloud). Seizing the trend and opportunity of the ternary integration of humancyber-physical, establishing and developing the new generation of information technology architecture of sea-cloud collaborative computing, and ultimately realizing the goal of sensing China, has become an urgent demand for the new generation of IT development. However, the stable operation of any information system requires the establishment of an information security architecture. The security architecture of an information system is directly related to the influence of a security policy and affects the function and operation of the systems. Therefore, building the security architecture of sea-cloud based on the complex environments of the ternary integration of human-cyber-physical is a critical prerequisite and foundation for guaranteeing stable operation of a sea-cloud innovative experimental environment. This paper first introduces the concept of sea-cloud and then analyzes the security challenges and requirements that each layer of sea-cloud faces based on the proposed information architecture. Finally, we build a security architecture for sea-cloud to provide an important theoretical basis and technical support for establishing a sea-cloud innovative experimental environment.

On the implementation of a real-time information security architecture in frequency domain

This paper presents the real-time implementation of a watermarking-based information security architecture in frequency domain. The scheme emphasises on the human visual system (HVS)-supported watermarking approach using wavelet-lifting technique. In addition to HVS, image registration algorithm is also introduced in order to increase the resiliency as well as the security of the estimated recovered watermark image. The algorithmic steps with optimisation considerations about the real-time implementation on TMS320CDSK6416/6713 fixed/floating point digital signal processor are also projected.

A layered trust information security architecture.

Information can be considered the most important asset of any modern organization. Securing this information involves preserving confidentially, integrity and availability, the well-known CIA triad. In addition, information security is a risk management job; the task is to manage the inherent risks of information disclosure. Current information security platforms do not deal with the different facets of information technology. This paper presents a layered trust information security architecture (TISA) and its creation was motivated by the need to consider information and security from different points of view in order to protect it. This paper also extends and discusses security information extensions as a way of helping the CIA triad. Furthermore, this paper suggests information representation and treatment elements, operations and support components that can be integrated to show the various risk sources when dealing with both information and security. An overview of how information is represented and treated nowadays in the technological environment is shown, and the reason why it is so difficult to guarantee security in all aspects of the information pathway is discussed.

Trusted Integrated Circuits: The Problem and Challenges

Hardware security has become more and more important in current information security architecture. Recently collected reports have shown that there may have been considerable hardware attacks prepared for possible military usage from all over the world. Due to the intrinsic difference from software security, hardware security has some special features and challenges. In order to guarantee hardware security, academia has proposed the concept of trusted integrated circuits, which aims at a secure circulation of IC design, manufacture and chip using. This paper reviews the main problems of trusted integrated circuits, and concludes four key domains of the trusted IC, namely the trusted IC design, trusted manufacture, trusted IP protection, and trusted chip authentication. The main challenges in those domains are also analyzed based on the current known techniques. Finally, the main limitations of the current techniques and possible future trends are discussed.

Establish a Dynamic Business Driven Integrative Information Security Architecture

With Respect to the challenges most organizations are facing when considering information security management, especially how to demonstrate the value of security to senior leadership and how to meet all kinds of legislations in one place, this article describes a dynamic business driven integrative information security architecture to address those problems. By designing the architecture through three levels which are domain level, component level, and control level, the architecture is target to establish alignment and traceability between business and security, build customer service concept within security practices, establish a dynamic and integrative framework, and manager information security in a more predictive and proactive manner. By applying this architecture into a real life business case, the fact shows that after the implementation, the major security indicators have been visibly improved.

I-Solframework: An Integrated Solution Framework Six Layers Assessment on Ultimedia Information Security Architecture Policy Compliance

Multimedia Information security becomes a important part for the organization’s intangible assets. Level of confidence and stakeholder trusted are performance indicator as successes organization, it is imperative for organizations to use Information Security Management System (ISMS) to effectively manage their multimedia information assets. The main objective of this paper is to provide a novel practical framework approach to the development of ISMS, Called by the I-SolFramework, implemented in multimedia information security architecture (MISA), it divides a problem into six object domains or six layers, namely organization, stakeholders, tool & technology, policy, knowledge, and culture. In addition, this framework also introduced novelty algorithm and mathematic models as measurement and assessment tools of MISA parameters.