Information Security Infrastructure Research Articles

Impacts of Blockchain on Accounting in the Business

There have been many studies on the blockchain, however blockchain research in the accounting field is scarce. The article outlines the characteristics and steps to apply blockchain in accounting. The article also identifies and measures the factors affecting the application of blockchain in accounting in enterprises, proving that the application of blockchain impacts the quality of the accounting information system of enterprises. The article shows that incorporating blockchain in accounting will help the accounting at businesses optimize the security, safety, and transparency of accounting information. We collected data on 195 manufacturing firms in six sectors. This study’s primary data analysis method is the SEM structural equation modeling method. The article used AMOS software to evaluate and measure the influence of each factor on the application of blockchain and the effect of blockchain on the accounting information system in enterprises. The article analyzed four aspects: the level of information technology of the accountant (IT), Information Security Infrastructure (SI), Training (TR), and Legality and Regulation (LR), affecting the application of blockchain in the business. The independent variables TR (training) and IT (information technology) have an impact on BL (Blockchain). We also find that the independent variable IT (information technology) has the most substantial impact on Blockchain adoption, followed by the independent variable TR (training), which has the second most influential impact on Blockchain adoption. For the accounting information system, the results show that applying blockchain will substantially impact accounting information, along with the safety factor of information infrastructure SI also has an evident influence. The results show that applying blockchain in accounting, information technology, and professional training are core issues with significant influence. The issue of guaranteed infrastructure also determines the effectiveness and efficiency of blockchain applications for accounting information systems. I declare that this is my scientific work; it is my original work. I commit that all data sources and ideas are my research and have never been published anywhere.

Non-Identical Inverter Rings as an Entropy Source: NIST-90B-Verified TRNG Architecture on FPGAs for IoT Device Integrity

True random key generator (TRNG) architectures play a notable role in strengthening information security infrastructure. The development of new entropy sources based on reconfigurable hardware is always in demand, especially for the integrity of devices in IoT applications. TRNGs can be adopted for generating unique device IDs that form the data network in the IoT. A ring oscillator (RO) is an efficient entropy source which can be implemented on FPGAs or realised as ASIC hardware. This work proposes a non-identical RO array as an entropy source. The TRNG architecture, based on an increasing odd number of inverters per ring, was extensively studied. The various statistical and hardware analyses provided encouraging results for this reliable entropy unit. The suggested device-independent non-identical RO structure was implemented on five different types of FPGA hardware belonging to the Xilinx and Intel families, consuming 13 registers and nearly 15 combinational functions. This TRNG achieved a throughput of 3.5 Mbps. While the emergence of the Gaussian response evaluated true randomness, the NIST 800-90B and NIST 800-22 tests yielded good results in terms of the justification of randomness evolving from the proposed TRNG architecture.

Appling tracking game system to measure user behavior toward cybersecurity policies

<span>Institutions wrestle to protect their information from threats and cybercrime. Therefore, it is dedicating a great deal of their concern to improving the information security infrastructure. Users’ behaviors were explored by applying traditional questionnaire as a research instrument in data collocate process. But researchers usually suffer from a lack of respondents' credibility when asking someone to fill out a questionnaire, and the credibility may decline further if the research topic relates to aspects of the use and implementation of information security policies. Therefore, there is insufficient reliability of the respondent's answers to the questionnaire’s questions, and the responses might not reflect the actual behavior based on the human bias when facing the problems theoretically. The current study creates a new idea to track and study the behavior of the respondents by building a tracking game system aligned with the questionnaire whose results are required to be known. The system will allow the respondent to answer the survey questions related to the compliance with the information security policies by tracking their behavior while using the system.</span>

Insider Threat Detection Based on NLP Word Embedding and Machine Learning

The growth of edge computing, the Internet of Things (IoT), and cloud computing have been accompanied by new security issues evolving in the information security infrastructure. Recent studies suggest that the cost of insider attacks is higher than the external threats, making it an essential aspect of information security for organizations. Efficient insider threat detection requires state-of-the-art Artificial Intelligence models and utility. Although significant have been made to detect insider threats for more than a decade, there are many limitations, including a lack of real data, low accuracy, and a relatively low false alarm, which are major concerns needing further investigation. In this paper, an attempt to fulfill these gaps by detecting insider threats with the novelties of the present investigation first developed two deep learning hybrid LSTM models integrated with Google's Word2vec LSTM (Long Short-Term Memory) GLoVe (Global Vectors for Word Representation) LSTM. Secondly, the performance of two hybrid DL models was compared with the state-of-the-art ML models such as XGBoost, AdaBoost, RF (Random Forest), KNN (K-Nearest Neighbor) and LR (Logistics Regression). Thirdly, the present investigation bridges the gaps of using a real dataset, high accuracy, and significantly lower false alarm rate. It was found that ML-based models outperformed the DL-based ones. The results were evaluated based on earlier studies and deemed efficient at detecting insider threats using the real dataset.

Brief Analysis of Security Protection Practice of Key Information Infrastructure in Communication Industry

To solve the problem how to effectively identify critical information infrastructure challenges that the communications industry, improve pertinence and effectiveness of the security and protection work, this paper reports the legislative background of critical information infrastructure protection at home and abroad and the status quo, on the communications industry key information infrastructure security framework are discussed in this paper, by adopting the method of analytic hierarchy process (AHP), by calculating the key, Through the calculation of the critical degree, the paper proposes how to accurately identify the critical information infrastructure in the communication industry. This research is the latest practical exploration of the security protection work method of the critical information infrastructure in the communication industry, and is the urgent need of the current communication network security situation in China. It is hoped to take the implementation of the Regulations on the Security protection of Critical Information Infrastructure as an opportunity to publicize and promote the research method, continuously strengthen the security protection of critical information infrastructure, realize the high-quality development of the communication industry, and better empower the economic and social development.

Comprehensive Examination of Network Intrusion Detection Models on Data Science

The increased requirement of data science in recent times has given rise to the concept of data security, which has become a major issue; thus, the amalgamation of data science methodology with intrusion detection systems as a field of research has acquired a lot of prominence. The level of access to the information system and its visibility to user pursuit was required to operate securely. Intrusion detection has been gaining popularity in the area of data science to incorporate the overall information security infrastructure, where regular operations depend upon shared use of information. The problems are to build an intrusion detection system efficient enough for detecting attacks and to reduce the false positives with a high detection rate. In this paper, the authors analyse various techniques of intrusion detection combined with data science, which will help in understanding the best fit technique under different circumstances.

From keyboard to cloud-base network revamped data lifecycle cybersecurity

This paper review seeks to identify the need for a revamped data life cycle security in the era of pervasive threat from skill cyber criminals at this time of internet of things. The motivation is to fill the knowledge gap by presenting some of the ways of data leakages and the likely protection in the organization. The aim is to present a good practice that encourages data confidentiality, acceptable use policy, knowledge of personnel and physical security policy. The building blocks of information security infrastructure across the entire organization is implemented by Enterprise Security Architecture. Rather than focus on individual functional and non-functional components in an individual application, it focuses on a strategic design for a set of security services that can be leveraged by multiple applications, systems, or business processes.

Information Security in E-Government: Legal Aspects

The article examines the characteristics of the functioning of information security in the e-government system, a phenomenon that is only possible based on the development of the information security infrastructure. The authors analyze information security as a key element of the concept of e-government, as well as various interpretations and ways of explaining the concept of information security. The research team's approach to the definition of the concept of information security is formed from the deep understanding of this concept, in terms of general theoretical analysis. Topics, objects, functions, types, principles, forms, levels of provision and structural elements of information security are studied. It is concluded that the organization of modern computer security of the State is undoubtedly a complex, systemic and multilevel phenomenon, whose state, dynamics, and perspectives are directly influenced by many external and internal factors, the most important being the political situation. In the world the presence of possible external and internal threats; state and level of development of information and communication of the country and internal political situation, among other aspects.

APPLIED RISK ASSESSMENT IN THE SYSTEM OF SOCIO-ECONOMIC PROCESSES IN CYBERSPACE

In the paper investigated safety of socio-economic processes in the virtual space. Studied the main trends influence on formation of preventive and adaptive mechanisms for ensuring information and cyber security enterprises. Key trends of the modern business and social environment include: globalization, informatization and individualization of consumer needs; mediatization, territorialization and universalization of social phenomena. Presented an original ensuring security model for the virtual information sphere. In this model was invented a conceptual scheme for identifying the information security system: given the identification sequence and risks assessment in cyberspace by stages; risk identification; a description of the threats it poses; identification of vulnerable market segments; analysis and assessment of the risk occurrence probability level; analysis and assessment of the risk manifestation consequences level; score determination of the general rick level; proposal to eliminate the development environment risks of the study object; net risk identification; risks in cyberspace have been identified and assessed in terms of security and financial flows. Among the dominant risks of the external and internal security environment in the information virtual Ukrainian space the following are highlighted: insufficient system security, processes and technologies, disinformation and information asymmetry; high sensitivity of financial flows to the processes of the implementation of shock macroeconomic phenomena (including almost unsignificant currencies devaluation against the pandemic background) in terms of the safety of financial flows; technical, technological and personal vulnerability growth in the information sphere, due to the increasing cybercrime in terms of the information flow security. Among the mitigation measures and neutralization of the general risk level, was proposed the creation of a single protection system. The single data protection system should be based on: data protection progressive principles, tasks to ensure security from information influences, information infrastructure security, information rights, open access to information, publicity of open information, etc.; organizational and right mechanism of data protection. This mechanism is based on the need to streamline the responsibilities of information marked actors; state control over data manipulation; data manipulation standards development; information systems certification for their processing. Construction of database registers, as well as registration of owners and/or data administrators, third parties to whom the data was transferred for further manipulation; an independent coordination center formation for the state policy implementation in terms of monitoring compliance with data protection requirements, etc.; increasing the financial flow transparency, namely risk-oriented monitoring in digital currency exchanges and licensing of transactions in virtual currencies requires support from the Financial Action Task Force on Money Laundering and the Financial Intelligence Unit.

واقع أمن وسرية المعلومات الإلكترونية في بنك فلسطين "دراسة حالة" (The Reality of Electronic Information Security in Bank of Palestine "Case Study")

Arabic Abstract: هدفت هذه الدراسة إلى تقييم واقع أمن وسرية المعلومات الإلكترونية في بنك فلسطين دراسة حالة من خلال التعرف على مدى توافر مقومات حماية البنية التحتية لأمن المعلومات ، ولتحقيق هدف الدراسة تم إعداد استبانة مكونة من ثلاث محاور (الحماية المادية - الحماية البرمجية - حماية الأفراد) لقياس متغيرات الدراسة وزعت على العاملين في أقسام تكنولوجيا المعلومات في بنك فلسطين وقد شملت عينة الدارسة على (38) وزعت عليهم الاستبانة وتم استرداد (31) استبانة حيث بلغت نسبة الاسترداد81%) )، وقد توصلت الدراسة إلى نتائج مهمة تشير إلى أنه يتوفر لدى بنك فلسطين مقومات بنية تحتية مقبولة بمحاورها الثلاثة (المادية ,البرمجية، والأفراد ) بنسب متفاوتة حيث كان المحور الأول (الحماية المادية) في المرتبة الأولى بنسبة (%92.69), أما المحور الثاني (الحماية البرمجية ) كان في المرتبة الثانية بنسبة (%88.77) والمحور الأخير (حماية الأفراد) احتل المرتبة الثالثة بنسبة (%80.00) مما يدل على أن الآراء كانت في المحاور الثلاثة موافقة بدرجة كبيرة جدا, وأنه لا توجد فروق ذات دلالة إحصائية في استجابات أفراد العينة حول واقع إدارة أمن المعلومات في بنك فلسطين تعزى للمتغيرات الديموغرافية (المؤهل العلمي، المستوى الوظيفي، والخبرة) باستثناء متغير الدورات التدريبية حيث أظهرت النتائج أنه يوجد فروق ذات دلالة إحصائية في استجابات أفراد العينة حول واقع إدارة أمن المعلومات في بنك فلسطين تعزى لمتغير الدورات التدريبية. وانتهت الدراسة إلى مجموعة من التوصيات من أهمها ، قيام بنك فلسطين بتطوير سياسات أمن المعلومات الخاصة به، والعمل على نشرها و تطبيقها، والقيام بمراجعتها، لما لهذه السياسات من أثر في تحسين الإجراءات الأمنية ضرورة حث المصارف الفلسطينية على الاستمرار بالاهتمام بالبنية التحتية لأمن المعلومات وتطويرها لتجاري المستحدثات التكنولوجية السريعة. English Abstract: This study aims at evaluating the reality of electronic information security in Bank of Case Study , through recognizing the availability of the elements to protect the infrastructure of information security. To achieve the objective of this study, a questionnaire was prepared and consisted at three axes (Physical protecting, programming protecting and protect the individuals) To measure study variables, It was distributed among the employees in the Departments of information technology in Bank of Palestine, The study sample included (38) employees, we regained( 31) questionnaire, recovery rate of (81%). The study reached important results that there is in Bank Of Palestine the elements of accepted infrastructure in its three axes the( Physical, programming and individuals) in a different ration, and there was no significant differences related to individuals responses about the real field of information security in the Bank Of Palestine, that refers to demographic variables (Qualification, the professional level, the Experience). and there are significant differences related to individuals responses about the real field of information security in the Bank Of Palestine that refers to variable (training courses). The study ends in some recommendations, The most important one is that Bank Of Palestine should improve their own information security policies and publish, apply, develop and review them. As these policies have significant effects in promoting the security procedures, Also, they are important to encourage the Palestinian banks to continue paying attention to the information security infrastructure and developing to keep pace with rapid technological innovations.

Investigation of Dual-Flow Deep Learning Models LSTM-FCN and GRU-FCN Efficiency against Single-Flow CNN Models for the Host-Based Intrusion and Malware Detection Task on Univariate Times Series Data

Intrusion and malware detection tasks on a host level are a critical part of the overall information security infrastructure of a modern enterprise. While classical host-based intrusion detection systems (HIDS) and antivirus (AV) approaches are based on change monitoring of critical files and malware signatures, respectively, some recent research, utilizing relatively vanilla deep learning (DL) methods, has demonstrated promising anomaly-based detection results that already have practical applicability due low false positive rate (FPR). More complex DL methods typically provide better results in natural language processing and image recognition tasks. In this paper, we analyze applicability of more complex dual-flow DL methods, such as long short-term memory fully convolutional network (LSTM-FCN), gated recurrent unit (GRU)-FCN, and several others, for the task specified on the attack-caused Windows OS system calls traces dataset (AWSCTD) and compare it with vanilla single-flow convolutional neural network (CNN) models. The results obtained do not demonstrate any advantages of dual-flow models while processing univariate times series data and introducing unnecessary level of complexity, increasing training, and anomaly detection time, which is crucial in the intrusion containment process. On the other hand, the newly tested AWSCTD-CNN-static (S) single-flow model demonstrated three times better training and testing times, preserving the high detection accuracy.

Adopting Organizational Cultural Changes Concerning Whistle-Blowing in Healthcare Around Information Security in the “Internet of Things” World

Medical labs, hospitals, doctor's offices, and medical devices face significant cyber risks. The insecurity of medical devices, including imaging hardware, threatens patient safety. Health organizations are rich with valuable data as well as weak with information security expertise, protocols, and infrastructure. It is critical for more health organizations to focus creating organizational cultures with processes that offer all employees to fully understand the nature of information security risks and have the ability to be active participants in the minimization and reporting of observable risks. This article will lay a foundation to establish techniques and practices for open door policies.

Selected Problems of Industry Databases and Information Infrastructure Security

Abstract The paper presents selected security problems in ICT systems and OT used in industry. In the Industry 4.0 era, the knowledge and competence of the IT staff and the maintenance staff must be linked. Selected problems and their analysis and solutions form the semi-secure network and use of NoSQL databases as a database bridges are presented in the article for various branches of industry.

Efficient Working of Signature Based Intrusion Detection Technique in Computer Networks

The subject of Computer Network Intrusion Detection System (IDS) is a very interesting research topic actively pursued by many investigators. The goal of intrusion detection is to monitor network assets and to detect anomalous behaviour and misuse. This concept has been around for the past several years but only recently, it has seen a dramatic rise in interest of researchers and system developers for incorporation into the overall information security infrastructure. In today's world, the concept of information has been moved to the digital size from conventional size. Protection of the data stored in the digital archive and is easily accessibility at any time have become a quite important phenomenon. In this concept, intrusion detection and prevention systems as security tools are widely used today [1]. In this paper, a signature based intrusion detection system approach has been proposed for computer network security. This paper is based on the efficient working of the Signature based intrusion detection method and protects the computer network against the intrusion or the unspecified packets.

РАЗРАБОТКА АЛГОРИТМА ОРГАНИЗАЦИИ ИНФРАСТРУКТУРЫ ИНФОРМАЦИОННОЙ БЕЗОПАСНОСТИ С ПРИМЕНЕНИЕМ СИСТЕМЫ УПРАВЛЕНИЯ КОНФИГУРАЦИЕЙ SALTSTACK ПРИ ПЕРЕДАЧЕ ДАННЫХ ПО ВОЛОКОННО-ОПТИЧЕСКОЙ ЛИНИИ СВЯЗИ

In the article an approach to organization of information security infrastructure using the configuration management system is considered, which allows reducing of service labor costs, acceleration of installation, tuning of information and technical services and the software on virtual and physical servers. An analytical review and qualitative comparison of the most common similar currently existing systems are presented, taking into account the characteristics directly related to safe storage of information and interaction between the servers and the choice of the most suitable system for this work. A theoretical description of the security infrastructure building algorithm and examples of software implementation using the SaltStack configuration management system are given. Software for processing of vulnerability scanner reports is developed.

Обзор нормативно-правовых актов в области обеспечения безопасности критической информационной инфраструктуры

Обзор нормативно-правовых актов в области обеспечения безопасности критической информационной инфраструктуры

МЕТОДОЛОГІЧНІ ЗАСАДИ ОЦІНЮВАННЯ ТА ЗАБЕЗПЕЧЕННЯ БЕЗПЕКИ КРИТИЧНИХ ІНФОРМАЦІЙНИХ ІНФРАСТРУКТУР

The world trends in increasing of threats of natural and man-made nature, a level of terrorist threats, the number and complexity of cyberattacks have caused the actualization of needs for critical information infrastructure protection and improvement it's informational security and functional safety. A critical information infrastructure is considered as a set of information and telecommunication systems, improper operation of which may lead to the occurrence of an accident of critical infrastructure (energy, transport, etc.), as well as to decrease in quality of its services. The subject of paper’s study is the mechanisms for ensuring the safety (protection) of critical information infrastructures. The purpose of the paper is to substantiate the approach to the development of methodological foundations and technologies for assessing and ensuring the safety (protection) of critical information infrastructures taking into account the state and capabilities of modern information technologies. The methods used are: systems analysis methods, mathematical optimization methods, safety, and risk theory methods. The following results were obtained. The main tasks of the critical infrastructure protection system are formulated. The necessity of using the system of protection of critical information infrastructure as part of the system of protection of critical infrastructure is substantiated. The concept and principles of the methodology for assessing and ensuring the safety (protection) of critical information infrastructures are developed, working hypotheses, methods and models necessary for their implementation are suggested. The way of interaction of the elements of the proposed methodology, tasks and elements of the critical infrastructure protection system is shown. The results obtained are aimed at solving of one fundamental problem such as the existence of a contradiction between the intensive development of critical information infrastructures, negative influences and threats of various nature and the lack of methodological foundations, models, methods and information technologies for assessment and assurance of critical information infrastructure security and safety. The results obtained should be used to create elements of informational and analytical support for the decision maker in solving tasks related to the assessment and security (protection) of critical infrastructure

RETRACTED ARTICLE: Information security model of block chain based on intrusion sensing in the IoT environment

Block chain is a decentralized core architecture, which is widely used in emerging digital encryption currencies. It has attracted much attention and has been researched with the gradual acceptance of bitcoin. Block chaining technology has the characteristics of centralization, block data, no tampering and trust, so it is sought after by enterprises, especially financial institutions. This paper expounds the core technology principle of block chain technology, discusses the application of block chain technology, the existing regulatory problems and security problems, so as to provide some help for the related research of block chain technology. Intrusion detection is an important way to protect the security of information systems. It has become the focus of security research in recent years. This paper introduces the history and current situation of intrusion detection system, expounds the classification of intrusion detection system and the framework of general intrusion detection, and discusses all kinds of intrusion detection technology in detail. Intrusion detection technology is a kind of security technology to protect network resources from hacker attack. IDS is a useful supplement to the firewall, which can help the network system to quickly detect attacks and improve the integrity of the information security infrastructure. In this paper, intrusion detection technology is applied to block chain information security model, and the results show that proposed model has higher detection efficiency and fault tolerance.

Quantum-Secured Data Transmission in Urban Fiber-Optics Communication Lines

Quantum key distribution (QKD) provides theoretic information security in communications based on the laws of quantum physics. In this work, we report an implementation of quantum-secured data transmission in the infrastructure of Sberbank of Russia in standard communication lines in Moscow. The experiment is realized on the basis of already deployed urban fiber-optics communication channels with significant losses. We realize the decoy-state BB84 QKD protocol using the one-way scheme with polarization encoding for generating keys. Quantum-generated keys are then used for continuous key renewal in the hardware devices for establishing a quantum-secured VPN Tunnel between two offices of Sberbank. The hybrid approach used offers possibilities for long-term protection of the transmitted data; it is promising for integrating into the already existing information security infrastructure.

Review on Challenges in Building Knowledge based Societies through E-Governance Framework: Technology and Management Issues from Global Perspective

Objectives: To review the e-government challenges and issues faced by Iraq government and citizen. Methods/ Review: We are proposing a general adaption framework, which should be considered by Iraq government to maximise the E-government benefits. The framework is proposed based on the literature review and the problems faced by Iraq government and people. It describes how Iraq government can achieve and maximise its benefits from the e-government services and the parameters it should considered. Therefore, Iraq should develop a clear and strong strategic framework to understand its needs before implementing the E-government services in current circumstances. Findings/Discussion: The framework will clearly define government’s vision, goals, milestone, approach and standards beside information privacy, security and maintenance infrastructure. Essential ingredients of a successful transition include a vision, relevant policies, mission, strategic objectives and frameworks. Application: The outcome of framework review suggestions can be implemented in government sector for the benefit of the citizens. Keywords: E-Government, E-Governance, ICT, Issues and Challenges, Strategic Considerations