Security Infrastructure Research Articles

Botnets in Healthcare: Threats, Vulnerabilities, and Mitigation Strategies

The increasing digitization of healthcare systems has introduced new opportunities to improve efficiency and accessibility for medical professionals and patients. Examples include the simplified collection, storage, and organization of patient data using electronic health records (EHRs), the use of teleconferencing software like Zoom to allow patients to meet with their care providers remotely, and medical IoT devices like glucose monitors, pacemakers, and other remote patient monitoring devices that leverage software and the internet to provide patients and their healthcare providers with critical information. All of these use cases are examples of how technology can increase the quality of patient care. While the healthcare industry has realized many benefits from its increased investment in new technology, trends have shown that this increased utilization has also opened avenues for malicious cyber actors. One of these threats is botnets. These malicious networks of compromised computers, controlled by cybercriminals, can wreak havoc on all sectors of society, with the healthcare industry proving to be a desirable target. This research is a high-level analysis that investigates the threat botnets pose by employing an exploratory review. We identify the multifaceted nature of botnet threats in healthcare, analyzing their standard forms and the vulnerabilities inherent in healthcare infrastructures, ranging from outdated software to inadequate cybersecurity protocols to poor or total lack of security awareness training for staff. Moreover, the various techniques botnets use to propagate are explored to elucidate the potential points of exploitation and the damage they can cause organizations when proper controls are not implemented. These negative consequences include data breaches, service disruptions, and compromised patient confidentiality, which can endanger medical staff and patients if not addressed. This paper then discusses proven mitigation strategies such as end-user awareness, traffic monitoring, and detection response tools that organizations can employ to reduce the potential and efficacy of such threats. The threat landscape will continue to evolve; however, by staying on top of the latest trends, we can ensure the security of such critical infrastructure and save lives.

Enhancing Metaward: Integrating Digital Forensic Readiness in the Metaverse

As virtual currencies gain traction as rewards and with the evolving landscape of remote and hybrid work environments, the need for adaptive and comprehensive reward systems becomes imperative. This research builds upon the foundation laid in prior studies, focusing on the integration of Digital Forensic Readiness (DFR) into the Metaward reward model, within the Metaverse. However, as more individuals engage with and use the Metaverse, it is crucial to implement DFR to the Metaverse. The problem of this research is the absence of DFR processes integrated into the Metaverse, particularly within the context of the Metaward reward system. With the increasing importance of cybersecurity and digital forensics (DF) in organizational operations, the integration of such measures aims to enhance the security and integrity of the Metaward model. This enhancement aims to ensure a proactive and effective response to potential security incidents, while maintaining the integrity of digital evidence. This research employs a comprehensive methodology, encompassing literature review, analysis of DF measures, and the development of an extended conceptual model. By considering factors such as the security implications of virtual currencies, incident response capabilities, and proactive DF measures, the study seeks to provide insights into the feasibility and effectiveness of this augmented reward model. The proposed model acknowledges the significance of balancing motivation and engagement with the imperative need for robust DFR. It explores potential synergies between these seemingly different elements, aiming to create a reward system that not only motivates employees but also ensures the resilience and security of the organizational digital infrastructure. This study's findings hold promise for organizations navigating the complex terrain of modern work paradigms, offering a strategic approach to bolstering employee motivation, engagement, and DFR. The conclusion reflects on the implications of the proposed integration and outlines avenues for further research in the dynamic intersection of virtual currencies, reward systems, and DF.

State of research: Relevance of Computer Emergency Response Teams in Operational Technology

The increasing integration of Information Technology (IT) and Operational Technology (OT) in industrial environments has led to increased vulnerability to cyber threats. This article examines the need for a dedicated Computer Emergency Response Team (CERT) for OT to ensure the security, integrity, and resilience of critical infrastructure, particularly in the energy sector. OT is subject to specific challenges that differ from those in traditional IT networks. Cyberattacks on OT systems can not only cause financial losses, but also have a significant impact on physical security and the environment. A specific CERT for OT is necessary to address the unique characteristics of these environments. This requires expertise in industrial protocols, control systems and SCADA systems. The CERT for OT should be able to respond quickly to security incidents, perform forensic analysis and implement effective countermeasures to ensure business continuity. Research shows that implementing a specialized CERT for OT leads to improved threat detection, faster response, and more effective defense against attacks. In addition, this article emphasizes the importance of collaboration and communication between IT and OT security teams to ensure comprehensive system resilience. The following article provides a detailed literature analysis that comprehensively examines the current state of research on CERTs in the context of OT. The analysis of the relevant literature highlights the increasing threat to OT systems and emphasizes the specific requirements arising from the integration of IT and OT. By identifying research gaps and summarizing current findings, this article provides a comprehensive overview of the existing literature on this topic.

Enhancing Network Security: Rogue Switch Detection and Prevention in Local Area Network

Our paper comprehensively examines ways to detect and handle unauthorized switches in Local Area Networks (LANs) within today's intricate and interconnected network landscape. We demonstrate the utilization of PortFast and BPDU guard configurations to reinforce LAN security against unauthorized devices and potential complications arising from the spanning tree protocol. These measures not only enhance network performance but also function as robust protective mechanisms, safeguarding the integrity of the LAN infrastructure. Furthermore, this paper delves into advanced techniques for the proactive identification and prevention of rogue switches, fostering an overall enhanced security posture within LANs. By synergistically integrating PortFast, BPDU guard, and advanced rogue switch detection methods, the paper proposes a robust methodology to strengthen LAN security and maintain uninterrupted network operations. It equips organizations with crucial resources to establish a resilient, secure, and dependable digital infrastructure, addressing the evolving demands of network security.

The U.S. National Cybersecurity Strategy: A Vehicle with an International Journey

The U.S. National Cybersecurity Strategy is focused on the five pillars of defending critical infrastructure: detect, disrupt, and dismantle threat actors; improve market resilience and security; invest in future resilience; and create international partnerships with shared goals. The National Cybersecurity Strategy Implementation Plan is focused on critical infrastructure supporting energy, financial, healthcare, information technology, and manufacturing sectors. In the U.S. alone, the SolarWinds supply chain attack affected nine federal agencies and about 100 companies. Ransomware attacks such as the Colonial Pipelines, the largest U.S. oil pipeline, disrupted supplies of gasoline and fuel to the U.S. East Coast and the JBS USA as the largest meat processor ransomware attack affecting one-fifth of the nation’s meat supply. The U.S. National Cybersecurity Strategy as a response to the U.S.’s critical infrastructure concerns led to the creation of two core cybersecurity documents which were crafted jointly with several other allies. Cybersecurity and Infrastructure Security Agency (CISA) crafted the Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software with joint agreement with National Security Agency (NSA), the Federal Bureau of Investigation (FBI), and 15 international government agencies to give international vendors a roadmap of the expected cybersecurity hygiene required from their products. (CISA, 2023a; Car & De Luca, 2022) Building on the Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software, CISA, FBI and NSA met with cybersecurity organizations from Australia, Canada, New Zealand, and United Kingdom and jointly created The Case for Memory Safe Roadmaps: Why Both C-Suite Executives and Technical Experts Need to Take Memory Safe Coding Seriously as a core issue identified in the earlier guidance. (CISA, 2023c). These led by the U.S. helped initiate an international cybersecurity norm insisting international software manufacturers demonstrate product security and transparency. They showed how a global community can rally to solve cybersecurity challenges that have existed for decades. This led to twenty of the largest international software vendors creating the Minimum Viable Secure Product (MSVP) Working Group to address the requirements levied by these documents; CISA has joined this working group to help shape procurement, contractual controls, self-assessment, and system development lifecycle (SDLC) with these vendors. (CISA, 2024d; MSVP, n.d.) This research argues that the U.S. National Security Council (NSC) should leverage the talent pool of CISA, National Institute of Standards and Technology (NIST), Department of Defense (DoD), FBI, and NSA to improve detection, information sharing, security standards, and implementation for not only the U.S.’s government and commercial sectors, but also helps our allies and partners. The DoD and Office of the Director of National Intelligence (ODNI) have made great strides in improving security by integrating improvements with Zero Trust Architecture (ZTA), Supply Chain Risk Management (SCRM), Software Supply Chain Security, Cybersecurity Safety Review Board (CSRB), Cybersecurity Incident & Vulnerability Response Playbooks, and DoD National Security Systems (NSS) standards. The NSC should coordinate through CISA to develop a collaborative effort to not only benefit the U.S. critical infrastructure but also help our allies and partners.

Police Cloud: Functional modularity in China's cloud public security infrastructure

AbstractGlobally, China's Ministry of Public Security has one of the largest appetites and regulatory scopes for new technology use in policing. Using the case study of Police Cloud—a cloud infrastructure project, this paper examines a national wave of cloud migration initiated in Shandong in 2013. Police Cloud began to tackle the deep‐rooted challenges of information sharing across all levels of government. The analysis draws upon a dual dataset of government documents (n = 10) and newspaper articles (n = 277), qualitatively triangulated with Chinese academic articles and grey literature. The findings show how the Ministry of Public Security's switch to platformization triggered an overall change in public security governance. Contrary to platform policing experiences in other parts of the world, the Ministry of Public Security adopted Police Cloud by aiming to retain autonomy and control over private providers. Police Cloud also began enabling functional modularity of surveillance elements of China's public security.

Toward the European Health Data Space: The IMPaCT-Data secure infrastructure for EHR-based precision medicine research

Background:Art. 50 of the proposal for a Regulation on the European Health Data Space (EHDS) states that “health data access bodies shall provide access to electronic health data only through a secure processing environment, with technical and organizational measures and security and interoperability requirements”. Objective:To identify specific security measures that nodes participating in health data spaces shall implement based on the results of the IMPaCT-Data project, whose goal is to facilitate the exchange of electronic health records (EHR) between public entities based in Spain and the secondary use of this information for precision medicine research in compliance with the General Data Protection Regulation (GDPR). Data and methods:This article presents an analysis of 24 out of a list of 72 security measures identified in the Spanish National Security Scheme (ENS) and adopted by members of the federated data infrastructure developed during the IMPaCT-Data project. Results:The IMPaCT-Data case helps clarify roles and responsibilities of entities willing to participate in the EHDS by reconciling technical system notions with the legal terminology. Most relevant security measures for Data Space Gatekeepers, Enablers and Prosumers are identified and explained. Conclusion:The EHDS can only be viable as long as the fiduciary duty of care of public health authorities is preserved; this implies that the secondary use of personal data shall contribute to the public interest and/or to protect the vital interests of the data subjects. This condition can only be met if all nodes participating in a health data space adopt the appropriate organizational and technical security measures necessary to fulfill their role.

CLIMATE CHANGE CHALLENGES IN BANGLADESH

Climate change is a pervasive global challenge with far-reaching implications for both the environment and human society. A thorough comprehension of these repercussions is essential in crafting effective strategies to mitigate their effects. Climate change, a major threat to sustainable development, impacts the environment, economy, natural resources, food security, human health, and physical infrastructure globally. Bangladesh stands out among affected nations due to geographical and socio-economic vulnerabilities. Despite its vulnerability, Bangladesh has successfully mitigated the impact of extreme events over the years. This study focuses on examining climate change, its outcomes, and mitigation initiatives in Bangladesh. It endeavors to offer a comprehensive analysis of the current climate scenario in Bangladesh, delving into pivotal trends, impacts, adaptation strategies, and evaluating the effectiveness of national policies, legal frameworks, involvement of local governments, non-governmental organizations, and international collaborative efforts in developing an efficient disaster risk reduction and anticipatory action system. Despite achievements, safeguarding the livelihoods and properties of vulnerable communities from disaster-induced loss and damage remains a challenge. Additionally, addressing past adaptation failures is crucial. The paper highlights the necessity to enhance disaster risk reduction, green economy, promote economic development, implement government policies, and bolster anticipatory action systems, emphasizing the pivotal role of establishing a locally led climate-resilient system in addressing these challenges.

Enhancing Cloud Computing Security Through Artificial Intelligence-Based Architecture

Cloud computing has become an integral part of modern digital infrastructure, offering scalable resources and convenient access to data and services. However, ensuring robust security within cloud environments remains a critical challenge. In this paper, we propose an Artificial Intelligence-Based Architecture (AIBA) designed to enhance cloud computing security. By leveraging the capabilities of artificial intelligence, including machine learning and deep learning, the proposed architecture aims to detect, prevent, and mitigate various security threats in cloud systems. Through a combination of advanced algorithms, real-time monitoring, and adaptive responses, AIBA offers proactive defense mechanisms against cyber attacks, data breaches, and unauthorized access. We discuss the key components and functionalities of AIBA, as well as its potential applications and benefits in strengthening cloud security infrastructure.

Fusing Design and Machine Learning for Anomaly Detection in Water Treatment Plants

Accurate detection of process anomalies is crucial for maintaining reliable operations in critical infrastructures such as water treatment plants. Traditional methods for creating anomaly detection systems in these facilities typically focus on either design-based strategies, which encompass physical and engineering aspects, or on data-driven models that utilize machine learning to interpret complex data patterns. Challenges in creating these detectors arise from factors such as dynamic operating conditions, lack of design knowledge, and the complex interdependencies among heterogeneous components. This paper proposes a novel fusion detector that combines the strengths of both design-based and machine learning approaches for accurate detection of process anomalies. The proposed methodology was implemented in an operational secure water treatment (SWaT) testbed, and its performance evaluated during the Critical Infrastructure Security Showdown (CISS) 2022 event. A comparative analysis against four commercially available anomaly detection systems that participated in the CISS 2022 event revealed that our fusion detector successfully detected 19 out of 22 attacks, demonstrating high accuracy with a low rate of false positives.

Risk assessment of landslides: Low probability scenario for the town of Kavarna, northern Black Sea coast of Bulgaria

As part of the Reimbursable Advisory Services on Accelerating Resilience to Disaster Risks, the World Bank worked with the Interior Ministry of Bulgaria to develop a proposal for the National Disaster Risk Profile of Bulgaria. The purpose of this document, which is the fourth technical annex to the proposal for the National Disaster Risk Profile, is to provide particular conclusions, information, and techniques that were utilised to evalu-ate the risk of landslides in Bulgaria. For the first time at the national level, landslide risk assessment procedures based on ISO/IEC 31010:2019 Risk assessment techniques are being developed and applied in Bulgaria. The five primary categories in which the results are presented are physical safety, economic security, social well-being, environmental security, and security of tangible assets and critical infrastructure. The uncertainty (confidence) parameter is utilised, and it is subdivided into the following three basic categories: low uncertainty, medium uncertainty, and high uncertainty. The produced results demonstrate consistent applicability to empirical data analysis and real-world situations.

The effects of various distributed generating types on the smart grid have been demonstrated using transient stability study and steady state voltage analysis

Renewable energy and smart grid technologies are crucial in the modern era due to climate change and the need for secure energy sources. To address concerns regarding energy security, efficiency and aging energy infrastructure, it is necessary to move away from centralized power generation and embrace decentralized distributed generation and smart grid technologies. This transformation will meet the increasing demand for electricity, improve the quality of service, and reduce pollution. However, there are technical challenges to overcome, such as maintaining system stability when incorporating distributed generation into the smart grid. This research focuses on evaluating the impact of distributed generation on the smart grid, especially the system stability after integrating distributed generation. System stability was evaluated and confirmed using Dig-SILENT Power Factory V 13.2 software, which simulates connection issues and failures.

The Future of Warfare in the Volatility, Uncertainty, Complexity and Ambiguity Context

Abstract The war of the future represents an increasingly difficult concept to model through the implementation of emerging and disruptive technologies in a Volatility, Uncertainty, Complexity and Ambiguity (VUCA) context. The study of wars is essential in conflict prevention and peace building. In our paper we analyze the determining parameters of the contemporary operational environment against which we estimate possible directions of evolution of this phenomenon. The technological approach to war allows the identification of indicators of the development of emerging and disruptive technologies in an ethical framework and reinforces the strategies of forming a security culture through the mass education of citizens. The results of the research and the conclusions formulated can also constitute priorities for the strategies to strengthen the resilience of the national security and defense infrastructures.

Mapping Regional Security Dynamics: Traditional and Non-Traditional Perspectives on the Belt and Road Initiative (BRI)

The research article delves into the multifaceted security dimensions of China's Belt and Road Initiative (BRI) and its domain allegations. Securitization Theory and Non-Traditional Security Cooperation Theory, find out about scrutinizes traditional challenges like geopolitical rivalries and military engagements, revealing their intertwined nature with financial development. Non-traditional security concerns, along with terrorism threats and cybersecurity issues, add in addition complexity to the BRI. The research emphasizes China's proactive policies, analysing security cooperation, threat valuation, prison frameworks, and infrastructure protection measures. It underscores China's dedication to safeguarding investments distant places whilst merchandising stability. The research about additionally explores regional safety cooperation, highlighting the interconnectedness of traditional and non-traditional security dynamics. Overall, the findings illuminate the refined stability wanted in decision-making for sustainable improvement inside the BRI, showcasing the nuanced interaction between China's monetary ambitions, security considerations, and evolving geopolitical dynamics, offering each possibilities and challenges for China and its associate states concerned in the initiative.

Turning the State-Owned Enterprises from a Burden into an Opportunity for Economic Development

The sector of state-owned enterprises (SOEs)1 in the Republic of Moldova is plagued by the problem of weak governance, both at the state level (regulations and policies) and at the company level. As a result, the financial and operational performance of SOEs over the last years has been in continuous decline. However, state-owned enterprises can be transformed from a burden for Moldova’s economic development into a source of opportunities and tools that could generate a number of important economic reforms. The results of the given research demonstrate that state-owned enterprises have the potential to serve as important channels for attracting private investment, boost capital market development, develop and promote new financial instruments, strengthen state security and fortify strategic infrastructure.

Evaluating Sensitivity and Stability in Secure Deep Learning Based Channel Estimation for NextG Networks with Defensive Distillation

In the domain of wireless networks, including 5G and beyond, envisions a highly interconnected environment, enabling swift data transmission, expanded cell capacity, and minimal latency to support various applications and advanced manufacturing. Next Generation (NextG) networks seek to optimize and enhance network functionalities through Artificial intelligence (AI) integration, although concerns persist regarding the security of AI based models, particularly regarding model poisoning. Protecting these networks against cybersecurity threats, especially adversarial attacks, is vital. Hence, effective mitigation techniques and secure solutions employing AI-based methods are crucial. This study delves into the pivotal aspects of stability and sensitivity in AI-driven models tailored for NextG networks, focusing on Deep learning (DL) based channel estimation models. Utilizing data from MATLAB's 5G toolbox, we scrutinize these models' susceptibility to adversarial attacks and evaluate the efficacy of defensive distillation techniques in mitigating vulnerabilities. The research highlights the urgent necessity to fortify DL-based models against potential threats within NextG networks. Through a comprehensive evaluation of defensive distillation strategies, we showcase their ability to bolster both the stability and sensitivity of channel estimation models. By addressing these critical aspects, the study aims to enhance the resilience of AI-driven solutions within NextG environments, strengthening defenses against cybersecurity risks and safeguarding network integrity. Ultimately, the findings underscore the importance of prioritizing sensitivity and stability in the development and deployment of AI-based models for NextG networks. Through proactive measures and advanced mitigation methods, efforts are made to mitigate the risks posed by adversarial attacks and foster a more secure and resilient network infrastructure for the future.

Cyber Security Systems in Manufacturing Process Application: A Review

In recent times, technological progress has become increasingly pivotal across various sectors, particularly in engineering and its associated fields. However, organizations are grappling with numerous challenges, foremost among them being security threats such as unauthorized access to sensitive company data by external entities. The prevalence of such security issues has emerged as a significant concern for many enterprises, as the economic stability of an organization hinges on the secure integration of diverse information assets, free from external vulnerabilities. This study delves into existing literature on advancements in cybersecurity within manufacturing process networks, aiming to bolster safety measures against cyber-attacks and fortify operations. With the advent of Industry 4.0, there is a ripe opportunity to infuse modernizing elements into manufacturing systems, thereby fortifying their security infrastructure. By leveraging cybersecurity protocols, organizations can safeguard information integrity to uphold stringent safety standards effectively.

Vulnerability of the Infrastructure: Risk Management and Implementation of the Information Systems

This article focuses on a comprehensive view of the connection between infrastructure, risks, and Geographic Information System (GIS). In the context of the current era, where critical infrastructure faces various threats and risks, it is essential to explore new methods and technologies that enable better identification, assessment, and management of these challenges. The first part of the article analyzes the current state of critical infrastructure and its connection to risks. Understanding how various threats, from natural disasters to cyber-attacks, affect infrastructure elements is crucial for effective protection and resilience. The second part examines the benefits and uses of Geographic Information Systems (GIS) in the context of risk assessment and management of critical infrastructure. GIS provides tools for collecting, analyzing, and visualizing spatial data, improving the ability to identify key risk areas and their interconnections. The results of this paper demonstrate how effectively linking these elements can enhance the resilience of critical infrastructure to various hazards.Overall, this article provides an overview of current trends in connecting infrastructure, risks, and Information Systems, emphasizing the importance of this comprehensive approach to ensuring the security and sustainability of critical infrastructure.

Частная полумарковская модель как инструмент снижения сложности задачи оценивания устойчивости функционирования элементов информационной инфраструктуры, подверженной воздействию угроз

Decision-making on information infrastructure (II) security for its sustainable functioning in the face of threats requires a tool to assess the sustainability of its individual elements. The application of the semi-Markov model to assess the stability of the functioning of elements of II exposed to threats in a direct setting is associated with the increasing complexity of the description of the object of delineation (parametric space) in step progression from the number of the considered impacts, which reduces its practical significance. However, no studies have been found in the scientific literature to reduce the complexity of the semi-Markov model. The article presents an approach to reducing the complexity of modeling by adopting correct assumptions when forming the initial data. Given the conditions under which it is possible to take a series. It was a cost to limit the applicability of the model by significantly reducing the complexity of the modelling. The problem statement and the modified transition graph are given. The novelty of the problem statement is to take into account the limitations on the available resources for the restoration of functionality of the element. To explain the physical essence of the modeling process, a thought experiment with a model is introduced. To solve the problem, the following methods were used: a) expert methods for extraction of initial data; b) mathematical models of private semi-Markov processes; c) methods of transformation of Laplace; r) methods of planning of experiment. Illustrative examples and graphs accompany the task sequence demonstration. As a result of the experiment, the regularities of the studied process, the existence of which was proved formally. As a result of the experiment, the regularities of the studied process were revealed, the existence of which was officially proved. The results of the study broaden knowledge about the application of methods of Markov processes to assess the stability of the functioning of AI elements in relation to the conditions of the impact of threats.

Optimizing The Use Of Cloud Technology In Public Sector Management Control (Case Study Of E-Government In Bandung City)

This research aims to explore and analyze the optimization of cloud technology usage in public sector management control, focusing on the implementation of e-government in Bandung City as a case study. The research method used is a qualitative case study, collecting data through in-depth interviews, observations, and related document analysis. The results indicate that the application of cloud technology has brought significant benefits, including increased efficiency, accessibility, and scalability of e-government services. However, challenges related to data security and technological infrastructure limitations were also identified. Based on these findings, recommendations are provided to strengthen infrastructure, train employees, establish partnerships with the private sector, and conduct regular evaluations to enhance the application of cloud technology in e-government management in Bandung City and the public sector in general. This research is expected to provide valuable insights for the development and optimization of e-government services in various governmental contexts.