Main Security Problems Research Articles

Research and Design of Cloud Computing Security Framework

As a new technique, cloud computing has a rapid development in recent years. However, the security problems have caused great influences to the development and popularization of cloud computing, the importance and urgency has not to be ignored. This paper introduces cloud computing and security situation, studies the main security problems of cloud computing, and comes up with a cloud computing security framework which can effectively solve these security problems, and points out that only to solve the security problems, cloud computing can unceasingly expanded, and the application will be more and more widely.

Security Control of Denial-of-Service Attacks in Cyber-Physical Systems Based on Dynamic Feedback.

With the integration and development of multiple disciplines, as well as a large amount of research on multilevel interconnection networks, wireless sensor networks have become a new access point and have attracted widespread attention worldwide. However, limited by the characteristics of the wireless sensor network itself, the energy problem has repeatedly restricted its function, which needs to be solved urgently. This paper mainly improves the Geographical and Energy-Aware Routing (GEAR) based on cyber-physical systems and energy-aware routing protocols, which reduces the resource consumption of network nodes, achieves network power balance, and further extends the system life cycle. Although the open sharing of the network layer makes CPS more efficient in actual use, it also increases the risks faced by CPS. Among these potential risks, cyberattacks have become the main security problem that CPS must solve with the greatest destructive power. Among them, Denial of Service (DoS) is the simplest and most destructive type of network attack. We can allow the system to reject normal requests for sending and receiving data using the network resources of the communication channel, thereby performing security control. From the perspective of control, this paper studies the security control of CPS in DOS attacks. Firstly, considering the diversity of CPS packet loss factors, assuming that there is an upper limit on the probability characteristics of the total number of packet loss development, the Markov process of inherent packet loss and the Markov process of DoS attack satisfying this constraint are analyzed, and the above two independent packet loss factors are described on this basis. Two independent packet loss factor descriptions are given in the following. In this paper, through the research of wireless sensor networks, it is applied to the cyber-physical system and the cyber-physical system is further improved.

THE EU, CHINA AND AFRICA: COOPERATION IN THE SPHERE OF SECURITY

One of the trends currently observed in world politics is the growing global influence of China and African countries. These actors are beginning to make an ever greater contribution to the formation of a new – multipolar – world. This trend is of particular importance in relation to Africa – a continent that is experiencing permanent political instability and an associated lag in economic development. The main security problems in Africa include armed conflicts between certain groups of the population for access to natural resources; clashes between tribal and confessional communities; the proliferation of Islamic and Christian terrorist groups; electoral crises; piracy. While the EU retains its role as the main trade and economic partner of African countries and also cooperates with the latter in the field of security much more than other international players, China’s aspiration to become a global power prompts Beijing to participate more actively in solving security problems of the continent. Although most agreements signed between the PRC and African countries focus on trade, economic and social relations, the growing interdependence between national interests of China and domestic African politics encourages Beijing to reconsider its approaches to interaction with particular African regions. Moreover, since the participation of European states in peacekeeping missions has been gradually decreasing since the mid-1990s, the role of developing countries, including China, in ensuring security on the African continent has steadily increased. Expanding security cooperation in the EU-China-Africa format is a European initiative, but trilateral cooperation is still limited, primarily due to a noticeable difference in the approaches of China and the EU to Africa. Nevertheless, it is gradually being established in the format of joint participation in peacekeeping operations, as well as in the context of the fight against piracy and terrorism.

АНАЛІЗ ЗАГРОЗ БЕЗПЕКИ МІКРОКОНТРОЛЕРІВ

In the article the materials of individual studies of the main security problems in microcontrollers operating as part of control systems of both general and specialized devices were considered and analyzed. In particular, the main trends of security threats were analyzed and the main attacks vectors were presented. Foreign and domestic experience of manifestation of unauthorized influences and cyber threats in the main most critical places of microcontroller architecture is analyzed. The analysis showed that the basic places of security threats and interventions to the microcontroller are: registers, stack, LPA, memory (EEPROM and Flash), input-output ports, circuits and interfaces for data transfer to the MC, circuits for additional functionality for connecting to external peripheral devices and channels for connecting the clock oscillator. In addition, explorations were carried out on the main threats of the microcontroller system memory, namely: interference with direct memory access, access to control registers and access to the microcontroller buffer, buffer stack overflow, remote code execution, external access and attacks on secondary channels (including via external data lines in the MC), changing the order of addressing in the MC, changing / replacing the values of addresses and stack numbering, interfering with the work of data registers and indicating the state of the input / output ports of the microcontroller. A number of protection mechanisms for microcontrollers have also been studied, which together can reduce the risks of unauthorized actions on the microcontroller system. These include: cyclic code redundancy control, power monitoring and resource monitoring, the using of isolation and control of the functionality of the clock system, control of the integrity and reliability of the memory contents, control of external physical and electrical parameters of the microcontroller, virtualization of the main computing process and its multi-level redundancy and restoration of previous states, the using of cryptographic systems and data processing algorithms, the using of multi-level software and hardware isolation.

К вопросу о совершенствовании деятельности службы авиационной безопасности в России

Introduction: Aviation Security Service is an independent system that ensures the safety of air passengers and the airport as a whole. It has been given a free hand recently, namely, with the adoption of Federal Law No. 491-FZ Dated December 31, 2017 “On Amending the Aviation Code of the Russian Federation for ensuring aviation security”. Before the enactment, these functions were fulfilled by the police. In its activities, the police used some technical means necessary to identify the objects prohibited in circulation, but after the transfer of such powers to the Aviation Security Service, there was a process of improving and digitalizing technical devices, which contributed to improving the quality of screening air passengers, baggage and airport facilities. In its activities, the Aviation Security Service uses a highly systematic improved safety technology; a huge range of high-tech devices is used to ensure this service. But despite the improvement of technologies in the inspection system, the broadening of powers of the Aviation Security Service, there are also several shortcomings in its activities. Such are the gaps in the regulatory framework both for the Aviation Security Service itself and for interaction with the territorial Departments of Internal Affairs in transport. In addition, there is poor recruitment of personnel and corruption component in this area. Purpose: the purpose of the study is to analyze the features of aviation security in Russia and develop measures to improve the activities of the Aviation Security Service. Research methods: the methodological framework for the study is made up of the general scientific methods of cognition. To ensure the objectivity of the research, the analyzed problem is revealed by the authors as a phenomenon using a systematic approach, which allows us to reveal its mechanism in such a way that the theoretical provisions are used with maximum efficiency in practical activities. Research results and conclusions: the authors highlight the features of the activities of the Aviation Security Service in Russia during inspection measures, and also identify the main security problems at the airports.

Децентралізовані системи в логістиці: огляд використання та проблеми безпеки

The directions of the application and use of decentralized (distributed) systems are analyzed using the example of blockchain technology in the international logistics. The prospects and key aspects of the further development of decentralized systems and large databases are considered. The basics of the functioning of smart contracts based on Etherium and Solidity language are considered. The main security problems in the integrated supply chain are analyzed, and directions for improving the monitoring of the continuity of product quality control during movement in a multimodal supply chain are identified. Methods are proposed for strengthening security control in decentralized systems in logistics. The methodology of formal algebraic methods is considered in order to analyze and study the properties of transportations in the interaction of agents of a certain logistic environment. Problems in programming 2020; 1: 55-73

Numerical simulation of air flow in short metro ventilation shafts caused by a piston effect

Protecting the infrastructure of the metro from unauthorized actions with the help of ventilation openings of the systems is one of the main security problems of this type of transport. This article discusses the problem of the dynamics of distribution of the mass flow rate of ventilation air in a two-component system “tunnel vertical ventilation shaft”, due to the piston effect of a moving train. The dependence of the mass flow rate of ventilation air passing in both directions in short ventilation shafts (up to 10 m), on the speed, location of the rolling stock and cross-sectional area of the ventilation shaft is investigated. It is shown, that at speeds of 10–20 m / s of rolling stock and sections of the ventilation shaft of more than 4 m2, the mass flow rate of air passing through the ventilation shaft must be taken into account with the mass flow rate of ventilation air in the transport tunnel for assessing the safety of the harmful aerosols. These processes can have a significant impact on the air quality of the underground infrastructure of the metro.

Design method for strengthening high-proportion renewable energy regional power grid using VSC-HVDC technology

This paper proposes a general design method for strengthening regional power grids with high proportion of renewable energy using voltage source converter based high voltage direct current (VSC-HVDC) technology. First, three main security and stability problems of regional power grids with high proportion of renewable energy are pointed out, which implies the necessity of the VSC-HVDC reinforcement scheme. Second, two VSC-HVDC reinforcement schemes are designed to strengthen a real high-proportion renewable energy regional power grid in China, with emphases on the determination of location and capacity of VSC stations. Third, three evaluation indexes that related to the security and stability of power grids are put forward, namely line load rate, bus voltage level and system strength of the VSC-connected terminal. Finally, the two alternative reinforcement schemes are analyzed in detail. The results show that, the two VSC-HVDC schemes can well solve the line overload problem of electromagnetic loop networks with high generation of renewable energy, and can effectively increase the voltage level of the system during the fault period. After a comprehensive evaluation, scheme 2 is slightly superior to scheme 1.

BRICS and the Evolving Russia-India-China Security Agenda

Russia India and China are paying more and more attention to international security issues. They have developed a broad common security agenda via cooperation through two international institutions created by them. BRICS serve as a mechanism for promoting their economic security interests, SCO is focused on traditional security issues. Along with forming a common position on main international security problems, Russia, India and China act as great powers and disagree on certain security matters mostly of regional and bilateral nature. Cooperation prevails in their foreign strategies, but they are unlikely to create a strong military-political alliance.

SECURITY OF THE STATE. THE PARADIGM OF PROVIDING CHANGE FOR THE BETTER

Introduction: Security of the state: this is not only a prevention of provocations and sabotage, but above all a highly professional management, which ensures the social and economic development of the state, the well-being of the population, the improvement of our cities and villages, the defense capability and competitiveness of the country. Method. In order to achieve this goal, the following research methods were used: monographic, comparative (in the study of the reasons for the weakening of state security in Ukraine). System analysis allowed to characterize the main security problems of Ukrane. A dialectical approach was also used to study the phenomena and processes of the state, security and pre-election social and economic situation in the country.Objective: To determine the reasons for the decrease of the country's security and formation of ways of stabilizing the society and directions of strengthening of state security and implementation of state ideology, etc. Results: The study analyzed the state, security and pre-election socio-economic situation in the countries, analysis of the reasons for the weakening of the state security. the reasons and ways of stabilization of society are determined; proposals were made to strengthen state security, and suggested mechanisms for the implementation of state ideology, etc. Scientific novelty: The authors, based on the consideration of theoretical and practical approaches, developed and proposed a paradigm for identifying targeted anti-state activities and socio-economic dangers for the state and means for preventing social upheavals. Conclusions: It is proposed that, in order to prevent social upheaval, stop the decline in the level of the economy and the quality of life of the population, first of all, to take urgent measures to stop fighting in the East, to increase the responsibility for crimes against the people and the state; to strengthen the fight against corruption, to clean the administrative apparatus from corrupt, wicked people. It is proposed to make significant changes in the electoral legislation in order to qualitatively update the leadership of the state; to develop the state ideology, to strengthen propaganda and educational work in the state. The article outlines and proposes a paradigm for identifying targeted anti-state activities and socio-economic dangers for the state and means of preventing social upheaval .

A Systematic Review of Security in Electronic Commerce- Threats and Frameworks

There is a remarkable scope for more streamlined living through an increase of e-platforms specially ecommerce, but this coincides with an increase in security concerns since the global market place is virtual and anonymous. Therefore, users have to blindly trust the online providers. In order to overcome this physiological barrier the eplatforms should ensure utmost security. If not the ecommerce industry is unableto perform in the market effectively. Thereby arises the need to perform a systematic review of security issues in the e-commerce industry and to discover how different frameworks address these problems. This paper aims to identifythe main security problems faced by both customers and vendors when interacting with ecommerce platforms and to evaluate general security management frameworks based on the main security areas identified.

The European Union, China and Africa: Trilateral Security Cooperation

The main security problems on the African continent include intrastate conflicts between certain groups of population over access to natural resources, intercommunity clashes, the spread of Islamic and Christian terrorism, electoral conflicts and the continuing activity of pirates in the Gulfs of Aden and Guinea. As the European Union, China and the African countries represented by the African Union expand their influence on the processes taking place in the world, they also begin to make an increasing contribution to the establishment of a new multi-polar world and to the growth of the global economy. This trend is of particular importance in relation to Africa, which until recently was considered solely as a continent that permanently experiences developmental backwardness and political instability.

Uma revisão sistemática sobre a Segurança nos Protocolos de Comunicação para Internet das Coisas

Este artigo apresenta uma pesquisa sobre os principais problemas de segurança que afetam os protocolos de comunicação no contexto da Internet das Coisas, a fim de identificar possíveis ameaças e vulnerabilidades. Os protocolos, para uma melhor organização, foram categorizados em camadas de acordo com o modelo de referência TCP / IP: (i) camada física e de ligação; (ii) camada de redes; (iii) camada de transporte; (iv) camada de aplicação. No final, um resumo é apresentado em forma tabular com os modos de segurança usados para cada protocolo utilizado.

Set self-service sales and online customization in one of the product network marketing system construction and management research

The rapid development of e-commerce has had a great impact on traditional business activities, and the new business system of Internet, cloud computing and large data construction is being formed, and self-service will surely become an indispensable part. Through analyzing the main features of self-service, the paper expounds the importance and significance of constructing self-service network marketing system. This paper proposed a set of self-marketing and online customization in one of the new product sales model. Through self-service marketing terminals and network system, so that merchants, enterprises and consumers to cooperate with each other to accomplish the production and sale of the entire process, to achieve unmanned marketing, online customized products and consumer precision services. This paper focuses on the way and method of constructing the intelligent network system from the aspects of the overall planning of product production and marketing intelligent network system, the design of intelligent marketing terminal system and the design of network management information system. At the same time, it points out the main security problems faced by this intelligent network system, and proposes some measures to solve the problem.

Review of the Main Security Problems with Multi-Agent Systems used in E-commerce Applications

The ability to connect to the Internet from a wide variety of devices such as smart phones, IoT devices and desktops at anytime and anywhere, produces a large number of e-commerce transactions, such as purchases of clothes, ticket entrances for performances, or banking operations. The increasing number of these transactions has also created an increase in the number of threats and attacks by third parties to access user data banks. It is important to control the access procedure to user data so that the number of threats does not continue to grow. To do so, it is necessary to prevent unauthorized access, theft and fraud in electronic commerce, which is required to ensure the safety of these transactions. Many e-commerce platforms are developed through multi-agent-systems because they include certain advantages to control the product, resource management, task distribution, etc. However, there are a number of threats that can jeopardize the safety of the agents that make up the system. These issues must be taken into account in the development of these multi-agent systems. However, existing methods of development do not cover in depth the issue of security. It is necessary to present and classify the potential security flaws of multi-agent systems. Therefore, the present research presents a review of the main vulnerabilities that occur in multi-agent systems responsible for managing e-commerce applications, as well as the proposed solutions to the major security problems on these platform systems. The main conclusions provided by this research is the need to optimize security measures and enhance the different security solutions applied in e-commerce applications in order to prevent identity theft, access to private data, access control, etc. It is therefore essential to continue to develop the security methods employed in applications such as e-commerce as different types of attacks and threats continue to evolve.

Electronic Voting System Security

The purpose of this paper is to examine the main security problems in electronic voting systems, particularly security threats to DRE voting systems and security threats to the Internet voting systems. It will focus on how security problems can be addressed. The paper is divided into four parts. The first part will pinpoint the criteria of using electronic voting systems while focusing on the main security problems in DRE and Internet based voting systems and will suggest their solutions. The second and third parts will propose secure reference architecture for electronic and internet based voting systems while the last part will be the conclusion.

COMPARISON OF DATA SECURITY IN GRID AND CLOUD COMPUTING

In the current era, Grid computing and cloud comput ing are the main fields in the research work. This thesis define which are the main security issues to be considered in cloud comp uting and grid computing, and how some of these sec urity issues are solved. Comparative study shows the grid security is tighte r than the cloud. It also shows cloud computing is less secure and faced security problems. This research work is based on main secur ity problems in cloud computing such as authenticat ion, authorization, access control and security infrastructure (SLA). Cloud in frastructure is based on service level agreement; s imply cloud providers provide different services to cloud’s users and organizatio ns with an agreement known SLA. So the security and privacy of user’s data is the main problem, because unauthorized person can’t acc ess the data of cloud user. Hacking and data leakag e are the common threats in cloud computing. As the security due to hackers inc rease over internet and the cloud computing is tota lly on internet. At this time, cloud computing demand the tight password protectio n and strong authentication and authorization proce dure. For an increased level of security, privacy and password protection, we pr ovide a new strong authentication model named “Two factor authentications using graphical password with pass point scheme”. This au thentication model includes the login procedure, ac cess control that is based on service level agreement (SLA) in cloud computing .

Research on Security Facilities for Mountainous Countryside Based on the Characteristics of Security Needs

This paper analyzes the main safety and security problems of the mountainous rural roads. According to the characteristics of the mountains rural roads, traffic conditions and road environment, learned from domestic and international research and engineering experience, following the principles about safety, economy, environmental protection, and easy-maintenance, research for the security facilities suitable for rural road design.

THREE INTELLIGENCE METHODOLOGIES FOR BORDER DEFENCE AND BORDER SECURITY

The main security problem that any state faces today is protecting itscitizens in countering organised crime and terrorism. Wars between states are lessfrequent than in previous eras. Border defence and border security are distinctmissions requiring different forces with different training and different equipment.Border defence is predominately against the armed forces of other states requiringtanks, aircraft and ships. Traditionally, border security includes the mission roles ofimmigration, crime, agriculture, finance, disease control and terrorism. Intelligencegathering and analysis using three methodologies - trends and patterns, frequency,and probability – provides a solution to the large and expensive armed forces forterritorial border defence and defines the ability to succeed in border security.

Secure and Efficient Multicast Rekeying Approach for Non-Transparent Relay-Based IEEE 802.16 Networks

Many emerging applications that depend on secure group communications demand the privacy of participants and access control at the multicast server. The multicast and broadcast services in IEEE 802.16 are efficient and power saving mechanisms, which no doubt also provide subscribers with strong and powerful security protection from the theft of service by encrypting broadcast connections between subscriber station (SS), relay station (RS), non-transparent relay station (NRS) and Multihop relay base station (MR-BS). However, the existing multicast and broadcast rekeying algorithm (MBRA) not only facing forward secrecy, backward secrecy and scalability problems for IEEE 802.16e but also for multi- hop relay based networks both in centralized as well as distributed zone. Although many researches try to give solutions for the above problems, all of them focus mainly on IEEE 802.16e networks and none of paper is published on distributed relay-based Wimax networks. This paper illustrates the main security problem of MBRA in general which is scalability, backward and forward secrecy and proposes a new Secure and efficient distributed Relay- based Rekeying Algorithm (SEDRRA) scheme for non- transparent Multihop IEEE 802.16 networks. The proposed scheme uses non-transparent decode and forward relays. Both analysis and performance evaluation show that our scheme can significantly reduce the complexity and solve all of the above problems in an efficient way.