Security Requirements For Systems Research Articles

Methodological approach to quantitative assessment of the security of open operating systems AS of the Internal Affairs Bodies

Objective. The article considers the provisions of the fuzzy logic approach in relation to the method of quantifying the security of open operating systems (OS) of automated systems of the internal affairs bodies of the Russian Federation (AS of the Russian Federation), taking into account possible security threats and the requirements of the standard GOST R ISO/IEC 15408 for leveling possible consequences. Information Message № 240/24/4893 dated October 18, 2016 «On Approval of Information Security Requirements for Operating Systems» of the FSTEC of Russia defines 6 OS security classes. Operating systems corresponding to protection classes 1, 2 and 3 are used in information (automated) systems in which information containing information constituting a state secret is processed, operating systems corresponding to protection classes 4, 5 and 6 are not intended for processing such information. In the presented study, the open operating systems of the AS of the Russian Federation are understood as OS AS, in which information containing information constituting a state secret is not processed. Method. The study was conducted based on the method of analyzing possible security threats to open operating systems, as well as the requirements of GOST R ISO/IEC 15408 standard, using the provisions of fuzzy logic. Result. The result of the automated system for calculating the security index of the analyzed open OS is one of the specified criteria for the degree of security of the OS, based on the provisions of fuzzy logic. Conclusion. The authors propose a method for assessing the security of open OS of the AS of the Russian Federation, based on the provisions of fuzzy logic.

MSE_LSB Method of Message Steganography

A modified, secure and efficient LSB based method (MSE_LSB) of message steganography will be introduced. The single character of the secret message will be hidden in spaced covering bytes. The covering-stego bytes will be reordered and scattered based on the contents of the generated secret indices key, this key will be used to reorder and reorder back the covering-stego bytes. The proposed MSE_LSB method will use a complicated private key, this key will provide a huge key space capable to make it strong enough to resist hacking attacks; the extracted message will be very sensitive to the selected private key. The secret indices key will be generated using chaotic logistic parameters for short and medium messages, and an image_key will be used to generate the indices key for long messages to keep the method efficient. The proposed method will modify and simplify the processes of characters hiding and extracting by using simple assignment operation. The image_key will replace the chaotic logistic key to reduce the key generation time, this is because long chaotic key will require a long time, thus the speed of message steganography will be negatively affected. The proposed MSE_LSB method will be tested and implemented using various short, medium and long messages, the obtained results will be used to prove the fact that the proposed method will meet the requirements of good stego system (quality, security, sensitivity and speed). The speed results of the proposed method will be compared with other methods speeds to show how the proposed method will increase the speed of message steganography by decreasing both the hiding and extracting times.

Integrated energy cyber–physical system fusion modeling and operation state analysis under the cooperative attack

With the increasingly close coupling between the cyber system and the physical system, cyber attacks have a significant impact on the physical system by attacking the cyber system. As a cyber–physical system with multiple energy sources, integrated energy cyber–physical system (IECPS) is facing the risk of cyber attacks. However, the research on IECPS is still in the direction of operation optimization at the physical level, which cannot meet the requirements of system security and stability analysis under cyber cooperative attacks. Firstly, this paper analyzes the interaction mechanism between the energy network composed of electricity, heat and gas and the cyber network in IECPS, and put forward a layered modeling method of IECPS to analyze the influence of abnormal information flow caused by cyber attacks on energy flow. Secondly, based on the energy circuit method (ECM), a hybrid calculation method of IECPS energy-information flow is proposed to solve the model. Then, the load shedding state of IECPS and the tampering process of system control commands after the fake data injection attack are analyzed by using the proposed calculation method. Finally, the simulation analysis is carried out in an integrated energy system composed of IEEE 39-node power grid, 6-node heating network and 7-node gas network. The results show that, compared with the traditional Newton–Raphson method, the proposed IECPS hybrid calculation method can better obtain the change results of energy flow in the steady-state scenario and the cyber cooperative attack scenario, and identify the high-risk branches in the system, which is of great significance to the safe and stable operation of the energy system.

SiSMA‐SWMS: Signature‐based Secure Monitoring Approach for Smart Waste Monitoring Systems

AbstractWith the speedy growth of the populace, corresponding waste also grows, notably raising greater concern about the monitoring of waste in urban areas. Although the traditional method of waste monitoring has benefited city waste management systems, it remains time‐consuming, inefficient, and detrimental to public health. This situation can be improved by integrating advanced technologies, which can significantly enhance the flexibility and performance of waste monitoring systems. However, these advanced technologies encounter numerous security challenges. In this article, we have implemented a signature‐based monitoring approach to oversee the status of smart bins. To ensure the security, robustness, and reliability of the introduced protocol, we utilized tools such as AVISPA, Scyther, the ROR model, and Mao and Boyd logic. As discussed in the informal security analysis, the introduced protocol successfully fulfills the security requirements for smart waste monitoring systems. Finally, an in‐depth comparative analysis of the related works and the introduced protocol shows that the latter provides greater security, reliability, and efficiency. As a result, the reliability and hardness of the cryptographic operations used in the introduced protocol make it secure enough to use in real‐world applications.

Interface Control and Status Monitoring of Electronic Information Equipment based on Nonlinear Data Encryption

An advanced electronic information equipment interface control and status monitoring system is proposed to ensure the fairness, objectivity, and security of information while identifying responsibility for traffic accidents. Through an in-depth analysis of the system's security requirements and the current landscape of information security technology, a robust security strategy is developed for each crucial system stage. A PC-based platform is developed for efficient data acquisition, secure processing, reliable transmission, and fortified storage, focusing on implementing nonlinear data encryption methods. Performance evaluation of the system involved rigorous testing using files ranging from 3MB to 10MB. The results of the proposed system revealed a significant improvement in the system's overall speed and efficiency, showcasing an average performance enhancement of one quarter compared to the original platform. The proposed system demonstrated an impressive 15% to 30% increase in processing speed, establishing its capability to ensure data integrity protection during information transmission, facilitate accurate identification of data recording equipment post-accident, and safeguard the security of stored data. The developed electronic information equipment interface control and status monitoring system effectively addresses critical challenges associated with ensuring data integrity and security in traffic accident investigations.

Securing the future of IoT-healthcare systems: A meta-synthesis of mandatory security requirements

IntroductionHealthcare-based Internet of Things (Healthcare-IoT) is a turning point in the development of health information systems. This emerging trend significantly contributes to enhancing users' awareness of their health, ultimately leading to an extension in life expectancy. Security and privacy are among the greatest challenges for H-IoT systems. To establish complete safety and security in these systems, the implementation of mandatory security requirements is imperative. For this reason, this study identifies the necessary security requirements for H-IoT systems using a Meta-Synthesis approach. MethodsInitially, following the Seven-Stage Sandelowski & Barroso approach, the existing literature was searched in the Scopus and Web of Science databases. Among the 844 extracted articles from the period of 2010 to 2020, 78 final articles were reviewed and analyzed, leading to the identification of 51 security requirements. Subsequently, to assess the quality of the identified requirements and their overlap, interviews were conducted with two experts. ResultsFinally, 14 security requirements, predominantly with technical and quantitative aspects, were identified for designing a Healthcare-IoT system and implementing security mechanisms. ConclusionThe findings of this study emphasize that addressing the identified 14 security requirements is crucial for safeguarding Healthcare-IoT systems and ensuring their robustness in the evolving health information landscape.

Publish Subscribe System Security Requirement: A Case Study for V2V Communication

Publish Subscribe System Security Requirement: A Case Study for V2V Communication

Risk sensitivity analysis of AIS cyber security through maritime cyber regulatory frameworks

Given the increasing frequency and sophistication of methods and strategies employed in cyberattacks, cyber resilience has become a basic notion of cyber risk management. To be cyber-resilient against cyber risks, shipping companies must be proactive in establishing and implementing actions, constructing effective strategies, and adopting mitigation methods to strengthen their assets. However, shipping companies have only lately tended to fully recognize the necessity for a cybersecurity perspective to enable effective cyber risk management and mitigation of increasing cyberattacks. Aside from deficiencies in system design, integration, or maintenance, human factors are the prime weakness that potentially jeopardizes the ship's cybersecurity by simply making intentional or unintentional errors, revealing critical information, or generating entry points for attackers. Therefore, the current study aims to conduct a quantitative human risk assessment based on the SOHRA method, which is integrated with the NIST cybersecurity framework, to provide ships with the ability to be cyber resilient, and respond to and recover from cyber-attacks. The AIS has been considered for the research application not only because it is one of the most vulnerable systems on board a ship, but also because modifying and breaching the AIS data might have disastrous outcomes. The study results clearly indicate that the most likely error related to AIS cybersecurity risk occurs in the tasks defined under the "protect", "respond", "detect", "identify", and "recover" functions. Accordingly, suitable control and preventative measures have been developed to guarantee high-level cyber security for AIS and to provide cyber resilience and the structure for constructive decision-making by integrating various international standards, which include system security requirements and security levels for industrial communication networks, specifically with the IACS and NIST framework for the AIS cyber security.

Onto-CARMEN: Ontology-driven approach for Cyber–Physical System Security Requirements meta-modelling and reasoning

In the last years, Cyber–physical systems (CPS) have attracted substantial mainstream, especially in the industrial sector, since they have become the focus of cyber-attacks. CPS are complex systems that encompass a great variety of hardware and software components with a countless number of configurations and features. For this reason, the construction, validation, and diagnosis of security in CPS become a major challenge. An invalid security requirement for the CPS can produce partial or incomplete configuration, even misconfigurations, and hence catastrophic consequences. Therefore, it is crucial to ensure the validation of the security requirements specification from the earlier design stages. To this end, Onto-CARMEN is proposed, a semantic approach that enables the automatic verification and diagnosis of security requirements according to the ENISA and OWASP recommendations. Our approach provides a mechanism for the specification of security requirements on top of ontologies, and automatic diagnosis through semantic axioms and SPARQL rules. The approach has been validated using security requirements from a real case study.

Examination of Gas Active Arc Extinguishing and Lightning Protection for Transmission Lines

The study investigated the gas active arc extinguishing and lightning protection for transmission lines. Lightning is one of the most significant sources of over voltages in overhead transmission lines. The lightning over voltages could lead to failure of the devices connected to the transmission line. Fundamental constraint on the reliability of an electrical power transmission system is the effectiveness of its protective system. The role of the protective system is to safeguard transmission system components from the effects of electrical overstress. Shield wire and surge arresters are an important means of lightning protection in transmission and distribution systems. Therefore, it is necessary to analyze the influence of over voltages caused due to lighting. The requirements of system security for lightning protection technology reach the high standard that lightning strike tripping and wire breakage are not allowed. Both the power supply side and the demand side have very high requirements for lightning protection of transmission lines, but the lightning accident rate remains high. This situation poses a great threat to the reliability and safety of power network, it is urgent to solve this problem. The gas active interrupter principle is put forward. From two latitudes of lightning overvoltage and power frequency over current, the effective control of lightning accident rate caused by large probability and multiple lightning strike is realized. This paper is aimed at evaluation of protection level of transmission line by using gas active arc extinguishing, shield wire and line surge arresters against lightning overvoltage. When lightning strikes, the internal short gap of the main body and the air gap break down, and the lightning arc enters the arc-extinguishing body through the breakdown channel. Arc is compressed by force to form internal and external gradients temperature in order to produce jet airflow. Jet airflow acts on the subsequent power frequency follow current arc, a model coupling an arc and a compressed jet airflow in a multi-fracture compression airflow arc-extinguishing structure is established and simulated. The increase in voltage due to lightning are investigated by using the MATLAB software. Direct and induced, types of lightning strokes are considered. The model of a 33kV three-phase overhead power transmission line is developed considering the RL circuit. The simulations are performed based on time domain analysis. Also, numerical analysis is made for 133kV tower structure transmitting power over 220km from 132 KV Sub-transmission Lines in port Harcourt region. Based on the simulation study this research study gas active arc extinguishing and lightning protection for transmission lines, are very important in computer application like Electromagnetic Transient Propagation (EMTP) and Power System Computer Aided Design (PSCAD) which are used in future study. These soft wares provide an alternative way to bring the precise result in study of lightning protection level of high voltage transmission line.

Zero-Trust Security Authentication Based on SPA and Endogenous Security Architecture

Zero-trust security architecture reconstructs the trust foundation of access control based on authentication and authorization by continuously authenticating the terminal during the authentication process and not relying solely on geographic location/user attributes as the sole basis for the trust assessment. However, due to the fine-grained verification of identity under the zero-trust security architecture, there is a need for multiple authentication and authorization processes. If a single policy engine has unknown vulnerabilities and unknown backdoors to be maliciously attacked, or DDOS attacks initiated by known vulnerabilities cannot be prevented, the policy engine based on this control center architecture cannot meet the requirements of system security and reliability. Therefore, it is proposed to apply the SPA single-package authorization and endogenous security architecture to the zero-trust authentication system, which can realize the reliability, dynamism and diversity of system defense. Through the experimental antiattack analysis and antiattack test, the test from the proposed scheme found that when the system introduces the endogenous security architecture, the security of the system can be improved due to the complexity of the attack process and the increase in the cost of the attack. The test through both the security and system overhead found that the scheme can effectively improve the security of the system while ensuring the quality of network services, compared to the traditional scheme. It was found that the scheme can effectively improve the security of the system while ensuring the quality of network services and has better adaptability than the traditional zero-trust authentication scheme.

Privacy in electronic health records: a systematic mapping study

Abstract Main Electronic health record (EHR) applications are digital versions of paper-based patient health information. Traditionally, medical records are made on paper. However, nowadays, advances in information and communication technology have made it possible to change medical records from paper to EHR. Therefore, preserving user data privacy is extremely important in healthcare environments. The main challenges are providing ways to make EHR systems increasingly capable of ensuring data privacy and at the same time not compromising the performance and interoperability of these systems. Subject and methods This systematic mapping study intends to investigate the current research on security and privacy requirements in EHR systems and identify potential research gaps in the literature. The main challenges are providing ways to make EHR systems increasingly capable of ensuring data privacy, and at the same time, not compromising the performance and interoperability of these systems. Our research was carried out in the Scopus database, the largest database of abstracts and citations in the literature with peer review. Results We have collected 848 articles related to the area. After disambiguation and filtering, we selected 30 articles for analysis. The result of such an analysis provides a comprehensive view of current research. Conclusions We can highlight some relevant research possibilities. First, we noticed a growing interest in privacy in EHR research in the last 6 years. Second, blockchain has been used in many EHR systems as a solution to achieve data privacy. However, it is a challenge to maintain traceability by recording metadata that can be mapped to private data of the users applying a particular mapping function that can be hosted outside the blockchain. Finally, the lack of a systematic approach between EHR solutions and existing laws or policies leads to better strategies for developing a certification process for EHR systems.

Security and privacy research of Internet of things systems in mobile networks

The escalating integration of Internet of Things (IoT) devices with mobile networks presents unprecedented opportunities and challenges in the context of security and privacy. This paper offers a comprehensive overview of recent research focusing on the security and privacy concerns associated with IoT systems operating within mobile networks. The fundamental concepts, emerging threats, and potential solutions in this dynamic landscape are examined. The distinctive characteristics of IoT devices and their unique security and privacy requirements are outlined. The paper discusses inherent vulnerabilities, including limited computational resources, device heterogeneity, and the expansive attack surface resulting from interconnected devices. Additionally, the growing risks associated with data collection, transmission, and storage within mobile network environments are explored, emphasizing the importance of protecting user privacy and sensitive information. State-of-the-art security mechanisms and protocols designed to safeguard IoT systems in mobile networks are surveyed. Approaches such as encryption, authentication, access control, and intrusion detection systems are discussed as means to mitigate potential threats. The paper addresses the challenge of secure device onboarding and underscores the importance of ensuring the integrity and authenticity of IoT components within the network. Furthermore, the role of standards and regulatory frameworks in shaping security and privacy requirements for IoT systems is examined. Initiatives by organizations such as the Internet Engineering Task Force (IETF) and the European Union’s General Data Protection Regulation (GDPR) are discussed in relation to their influence on the development and deployment of secure IoT solutions. In conclusion, this review highlights the ongoing need for continuous research and development in the security and privacy domains of IoT systems in mobile networks. As the adoption of IoT devices and mobile network technologies continues to grow, maintaining vigilance in addressing evolving threats and ensuring compliance with emerging regulations is imperative. This paper aims to provide valuable insights into the evolving landscape of IoT security and privacy, catering to researchers, practitioners, and policymakers, and paving the way for a more secure and privacy-preserving future for IoT deployments in mobile networks.

Nonlinear Predictive Control for Temperature Regulation of Solar Furnaces

In the context of material synthesis and thermal stress tests, solar furnaces play a fundamental role. These experimental systems are usually operated manually by trained operators. However, the use of automatic controllers can be essential to take into account the different dynamics of the treated materials, follow the different temperature profiles required in the tests, meet system security requirements, and face the intermittency of the main energy source, the solar energy. On these bases, the present work proposes a control system for temperature regulation in solar furnaces. The controller is based on a nonlinear model predictive control strategy that deals, in a single control layer, with the nonlinear behaviour of the system, the effect of disturbances, and the system's operating constraints. The controller was experimentally tested in the solar furnace SF60 of Plataforma Solar de Almería (southeast Spain), showing adequate performance against setpoint temperature changes, reaching a settling time of the order of 54 % faster than the open-loop system's time constant, and effectively rejecting irradiance disturbances. In addition, the operational constraints were ensured in almost all operating circumstances, observing only slight deviations of less than 2°C. These results allow us to position the proposed controller as a relevant tool for daily operation.

Robust Watermarking Method for Secure Transmission of Medical Images in EHR Systems

Confidentiality of Electronic Health Record (EHR) and privacy are two important security requirements for healthcare systems. Many devices on the EHR network utilize little or no encryption, which makes data in transit vulnerable to exploitative attacks, such as Man-in-the-Middle and other filtration methods. Recently, watermarking algorithms as an efficient response to these requirements is in the underline. In this paper, we present a robust watermarking method conceived as part of an Electronic Health Record platform. In this method a chaotic encryption and blind medical image watermarking technique was incorporated into the system as an authorization mechanism to ensure confidentiality and integrity of electronic health information. We present a hybrid watermarking method based on a combination of discrete wavelet transform (DWT), hessenberg Decomposition (HD), Singular value decomposition (SVD) and an original chaos crypto system based on the Arnold Transform (AT) of Singular Value Decomposition. In order to spread the robustness of our algorithm and provide additional security, an improved SVD-AT embedding and extraction procedure has been used to scramble the EHR data in the preprocessing step of the proposed method. In the process of watermark embedding, an R-level discrete wavelet transform was applied to the host image. The low frequency wavelet coefficients are selected to carry this scrambled-watermark. In extraction process, the stored used plain image is obtained from the trusted authority server to complete the verification process. The receiver should compare the unsigned watermark with the extracted watermark again. The verification can be done before clinical procedures and diagnosis. The proposed watermarking method endures entirety attacks and rightly extracts the hidden watermark without significant degradation in the image quality, thus, when the Peak Signal to Noise Ratio (PSNR) and Normalized Correlation (NC) performance of the proposed algorithm is performed.

SYSTEMATIC LITERATURE REVIEW FOR LIGHTWEIGHT AUTHENTICATION ALGORITHM IN THE IoT

The Internet of Things (IoT) being a promising technology of the future is expected to generate a tremendous amount of data that may be exposed to security flaws. Hence, to protect IoT applications from hackers, lightweight cryptography has been identified as one of the suitable mechanisms since it is designed to fulfil security demands in resource-constrained hardware and software. This paper aims to analyse the current security requirements in designing lightweight cryptography for IoT applications, specifically for integrity and authentication algorithms. There are three objectives to focus on: Determine the current state of integrity and authentication research, investigate the integrity and authentication requirements, and analyse the lightweight authentication algorithm currently used. The Kitchenham systematic review method was adopted using a four-step process. The selected articles in this study were retrieved from four reputable databases and 57 of them were deemed suitable for analysis after meeting the selection criteria. From this systematic literature review, it was discovered that there were three active research focuses on the IoT. The research focuses were mostly on cyberattacks against IoT applications, system security requirements and algorithms for lightweight authentication. Furthermore, the analysis also revealed the convergence of lightweight authentication algorithms to ensure the future sustainability of applications. This study may provide researchers with a reference in designing lightweight authentication algorithms to achieve the desired security requirements for sustainable security management in IoT.

Networked TT&C for mega satellite constellations: A security perspective

Satellite constellations are promising in enabling the global Internet. However, the increasing constellation size also complicates tracking, telemetry and command (TT&C) systems. Traditional ground-based and space-based approaches have encountered significant obstacles due to, e.g., the limited satellite visible arc and long transmission delay. Considering the fast development of intersatellite communications, synergy among multiple connected satellites can be exploited to facilitate TT&C system designs. This leads to networked TT&C, which requires much less predeployed infrastructures and even performs better than traditional TT&C systems. In this paper, we elaborate system characteristics of networked TT&C compared with traditional ground-based and space-based TT&C, and propose the unique security challenges and opportunities for networked TT&C, which includes secure routing and trust mechanisms. Furthermore, since networked TT&C is a novel scenario with few relevant researches, we first investigate the current researches on secure routing and trust mechanisms for traditional terrestrial and satellite networks, and then accordingly deliver our security perspectives considering the system characteristics and security requirements of networked TT&C.

Tracing security requirements in industrial control systems using graph databases

We must explicitly capture relationships and hierarchies between the multitude of system and security standards requirements. Current security requirements specification methods do not capture such structure effectively, making requirements management and traceability harder, consequently increasing costs and time to market for developing certified ICS. We propose a novel requirements repository model for ICS that uses labelled property graphs to structure and store system-specific and standards-based requirements using well-defined relationship types. Furthermore, we integrate the proposed requirements repository with design-time ICS tools to establish requirements traceability. A wind turbine case study illustrates the overall workflow in our framework. We demonstrate that a robust requirements traceability matrix is a natural consequence of using labelled property graphs. We also introduce a compatible requirements change management procedure that aids in adapting to changes in development and certification schemes.

Securing future healthcare environments in a post-COVID-19 world: moving from frameworks to prototypes

The deployment of Internet of Things platforms as well as the use of mobile and wireless technologies to support healthcare environments have enormous potential to transform healthcare. This has also led to a desire to make eHealth and mHealth part of national healthcare systems. The COVID-19 pandemic has accelerated the requirement to do this to reduce the number of patients needing to attend hospitals and General Practitioner surgeries. This direction, however, has resulted in a renewed need to look at security of future healthcare platforms including information and data security as well as network and cyber-physical security. There have been security frameworks that were developed to address such issues. However, it is necessary to develop a security framework with a combination of security mechanisms that can be used to provide all the essential security requirements for healthcare systems. In addition, there is now a need to move from frameworks to prototypes which is the focus of this paper. Several security frameworks for eHealth and mHealth are first examined. This leads to a new reference model from which an implementation framework is developed using new mechanisms such as Capabilities, Secure Remote Procedure Calls, and a Service Management Framework. The prototype is then evaluated against practical security requirements.

Privacy-preserving bidirectional keyword search over encrypted data for cloud-assisted IIoT

Cloud-assisted industrial Internet of Things (IIoT) technology is increasingly used by related enterprises. To preserve the privacy of sensitive data, IIoT devices must encrypt data before sending them to a cloud server. Public-key encryption with keyword search (PEKS) provides an important search function over cloud-assisted IIoT, allowing users to search for encrypted data without decryption. To increase practical functionality, Zhang et al. recently proposed the concept of public-key encryption with bidirectional keyword search, which supports both sender and receiver searches. However, their scheme provides insufficient security because it cannot resist keyword guessing attacks (KGA). Additionally, their scheme requires time-consuming bilinear pairing operations, resulting in high computational costs. In this study, a novel concept called public-key authenticated encryption with bidirectional keyword search was devised for multi-user settings. The system definition and security requirements are formally defined to ensure that no adversary can overcome the indistinguishability against chosen-keyword attacks or KGA. Furthermore, we propose a pairing-free semi-generic construction, combining a multiparty non-interactive protocol and authenticated functionality, which has proven to be secure under the standard model. The experimental results reveal that, compared with other state-of-the-art schemes, the proposed scheme is more practical, secure, and suitable for use with cloud-assisted IIoT systems.