Resource Public Key Infrastructure Research Articles

RPKI Defense Capability Simulation Method Based on Container Virtualization

As the main inter-domain routing protocol in today’s internet, the Border Gateway Protocol (BGP) faces serious security risks during actual usage. Research on BGP malicious attack methods requires a realistic network environment, and evaluation methods based on physical networks often suffer from high costs and insufficient flexibility. Thus, we propose an efficient BGP simulated network deployment system based on a virtualization technology called the SOD–BGP. This system, combining cloud computing and virtualization technologies, creates a scalable, highly flexible basic network environment that allows for the automated simulation and evaluation of actual BGP prefix hijacking attack scenarios. A Resource Public Key Infrastructure (RPKI) simulation suite is introduced into the system, emulating a certificate issuance system, certificate storage, and a certificate synchronization verification mechanism, thus aligning the simulation environment with real-world usage scenarios. Finally, we propose a data collection and performance evaluation technique to evaluate BGP networks deploying RPKI under different attack scenarios and to explore the effectiveness of RPKI defense mechanisms at various deployment rates. A comparative analysis with other simulation techniques demonstrates that our approach achieves a balanced performance in terms of deployment speed, complexity, and RPKI integrity, providing a solid simulation technology foundation for large-scale BGP security defense strategies.

The Resource Public Key Infrastructure (RPKI): A Survey on Measurements and Future Prospects

The Resource Public Key Infrastructure (RPKI): A Survey on Measurements and Future Prospects

Development strategy of human resource competency in the preservation field

Background of the study: The Center for Preservation and Media Transfer of Library Materials of the National Library of Indonesia (PNRI) is also responsible for restoring various types of collections. It is necessary to increase and develop competence in handling these collections, considering the various conditions and types of library materials. Preservation of the physical and information needed to make the collection last longer. Purpose: To formulate the strategies for improving and developing the competence of preservation human resources in this unit. Findings: Based on the SWOT analysis, this unit is in quadrant I, meaning that it has great strengths and opportunities to improve and develop competencies. The recommended strategies are: a) facilitating staffs to gain knowledge through education, training, comparative studies, workshops and other conservation events, b) facilitating Preservation Human Resources certification, c) development of managerial and sociocultural competencies, for Head of Working Group, Sub Head of Working Group and staff who are also members of the facilitators/teachers, d) establish various preservation SOPs, e) work closely with the Education and Training Center to accommodate preservation staff training needs, f) create plans for improving and developing well-structured resources, g) sharing knowledge independently among preservation staff. h) Massive socialization of Preservation Performance Competency Standards (SKKNI) to preservation human resources, so that the standards can become a reference for preservation human resources in their work. Conclusion: Competency improvement and development is needed so that preservation activities at the National Library of Indonesia can run even better, so that they can be more beneficial in society.

Experts' Perspectives on Use of Fast Healthcare Interoperable Resources for Computerized Clinical Decision Support.

Barriers to improving the US healthcare system include a lack of interoperability across digital health information and delays in seeking preventative and recommended care. Interoperability can be seen as the lynch pin to reducing fragmentation and improving outcomes related to digital health systems. The prevailing standard for information exchange to enable interoperability is the Health Level Seven International Fast Healthcare Interoperable Resources standard. To better understand Fast Healthcare Interoperable Resources within the context of computerized clinical decision support expert interviews of health informaticists were conducted and used to create a modified force field analysis. Current barriers and future recommendations to scale adoption of Fast Healthcare Interoperable Resources were explored through qualitative analysis of expert interviews. Identified barriers included variation in electronic health record implementation, limited electronic health record vendor support, ontology variation, limited workforce knowledge, and testing limitations. Experts recommended research funders require Fast Healthcare Interoperable Resource usage, development of an "app store," incentives for clinical organizations and electronic health record vendors, and Fast Healthcare Interoperable Resource certification development.

Machine-learning-based device-independent certification of quantum networks

Witnessing nonclassical behavior is a crucial ingredient in quantum information processing. For that, one has to optimize the quantum features a given physical setup can give rise to, which is a hard computational task currently tackled with semidefinite programming, a method limited to linear objective functions and that becomes prohibitive as the complexity of the system grows. Here, we propose an alternative strategy, which exploits a feedforward artificial neural network to optimize the correlations compatible with arbitrary quantum networks. A remarkable step forward with respect to existing methods is that it deals with nonlinear optimization constraints and objective functions, being applicable to scenarios featuring independent sources and nonlinear entanglement witnesses. Furthermore, it offers a significant speedup in comparison with other approaches, thus allowing to explore previously inaccessible regimes. We also extend the use of the neural network to the experimental realm, a situation in which the statistics are unavoidably affected by imperfections, retrieving device-independent uncertainty estimates on Bell-like violations obtained with independent sources of entangled photon states. In this way, this work paves the way for the certification of quantum resources in networks of growing size and complexity.

Runtime Complexity Bounds Using Squeezers

Determining upper bounds on the time complexity of a program is a fundamental problem with a variety of applications, such as performance debugging, resource certification, and compile-time optimizations. Automated techniques for cost analysis excel at bounding the resource complexity of programs that use integer values and linear arithmetic. Unfortunately, they fall short when the complexity depends more intricately on the evolution of data during execution. In such cases, state-of-the-art analyzers have shown to produce loose bounds, or even no bound at all. We propose a novel technique that generalizes the common notion of recurrence relations based on ranking functions. Existing methods usually unfold one loop iteration and examine the resulting arithmetic relations between variables. These relations assist in establishing a recurrence that bounds the number of loop iterations. We propose a different approach, where we derive recurrences by comparing whole traces with whole traces of a lower rank, avoiding the need to analyze the complexity of intermediate states. We offer a set of global properties, defined with respect to whole traces, that facilitate such a comparison and show that these properties can be checked efficiently using a handful of local conditions. To this end, we adapt state squeezers , an induction mechanism previously used for verifying safety properties. We demonstrate that this technique encompasses the reasoning power of bounded unfolding, and more. We present some seemingly innocuous, yet intricate, examples that previous tools based on cost relations and control flow analysis fail to solve, and that our squeezer-powered approach succeeds.

Modeling of an internal educational resource certification system

The paper examines the results of a multi-year study to develop an internal certification system for blended and e-learning educational resources in higher education. The authors outline the requirements for internal certification system modeling as well as the characteristics of recent developments in the process of internal certification of educational resources, as permitted by university rules, which is related to the COVID-19 standards. The current model of the internal certification system for educational materials is described in this article, which is based on the approval of the pilot model of e-learning courses (hence — ELC) certification. Three mandatory expertise are the key components of the internal certification method (professional, resource and technical). The methodological commission decides on the quality of the ENC's educational resources and certification based on the findings. The benefits of using the current system of internal certification of ELC implementation are numerous, including the creation of high-quality educational resources, expanding access to educational content to various categories of participants in the educational process, ensuring individualization of the educational process based on the needs, characteristics, and capabilities of learners, and improving the quality of the educational process.

Innovative Human Resource Management in Georgian Public Schools

At the current stage of development of human resource management, the modern requirements for the school need to be constantly reformed and restructured, and it is also important to define the role of management in this area. Since the goals, objectives and content of school management are determined by the objective needs and requirements of the society, it is necessary to study them taking into account the current trends in the development of the educational institution. This is especially true in the face of the ever-increasing challenges facing the school and, consequently, the management of the learning process organized in it. Today, the human resource management of Georgian public schools needs to change its attitude towards goal-oriented methods, deviate from the traditional forms of its organization, change the subject-object relationship, and restructure the structure. Certification and upgrading of human resources in Georgian public schools requires significant changes in the practical activities of school administration. Insufficient theoretical elaboration of the problem of innovations in human resource management and the necessity of introducing innovations in management practice, made it necessary to introduce a modern trend of human capital management in modern public schools "Innovations in Modern School Management". Keywords: Innovation, certification, structure, methodology, restructuring.

Analysis of Types of Occupational Health and Safety Risk (K3) in Erection Work

Infrastructure Development Certification of Human Resources Deputy Building 3 is planned as one of the supporting facilities to improve the quality of human resources, especially in the environment Badan Siber dan Sandi Negara, Indonesia. The purpose of this study is to find out the results of the analysis of the types of risk of K3 in the erection work in Project Pembangunan Infrastruktur Sertifikasi SDM Badan Siber dan Sandi Negara and know the types of K3 risks that play the most role that occur in erection work in Project Pembangunan Infrastruktur Sertifikasi SDM Badan Siber dan Sandi Negara. Using the research method of the survey method that will be validated by K3 Experts. The survey results from the respondent questionnaire were processed using the SPSS (Statistical Package for Social Science). To analyze risk, use the result of multiplying the average opportunity value and the average impact value.

Implementasi BGP dan Resource Public Key Infrastructure menggunakan BIRD untuk Keamanan Routing

The validity of the routing advertisements sent by one router to another is essential for Internet connectivity. To perform routing exchanges between Autonomous Systems (AS) on the Internet, a protocol known as the Border Gateway Protocol (BGP) is used. One of the most common attacks on routers running BGP is prefix hijacking. This attack aims to disrupt connections between AS and divert routing to destinations that are not appropriate for crimes, such as fraud and data breach. One of the methods developed to prevent prefix hijacking is the Resource Public Key Infrastructure (RPKI). RPKI is a public key infrastructure (PKI) developed for BGP routing security on the Internet and can be used by routers to validate routing advertisements sent by their BGP peers. RPKI utilizes a digital certificate issued by the Certification Authority (CA) to validate the subnet in a routing advertisement. This study aims to implement BGP and RPKI using the Bird Internet Routing Daemon (BIRD). Simulation and implementation are carried out using the GNS3 simulator and a server that acts as the RPKI validator. Experiments were conducted using 4 AS, 7 routers, 1 server for BIRD, and 1 server for validators, and there were 26 invalid or unknown subnets advertised by 2 routers in the simulated topology. The experiment results show that the router can successfully validated the routing advertisement received from its BGP peer using RPKI. All invalid and unknown subnets are not forwarded to other routers in the AS where they are located such that route hijacking is prevented.

SD-BROV: An Enhanced BGP Hijacking Protection with Route Validation in Software-Defined eXchange

In global networks, Border Gateway Protocol (BGP) is widely used in exchanging routing information. While the original design of BGP did not focus on security protection against deliberate or accidental errors regarding to routing disruption, one of fundamental vulnerabilities in BGP is a lack of insurance in validating authority for announcing network layer reachability. Therefore, a distributed repository system known as Resource Public Key Infrastructure (RPKI) has been utilized to mitigate this issue. However, such a validation requires further deployment steps for Autonomous System (AS), and it might cause performance and compatibility problems in legacy network infrastructure. Nevertheless, with recent advancements in network innovation, some traditional networks are planning to be restructured with Software-Defined Networking (SDN) technology for gaining more benefits. By using SDN, Internet eXchange Point (IXP) is able to enhance its capability of management by applying softwarized control methods, acting as a Software-Defined eXchange (SDX) center to handle numerous advertisement adaptively. To use the SDN method to strengthen routing security of IXP, this paper proposed an alternative SDX development, SD-BROV, an SDX-based BGP Route Origin Validation mechanism that establishes a flexible route exchange scenario with RPKI validation. The validating application built in the SDN controller is capable of investigating received routing information. It aims to support hybrid SDN environments and help non-SDN BGP neighbors to get trusted routes and drop suspicious ones in transition. To verify proposed idea with emulated environment, the proof-of-concept development is deployed on an SDN testbed running over Research and Education Networks (RENs). During BGP hijacking experiment, the results show that developed SD-BROV is able to detect and stop legitimate traffic to be redirected by attacker, making approach to secure traffic forwarding on BGP routers.

Практика застосування ключових показників ефективності діяльності вищих органів аудиту країн Європи, США та Рахункової палати України

The international experience of performance indicators application by supreme audit institutions of European countries and the USA in their annual reports is investigated. In total, 267 indicators were identified, analyzed and grouped by areas of activity, in particular, audit activity (audit, conclusions and reports), recommendations, other activities, consequences and effects of work, relations with main stakeholders (with parliament, audit objects, other bodies, society, international community), human resources (personnel, training and certification), management and financial support. The areas of interaction with society and publicity of work, personnel management and audit activity are the most characterized by quantitative indicators areas, least of all interaction with audit objects and other activities of the body, except audit. Among the studied countries, fewer quantitative indicators were published in the reports of the Supreme Audit Institutions of Estonia, Slovakia and Croatia (less than 20 indicators), most of the aspects of activity were quantitatively assessed in the reports of the Supreme Audit Institutions of the UK, Czech Republic and Poland (65 – 80 indicators). The Accounting Chamber in 2020 in terms of the number of indicators in this comparative analysis ranked second (published 75 indicators). Over the eight years analyzed, this number increased significantly, but there is still no indicators for some areas of work, such as international activities and interaction with audited entities. It was also determined that the selection of indicators presented in the reports of the Accounting Chamber lacks consistency, the practice of disclosing some important performance indicators has ceased. Based on the analysis of international practice and the experience of the Accounting Chamber, a system of indicators advisable to characterize its work is proposed. Proposed 55 groups of indicators characterize all areas of activity and correspond to the best international practice and approaches of the supreme audit institutions performance measuring framework (SAI PMF), which is used in the strategic planning of the Accounting Chamber.

Research on improved scheme of resource public key infrastructure data synchronization

Research on improved scheme of resource public key infrastructure data synchronization

Inventory and certification of forestry resources in the carpathian macroregion

The author of the article proposes his own principles of organizing the process of inventory and certification of forest lands in the forestry of the Carpathian macroregion. It is a question of carrying out these actions without departmental intervention, involvement of navigation devices and equipment, restriction of intervention of the human factor, borrowing of experience of certification of the highly developed EU countries. In addition, the study substantiates the need to change the current structure of forestry lands by increasing the area of recreational, protective and conservation forests.

Аналіз захищеності інтернет-вузлів від кібератак типу «перехоплення маршруту»

Cyberattacks on global routing on the global computer network Internet (route hijack, route leak) lead to large-scale consequences with violation of data integrity, availability and confidentiality during the process of internetwork data exchange. Threats to BGP-4 routing protocol can’t be fully mitigated neither in short-term nor in long term. None of proposed and partially implemented upgrades and add-ons like Mutually Agreed Norms for Routing Security (MANRS) and Resource Public Key Infrastructure (RPKI) can not deliver reliable protection against those types of attacks.Recent information security and data protection technics are based on risk management. A new risk-oriented approach to improving the topology of network interconnections in order to increase the security of internetwork data exchange is described. The new approach is based on applying new topology-related metrics to the Internet nodes, that is autonomous systems (AS). The criterion for the effectiveness of the topology against attacks on global routing is risk assessment as a measure of information security.Assessing the risks of route hijack requires quantitative measurement of the impact of an attack e.g. the scope of routing distortion. The risk for risk owner of hijacking hist route on a particular node in the network depends on the distance between the AS. Close nodes have more trust, so the first proposed metrics is called trust metrics. A kind of node centrality or significance is considered because it affects the losses estimation. Such significance derives from the number of network prefixes (i.e subnets) which receive routing announces through this particular node. Ranking nodes by this metrics requires methods for retrieving and processing routing tables. In this paper we describe the sources, methods of processing, and examine several ASes from Ukrainian segment of the Internet on the significance metrics. Well-known Internet exchanges of Ukraine, and then all large telco operators appeared to be the most significant Internet nodes. This demonstrates the adequacy of the represented methodology. Tabl.: 1. Fig.: 3. Refs: 9 titles.

ROAchain: Securing Route Origin Authorization With Blockchain for Inter-Domain Routing

The inter-domain routing with BGP is highly vulnerable to malicious attacks, due to the lack of a secure means of verifying authenticity and legitimacy of inter-domain routes. Resource Public Key Infrastructure (RPKI) is a new security infrastructure to prevent the most devastating prefix hijacks in BGP by maintaining a Route Origin Authorization (ROA) repository. However, RPKI is a centralized hierarchical architecture that may empower the centralized authorities to unilaterally revoke or compromise any IP prefixes under their control. To eliminate the risks of RPKI, we present ROAchain, a novel BGP security infrastructure based on blockchain. Different from RPKI, ROAchain is a decentralized architecture, in which each AS maintains a globally consistent and tamper-proof ROA repository, authenticating the legitimacy of route origin and preventing BGP prefix hijacks. To ensure the strong consistency, scalability, and security of ROAchain, a novel consensus algorithm is proposed, in which the credence value, collective signing, sharding, and a penalty mechanism are introduced. Moreover, a compatibility design is proposed without changing the current BGP protocol. Finally, ROAchain is implemented in Golang and validated on the Google Cloud.

Design and Implementation of InBlock—A Distributed IP Address Registration System

The current mechanism to secure Border Gateway Protocol relies on the resource public key infrastructure (RPKI) for route origin authorization. The RPKI implements a hierarchical model that intrinsically makes lower layers in the hierarchy susceptible to errors and abuses from entities placed in higher layers. In this article, we present InBlock, a distributed autonomous organization that provides decentralized management of IP addresses based on blockchain, embedding an alternative trust model to the hierarchical one currently implemented by the RPKI. By leveraging on blockchain technology, InBlock requires consensus among the involved parties to change existent prefix allocation information. InBlock also fulfills the same objectives as the current IP address allocation system, i.e., uniqueness, fairness, conservation, aggregation, registration, and minimized overhead. InBlock is implemented as a set of blockchain smart contracts in Ethereum, performing all the functions needed for the management of a global pool of addresses without human intervention. Any entity may request an allocation of addresses to the InBlock registry by solely performing a (crypto) currency transfer to the InBlock. We describe our InBlock implementation and we perform several experiments to show that it enables fast address registering and incurs in very low management costs.

Geo Information Technologies as a Tool for Managing Tourism Resources

Today, the process of developing tourist destinations is possible only by using modern spatial planning tools for tourism market entities. To carry out this in the power of geographic information technologies, which are actively being implemented in all spheres of our life, including in tourism. For a real assessment of the recreational potential of the region, which has unique natural, historical and cultural potential, it is necessary to create geographic information systems (GIS), which reflect in the same way all the rest necessary for implementation in tourism products, infrastructure. Simple sites of travel agencies, service sectors, paper maps, guides and other well-known materials are not capable of flexibility and, most importantly, quickly respond to changes, innovations. These factors are especially valuable when studying the potential of the territory, for the compilation of tourism products of different levels of service. This approach can guarantee the development of tourism in any territory. Moreover, make a forecast for long-term targeted programs in the development of tourism. Geo information technologies are able to not only generate demand, but also indicate investment vectors for territorial development in order to turn it into a tourist destination. The article considers the issues of geographic information support in the goals of tourism development using the example of a small mountainous regions of the Republic of Armenia. The experience of certification of resources for tourism is considered.

Reexamining the demand for HR certification in the United States

AbstractGiven the addition of new Human Resources (HR) certification offerings by the Society for Human Resource Management and the increase in HR certifications being awarded by the HR Certification Institute, it is necessary to investigate the current rate of demand for HR certification and explore practical implications for those within the field. The current study analyzed over 5,300 HR job announcements and found 20.7% demanded (preferred and/or required) HR certification with more requiring HR certification than before. Additionally, HR certification demand was positively related to salary, experience, education level, and job title with demand reaching 33.7% for managerial HR roles.

Feasibility Review and Improvement of Circulation Resource Certification System of Foreign Substance Standards - Focused on of Tire-Derived-Steel -

Feasibility Review and Improvement of Circulation Resource Certification System of Foreign Substance Standards - Focused on of Tire-Derived-Steel -