Security Services Research Articles

The Security Service of Ukraine’s counteraction to criminal offences at critical infrastructure facilities: organisational aspect

The article is devoted to the theoretical foundations of organisation and management of the process of countering criminal offences by the Security Service of Ukraine at critical infrastructure facilities. Modern technological systems and their parts related to critical infrastructure facilities are subject to unlawful encroachments. The negative dynamics of the level of threats and losses from criminal attacks on these objects requires solving existing problems, and therefore consideration of issues related to solving existing problems becomes relevant for scientists. The main purpose of the article was to study and solve the problem of organising and managing the process of countering criminal offences by the Security Service of Ukraine at critical infrastructure facilities. The methodological tools of the scientific research were based on theoretical methods of scientific knowledge; analysis and synthesis, logical and generalisation methods. Based on the results of the study, the article substantiates that an effective process of implementing organisational and managerial functions is a crucial element of organisational and tactical activities in the system of protection against criminal offences against critical infrastructure facilities and will contribute to achieving the goal of influencing the determinants of criminal offences at critical infrastructure facilities, while emphasising the importance of interaction with other governmental authorities, private enterprises and international partners. In this regard, the ways of solving the problems are proposed, in particular, the definition of the concept and content of the organisational system of the Security Service of Ukraine’s response to criminal offences at critical infrastructure facilities. In addition, the correlation between the concepts of “organisation” and “management” is determined, and their essence and significance are revealed. Taking into account the results of the study, the article identifies the directions for further scientific research, development of the problems of criminal law aspects of the Security Service of Ukraine’s counteraction to criminal offences at critical infrastructure facilities, as well as the essence and content of special management functions.

A Study on the Scope of Personal Protection Services in the Security Services Industry Act from the Criminal Perspective

A Study on the Scope of Personal Protection Services in the Security Services Industry Act from the Criminal Perspective

Coordination of counter-terrorism actors, whose activities are directed by the Ministry of Internal Affairs of Ukraine within its powers

Currently, Ukraine has been constantly struggling with hybrid threats, especially terrorism, which arose as a result of the Russian Federation’s aggression. The problematic issue of organising and counteracting such a phenomenon as a terrorist act requires special attention, as the inability of key public authorities responsible for detecting and suppressing these criminal acts to apply organisational and managerial decisions correctly does not allow minimising them. Therefore, there is no doubt that the effectiveness of countering such threats depends on the activities of the Interagency Coordination Commission of the Anti-Terrorist Centre of the Security Service of Ukraine, which, for its part, regulates the conduct of measures to identify and eliminate the causes and conditions of terrorist acts and other crimes committed for terrorist purposes, since the tactics of combating this crime are formed, in particular, by conducting certain activities by officers of the National Police of Ukraine, the National Guard of Ukraine, the State Border Guard Service of Ukraine, and the State Border Guard Service of Ukraine. These bodies are interdependent in fulfilling their tasks in the fight against terrorism, which has recently been spreading across the entire territory of our country and leaving traces in the form of destroyed infrastructure and civilian deaths. The latest ideas on the development of organisational and managerial measures, including special operations or measures aimed at the rapid termination of terrorist acts, play a priority role. The article examines the gaps in the legislation and proposes to consider amending it. Such amendments will help to increase the level of coordination of counter-terrorism actors, which are part of the Interagency Coordination Commission of the Anti-Terrorist Centre under the Security Service of Ukraine and whose activities are directed by the Minister of Internal Affairs of Ukraine, in order to improve the prevention of terrorist activities, their detection, suppression and minimisation of their consequences. A properly constructed model can be used in the future and demonstrate a high and positive result in countering terrorism in Ukraine.

Documentation of crimes against cultural heritage of Ukraine: main projects and initiatives with the support of civil society

The article analyzes the projects initiated and implemented by the public, related to the documentation of crimes against the national cultural heritage (NCH) of Ukraine in the conditions of a full-scale Russian invasion. It is noted that the activity of public organizations in documenting crimes against the Ukrainian National Security Service is conditioned by the need to form a single database of crime records of the Russian Federation, which will allow solving a number of issues that will become urgent after the end of hostilities. The classification of motives for crimes against cultural values in conditions of armed conflict is presented; the ways of accounting for cultural heritage and the principles of documenting damage to cultural heritage are outlined. It is emphasized that there is no National Blue Shield Committee in Ukraine, which is being created with the support of the Blue Shield International (BSI) by the decision of four other committees: the International Council of Museums (ICOM), the International Council for the Protection of Monuments and Historic Sites (ICOMOS), International Federation of Library Associations and Institutions (IFLA). Within the scope of the powers of the official representative of the International Federation of Library Associations and Institutions in Ukraine, the NPA "Ukrainian Library Association", together with the official representative in Ukraine of the International Archives Committee, the State Archives Service of Ukraine, once again raised the issue of the creation of the Committee and joined the development of its charter. And although the creation of such a representation in Ukraine does not guarantee protection from Russian vandalism, the international experience of involving non-governmental organizations, representatives of authorities, cultural heritage protection bodies, the State Emergency Service, the National Police, and the Prosecutor's Office in the mission to assess the damage to the NCH in the conditions of the Russian-Ukrainian war will enable in the future, to achieve fair decisions on the implementation of the Hague Convention and to receive funding for the restoration of cultural values.

Computer Attacks and Their Impact on the Security of Servers with Linux Operating System of Local Government Entities

This research aims to determine the incidence of computer attacks on servers with the Linux operating system of local government entities. The study is limited to the decentralized autonomous government (GAD) of the Ecuadorian Amazon. Initially, the most common computer attacks that have affected organizations in recent years were determined using statistical reports from important computer security companies positioned as leaders in Gartner’s magic quadrant. Phishing and distributed denial of service (DDoS) attacks are established as computer attacks under study. Computer attacks are carried out before and after mitigation measures are established. With the help of the information systems risk analysis and management methodology (MAGERIT), the vulnerability, level of impact, and risk computer attacks cause on servers with the Linux operating system are determined. This research aims to serve as a guide to the information technology departments of local governments in implementing mechanisms that safeguard the most important asset of an organization, such as information. Keywords: computer attack, phishing, DDoS, MAGERIT, Linux. Resumen La presente investigación tiene como finalidad determinar la incidencia de los ataques informáticos en los servidores con sistema operativo Linux de entidades de gobierno local. El estudio está delimitado a un gobierno autónomo descentralizado (GAD) de la Amazonía ecuatoriana. Inicialmente se determina los ataques informáticos más comunes que han afectado a las organizaciones en los últimos años haciendo uso de reportes estadísticos de importantes empresas de seguridad informática posicionadas como líderes en el cuadrante mágico de Gartner. Se establece como ataques informáticos objeto de estudio los ataques de phishing y de denegación de servicio distribuido (DDoS). Se realizan ataques informáticos antes y después de establecer las medidas de mitigación y con la ayuda de la metodología de análisis y gestión de riesgos de los sistemas de información (MAGERIT) se determina la vulnerabilidad, el nivel de impacto y el riesgo que los ataques informáticos provocaban en los servidores con sistema operativo Linux. El presente trabajo de investigación pretende ser de gran utilidad y servir de guía a los departamentos de tecnologías de la información de gobiernos locales en la implementación de mecanismos que salvaguarden el activo más importante de una organización como lo es la información. Palabras Clave: ataque informático, phishing, ddos, magerit, linux.

Designing A Blockchain-Empowered Telehealth Artifact for Decentralized Identity Management and Trustworthy Communication: Interdisciplinary Approach.

Telehealth played a critical role during the COVID-19 pandemic and continues to function as an essential component of health care. Existing platforms cannot ensure privacy and prevent cyberattacks. The main objectives of this study are to understand existing cybersecurity issues in identity management and trustworthy communication processes in telehealth platforms and to design a software architecture integrated with blockchain to improve security and trustworthiness with acceptable performance. We improved personal information security in existing telehealth platforms by adopting an innovative interdisciplinary approach combining design science, social science, and computer science in the health care domain, with prototype implementation. We used the design science research methodology to implement our overall design. We innovated over existing telehealth platforms with blockchain integration that improves health care delivery services in terms of security, privacy, and efficiency. We adopted a user-centric design approach and started with user requirement collection, followed by system functionality development. Overall system implementation facilitates user requirements, thus promoting user behavior for the adoption of the telehealth platform with decentralized identity management and an access control mechanism. Our investigation identified key challenges to identity management and trustworthy communication processes in telehealth platforms used in the current health care domain. By adopting distributed ledger technology, we proposed a decentralized telehealth platform to support identity management and a trustworthy communication process. Our design and prototype implementation using a smart contract-driven telehealth platform to provide decentralized identity management and trustworthy communication with token-based access control addressed several security challenges. This was substantiated by testing with 10,000 simulated transactions across 5 peers in the Rahasak blockchain network. The proposed design provides resistance to common attacks while maintaining a linear time overhead, demonstrating improved security and efficiency in telehealth services. We evaluated the performance in terms of transaction throughput, smart contract execution time, and block generation time. To create a block with 10,000 transactions, it takes 8 seconds on average, which is an acceptable overhead for blockchain-based applications. We identified technical limitations in current telehealth platforms. We presented several design innovations using blockchain to prototype a system. We also presented the implementation details of a unique distributed architecture for a trustworthy communication system. We illustrated how this design can overcome privacy, security, and scalability limitations. Moreover, we illustrated how improving these factors sets the stage for improving and standardizing the application and for the wide adoption of blockchain-enabled telehealth platforms.

Investigation of Spatiotemporal Changes and Impact Factors of Trade-Off Intensity in Cultivated Land Multifunctionality in the Min River Basin

Exploring the interrelationships and influencing factors of the multifunctionality of cultivated land is crucial for achieving its multifunctional protection and sustainable use. In this paper, we take the Min River basin as a case study to construct a multifunctional evaluation system based on “agricultural production, social security, ecological service, and cultural landscape” using multi-source data. We analyze the spatial and temporal characteristics of the multifunctionality of cultivated land through kernel density estimation (KDE) and visual mapping. Subsequently, we assess the trade-off strength between the multifunctional aspects of cultivated land using the root mean square error (RMSD). Finally, we identify the drivers of the multifunctional trade-off intensity of cultivated land and analyze their influencing mechanisms using Geographic Detectors. The results show that (1) from 2010 to 2020, the multifunctional structure of cultivated land in the study area underwent significant changes: the levels of agricultural production, social security, and ecological service functions first increased and then decreased, while the levels of cultural landscape function and comprehensive function continued to increase. The spatial distribution is characterized, respectively, by “high in the east and low in the west”, “high in the west and low in the east”, “high in the north and low in the south”, “high in the whole and sporadically low in the northeast”, and “high in the middle and low in the surroundings”. (2) During the study period, the trade-off strengths related to social security functions increased, while the trade-off strengths of the remaining multifunctional pairs of cultivated land showed a weakening trend, with high values of trade-off strengths among functions particularly prominent in the Nanping Municipal District. (3) Both natural and human factors significantly affect the multifunctional trade-off strength of cultivated land. Among the specific factors, elevation, slope, average annual temperature, and per capita GDP are the key factors influencing the strength of the trade-offs between functions. The results of this study provide empirical support for enriching the understanding of the multifunctionality of cultivated land and offer a decision-making basis for promoting the differentiated management of cultivated land resources and the synergistic development of its multifunctionality.

Location Privacy Protection for the Internet of Things with Edge Computing Based on Clustering K-Anonymity.

With the development of the Internet of Things (IoT) and edge computing, more and more devices, such as sensor nodes and intelligent automated guided vehicles (AGVs), can serve as edge devices to provide Location-Based Services (LBS) through the IoT. As the number of applications increases, there is an abundance of sensitive information in the communication process, pushing the focus of privacy protection towards the communication process and edge devices. The challenge lies in the fact that most traditional location privacy protection algorithms are not suited for the IoT with edge computing, as they primarily focus on the security of remote servers. To enhance the capability of location privacy protection, this paper proposes a novel K-anonymity algorithm based on clustering. This novel algorithm incorporates a scheme that flexibly combines real and virtual locations based on the requirements of applications. Simulation results demonstrate that the proposed algorithm significantly improves location privacy protection for the IoT with edge computing. When compared to traditional K-anonymity algorithms, the proposed algorithm further enhances the security of location privacy by expanding the potential region in which the real node may be located, thereby limiting the effectiveness of "narrow-region" attacks.

Preperation of KGB agent for intelligence task and evaluation of their activity

The activities of KGB agents are still of great public interest. People are particularly concerned about the names behind the aliases of those who agreed to cooperate with the Soviet security services. They are less interested in the circumstances under which these individuals became KGB agents, the objectives and functions they were supposed to fulfil and what they actually did. The level of cooperation with the KGB varied: some worked enthusiastically, out of ideological motives, others only under duress. The actual activities of agents determine the extent of their liability. Of course, the mere fact of agreeing to cooperate with the KGB does not contribute positively to the biography, because it is a personal choice. So behind the aliases are extraordinary stories of people.

Estimated prevalence of obstructive sleep apnea by occupation and industry in England: a descriptive study.

Obstructive sleep apnea (OSA) can induce excessive sleepiness, causing work-related injuries and low productivity. Most individuals with OSA in the United Kingdom are undiagnosed, and thus, theoretically, workplace screening, might by identifying these individuals improve both their individual health and overall productivity. However, the prevalence of OSA in different workplaces is unclear. This study aimed to estimate the prevalence of OSA by industries and occupations in England. The Health Survey for England 2019 dataset was combined with Sleep Heart Health Study dataset. We applied multiple imputation for the combined dataset to estimate OSA in the English population aged 40-64. We estimated the pooled prevalence of OSA by both industry and occupation by separating samples by Standard Industry Classification and Standard Occupation Classification. The overall OSA prevalence estimated by imputation for ages 40-64 was 17.8% (95% CI=15.9% to 19.9%). Separating those samples into industrial/occupational groups, the estimated prevalence of OSA varied widely by industry/occupation. Descriptive analysis revealed that the estimated prevalence of OSA was relatively higher in the Accommodation and food, Public administration and defence; compulsory social security, Construction industries, and Protective service occupations, health and social care associate professionals, and skilled construction and building trades occupations. In England in 2019, Accommodation and food, Public administration and defence; compulsory social security, Construction industries, and Protective service occupations, health and social care associate professionals, and skilled construction and building trades occupations showed a relatively higher prevalence of OSA indicating that they may be target populations for workplace screening.

Challenges and Prospects of Social Security Services for Small Industry Laborers in District Bahawalpur

Social security provisions constitute a fundamental element of a welfare state. These benefits safeguard the rights of the working class by offering financial assistance to meet necessities. The efficiency of laborers in industrial settings positively correlates with the availability of social security benefits. The increased endowment of these services enhances the laborers' capacity to perform effectively within factories. The Punjab Small Industries Corporation in Bahawalpur was established to generate employment opportunities for individuals and to augment the production of various goods. It has been estimated that three thousand nine hundred sixty-three laborers are currently employed in these industries. This research study investigates the actual circumstances and challenges laborers face concerning their social security entitlements. A sample of 198 participants was obtained utilizing a proportionate random sampling methodology. During the data collection phase, 177 laborers were present. The interview schedule was meticulously crafted to incorporate open-ended and closed-ended questions as a research tool. This study reveals that laborers engaged in small industries within the Punjab region, specifically in Bahawalpur, possess an awareness of the social security services offered by numerous organizations. However, the laborers also indicated that the process of accessing social security services is exceedingly intricate and that the quality of these services is inadequate. Consequently, the laborers expressed reluctance to utilize social security services due to the substandard nature of the services provided. Therefore, it is recommended that measures be implemented to address the issues related to procedural delays in the delivery of social security benefits to laborers. This would enable laborers to experience satisfaction and concentrate fully on their occupational responsibilities.

Table of life for beneficiaries of the Institute of Security and Social Services of State Workers (ISSSTE), Mexico 2021.

Determine the life expectancy in the covered population of the Institute of Security and Social Services of State Workers in México for 2021. We used the abrogated method from Reed-Merrel, for calculate the life expectancy in age groups. By 2021, life expectancy general was 79.51 years; 81.40 years and 78.91 years for woman and men, respectively. The calculated life expectancy not show a reduction in the population of federal and State employees in Mexico.

Valuation of Food Security and Cultural Landscape Services for Paddy Ecosystems in Developing Countries: A Case Study in Hongthai, Vietnam

In recent times, the assessment of ecosystem services has gained increased importance, as the disappearance of numerous ecosystems worldwide directly impact human well-being and the quality of the living environment, especially in developing countries where many environmental issues are increasingly concerned. The study was conducted to evaluate eco-services in terms of food security and cultural landscape services in Hongthai, Vietnam, by using a questionnaire survey to collect the market price, travel cost, and willingness to pay from the travelers and farmers. The results of the evaluation show that the total value of paddy eco-services in Hongthai is about 579,585.1 USD, with a use-value of 94,50.5 USD (29,146.9 USD of food security value, 65,353.6 of tourist landscape value); the non-use value is 485,084.6 USD (46,223.9 USD of option value; 61,549.0 USD of value left; 377,311.7 USD of value exists). To effectively exploit and use these ecosystem services, local government needs to propagate and raise awareness in maintaining, preserving, and promoting cultural and traditional values inherent in farming, providing tourist services to meet market needs, and providing paddy ecosystem services. Based on the findings, this study proposes some policy implications for Vietnam and similar low-living provinces in developing countries, helping them promote poverty reduction methods and develop sustainable tourism based on paddy ecosystem services.

Radio Okapi online newspapers: Between media framing, conflict and peacebuilding

United Nations Peacekeeping Operations (UNPKOs) have incorporated a Public Information (PI) component to communicate with the public. This component has shifted from public outreach towards media reports on current events, including violent incidents. Few studies have assessed the contribution of the PI components of UN-led media. This article assesses the framing of Radio Okapi (RO) online newspaper articles to understand RO’s contribution to peacebuilding processes in the Eastern Democratic Republic of Congo (DRC), an ethnically highly polarized region where many sites are difficult to access. By analysing how RO reports on violent incidents in this region, the study identifies some shortfalls in RO’s PI role. Its framing of reporting can obscure the causes of conflict, for example, by equating ethnic communities with their armed actors and giving secondary importance to the direct victims of armed violence. Moreover, much RO reporting relies on uncorroborated and questionable sources of information, mostly provided by security services. Its framing is unlikely to contribute to sustainable peacebuilding processes and thus does not meet the PI aspirations of UNPKOs. This article suggests that journalists should be empowered with background skills and knowledge relevant to peace journalism, framing news reports in ways that help tackle the root causes and drivers of violent conflict.

Tajna współpraca ze Służbą Bezpieczeństwa: szkic teoretyczny

Przedmiotem artykułu jest tajna współpraca informatorów z peerelowską Służbą Bezpieczeństwa, którą analizuję pod kątem teoretycznego modelowania. Proponuję definicję współpracy opartą na trzech kategoriach (utajnianie działań, zdrada, asymetria relacji), relacyjne rozumienie tajności oraz perspektywę teoretyczną zakorzenioną głównie w mikrosocjologii Georga Simmla (tajność w układzie diady i triady), Randalla Collinsa (rytuał interakcyjny) oraz Ervinga Goffmana (interakcja strategiczna). Rozwijam tezy wskazujące na napięcia wynikające z tworzenia pozorowanej bliskości i generowania energii emocjonalnej oraz z wypracowywania przewagi w relacji między tajnym współpracownikiem a funkcjonariuszem SB. Opisuję pola, na których dochodzi do gry o stworzenie przewagi: wymiar poznawczy, władzy, emocjonalny oraz dziur strukturalny. Rozważam także modelowe sytuacje nieudanej tajnej współpracy, jak również potencjał typologiczny informatorów na podstawie zaproponowanych kategorii.

Balancing National Security and Privacy: Examining the Use of Commercially Available Information in OSINT Practices

Open source intelligence (OSINT) researchers utilize specialized tools to access vast amounts of data from multiple sources simultaneously. These tools, equipped with (paid) modules, allow users to tap into aggregated data sets containing commercially available information, such as location data from mobile phone users. The utilization of commercially available information from OSINT tools by intelligence and security services impacts fundamental rights and freedoms; more specifically, the right to personal data protection. Drawing from prior experience working on this topic within a Dutch oversight committee on the intelligence and security services and international developments in OSINT practice, insights are provided on this new OSINT practice and the responses of oversight authorities. Rather than advocating for a categorical ban, a more refined approach to process commercially available information from OSINT tools is suggested. Building on the work of a Dutch oversight authority and the work of the U.S. Office of the Director of National Intelligence, four recommendations are provided to intelligence and security services to responsibly handle commercially available information in OSINT practices.

Countermeasures by the Security Service of Ukraine against criminal offenses at critical infrastructure facilities: concepts and content

Countermeasures by the Security Service of Ukraine against criminal offenses at critical infrastructure facilities: concepts and content

Risk factor profile for non-communicable diseases: findings of a STEPS survey among the support staff at the University of Pretoria, South Africa

Background: Non-communicable diseases (NCDs) are an important problem in South Africa; they account for 60% of all deaths. Early screening could help lower NCD incidences and long-term consequences. Objective: The study aimed to profile NCD risk factors among insourced support staff at the University of Pretoria in 2018. Design: A cross-sectional, descriptive study was conducted at the University of Pretoria, Hatfield Campus. The World Health Organization (WHO) STEPwise approach to chronic disease risk factor surveillance (STEPS) questionnaire was administered to collect data in three steps. The participants’ behavioural risk profiles were gathered using the face-to-face interview technique (STEP I), followed by their physical risk profile using anthropometric and blood pressure measurements (STEP II). Last was the biochemical risk profile, including finger-prick blood glucose and cholesterol measurement (STEP III). Data were analysed using Epi-Info, version 3.54. Subjects: A convenient sample of participants aged 18–64 years from the Departments of Industrial Hygiene and Building Services, Landscape Services, Sports Fields Management, and Security Services (n = 146, 60% were females) took part in the study. Results: Most participants (97.8%) had low daily fruit and vegetable intake. Some 80% of the study population always or often added salt to their food when cooking. Daily alcohol consumption was reported by a quarter of the sample. More than two-thirds of all the participants were overweight or obese and 61% had central obesity. Conclusion: The study identified a high prevalence of several NCD risk factors. Tailored nutrition education and monitoring are needed to lower the elevated risk.

The Role of State Security in Immigration Service

This study enhances the understanding of the function of state security in immigration services. The perspective of state security in national development offers a solution to the current reality of implementing public policy in immigration, which requires a transformation through a more suitable and ideal approach for each immigration officer. One aspect of this study involves strengthening an in-depth interpretation to address and understand the evolving policies, aiming to achieve complex policy objectives. This phenomenon is closely related to the fact that current government policies tend to focus on public services that prioritize public satisfaction. While community demands are urgent for the Indonesian government, implementing public services in the field of immigration involves different dimensional aspects compared to other public services. The main reason is that current immigration issues are becoming increasingly complex, necessitating the adaptation of new approaches. It is crucial to manage the complexity and diversity of factors involved in the immigration service policy process, particularly concerning state security in travel document/passport services, immigration documents, and examinations at immigration checkpoints at state borders.

Vulnerability extraction and prediction method based on improved information gain algorithm.

More and more attention has been paid to computer security, and its vulnerabilities urgently need more sensitive solutions. Due to the incomplete data of most vulnerability libraries, it is difficult to obtain pre-permission and post-permission of vulnerabilities, and construct vulnerability exploitation chains, so it cannot to respond to vulnerabilities in time. Therefore, a vulnerability extraction and prediction method based on improved information gain algorithm is proposed. Considering the accuracy and response speed of deep neural network, deep neural network is adopted as the basic framework. The Dropout method effectively reduces overfitting in the case of incomplete data, thus improving the ability to extract and predict vulnerabilities. These experiments confirmed that the excellent F1 and Recall of the improved method reached 0.972 and 0.968, respectively. Compared to the function fingerprints vulnerability detection method and K-nearest neighbor algorithm, the convergence is better. Its response time is 0.12 seconds, which is excellent. To ensure the reliability and validity of the proposed method in the face of missing data, the reliability and validity of Mask test are verified. The false negative rate was 0.3% and the false positive rate was 0.6%. The prediction accuracy of this method for existing permissions reached 97.9%, and it can adapt to the development of permissions more actively, so as to deal with practical challenges. In this way, companies can detect and discover vulnerabilities earlier. In security repair, this method can effectively improve the repair speed and reduce the response time. The prediction accuracy of post-existence permission reaches 96.8%, indicating that this method can significantly improve the speed and efficiency of vulnerability response, and strengthen the understanding and construction of vulnerability exploitation chain. The prediction of the posterior permission can reduce the attack surface of the vulnerability, thus reducing the risk of breach, speeding up the detection of the vulnerability, and ensuring the timely implementation of security measures. This model can be applied to public network security and application security scenarios in the field of computer security, as well as personal computer security and enterprise cloud server security. In addition, the model can also be used to analyze attack paths and security gaps after security accidents. However, the prediction of post-permissions is susceptible to dynamic environments and relies heavily on the updated guidance of security policy rules. This method can improve the accuracy of vulnerability extraction and prediction, quickly identify and respond to security vulnerabilities, shorten the window period of vulnerability exploitation, effectively reduce security risks, and improve the overall network security defense capability. Through the application of this model, the occurrence frequency of security vulnerability time is reduced effectively, and the repair time of vulnerability is shortened.