Security Architecture Research Articles

Role of Identity and Access Management in Zero Trust Architecture for Cloud Security: Challenges and Solutions

Role of Identity and Access Management in Zero Trust Architecture for Cloud Security: Challenges and Solutions

A high performance hybrid LSTM CNN secure architecture for IoT environments using deep learning

The growing use of IoT has brought enormous safety issues that constantly demand stronger hide from increasing risks of intrusions. This paper proposes an Advanced LSTM-CNN Secure Framework to optimize real-time intrusion detection in the IoT context. It adds LSTM layers, which allow for temporal dependencies to be learned, and CNN layers to decompose spatial features which makes this model efficient in identifying threats. It is important to note that the used BoT-IoT dataset involves various cyber attack typologies like DDoS, botnet, reconnaissance, and data exfiltration. These outcomes present that the proposed LSTM-CNN model has 99.87% accuracy, 99.89% precision, and 99.85% recall with a low false positive rate of 0.13% and exceeds CNN, RNN, Standard LSTM, BiLSTM, GRU deep learning models. In addition, the model has 90.2% accuracy in conditions of adversarial attack proving that the model is robust and can be used for practical purposes. Based on feature importance analysis using SHAP, the work finds that packet size, connection duration, and protocol type should be the possible indicators for threat detection. These outcomes suggest that the Hybrid LSTM-CNN model could be useful in improving the security of IoT devices to provide increased reliability with low false alarm rates.

Power Dynamics and Security Dilemma: Untangling Complexities in the Black Sea Region

This article delves into the security dilemma within the Black Sea region from Russia’s annexation of Crimea in 2014 to the ongoing war in Ukraine. Using a qualitative methodology, the study combines empirical data from NATO military strategies, Russian hybrid warfare tactics, and the geopolitical dynamics of energy security with theoretical insights. Through a detailed examination of primary sources (e.g., NATO documents, Russian government statements) and secondary literature, the research reveals how NATO’s defensive actions—military exercises and strategic deployments—are perceived as offensive provocations by Russia, while Russia’s cyberattacks, disinformation, and energy leverage are seen as existential threats by NATO. The study shows that the evolving security dilemma in the Black Sea is no longer driven solely by military postures but is increasingly shaped by hybrid warfare and energy geopolitics, where economic and informational power have become central to strategic competition. This research offers a fresh perspective on the intersection of military strategy, hybrid tactics, and energy security in the Black Sea, providing new insights into how these factors intensify the security dilemma and reshape the region’s security architecture.

Addressing security vulnerabilities in autonomous vehicles through resilient frameworks and robust cyber defense systems

The rapid advancement of autonomous vehicle (AV) technology has introduced significant security vulnerabilities that pose risks to passenger safety, system integrity, and public trust. This paper investigates the critical security challenges facing AVs, including sensor spoofing, GPS jamming, adversarial machine learning attacks, and communication network breaches. Through an extensive review of recent cyber threats, the study highlights the increasing sophistication of cyber-attacks targeting AV ecosystems and the potential consequences of security breaches. To address these vulnerabilities, the paper explores the implementation of resilient frameworks and robust cyber defense systems. Specifically, it examines the role of artificial intelligence-driven anomaly detection, blockchain-based secure communication, encryption techniques, and intrusion detection and prevention systems in mitigating security risks. Additionally, it evaluates the effectiveness of cybersecurity-by-design approaches, emphasizing proactive security measures in AV development.Key findings indicate that a multi-layered security approach integrating real-time threat detection, automated response mechanisms, and continuous system monitoring is essential for enhancing AV resilience. Furthermore, collaboration between industry stakeholders, policymakers, and cybersecurity experts is crucial in developing standardized security protocols and regulatory frameworks. The study underscores the necessity of adopting an adaptive and resilient security architecture to safeguard AVs against evolving cyber threats. By implementing robust cyber defense mechanisms and fostering a security-conscious AV ecosystem, the risks associated with autonomous vehicle operations can be significantly reduced, ensuring safer and more reliable transportation systems. Keywords: Autonomous Vehicles, Cybersecurity, Security Vulnerabilities, Resilient Frameworks, Cyber Defense Mechanisms, Machine Learning Security, AI-driven Automation, Vehicle-to-Vehicle Communication.

Scalable Container-Based Time Synchronization for Smart Grid Data Center Networks

The integration of edge-to-cloud infrastructures in smart grid (SG) data center networks requires scalable, efficient, and secure architecture. Traditional server-based SG data center architectures face high computational loads and delays. To address this problem, a lightweight data center network (DCN) with low-cost, and fast-converging optimization is required. This paper introduces a container-based time synchronization model (CTSM) within a spine–leaf virtual private cloud (SL-VPC), deployed via AWS CloudFormation stack as a practical use case. The CTSM optimizes resource utilization, security, and traffic management while reducing computational overhead. The model was benchmarked against five DCN topologies—DCell, Mesh, Skywalk, Dahu, and Ficonn—using Mininet simulations and a software-defined CloudFormation stack on an Amazon EC2 HPC testbed under realistic SG traffic patterns. The results show that CTSM achieved near-100% reliability, with the highest received energy data (29.87%), lowest packetization delay (13.11%), and highest traffic availability (70.85%). Stateless container engines improved resource allocation, reducing administrative overhead and enhancing grid stability. Software-defined Network (SDN)-driven adaptive routing and load balancing further optimized performance under dynamic demand conditions. These findings position CTSM-SL-VPC as a secure, scalable, and efficient solution for next-generation smart grid automation.

ERP System for Shopping Mall

This project focuses on creating an all-encompassing Enterprise Resource Planning (ERP) system, enhanced with a powerful messaging feature to improve both communication and operational effectiveness within an organization. The system will merge essential ERP functions—such as finance, HR, sales, supply chain management, and CRM—with integrated real-time messaging. By embedding tools like instant messaging, email, and notifications directly into the ERP environment, it aims to support smooth collaboration between employees, managers, and external parties. Key elements of the project involve developing a scalable, secure system architecture, crafting essential ERP modules, and establishing a messaging framework for real-time communication and synchronized data. The system will be designed with a strong emphasis on user experience, optimization of performance, and adherence to data protection standards. Following deployment, the project will continue to provide support and evolve through regular updates informed by user input. This integrated solution is expected to enhance internal operations, foster better decision-making, and promote a more connected and efficient workplace. Keywords: Enterprise Resource Planning (ERP), Messaging Integration, Organizational Efficiency, Real-time Communication

Blockchain Technology: Ensuring Data Integrity and Security in Modern Enterprise Systems

Blockchain Technology: Ensuring Data Integrity and Security in Modern Enterprise Systems

The role of dual-use technologies in hybrid warfare: A double-edged sword?

The concepts of "hybrid warfare" and "dual-use technologies" have two striking similarities. Both link the military with the civilian domains; both are also heavily used in Western security architecture. It is thus surprising that very little academic literature explores their interrelationship. To fill this gap, the present article asks how dual-use technologies influence hybrid warfare. It is argued that dual-use technologies are a double-edged sword as they enable hybrid aggressors but also help counter hybrid warfare. On the one hand, the versatility, lower acquisition costs, and adaptability of dual-use technologies increase the risk of hybrid campaigns. On the other, they can improve allied interoperability and resilience against hybrid threats. It is thus recommended that researchers, analysts and decision-makers consider dual-use technologies when investigating or mounting a defence against hybrid adversaries.

Crystal Quantum Shield (CQS): A Post-Quantum Cybersecurity Framework for API and Data Protection

With the exponential rise in cyber threats and increasingly complex digital ecosystems, robust and scalable security architectures have become indispensable. The Crystal Quantum Shield (CQS) is a pioneering cyber security framework designed to leverage post-quantum cryptography and advanced API security mechanisms for safeguarding sensitive digital environments. The architecture integrates Kyber key exchange and Dilithium signature verification, ensuring resilience against potential quantum computing threats. Additionally, CQS employs rate limiting via NGINX, token scrambling, and data scrambling for enhanced protection of sensitive transactions.To manage high-volume interactions, the system incorporates OAuth2-based authentication, JWT-based session management, and Role-Based Access Control (RBAC) for granular authorization. With real-time logging, violation detection, and visualization powered by Grafana, CQS delivers a user-friendly interface for monitoring security metrics, including token usage, user roles, and violations. This paper explores the modular and scalable design of CQS, detailing its integration of cloud services and API gateways for seamless deployment. Results from our experimental analysis demonstrate CQS’s efficacy in mitigating modern threats, ensuring secure communication, and maintaining system integrity under stress conditions. By combining cutting-edge cryptographic techniques and robust security mechanisms, CQS sets a new benchmark for next-generation digital security solutions.

Parallel Committees: a scalable, secure, and fault-tolerant distributed NoSQL database architecture

Parallel Committees: a scalable, secure, and fault-tolerant distributed NoSQL database architecture

STRENGTHENING LATVIAN IMMIGRATION POLICY IN THE CONTEXT OF NATIONAL SECURITY AND GEOPOLITICS

The international security environment is currently characterised by a growing intensity of conflicts varying in scale. The ongoing Russian war in Ukraine is the largest long-term threat to the Latvia’s security, Baltic region and the entire European security architecture. Latvia’s security underwent several important developments in 2022, as several important decisions were taken to strengthen the security of the Baltic States. On 22 September 2022, the Latvian Parliament supported amendments to the Immigration Law providing for stricter conditions for issuing residence permits to Russian and Belarusian citizens. The Ministry of the Interior, as the leading state administration institution in strengthening the state border, has also implemented several significant measures since 2022 in strengthening the state border, preventing illegal immigration and criminal offences. The protection of the democratic form of government is a generally accepted priority of Latvia, especially in the current geopolitical context; however, it must be concluded that the public's attitude towards several immigration policy issues remains somewhat ambiguous. In 2024, the Constitutional Court passed a judgement on the compliance of the provisions of the Immigration Law with the Constitution in relation to the issuance of permanent residence permits to the citizens of the Russian Federation. In addition, on 20 June 2024, with the decision of the Department of Administrative Cases of the Supreme Court Senate, legal proceedings in the case, in which a Russian citizen requested issuance of a temporary residence permit, were concluded. The aim of the article is to explore the current issues of immigration policy in Latvia and to delve into the perspectives of strengthening the national border in the context of national security and global geopolitics.

Balancing Security and Scalability Implementing Zero-Trust Architectures in Azure for Insurance Platforms

The primary issue for insurance platforms running in cloud environments is to scale to meet changing demands while maintaining strong security. To overcome these obstacles, this article investigates using Zero-Trust architecture in Microsoft Azure. Only authorized users and devices interact with critical insurance data thanks to Zero-Trust principles, which strongly emphasize stringent access controls and ongoing verification. This strategy reduces the risk of breaches while enabling smooth expansion by utilizing Azure's native tools and services, such as Conditional Access and Azure Active Directory. The paper offers a paradigm for combining scalable infrastructure with security rules while adhering to legal requirements such as GDPR and HIPAA. Real-world use cases are investigated to show how well Zero-Trust designs work to reduce risks and improve operational efficiency in the insurance industry. The results emphasize combining adaptable cloud solutions with cutting-edge security frameworks to balance system performance and data safety.

Enhanced Traceability and Transparency in Medical Supply Chain Management Using Blockchain-Based Customized Smart Contracts

The medical supply chain faces challenges like counterfeit drugs, lack of transparency, and inefficient traceability. Blockchain technology, with its decentralized and secure architecture, offers a promising solution. By implementing customized smart contracts, stakeholders can ensure data integrity, improve trust, and streamline supply chain operations, enhancing overall efficiency and reliability. Counterfeit medicines and limited visibility across the medical supply chain pose significant risks to patient safety and public health. Traditional systems lack robust mechanisms to verify authenticity or ensure transparency. The need for a secure, efficient, and scalable system to trace and validate medicines in real-time has become crucial. A blockchain-based framework was developed using customized smart contracts for traceability. Each medicine is registered with unique identifiers stored on the blockchain. QR codes link physical products to the digital ledger, enabling real-time tracking and user verification. The system uses consensus mechanisms to validate transactions and ensure authenticity. Proof of Work (PoW) ensures robust security by requiring significant computational effort for transaction validation, deterring malicious activities. Proof of Stake (PoS) enhances scalability and energy efficiency, validating transactions based on a node's stake in the network. Together, these algorithms provide a balance of security, speed, and sustainability. The proposed system significantly improves traceability and transparency in the medical supply chain. Counterfeit detection rates increased, and transaction validation times decreased due to optimized algorithms. User feedback confirmed enhanced trust and reliability. The solution demonstrates scalability and adaptability for broader applications in healthcare and beyond.

Building Futuristic Data Centers: A Technical Deep Dive into Next-Generation Infrastructure

This comprehensive technical article explores the evolution and future trajectory of modern data center infrastructure, focusing on critical innovations across multiple domains. The article examines advanced energy systems, thermal management solutions, AI-driven automation, edge computing integration, and sophisticated security architectures that are reshaping data center operations. The article investigates how these technological advancements address escalating computational demands while maintaining sustainability and operational efficiency. Through detailed analysis of renewable energy integration, liquid cooling technologies, predictive analytics, and zero-trust security frameworks, the article demonstrates how next-generation data centers are achieving unprecedented levels of performance, reliability, and environmental sustainability. The article highlights the transformative impact of artificial intelligence and edge computing on infrastructure management, while emphasizing the critical role of integrated security measures in protecting distributed computing environments.

The changing regional faces of peace: Toward a new multilateralism?

ABSTRACT The fast-changing face of multilateralism, and the roles and reputations of international organizations, have invited more serious reconsideration of different institutional types and the part they play in global ordering. Recent scholarly work offers multiple insights into formal and informal governance mechanisms, but the importance of regional groups and actors within the multilateral system remains under studied. This article contributes to the debate on global peace operations in a time of geopolitical change by focusing on the evolving roles of regional institutions in world politics. It tracks their activities over time showing how they have become an essential element in any global security architecture today. Yet, despite their expansion and growing visibility, their transformative potential remains neglected. In a world where existing multilateral institutions and their normative framings are increasingly contested, the role of regional powers and agencies should be placed at the forefront of contemporary security debates.

Why and How Did the Romanian Government Reject the Western Allies' Efforts to Explore Bilateral Solutions for Implementing the Guarantees of April 13, 1939

The present study focuses on how the Romanian government rejected Western Allies’ initiatives to sign military conventions that would complement the security guarantees of April 13, 1939, and, in fact, specify how those French and British declarations would be implemented. The study does not address Romania's equally negative attitude towards Anglo-French attempts to connect Romania to the European security architecture that the Western Powers were seeking to build, including through the westward reorientation of the 1921 Polish-Romanian Alliance and by trying to persuade Turkey to also provide security guarantees to Romania, following the Anglo-French model, and thus compelling the government in Ankara to assume, in relation to Eastern Europe, other security obligations beyond those stipulated by the Balkan Entente Treaty. The security guarantees offered by the British to Romania in April 1939 were reluctantly given and only partially aligned with British objectives. While the British government aimed for an agreement that would include Poland and Romania in a European security system against Germany, King Carol II and Gafencu refused any concrete commitments, preferring a unilateral guarantee. This “success” of Romanian diplomacy was a compromise that failed to secure genuine support from Britain and France while deepening Germany's distrust. Subsequent attempts by the Romanian government to obtain security guarantees from Germany were met with scepticism, and Romania's refusal to participate in bilateral discussions for the implementation of the guarantees undermined confidence in its ability to play an active role within Western alliances. Ultimately, the lack of a coherent foreign policy and the refusal to firmly engage alongside the Allies left Romania vulnerable to the geopolitical challenges of the ensuing period.

When Cybersecurity Meets Accessibility: A Holistic Development Architecture for Inclusive Cyber-Secure Web Applications and Websites

In today’s technology-centric era, digital transformation has made accessibility and cybersecurity critical components for developing inclusive web applications that are essential in daily operations. However, current development models often treat accessibility and cybersecurity separately, leading to solutions that may excel in one area while lacking in the other. This paper addresses this gap by proposing the Holistic Security and Accessibility Layered Architecture (HSALA), a novel architectural model that integrates accessibility and cybersecurity throughout the development process. HSALA consists of five interconnected layers, each paired with a corresponding security layer, ensuring that both accessibility and security are embedded at every level. We conduct a theoretical and analytical case study comparing HSALA with the traditional three-layered architecture, demonstrating HSALA’s superiority in addressing contemporary challenges related to accessibility, cybersecurity, scalability, and user experience. The findings indicate that HSALA provides a robust framework for developing secure and inclusive web applications, promoting a more equitable digital ecosystem. We outline a roadmap for future work, including empirical validation and practical implementation strategies. HSALA represents a significant advancement in web application development, fostering inclusivity and trust in an increasingly digital society.

Blockchain and FL-Based Secure Architecture for Enhanced External Intrusion Detection in Smart Farming

Blockchain and FL-Based Secure Architecture for Enhanced External Intrusion Detection in Smart Farming

Quantum Computing: Revolutionizing Advanced Risk Management Systems

This article examines how quantum computing revolutionizes sophisticated risk management systems in several industries, focusing on cybersecurity and financial services. It looks at how quantum computing technology transforms conventional risk assessment methods, fraud prevention, and security architecture by utilizing quantum bits and the concepts of superposition and entanglement. The creation of quantum-resistant cryptographic algorithms, the application of quantum-enhanced probabilistic analysis for financial risk management, and the obstacles to the broad adoption of quantum computing are all examined in this article. The article illustrates the substantial potential of quantum computing in enhancing risk management frameworks while stressing the factors that must be considered for successful adoption by examining current market trends, technological advancements, and industry applications. The convergence of quantum computing with other cutting-edge technologies like blockchain and artificial intelligence for improved risk management capabilities is also examined, as are the broader ramifications for industries other than finance, such as healthcare, manufacturing, and telecommunications.

Organizing European security through informal groups: insights from the European Union’s response to the Russian war in Ukraine

Abstract In addition to joint activities undertaken via the EU institutional framework in response to the Russian war in Ukraine, EU countries also shaped the broader European security architecture through informal groups. These groups, which lack formal institutional structures, allow EU member states to coordinate activities to pursue common objectives. Despite the rapidly growing literature on informal groups, their occurrence and relevance in the wake of the outbreak of war in Ukraine remain understudied. This study examines informal groups' compositions, motivations, and reflects on their relevance for the European security architecture. It suggests that by resorting to informal groups, EU member states have organized the European security order functionally and geographically into several formats. By doing so, they have fostered compartmentalized multilateralism, contributing to functional relations between various layers of European security order.