Security Dangers Research Articles

Research on the Quantitative Assessment and Security Measures of Hierarchical Network Security Threat Situation

With the rapid development of modern network technology, technology not only changes people’s life, but also breeds a variety of new problems. With the popularization of network application technology, various kinds of harmful means are emerging, and network security problems emerge in endlessly, among which information network security is the most prominent. This paper mainly describes the development and response methods of information security threats, analyzes the main attack modes and the evolution of information security threats, and analyzes the development direction of vulnerability detection technology that threatens the root of information security. Aiming at the security problem of school network, through analyzing all kinds of hidden dangers of network security, the best way is the hierarchical security solution. According to the implementation of the network security deployment cycle, security strategies are proposed from the network planning, network management and the use of network individuals.

ІНФОРМАЦІЙНА КОМПОНЕНТА КРИТИЧНИХ (НАЗВИЧАЙНИХ) СИТУАЦІЙ У КОНТЕКСТІ ЗАБЕЗПЕЧЕННЯ ДЕРЖАВНОЇ БЕЗПЕКИ

It is shown that threats to state security are caused by various factors, for the systemic activation of which there are effective methods that involve the use of information technologies, in particular, the so-called color revolutions. Their goal is to generate critical situations, a characteristic feature of which is the rapid growth of tension between the subjects of social interactions, which leads to the transformation of potential dangers of state security into real ones. At the same time, the determining signs and causes of such situations today are the increasing role of mass communications and new technologies for their generation. An analysis of the scientific heritage allowed us to conclude that the information component of state security does not exist outside social interactions, during which information is exchanged between their participants. Their influence on each other can be both positive and negative, since the basis of interaction can be both community and the divergence of interests and goals of its participants, which creates the problem of identifying the dangers of state security. It has been established that the state power system has traditionally relied on economic resources and organized violence, but its modern structure is based on intelligence, therefore information has become the determining source of power, and the information space is an attribute of the existence of states, which is why the security of the information component of state security is fundamentally important. Therefore, no matter what social class is in power, possession of a predominant share of economic wealth does not guarantee it state power, since an important factor for a stable stay in power is the stability of the social order, the destruction of which is the main danger to the state, therefore its support is its main function and determines its right to use the power component of power. It is proved that there is a growing influence on the power system of the media and communication, which often produce a stream of conflicting images, symbols, facts, therefore, the more information the control system uses, the more difficult it can become to get an idea of what is actually happening . At the same time, it has been shown that information wars with the use of the latest information technologies have become a reality, the main goals of which are to seize and hold power in all spheres of the life of the state, and mass culture is an effective mechanism for creating the identity of global consumption, therefore, manipulation is growing in politics that disorientates the mass consciousness and accelerates the formation of societies with a blurred national identity, which is a real threat to the development of national states.

An efficient algorithm and tool for detecting dangerous website vulnerabilities

Web applications are progressively developing and applied in most aspects of life. However, there exist a variety of dangerous website security vulnerabilities such as SQL injection and cross-site scripting. This creates the opportunity for hackers to exploit and attack websites for commercial or political purposes or fame. Some research and commercial software have been developed for scanning and detecting those vulnerabilities. In this paper, we present an efficient algorithmic study and tool to detect web security vulnerabilities. Experimental results show that the new method is capable of detecting vulnerabilities with high accuracy. Compared to popular commercial software on the market, our tool has faster performance and can detect a number of less common vulnerabilities such as shell injection, or file inclusion.

Вразливості системи безпеки в додатках ОС ANDROID

During the past few years, commercial organizations and businesses are actively developing and using mobile applications to increase the efficiency of their business processes. As a result, employees, customers and suppliers get increased productivity in the work environment through real-time information exchange, mobility, and better functionality. Despite the advantages of mobile apps, their usage can lead to potentially dangerous security issues. Like legacy enterprise solutions, mobile apps can contain vulnerabilities that can be attacked and lead to leaks of data. Vulnerabilities and privacy risks that are present in Android apps that are installed on millions of devices can be used by hackers to gain unauthorized access to an organization’s information resources or private user data. Most Android mobile apps initiate connections to the network, other apps, or third-party services, making a reckless user more vulnerable to malicious attacks. Therefore, security, mobile encryption, and thorough application vulnerability testing are required at the application development stage. This work demonstrates some standard tools for performing static analysis of Android OS applications without running them on the user’s device. Social networks are currently the most important media place in the world and the most widely used channel for data, video, and audio transmission. Therefore, the above-mentioned static analysis methods were used to test eight popular social network applications that are currently used by millions of users. The paper demonstrates the types of vulnerabilities that were found in these applications, also analyzes the threats with the most significant potential impact on the business environment and provides recommendations for reducing the risks of their occurrence.

Secure Data Transmission by Detecting Different Attacks in CRN to improve the throughput

Cognitive Radio (CR) is a technology that promises to solve the data transmission problem by allowing secondary users to coexist with primary user without causing any interference to the communication. It means to improve the usage of the radio assets to improve the throughput. Despite the fact that the operational parts of CR are being investigated broadly, its security viewpoints have increased little consideration. In this work, present a CRN architecture , Different Protocol, with complete rundown of major known security dangers and assaults inside a Cognitive Radio Network (CRN). Our goal in this paper is to dissect the distinctive security issues of the primary ongoing advancements of Cognitive Radio Networks with proper resource allocation to improve the throughput.

Intrusion Detection System from External Threats using Data Mining

Network Intrusion Detection is a significant apparatus to distinguish and examine security dangers to a correspondence arrange. It supplements other system security procedures, for example, firewalls, by giving data about the recurrence and nature of assaults. A system interruption discovery framework (NIDS) frequently comprises of a sensor that examines each bundle on the system under perception, and advances the parcels which are considered fascinating, together with an alarm message to a backend framework, that stores them for further examination and relationship with different occasions. The assessment procedure of the MAC address contrasted with the CADL is improved and streamlined with the help of the J48 choice tree calculation. The pursuit procedure is completed in the created arrangement esteem through tree based characterization.

The Efforts to Combat Organized Crime in Brazil

<p>En las últimas décadas el crimen organizado se ha convertido en un importante problema para la seguridad internacional. La delincuencia organizada representa una gran amenaza para la seguridad pública, a las instituciones democráticas y para la estabilidad económica. La lucha contra este fenómeno requiere la cooperación policial y judicial en materia de prevención, detección, investigación y sanción de los delitos cometidos por organizaciones criminales.</p><p>El artículo presenta y analiza algunos aspectos relevantes del crimen organizado en Brasil. Además, describe los factores que han influido en el desarrollo de la delincuencia organizada en este país. El artículo examina también las iniciativas tomadas por las autoridades brasileñas para combatir el crimen organizado.</p>

Highly Effective Security Techniques in OSN Based on Genetic Programming Approach

Assurance is one of the grinding centers that enhances when trades get mediated in Online Community Techniques (Online Social Networks). Diverse gatherings of utilization innovation specialists have limited the 'OSN security issue' as one of surveillance, institutional or open security. In taking care of these issues they have moreover overseen them just as they were person. We adapt that the elite security issues are caught and that evaluation on genuine feelings of serenity in Online Social Networks would advantage from a more exhaustive method. Nowadays, points of interest systems mean a critical piece of relationship; by losing security, these organizations will decrease a ton of pleasant areas to see as well. The inside motivation behind subtle elements security (Information Security) is risk control. There are a great deal of discovering works and exercises in security danger control (ISRM, for example, NIST 800-30 and ISO/IEC 27005. Regardless, only few works of appraisal focus on Information Security danger diminishment, while the signs depict normal determinations and suggestions. They don't give any use ideas concerning ISRM; truth be told diminishing the Information Security dangers in questionable conditions is cautious. Subsequently, this papers joined an acquired counts (GA) for Information Security danger loss of weaknesses. Finally, the parity of the associated system was broke down through a reflection.

Manets Trust Based Data Security and Secure Anonymous Routing

For express employments of the mobile ad hoc networks (MANETs) sent during opponent conditions, unidentified correspondences through data overwhelm with expectedness is goliath. A fundamental thing is to give unidentifiability and unlinkability toward the mobile center obsessions as well as their techniques. The present protocol be weak against security dangers similar to if all else fails government administrator strikes, fake routing packs ambushes otherwise denial-of-service (DoS) broad-tossing assault, transfer examination strikes as well as insider strikes. During this document we suggest another routing protocol which is an improvement of the present protocol Authenticated Anonymous Secure Routing (AASR) protocol. AASR secures the strikes and outfits adequate nonattendance of clearness with the help of get-together signature and key mixed onion routing. In this work a bound together trust the board plan has been hardened with AASR protocol in order to upgrade the routing and data security in MANETs. Beguilement consequences contain shown the adequacy of the planned protocol through enhanced execution to the degree throughput, bunch got degree, pack adversity degree and surrender when ascended out of the present ones.

Hadoop based Parallel Machine Learning Algorithms for Intrusion Detection System

Web use and digitized information are getting expanded each day. The measure of information created is likewise getting expanded. On the opposite side, the security assaults cause numerous security dangers in the system, sites and Internet. Interruption discovery in a fast system is extremely a hard undertaking. The Hadoop Implementation is utilized to address the previously mentioned test that is distinguishing interruption in a major information condition at constant. To characterize the strange bundle stream, AI methodologies are used. Innocent Bayes does grouping by a vector of highlight esteems produced using some limited set. Choice Tree is another Machine Learning classifier which is likewise an administered learning model. Choice tree is the stream diagram like tree structure. J48 and Naïve Bayes Algorithm are actualized in Hadoop MapReduce Framework for parallel preparing by utilizing the KDDCup Data Corrected Benchmark dataset records. The outcome acquired is 89.9% True Positive rate and 0.04% False Positive rate for Naive Bayes Algorithm and 98.06% True Positive rate and 0.001% False Positive rate for Decision Tree Algorithm.

Providing Security against Hole Attack in Manet Victimisation Agglomeration Methodology

Demand of infrastructure less, self-working, self-configuring, communication networks have led to the formation of mobile Adhoc networks (MANET). Manet is extraordinarily valuable over ancient networks in damaging conditions. In Manet all mobile devices work enjoyably for route discover and knowledge transmission. thanks to its broadcast nature of transmission, and cooperative model of operating, routing the traffic may be a tedious task in Manet. Routing protocols square measure perpetually targeted by attackers to wreck network. Routing protocols in Manet ought to be strong against completely different security dangers. Adhoc on-demand distance vector routing (AODV) protocol typically used and studied within the territory of mobile adhoc networks. so as to stop Manet from hole attack a replacement methodology is planned. during this work, hole attack in Manet is detected and prevented by victimisation Hop Count, Reverse Trip Time and Link Length methodology. consistent with the theme, hop count specifies the particular reverse trip time from supply to destination. to seek out the presence of tunnel, the supply can compare calculated reverse trip time with actual reverse trip time and to verify the presence of tunnel, the supply can compare calculated link length with actual link length of the links in ways. This theme provides a security to mobile spontaneous networks from each short still as long hole tunnels. Networksimulator is employed to gauge the performance of mobile spontaneous network. The simulation results show that the planned theme outperformed in terms of output and packet delivery quantitative relation.

Risk Factors And Security Issues In Various Cloud Storage Operations

Presently a days, cloud computing is a rising and method for registering in software engineering. Cloud computing is an arrangement of assets and administrations that are offered by the system or web. Distributed computing broadens different figuring methods like framework registering, appropriated processing. Today distributed computing is utilized as a part of both mechanical, research and scholastic fields. Cloud encourages its clients by giving virtual assets through web. As the field of distributed computing is spreading the new procedures are producing for cloud security. This expansion in distributed computing condition likewise expands security challenges for cloud designers. Customers or Users of cloud spare their information in the cloud subsequently the absence of security in cloud can lose the client's trust. In this paper we will discuss about on cloud database and information mining security issues in different viewpoints like multi-occupancy, flexibility, unwavering quality, accessibility on different divisions like modern and research regions, and furthermore examine existing security methods and methodologies for a safe cloud condition through enormous information ideas. What's more, this paper additionally study different parts of mechanical, training and research areas. This paper will empower scientists and experts to think about various security dangers, models and apparatuses proposed in existing distributed storage.

An Efficient Anomaly Detection Based On Optimal Deep Belief Network in Big Data

Nowadays, the internet and network service user’s counts are increasing and the data generation speed also very high. Then again, we see greater security dangers on the internet, enterprise network, websites and the network. Anomaly has been known as one of the effective cyber threats over the internet which increasing exponentially and thus overcomes the commonly used approaches for anomaly detection and classification. Anomaly detection is used in big data analytics to recognize the unexpected behaviour. The most commonly used characteristics in network environment are size and dimensionality, which are big datasets and also impose problems in recognizing useful patterns, For example, to identify the network traffic anomalies from the large datasets. Due to the enormous increase of computer network based facilities it is a challenge to perform fast and efficient anomaly detection. The anomaly recognition in big data sets is more useful to discover fraud and abnormal action. Here, we mainly focus on the problems regarding anomaly detection, so we introduce a novel machine learning based anomaly detection technique. Machine learning approach is used to enhance the anomaly detection speed which is very much useful to detect the anomaly from the large datasets. We evaluate the proposed framework by performing experiments with larger data sets and compare to several existing techniques such as fuzzy, SVM (Support Vector Machine) and PSO (Particle swarm optimization). It has shown 98% percentage of accuracy and the false rate of 0.002 % on proposed classifier. The experimental results illuminate that better performance than existing anomaly detection techniques in big data environment.

Integrity Checking in Cloud Storage and Policy Based User Revocation using Attribute Based Encryption

Applications that range over various mists are frequently observed to be powerless against security dangers. Such profoundly heterogeneous situations need a fine-grained access control system like Attribute-based Access Control for upholding security. One of the most encouraging applications in distributed computing is online information sharing. Step by step instructions to share client information securely and productively has turned out to be one of the most testing issues in distributed computing. Be that as it may, this postures new provokes identified with making secure and solid information stockpiling over questionable specialist co-ops. The principle objective of distributed computing is the means by which to verify, secure the information and procedure. In this study, we find the issue of guaranteeing the respectability of data in cloud computing. Specifically, we consider techniques for decreasing the weight of producing a consistent measure of metadata at the customer side. Ascribe division chooses whether to momentarily disavow client approval as indicated by property subset. Furthermore, we propose another model called Policy-based Attribute Based Access Control (Pa-ABAC) utilizing half breed property based encryption. Our goal is to officially determine the conduct of various components of the proposed model in a cloud domain. This is imperative to build up a substantial security arrangement for a cloud situation free from determination mistakes and irregularities.

Assessment of Security Issues in Cloud Computing

A computing model in which the computing resources such as hardware, software and data are provided as a service via web browser or light-weight desktop machine on the internet is termed as Cloud computing. This computing model demolishes the requirement of keeping the resources of computer locally hence reducing the cost of worthy resources (Llorente, Montero & Moreno, 2012). A typical cloud is affected by various security concerns such as Temporary Denial of Service (TDOS) attacks, hijacking session issues, flashing attacks and theft of user identity. The motto of this study is to overcome the research gap between the cloud security constraints and the existing security danger. An investigation into the present cloud service models, presently applied security measures, security standards and their level of flawless shielding has been done. This thematic study helped in disclosing various security issues and their counter measures whereas the empirical study facilitated in acknowledgement of the botherings of users and security analysts in regards to those solution strategy. The empirical methods used in this research were interviews and questionnaires to justify the theoretical findings and to gain the originality of practitioners dealing with cloud security

Trust Management in Internet of Things Applications

More connected devices bring amazing benefits to people and enterprises. However, they also create more digital doorways. The risk in IoT is not just financial. IoT connecting medical devices, running city infrastructure and even the houses we sleep in. Connected gadgets and sensors in our homes and working environments known as the Internet of Things-offer gigantic potential for improving how internet live and move around. We can quantify wellbeing information, travel propensities and vitality use. In any case, as more gadgets become associated, vulnerable they are to complex digital security dangers. Connected devices and sensors in our homes and workplacesknown as the Internet of Things-offer huge potential for improving how we live and move around. We can measure health data, travel habits and energy use. But as more devices become connected, the more vulnerable they are to sophisticated cyber security threats. There exist a few application security issues; for example, data access and user authentication, data protection, decimate and track of information stream, IoT platform stability, middleware security, the executives stage, etc. An effective trust management model is to be used in each IoT framework to ensure the framework against malevolent assaults and consequently ensuring dependable and secure data transmission. To achieve this objective, various trust management models are used to enforce different security measures in a social IoT system. Two different trust management models namely dynamic model and machine learning based model are clarified and correlation of model are expressed and along these lines the benefit of one model over the other is comprehended.. Appropriately in this paper, a detailed study of each model is done with other pinpoints thus leading to a thorough study of two diverse trust management models.

Static detection of real-world buffer overflow induced by loop

Buffer overflow (BoF) is one of the most dangerous security vulnerabilities. A BoF can be induced by functions, such as the memcpy family, or loops with pointer or array operations. Static detection of BoF is a well-defined method and often performed before system deployment. However, most of previous static techniques either detect the BoFs induced by functions or analyze simple loops that induce BoFs, such as the single loop with a single loop variable. In order to clearly understand the impact of loops on BoF, we perform an empirical study on real-world BoFs detected in the past three years, including 211 BoFs from 60 open-source systems, and find that about a third of these BoFs are induced by loops. Motivated by this observation, we propose a novel static detection technique, DBloop, to localize BoFs induced by loops. The key of DBloop is to get the extremum length of data-movement on the buffer by analyzing target loops and then check whether the buffer overruns using constraint solving. We have implemented DBloop with CIL, and evaluated it on real-world programs detection by comparing with a commercial tool, Checkmarx, and an open-source tool, Splint. DBloop successfully localizes 57 BoFs induced by loops, while Checkmarx and Splint only detect 4 and 3, respectively. Moreover, DBloop has detected 4 new BoFs that have not been reported before.

Assessment of Security Issues in Cloud Computing

A computing model in which the computing resources such as hardware, software and data are provided as a service via web browser or light-weight desktop machine on the internet is termed as Cloud computing. This computing model demolishes the requirement of keeping the resources of computer locally hence reducing the cost of worthy resources (Llorente, Montero & Moreno, 2012). A typical cloud is affected by various security concerns such as Temporary Denial of Service (TDOS) attacks, hijacking session issues, flashing attacks and theft of user identity. The motto of this study is to overcome the research gap between the cloud security constraints and the existing security danger. An investigation into the present cloud service models, presently applied security measures, security standards and their level of flawless shielding has been done. This thematic study helped in disclosing various security issues and their counter measures whereas the empirical study facilitated in acknowledgement of the botherings of users and security analysts in regards to those solution strategy. The empirical methods used in this research were interviews and questionnaires to justify the theoretical findings and to gain the originality of practitioners dealing with cloud security

Third Party Based Security Method in Vehicular AD-HOC Networks

Security is the key factor of consideration in the vehicular ad-hoc network (VANET), which is prone to various security dangers. A VANET package gives information on life’s essentials and provides security from detrimental external agencies. This paper presents an outsider-based security approach which secures VANETs condition by verification process, where marks are produced and conveyed to hubs and checked at the measure of any transmission. In the suggested approach, the rise in mobility decreases the packet delivery ratio and performance of proposed protocol is approximately 4% improved as compared to other techniques. Moreover, the escalation in mobility increases the average delay and in case proposed protocol is compared with the group based authentication then the improvement in its performance is approximately 50%.Thus, the proposed approach is completely focused on security and consequently secures the system.

Noble Authentication Protocol with Privacy Preservation Policy for Public Auditing on Shared Data

The cloud based services today offers a large amount of services irrespective of the geographical location to individuals or a group. This opens the way to new security dangers to the protection and also the integrity of the information put away. Public Key Infrastructure mechanism, advanced endorsements, computerized marks are existing techniques to accomplish numerous security prerequisite sites, however late dangers make them powerless against genuine assaults when utilized without earlier trust-point establishments. At the time of open reviewing of the information by Third Party Auditor, it is quite possible that it might trade off in protecting client’s privacy. This outcome in two separate issues which represents the dangers of authentication and additionally the trustworthiness of the information that is being shared. In this paper, we propose a Noble Authentication Protocol with privacy preservation policy cloud that gives solid common verification framework utilizing the Pedersen Commitment scheme alongside using ring signature algorithm calculations that will authenticate the TPA and just give the essential data to checking the trustworthiness of the mutual information with keeping the privacy of the clients covered up. The proposed technique helps in staying away from conceivable hash crashes, approving the chain of trust to certificate authorities and different denial records.