Security Design Research Articles

Design and analysis of a post-quantum secure three party authenticated key agreement protocol based on ring learning with error for mobile device

Design and analysis of a post-quantum secure three party authenticated key agreement protocol based on ring learning with error for mobile device

Critical Review of Physical-Mechanical Principles in Geostructure-Soil Interface Mechanics

AbstractDue to the relatively different mechanical and physical properties of soils and structures, the interface plays a critical role in the transfer of stress and strain between them. The stability and safety of geotechnical structures are thus greatly influenced by the behavior at the soil–structure interface. It is therefore important to focus on the unique characteristics that set the interface apart from other geomaterials while examining the interface behaviour. Understanding the physical mechanism and modelling principles of these interfaces becomes a crucial step for the secure design and investigation of soil-structure interaction (SSI) issues. Moreover, to deal with this soil-environment interaction problem, the classical soil mechanics formulation must be progressively generalised in order to incorporate the effects of new phenomena and new variables on SSI behaviour. Considering the variety of energy geostructures that are emerging nowadays, it is crucial to comprehend the thermo-hydro-mechanical (THM) behaviour of the interface. The objective of this study is to fill this information gap as concisely as possible. A critical review is provided along with the state-of-the-art information on the thermo-hydro-mechanical behaviour of the soil-structure interface, including testing tools and measurement methods, basic principles and deformation mechanisms, constitutive models, as well as their applications in numerical simulations. This study explains how loading influences the mechanisms at the interface and critically examines the effects of boundary conditions, soil properties, environmental factors, and structure type on the THM behaviour of interface zones between soils and structural elements. The validity and reliability of the interface shear stress-displacement models are also covered in this paper. Lastly, the trends and recent advancements are also recommended for the interface research.

Addressing cybersecurity challenges in robotics: A comprehensive overview

As robotics technology becomes increasingly integrated into various sectors, ensuring the cybersecurity of robotic systems is paramount. This article provides an in-depth exploration of the cybersecurity challenges confronting robotics and offers strategies to address these concerns. With the growing connectivity and networking capabilities of robots, vulnerabilities such as unauthorized access, data breaches, and network attacks are significant threats [1]. Protecting sensitive data collected and processed by robots is crucial to preserving privacy and trust. Remote access features, while enhancing operational flexibility, also pose security risks if not adequately secured. Weak authentication mechanisms and insecure interfaces could allow malicious actors to compromise robot functionality. Furthermore, robots are susceptible to malware and cyber-attacks, including viruses, worms, and ransomware. To mitigate these risks, a comprehensive approach is necessary, incorporating secure design principles, robust authentication mechanisms, encryption techniques, and cybersecurity training. Collaboration among industry stakeholders, researchers, policymakers, and cybersecurity experts is essential to develop resilient robotic systems capable of withstanding evolving cyber threats. This article underscores the importance of addressing cybersecurity challenges in robotics to ensure the safety and security of robotic deployments across diverse domains. As robotics technology evolves and becomes integral across various sectors, prioritizing cybersecurity [2] is crucial to protect these systems from unauthorized access, data breaches, and network attacks. The interconnected nature and remote access features of robots pose significant vulnerabilities. Comprehensive measures, including secure design, encryption, and cybersecurity training, are essential. Collaboration among industry stakeholders, researchers, policymakers, and cybersecurity experts is vital for developing resilient robotic systems. This article highlights the urgent need to address cybersecurity challenges to ensure the safety and integrity of robotic deployments.

Факторы доходности облигаций дополнительного первого уровня (АТ1)

Additional Tier 1 bonds (AT1 bonds) are hybrid financial instruments issued by banks under Basel III. In case of a threat to the financial stability of an institution, these bonds can be converted into equity or written down to help the bank meet capital requirements. AT1 bonds are designed to insure a bank against a potential capital shortfall and minimize the need for a regulatory bail-out. AT1 bonds gained new attention after the collapse of Credit Suisse (CS), when all outstanding AT1 bonds issued by the bank were written down to zero. This paper provides an overview of AT1 capital, compares the main types of AT1 bonds and describes their most common features. In addition, it quantifies the risk premium in AT1 bond yields and identifies the main factors underlying this premium. The analysis is supported by real data on AT1 issuance in Europe. It is shown that in the primary market investors demand a significant premium from banks for the additional risk embedded in AT1 bonds. The size of the premium depends mostly on issuer-specific factors such as issuer’s credit risk, capital ratio, stock volatility and asset size. On the contrary, security design turns out to be a less important pricing factor. The author compares the results before and after the CS crash and concludes that the CS AT1 write-down did not directly affect the pricing principles in the market. The results of the research may be useful both for investors looking for yield pickup in financial sector and for banks working on the optimal design for their AT1 bonds.

Assessment of Security Design Strategies in Resorts Design in Osun State, Nigeria

Security has become an issue that has been reoccurring especially in the current state of the country which raises concern for the design of resorts within the nation and the challenges should be considered and gotten a solution for as soon as possible. The aim of this study is to assess security strategy design in resort design. The research method used in this study is the qualitative method and the use of observation check list has been adopted in obtaining information. The observation schedule was used as an instrument to collect data and the data were used as sampling method. These data were analyzed with content analysis and the findings showed that security measures have not been properly adopted in the resort design and most resorts do not take into consideration the necessary design strategies which has automatically open them to external threats. The research recommends that the need to design with consideration of security should be of uttermost importance in designing resort based on the number of people going and the function of the building and to urge other designers to consider the requirements while designing.

Mental Model-Based Designs: The Study in Privacy Policy Landscape

Users’ mental models influence secure and privacy-preserving behavior in a computing environment. Prior studies on users’ mental models of Internet, security tools, and digital privacy show that there is no one-size-fits-all solution when it comes to security and privacy design. However, little study to date has explored the ways to translate users’ mental models into interactive security and privacy designs. As we begin to address this gap, we focus on privacy policy in this paper. The typical text-based privacy policy suffers from poor readability and usability. A recent study proposed a Visual Interactive Privacy Policy (VIPP), showing promise to offer a better user experience as compared to prior designs – we used VIPP as a control condition and compared that with our mental model (MM)-based designs, inspired by users’ privacy mental models explored in the existing literature. We iteratively improved our MM-based designs through a series of user studies in the lab setting. We evaluated our updated designs in an online study with 182 participants over Amazon Mechanical Turk. The participants rated MM-based designs significantly better than the control in most of our evaluation parameters. Furthermore, we found that when a design is centered around the mental model of participants, study participants rated it higher in terms of personal connection to the design, perspicuity, attractiveness, being stimulated towards privacy protection, as well as the propensity for real-life adoption. Based on our findings, we discussed the successes and challenges of MM-based designs and provided guidelines on the scope of leveraging mental models in the broader area of privacy and security designs.

Another Evidence to not Employ Customized Masked Hardware

As a well-studied countermeasure against side-channel analysis attacks, there is a general interest in applying masking to different cryptographic functions executed on different platforms. On the one hand, despite their high performance, masked hardware implementations are dedicated to specific algorithms, making them inflexible. On the other hand, applying masking on software involves serious challenges including significant overhead in terms of efficiency and difficulties to maintain theoretical security guarantees in practice. As a result, a line of research has been devoted to enable masked operations in flexible platforms (i.e., microprocessors) by including some masked modules in their hardware, hence a combination of flexibility and performance. In such scenarios, RISC-V is a natural choice as hardware can be adjusted to the extended instruction set. One such attempt presented at CHES 2021 is known as SCARV, which extends the Instruction Set Architecture (ISA) of a RISC-V core with a rich number of first-order masked operations on both Boolean and arithmetic masked operands. In this work, we conduct a comprehensive analysis of SCARV. Instead of relying on empirical measurements to demonstrate security, we utilize tool-assisted evaluations. Through these evaluations, we identified a couple of design flaws that lead to leakage in the masked implementations hosted by the corresponding processor. These flaws are primarily due to the lack of composability of cascaded components. While heuristic and ad-hoc design principles can result in secure, small, and efficient designs, they lack formal security proofs, which may lead to security flaws, like those we report here. Consequently, this work serves as a motivation for using composable masked modules and tool-assisted evaluations when constructing complex circuits.

Security design: A review

Security design, which broadly speaking deals with the issue of designing optimal contractual mechanisms for overcoming various frictions between agents, is the subject of an extensive literature. This paper presents a review of recent work on security design and is organized around the applications of security design in various fields of finance starting with classic corporate finance applications such as capital structure and corporate governance, financial intermediation applications such as securitization and contingent capital, the interaction of market and security design, as well as emerging applications such as fintech, sustainable finance and healthcare finance. Future research is also discussed.

Penilaian Kepuasaan User dalam Menggunakan APlikasi SIM ASN Menggunakan Metode Website Quality

Implementation of the State Civil Apparatus Management Information System (SIM ASN) is a must. The ASN SIM is not only an administrative tool, but is a digital ecosystem that integrates all personnel application services. The problem that occurs in the ASN SIM application is that users find it difficult to complete the complete history requested by the ASN SIM in the personnel database to update employee data history. The aim of this study is to assess the impact of three factors on user satisfaction: application quality, user-friendliness, and interaction quality. The evaluation process is based on the Website Quality technique, which takes into account multiple aspects of website quality, such as as information content, security, usability, speed, and interface design. Respondents in this study were frequent users of the ASN SIM Application. Questionnaires were used to gather information about user opinions and experiences with the quality of the program. To characterize the degree of user satisfaction and the variables influencing it, data analysis was carried out using both statistical and qualitative methodologies. In order to enhance the user experience and efficacy of using the ASN SIM Application in the everyday work environment, it is intended that the research findings will offer comprehensive insight into the areas that require further development. This study adds to the body of knowledge about user satisfaction evaluation in the context of government apps and may serve as a model for future research on the subject.

Architectural Design for Data Security in Cloud-based Big Data Systems

التصميم المعماري للنظام هو عملية إبداعية بعد كل شيء. المتطلبات غير الوظيفية وبنية البرامج لها علاقة قوية. يعد أمن النظام أحد الشواغل الكبيرة وهو حاجة ومتطلب غير وظيفي. يجب أن يعتمد الأسلوب والهيكل المعماري المختاران للنظام على متطلبات النظام غير الوظيفية. تُستخدم تقنيات البيانات الضخمة لتخزين كميات هائلة من البيانات التشغيلية في المجال العام. تم اقتراح مخططات هيكل وسلوك النظام التي تستخدم تصميمًا معماريًا آمنًا لنظام يعمل عبر السحابة. تم التحقيق في مكونات مختلفة من البيانات الضخمة في هذا العمل البحثي نظرًا لخطورة القضايا الأمنية التي تركز على الخصوصية والسرية. يعد تأمين البيانات عبر السحابة التي يتم الاستعانة بمصادر خارجية لها مصدر قلق متزايد. هناك مسؤولو قواعد بيانات ضارة من الخارج ومن الداخل يمكنهم الوصول إلى البيانات الخاصة والحساسة وتعديلها ، وبالتالي يمكن أن يكون مزود خدمة قاعدة البيانات مخادعًا. آليات الأمان مطلوبة بالضرورة لحماية البيانات الحساسة الموجودة على السحابات العامة. على مستوى التطبيق ، يضمن الحل المقترح خصوصية وسرية البيانات الموجودة على السحابة. تم إجراء اختبارات مكثفة ، وكانت نتائج هذا البحث كما يلي: كشفت النتائج المسجلة عن اختلافات ذات دلالة إحصائية في النص العادي ومحتويات الوسائط المتعددة (أي الصوت والفيديو) مع قياس الوقت بالمللي ثانية لمجموعات البيانات الصغيرة والمتوسطة والكبيرة.

Women’s Safety in Digital Space

This article explores the relationship between privacy concerns and women’s empowerment in the context of India’s growing Smart Cities Movement and prevalent smartphone use. Using feminist ideas and legal frameworks to address cyberbullying, online harassment, cyberfraud and misogyny, it addresses cybersecurity and data privacy issues. The study emphasises the value of gendered implications of urban security and participatory design principles in smart city efforts. It suggests examining cyberfeminism and highlights the need for women to take an active role in developing safe online environments. Findings point to weaknesses in the legal systems that exist today as well as the possibility that technological improvements will exacerbate gender disparity. Legislative mandates should be strengthened, gender gaps in digital literacy should be closed, gender-sensitive design should be incorporated into smart city initiatives and women working in activism and digital technology should be encouraged to collaborate.

Secure control design for cooperative adaptive cruise control with a time-varying input delays under false data injection attacks

ABSTRACT Connected and Autonomous Vehicles (CAVs) are shaping the future of transportation systems; however, their future development requires consideration of the upcoming challenges with cyber-physical attacks. Cooperative Adaptive Cruise Control (CACC) is one of the features used in CAVs. Using CACC increases the vulnerability of such systems to False Data Injection (FDI) attacks. To address this, this paper proposes a novel mitigation approach to compensate for FDI attacks and noise in real-time. In addition to FDI attacks, the current CACC algorithm suffers from input delay and disturbance. Here, we develop a nonlinear controller and an FDI attacks estimation technique to mitigate the effects of FDI attacks, noise, input delay and additive disturbance. Lyapunov–Krasovskii functionals are used in the Lyapunov-based stability analysis to ensure semi-global uniformly ultimately bounded tracking. In order to demonstrate the performance of the proposed approach, we validate it through simulation analysis.

Monotone Function Intervals: Theory and Applications

A monotone function interval is the set of monotone functions that lie pointwise between two fixed, -monotone functions. We characterize the set of extreme points of monotone function intervals and apply this to a number of economic settings. First, we leverage the main result to characterize the set of distributions of posterior quantiles that can be induced by a signal, with applications to political economy, Bayesian persuasion, and the psychology of judgment. Second, we combine our characterization with properties of convex optimization problems to unify and generalize seminal results in the literature on security design under adverse selection and moral hazard. (JEL C61, C65, D72, D82, D91, G12)

Trust Evaluation Techniques for 6G Networks: A Comprehensive Survey with Fuzzy Algorithm Approach

Sixth-generation (6G) networks are poised to support an array of advanced technologies and promising high-quality and secure services. However, ensuring robust security, privacy protection, operational efficiency, and superior service delivery poses significant challenges. In this context, trust emerges as a foundational element that is critical for addressing the multifaceted challenges inherent in 6G networks. This review article comprehensively examines trust concepts, methodologies, and techniques that are vital for establishing and maintaining a secure and reliable 6G ecosystem. Beginning with an overview of the trust problem in 6G networks, this study underscores their pivotal role in navigating the network’s complexities. It proceeds to explore the conceptual frameworks underpinning trust and discuss various trust models tailored to the unique demands of 6G networks. Moreover, this article surveys a range of scholarly works presenting diverse techniques for evaluating trust by using the fuzzy logic algorithm, which is essential for ensuring the integrity and resilience of 6G networks. Through a meticulous analysis of these techniques, this study elucidates their technical nuances, advantages, and limitations. By offering a comprehensive assessment of trust evaluation methodologies, this review facilitates informed decision making in the design and implementation of secure and trustworthy 6G networks.

Secure Design: A Principled Approach for Systems Engineers

AbstractINCOSE's Systems Engineering Vision 2035 sets a goal that security will be as foundational a perspective in systems design as system performance and safety are today. Such a design needs to be inherently secure (i.e., eliminate hazards, susceptibilities, and vulnerabilities to the extent possible and control the remaining ones are, while still enabling the system to meet performance requirements) and provide a basis for necessary security functionality. This paper discusses a principled approach and concepts for creating such a design. Activities for secure design across multiple MITRE sponsors and work programs with desired outcomes to the Vision 2035 goal inform. These activities include community outreach through workshops and public review of publications.

An Automated Multi-Layered Methodology to Assist the Secure and Risk-Aware Design of Multi-Factor Authentication Protocols

An Automated Multi-Layered Methodology to Assist the Secure and Risk-Aware Design of Multi-Factor Authentication Protocols

Building a Scientific Foundation for Security: Multilayer Network Model Insights for System Security Engineering

AbstractTo help incorporate security into INCOSE's Systems Engineering Vision 2035, the INCOSE systems security engineering working group endorses a paradigmatic shift to reframe systems security as trustworthy, loss‐driven, and capabilities‐based. Similar research out of Sandia National Laboratories has explored cutting‐edge approaches to systems security for national security applications. Together, these efforts highlight the need for—‐and a path toward—‐a scientific foundation for security. Leveraging underlying tenets of systems theory, observed security heuristics, and the concepts emerging from INCOSE's SSE working helps triangulate a set of “first principles” as part of a scientific foundation for security as an emergent systems property that incorporates traditional physical security designs, cyber security architectures, and personnel security programs—‐as well as the (often ignored) interactions between them. These first principles, in turn, are the basis for a set of derived systems security performance axioms that support current INCOSE SSE working efforts. We have demonstrated this approach's logic and designability with a multilayer network model‐based approach for systems security. The structure of this scientific foundation for security offers additional, innovative opportunities to achieve desired levels of trustworthiness, creative mechanisms to meet needs, innovative loss‐driven approaches, and enhanced capabilities—‐all aimed at producing more efficient and effective systems security solutions against current and emerging threats, uncertainties, and complexities.

Enrollment Appraisal Using Rule-Based Decision Support System

This study explores the development and evaluation of a web-based enrollment appraisal system utilizing a rule-based decision support system for universities and colleges. Designed for the context of Antique, Philippines, the system leverages a two-tier architecture for efficient processing and secure data management. A user-friendly interface guides applicants through the enrollment process, while a secure server and rule-based engine analyze data against pre-defined eligibility criteria. The Rapid Application Development (RAD) methodology ensured a user-centered design with iterative development cycles incorporating user feedback. Evaluations using McCall's Software Quality Standard and the International Organization for Standardization and International Electrotechnical Commission (ISO/IEC) 25010 standard revealed the system's strengths in technical aspects (security, usability) and overall functionality. User feedback highlighted areas for improvement in interface design, clarity, and user perceptions of data security. The study concludes that the system offers a promising approach for more efficient and transparent enrollment processes. By addressing the feedback received, the system can be further enhanced to improve the user experience and build trust among applicants.

Security and Privacy for Smart Transportation Management using Big Data Analytics

Security and privacy are vital aspects of smart transportation management with big data analytics because they assure the security of sensitive information, prevent unwanted access to essential systems, and retain public trust in the safety and dependability of the transportation infrastructure. Protecting data from cyber threats, ensuring secure communication and data transmission, protecting passengers' personal information and addressing privacy concerns related to data collection and usage to maintain transparency and accountability in data handling practices are all obstacles to smart transportation management using big data analytics. This paper proposes a Secure Data Encryption Control based Big Data Framework (SDEC-BDF) to strike a middle ground between data analytics and privacy protection, establishing the way for more private and secure transportation systems that benefit everyone involved. The intention of this approach is to offer strong security while simultaneously safeguarding people's privacy. The method has many potential uses in the Intelligent transportation sector (ITS), including traffic control, passenger security, fleet management, preventative maintenance, and road network design. It ensures privacy and security while facilitating effective data analysis. Furthermore, it protects the public confidence in the security and dependability of the transportation system, protects sensitive passenger data, and stops hackers from breaking into vital systems. The simulation analysis is conducted on the assumption that the system can maximize its security, privacy, and efficiency to create a more trustworthy transportation network.

Innovative Solutions for Gallery Administration: A Case Study of Modern Dashboards

Abstract : Efficient management solutions are necessary for the complicated and numerous responsibilities involved in the administration of art galleries and exhibitions. The design, use, and effects of advanced dashboard administration interfaces for gallery management are examined in this study. The study looks at the key components of a successful gallery dashboard, such as user experience, data integration, security, and user interface design. The study used a mixed-methods approach, combining user surveys, case studies, and expert interviews to identify the critical elements of effective gallery administration. The results show that well-designed dashboards greatly increase operational effectiveness, facilitate better decision-making, and offer strong assistance for curatorial tasks. The study ends with suggestions for creating and putting into practice gallery dashboard systems that can adapt to the changing requirements of contemporary art galleries, stressing the significance of customization, both user-centric design and scalability. This study adds to the body of knowledge about digital technologies in art management and provides useful information for software developers and gallery managers. Keywords – DotNet , Php, WordPress , Steamlight.