Security Elements Research Articles

An Ontology-Based Dynamic Attack Graph Generation Approach for the Internet of Vehicles

With the development of automobile intelligence, the security of the Internet of Vehicles has become a key factor that affects the development of intelligent vehicles. However, existing security risk analysis methods for the IoV either focus only on certain levels, such as the component level, or perform only a static analysis. This paper proposes a dynamic attack graph generation method for the IoV to identify and visually display the security risks caused by the associated vulnerabilities in an IoV system. First, using the actual architecture of the IoV, this paper shows how to model the security elements and their relationships in the IoV system and proposes a network security ontology model for this system. Second, it shows how to construct a reasoning rule base according to the causal relationship between the vulnerabilities using the Semantic Web Rule Language Finally, in view of the rapid change in the network topology of the IoV, a dynamic attack graph generation algorithm based on an ontology reasoning engine is proposed, which can effectively reduce the overhead caused by the changes in the attack graph. The effectiveness of the algorithm is demonstrated through an actual security event scenario and a constructed scenario. The experimental results show that the algorithm can dynamically and accurately display the network attack graph of the IoV. The proposed method is helpful in globally analyzing the threat caused by the combined exploitation of the vulnerabilities in an IoV system and risk management.

Making the Puzzle Pieces Fit – Utilizing UAF to Model a Cybersecurity SoS

ABSTRACTWhile there are security bundles on the market, most IT departments operate with a wide range of products (an average of 75) just to secure their network (Zurkus 2016). Companies developed the security products independently and offer little to no cross‐product integration. Although many people treat cybersecurity infrastructures as systems, it is far better to view them as a System of Systems (SoS) as many different parts of an organization develop, manage, and operate the systems they must protect. So, for system engineers attempting to secure systems, utilizing the Unified Architecture Framework (UAF) to create a map of these systems and software and how they must integrate is a far better practice than SysML. Not only is UAF specifically designed to handle an SoS, but it includes Security Viewpoints which can more easily represent the complex interactions between individual security systems. In this article, we will briefly discuss an introduction to UAF, explain its benefits when modeling integrated security for complex systems of systems, offer solutions to the most common issues encountered when attempting to model the interactions between security elements, and demonstrate how they address the FuSE concepts of security orchestration and architectural agility.

Информационная безопасность России: способы укрепления посредством системы образования

Modern Russian society is experiencing a state of “zeroing out” of old, obsolete social, political, economic, socio-cultural constructs. This state of society is caused by parallel internal and external processes transforming it. The discourse of such a state of society formulates a request to preserve and strengthen the national security of the state as a whole. In the light of recent foreign policy events and changes in dispositions on the world stage, as well as the shift in the policy of Western states towards the promotion of widespread “de-russification”, one of the key elements of such security is information security. In the conditions of social reality, its cognitive and socio-psychological aspects acquire a qualitatively new status demanded by society. In this regard, the author formulates the need for a scientific and methodological approach to the problem of finding solutions in order to preserve, strengthen and increase information security in the context of not only physical, but also mental, as well as psycho-emotional preservation in the conditions of modern social reality. The paper actualizes the requirement to ensure information security through one of the system-forming social institutions. Education, which is functionally capable of performing both the role of a “mirror” of society and an instrument of its transformation, should play a priority role in strengthening Russia’s information security. In order to develop ways to preserve information security, it is proposed to categorize the main components of education as a process according to the principle of content and practical aspects. Further, the article presents relevant practice-oriented recommendations.

INTERNATIONAL EXPERIENCE FOR WAR-TIME MONETARY POLICY: LESSONS FOR UKRAINE

Monetary policy directly acts as a significant element of national security. Rather than merely influencing economic security, it is relevant in broader terms as its results indirectly affect the social, ecological and other aspects of societal existence. The paper considers the examples of monetary policy implemented in war-time of different eras based on the existing system of monetary management (Bretton Woods, post-Bretton Woods, inflation targeting, floating exchange rate, etc.). Focus is placed on the changing principles of monetary policy during the war waged by Russia against Ukraine. On the one hand, Russia’s monetary policy has returned to the administrative practices of the USSR and has practically suspended conversion of the ruble. On the other hand, Ukraine has employed limited administrative restrictions as the National Bank of Ukraine tries to uphold the main principles of market economy. The author concludes that despite the reoccurrence of some key approaches, in general, the international experience indicates the absence of any particular standards of war-time monetary policy. Therefore, evidently in such conditions it is more reasonable to develop an individual approach to monetary policy that takes into account the experience of other countries in one way or another.

Система принятия решений с разнотипными элементами

The corporate environment currently focused on the inclusive workflow, involves bringing together employees from different countries to achieve a common organizational goal. Difficulties that arise in the process 
 of achieving it may be due to a lack of sufficient experience or, on the contrary, past experience interferes with making a decision. To overcome such problems, it is important to develop a decision support system, a team deci-sion support tool and an information system for managers. The information security of the decision-making system is carried out by modeling the security elements of the system that analyze the integrity of information in the process of its operation. Information security modeling is based on information security methods based on ungrouping and creating subsystems with heterogeneous data. This method is provided by a graph and hypograph implementation, which can be converted to a matrix form. For the conceptual apparatus there are used the rules in the form 
 “If A, then B” and their analogues. The model of functioning the decision-making system based on the multi-agent approach is described. The results obtained can be used in the creation of simulators and decision-making systems themselves in various subject areas. By separating data flows into computational and executive ones, data types are distinguished and better modeling of the entire system is carried out. The solution of the problem of maximum fulfillment of the goals set for the decision-making system can be implemented by modified network methods, such as Markov nets, Petri nets, etc.

The Borderline between Private and Public Security

A few years ago, a White Paper was published by the Confederation of European Security Services (CoESS) with the collaboration of the Institut National des Hautes Études de Sécurité (INHES) on the security market of the European Union. The authors identified several reasons why public and private security providers in the member states share the market and why they are bound to cooperate for the public good, that is, the security itself. However, the states’ law enforcement capacities cannot cover all security demands of the public due to the finite (mainly budgetary) resources that always set capacity limits hence congestions in the assignments of police services occur from time to time. Private security operatives fill into the supply gaps occurring in a fragmented security landscape in Europe. Due to the variables in the market share, countries made their patterns in public and private security components, the statutory frameworks, and the traditions concerning the role played by the commercial security sector in overall security provisions. Here a typology may be formed from the clusters of countries following alternative approaches, respectively. There is a border zone between the two sectors. The exclusive public security domain gives way to areas of common interest and moves on to where private security takes precedence, and public actors only play a supervisory role. This article examines the boundary zone in multiple approaches, attempting to stipulate the red line between the two security elements.

Synthesis of nano-optical elements for zero-order diffraction 3D imaging

A method is proposed to compute and synthesize a microrelief to produce a new nano-optical element for forming 3D images with full parallax at the zero order of diffraction. The synthesis of nano-optical elements requires the use of multilevel structures. A method is developed for the first time to compute the phase function of such nano-optical elements. Optical security elements that produce the new security feature are synthesized using electron-beam technology. The accuracy of microrelief formation is 10 nm in terms of depth. A sample optical security element is manufactured, which when illuminated by white light, forms a 3D image at the zero order of diffraction. Photos and video of the new 3D visual effect exhibited by real optical elements are presented. The optical elements developed can be replicated using standard equipment employed for manufacturing security holograms. The new optical security feature is easy to control visually, safely protected against counterfeiting, and designed to protect banknotes, documents, ID cards, etc.

Small pelagic fish in Senegal: a multi-usage resource

The objective of this article is to analyse the marketing of small pelagic fish in Senegal and the issues involved in context of growing national and regional demand and the emergence of new uses, particularly the processing of fish meal. The method consisted of compiling and analysing data (2009–2018) on national small pelagic fish production, foreign trade and the Senegalese population. In Senegal, fish consumption is largely supported by small pelagic fish, which account for 82% of consumption. This represents an average consumption of 13 kg per individual over the period 2009–2018. At the same time, artisanal processing, which is an important element of Senegal's food security, is mainly fed by small pelagics. However, the emergence of non-food uses and export trends of coastal pelagics threaten national food security and the sustainability of small pelagic stocks. Export levels of these species have increased from less than 71,000 tons to over 200,000 tons over the same period coupled with annual industrial non-food processing (fishmeal) of over 20,000 tons. All these mechanisms are responsible for the decline in per capita consumption of small pelagics in Senegal, from 18 kg in 2009 to 9 kg in 2018. As a food safety net in Senegal, the new uses of coastal pelagics threaten the supply of fish products to the local market. The drop in supply to the artisanal processing sector also threatens the employment of thousands of women and compromises their livelihoods.

Антироссийские экономические санкции США в нефтяном секторе: вызов или стимул для внешней политики РФ?

Oil is a determining factor of international relations and a crucial element of energy security for oil importing states. Control over major world oilfields and influence on oil prices are key factors safeguarding sustainable dominance on the international arena. Russian oil resources are both a curse and a blessing as they increase vulnerability of Russian economy and politics. Oil price fluctuations and geopolitical situation are the weak sides of Russian oil industry. Major anti-Russian US sanctions imposed after Crimea reunion with Russia in 2014 are aimed at preventing western cooperation with mostly state-owned Russian oil companies in the oil and gas high tech sphere and other sectors of economy. Despite the opinion shared by many Russian and western experts that sanctions effect is positive and has stimulated Russian scientific and economic development and has increased oil production, there is enough evidence of sanctions efficiency that poses a threat to Russian oil industry development given the lack of investments into Russian economy and vague legal language of sanctional norms. The article focuses on necessary actions of Russian oil companies under sanctions and prioritizes development actions and political steps to be taken under sanctions.

Readiness As A Defence Performance Indicator

Understanding the limits of a nation’s ability to build and deploy mission-ready armed forces is a fundamental element of national security. The determination of optimal defence (military) capabilities to be developed and maintained, along with the associated states of readiness, is the major challenge to defence planners. Those involved in security and defence policymaking and planning processes usually stress the importance of keeping a state’s military capabilities ready. While they generally agree that every function of the defence enterprise should directly or indirectly support the formation of a mission-ready military now or in the future, their views on what readiness is, and therefore, how to manage it and use it as a resource management and performance measurement tool, often diverge. In this article, the use of readiness as a defence performance indicator has been discussed, and a performance framework for a major force program has been proposed as well. Despite its shortcomings, it is very important to include the “readiness level” as an output indicator in the defence program structure of the Ministry of Defence. The target readiness levels of the military units should also be specified in the defence strategy and planning documents, as well as procurement objectives and descriptions of acceptable risk. Evaluation of the performance of managers at all levels should be directly related to the achievement of the specified (planned) levels of readiness or to the contribution to the achievement of the latter. The Ministry of Defence is only successful to the extent that it produces one primary output: military capability - organized, equipped, trained, and sustained mission-ready defence forces that can be verified and confirmed by using readiness assessment methods. Therefore, military readiness should be of great importance to the Ministry of Defence, the Government, and the Parliament of a state as a key factor in determining defence funding needs when debating on defence budget issues.

Secure Coding and Software Vulnerabilities in Implementation Phase of Software Development

The methodology in software development has shifted from waterfall to agile, which has earned appreciation as cost-effective development due to its speedy software delivery, under limited time constraints. At the same time, cyber attacks have become more surreptitious that are pretending threats to software. Security elements and practices in software development phases eliminate software vulnerabilities. Vulnerabilities happen in the software due to the unavailability of security practices during the levels of software enhancement. Software development using secure coding practices can resist the software from exploitation. Thus, the paper focuses on the detailed view of security weaknesses in the implementation stage of the software development life cycle (SDLC). The paper explains the non-compliant codes which expose vulnerabilities that can benefit the attackers to gain unauthorized access, therefore providing the mitigation to furnish a complaint code resistant to exposure. Both secure and vulnerable features can be curved from the source code. This paper concentrates on the human aspects of software security, including human actions and motivation. This paper enables us to learn about and promote secure coding standards for frequently used programming languages, regardless of the device used for programming.

RUSSIA AND KAZAKHSTAN: COOPERATION IN THE FIELD OF SECURITY AT THE PRESENT STAGE

The study of security issues: it is especially topical issue, not only for modern Russia, but for the whole world. In the first place, it is linked to a variety of changes have taken place over the last decade. The results of these changes have affected the society and to consider economic, political, ideological, military, and cross-state social policy, has led to a destruction of the basic elements of national security. In some areas, these processes go hand-in-hand with the increase of the voltage. The analysis of the unstable situation in the region of the Caspian Sea, clearly shows that the security of its multiple facets. Factors affecting between: • Internal events and the political, social and economic changes in the littoral states of the caspian sea. • Issues related to the security features of the geopolitical situation in the Caspian region, are the regions of strategic importance not only for Russia and the countries of the region, but also other countries from different regions. The security of the Caspian region depends on several aspects, each of which can be separated from the formation of the object. It is, for example, the legal status, the state and prospects of the Caspian Sea for the extraction of oil and gas, infrastructure, transportation, as well as other political and economic threats related to the response of individual countries bordering the caspian sea or the region. all of the energy factor. Therefore, to ensure the recognition of friendly relations "caspian five", in close collaboration with the country of establishment there is a full security system.

A Secure Platform Model Based on ARM Platform Security Architecture for IoT Devices

The proliferation of Internet of Things (IoT) devices comes with many challenges among which security is one of the most serious issues. In order to address the security issue for low-end IoT devices, ARM recently proposed the platform security architecture (PSA), which provides execution isolation to safely manage and protect the computing resources of low-end IoT devices. However, developers implementing IoT services for PSA-based IoT devices need to follow complex development procedures and understand the PSA hardware, which dramatically increases the development time and cost of PSA-based IoT devices. This article analyzes vulnerabilities that may arise from general-purpose low-end IoT devices to derive the security requirements and essential security services for PSA-based IoT devices, and proposes a secure platform model based on the analysis results. The proposed secure platform model consists of System Security Services and Application Security Services based on the basic PSA model and essential trusted subsystems, and it is designed to be flexible and applicable to various types of PSA-based IoT devices. In addition, it provides secure platform services APIs to enable easy and fast development of IoT services. To evaluate the proposed secure platform model, two proof-of-concept implementations are provided by using both the basic PSA model with secure element (SE) and a reference device for ARM’s PSA. Finally, a case study shows that the development of IoT services can be done easily and quickly using the proposed security platform model.

Северная и арктическая специфика решения проблемы продовольственной безопасности.

The results of scientific research on the features and priority areas of strengthening food security of the population of the northern and Arctic territories are presented. The theoretical and methodological basis was the works of scientists in the field of food security. Analytical and statistical methods, methods of analogies, and expert assessments were used. The sources of information were data on the socio-economic development of the regions of the Far North and areas equated to them, Unified Interdepartmental Information and Statistical System (EMISS), Comistat, scientific publications on the research topic. The constituent elements of food security at the country and regional levels have been identified. Approaches to solving food security in the countries of the world are considered. The assessment of the state of food independence of Russia is given. The features, risks and threats to food security in extreme living conditions associated with the destruction of the material base of agriculture, the shortage of qualified personnel in the industry, the degradation and underdevelopment of rural infrastructure, the transport inadmissibility of remote areas for guaranteed food supply to their population, the decrease in food safety and quality, the inaccessibility of the poor to high-quality and safe food in accordance with rational consumption standards, the imperfection of regulatory and legal regulation and the organization of control over the quality and safety of food. The priority directions of ensuring food security are substantiated, including increasing own agricultural production, improving interregional links of food supplies to the regions of the North and the Arctic, improving the demographic situation, developing transport and trade infrastructures in rural areas, improving regulatory and legal regulation in the field of food safety and reducing rural poverty. The new approach to food security, which differs from the traditional one, is the sustainable development of rural areas, the creation of favorable living conditions for their population, and the reduction of poverty. Recommendations and suggestions can be used in the development of directions for improving state policy to strengthen food security of the population of the North and Arctic zone, as well as in the further research work of the author.

OPTIMIZATION OF THE MAIN DIRECTIONS OF THE DEVELOPMENT OF ANIMAL HUSBANDRY IN KAZAKHSTAN BY THE BENCHMARKING METHOD

Animal husbandry has always been considered one of the main directions in the agricultural sector of Kazakhstan, being an integral element of the strategic food security of the state, providing employment and income generation for the population. One of the main indicators characterizing the well-being of the country is the consumption of livestock products per capita. Therefore, it is necessary to pay due attention to the qualitative development of agriculture, in particular the development of animal husbandry and increasing its efficiency.Kazakhstan has great opportunities for the development of animal husbandry, this is due, first of all, to the country's natural competitive advantages, such as: favorable natural and climatic conditions, the availability of pastures, as well as the proximity of markets.The purpose of the research was to optimize the main directions of development of animal husbandry in Kazakhstan using the benchmarking method. The processing of scientific and statistical material was carried out by the method of comparative analysis using benchmarking elements. The task of the research included the study of technical, economic and natural and climatic indicators characterizing the level of development of animal husbandry in the countries closest to Kazakhstan in terms of resource provision and climatic conditions. The article presents a comparative analysis of countries such as Mongolia and Canada, it should be noted that the selected objects of comparison are similar in terms of the specifics of the introduction of animal husbandry in Kazakhstan. Such an approach to solving the problem associated with the further development of animal husbandry based on benchmarking contains a certain element of novelty.When calculating planned indicators, normative, calculation-analytical and optimization methods were used.

Computer-Generated Holograms Application in Security Printing

In the present article the application of computer-generated holograms in security printing was considered. The main subject was creation of informative memory marks based on CGH for automatic read out of the information embedded in this marks that can be used for identification, copyrighting, or other types of authentication control of security elements. The fundamental theoretical basics of computer-generated holograms and its applications were given. The proposed technical solutions, such as “Printed hologram”, “Smart verification”, and “Holomemory”, were considered in detail. The announced solutions were presented in the schemes of interaction between manufacturers of security printing and its potential consumers—citizens and regulatory government agencies.

THE LEGACY OF SPICE ROUTE

Panglima Laot is a cultural institution that has existed for a long time in Aceh. Starting in the 17th century, Panglima Laot consistently made an essential contribution to the coastal communities of Aceh, especially in preserving the marine environment by implementing and enforcing Adat Laot. While most research only discussed Panglima Laot's contribution to Aceh’s marine environment with its unique customary law, this research aspires to explore the role of Panglima Laot in the context of maritime security in Aceh. By utilising the maritime security matrix from Bueger, this study found that Panglima Laot contributed to realising four critical elements of maritime security: human security, marine environment, economic development, and national security. The contribution was obtained from the effective cooperation carried out by maritime security stakeholders in Aceh with Panglima Laot. These maritime security stakeholders are Aceh Regional Police, the Department of Maritime Affairs and Fisheries of Aceh Province, and the Indonesian Navy.

An Efficient Algorithm to Compute the Linear Complexity of Binary Sequences

Binary sequences are algebraic structures currently used as security elements in Internet of Things devices, sensor networks, e-commerce, and cryptography. In this work, a contribution to the evaluation of such sequences is introduced. In fact, we present a novel algorithm to compute a fundamental parameter for this kind of structure: the linear complexity, which is related to the predictability (or non-predictability) of the binary sequences. Our algorithm reduced the computation of the linear complexity to just the addition modulo two (XOR logic operation) of distinct terms of the sequence. The performance of this procedure was better than that of other algorithms found in the literature. In addition, the amount of required sequence to perform this computation was more realistic than in the rest of the algorithms analysed. Tables, figures, and numerical results complete the work.

Education as an Element of Economic Security of the State

Education as an Element of Economic Security of the State

A Food Security Indicator Framework for British Columbia, Canada.

Food security is a determinant of health and increasingly recognized as a focus for health promotion. Led by the Population and Public Health Program, British Columbia Centre for Disease Control, this article outlines the process of development and the evidence-based conceptual framework that guides the systematic selection of food security indicators in the Province. A phased, iterative approach to develop the food security framework was adopted. Phase 1 consisted of a literature search of food security indicator models, and key informant discussions. Phase 2 consisted of modification of the model based on stakeholder consultation. The framework development occurred between January 2016 and April 2019. A structured scan of the literature found no existing conceptual frameworks specific to food security indicators in the Global North. The most relevant and frequently used frameworks for indicator reporting identified were environmental health indicator frameworks. This article presents a matrix framework based on existing environmental health indicator frameworks. It integrates environmental health causal networks (e.g., determinants-current state-impact-response) with food security elements identified as (a) individual and household food insecurity, (b) food systems, and (c) capacity. This framework contributes to food security performance monitoring in the Global North and fills an important gap in evaluating the impact of the public health response to food security. Use of this comprehensive framework can enable program planners and policy makers to be clear about where and how they are attempting to assess, influence and monitor food security, and illustrate the interconnectedness between indicators.