Security Evaluation Method Research Articles

SDN-based security low-latency data storage and distribution scheme for industrial Internet of Things

For the problem that massive data and cloud computing in the industrial Internet of Things cannot meet the requirements of low latency, a cloud hybrid network architecture is proposed. In the single user scenario, RS coding is used to realize data redundancy, and the security evaluation method is put forward on this basis. By using the ant colony algorithm, the data transmission delay and security objective function are established to obtain the best allocation scheme. In the multi-user scenario, the SD-CFIIoT architecture is constructed by combining SDN and fog computing technology. The optimal solution is found by applying the ant colony algorithm to solve the objective function of the data transmission delay. Simulation results show that when the security constraint is 0.9, the data transmission delay of RS is 5.04 s, which is 0.18 s less than LDPC; 0.19 s less than MBR. When the safety constraint is 0.9, the delay of the cloud mixed structure is 5.82 seconds; 1.53 seconds less than the cloud core structure and 1.20 seconds less than the fog core structure. When the data volume reached 80 MB, the delay of SD-CFIIoT was 2.20 s, 6.61 s lower than the fog structure and 15.80 s lower than the cloud structure. The simulation results prove the effectiveness of the proposed scheme, which can ensure data security while realizing low delay data transmission, improve the efficiency of the Internet of Things, and then improve the industrial production efficiency. This has a certain positive significance to the industrial modernization and intelligent development.

Improving computer network security evaluation with grey relational analysis and probabilistic simplified neutrosophic sets

The popularity of computer network has provided great convenience for people’s work and life, but it has also brought corresponding information security problems. It is very important to do a good job in computer network security evaluation. Conventional computer network security evaluation can be realized with the help of firewalls, antivirus software, etc., while in the face of complex computer network applications, it is necessary to adopt a security evaluation method with good operability and wider application range. The computer network security evaluation is viewed as multiple attribute decision-making (MADM) issue. In this paper, an extended probabilistic simplified neutrosophic number grey relational analysis (PSNN-GRA) method is established for computer network security evaluation. The PSNN-GRA method integrated with Criteria Importance Though Intercrieria Correlation (CRITIC) method in probabilistic simplified neutrosophic sets (PSNSs) circumstance is applied to rank the optional alternatives and a numerical example for computer network security evaluation is used to proof the newly proposed method’s practicability along with the comparison with other methods. The results display that the approach is uncomplicated, valid and simple to compute.

A generalized integrated group decision-making framework for computer network security evaluation with Interval Neutrosophic information

The rapid development of global information technology, especially the emergence and widespread application of the Internet, has enabled information technology to quickly penetrate into various fields of the economy and society. Informatization and networking have become important features of today’s era. However, while people enjoy the tremendous progress brought by information technology to humanity, the openness and security vulnerabilities of computer networks have also made network information security issues increasingly prominent. The invasion of hackers, the continuous generation and spread of computer virus, and the rampant use of rogue software have all caused great economic losses to individuals, enterprises, and countries. The computer network security evaluation is a multiple-attribute group decision making (MAGDM). Then, the TODIM and TOPSIS method has been established to deal with MAGDM issues. The interval neutrosophic sets (INSs) are established as an effective tool for representing uncertain information during the computer network security evaluation. In this manuscript, the interval neutrosophic number TODIM-TOPSIS (INN-TODIM-TOPSIS) method is established to solve the MAGDM under INSs. Finally, a numerical example study for computer network security evaluation is established to validate the INN-TODIM-TOPSIS method. The main research contribution of this paper is established: (1) the INN-TODIM-TOPSIS method is put up for MAGDM with INSs; (2) the INN-TODIM-TOPSIS method is put up for computer network security evaluation and were compared with existing methods; (3) Through the detailed comparison, it is evident that INN-TODIM-TOPSIS method for computer network security evaluation proposed in this paper are effective.

Research on the security of China's oil resources supply based on the objective weight method

With the rapid development of China's economy, external dependence on petroleum resources continues to increase, and their security has become an important part of national security. To evaluate the security of China's petroleum resource supply in a scientific and objective manner, this study establishes a corresponding petroleum life-cycle evaluation index system, based on the theory and method of the whole life-cycle security evaluation of mineral resources, and conducts further independence and grey correlation analysis on the indexes for the purpose of evaluating the petroleum risk situation in China, based on relevant public data from the past 10 years. The results show that the overall trend of China's oil risk has a “U”-shaped characteristic of first decreasing and then increasing. Furthermore, the analysis finds that China's mineral resources have been greatly influenced by the domestic production situation and international trade. These results suggest that the security of petroleum supply can be improved by safeguarding international trade in petroleum resources, strengthening the strategic reserves of domestic petroleum resources, and developing new alternative clean energy sources to improve the resilience of petroleum supply security. This study's research methodology is more logical and systematic than traditional methods, and the analysis of the factors is comprehensive and of high application value, providing implications for the establishment of a big data analysis and evaluation index system for oil resource security.

Blockchain-based data management mechanism for virtual power plants

Abstract With the gradual deepening of power-related research and the expansion of power data volume, power data-oriented research and applications have fully entered the era of big data and cloud storage. The huge amount of heterogeneous data samples also bring a huge impact on traditional data processing methods. Therefore, let each virtual power plant participate in the electricity market externally as a unified power plant, and build a blockchain structure of multiple virtual power plants in the form of a slice. The structured data such as the basic information of the account is stored in the enterprise database in a relational data model and managed through an identity verification policy. The mechanism of off-chain negotiation and on-chain settlement is used to manage the transaction data. The management mechanism is further improved by combining an encryption scheme and a security evaluation method. After the practical test of the management mechanism, the time consumed for one and two parallel operations reaches 23 seconds and 8 seconds, and 4 seconds and 9 seconds or less for three and four times, respectively. In the case of nine users’ data distortion, the root means the square value of the blockchain data management mechanism is only 0.82, which is significantly less than 1. It shows that the blockchain-based data management mechanism, as a new generation of power data management means, can not only effectively integrate the power grid information data and relieve the pressure of the power grid system, but also avoid data leakage and strengthen power security.

Security Evaluation Method of Smart Home Cloud Platform

The application of artificial intelligence of things (AIoT) is becoming increasingly widespread. With its rapid development, it has raised many complex network security issues. These have brought crushing security threats and risks to all stakeholders. AIoT cloud platform in the smart home plays a vital role in the security management of devices and is the current research hotspot. This paper discusses the security of the AIoT cloud platform, represented by the smart home. The indicator system describing the protection of the smart home cloud platform is proposed, and the security risk evaluation method of the cloud service is formed. Based on the evaluation method, a lightweight security evaluation framework for smart home cloud service is designed to evaluate the typical cloud platform’s security. The evaluation identifies some technical and administrative issues. Finally, to improve the security of the cloud console of AIoT and discover potential security risks in time, a security self-test model of the scalable cloud console is proposed.

An Evaluation Method of the Anti-Modeling-Attack Capability of PUFs

The physical unclonable function (PUF) is regarded as the root of trust of hardware systems. However, it suffers from the modeling attacks based on machine learning (ML) algorithms. Subsequently, the anti-modeling-attack PUF is of great concern from academia and industries in recent years. In practice, the security of a given PUF is evaluated after the pertinent attacks. However, these evaluation methods are not helpful for the PUF design, because the relationship between the PUF structure and the anti-modeling-attack capability is not established explicitly. This work proposes a security evaluation method of PUF based on the mimic attack and the Probably Approximately Correct (PAC) theory. The anti-modeling-attack capability of PUF is measured by the corresponding area enclosed by the evaluation curve. Twenty representative types of PUFs with different sizes are evaluated by the proposed method. It shows that the proposed method is effective, because the evaluation results are consistent with the difficulties of modeling attacks for the corresponding PUFs in the design practices. And the evaluation results are able to assist the PUF design.

A Conditional Privacy Preserving Generalized Ring Signcryption Scheme for Micro Aerial Vehicles.

Micro Aerial Vehicles (MAVs) are a type of UAV that are both small and fully autonomous, making them ideal for both civilian and military applications. Modern MAVs can hover and navigate while carrying several sensors, operate over long distances, and send data to a portable base station. Despite their many benefits, MAVs often encounter obstacles due to limitations in the embedded system (such as memory, processing power, energy, etc.). Due to these obstacles and the use of open wireless communication channels, MAVs are vulnerable to a variety of cyber-physical attacks. Consequently, MAVs cannot execute complex cryptographic algorithms due to their limited computing power. In light of these considerations, this article proposes a conditional privacy-preserving generalized ring signcryption scheme for MAVs using an identity-based cryptosystem. Elliptic Curve Cryptography (ECC), with a key size of 160 bits, is used in the proposed scheme. The proposed scheme's security robustness has been analyzed using the Random Oracle Model (ROM), a formal security evaluation method. The proposed scheme is also compared in terms of computation cost, communication cost and memory overhead against relevant existing schemes. The total computation cost of the proposed scheme is 7.76 ms, which is 8.14%, 5.20%, and 11.40% schemes. The results show that the proposed scheme is both efficient and secure, proving its viability.

Planning and Energy–Economy–Environment–Security Evaluation Methods for Municipal Energy Systems in China under Targets of Peak Carbon Emissions and Carbon Neutrality

In order to mitigate the negative effects of global climate change, the Chinese government has committed to achieving peak carbon emissions by 2030 and carbon neutrality by 2060. Since municipal cities are the bottom administrative level for drawing up development plans, it is necessary and important to conduct decarbonization pathway research on municipal energy systems (MESs). However, there is little research on decarbonization at the municipal level, and the impact of development paths in each forecast scenario is mostly based on expert evaluation and qualitative assessment. Therefore, this study established a complete decarbonization framework for MESs, including general research procedures, models, and a sustainable evaluation method. The models of energy consumption and carbon emission were adapted and improved for MESs. In order to quantitatively evaluate the energy system development for each scenario, we proposed an energy–economy–environment–security (3E–S) evaluation method, in which principal component analysis (PCA) was adopted for multi-criterion decision making. According to the analysis results of the case city in Guangdong, this evaluation method was proved to be an effective way to identify the factors that may influence coordinated development. By adjusting the relevant parameters and factors in the model, the optimal decarbonization pathway can be found to promote sustainable and coordinated development, thus helping government decision makers to quantitatively evaluate planning paths.

Computer network security evaluation method based on improved attack graph

ABSTRACT The traditional security detection and defense methods are relatively backward, and there are many problems, such as high false alarm and missed alarm rate, and detection lag, which have been difficult to meet the requirements of computer security defense. In order to strengthen the active defense of computer network security and improve the classification and prediction performance of computer network security events, a computer network security risk assessment model based on mrmr Ig feature selection model and attack graph model is proposed. The mrmr Ig feature selection model is used to classify the characteristics of security events, and the hidden Markov chain model and attack graph model are used to predict the attack intention. The experimental results show that the classification accuracy rate of the model is 99.79%, the false alarm rate and the false alarm rate are 0.11% and 0.18%, respectively. The model can accurately predict attacks in real time, and can provide reference for timely taking targeted computer network security reinforcement and active defense measures.

Regulation simulation of land‐use ecological security, based on a CA model and GIS: A case‐study in Xingguo County, China

AbstractEcological land is constantly modified by agriculture and construction, which leads to soil erosion, land degradation, soil pollution flood disasters, and many other land ecological security problems, threatening sustainable development. Few studies have been made to construct a land‐use ecological security pattern (LUESP) aimed at achieving urban expansion, food security, and ecological security from the perspective of land‐use needs. This study seeks to provide decision makers with the choice of multi‐scenario LUESPs by simulating the LUESP under different scenarios, offering a reasonable land‐use ecological security regulation strategy. In this paper, the ecological security evaluation method was used to identify key ecological space of a study area and the scenario analysis method was used to set up three security scenarios: ideal security (IS) scenario, satisfactory security (SS) scenario, and bottom‐line security (BS) scenario, thereby constructing the constrained cellular automata (CA) model of the LUESP and simulating the LUESPs under three security scenarios for Xingguo County, China. The results showed that the LUESP construction land index and arable land index did not exceed the total amount of the General Plan of Land Use in Xingguo County under the three security scenarios. Moreover, both key ecological space loss and landscape fragmentation degree were greatly reduced, the ecological patches tend to cluster, and the anti‐jamming ability of the landscape pattern was enhanced. The ranking of LUESPs under three security scenarios was as follows: BS scenario > SS scenario > IS scenario. These results implied that the LUESPs met the demand for land in Xingguo County for ecological security, food security, and economic development, while space occupied is different under three security scenarios. The decision makers can adopt appropriate land‐use ecological security regulation strategies according to the future development plans of the region.

Regional water resources security grading evaluation considering both visible and virtual water: a case study on Hubei province, China.

The security of water resources is of great importance to long-term sustainability. In order to better ensure the security of water resources, a significant link is to conduct water resources security evaluation, which should be considered from many perspectives as it involves natural reserves, social production, the efficiency of use, and environmental protection. In this paper, a fuzzy analytic hierarchy process sort (AHPSort) II-entropy weight (EW) method for regional water resources security evaluation is proposed based on the security of visible water and virtual water. Firstly, this paper takes into account the criterion of efficiency of water use in addition to two other criteria of quantity of water resources, pressure on water resources to establish a comprehensive water resources security evaluation system. Secondly, a combination method of hesitant fuzzy language judgment and entropy weight is employed to obtain the weight of each indicator. Thirdly, AHPSort II is used to classify the security levels of the evaluated regions, in which the security levels of regional water resources are divided into five levels. Furthermore, a case study on the cities of Hubei province, China, is conducted to show the applicability of the proposed method, the effectiveness, and reliability of the method are then verified by being compared with a subjective method and an objective method as well as sensitivity analysis. Finally, according to the comprehensive evaluation results, specific management suggestions for improving the water resources security in the case are put forward.

Tight and Scalable Side-Channel Attack Evaluations through Asymptotically Optimal Massey-like Inequalities on Guessing Entropy.

The bounds presented at CHES 2017 based on Massey’s guessing entropy represent the most scalable side-channel security evaluation method to date. In this paper, we present an improvement of this method, by determining the asymptotically optimal Massey-like inequality and then further refining it for finite support distributions. The impact of these results is highlighted for side-channel attack evaluations, demonstrating the improvements over the CHES 2017 bounds.

Ecological security evaluation and ecological regulation approach of East-Liao River basin based on ecological function area

Watershed ecological security provides the basic guarantee of regional sustainable development; thus, reliable watershed ecological security evaluation is of great significance in revealing the watershed ecological security status and promoting the healthy development of the watershed society and ecological environment. To construct the ecological function area, this study used the East-Liao River basin as the analysis object and discussed the delimitation method of ecological security evaluation, which provided the reference and basis for studying and exploring the optimal ecological regulation method of the basin. The following results were obtained: from 2000 to 2020, the regions with lower ecological security index changed from northwest to southeast of the watershed, and presented the spatial distribution of “unsafe” → “generally safe” → “relatively safe” → “safe”, with the center of gravity concentrated in the middle of the watershed; the spatial differences of ecological security became significant with the addition of ecological function zones, and they show a certain spatial aggregation trend; from 2000 to 2020, the ecological security level was predominantly safer, and the distribution of gravity center showed a circular state; the ecological security level of the watershed can be improved by adjusting the proportion of regional land use types. According to the results, countermeasures and approaches of watershed ecological security regulation were suggested, and four subareas were established: forbidden development zones, traditional utilization zones, ecologically sensitive/fragile zones, and key ecological function zones; this would provide a basis for further analysis of environmental governance in the East-Liao River basin of Jilin Province. Nevertheless, the countermeasures and approaches of ecological security regulation proposed in this study will also be useful for land use planning and runoff management in other watersheds around the world.

Research on Security Protection Technology of Digital Library System in the Era of Equal Protection 2.0

New Coronavirus pneumonia is eroding the world, and digital libraries are even more important. How to control the network security of digital library system? According to the requirements of equal protection 2.0, this paper analyzes the security requirements of digital library network, and puts forward the security protection technology of digital library system under equal protection 2.0 system from the four perspectives of secure communication network, secure area boundary, secure computing environment and security management center. Based on the security protection technology framework of equal protection 2.0, this paper studies the security evaluation method of digital library, and puts forward the security protection technology solution.

Natural gas security evaluation from a supply vs. demand perspective: A quantitative application of four As

The rising share of natural gas in global energy mix has resulted in concern over its security recently. But research from a perspective of exporting countries has not attracted enough attention. This study examines natural gas security from a supply vs. demand perspective. Firstly, a natural gas security index (NGSI) is formulated to quantify the NGSI score (NGSItot) of 22 selected countries, and the approach is based on a quantitative application of the “four As” of energy security. Secondly, a balance NGSI score (NGSIbla) matrix is introduced to gauge how well a specific country manages the trade-offs among the “four As”. Key research findings are as follows: (1) Proven gas reserves per capita and Annual median PM2.5 concentration are more important than other indicators. (2) Nations that have a more balanced pattern against these four-A dimensions rank better. (3) According to the NGSIbla, eight countries fall into the Good group, ten in the Limited group, and four in the Weak group. Consequently, this study suggests that differentiated policy frameworks should be tailor-made for specific country to ensure natural gas security. This article contributes a replicable method of energy security evaluation, and a comprehensive policy framework to enhance natural gas security.

Ecological Security Assessment Based on Remote Sensing and Landscape Ecology Model

The various ecological processes of human beings are not only restricted by the landscape pattern on the regional scale but also affect the local and regional landscape together with global climate change. To date, most of the research on ecological security is based on the pressure‐state‐response (PSR) model, while there were a few studies based on the landscape ecology model approach. In addition, there has been little literature focus on the dynamic change process of ecological security, especially the simulation and prediction of the future development trend of ecological security. The purpose of this research is to establish a landscape ecological security evaluation method based on grid division, be aimed at breaking the inherent drawbacks of the administrative region as a unit mode approach, anticipated to better reflect the landscape ecological security status of the study area. A complex framework was constructed by integrating random forest algorithm, Fishnet model, landscape ecology model, and CA‐Markov model. Multitemporal remote sensing data were selected as a data source, and land use maps of the study area were obtained through the random forest machine learning algorithm firstly. And then, the study area is divided into 307 grids of 2 km × 2 km using the Fishnet model. Next, the landscape disturbance index, landscape vulnerability index, and landscape loss index are used on the grid scale to establish a landscape ecological security evaluation model. Finally, ecological security assessment of Zhengzhou city was carried out, and the distribution map of the landscape ecological status in 1986, 1996, 2006, 2016, and predicted for 2026 was obtained. The results of the study showed that, as time goes by, the areas with high ecological safety gradually decrease. It is predicted that by 2026, the ecological security level of Zhengzhou will be dominated by lower ecological security areas. The research results can provide basic information and decision support for government agencies and land use planners to ensure responsible and sustainable development of the urban environment and ecology.

基于斑块尺度的云南省景观生态安全时空演变及归因

随着人类活动的需求增强和范围扩张，建设开发、农林种植等行为不断侵占和切分原有土地系统，导致区域景观斑块小型化和破碎化，产生了诸多生态问题。云南既是我国西南生态安全屏障，同时也是生态环境比较脆弱敏感的地区，研究云南省景观生态安全及其影响因素，对区域、国家乃至国际生态安全具有重要意义。以云南省为研究对象，提出基于斑块尺度的景观生态安全评价方法评估云南省1990-2018年近三十年的景观生态安全，采用空间自相关方法分析其时空演变规律，并通过地理探测器识别影响景观生态安全的主要驱动因子。结果表明：（1）与传统生态安全评价模型相比，斑块尺度的景观生态安全模型对区域内部景观生态安全的变化更敏感，能够反映区域内部多年景观生态安全状况的细微变化。（2）云南省1990-2018年整体生态安全成本成波动上升趋势，其中"三屏两带"地区的景观生态安全状况提升明显，而滇中城市群外围以及滇东南喀斯特地带的部分区域有所下降。云南省景观生态安全的Global Moran's I指数平均值为-0.293，区域内部斑块破碎，空间分布上具有离散性。（3）云南省景观生态安全状况目前主要受到人口密度、年平均温度和海拔高度的影响；从交互驱动方面看，云南省景观生态安全空间分布是自然和人文因子共同作用的结果，其中自然因子的交互驱动作用更明显。研究结果可为云南省景观生态安全格局优化提供理论支撑与科学依据。;With the increasing demand and scope expansion of human activities, construction and development, agriculture and forestry planting and other behaviors continue to encroach on and divide the original land system, resulting in the miniaturization and fragmentation of regional landscape patches, and ecological problems. Yunnan is not only an ecological security barrier in southwestern China but also an area with a fragile ecological environment. Study of landscape ecological security and its influencing factors in Yunnan Province is of great significance to regional, national, and even international ecological security. Taking Yunnan Province as the research object, this paper develops a landscape ecological security evaluation method in patch scale to evaluate the landscape ecological security of Yunnan Province in the past 30 years from 1990 to 2018 and uses the spatial autocorrelation method to analyze its spatio-temporal evolution law. And the main driving factors affecting landscape ecological security are identified by geographic detectors. The results show that:(1) compared with the traditionally ecological security evaluation model, the patch-scale landscape ecological security model is more sensitive to the changes of landscape ecological security and can reflect the subtle changes of landscape ecological security in the region for many years. (2) The overall ecological security cost of Yunnan Province fluctuated and increased from 1990 to 2018, in which the landscape ecological security in the area of three screens and two belts improved obviously, while the periphery of the urban agglomeration in central Yunnan and some areas in the karst zone in southeastern Yunnan decreased. The average Global Moran's I index of landscape ecological security in Yunnan Province is-0.293. The patches in the region are divided and the spatial distribution is discrete. (3) At present, the situation of landscape ecological security in Yunnan Province is mainly affected by population density, annual average temperature, and altitude; from the aspect of the interactive drive, the spatial distribution of landscape ecological security in Yunnan Province is the result of the joint action of natural and human factors, among which the interactive driving effect of natural factors is more obvious. The results can provide theoretical support and a scientific basis for the optimization of landscape ecological security patterns in Yunnan Province.

Visual Quality Assessment for Perceptually Encrypted Light Field Images

Perceptual encryption has received widespread attention as a technology for protecting multimedia visual information. In multimedia applications, perceptual encryption only protects a portion of the content without previewing all the information. At present, perceptual encryption is mostly oriented to conventional plain images while few methods aim at visual security measures for perceptually encrypted images. Existing solutions usually adopt well-known quality assessment metrics to measure the visual quality of encrypted images. However, they often exhibit undesired behavior on perceptually encrypted images with low quality. As a typical representation of three-dimensional scenes, light field images record the intensity and direction of light during propagation which is distinct from 2-D images. In this paper, we construct a perceptually encrypted light field image database (PE-LFID) for quality assessment based on 14 reference light field plaintext images. For each scene, we employ four encryption methods, each of which has six levels. Additionally, a novel visual security evaluation method based on PE-LFID is proposed by taking into account the local and global features of the light field images. First, we use a multi-threshold edge detection method to obtain the edge similarity in the spatial domain of the light field image. Afterwards, the epipolar plane image (EPI) generated from the angular domain of the light field image is used to calculate the gradient magnitude similarity, which is expressed as a global feature. Furthermore, the final quality prediction score is calculated by adaptively weighting between local and global features. We conduct extensive experiments on the proposed PE-LFID to assess the performance of classical and state-of-the-art IQA models. The experimental results demonstrate the effectiveness of the proposed method for visual security evaluation of perceptually encrypted light field images, as well as the scalability of PE-LFID.

Analysis of the Impact of Combined Information-Physical-Failure on Distribution Network CPS

With the rapid development of ICT technology and automation control technology, the distribution network has gradually transformed into a distribution network cyber-physical system (distribution network CPS) with highly coupled information and physical systems. The information system supports the stable operation of the physical system but also brings about certain security risks to the distribution network CPS. Therefore, information impact should be considered in the original anticipated physical fault assessment. This paper proposes a security analysis and evaluation method for distribution network CPS considering anticipated combined information-physical fault screening. First, based on the CPS structure of the distribution network, a CPS correlation matrix model of the distribution network that can reflect the power-information coupling characteristics is established. Then, we analyze the correlation between information failure and physical failure, and we construct an initial anticipated combined information-physical-fault set according to topology and service correlations. Next, based on the fault recovery rate ordering, the key anticipated combined information-physical fault is selected. Finally, for the selected combination of anticipated failures, an assessment of the distribution network CPS security assessment indicators is carried out and verified via example.