Security Industry Research Articles

A Sequential Membrane Process of Ultrafiltration Forward Osmosis and Reverse Osmosis for Poultry Slaughterhouse Wastewater Treatment and Reuse

To address some challenges of food security and sustainability of the poultry processing industry, a sequential membrane process of ultrafiltration (UF), forward osmosis (FO), and reverse osmosis (RO) is proposed to treat semi-processed poultry slaughterhouse wastewater (PSWW) and water recovery. The pretreatment of PSWW with UF removed 36.7% of chemical oxygen demand (COD), 38.9% of total phosphorous (TP), 24.7% of total solids (TS), 14.5% of total volatile solids (TVS), 27.3% of total fixed solids (TFS), and 12.1% of total nitrogen (TN). Then, the PSWW was treated with FO membrane in FO mode, pressure retarded osmosis (PRO) mode, and L-DOPA coated membrane in the PRO mode. The FO mode was optimal for PSWW treatment by achieving the highest average flux of 10.4 ± 0.2 L/m2-h and the highest pollutant removal efficiency; 100% of COD, 100% of TP, 90.5% of TS, 85.3% of TVS, 92.1% of TFS, and 37.2% of TN. The performance of the FO membrane was entirely restored by flushing the membrane with 0.1% sodium dodecyl sulfate solution. RO significantly removed COD, TS, TVS, TFS, and TP. However, TN was reduced by only 62% because of the high ammonia concentration present in the draw solution. Overall, the sequential membrane process (UF-FO-RO) showed excellent performance by providing high rejection efficiency for pollutant removal and water recovery.

Actual features of ensuring the economic security of food industry enterprises

The purpose of the work was to consider the actual features of ensuring the economic security of food industry enterprises on the example of KDV LLC. The author described aspects that relate to the essence of the economic security of an enterprise as a basic category of analysis. The work considered three approaches to determining the security of an economic entity, while highlighting the most complex of them, which later began to be used as a base one. The author identified the levels of economic security of the enterprise, which are divided into 6 levels (proprietary, senior management, organizational structure, personnel policy and personnel motivation systems, building business processes, current financial and economic activities, analysis and control of financial and economic activities). A special place in the work is occupied by the study of the key components of the economic security of the enterprise, among which are: financial; personnel; technical and technological; fire department; legal; informational; ecological. The author noted the need to determine the system of indicators of economic security of the enterprise, which includes the following types of indicators of economic security: question; questionnaire; tabular; mathematical; graphic matrix; portfolio. After studying the theoretical aspects, the author conducted an analysis of the economic security of the food industry enterprise KDV LLC. With the help of open information sources, a characteristic of the selected economic entity was compiled. Thanks to the extensive methodological base for studying economic security indicators, the most important indicators applicable to assessing security in the food industry have been identified. In addition, a SWOT analysis was carried out by KDV LLC for a more comprehensive study of possible and existing risks.

Securing Serverless Computing: Challenges, Solutions, and Opportunities

Serverless computing is a new cloud service model that reduces both cloud providers' and consumers' costs through agile development, operation, and charging mechanisms. It has been widely applied since its emergence. Nevertheless, some characteristics of serverless computing, such as fragmented application boundaries, have raised new security challenges. Considerable literature has been committed to addressing these challenges. Commercial and open-source serverless platforms implement many security measures to enhance serverless environments. This paper presents the first survey of serverless security that considers both the literature and industrial security measures. We summarize the primary security challenges, analyze corresponding solutions from the literature and industry, and identify potential research opportunities. Then, we conduct a gap analysis of the academic and industrial solutions, as well as commercial and open-source serverless platforms' security capabilities. Finally, we present a complete picture of current serverless security research.

Nuclear Cyber Attacks: A Study of Sabotage and Regulation of Critical Infrastructure

As of 2021, the World Nuclear Association reports 440 Nuclear reactors are in operation worldwide in 30 countries generating capacity of 390 (GW) which is equivalent to about 10% of the world’s electricity. After Hydroelectric power, nuclear is the world's second largest source of low-carbon power. Important new nuclear technologies including the Small Modular Reactors (SMRs) are being developed globally creating more efficient and safer reactors that can be reproduced off site. 
 While governments redoubled their commitments to reducing greenhouse gas emissions at the UN Climate Change Conference (COP26) in Glasgow, the recovery of economies following the harsh impacts of COVID-19 led to a surge in energy demand that surpassed the growth in production from clean sources including nuclear. The safety and security of nuclear power has received renewed attention since the Russian invasion of Ukraine presenting growing concern about the potential threat of increased malevolent cyber activity against Ukraine’s critical infrastructure. Moreover, there have been more than 20 known cyber incidents worldwide at nuclear facilities since 1990. 
 To address these concerns this paper focuses on the progress of cyber security and cyber resilience in the nuclear industry globally. The 2015 cyber-attack on the Ukrainian Kyivoblenergo, a regional electricity distribution company was analyzed by multiple sources including private companies, investigators in Ukraine, and the U.S. government. The analysis revealed many opportunities to stop or prevent this attack, however, the nuclear industry continues to face serious challenges in protecting against cyber threats. This research will investigate through a comparative analysis the recent government regulations, rules and standards, for nuclear cyber security safety in the United States and internationally to determine whether these laws adequately protect energy infrastructure from cyberattacks and hold responsible parties accountable. Recent initiatives by government and the private sector to enhance the opportunities for improving cyber security in the nuclear sector will be reviewed to determine best practices for improving nuclear safety and cyber resilience.

Industry 4.0 시대 반도체 산업 현장의 산업보안 발전 방향 : 물리보안 통제요소를 중심으로

반도체 없이는 살 수 없는 시대가 왔다. PC, 모바일, 자동차 등 우리가 매일 접하는 물건에 사 용되는 것은 물론이고, 4차 산업혁명의 근간이 되는 자율주행 자동차, AI 로봇, 블록체인과 가상 자산, 사물인터넷(IoT), 5G, 메타버스 그리고 양자기술 등 모든 첨단 기술들은 반도체의 속도와 용량에 의존하고 있다. 해당 기술의 연구를 위한 비용과 인력을 투입해 개발한 첨단기술이 경쟁 국이나 기업에 넘어갈 경우 막대한 피해액은 물론이거니와 이런 유출 사고가 빈번히 일어날 경 우 기업의 기술개발 의지는 날이 갈수록 꺾일 것이다. 이에 본 연구는 델파이(Delphi) 기법을 이 용하여 전문가들의 인식 및 주장 등을 기반으로 결괏값을 도출하여 Industry 4.0시대 반도체 산 업 현장의 산업보안 발전 방향을 제시하는데 의의가 있다. 반도체 산업 보안실무자 및 산업보안 전문가 집단은 총 25명으로 이루어졌으며, 연구결과 총 33개의 최종 항목을 도출하였다. 이 중 6개의 항목에서 높은 내용타당도(CVR)를 보였으며 건축구조적, 전자시스템적, 운영인력적 측면 모두 주요한 값을 나타냈다.

보안 내재화 중심의 OT 산업보안 강화 방안

4차 산업 혁명과 함께 산업제어시스템 (Industrial Control System, ICS) 환경이 분산화, 초연 결화, 지능화되면서 산업 운영 관리를 전담하는 OT(Operational Technology) 산업보안의 중요 도가 커지고 있다. ICS 환경에서 보안 침해의 파급력과 우리나라 산업과 경제에 제조업이 차지 하는 비중이 커짐에 따라 OT 산업보안 강화가 시급함을 알 수 있다. 종래의 산업제어시스템은 보안을 내재화하여 설계되지 않았고, 수명 주기가 20년 이상인 노후화되고 자동 패치하기 어려 운 시스템이다. 그리고 IT와 OT가 융합되는 디지털 혁신으로 인해 사이버 자산과 물리적 자산의 공격 표면이 커졌고, 외부 ICS 제조사와 SI(System Integrator)사에 원격 액세스를 제공해야 해서 위험성이 더욱 커짐에 따라 종래 방식의 한계점을 극복할 수 있는 견고한 보안 체계가 요구되었 다. 최근 발생한 OT 보안 사고는 IT 취약점에서 시작되는 경우가 많았다. 종래 OT 환경은 에어 갭 (Air gap) 기반의 망분리로 외부 공격이 제한적이지만, IT망 시스템과 연결됨에 따라 IT망 침 해가 발생한 후에 OT망의 피해로 이어질 수 있기 때문이다. 본 논문에서는 OT 산업이 지니는 주 요 보안 취약점 및 보안 공격 표면과 종래의 OT 보안 산업 정책을 분석하고, 이상징후를 사전에 탐지할 수 있는 보안 내재화 기반의 센서를 활용한 OT 산업보안 체계를 강화할 수 있는 기술적 방안과 정책을 제안한다.

The politics of patrolling ‘safety guards’ in Sweden: outsourcing, depoliticization, and immunization

ABSTRACT The contracting of private guards to patrol public spaces has rapidly become a widespread approach to increase public safety and prevent crime in Swedish municipalities. Drawing on interviews and policy materials from three municipalities, this paper examines how private patrolling guards has become a solution to (un)safety in Sweden, and the political implications of this development. The governmentality analysis shows how the rendering of (un)safety as technical and governable depoliticizes safety by detaching it from its social and political connotations. At the same time, in the process of demarcating the space to be ‘guarded,’ safety is problematized as a matter of order and sameness in public space, which (re)produces racialized boundaries between those to be made safe and those considered threatening safety. The study further demonstrates how the outsourcing of responsibility for public safety to the security industry is bringing about a shift in democratic legitimacy, accountability, and the monopoly on the use of force, largely without political contestation in the studied municipalities. The paper concludes by discussing the underlying rationale of this practice of governing (un)safety as informed by a biopolitical logic of immunization: safeguarding and immunizing some, at the expense of those marked as risky ‘others’.

Managing the financial impact of cybersecurity incidents

The complex relationships of economic actors and the high dependency on information and communication technologies make it necessary for all relevant entities to develop protection. This protection should include preventive and reactive controls in a risk-proportionate manner in relation to the business value protected. We aimed to develop a solution to support cybersecurity-related business decisions with financial analytics. The risk-based approach helps management find the optimum solution with minimal costs, where protection prevents some incidents from occurring, while the risks associated with other incidents are accepted in an informed way. The security industry developed a number of apparatuses to find the optimum security controls that enforced the fiscal aspects, which typically contain solutions used in planning. However, the actual expenditure often differs from the planned budget for several reasons, one of which is the occurrence of security incidents. We used the common methodology toolset for financial analysis (NPV, NFV, risk assessment). We developed novel metrics based on these that can be used in cybersecurity management. Within the framework thus defined, the article discusses the economic context of the effects of incidents involving Meta (previously Facebook) services from 2016 to 2020. This paper introduces the ‘Effect of incidents’ metric to measure the impact of unplanned incidents’ on actual expenditure compared to the planned budget and the ‘Incidence of incident recognition’ metric to measure deviations of an incident’s impact as perceived by owners relative to the effect on the value of the assets. The paper also proves the applicability of those metrics using the example of Meta.

AGROENTREPRENEURSHIP IN THE CONTEXT OF DIGITAL ECONOMY DEVELOPMENT AND ENSURING FOOD SECURITY

Agribusiness is a vital area of the economy, which provides a significant volume of production and export in Ukraine. Our state has great potential in agriculture thanks to its land resources and climatic conditions, which contribute to the development of various crop and animal husbandry types. Developing agribusiness can help reduce Ukraine's dependence on food imports and ensure national security in the food industry. The article's purpose is the agribusiness research process in Ukraine in the context of the development of the digital economy and in the context of ensuring food security. The possibilities of agribusiness development with digital technologies and in the context of ensuring food security are explored. The concepts of "agribusiness", and the agrarian sector are summarized. The role of the agricultural sector of Ukraine in the national economy and the economy of other countries is analyzed through the evaluation of the commodity structure of exports in the context of ensuring food security. It is substantiated that the new technologies of the digital economy provide more accurate and effective control of the quality and safety of food products, reducing the impact of harmful factors on the environment, increasing the competitiveness of the national agricultural sector on the international market. Agribusiness is an essential component of the agrarian sphere, which in turn is significant for the economy of Ukraine and ensuring the country's food security. The development of the digital economy and the use of the latest technologies significantly increase the productivity and efficiency of the production of agricultural products. It is noted that it is necessary to maintain the level of food security in Ukraine, ensuring proper control of the quality and safety of agricultural products produced and exported abroad. The development of agribusiness in the conditions of the digital economy has the potential for a significant increase in domestic production and export of agricultural products, ensuring a balance. Keywords: agribusiness, agrarian business, agrarian sector, digital economy, digital technologies, food security.

Performance and mechanism of bentonite in suppressing methane explosions in a pipeline network

Methane explosions threaten the safety of industrial security in modern society. To suppress such explosions, experiments were made through using different masses of bentonite power driven by CO2 within a pipe network set up in an independent way. The three factors, including the peak over-pressure of an explosion, the index of the explosion power, and the time length within which the first wave of flames reached the pipe network’s outlet, were measured to evaluate the performance. Moreover, an analysis on the mechanism of suppressing explosions was also conducted. According to the results, a gradual increase of the powder mass from 20 to 50 g could promote the effect of explosion suppression, but a further increase from50 g to 60 g only led to a slight improvement of the performance. Thus, it was concluded that the use of 50 g of bentonite powder worked best for the suppression of methane explosions when environmental conservation, energy saving as well as practicality were all taken into consideration. What was found in this study is supposed to shed theoretical light on how to transport methane safely with disaster risks reduced effectively.

Cartilage-inspired smart anti-impact gel with highly stable and tailored properties

Smart anti-impact materials are desirable for personal protection and industrial security. However, they often suffer from poor performance control and inherent stability issues. Here, inspired by the excellent energy absorption of cartilage structure, we develop a dual-network impact-hardening gel composed of dynamic polyborosiloxane and entangled polyethylene glycol networks. By optimizing the topology and composition of the dual network, the bioinspired gel has high malleability, self-healing properties, rate dependence, and toughness. Particularly, the gel exhibits ultrahigh stability, holding its network structure and shear-stiffening behavior after exposure to air or even soaking in water. The gel exhibits an outstanding protective ability (reducing the impact force by 80.2% of control) compared with common materials including foam, plastic, rubber, wood, and steel. Moreover, the gel exhibits good versatility, which can be combined with Kevlar fabric and foam to form a flexible anti-impact composite. The cartilage-inspired dual-network gel may fuel the evolution of anti-impact devices.

Pengaruh Analisis SWOT Digital Payment (OVO) terhadap Perilaku Konsumtif Mahasiswa

Technology is growing and providing convenience to every user. Then this technology has also brought changes in transactions with OVO digital payments, especially among students. . With OVO, transactions are easier and definitely safer. According to Harumi, as a financial technology company, OVO implements a layered security system, which continues to be improved, referring to industry security standards, according to Bank Indonesia regulations for protecting consumer and corporate data from cyber attacks. The existence of a SWOT analysis plays a very important role in knowing the strengths and weaknesses of the OVO digital payment platform. The purpose of writing this article is to determine the effect of digital payments on student consumptive behavior by conducting case studies on users of the OVO digital payment platform. This study used a survey-based quantitative method with a sample of 50 respondents who were students of Medan City. Based on the results of simultaneous and partial testing, it was found that there was a significant influence between the ease of online transactions on student consumptive behavior.
 Keywords: Digital payment(OVO), SWOT Analiysis, Student Consumptive Behavior

FORMATION OF A STRATEGY FOR THE DEVELOPMENT OF AGRARIAN ENTERPRISES IN ORDER TO INCREASE THE LEVEL OF THEIR FINANCIAL SECURITY

The article substantiates the need to develop a strategy for the development of agrarian enterprises in order to increase the level of their financial security. The issue of ensuring the appropriate level of financial security of agricultural enterprises is a very urgent task, taking into account the instability of the economic and political situation, the high export potential and the leading importance of the industry in the country's food security. It has been proven that the activities of enterprises are affected by a significant number of factors that must be taken into account when developing the specified strategy. It has been established that only following a consistent algorithm of actions will allow you to achieve the set goals. In the article, agricultural enterprises of individual regions are grouped according to the level of their financial security in order to justify the most appropriate strategy for their situation. In the article, the actor emphasizes the need to take into account the specific features of economic activity in the agrarian sphere, in particular, significant dependence on natural and climatic conditions and state support of the industry to achieve high performance results.

Power Grid Structure Performance Evaluation Based on Complex Network Cascade Failure Analysis

A safe and stable operation power system is very important for the maintenance of national industrial security and social economy. However, with the increasing complexity of the power grid topology and its operation, new challenges in estimating and evaluating the grid structure performance have received significant attention. Complex network theory transfers the power grid to a network with nodes and links, which helps evaluate the system conveniently with a global view. In this paper, we employ the complex network method to address the cascade failure process and grid structure performance assessment simultaneously. Firstly, a grid cascade failure model based on network topology and power system characteristics is constructed. Then, a set of performance evaluation indicators, including invulnerability, reliability, and vulnerability, is proposed based on the actual functional properties of the grid by renewing the power-weighted degree, medium, and clustering coefficients according to the network cascade failure. Finally, a comprehensive network performance evaluation index, which combines the invulnerability, reliability, and vulnerability indicators with an entropy-based objective weighting method, is put forward in this study. In order to confirm the approach’s efficacy, an IEEE-30 bus system is employed for a case study. Numerical results show that the weighted integrated index with a functional network could better evaluate the power grid performance than the unweighted index with a topology network, which demonstrates and validates the effectiveness of the method proposed in this paper.

Cyber threat detection: Unsupervised hunting of anomalous commands (UHAC)

The cyber security industry is rapidly adopting threat hunting as a proactive tool for early and faster detection of suspected malicious actors. In this paper, we propose a machine learning-based method, Unsupervised Hunting of Anomalous Commands (UHAC), to detect text-based anomalous commands in security information and event management (SIEM) logs that are good candidates for threat hunting. A unique feature of the proposed method is that it first creates a feature set based on the augmentation of document-term and document-character matrices. Then, an autoencoder-based detector is trained on this feature set using a custom loss function. UHAC consistently outperforms other feature sets and algorithms such as one-class support vector machine, density-based spatial clustering of applications with noise, and word-embedding based models such as word2vec. The UHAC detector identifies 84–89% of anomalies in the top 10% of the data. Findings have implications for cybersecurity analysts who perform threat hunting in SIEM logs for process auditing on endpoint devices.

Deep reinforcement learning for stock portfolio optimization by connecting with modern portfolio theory

With artificial intelligence and data quality development, portfolio optimization has improved rapidly. Traditionally, researchers in the financial market have utilized the modern portfolio theory for portfolio optimization; however, with the recent development of artificial intelligence, attempts to optimize portfolios with reinforcement learning are increasing. Many studies have developed reinforcement learning and deep learning algorithms and conducted portfolio optimization research. However, in reality, thus far, the securities industry thus has used the modern portfolio theory, which is sufficiently valuable. Nevertheless, to the best of our knowledge, there has yet to be an attempt to combine modern portfolio theory and reinforcement learning. To bridge this gap in the literature, we propose a novel deep reinforcement learning approach that combines the modern portfolio theory and a deep learning approach. As far as we know, we are the first to combine recent deep learning technology and traditional financial theory. Specifically, we solved the multimodal problem through the Tucker decomposition of a model with the input of technical analysis and stock return covariates. The results show that the proposed method outperforms state-of-the-art algorithms regarding the Sharpe ratio, annualized return, and maximum drawdown. In addition, the proposed method dynamically changes the weight according to the market trend, unlike other state-of-the-art algorithms.

证券行业财富管理业务私域流量营销策略研究

证券行业财富管理业务私域流量营销策略研究

A Real-Time IoT-based Model to Detect and Alert Security Guards’ Drowsiness

In the security industry, it is critical to ensure that security guards remain alert and attentive throughout their shifts. Drowsiness and inattention can lead to security breaches and endanger the safety of the premises and the people within them. To address this issue, a hybrid system is being developed to detect security guards' drowsiness and alert them using sound buzzers and water sprinklers to prevent security breaches. The system uses advanced machine learning and deep learning techniques like OpenCV and DCNN, along with a UHD camera, to detect signs of drowsiness using algorithms like Eye Aspect Ratio/Mouth Aspect Ratio (EAR)/(MAR). By analysing behavioural indicators, the system determines whether a security guard displays signs of drowsiness and alerts them using sound buzzers to remain attentive. Overall, the hybrid system provides an effective solution to enhance security guard monitoring and prevent potential security threats caused by drowsiness and inattention.

Аналіз та розроблення концептуальної моделі управління життєвим циклом спеціалізованого програмного забезпечення безпеко-орієнтованого спрямування

A comprehensive examination of the process of developing specialized safety-oriented software is conducted. The incongruity of the presently known development methodologies with the circumstances in which innovative safety-oriented software systems are created is unveiled. For this reason, the purpose of this article is to investigate the existing methods and formulate novel approaches to managing the life cycle of specialized software (safety-oriented services), which are relevant to the specific requirements of the State Emergency Service of Ukraine and align with the principles of a flexible software life cycle management methodology. A thorough exploration is conducted on the current agile methods and approaches employed in the development of critical services, specifically in sectors such as military, railway, aerospace, medical, and other domains of operation. The aim is to establish the merits of flexibility in fostering innovation within specialized safety-oriented software. The fundamental concepts of agile methods for software system life cycle management are synergistically integrated, taking into consideration the unique requirements of rescue service development. Furthermore, the existing empirical data on the feasibility and advantages of implementing agile methods in the security industry are expanded upon. Especially, the agile Scrum method is enhanced through the proposal of employing the mathematical framework of graph theory (network planning method) to automate the planning stage and identify critical functions, including the critical path, the early execution time of events, the late execution times of events, and reserved time for tasks. This method aids in developing a minimum viable product for a safety-oriented system. A conceptual model of the life cycle management process for safety-oriented services has been meticulously developed. This model is predicated on a flexible approach to software development, which aims to automate the tasks performed by project teams and enhance the overall efficacy of specialized software development. On its basis, it is proposed to develop a decision support system for managing the life cycle of safety-oriented software systems development, which is relevant for the State Emergency Service of Ukraine.

The impact of crisis phenomena on economic security in the automotive industry and the quality of life of employees

The quality of life of people inter alia depends on their economic well-being. The direct source of their well-being is their wage paid by employers. Any economic crisis that impacts the biggest industrial employers in a region directly translates into the deteriorated quality of life of people. This article describes several transmission channels of the two major global crises which have been following covid pandemic and military conflict in Ukraine. Transmission of crisis phenomena into the well-being of people is provided by explaining the importance of the automotive industry for the Slovak Republic and the values of employment and hours worked indices are provided as supporting evidence. The mechanism of increased scarcity is described in the case of increased raw material prices on the global market which resulted in the decreased production in the automotive industry.