Security Infrastructure Research Articles

The Integration of Artificial Intelligence in Secure Access Service Edge: Enhancing Network Security and Performance

Integrating Artificial Intelligence (AI) with Secure Access Service Edge (SASE) architecture represents a significant advancement in enterprise network security and management. This article examines the transformative impact of AI technologies on SASE implementations, focusing on enhanced threat detection capabilities, dynamic network optimization, and automated compliance management. The article comprehensively analyzes AI-driven security features, including real-time threat detection, zero-trust implementation, and privacy-preserving security measures. Through extensive evaluation of deployment scenarios and performance metrics, our research demonstrates significant improvements in security effectiveness and operational efficiency, including a 90% reduction in threat detection time, a 45% decrease in network latency, and a 65% reduction in manual configuration tasks. The article highlights the system's capability to maintain robust security while preserving data privacy through advanced encrypted traffic analysis techniques. The article addresses current integration challenges and provides insights into successful implementation strategies. This article contributes to the growing body of knowledge on AI-enhanced network security architectures and provides valuable insights for organizations seeking to modernize their security infrastructure while maintaining operational efficiency and compliance with evolving regulatory requirements.

A Sustainable urban renovation assessment model (SURAM) for enhancing elderly-friendly environments

The rapid increase in the aging population has raised significant concerns about the living conditions and well-being of elderly residents in old communities. This study addresses these concerns by proposing a Sustainable Urban Renovation Assessment Model (SURAM) specifically designed to enhance elderly-friendly environments in Chongqing City. The model encompasses multiple dimensions, including the comfort of public facilities, service safety and convenience, medical travel services, infrastructure security, life service convenience, neighbor relations, ambulance aid accessibility, commercial service facilities, privacy protection, elderly care facilities and service supply, and medical and health facilities. By employing factor analysis, the study reduces the dimensionality of the 49 indicator factors, allowing for a more focused and comprehensive evaluation of the effectiveness of aging-friendly renovation efforts. The main factors identified in the proposed model include community infrastructure security, elderly comfort of community public facilities, completeness and convenience of surrounding living services, and security and convenience of elderly care services. The results reveal that the age-appropriate comfort of public facilities plays a significant role in achieving successful aging-appropriate renovation outcomes. The findings demonstrate that by addressing specific needs such as safety, accessibility, and convenience, communities can significantly improve the quality of life for elderly residents. Moreover, the application of SURAM provides actionable insights for policymakers, urban planners, and community stakeholders, guiding them in implementing targeted initiatives for sustainable and inclusive urban development.

Smart Monitoring and Control System for Crude Oil Pipeline Vandalism

Crude oil pipeline vandalism, theft, and unauthorized interference present a significant challenge to the oil industry's security, profitability, and sustainability. Despite initial measures such as security patrols, traditional methods have proven inadequate, particularly in difficult terrains and aquatic regions. These methods often fail to promptly detect and prevent vandalism and theft, which results in significant economic, environmental, and safety risks. This study developed and implemented a smart monitoring and control system to address these challenges by improving the detection of oil pipeline vandalism, including incidents in aquatic environments. The Prototyping methodology was adopted, allowing for continuous testing and improvements throughout the development process. The system was built using C#.NET under the .NET Framework, with Microsoft SQL Server as the database, incorporating an encryption layer for database security. To enhance its effectiveness, an oil theft detection algorithm was integrated with a web-based interface to facilitate real-time monitoring, visualization, and reporting. Testing scenarios demonstrated that the system successfully detected threats and ensured seamless data flow from sensors to the central system. This solution marks a significant advancement in the security and sustainability of oil infrastructure, contributing to environmental protection and the safety of stakeholders

IRIS2: Asserting Autonomy in the New Space Age

In the burgeoning space-scape of the New Space Age, the European Union (EU) has embarked on a quest to fortify its dominion over space communication systems through the ‘Infrastructure for Resilience, Interconnectivity and Security by Satellite’ (IRIS2) constellation, under the auspices of the EU Secure Connectivity Programme. This paper explores the sovereignty motivations of the EU, the precipitated legal issues arising from participation of European private space actors and the exclusion of non-European competitors in the building and operation of the IRIS2 constellation, and ramifications on the EU’s sovereignty prerogative. By addressing these complexities, this paper seeks to enrich the understanding of the interplay between commercial actors, sovereignty of space systems, the operational legal and contractual approaches to liability, and provide a glimpse into how the EU has embarked on asserting autonomy in these challenging circumstances.

Guest Editorial: IoT Security and Provisioning in Cyber-Enabled Niche Critical Infrastructure

Guest Editorial: IoT Security and Provisioning in Cyber-Enabled Niche Critical Infrastructure

Wazuh SIEM for Cyber Security and Threat Mitigation in Apparel Industries

Security of IT infrastructure is critical in the modern digital environment, particularly for industries that manufacture clothing. The application of the Wazuh Security Information and Event Management (SIEM) system to improve security monitoring and compliance for an IT system in the apparel industry is the main topic of this study. To improve the apparel industry cyber threat monitoring system in real-time monitoring, detecting the threat vectors that support the centralized management system, to meet these objectives of the company, an SIEM security management system has been installed and configured with the components of Wazuh manager, indexer, Wazuh agent, and Wazuh dashboard as well. An Oracle virtual lab environment was created to install and configure the Wazuh system a robust Linux operating system was installed at the server level and Windows 10 was installed on the client end to the authenticity failure of the security system. To implement the Wazuh system, the project management guideline was followed which ensured the planning and implementation of the project, testing phases, and along with review and maintenance. Wazuh security management system successfully identified the authentical failure reports and vulnerabilities and generated automated reports from the system that showed the result of 1 critical, 19 high, and 5 medium levels of vulnerabilities shown in Figure 6, and the necessary patch recommended to solve the critical issues. On the other hand, the system also generated security events as well as integrity monitoring system reports. The deployment of the Wazuh security management system ensured the robust cost-effective security management system with high quality for detecting cyber threats which supports the regulatory and compliance requirements and is a viable tool for the apparel industry to protect the stakeholders’ interest.

Understanding Penetration Testing for Evaluating Vulnerabilities and Enhancing Cyber Security

In response to the increasing incidence of cyber-attacks, organizations are prioritizing security testing for their software applications and products. Among the most effective methods for identifying vulnerabilities is penetration testing, which involves simulated attacks on systems to uncover weaknesses that could be exploited by malicious actors. This method not only aids in identifying and remediating security flaws but also evaluates a system's ability to withstand unexpected threats. This paper provides an in-depth exploration of penetration testing, detailing its stages, methodologies, and the role of web application firewalls. A penetration test systematically assesses the security of IT infrastructures by exploiting vulnerabilities in systems, applications, and user behaviours. The findings from these tests are essential for IT management, guiding strategic decisions and prioritizing remediation efforts. Ultimately, the primary aim of penetration testing is to evaluate the risk of a system breach and its potential impact on organizational resources and operations.

Convergence of SaaS, AI, and Telecom in Telehealth: Transforming the future of healthcare delivery through intelligent systems

This paper aims at identifying and analyzing how SaaS, AI, and Telecom are changing the way healthcare is delivered by focusing on telehealth. The goal is to determine the current status of these combining technologies, identify future developments and trends in intelligent telehealth systems, and analyze the opportunities and risks associated with their implementation. Following a systematic review, relevant publications published between January 2014 and January 2024 were gathered from various databases. Finally, eight studies were included for analysis, after exclusion and inclusion criteria were applied. The findings show that SaaS, AI, and Telecom are transforming telehealth by improving the remote patient monitoring, the access to care, and the moving from the reactive to the proactive approach to health. SaaS enhances adaptable and affordable approaches, while AI infuses precise identification and reasoning. Telecom provides secure and steady communication and data transfer while facing issues regarding data security, legislation acts, and disparities in infrastructure. Overall, these research studies highlight the key possibilities of developing the application of telehealth through the integration process of these technologies.

Policy-driven innovations in fraud prevention: Developing an ARFLGB-XGBoost early warning model to mitigate online romance scams in telecommunication networks

To address the escalating online romance scams within telecom fraud, we developed an Adaptive Random Forest Light Gradient Boosting (ARFLGB)-XGBoost early warning system. Our method involves compiling detailed Online Romance Scams (ORS) incident data into a 24-variable dataset, categorized to analyze feature importance with Random Forest and LightGBM models. An innovative adaptive algorithm, the Adaptive Random Forest Light Gradient Boosting, optimizes these features for integration with XGBoost, enhancing early Online romance scams threat detection. Our model showed significant performance improvements over traditional models, with accuracy gains of 3.9%, a 12.5% increase in precision, recall improvement by 5%, an F1 score increase by 5.6%, and a 5.2% increase in Area Under the Curve (AUC). This research highlights the essential role of advanced fraud detection in preserving communication network integrity, contributing to a stable economy and public safety, with implications for policymakers and industry in advancing secure communication infrastructure.

Architecting Resilience : A Framework for Secure and Compliant Healthcare IT Infrastructures

Healthcare information technology (IT) systems face unique challenges in maintaining data security and regulatory compliance while supporting critical patient care functions. This article provides a comprehensive analysis of the complex interplay between data protection measures and compliance requirements in the healthcare sector. We examine key components of data security, including encryption, data integrity measures, and secure transfer protocols, with a specific focus on their application to sensitive patient information. The impact of regulations such as HIPAA on system design and maintenance is explored, offering insights into the alignment of IT practices with evolving standards. Through a review of current literature and industry best practices, we present strategies for risk management, employee training, and the implementation of technical controls that address both security and compliance needs. Emerging trends, including cloud computing, the Internet of Medical Things (IoMT), and artificial intelligence in healthcare security, are discussed to provide a forward-looking perspective. This article contributes to the ongoing dialogue on balancing innovation with security in healthcare IT, offering practical recommendations for healthcare organizations to enhance their data protection measures while ensuring regulatory compliance.

CONFORMIDADE DE PAINÉIS ELÉTRICOS COM A NR-10 E NBR 5410

As modern industry integrates into the era of automation 4.0, characterized by information exchange and connectivity, there are still industries with outdated processes and equipment. The NBR 5410 and NR-10 standards play crucial roles, stipulating requirements and safety measures for low-voltage electrical installations and protecting the health and safety of workers. Electrical panels, fundamental in this context, regulate industrial processes automatically and without human intervention, ensuring not only efficiency and productivity, but also safety and effective maintenance of operations. In view of the above, the study aims to analyze how electrical panels can be configured and adjusted to comply with Brazilian standards NR-10 and NBR 5410. This study adopts bibliographic methodology, extensively reviewing academic literature, articles, technical standards and relevant related documents the installation of electrical panels. A careful selection of primary and secondary sources will be made to ensure a comprehensive understanding of current and emerging practices in the field. The process includes an analysis of extracted data to identify patterns, challenges and opportunities for innovation, providing a solid basis for discussion and conclusions in the study. In this way, the application of these standards contributes to a cycle of continuous improvement in the electrical industry. By establishing safe and efficient procedures, standards not only protect the individuals directly involved, but also benefit society as a whole by ensuring the integrity and security of critical infrastructures.

To Study on Cyber Crime Burgeoning in India and Crucial Actions Need for Every Cybercrime Victim

India is facing a great deal of challenges due to the rapid digitalization and broad adoption of technology in many different areas. One such concern is cybercrime. In this paper explores the nature, scope, and impact of cybercrime in the Indian context. The rising ubiquity of internet usage has rendered people, companies, and governmental organizations more susceptible to a range of cyber threats, such as identity theft, financial fraud, data breaches, and cyber harassment. Despite developments in cyber security protection, the lack of awareness and poor regulatory frameworks has aggravated the situation. To address these issues, the Indian government has put in place a number of efforts, including the National Cyber Security Policy and the Information Technology Act, 2000. But enforcement is still patchy, and a lot of crimes go unreported or ignored. The problem has been made worse by insufficient regulatory frameworks and a lack of knowledge, even in spite of advances in cyber security measures. But enforcement is still patchy, and a lot of crimes go unreported or ignored. This research paper emphasizes India's cybercrime victims have several legal options, the need for a multimodal strategy that includes improved cyber security infrastructure, better legislative frameworks and greater public awareness in order to tackle cybercrime. In light of the transnational character of cyber threats, it also highlights the significance of international cooperation. In the end, a thorough plan is necessary to protect India's digital environment and guarantee the security and safety of its people in a world that is becoming more interconnected by the day

Development of a method for protecting information resources in a corporate network by segmenting traffic

The object of the study is a corporate network with a dynamic structure and centralized management. The subject of the research is the processes of ensuring the protection of information resources in the corporate network. The goal is to develop a method of protecting information in the corporate network. The development is based on the Zero Trust Security strategy, according to which access to the network is allowed only after verification and identification of information. The task is to develop an effective method of protecting information resources and managing cyber security in the corporate network, taking into account the complex aspects of malicious influence. The following results were obtained. It is shown that the complex, diverse presentation of information in the network requires a comprehensive approach with the division of mixed content of information into segments according to the target orientation. Based on CISA's (Cybersecurity and Infrastructure Security Agency) Zero Trust Maturity Model, a method of targeted traffic segmentation is proposed. It allows detailed analysis of the interaction between applications, users and corporate network infrastructure, which increases the level of complex threats detection by 15 %. A method of protecting information resources of a socio-cyber-physical system is proposed, which, based on the principle of the Zero Trust Security strategy, improves the monitoring and management of cyber security of information resources by taking into account social aspects. This allows to detect and respond to threats in real time and adapt security policies according to the dynamics of user behavior and general security conditions. Integrating analytical methods and modern technologies into a security strategy creates a foundation for adaptive and resilient cyber defense.

Distributed Denial of Service Attack Detection and Prevention Using Pipit Fox-Attentional Deep Learning in Software-Defined Networking

The Software-Defined Network (SDN) remains the innovative model that assists in satisfying the new application requirements of future networks. However, destructive attacks, particularly Distributed Denial of Service (DDoS) attacks, are aimed primarily at the SDN control panel, presenting a significant risk to network security. The traditional approaches for DDoS attack detection exhibit several limitations including interpretability challenges, overfitting problems, and false predictions. To mitigate these drawbacks, the research proposed a Pipit Flying Fox Optimized Deep Neural Network (PPF-DNN) and Intelligent Pipit Forage Optimized-Attentional Convolutional Neural Network (IPFO-ACNN) model. The channel attention is employed to enable the network to focus selectively on relevant information, improving the model’s sensitivity to subtle anomalies associated with DDoS attacks. By dynamically adjusting the attention weights across channels, the mechanism enhances the capability of the model to discriminate the normal network traffic and malicious patterns, which results in improved precision and reduced false positives. This approach harnesses the power of CNN to automatically extract hierarchical features from network data, enhancing the efficacy of the ACNN model in attack detection. IPFO and PPF algorithms integrate the unique strengths of bio-inspired algorithms, creating a synergistic approach for efficient model parameter tuning. In the case of Training Percentage (TP) 80, the accuracy, sensitivity, and specificity of the IPFO-ACNN model are evaluated as 98.87%, 99.24% and 97.91%, respectively. Similarly, the PPF-DNN model’s performance is assessed as 98.49%, 92.50% and 98.55%, which presents a promising avenue for bolstering network security infrastructure, ensuring more robust DDoS detection and mitigation capabilities in an increasingly complex cyber threat landscape.

Cable risk and resilience in the age of uncrewed undersea vehicles (UUVs)

The risks associated with near total global economic reliance on the undersea telecommunication cable network is increasingly acknowledged by scholars and government officials worldwide. Recent disruptive incidents affecting seabed infrastructure—including cables—have served only to highlight the network’s vulnerability. This article examines how fast-paced technological developments in uncrewed undersea vehicles (UUVs) will affect the security of this critical infrastructure. To that end, this research article asks what advantages this frontier technology offers to those seeking to harm the cable network, and, from the opposite perspective, for those concerned about protecting it. The conclusions offered by this article will arm policymakers and other interested parties with greater knowledge about the emerging impact of UUVs on the security of seabed infrastructure and the undersea telecommunication cable network more specifically.

Development of an intelligent-based telemetry hexapod robotic system for surveillance of power system components

A robot is an artificial system that performs specific programmed tasks to aid day-to-day human activities. Robot finds applications in industries for large-scale production, healthcare for computer-aided surgeries, security for surveillance of electrical power system equipment, and the military for carrying out dangerous reconnaissance. Most robotic systems employed for different operations use a wheeled mode of locomotion which has limitations over rough terrains and the issue of communication setup of the system. This work developed a hexapod, a six-legged robotic system, to overcome these identified challenges. The robot was developed in tandem with a telemetry system for surveillance. Although, automating the surveillance process using robotic systems has been in the works for some time. However, this work developed a telemetry hexapod robotic system for enhanced surveillance for the security of power systems equipment and other critical infrastructures using a Raspberry Pi for fast, secure data transmission, and precise system synchronization. An inverse kinematics approach was used to determine joint configurations for better positions of each endpoint. A digital camera was integrated into the robot to relay real-time images of adversaries of power system components intelligently. In addition, the system incorporates data processing capability. In the result obtained, the developed telemetry hexapod robotic system receives instructions over a distance slightly above 300 m. It establishes effective control of the telemetry system without any hindrance of a limited range as observed in Bluetooth-controlled systems. The system's performance includes an average efficiency of 98.2 %, latency of 0.48 s at the peak distance, and an endurance of 4 h. Further analysis of the system shows that the corresponding increase in the latency with the distance is negligible. The system performed better than other related systems considered in the literature. The correct implementation of the developed telemetry hexapod robotic system further enhances mobility, stability in rough terrain, reliable communication system. Also, it brings about a notable reduction in component theft in electrical power systems.

Spatial Development Strategy of the Russian Federation: Old Problems, New Solutions

The current Spatial Development Strategy of the Russian Federation for the period up to 2025 has not solved a number of tasks in this area. The level of differentiation of the socio-economic development of the subjects of the Russian Federation, their budgetary and infrastructural security remains high. Citizens have not been provided with equal access to State-guaranteed services. The current mechanisms for the allocation of productive forces and the resettlement of the population are often non-systemic in nature. In addition, the external and internal conditions for the development of the country's economy and social sphere have changed significantly by now. The Russian Federation includes 4 new regions. The concentration of population and infrastructure facilities in the largest urban agglomerations hinders the overcoming of regional imbalances. The task of ensuring the unity of the legal, economic, financial, social, cultural and educational space remains urgent. The issue of the ongoing population decline in the territories of the North, Siberia and the Far East, as well as the Arctic zone of the Russian Federation, is acute. Insufficient development of transport and energy infrastructure limits the potential of the regions, hinders the solution of tasks to increase the connectivity of the country's territory. In this regard, the task of smoothing out interregional imbalances by maximizing the full disclosure of the regions and municipalities’ own potential, and creating a comfortable living environment for citizens throughout the country is of strategic importance. This is the aim of the draft Strategy of spatial Development of the Russian Federation for the period up to 2030 with a forecast up to 2036. The article attempts to answer the question: how much is the new version of the Strategy able to solve the accumulated problems in this area?

Development of the bank of russia’s fast payment system in modern conditions

The financial market development in Russia and in the world is currently characterized by a number of processes such as emergence of a large number of new products and new formats implementation for their provision, expansion of the geography of financial institutions presence, national boundaries erasure in acquisition and provision of financial services, sales channels improvement for financial products and services, including remote ones, using modern information technologies. The article studies issues related to the current state and prospects of the fast payment system (hereinafter referred to as FPS) development considering the synergetic impact of payment services digitalization and sanctions restrictions. It analyzes the changes taking place in the FPS service in recent years, focusing on innovative business models, new functions implementation, technological transformations, as well as regulatory and risk aspects. The study pays special attention to the financial technology impact on development and functioning of the system as a key element of the payment industry. The potential of FPS in the context of ensuring the Russian payment infrastructure security represents an important direction for strengthening user confidence and system sustainability. The paper considers a number of promising areas for further development of FPSs, including their applicability to cross-border payments.

Впровадження автоматизованих систем моніторингу мостових споруд в Україні: Світовий досвід та національні перспективи

ntroduction. Highway bridges are an important element of the transport infrastructure of any country, and Ukraine is no exception. Their safe operation is critical to ensure the sustainable functioning of logistics systems and economic development of regions. However, due to constant loads, the impact of natural factors and insufficient funding for maintenance, a significant number of bridges in Ukraine are in poor technical condition. Accordingly, it is necessary to take measures to diagnose the condition of bridges in a timely manner and prevent possible accidents. In this context, automated condition monitoring systems (ACMS) are an effective tool for ensuring the smooth operation of such structures. Problem Statement. There are more than 16 thousand bridges on public roads of national importance in Ukraine, more than half of which do not meet modern standards for dimensions and load capacity. The problem is particularly acute for bridges that have been in operation for more than 40 years, as they are more prone to accidents. Due to the lack of systematic monitoring and control of the technical condition of such structures, there is a threat of their destruction. In the world practice, automated monitoring systems are actively used to prevent such situations. In Ukraine, the need to implement such systems is becoming increasingly relevant in the face of increased requirements for infrastructure security.

Leveraging Digital Twins and Intrusion Detection Systems for Enhanced Security in IoT-Based Smart City Infrastructures

In this research, we investigate the integration of an Intrusion Detection System (IDS) with a Digital Twin (DT) to enhance the cybersecurity of physical devices in cyber–physical systems. Using Eclipse Ditto as the DT platform and Snort as the IDS, we developed a near-realistic test environment that included a Raspberry Pi as the physical device and a Kali Linux virtual machine to perform common cyberattacks such as Hping3 flood attacks and NMAP reconnaissance scans. The results demonstrated that the IDS effectively detected Hping3-based flood attacks but showed limitations in identifying NMAP scans, suggesting areas for IDS configuration improvements. Furthermore, the study uncovered significant system resource impacts, including high Central Processing Unit (CPU) usage during SYN and ACK flood attacks and persistent memory usage after Network Mapper (NMAP) scans, highlighting the need for enhanced recovery mechanisms. This research presents a novel approach by coupling a Digital Twin with an IDS, enabling real-time monitoring and providing a dual perspective on both system performance and security. The integration offers a holistic method for identifying vulnerabilities and understanding resource impacts during cyberattacks. The work contributes new insights into the use of Digital Twins for cybersecurity and paves the way for further research into automated defense mechanisms, real-world validation of the proposed model, and the incorporation of additional attack scenarios. The results suggest that this combined approach holds significant promise for enhancing the security and resilience of IoT devices and other cyber–physical systems.