Security Logs Research Articles

‘Humanitarian borderwork’: Identifying tensions between humanitarianism and securitization for government contracted NGOs working with adult and unaccompanied minor asylum seekers in Australia

This article challenges the common assumption that non-government organizations (NGOs) are ‘natural allies’ to asylum seekers in transforming borders from below by examining theories of humanitarianism within the context of securitization. Our article examines the theoretical and policy implications of the ‘humanitarian borderwork’ of NGOs, defined as practices that contain a security logic that construct, shift and erase internal and external borders. Our case study explores the involvement of government contracted NGOs in the delivery of services to adult and unaccompanied minor asylum seekers on the community detention and release programme in Australia. Documentary analysis of policy and contractual arrangements informing the establishment of community detention and release is supplemented by key informant interviews with government officials and service providers. We analyse the contradictory tensions that exist between humanitarian objectives that seek to ‘transform borders from below’ and governmental security imperatives that tend to co-opt agencies and limit their ability to achieve humanitarian aims. Based on the case study presented, we illustrate how the ‘humanitarian borderwork’ of NGOs can shape the translation of government power and contribute to the government agenda of border securitization.

Rebalancing cybersecurity imperatives: patching the social layer

ABSTRACTThe social layer, where civil society, including commercial and academic interaction, takes place is the most vulnerable one of the three commonly accepted layers of cyberspace. Worse still, emphasis by technical experts on physical and logical layer security has lulled civil society into a dangerous torpor that conflates information transmission reliability with reliable information. This has been exploited by criminals, adversarial states such as Russia and hostile non-state actors such as the Islamic State. This article explores the danger of an overly narrow conception of cybersecurity by governments and practitioners and recommends an urgent focus on the social layer toward a holistic rebalancing of cybersecurity. It offers a set of recommendations to help civil society secure itself in cyberspace.

Insider Threat Identification Using the Simultaneous Neural Learning of Multi-Source Logs

Insider threat detection has drawn increasing attention in recent years. In order to capture a malicious insider’s digital footprints that occur scatteredly across a wide range of audit data sources over a long period of time, existing approaches often leverage a scoring mechanism to orchestrate alerts generated from multiple sub-detectors, or require domain knowledge-based feature engineering to conduct a one-off analysis across multiple types of data. These approaches result in a high deployment complexity and incur additional costs for engaging security experts. In this paper, we present a novel approach that works with a variety of security logs. The security logs are transformed into texts in the same format and then arranged as a corpus. Using the model trained by Word2vec with the corpus, we are enabled to approximate the posterior probabilities for insider behaviours. Accordingly, we label the transformed events as suspicious if their behavioural probabilities are smaller than a given threshold, and a user is labelled as malicious if he/she is associated with multiple suspicious events. The experiments are undertaken with the Carnegie Mellon University (CMU) CERT Programs insider threat database v6.2, which not only demonstrate that the proposed approach is effective and scalable in practical applications but also provide a guidance for tuning the parameters and thresholds.

Security of Functionally Obfuscated DSP Core Against Removal Attack Using SHA-512 Based Key Encryption Hardware

Digital signal processing (DSP) kernel-based intellectual property (IP) core forms an integral ingredient of consumer electronics devices. Thus, protection of these IP cores against reverse engineering attack is crucial. Functional obfuscation serves as a powerful mechanism to counter this hardware threat. However, functional obfuscation methodologies for DSP cores use security logics that are not lightweight and are prone to removal attack by an adversary. This paper presents a novel security mechanism for protecting functionally obfuscated DSP core against removal attack using low-cost, low-power key encryption hardware. The proposed methodology using lightweight secure hashing algorithm (SHA-512)-based key encryption custom hardware reconfigures the key-bits (resulting into structural reconfiguration) of the locking logic in a functionally obfuscated DSP design augmented with the complete logic synthesis of the design. This hinders the detection of the locking logic in the obfuscated design due to camouflaging. The proposed mechanism integrated with the functional obfuscation framework yielded lower power, lower gate count, and enhanced security compared with an existing approach. An average reduction of 25.86 % in gate count and power as well as the average enhancement of 43.75 % in security against removal attack was obtained in the proposed approach compared with a recent existing approach.

Design and Implementation of Physiology Lab Management Blood Analysis System

The objective of this work is to build a database that provides a records of blood disease and accurate statistics as an important source of medical information and to provide assistance to the laboratory worker by conducting electronic blood tests, serial and fast steps and printing the results of the analysis electronically to facilitate the work and make communication between the official of the laboratory and the patient easier and faster and more accurate by using electronic blood analysis system. Where this system to conduct basic screening tests for determining certain blood disorders (anemia's, abnormal bleeding and clotting, inflammation, infection and inherited disorders of red blood cells, white blood cells, platelets, hemoglobin (HBC), and cell production (hematopoiesis)). In this work we propose a system which can manage the user for each action performed and justifying the authorization used to create a secure and easy log in. The Physiology lab Management System is tested through verification and validation (V&V) that was one of testing elements to uncover errors that were made inadvertently as it was designed and constructed.

Study of information security, risk, audit and the role of law in Sri Lankan perspective

2010 was named as the Information Technology year in Sri Lanka. Our main attention was focused on whether our systems supported by Information Technology (IT) were safe from attacks. With the expansion of Information Technology most of the Sri Lankan organizations were driven by computerized information systems. With the vital role played by the Information Technology for its users it offers not only the benefits but also unchallengeable threats. These threats came in many forms such as data sabotage, destruction of systems and hacking offences. To address this issue both the IT professionals as well as the legal experts had come with their own solutions from time to time. The role played by the Information Technology Audit was focused through this paper. Through IT Audit the possible attacks to the systems could be identified. The role played by the legal experts in this regard was enacting the most recent Computer Crimes Act No 24 of 2007 which enable to bring security violators to the law. The research methodology adopted by this research was checking 75 information systems of Sri Lanka by a validated questionnaire. The questionnaire was presented to the system users and the feedback from them was taken as the results of this study. IT Audit also could be used as an evaluation tool in a research like this although this study limited its scope to adopt sampling method through questionnaire since the data was highly confidential. The findings were analyzed in order to come for conclusion which satisfied the implemented security level in information systems which were reviewed. Overall security of the information systems was satisfactory in terms of physical, logical and network security. Approaches that could be taken when a breach of security was there in terms of legal measures were also come under review.

Place Fontainas as a border area. Urban production with respect to sexuality, gender, ethnicity and social class

Located between the “gay” neighbourhood and the “working-class” Anneessens neighbourhood, Place Fontainas has been the site of several presumed homophobic acts of violence, thus contributing to its categorisation as a dangerous area, particularly for homosexual populations. In response to this type of violence, there have been several measures adopted by the public authorities, yet they are in keeping with an often binary and essentialising logic of security. Based on direct observation work and interviews at and around Place Fontainas, the present article intends to adopt a new approach. It examines this area based on the notion of border and, through an intersectional analysis, discusses the social and urban mechanisms which contribute to the establishment of abrupt changes in terms of sexuality, social class and ethnicity. However, in each of the areas studied, there is a continuity of male domination, which makes women invisible and limits their access to public space.

Development of Secured Log Management System Over Blockchain Technology

A log is a record of events that happens within an organization containing systems and networks. These logs are very important for any organization, because a log file will able to record all user activities. Due to this, log files play a vital role and contain sensitive information, and therefore security should be a high priority. It is very important to the proper functioning of any organization, to securely maintain log records over an extended period of time. So, management and maintenance of logs is a very difficult task. However, deploying such a system for high security and privacy of log records may be overhead for an organization and require additional costs. Many techniques have been designed for security of log records. The alternative solution for maintaining log records is using Blockchain technology. A blockchain will provide security of the log files. Log files over a Blockchain environment leads to challenges with a decentralized storage of log files. This article proposes a secured log management over Blockchain and the use of cryptographic algorithms for dealing the issues to access a data storage. This proposed technology may be one complete solution to the secure log management problem.

Politicising Security at the Boundaries: Privacy in Surveillance and Cybersecurity

This article looks into the politicisation of security. Politicisation, in contrast to securitisation, presupposes that security issues are controversially debated in a public arena without foregone conclusions as to how they are going to be handled. In order to locate and observe politicisation processes empirically, we suggest to look at privacy, a key notion and main tool for resistance vis-à-vis security logics. By examining two issue areas (video surveillance and cybersecurity), we highlight different tactics through which privacy is mobilised as a boundary object to politicise security. The invocation of privacy offers an alternative viewpoint on security, one where the human (digital) body and a human centred notion of security is at the centre. The value of its integrity and the need for its protection is a weighty counter to the abstract and often absolute claims of ‘more security’ through technological means.

AUDIT KEAMANAN SISTEM INFORMASI AKADEMIK DENGAN KERANGKA KERJA ISO 27001 DI PROGRAM STUDI SISTEM INFORMASI UNIKOM

Academic Information Systems Prodi UNIKOM Information System is the primary system used in the Information Systems Prodi process data and information about lectures and students. But in this system still found a lack of control of physical and logical security.
 To find out how your system security in organizations, information systems need security audit to determine whether security information is in accordance with the security procedures of management. Standardization used here is ISO 27001, this standards have been an international standards organization that is structured on the management of information security systems. Implementation of academic information system security audit is done by using the Audit Checklist ISO 27001: 2005.
 Audit results found security controls are still less well as the roles and responsibilities of employee safety, physical protection from disasters and power failures, data validation, and data backup are less regular. So the academic information system security controls is still need to be repairs in accordance with the recommendation.

The European Union: security governance and collective securitisation

The EU has long been recognised as a complex security actor with competences across a variety of security-relevant issues. These competences add up to a form of security governance, the purpose of which is to guard against a multiplicity of threats. How threats (and, for that matter, risks) are defined can be seen as the outcome of processes of securitisation where authoritative actors articulate a logic of security – discursively constructing threats and initiating policies in response. This article argues that it is possible for securitisation to occur in a ‘collective’ setting such as the EU. It articulates a framework through which collective securitisation can be understood – one that is then applied in a series of cases in the remainder of the Special Issue. The ability of the EU to mobilise effort in this regard suggests a resilience overlooked in much of the recent discussion of European crisis.

Feeling Everyday IR: Embodied, affective, militarising movement as choreography of war

This article explores affective, embodied encounters between military and civilian bodies in the everyday as choreography of war. It argues that by paying attention to the intersecting political sphere of bodies, affect and movement – through the metaphor of ‘dance’ – we are not only able to understand how security operates as a logic reproducing the militarisation of the everyday, but also able to identify a representational gap, an aesthetic politics, potentially useful for resistance to such practices normalising war in the everyday. It draws on two British examples of where military moves disrupt civilian spaces in the everyday: an arts project commemorating the Battle of the Somme, and a football game taking place during Remembrance week. Through embodied choreographies of war in the everyday, dance is used as a metaphor to understand militarisation as an example of feeling Everyday IR. Thus, dance is useful to ‘see’ the politics of Everyday IR, but also to understand, to feel and possibly to resist the politics of normalisation of war in the everyday. This is one example of how feeling Everyday IR offers alternative openings into political puzzles of security logics informing war as practice.

FAS: Forward secure sequential aggregate signatures for secure logging

Audit logs are an elemental part of computer systems due to their forensic value. Safeguarding audit logs on a physically unprotected machine are a challenging work, especially in the presence of active adversaries. Forward security is necessary for such a logging system. In this paper, we propose a new Forward secure sequential Aggregate Signature (FAS) scheme with optimal storage and communication for keys and signatures. To the best of our knowledge, our FAS scheme is the only scheme that has constant-sized public and secret keys as well as constant-sized aggregate signatures. Our proposed scheme supports aggregation of consecutive signatures by a third party. We prove the security of our proposed scheme under the hardness of factoring assumption, in the random oracle model.

Network Perimeter Defenses Using Open-Source Software

network security role grew exponentially in the late several years, especially with the notable amount of attacks that target all types of organizations and services. Thus, the need for more research on efficient and open source perimeter defense system and packet analysis and are rising. Intrusion detection system can afford significate role in protecting networks by detecting and reporting malicious behaviors. In this paper, an open source-based model was introduced that can provide security monitoring and logging, intrusion detection and prevention, firewall services and packet inspection and analysis. The proposed design provide high visibility and add a security layer to networks and data centers with many use cases such as: network forensics, security analysis, and production deployment. All the components and software were deployed with virtualization and container-based technology to get the benefits of these technologies like cost effective, cloud applicable, and flexible deployment across many hardware requirements. The results show that the proposed design presents detection capability of the attacks and visualization of the network traffic with security controls. This work also aims to accomplishes the OWASP A10:2017 which focus on insufficient logging and monitoring.

The Prison and the Border: An Ethnography of Shifting Border Security Logics

This study examines the ways in which border controls have taken on aspects of crime control. To understand this transformation, I draw on the methods of historical anthropologists who blend ethnographic and historical tools of analysis. The historical research shows that the shift occurred in 1990s, when New Democrats adopted crime politics of the New Right and supported bipartisan policies that restructured detention, deportation, and criminal prosecution. The ethnography documents the ways in which border controls have taken on aspects of internal security and domestic policing, shifts seldom captured in contemporary border security debates.

Gendering (in)security: interrogating security logics within states of exception

ABSTRACT This collection contributes to debates, which seek to move feminist scholarship away from the reification of the war/peace and security/economy divides. However, rather than focusing on the terms of the debate, it foregrounds the empirical reality of the breakdown of these traditional divisions, paying particular attention to the ‘state of exception’ and similar frameworks. In doing so, contributors to this collection trouble the ubiquitous concept and practices of ‘(in)security’ and their effects on differentially positioned subjects. By gendering (in)securities in ‘states of exception’ and other paradigms of government related to it, especially in postcolonial and neo-colonial contexts, it provides an approach, which allows us to study the complex and interrelated security logics, which constitute the messy realities of different – and particularly vulnerable – subjects’ lives. In other words, it suggests that these frameworks are ripe for feminist interventions and analyses of the logics and production of (in)securities as well as of resistance and hybridisation.

GraphBAD: A general technique for anomaly detection in security information and event management

SummaryThe reliance on expert knowledge—required for analysing security logs and performing security audits—has created an unhealthy balance, where many computer users are not able to correctly audit their security configurations and react to potential security threats. The decreasing cost of IT and the increasing use of technology in domestic life are exacerbating this problem, where small companies and home IT users are not able to afford the price of experts for auditing their system configuration. In this paper, we present GraphBAD, a graph‐based analysis tool that is able to analyse security configurations in order to identify anomalies that could lead to potential security risks. GraphBAD, which does not require any prior domain knowledge, generates graph‐based models from security configuration data and, by analysing such models, is able to propose mitigation plans that can help computer users in increasing the security of their systems. A large experimental analysis, conducted on both publicly available (the well‐known KDD dataset) and synthetically generated testing sets (file system permissions), demonstrates the ability of GraphBAD in correctly identifying security configuration anomalies and suggesting appropriate mitigation plans.

Hotspots and the geographies of humanitarianism

This article focuses on the humanitarian geographies of the hotspots. It argues that hotspots are humanitarian in both idea and practice by raising two fundamental questions that form the basis for the article: what is humanitarianism, and who is it for? The article understands humanitarianism as a logic of government that is more expansive than the mainstream ideal that emerged in the 20th-century. Instead humanitarianism is understood as concerning logics developed to both effectively manage disaster and to secure (in both senses of the word) imminently mobile populations for the maintenance of liberal order alongside and through the securing of life. The article takes an expansive view of humanitarian government to consider genealogies of caring and population security logics in the establishment of modern, western and liberal states. The article unsettles some of the traditional geographical understandings of humanitarianism as care for distant strangers and considers the ways compassion is rationalised by the hotspot approach. This critical reading of humanitarianism and the hotspots offers empirical weight to what has been called ‘humanitarianism as liberal diagnostic’, through which humanitarianism is deployed to secure both life and a liberal political order across multiple scales.

Performative securitization: from conditions of success to conditions of possibility

This piece develops a performative take on securitization theory. It argues that rather than seeing authority as a prerequisite for speaking security, we need to zoom in on how speaking security can be used to claim authority. Such acts of claiming authority are crucial to understand the current political struggles to redefine security. In order to do so, I make two claims taking securitization theory further, an iterative claim and a performative claim. One, following Derrida, we must open up what can be said about security, enabling an analysis of how the security logic is not only used, but also challenged and changed. Two, following Butler, we must open up who can speak security, seeing how speaking security can be used to take authority, rather than seeing authority as a precondition for speaking security.

Runtime Reusable Weaving Model for Cloud Services Using Aspect-Oriented Programming

Cloud computing technology has opened an avenue to meet the critical need to securely share distributed resources and web services, and especially those that belong to clients who have sensitive data and applications. However, implementing crosscutting concerns for cloud-based applications is a challenge. This challenge stems from the nature of distributed Web-based technology architecture and infrastructure. One of the key concerns is security logic, which is scattered and tangled across all the cloud service layers. In addition, maintenance and modification of the security aspect is a difficult task. Therefore, cloud services need to be extended by enriching them with features to support adaptation so that these services can become better structured and less complex. Aspect-oriented programming is the right technical solution for this problem as it enables the required separation when implementing security features without the need to change the core code of the server or client in the cloud. Therefore, this article proposes a Runtime Reusable Weaving Model for weaving security-related crosscutting concerns through layers of cloud computing architecture. The proposed model does not require access to the source code of a cloud service and this can make it easier for the client to reuse the needed security-related crosscutting concerns. The proposed model is implemented using aspect orientation techniques to integrate cloud security solutions at the software-as-a-service layer.