Security Of Computer Systems Research Articles

Encrypted Data Service for Security Electronic Communications

The law on electronic communications has so far enumerated a considerable number of natural persons, legal entities as well as public institutions that use code systems and crypto devices during communication. Of particular interest is addressing the key role of operators and providers of encrypted data services in combating abuses committed through or against computer systems as the responsible performance of their duties to protect the security of networks and computer systems affects significantly in controlling illegal risks and attacks. In this perspective, the specific legal obligations for the protection of privacy regarding personal data that are processed for the purpose of providing information services are also analyzed.
 The purpose of the paper is, Utilizing communication between two parties sharing a common key, implementing a shared key to protect data communicated with different security attributes, Role of cryptography in data protection during communication, and Focus on privacy. Of the data communicated, against their authenticity.
 Key words: Communication, Security, Electronic Privacy.

Use of Graph Representation and Case Analysis to Assess the Security of Computer Systems

We propose an approach to assess the security of computer systems based on case analysis. To implement case analysis, it is proposed to use the graph representation in combination with the advanced bag-of-objects method. The results of experimental studies confirming the effectiveness of the approach are presented.

IMPLEMENTASI KRIPTOGRAFI MENGGUNAKAN METODE BLOWFISH DAN BASE64 UNTUK MENGAMANKAN DATABASE INFORMASI AKADEMIK PADA KAMPUS AKADEMI TELEKOMUNIKASI BOGOR BERBASIS WEB-BASED

Data is a very authentic evidence that need to be saved because the data are at risk of data changes by the party who wanted to misuse the data or no effect on the data. Therefore, so that no unauthorized person to change the existing data, stored or can take the data that is very important, we need a method to be able to secure and keep data. The database is used to keep data and information. The whole system stores the data in the database, so that the contents of stored data security and confidentiality must be maintained. To maintain the security of a security that is required cryptography. With the use of databases that are in can be connected to each other, Database is not just a place to store data,Computer security system is needed at this time in line with the increase use of computers in the world. So existing data security has become seriously threatened to be accessed by people who are not responsible. Computer security becomes very important at this time because it is related to the privacy, integrity, authentication and confidentiality. Thus data need to be stored by using the correct storage techniques, so that the confidentiality and security of data is maintained. Cryptographic techniques with engineering data encryption on the database is one solution that can be used to meet the confidentiality and Data Security settings. With the existence of a cryptography that includes the encryption process, the data in the database can be encoded so that unauthorized persons can not read the information, in addition to those who know the key to describing it. Security of data / information document with a cryptographic technique that uses the Blowfish algorithm chosen method for cryptographic key modernmerupakan shaped symmetric block cipher. Blowfish algorithm which can encrypt text built in text form. Encryption is done using a specific key, resulting ciphertext that can not be understood. The ciphertext can be changed back as the beginning if the decryption using the same key in the beginning when the database mengekripsi.

Optimization of traditional Snort intrusion detection system

With the rapid development of the Internet, the following network security issues are increasingly prominent and the increasing number of network attacks has also attracted the attention of more professionals. Network attacks are generally divided into operation attack, spoofing attack, flooding attack, redirection and so on. In order to ensure the security of computer system, intrusion detection system is designed, and people pay more and more attention to it. Firewall as the first security gate to maintain network security, intrusion detection system is undoubtedly the second security gate after the firewall. Snort intrusion detection system is a typical application of intrusion detection system. In addition, Snort is a real-time traffic analysis system that can capture and analyze packets on the network according to defined rules. However, with the continuous increase of data volume and the emergence of big data, the pattern library of Snort intrusion detection system also expands correspondingly, leading to the decrease of detection efficiency. DPDK(Data Plane Development Kit) adopts polling method to realize data packet processing, which saves CPU interrupt time, memory copy time, and provides a simple and efficient data packet processing method to the application layer, making the development of network applications more convenient. How to improve the efficiency of Snort intrusion detection system with the advantage of DPDK’s high-performance packet processing is the research focus of this paper.

Modelling of security in ship computer systems

Modelling of security in ship computer systems

Aspects of human weaknesses in cyber security

Along with the development of information technology in recent years, awareness about the security of computer systems is also increasing. Because the human factor is often guilty of the vulnerabilities to which an information system is exposed, this paper will research and evaluate disparate attack vectors which are being utilized today to successfully exploit human weaknesses. We will also try to create a mechanism to mitigate against these attack vectors.

Accurate Approach Towards Efficiency of Searching Agents in Digital Libraries Using Keywords.

The age of information has done it simple for storing huge amount of data. In actual fact, a considerable segment of existing information is accumulated in the text databases that have huge set of documents from different sources like research articles, news articles, books, e-mail messages, web pages and digital libraries. In many text databases, stored data are in the semi-structured format in that they are neither entirely structured nor entirely unstructured. IR (Information Retrieval) field has been growing in parallel using database systems for several years. Contrasting to the databases system fields that have concentrated mainly on transaction and query processing of the structured data, IR is concerned with firm and retrieval of data from a huge quantity of text-oriented documents. Thus, IR tackles with unstructured and/or semi-structured databases. Information security requirements within a firm have experience major variations in the past some decades. By the establishment of computer, the necessary for automated equipment for securing files as well as other information that stored on the computer turned into evident. This is particularly in case of shared information resources via public network. This is the origin for having a secure computer system / the need for computer security. Computer Security can be achieved by Intrusion Detection Systems. In this paper, we address these issues by applying Similarity Search in two diversified fields: Digital Libraries and Computer Security. The paper discusses a fast and efficient similarity search technique for approximate retrieval of books metadata in Digital Libraries. In DLI the books retrieval takes place just by using metadata such as title, year, edition, author, publishing of a book. Though, if metadata is missing, incorrect or unfinished, then it creates the library retrieval system inefficient, incorrect leads too much confusion to the user. In this context even if the query from the user matches partially or fully with a stored pattern, the information related to that be retrieved. The paper talks about a method that functions rapid and effective, language independent, and flexible library retrieval system signature based similarity search. This system is able to retrieve not only the metadata that exactly matches the query but also fairly accurate identical because of missing words, jumbled words and spell mistakes. Fundamentally, signature file approach is used here. A signature file approach looks like the most capable for huge database as it has superior text retrieval features and requires little storage overhead.

Protection of Personal Data in Documents: Application of the Law on Personal Data Protection in Serbia and Abroad

The rapid and continuous development of information technologies that encompasses almost all spheres of social life, imposes the key issue of protecting the privacy personal data, the issue of their availability, the way of their storage, processing, transmission and use. The contemporary concept of privacy puts emphasis on information control, security and data protection in computer information systems. Protection of privacy primarily concerns the issue of protection against abuse, fraud, embezzlement and deliberate or accidental damage. This paper covers several key issues: what are the mechanisms for protecting personal data in documents; is it feasible to achieve higher security of computer systems in terms of data protection; is it possible to limit the distribution of certain types of data (medical reports, financial institutions, schools); what is done regarding data protection in terms of establishing laws, regulations and standards. From the point of view of archivists and archival staff in the era of digitalization of archival material when it becomes accessible and available for use, the protection of personal data in documents is certainly an issue that deserves special attention and consideration. The paper shall provide an overview on the up to date achievements in this field within the archival services in our country and abroad.

Evaluation of DDoS attacks Detection in a New Intrusion Dataset Based on Classification Algorithms

Intrusion detection system is an imperative role in increasing security and decreasing the harm of the computer security system and information system when using of network. It observes different events in a network or system to decide occurring an intrusion or not and it is used to make strategic decision, security purposes and analyzing directions. This paper describes host based intrusion detection system architecture for DDoS attack, which intelligently detects the intrusion periodically and dynamically by evaluating the intruder group respective to the present node with its neighbors. We analyze a dependable dataset named CICIDS 2017 that contains benign and DDoS attack network flows, which meets certifiable criteria and is openly accessible. It evaluates the performance of a complete arrangement of machine learning algorithms and network traffic features to indicate the best features for detecting the assured attack classes. Our goal is storing the address of destination IP that is utilized to detect an intruder by method of misuse detection.

A Deep Convolutional Neural Network for Image Malware Classification

Malware classification and detection is an important factor in computer system security. However, signature-based methods currently used cannot provide an accurate detection of zero-day attacks and polymorphic viruses. This is why there is a need for detection based on machine learning. The purpose of this work is to present a deep neuronal classification method using convolutional and recurrent network layers in order to obtain the best features for classification. The proposed model achieves 98.73% accuracy on the Microsoft malware dataset.

Taxonomy on RapidMiner Using Machine Learning

Malware Classification is an important factor in security of Computer and Network Systems. Malware Classification means to classify the malware samples into their respective families and subfamilies. In this work we have used malware dataset having multiple signatures. Our objective here is to provide efficient machine learning algorithm which provide best accuracy for classification of malware into their respective families. We use RapidMiner tool and four different machine learning algorithms to analyze dataset. Best accuracy we get is of 64.05% using Decision Tree algorithm and split validation technique for splitting of dataset into training and test set.

Effective protection of information systems and networks against attacks in the era of globalization

The problem of ensuring the security of networks and computer systems of transnational companies is one of the most important issues of modern computer science. In scientific centers around the world, numerous studies are carried out to ensure the security of operating systems and application programs. The aim of the work is to provide theoretical and practical knowledge related to threats, security methods and the latest trends in effective protection of networks and information systems against attacks.

Detect DRAM Disturbance Error by Using Disturbance Bin Counters

DRAM disturbance errors are increasingly a concern to computer system reliability and security. There have been a number of designs to detect and prevent them; however, there lacks any design that guarantees 100 percent detection (no false negative) with a small and fixed hardware cost. This paper presents such a design based on a novel idea called disturbance bin counter (DBC). Each DBC is a complex counter that maintains an upper bound of disturbances for a bin of DRAM rows. Their access is not in the critical path of processor execution and thus incurs no performance overhead. The design is optimized at the circuit level to minimize the storage requirement. Our simulation results using multi-core SPEC CPU2006 workloads show that no false positive occurs with a 1,024-entry DBC table, which requires only 4.5 KB storage. The design can be incorporated into a memory controller to guarantee the detection of DRAM disturbance errors or row hammering by malicious programs.

ADVANCE VIRUS DETECTION USING COMBINED TECHNIQUES OF PATTERN MATCHING AND DYNAMIC INSTRUCTION SEQUENCES

Network security has always been an important issue and its application is ready to perform powerful pattern matching to protect against virus attacks, spam and Trojan horses. However, attacks such as spam, spyware, worms, viruses, and phishing target the application layer rather than the network layer. Therefore, traditional firewalls no longer provide enough protection. However, the solutions in the literature for firewalls are not scalable, and they do not address the difficulty of an antivirus. The goal is to provide a systematic virus detection software solution for network security for computer systems. Instead of placing entire matching patterns on a chip, our solution is based on an antivirus processor that works as much of the filtering information as possible onto a reference memory. The infrequently accessing off-reference data to make the matching mechanism scalable to large pattern sets. In the first stage, the filtering engine can filter out more than 93.1% of data as safe, using a merged shift table. Only 6.9% or less of potentially unsafe data must be precisely checked in the second stage by the exact-matching engine from off-reference memory. In addition to that Dual port BITCAM processing program is used along with the Exact Matching Engine and Bloom Filter process. This Dual port BITCAM processes next to the exact matching engine and bloom filter process. This Dual port BITCAM process is placed exclusively for obtaining higher throughput. To reduce the memory gap and to improve the performance, we also propose three algorithms are used: 1) a skipping algorithm; 2) a cache method; and 3) a prefetching mechanism. Keywords--Algorithmic Attacks Embedded System, Memory Gap, Network Security, and Virus Detection.

Investigation of a Markov Model for Computer System Security Threats

Investigation of a Markov Model for Computer System Security Threats

Guest Editors’ Introduction: Special Issue on Data-Driven Dependability and Security

The six papers in this special issue aim to concentrate novel contributions addressing dependability and security of computer systems through data analysis, and to publish consolidated research results focusing on data-driven methodologies, measurements from production systems, and analysis of large datasets. This information provides valuable contributions related to log-based measurements, operating systems dependability, and attack detection.

IMPLEMENTASI KATOOLIN SEBAGAI PENETRASI TOOLS KALI LINUX PADA LINUX UBUNTU 16.04 (STUDI KASUS: REVERSE ENGINEERING FILE .APK)

The Linux Operating System is known for its open-source characteristic which means everyone is free to develop Linux with the use of available source code. The result of Linux development is called Linux distribution (Distro). There are various Linux distributions in accordance with their respective uses, one of them is Kali Linux. Kali Linux is a Linux distro that is developed to penetrate the security of computer systems. Kali Linux uses a variety of tools to perform its functions. However, for users who want to use the functionality of Kali Linux without having to change the Linux distro that has been used, the user can use Katoolin. Katoolin can provide the convenience and flexibility for users who want to use Kali Linux as a special Linux distro for the purpose of penetrating computer system security without having to replace the distro that has been used or do a full install of Kali Linux. One case study that can be solved using the Kali Kali Linux based tool on Katoolin is Reverse Engineering. The case study was solved using one of the tools in the Reverse Engineering category named apktool that available on Katoolin.

ОГЛЯД МЕТОДІВ ПРОВЕДЕННЯ ТЕСТУВАННЯ НА ПРОНИКНЕННЯ ДЛЯ ОЦІНКИ ЗАХИЩЕНОСТІ КОМП’ЮТЕРНИХ СИСТЕМ

Предметом статті є аналіз найбільш розповсюджених методів проведення тестування на проникнення в комп’ютерні системи. Результати. Проаналізовано міжнародні стандарти і керівництва з інформаційної безпеки, розглянуті методології проведення тестування на проникнення, проаналізовано нормативні акти різних країн в яких закріплено вимоги з проведення даного виду тестування. Наведено перелік найбільш розповсюджених міжнародних методологій проведення пентестінгу, надано їх короткий опис. Проаналізовано методи проведення пентестінгу, визначені основні переваги і недоліки таких методів. Висновок. Запропоновано класифікацію методів тестування на проникнення для оцінки захищеності комп’ютерних систем.

Web based testing application security system using semantic comparison method

Computer and web security system is an attempt to avoid attacks from crackers because a form and method of crime on internet network can not be predicted. Therefore, we just keep trying to use various methods in securing the system that is running. It is the same in web testing that can be accessed online by people who are not responsible from along distance to change and remove the test results or even damage the web testing system. So, the purpose of this paper is to design and implement web security testing system by using semantic comparison method to avoid structured query language injection (SQLI) attack and to do security on web testing application using Message Digest 5 encryption (MD5). Research data were obtained by using direct observation and documentation and literature review. After the design and application of the system, it can be obtained that by using semantic comparison method in web testing can prevent the occurrence of SQL injection attacks and can secure account from web testing users by using MD5.

Anatomy of Memory Corruption Attacks and Mitigations in Embedded Systems

For more than two decades, memory safety violations and control-flow integrity attacks have been a prominent threat to the security of computer systems. Contrary to regular systems that are updated regularly, application-constrained devices typically run monolithic firmware that may not be updated in the lifetime of the device after being deployed in the field. Hence, the need for protections against memory corruption becomes even more prominent. In this letter, we survey memory safety in the context of embedded processors, and describe different attacks that can subvert the legitimate control flow, with a special focus on return oriented programming. Based on common attack trends, we formulate the anatomy of typical memory corruption attacks and discuss powerful mitigation techniques that have been reported in the literature.