Security Procedures Research Articles

Mineral price instability and its effects on conflict in industrial and small-scale mining in eastern congo

Existing research emphasizes a strong correlation between mining activity and local disputes but does not distinguish between small-scale and large-scale mining operations. This research utilizes the volatility of mineral prices and the issue of industrial mining licenses to investigate their influence on conflict levels in Eastern Congo from 2004 – 2022. Our research indicates that as mineral prices rise, conflicts related to small-scale mining areas intensify, which suggests competition between militant factions.Nevertheless, the influence of such an effect is significantly diminished within the framework of industrial mining. In addition, the expansion of industrial mining activities often leads to decreased confrontations, indicating that firms have implemented adequate security procedures. Conversely, its growth causes community dissatisfaction, and when it replaces small-scale mining, it also leads to increased citizen aggression and theft. Based on thorough case evaluations, these negative outcomes only occur when industrial mining moves from the initial exploration phase to full-scale production.

A Quantum-Secure Cryptographic Algorithm Integrating Fractals and Prime Numbers

The present work introduces a new scheme of data cryptography in the context of emerging trends due to the challenge of defending critical network infrastructure against new exploit systems based on artificial intelligence or defending against quantum threats. In this paper, we will present an innovative cryptographic system composed of keys coming from fractals and prime numbers that are additionally manipulated through mathematical operations using matrices and quantum security. This technique ensures a high level of security, as demonstrated by the NIST p-values calculated on the key. This paper works upon the foundation on the previous work F&NIF (Fractal & Numerical Information Fusion), as we will discuss in the paper. In this work, we take this procedure and expand it with these new added features, using new fractal schemes and, in particular, implementing a novel quantum security procedure. This algorithm creates a security key applicable to cryptography that is resistant to quantum attacks since this procedure is quantum-crypto-agile.

Implementation of Digital Payment in Mitigation of Fraud Risk at Hotel Conrad Bali

This study aims to be a fraud risk mitigation strategy in managing payment transactions. This study is a qualitative study. Data collection by interviews, documentation studies, and observations. Data analysis techniques used in this study are data reduction, data presentation, and drawing conclusions. The results of this study indicate that digital payments in payment transactions at Conrad Bali use internet banking. Conrad Bali conducts a longitudinal risk evaluation to identify fraud and applies a clear separation of duties. Conduct routine audits of security systems and internal controls to ensure employee effectiveness. Authorization is carried out with three security procedures, namely transaction maker (account payable and paymaster), approver/checker (chief accountant, OIBH, director of finance, and general manager) and releaser (general manager and owner).

Prospects and challenges of mobile banking in Bangladesh: A case study

Mobile banking is a technology advancement that enables convenient, anytime, anywhere access to financial services. When using mobile banking, customers can access banking services via their phones without having to wait in line. It is a branchless kind of banking. The purpose of the study was to identify the prospects and challenges facing Bangladeshi mobile banking in the twenty-first century. Over 80 respondents were selected using Yaro Yamani formula from a sample of bank clients and bankers and given a standardized questionnaire. The study's goal has been perceived through the application of the descriptive research approach. Based on the study's findings, people's interest in mobile banking is growing daily due to its advantages. Certain banks do not presently offer all mobile banking services, and not all respondents are aware of all the mobile banking options available. Fast data transfer and cost-effective usage are two factors that entice customers. Some of the disadvantages of mobile banking are that it is very expensive, private, complex, etc. Lowering operational risks and increasing consumer confidence in Bangladesh's mobile banking services can be achieved through robust technical information control and security procedures that ensure the integrity and confidentiality of financial transactions.

Cybersecurity Certification Requirements for Distributed Energy Resources: A Survey of SunSpec Alliance Standards

This survey paper explores the cybersecurity certification requirements defined by the SunSpec Alliance for Distributed Energy Resource (DER) devices, focusing on aspects such as software updates, device communications, authentication mechanisms, device security, logging, and test procedures. The SunSpec cybersecurity standards mandate support for remote and automated software updates, secure communication protocols, stringent authentication practices, and robust logging mechanisms to ensure operational integrity. Furthermore, the paper discusses the implementation of the SAE J3072 standard using the IEEE 2030.5 protocol, emphasizing the secure interactions between electric vehicle supply equipment (EVSE) and plug-in electric vehicles (PEVs) for functionalities like vehicle-to-grid (V2G) capabilities. This research also examines the SunSpec Modbus standard, which enhances the interoperability among DER system components, facilitating compliance with grid interconnection standards. This paper also analyzes the existing SunSpec Device Information Models, which standardize data exchange formats for DER systems across communication interfaces. Finally, this paper concludes with a detailed discussion of the energy storage cybersecurity specification and the blockchain cybersecurity requirements as proposed by SunSpec Alliance.

Cyber Security Controls and Countermeasures

Today's digital economy encompasses a conglomeration of devices, data, applications, and complex networks that can be hosted on-premises, in data centers or in cloud environments to support business functions. As a cybersecurity professional, you will be tasked to manage risks like cyber threats and data breaches in the workplace. The risks may emanate from the data that resides in the systems, like servers, computers or external drives and the physical assets themselves, like routers and switches. The onus is on preventing security events and limiting the damage or consequences of any event that might happen. Managing these risks in an organization can be achieved by implementing cyber security controls and countermeasures. Cyber security controls can be categorized into three distinct major groups: administrative control, physical control, and technological control. The administrative controls focus on security policies, guidelines, rules, procedures and standards designed by management to control access and utilization of confidential information. Physical control refers to a set of IT security controls deployed at the physical premise to prevent unauthorized physical access to data centres. Technical controls involve the use of systems and technical solutions to prevent security events in networks and cloud platforms. Additionally, when implementing security controls, the function of cyber security controls can be broadly divided into seven groups: directive, deterrent, preventive, compensating, corrective, detective, and recovery controls. Furthermore, security frameworks such as NIST, CIS controls COBIT, and ISO/IEC series form the cornerstone of cyber security controls and countermeasures. The aforementioned aspects will be discussed further in the later sections. For now, it is to provide a general picture of the cyber security controls and countermeasures. Keywords – Security Controls, Countermeasures, Frameworks, Information Systems, Risk

Trustworthiness evaluation of workers in critical facilities using electroencephalography-based acquaintance test

This study emphasized the critical importance of prioritizing workers' trustworthiness in safeguarding critical facilities from the potential harm caused by insiders' betrayal. By noting the limitations of existing physical protection systems in critical facilities, this study showed that effectively characterizing and detecting malicious insider activity can be possible by observing immediate brain physiological reactions to specific stimuli. Based on the finding, a novel approach using electroencephalography (EEG)-based acquaintance tests was introduced to objectively assess ’a level of suspicion between colleagues by measuring their brain responses when he/she is exposed to familiar and unfamiliar stimuli. If a person claims falsely about one's acquaintance, the model assumes he/she has malicious or suspicious intent by violating the reporting obligation. The experiment was designed with a relatively short time of monitoring of less than 2 min and with a simple EEG headband device called MUSE. The experiment is to analyze whether the model could provide reliable prediction of disguised acquaintance avoiding complex preparation process. Averaged N170 peak analysis indicated that MUSE provided adequate signal characteristics to classify acquaintance. Also, a machine learning-based subject-wise classification model showed adequate capability to differentiate the EEG signals of acquaintances from unknowns. The final prediction combined multiple single-trial classification results, correctly detected the participant's acquaintance about 94.1 % of the cases, with similar performance when strangers were presented. The results indicated the possibility of using biosignal to enhance security culture and mitigate insider threats in critical facilities, by providing an indication of behavior that disregards security policies and procedures.

Secure Framework Optimizes QAES Technique Used for Computing in the Cloud

Several consumers are concerned about the security of their data kept in the cloud, and many see local servers as a safer choice due to perceived control. However, cloud service companies frequently promise greater security procedures and employ dedicated security specialists, making data stored in the cloud potentially more secure. When the data holder expires, new files are saved in the cloud and encrypted with the QAES technology. The data owner then receives the encrypted data request. The sender and user both analyze data before sending encoded documents to the cloud. The key will be used to remove encryption from subsequent data. If users are unable to access the desired data, they should submit a fresh request. The most recent innovation focuses on combining an enhanced form of Quantum Key Distribution (QKD) with AES. This integration resulted in Quantum-AES (QAES), a novel quantum symmetric encryption scheme. QAES is based on the development of a quantum encryption key using dynamic quantum S-Boxes (DQS-Boxes), as opposed to the frequently utilized static S-Boxes. This strategy enhances security. Comparably, time is required to build files faster than they do now. This approach prevents brute force attacks since it uses the QAES algorithm, which provides additional security.

Signal Strength-Based Alien Drone Detection and Containment in Indoor UAV Swarm Simulations

A Novel simulation framework using self-governing drones is used to locate and reduce unauthorized drones in interior environments. The recommended method uses Received Signal Strength Indicator (RSSI) to identify an alien agent drone, which has different signal characteristics than the approved swarm of UAVs. Real-time threat detection is possible with this technology. After detecting the drone, the swarm organizes itself to encircle and besiege it for 10 seconds, making it inert before returning to their original positions. This unique solution uses RSSI to quickly identify and mitigate enclosed area concerns. It provides a reliable and effective indoor drone security solution. The simulation results show that the approach works in delicate environments including warehouses, laboratories, and other indoor facilities. This study advances unmanned aerial system (UAS) autonomous swarm intelligence and security procedures.

Innovating Airport Luggage Disinfection Systems with Advanced Technologies and Automation

In this article, we point out that luggage disinfection is a key step in stopping the spread of infectious diseases that can be contracted at airports due to viruses and bacteria, which can spread through passenger luggage at airports. To prevent the spread of respiratory infections at airports, in this research study, we compare two types of baggage disinfection system. The first method uses UV light to disinfect luggage while selectively checking it for the presence of bacteria and viruses. The second system uses non-selective disinfection, taking into account the possibility of the spread of disease from the aircraft’s home country. An analysis and simulation of a specific airport security procedure was carried out on the model under study, which is an automated system for disinfecting baggage at airports in two variants. The aim is to reduce the transmission of harmful diseases and, at the same time, to ensure the accuracy of passenger security screening by efficiently exhausting each of the proposed models. This research shows that the suggested measures to stop the spread of infectious diseases that travelers’ luggage can bring in will enhance screening procedures and, in particular, boost overall security while lowering the risk of infection transmission at airports.

Legal regulation of the asylum granting and ensuring of the refugees’ rights in the European Union

The article is devoted to the study of the legal regulation of the asylum granting and ensuring of the refugees’ rights in the European Union. Within the framework of the article, the legal basis of the Common European Asylum System functioning, the creation of which is laid down in the constituent treaties of the European Union, is investigated. In particular, it is determined that the purpose of such a common system is to establish unified standards for determining the criteria for admissibility of applications for asylum or international protection, a similar procedure for considering such applications and the grounds for refusing or suspending the status of a refugee or a person seeking temporary protection, as well as determining the state, responsible for providing asylum, uniform standards for ensuring the rights of refugees, as well as common principles of cooperation between the Member States and partner states that are not members of the Union. The key provisions of the Directive on qualification criteria, on the procedure for granting asylum and international protection, on the conditions of reception and rights of refugees, as well as the Dublin Regulation and the Eurodac Regulation were analyzed. The authors put an emphasis on the fact that because of the full-scale invasion and emergence of the war on the territory of Ukraine, significant changes were made to the process and procedures for granting refugee status and providing asylum within the framework of the legislation of the European Union. The latest Pact on Migration and Asylum was analyzed, especially regarding changes in ensuring border security, quick and effective procedures for considering and obtaining the status of a refugee or a person seeking international protection, solidarity and responsibility among countries that are obliged to provide asylum, as well as strengthening international cooperation in the field of migration. The authors express their support for those concerns regarding alleged violations that may occur after the entry into force of the Pact, in connection with the threat of violations of fundamental human rights. It was concluded that ensuring dignity and respect for human rights is a priority, considering that refugees are recognized as persons who have already suffered violations and were forced to leave their homes.

Secure IoT: Deep Learning-Based Intrusion Detection for Attack Detection and Prevent

Nowadays, the wide adoption of the modern Internet of Things (IoT) paradigm has brought about the tremendous development of smart cities. Smart cities operate in real-time world to promote ease and also the human life quality with regard to efficiency and comfort. A security concern along with privacy is considered as a foremost issue in several smart cities. there is basically a requirement for Intrusion Detection Systems for mitigating the IoT-related security outbreaks which took the entire benefits of security liabilities. In existing works, the accuracy in the procedure of detection and security are the main challenge. The non-attacked data is sent to user in a secured way using Improved RSA scheme. After which the user gets and decrypts them. The decrypted data is then forecasted for further examination. The experimental outcomes of proposed techniques employed in Feature Selection, classification, and also secure data transmission are related with the traditional methods.

An Intelligent Attack Detection Framework for the Internet of Autonomous Vehicles with Imbalanced Car Hacking Data

The modern Internet of Autonomous Vehicles (IoVs) has enabled the development of autonomous vehicles that can interact with each other and their surroundings, facilitating real-time data exchange and communication between vehicles, infrastructure, and the external environment. The lack of security procedures in vehicular networks and Controller Area Network (CAN) protocol leaves vehicles exposed to intrusions. One common attack type is the message injection attack, which inserts fake messages into original Electronic Control Units (ECUs) to trick them or create failures. Therefore, this paper tackles the pressing issue of cyber-attack detection in modern IoV systems, where the increasing connectivity of vehicles to the external world and each other creates a vast attack surface. The vulnerability of in-vehicle networks, particularly the CAN protocol, makes them susceptible to attacks such as message injection, which can have severe consequences. To address this, we propose an intelligent Intrusion detection system (IDS) to detect a wide range of threats utilizing machine learning techniques. However, a significant challenge lies in the inherent imbalance of car-hacking datasets, which can lead to misclassification of attack types. To overcome this, we employ various imbalanced pre-processing techniques, including NearMiss, Random over-sampling (ROS), and TomLinks, to pre-process and handle imbalanced data. Then, various Machine Learning (ML) techniques, including Logistic Regression (LR), Linear Discriminant Analysis (LDA), Naive Bayes (NB), and K-Nearest Neighbors (k-NN), are employed in detecting and predicting attack types on balanced data. We evaluate the performance and efficacy of these techniques using a comprehensive set of evaluation metrics, including accuracy, precision, F1_Score, and recall. This demonstrates how well the suggested IDS detects cyberattacks in external and intra-vehicle vehicular networks using unbalanced data on vehicle hacking. Using k-NN with various resampling techniques, the results show that the proposed system achieves 100% detection rates in testing on the Car-Hacking dataset in comparison with existing work, demonstrating the effectiveness of our approach in protecting modern vehicle systems from advanced threats.

Employee Protection Efforts Against Actions of Abuse and Violence in Securing Assets and Securing Company Asset Management (Case Study of PTPN IV Kebun Ajamu Unit)

This research aims to explore efforts to protect employees from acts of abuse and violence in the context of securing and managing company assets, with a special focus on PTPN Unit IV Kebun Ajamu. The method used is a qualitative approach and document analysis. Through this approach, research identifies incidents of abuse and violence recorded in letters of receipt of complaint reports. This research also highlights weaknesses in the implementation of existing asset security policies and procedures in companies. Research findings show that employees feel they are not adequately trained or prepared to deal with risky situations, and that there are communication and coordination problems between departments and between management and employees. This research also emphasizes the importance of integrating more sophisticated security technology and effective monitoring systems. Based on the research results, it is recommended that PTPN IV Kebun Ajamu improve security training and education for its employees, improve internal communications, and adopt more modern security technology. This research contributes to understanding the challenges and opportunities in efforts to protect employees and safeguard assets in the work environment

Outcomes of fenestrated frozen elephant trunk technique in 150 patients with acute type A aortic dissection

ObjectiveThe fenestrated frozen elephant trunk (FET) technique provides proximalization of distal anastomosis and antegrade blood flow into supra-aortic vessels through fenestration in a FET. We investigated the outcomes of the fenestrated FET technique in acute type A aortic dissection. MethodsWe evaluated 150 patients who underwent arch repair using the fenestrated FET technique for acute type A aortic dissection between July 2014 and January 2023. FET was deployed under hypothermic circulatory arrest and manually fenestrated under direct vision on the supra-aortic vessel aspect. Fenestration was performed for the left subclavian artery alone in 139 patients, 2 supra-aortic vessels in 9 patients, and total supra-aortic vessels in 2 patients. Fixation around fenestration site for endoleak prevention was performed in 48 patients. ResultsThe overall 30-day mortality rate was 4.7% (7 out of 150). Two patients developed paraparesis. Adequate blood flow into the supra-aortic vessels through fenestrations were confirmed in all patients at discharge. The false lumen thrombosis rate at the distal edge of FET was 96.6%. The median follow-up period was 28 months. The 1-year and 3-year overall survival rate was 89.1% and 84.5%, respectively. During the follow-up period, neither fenestration occlusion nor stroke was noted in the cerebral area perfused via the fenestration. Distal stent graft-induced new entry was noted in 2 patients. ConclusionsThe fenestrated FET technique is a straightforward and secure procedure for selected patients with acute type A aortic dissection. This technique can facilitate arch repair.

HES: Hash-Based Efficient Secure Model For Vehicular Ad Hoc Network

The Intelligent Transport System (ITS) comprehends an extensive range of applications, talking zones for instance road safety, comfort, security, and traffic flow. It is vital to defense reserved facts, and the revocation of harmful vehicles should only occur once malicious committed is noticed. Mechanisms of ITS include Vehicles (Vs), Certification Authority (CA) and Road Side Units (RSUs). It is seemly not to expose the real distinctiveness of an ITS station that is a vehicle, during the communication. Through the swift progresses in vehicle technologies, extraordinary throughput satellite communiqué, cyber physical systems, Internet of Things (IoT) and the Internet of Vehicles (IoV) have developed as a substantial research effort for expressive applications in current ages. IoV empowers linked and autonomous vehicles to involve with ITS environments, covering infrastructure, computing nodes, sensors and other entities. Vehicular ad hoc networks (VANETs) donate to develop driving efficacy and protection by dropping traffic congestions and avoiding accidents. However, the ad hoc nature of VANETs leads weaknesses, leading to numerous types of likely attacks. These attacks result in the deprivation of VANETs, tolerating malicious vehicles to misinform lawful vehicles for personal gain. To achieve the objectives of VANETs, it is vital to implement forceful security procedures. Though various techniques have been suggested but face different challenges such as communication delays, computational overheads and security. This learning suggests an efficient hash based method considered to ease communication delays, computational overheads and security attacks. The results specify that the proposed prototypical shows to be operative in addressing these challenges.

Penerapan ISO/IEC 27001:2022 dalam Tata Kelola Keamanan Sistem Informasi: Evaluasi Proses dan Kendala

Implementing ISO/IEC 27001:2022 in information security management is crucial and timely due to the increasing cyber threats, the necessity for regulatory compliance, and the significance of information security as a competitive edge. The latest revision of this standard demands proper adaptation and implementation to ensure effective information security management across various organizations. This study examines the key components of ISO/IEC 27001:2022, including organizational context, leadership, planning, support, operations, performance evaluation, and improvement. It delves into the application of ISO/IEC 27001:2022 in security system governance, emphasizing how this standard can enhance risk management and information security within an organization. A case study on a logistics company adopting this standard was conducted to identify best practices, implementation challenges, and its impact on security and regulatory compliance. The study's findings demonstrate that implementing ISO/IEC 27001:2022 effectively improves an organization's information security posture by integrating security policies, procedures, and controls into business processes. These findings offer recommendations as practical guidelines for organizations aiming to strengthen their information security management through the adoption of globally recognized international standards.

Exploring Patient Satisfaction with Hospital Services Using SERVQUAL: A Case Study in Bandarlampung Municipality, Indonesia

Research Aims: The research of hospital quality service in Indonesia by using SERVQUAL is limited in the literature. This research aims to analyze the dimensions necessary for hospitals to enhance service quality to meet the standards expected by stakeholders, hospital management, government, the academic community, and patients. Design/methodology/approach: The research employs a survey method, distributing questionnaires to hospital patients as research tool. The study population comprises hospital users in Bandarlampung Municipality, with purposive sampling utilized for selection. Respondents were given the option to complete a questionnaire before leaving the hospital or online via email or WhatsApp for those discharged. Research Findings: The findings reveal that dimensions of hospital service quality, including infrastructure, administrative procedures, overall patient experience, and hospital social responsibility, significantly influence patient’s satisfaction in hospitals in Bandar Lampung. However, the quality of human resources and security procedures do not exhibit a significant impact on patient’s satisfaction. Theoretical Contribution/Originality: This research expands the application of the SERVQUAL model beyond its traditional domains by analyzing hospital service quality within the Indonesian context. The study identifies critical dimensions such as infrastructure, administrative procedures, overall patient experience, and hospital social responsibility as significant predictors of patient satisfaction. By understanding these challenges, context-specific strategies for enhancing service delivery can be developed. Keywords : hospital services, patient satisfaction, human resources

Kombinasi Kriptografi Modern Dalam Keamanan Pesan Teks

In the rapidly advancing digital era, information security has become a crucial aspect in maintaining the confidentiality, integrity, and authenticity of data. This article discusses the relationship between information system auditing and the use of modern cryptographic combinations in securing text messages. Information system auditing serves as an evaluation mechanism to ensure that security policies, procedures, and standards are correctly and consistently applied. On the other hand, modern cryptography provides advanced encryption technology that protects text messages from unauthorized access and manipulation. By combining these two approaches, we can create a robust framework for securing text messages, ensuring that data remains safe and protected during transmission and storage. Research results indicate that integrating information system auditing with modern cryptographic techniques significantly enhances the security and reliability of information systems.

Exploring strategies for streamlining security procedures without compromising safety: airport planning and logistical considerations

In the aviation industry, one principal aim is security and safety. On the one hand, governments are interested in globalising their countries and the security of their citizens and visitors while entering and leaving the country. On the other hand, for the aviation industry, it is imperative to guarantee the security of every process. Although aviation is known as the safest mode of transportation, it is the most criticised and scrutinised when an accident happens due to the potential passenger losses. Even if there were only one accident per year, the impact on the public eye would be fatal, and the aviation industry would not be the massive transportation system it is today. In this study, security processes will be analysed and studied through simulations. Apart from safety, another notable characteristic of aviation is the number of passengers who enter airports, take planes, travel, work, and use this system daily. This study focuses on optimising the processes without compromising safety levels. This paper presents various designs and optimisations for airport processing areas by studying parameters such as flight precedence, distribution over long journeys, human factors, and technology. Through this study, readers can better understand airport logistics and the significant influence of these parameters. Balancing all aviation elements is almost an art, requiring careful coordination and management.