Security Protection Mechanisms Research Articles

A CAN Bus Security Testbed Framework for Automotive Cyber-Physical Systems

The popularization of electronic devices and the enrichment of external interfaces have increased the attack surface of the automotive cyber-physical system (CPS). As a vital part of the CPS, the controller area network (CAN) is more vulnerable to security threats due to the lack of corresponding security protection mechanisms. This kind of security problem has also attracted extensive attention from academia and industry. Researchers have proposed numerous intrusion detection models for the in-vehicle CAN bus, solving some security problems to a certain extent. However, vehicle manufacturers seldom disclose the internal details of vehicle ECUs due to safety concerns. Thus, it is difficult for researchers to investigate the operation mechanism of the bus. Meanwhile, there is a risk of personal safety in completing attack experiments on real vehicles, which can also lead to the lack and diversification of in-vehicle network data, especially the data of attack behavior. Based on real vehicle data, an open, adaptable, and low-risk CAN bus security testbed framework in the automotive CPS is proposed in this study, aiming to enrich the operation data of the CAN bus and enhance the personal safety of researchers. Besides, the delay of the testbed sending and receiving periodic and aperiodic CAN messages is theoretically explored. The results demonstrate that the generated timestamp in the dataset is mainly associated with the timestamp of the real vehicle data and that the transmission and collection of time series data are completed by Algorithm 1 and Algorithm 2. In the evaluation of the security testbed, the stability of the security testbed is studied from the two indicators of delay and packet loss rate. The experiment reveals that the testbed has a small relative delay difference and a low packet loss rate. Moreover, the DTW algorithm is employed to calculate the distance between the real vehicle and the testbed, and the experimental results demonstrate that the testbed is featured with high similarity and simulation.

A management method of chronic diseases in the elderly based on IoT security environment

Due to the global influenza pandemic and the increasing health problems of the elderly, healthcare for the elderly has become an important application of Internet of Things(IoT) technology. However, under the condition of smart healthcare, the privacy of the elderly is not well protected. Therefore, to ensure the information security of the elderly, this paper proposes a management method for elderly chronic diseases based on the IoT security environment, establishes a security protection mechanism, and uses the IoT technology to monitor the vital signs of the elderly in real-time. At the same time, the Disease Immune Rehabilitation Algorithm (DIRA) is constructed based on the physiological data collected by the device to identify healthy people and reduce the number of infected people. Through experiments on several generations, the results show that this method can increase the proportion of the immune population to a certain extent and reduce the number of infected people.

Research on technical scheme for multi type load resource information access

In order to improve the regulation ability of adjustable load resources, realize the aggregation, sharing and regulation of “source-load-storage” regulation resources in the region, and improve the adjustable load management ability, the criteria and methods for accessing the operation system of load resource aggregators to the regulation center are proposed according to the safety protection requirements of power monitoring system and the communication ability of multi type load resource aggregators. To meet the security access of multiple resources, combined with different access modes of load resources, a network security protection mechanism combining software and hardware is proposed. Digital certificate, data encryption, situation awareness, analysis and early warning and other technologies are used to build security protection strategies for private network and different access modes such as Internet, wireless and optical fiber, so as to adapt to the security access of multiple resources. An interaction mode based on standardized data format, using web services (restful HTTPS), file interaction and 104 protocol could be established to adapt multi type adjustable load resource model and safe interaction of real-time data..

Built-in security framework research for 6G network

6G will enable seamless coverage across land, sea, sky, and space, and provide users with on-demand services. 6G requires high security and its security capabilities are expected to serve as an independent logical plane under the 6G network architecture to provide services and guarantee for 6G networks and applications. This article analyzes and summarizes the three aspects of 6G security evolution requirements. First, the distributed autonomy of network architecture increases the exposure surface of network equipment and functions, and puts forward the requirements for high security of network elements and subnets themselves. Second, the cloud and virtualization technologies increase the risk of internal attacks, and require security protection mechanisms within network elements and the internal network based on the concept of zero trust. Third, providing on-demand services to customers requires intelligent collaboration mechanisms within the network, as well as an elastic and programmable security capability pool. Based on the above requirements and the development of security technologies, this paper proposes a 6G security construction idea with the built-in security framework as the basis, which includes security capability layer, security policy controller, security intelligence center and security management center, collaborating with the trusted infrastructure, orchestration capabilities and artificial intelligence abilities. The framework is built upon the security capability inside the network, coordinated with the trust consensus and the intelligent collaboration, which forms a security architecture and related operating mechanisms with active immunity, trustworthiness, and collaborative elasticity. By means of the practical case of building a trust link, the framework is proved to be able to provide flexible and on-demand security services for 6G networks and applications.

Data Security Protection Mechanism of Video and Image Feature Modeling Based on Domestic Crypto Algorithm

Video and image monitoring is increasingly appearing in our home, travel and other aspects. Through video and image analysis and comparison of video and image monitoring data, it can provide strong analysis support capabilities for social security prevention and control, traffic command, safety production and so on. Video and image feature modeling is a necessary prerequisite for video and image analysis and comparison. Video and image feature modeling forms video and image feature data. Video and image feature data reflects the most essential information of various elements such as people, vehicles and objects. However, video and image data is easy to be damaged, changed and leaked in the process of collection, aggregation, analysis, modeling and storage, Facing data security risks. This paper proposes a set of video and image feature modeling data security protection mechanism based on domestic algorithm to realize the whole process encryption protection of data acquisition, transmission and storage.

Security Service Function Chain based on Software-Defined Security

Software-defined networks face not only traditional network security threats, but also new network security threats brought by centralized and programmable control planes. To address the above problems, this paper proposes a business chain design mechanism for security protection functions based on software-defined security, which constructs a security service function chain according to user requirements and also realizes security resource scheduling according to the load of hosts, and the security service function chain rules classify and redirect network flows to corresponding security devices sequentially in the form of OpenFlow flow tables to realize network traffic Dynamic control of network traffic. The test shows that this mechanism can effectively realize security service virtualization and provide flexible and dynamic security protection mechanism according to security service requirements.

Analysis of information security system with unlimited buffer memory in service networks

The optimal confiquration of the information security system (ISS) is determined as a queuing system with an unlimited amount of buffer memory, which ensures the maximum information security of service networks for oil and gas production facilities by ensuring the transition of all unauthorized access requests (UA) from the security protection mechanism (PM). Computational procedures and algorithms have been developed for studying the optimal characteristics of ISS as single-phase multi-channel queuing systems (QS) with an unlimited amount of buffer memory. Computational experiments have been carried out and numerical results have been obtained, which make it possible to use them in the construction of ISS in networks for various purpose.

Application of Artificial Intelligence to Social Governance Capabilities under Public Health Emergencies

Due to the high complexity, high destructive power, and comprehensive governance characteristics of public health emergencies, the ability of social governance has been distorted and alienated under intensive pressure, and the subjects of social governance have become lazy, professional, and politicized. There are obvious problems, such as system information leakage and information asymmetry. Based on the above background, the purpose of this article is to study the application of artificial intelligence to social governance capabilities under public health emergencies. This article focuses on the relevant concepts and content of emergency management of public health emergencies and in-depth analysis of the actual application of big data technology in epidemic traceability and prediction, medical diagnosis and vaccine research and development, people’s livelihood services, and government advice and suggestions, combined with investigations. The questionnaire analysis sorted out the problems in the social emergency management of public health emergencies in China. The results showed that 87.7% of the people simply sorted out laws and regulations and higher-level documents or even repeated content and lacked summary and reflection on emergency response experience, which led to the operability of emergency plans being generally even poor. In response to the shortcomings, countermeasures and suggestions were put forward, including establishing a standard data collection mechanism, establishing a data sharing mechanism, establishing a personal privacy security protection mechanism, and promoting the breadth and depth of big data applications.

Research on security protection of OPC UA PubSub Protocol

As a new generation of OPC protocol, OPC UA provides a standardized interoperability solution for industrial automation. In order to accelerate the application of OPC UA in industrial control networks, OPC Foundation published OPC UA PubSub protocol. With the gradual opening of industrial control network, the security risks of deep manufacturing facilities are greatly increased, so it is urgent to study the security protection of PubSub protocol. Based on PubSub protocol, we study the characteristics of its deployment environment and the security threats it faces, and point out the defects and solutions of PubSub protocol's own security protection mechanism. At the same time, we propose a security gateway model OSG, which is established between the field equipment layer and the field control layer, in order to deal with the security risks existing in the PubSub protocol.

Automated Ontology-Based Security Requirements Identification for the Vehicular Domain

Many electronic and electrical systems are now incorporated with modern vehicles to control functional safety. Lack of security protection mechanisms in vehicular design may lead to different ways of executing malicious attacks against the vehicular network. These attacks may have various types of negative consequences, such as safe vehicle operation. This work presents an ontology-based framework as a new automated approach to verify and validate security requirements against security issues in the vehicular domain. The system also applies a set of logical rules to identify a set of security requirements as a category of necessary security requirements that could be proposed to be integrated within the vehicle design to address a specific security issue.

Mobile edge computing for internet of things (IoT): security and privacy issues

Nowadays, the masonry for environment-friendly and protected network structure designs, for example, the Internet of Things and gigantic data analytics are increasing at a faster pace compared to an earlier state. Mobile edge computing for an Internet of Things widget is information processing that is achieved at or close to the collectors of information in an Internet of Things system. Herein, we are proposing to temporarily evaluation the concepts, features, protection, and privacy applications of Internet of Things authorized mobile edge computing with its data protection view in our data-driven globe. We focus on illuminating one of kind components that need to be taken into consideration whilst creating a scalable, consistent, impenetrable and disseminated mobile edge computing structure. We also sum up the fundamental ideas regarding security threat alleviation strategies. After that, we walk around the existing challenges and opportunities in the area of mobile edge computing. In conclusion, we analyze a case study, in which a security protection mechanism can be hardened to lift out everyday jobs.

Anomaly Detection Trusted Hardware Sensors for Critical Infrastructure Legacy Devices.

Critical infrastructures and associated real time Informational systems need some security protection mechanisms that will be able to detect and respond to possible attacks. For this reason, Anomaly Detection Systems (ADS), as part of a Security Information and Event Management (SIEM) system, are needed for constantly monitoring and identifying potential threats inside an Information Technology (IT) system. Typically, ADS collect information from various sources within a CI system using security sensors or agents and correlate that information so as to identify anomaly events. Such sensors though in a CI setting (factories, power plants, remote locations) may be placed in open areas and left unattended, thus becoming targets themselves of security attacks. They can be tampering and malicious manipulated so that they provide false data that may lead an ADS or SIEM system to falsely comprehend the CI current security status. In this paper, we describe existing approaches on security monitoring in critical infrastructures and focus on how to collect security sensor–agent information in a secure and trusted way. We then introduce the concept of hardware assisted security sensor information collection that improves the level of trust (by hardware means) and also increases the responsiveness of the sensor. Thus, we propose a Hardware Security Token (HST) that when connected to a CI host, it acts as a secure anchor for security agent information collection. We describe the HST functionality, its association with a host device, its expected role and its log monitoring mechanism. We also provide information on how security can be established between the host device and the HST. Then, we introduce and describe the necessary host components that need to be established in order to guarantee a high security level and correct HST functionality. We also provide a realization–implementation of the HST overall concept in a FPGA SoC evaluation board and describe how the HST implementation can be controlled. In addition, in the paper, two case studies where the HST has been used in practice and its functionality have been validated (one case study on a real critical infrastructure test site and another where a critical industrial infrastructure was emulated in our lab) are described. Finally, results taken from these two case studies are presented, showing actual measurements for the in-field HST usage.

STRUGGLE AGAINST POVERTY AND NEW SOCIAL RISKS IN THE AXIS OF THE WELFARE STATE CRISIS

Sanayi toplumlarının endüstri performans modelinin bir yansıması olarak kurumsallaşan refah devletleri, modern devletlerin ileri sosyal düzeyi olarak kabul edilir. Sanayi üretim yapısının tam istihdam modelleri içinde ekonomik gelişme ile yakaladıkları uyumlu düzey, refah devletlerinin birçok sosyal riskle, istihdam başarıları yoluyla mücadele edebilmesine imkan sağlamıştır. Yoksulluk ve işsizliğin bireyin tembelliğinden kaynaklandığı iddialarına dayanan klasik liberal tezlerin aksine istihdam üzerinden gelire ve refaha ulaşma fırsatı veren refah devleti kurduğu sosyal güvenlik ve sosyal koruma mekanizmaları ile yoksullukla mücadelede geniş bir politika setinin oluşturulmasına kaynaklık etmiştir. Neo liberal ekonomi politikalarının yükselişi ile önemli bir kriz sürecine giren refah devletinin, sosyal politikalarında güç kayıpları yoksullukla ve yeni sosyal risklerle mücadelede yeni önerilerin gündeme taşınmasına neden olmuştur. Bu makale, refah devletinin güç kaybettiği süreçte yoksullukla mücadele politikalarındaki değişimin incelenmesini konu edinmektedir.

Reply to “Security Protection Mechanisms Must Be Embedded in Blockchain Applications”

A letter to this Journal suggested that a recent blockchain article should have included more information about security. The article was intended to alert chemistry educators to potential uses of blockchain, not to describe the coding necessary to create the system. In addition, the article did discuss security in a general way and recommended that educators would find that the permissioned form of blockchain would be more useful because requiring approval before adding a new node would help to block out malevolent actors.

IOT security analysis of BDT-SVM multi-classification algorithm

With the continuous development of the Internet of Things, the issue of IoT data security and privacy protection has received increasing attention. Compared with traditional Internet applications, IoT applications using smart terminals as supporting technologies have more complicated and serious security problems. This paper proposes a multi-classification algorithm based on double support vector machine decision tree. For all samples, the samples with the most separability were divided into two categories according to the size of the distinguishability between classes. In these two sub-categories, the most divisible samples are separately searched and divided into two categories, so that they can not be subdivided. This paper proposes a location privacy security protection mechanism based on anonymous tree and box structure, which provides location privacy protection for services oriented to intelligent terminals. The simulation results show that the common sub-collection of the anonymous group is larger, and the time overhead of building the group is smaller. At the same time, the BDT-SVM multi-classification algorithm can improve the accuracy of the intrusion detection system and reduce the detection time.

Integrated Functional Safety and Security Diagnosis Mechanism of CPS Based on Blockchain

This paper proposes a functional safety and information security protection mechanism based on blockchain technology. The design of the basic level and integration level blockchain structure of CPS distributed architecture and related functional safety and information security measures are introduced. An effective communication judgment mechanism based on functional safety error threshold is proposed, which is stored and judged by smart contract. And a refund transaction with a clock is proposed to ensure the effective execution of the functional safety error threshold mechanism. The article takes cyber physical machine tool system as an example to describe the SIL judgment method of CPS physical equipment and functional safety loop and combines SIL with fault diagnosis and risk protection. Finally, the rationality of our proposed mechanism is proved by information security, functional security, real-time and maintainability.

Research and design of system security based on .NET frame

For using the .NET framework model of Web application system for Web development to some security problems in the analysis and discussion, this paper put forward some security prevention programs, though. The .NET framework system itself has some security protection mechanism, but users in developing Web mode when the application is to avoid safe hidden trouble, should be more reliable in every link of security Settings.

Attacker Identification and Intrusion Detection for In-Vehicle Networks

As the most wide-spread in-vehicle data bus protocol, CAN (Controller Area Network) has attracted more and more attention due to its lack of security protection mechanism. A variety of attacks against CAN bus have emerged, posing serious threat to vehicle safety. Accordingly, some methods have been proposed to detect CAN bus attacks, however, they have certain shortcomings such as additional computing burden and obvious false detection rate. Therefore, using the physical characteristics of voltage signal on CAN bus, we propose an LOF (Local Outlier Factor)-based intrusion detection method, which can greatly reduce the false detection rate as well as improve the detection accuracy. The modification of CAN protocol and the additional computation burden can also be avoided. In addition, to the best of our knowledge, we are the first to implement bus-off intrusion detection on real vehicles.

Current status and future prospects of data leakage prevention technology: A brief review

With the rapid development of mobile Internet, the application environment of data information is becoming more and more complex. How to prevent the leakage of sensitive data has become an urgent practical problem to be solved in the field of information security. In this situation, data leakage protection (DLP) technology emerges, its aim is to protect sensitive data in all directions and to establish a security protection mechanism covering the whole data life cycle. Starting from the research background and basic concepts of data leakage protection, this paper reviews and summarizes the current research status and development trend of data leakage protection technology.

Guest Editorial The Convergence of Blockchain and IoT: Opportunities, Challenges and Solutions

Internet of Things (IoT), coming with billions of connected devices, could potentially transform our daily life but could also create a serious security headache. It brings greater complications in securely accessing these devices with privacy protection guaranteed, and several research issues need to be investigated in detail, e.g., access control, traceability, anonymity, authentication, security bootstrap, etc. Most of the traditional security protection mechanisms are centralized, which make them difficult to scale up to meet the security demands of the IoT.