Security Risk Analysis Research Articles

Competencies for sustainable financial and economic management: Their impact on human capital development and national security

The relevance of the study is determined by the orientation of modern society towards the strategy of sustainable development. The advent of the era of “globalization through sustainable development” is accompanied by the strengthening of “old” threats and the emergence of “new” ones. According to the article, the sustainability viewpoint systemically links the social, economic, and environmental domains into a dynamic, long-term view, which is the fundamental contribution of the perspective to the examination of security challenges. It also signifies a paradigm change in how public administration functions when analyzing security risks at the state and federal levels. Competences for sustainable financial and economic management are considered in frames of sustainable public management, implying, in particular, positive impact on human capital and contributing to national security through ESG paradigm implementation.

Toward security quantification of serverless computing

Serverless computing is one of the recent compelling paradigms in cloud computing. Serverless computing can quickly run user applications and services regardless of the underlying server architecture. Despite the availability of several commercial and open-source serverless platforms, there are still some open issues and challenges to address. One of the key concerns in serverless computing platforms is security. Therefore, in this paper, we present a multi-layer abstract model of serverless computing for an security investigation. We conduct a quantitative analysis of security risks for each layer. We observe that the Attack Tree and Attack-Defense Tree methodologies are viable approaches in this regard. Consequently, we make use of the Attack Tree and the Attack-Defense Tree to quantify the security risks and countermeasures of serverless computing. We also propose a novel measure called the Relative Risk Matrix (RRM) to quantify the probability of attack success. Stakeholders including application developers, researchers, and cloud providers can potentially apply these findings and implications to better understand and further enhance the security of serverless computing.

Security Risk Analysis in Accounting Information Systems Based on Data Dashboard from the Palo Alto Network PA-820 UTM

This study analyzes security risks in accounting information systems using data from the Palo Alto Network PA-820 UTM dashboard, which monitors various aspects such as network activity, user activity, and application usage. The data includes information on data transfers, source and destination IP activities, and system rule usage. The study aims to identify potential threats that could affect the integrity and security of accounting information systems. Keywords: Accounting Information Systems, Security, Risk, Dashboard, Network Activity.

Food Safety Analysis Based on Halal Food with The Use of Water as a Food Need in Indonesia

Halal food security in Indonesia is a complex issue viewed from a religious perspective, especially in water processing. This article examines the public's understanding of the water treatment process, whether halal or non-halal. This research also examines the risks from the views of people with this understanding. The method used uses a literature study consisting of several pieces of literature that are reviewed and analyzed descriptively to understand the existing problems properly. The results of this research answered this understanding with an analysis of environmental, technical, social, financial, security, and institutional risks, as well as a comparison with regulations and hadith. The water treatment process carried out by water management institutions follows the rules and is considered to duplicate natural processes, namely the water cycle. This perspective is also supported by several regulations in Indonesia, which indicate that food safety, especially water, can be adequately implemented. This study shows that there is always involvement between officeholders, service providers, and the community in maintaining the safety of water sources.

International Chinese Teacher Volunteers in Thailand Security Risk Analysis

With the improvement of China's comprehensive national strength and the concept of a community of a shared future for mankind, the demand for international Chinese teacher volunteers as cultural communication ambassadors is increasing. And the accompanying outbound security risks are also worth paying attention to. In this paper, questionnaire survey and data analysis are used to investigate the safety risks faced by international Chinese teachers in Thailand. The investigation found that the volunteers of international Chinese teachers in Thailand mainly face personal safety risks, and there are still aspects of safety protection that can be improved and strengthened. The factors affecting the safety of the volunteers in Thailand mainly come from the social factors, the intercultural communication of the cultural factors, and the belief value of the unrest and mysterious religion brought about by the numerous political parties in Thailand. Based on the above research results, the country, school and individual finally put forward suggestions to solve the risks, and the multi-party linkage is more conducive to cross-cultural communication, and lays a foundation for the subsequent high-quality development of Chinese teaching.

Enhancing maritime transportation security: A data-driven Bayesian network analysis of terrorist attack risks.

Maritime terrorist accidents have a significant low-frequency-high-consequence feature and, thus, require new research to address the associated inherent uncertainty and the scarce literature in the field. This article aims to develop a novel method for maritime security risk analysis. It employs real accident data from maritime terrorist attacks over the past two decades to train a data-driven Bayesian network (DDBN) model. The findings help pinpoint key contributing factors, scrutinize their interdependencies, ascertain the probability of different terrorist scenarios, and describe their impact on different manifestations of maritime terrorism. The established DDBN model undergoes a thorough verification and validation process employing various techniques, such as sensitivity, metrics, and comparative analyses. Additionally, it is tested against recent real-world cases to demonstrate its effectiveness in both retrospective and prospective risk propagation, encompassing both diagnostic and predictive capabilities. These findings provide valuable insights for the various stakeholders, including companies and government bodies, fostering comprehension of maritime terrorism and potentially fortifying preventive measures and emergency management.

Analyzing Security Risks in Browser Extension Search Tools: A Literature Review

The literature review titled "Analyzing Security Risks in Browser Extension Search Tools" explores the growing interconnection between the digital and physical domains and the vulnerabilities and threats that accompany it. The study highlights how the Darkweb can be used for communication and anonymity, but because it is encrypted, it presents difficulties for law enforcement. Although browser extensions are essential for improving user experiences when browsing, they also offer security vulnerabilities like cross-site scripting and privilege escalation that can be used maliciously. The study emphasizes the necessity of better detection techniques for malicious extensions using Static and dynamic analysis combined, as well as the significance of advanced threat analysis and AI integration to foresee and mitigate cyber attacks.In order to improve the practical applicability of security measures, the study also urges a deeper comprehension of user behaviors and socioeconomic dynamics inside the Darkweb ecosystem. In order to successfully handle evolving cyber risks, future research topics include developing automated security testing procedures, upgrading authorship attribution algorithms for user privacy, and developing tools such as the WAP static analysis tool. Keywords: Browser add-ons, security hazards, Darkweb, online threats, sophisticated threat analysis, artificial intelligence integration, methods of detection, user conduct, and acknowledgment of authors WAP tool, cybersecurity, and automated security testing.

Joint safety and security risk analysis in industrial cyber‐physical systems: A survey

Joint safety and security risk analysis in industrial cyber‐physical systems: A survey

A Novel Security Risk Analysis Using the AHP Method in Smart Railway Systems

Transportation has an essential place in societies and importance to people in terms of its social and economic aspects. Innovative rail systems need to be integrated with developing technologies for transportation. Systemic failures, personnel errors, sabotage, and cyber-attacks in the techniques used will cause a damaged corporate reputation and revenue losses. In this study, cybersecurity attack methods in smart rail systems were determined, and cyber events occurring worldwide through these technologies were analyzed. Risk analysis in terms of transportation safety in smart rail systems was determined by considering the opinions of 10 different experts along with the Analytic Hierarchical Process (AHP) performance criteria. Informatics experts were selected from a group of people with at least 5–15 years of experience. According to these risk analysis calculations, cybersecurity stood out as the most critical security risk at 27.74%. Other risky areas included physical security, calculated at 14.59%, operator errors at 16.20%, and environmental security at 10.93%.

Empowering EU Law Enforcement: Teaching Security Risk Analysis with the Frontex Common Integrated Risk Analysis Model (CIRAM)

Empowering EU Law Enforcement: Teaching Security Risk Analysis with the Frontex Common Integrated Risk Analysis Model (CIRAM)

Assessing supply security risk of renewable‐dominated power system via entropy‐based analytic hierarchy method

AbstractAmid escalating geopolitical conflicts and extreme weather, the transformation to a renewable‐dominated power system faces increasing supply security risks. The current literature lacks comprehensive multidimensional assessment index systems to quantify these risks. This paper first identifies the key factors influencing supply security in renewable‐dominated power system. Subsequently, it constructs a supply security risk assessment model based on a comprehensive evaluation method combining the analytic hierarchy process method and the entropy weight method. The effectiveness of the approach is then evaluated through simulations of supply security risks across 11 provinces, including Inner Mongolia and Sichuan. Finally, the analysis of supply security risks in the Sichuan power system is conducted at different stages, focusing on changes in supply security risk levels and risk transmission mechanisms during Sichuan power crunch events in 2022. The results show that during Sichuan's 2022 high‐temperature power rationing event, the comprehensive supply security risk score of the Sichuan power system dropped from 88.7 to 76.91. This decline was mainly due to a significant reduction in hydropower output, which lowered scores of the source‐side risk and consequently increased the system's supply security risk.

Security Risk Analysis and Price Predictions with Machine and Deep Learning Models (LSTM)

Risk analysis and price predictions of securities, shares and stocks, have been a challenging problem for investors. Many factors, Economic, Political etc., can disturb stock returns and their prices. However, with the advent of Artificial Intelligence and Machine/Deep Learnings techniques, predictions of returns and prices have become very easy with accuracy and precision. In this research paper focus is given to Long Short Term Memory (LSTM) model, closing prices of Tech stocks/shares of companies in technology industry are predicted, RMSE and accuracy (MAPE) is calculated and then compared these values with the predicted and calculated values of Feedforward Neural Network (FNN) model and Recurrent Neural Network (RNN) model. After using weighted average method, LSTM is proven to be one of the best models to predict securities prices and returns.

Evolving Access Control Paradigms: A Comprehensive Multi-Dimensional Analysis of Security Risks and System Assurance in Cyber Engineering

This study evaluates the effectiveness of traditional access control paradigms—Role-Based Access Control (RBAC), Policy-Based Access Control (PBAC), and Attribute-Based Access Control (ABAC)—against ransomware threats in critical infrastructures and examines the potential benefits of integrating machine learning (ML) and artificial intelligence (AI) technologies. Utilizing a quantitative research design, the investigation collected data from 383 cybersecurity professionals across various sectors through a systematically structured questionnaire. The questionnaire, which demonstrated excellent internal consistency with a reliability score of 0.81, featured Likert scale questions aimed at assessing perceptions and experiences concerning the efficacy of different access control models in combating ransomware. Employing multiple regression analysis, the study explored the relationship between access control paradigms and their capability to mitigate ransomware risks, while also considering the impact of cybersecurity awareness among employees. The findings indicate that traditional access control methods are less effective against the dynamic nature of ransomware attacks, primarily due to their static configurations. In contrast, the integration of ML and AI into access control systems significantly enhances their adaptability and effectiveness in detecting and preventing ransomware incidents. Additionally, the study highlights the crucial role of cybersecurity awareness and training among employees in fortifying critical infrastructures against cyber threats. The adoption of a layered security strategy, incorporating advanced technological solutions and comprehensive cybersecurity practices, was found to markedly improve the resilience of critical infrastructures against ransomware attacks. Based on these insights, the study recommends the embrace of ML and AI technologies in access control systems, the prioritization of cybersecurity training for all organizational members, and the implementation of a multifaceted security approach to better defend against the evolving threat of ransomware. These strategies are essential for safeguarding the continuity and reliability of essential services in an increasingly digital and interconnected world.

Development of a mechanism for information security risk management of transport service provision systems

The object of the study is the process of analysis, assessment, and management of information security risks in transport service provision systems. The problem of applying the information security risk management approach in the activities of transport business entities was investigated. As a result of the application of effective forms, methods, and means of information security risk management based on international standards, a risk management mechanism was developed. The risk assessment process of transport systems has been systematized. This allows business entities in the transport sector to determine ways to prevent and counter information threats and challenges in their activities, both when designing and operating systems for providing transport services. Verification of the devised methodical approach to information security risk management was carried out on an example of the taxi company «Taxifay N». Threats and challenges of the company’s information system were evaluated by an expert method. Based on the results of the analysis of expert risk assessment, it was found that the concordance coefficient (0.86) confirms the high level of agreement of experts’ opinions. As a result, the company’s information security risk management program was developed. The effectiveness of the program was assessed by the efficiency ratio, which was 0.64. This testifies to the effectiveness of the implemented program of measures to manage information security risks. The scope of application may be the activity of business entities that provide transport services to the population, aimed at data storage and processing. The prospect of this study is to expand the list of threats and categories of vulnerabilities depending on the characteristics of the economic activity of various enterprises

Modeling the Process of Evaluation of Information Security Risks and its Methodology by the Application of Computer Systems

The main aim of the article is to study modeling the process of evaluation of information security risks by the application of computer systems. Thus, information security risk assessment and analysis of existing methods of information security risk assessment had been also studied in the article. The term "risk of information security" (IS) applies to the damage that can attack the information technology systems. IS risk is a wide range of potential threats, especially includes data violations, control measures, financial costs, reputation damage, etc. cover issues such as. IS risks include the failure of hardware and software, human errors, spams, viruses and harmful attacks, as well as natural disasters such as fires, cyclones or floods. Security risk assessment determines, assesses and implements key security controls in applications. It also focuses on prevention of software security defects and vulnerabilities. Information security risk is the potential probability of using vulnerabilities of an asset or group of assets as a specific threat to damage the organization.

Intelligent mine safety risk based on knowledge graph: hotspots and frontiers.

The safety of mining has always been a concern. The occurrence of safety accidents not only endangers human health, but also causes serious damage to the ecological environment. With the continuous upgrade and improvement of mining technology, most mines are undergoing intelligent construction and transformation. In order to analyze security risks that should be focused on the construction of intelligent mines and the technical challenges that will be faced, we used the Web of Science (WOS) Core Collection to identify 283 publications on the field of security risks in intelligent mines from 2013 to 2022. We combined the Vosviewer, CiteSpace, and Bibliometrix R software packages to conduct an in-depth analysis and exquisite visualization of the literature, including the authors, journals, countries, hot topics, and research frontiers. This paper can help scholars comprehensively and quickly understand the research status and hotspots in the field of intelligent mine safety and risk, and it provides theoretical support for further research and exploration in the future.

Analyzing Security Risks in Browser Extension Search Tools: A Literature Review

Analyzing Security Risks in Browser Extension Search Tools: A Literature Review

Evolving Access Control Paradigms: A Comprehensive Multi-Dimensional Analysis of Security Risks and System Assurance in Cyber Engineering

Evolving Access Control Paradigms: A Comprehensive Multi-Dimensional Analysis of Security Risks and System Assurance in Cyber Engineering

Security Risk Analysis as a Strategic Counterterrorism Tool for National Security: The Case of Frontex Common Integrated Risk Analysis Model (CIRAM)

Security Risk Analysis consists an important tool that can be leveraged to properly process information related to National Security and draw useful conclusions through appropriate analytical products. The European Union formulated the appropriate legislation and established new organizations to ensure its external and internal security such as Frontex, designed and developed, in collaboration with the member states, a new security risk analysis tool, the Common Integrated Risk Analysis Model (CIRAM). This paper seeks to approach and examine descriptively, both the elements of this model and its appropriateness to carry out Counterterrorism Risk Analysis.

Analisis Resiko Keamanan Informasi Website Repository Digital Library Menggunakan Framework ISO/IEC 27001 & 27002: Studi Kasus Perguruan tinggi X

The continuous evolution of digital repositories in the era of globalization, especially in context of higher education digital libraries, poses security risks that raise concerns among users. Existence of sensitive user data that requires protection by universities adds to this concern. This research aims to conduct comprehensive analysis of information security risks associated with digital library repository websites. This research seeks to identify potential vulnerabilities, threats that could compromise the confidentiality, integrity and availability of digital assets stored in repositories. Through detailed risk analysis, this research provides actionable insights and recommendations to improve the information security posture of digital libraries using the ISO/IEC 27001 and 27002 IT governance framework specifically tailored to information security standards. This research uses a literature review and interviews with responsible parties at the University of X's digital library repository. Findings show that the use of tools such as Acunetix helps identify vulnerabilities in web repositories. Risk mitigation in digital library web repositories involves the application of ISO/IEC 27001, 27002 standards, which results in specific risk mitigation actions. For example, universities should create policies to monitor information technology assets, ensuring regular monitoring to protect technology assets. In addition, for Database Management System (DBMS) management (e.g., MySQL, PostgreSQL, Oracle, Ms SQL Server), colleges must facilitate easy access and storage of information. By implementing the recommendations obtained from this research, higher education institutions can ensure safe environment for users accessing digital library web repositories, thereby reducing concerns about the security of their information.