Security Rules Research Articles

A BLOCKCHAIN TECHNOLOGY AND INTERNET OF THINGS TO SECURE IN HEALTHCARE SYSTEM

The huge headway of new advances like the Web of Things and wearable innovation, the medical services industry is extending rapidly these days. To guarantee far off persistent observing, these devices are generally used. Client/server engineering is utilized in the ongoing execution. Due of the security and protection issues raised by this, medical care frameworks are currently more helpless against different assaults. The utilization of a dispersed engineering is expected to resolve these issues and submit to security rules. Block chain has drawn in a ton of interest as a modern innovation to address the security issues in IoT-based frameworks in light of its conveyed nature and its security ensures. With the new presentation of block chain and IoT, the medical care area is supposed to develop altogether and experience an expansion in monetary potential as well as security, protection, effectiveness, and straightforwardness. The client/server engineering is the underpinning of the ongoing execution. In this paper, various protection and security gives that make medical services frameworks more powerless against different assaults.

A STUDY ON IMPACT OF SOCIAL MEDIA ON RECRUITMENT PROCESS

The impact of social media on recruitment has been significant in recent years. Social media platforms like LinkedIn, Facebook, Twitter, and Instagram have transformed the recruitment process by enabling recruiters to reach a wider pool of potential candidates, engage with them in a more personal way, and build relationships. By giving managers access to a bigger group of prospective applicants through social media, recruitment has become more effective and economical. Employers can find and acquire prospective prospects using social media platforms, review portfolios and applications, and evaluate candidate’s abilities and credentials. However, there are a number of difficulties associated with using social media for employment. Making sure that the use of social media in the employment process complies with data security rules is one of the biggest obstacles. The amount of confidential information applicants can share on social media sites could lead to unintentional prejudice in the hiring process. Another challenge is the difficulty in verifying the accuracy of candidate information on social media platforms. Some candidates may exaggerate or misrepresent their skills and qualifications, leading to challenges in accurately evaluating their suitability for a position Despite these challenges, social media continues to be a crucial tool for recruiters in identifying and sourcing potential candidates, building relationships, and promoting their organizations to a wider audience. Keywords: Recruitment, social media, Employee, Selection.

행정안전부 경찰국 및 지휘규칙에 대한 비판적 검토 및 개선방안 연구

1948년, 「정부조직법」제정·시행 이후 ‘치안’ 은 내무부장관(현 행정안전부장관)의 소관 사무였다. 그러나 1991년, 「경찰법」이 제정되면서 ‘치안’은 경찰청장의 소관사무 로 바뀌었고, 경찰사무에 관한 중요 정책 등은 사전에 반드시 국가경찰위원회의 심의· 의결을 거쳐야한다. 「정부조직법」상 행정안전부장관은 경찰청의 중요 정책 수립에 관하여 경찰청장을 직접 지휘할 수 있다. 그런데 「정부조직법」은 일반법이고 「경찰 법」은 특별법이므로, ‘특별법 우선의 원칙’에 따라 행정안전부장관은 「경찰법」에 따라야 한다. 행정안전부장관은「경찰법」에 따라 필요시 국가경찰위원회에 중요 안건을 부의하 거나, 위원회 심의·의결 내용이 부적정하다고 판단하는 경우, 이를 다시 논의하도록 요구하는 권한만 인정되어 있을 뿐이다. 「행정안전부」는 2022년 8월 2일자, ‘대통령 령’을 개정하여 경찰국을 신설하였고, ‘행정안전부령’으로「행정안전부 장관의 소속 청장 지휘에 관한 규칙(지휘규칙)」도 제정·시행하였다. 이와 같은 조치에 대하여 그동안 경찰공무원, 정치인, 관련 단체 및 학자들로부터 많은 비판이 있었다. 그 주요 내용은 다음 세 가지이며, 정부는 빠른 시일 내 개선방안 을 강구할 필요가 있다. 첫째, 신설된 직제인경찰국자체는 ‘위헌성’이 없다. 그런데경찰국이수행하고 있는 업무의 성격은 ‘보조기관(Line)이 아니라 ‘보좌기관(Staff)’ 이다. 따라서 그 직제의 명칭은 ‘보좌기관(Staff)’을 의미하는 ‘치안정책관’이나 ‘치안기획관’ 으로 변경하고 장관 직속으로 운영하는 것이 바람직하다. 둘째, 「지휘규칙」에 따라 앞으로 경찰의 중요업무는 사전에 행정안전부 장관의 승인을 받아야 한다. 그런데 「지휘규칙」제2조 제1항이 행정안전부 장관에게 새롭게 부여한 ‘사전 승인 권한’은 「경찰법」이 구체적으로 위임하지 않은 내용이다. 따라서 이 조항은 헌법상 ‘포괄적 위임입법 금지원칙’에 위반하여 ‘위헌성’이 있는 것으로 사료 된다. 그러므로 이 조항은 빠른 시일 내 삭제하는 것이 바람직하다. 셋째, 앞으로 경찰공무원에 대한 ‘인사의 공정성’ 및 ‘정치적 중립성’에 대한 우려가 있다. 이런 우려를 불식시키기 위해서는 특히 현재 경찰청(본청) 소속 ‘중앙 승진심사 위원회’에서 주관하는 ‘경정의 총경 계급으로의 승진심사 절차’를 각 경찰기관 소속 ‘보통 승진심사위원회’로 이관하는 것이 바람직하다.

Digital Certificate System for Verification & Validation of Educational Certificates using Block chain Technology

Abstract: With the proliferation of mobile devices in recent years, there is a tendency to move almost all real-world activities to the cyber world. Although this makes our daily life easier, it violates many security rules due to the anonymous nature of the Internet. Phishing attacks are the easiest way to get sensitive information from innocent users. Phishers aim to obtain sensitive information such as usernames, passwords, and bank account information. Cybersecurity professionals are looking for reliable and consistent detection methods to detect phishing websites. This project deals with machine learning technology to detect phishing URLs by extracting and analyzing various features of legitimate and phishing URLs. Decision trees, random forests, and support vector machine algorithms are used to identify phishing websites in a two-step process of first visualizing and extracting features of URLs using python libraries and then training them into a model using Gradient Classifier Algorithm to predict real-time phishing websites.

Degradation of Executorial Rights and Execution Parate Institutions on Fiduciary Security After the Decision of the Konstitution Court Number 18/Puu-Xvii/2019

<p><em>Constitutional Court decision Number 18/PUU-XVII/2019 degrades the existence of executorial rights and execution parate institutions in the UUJF. Melements of the substance of the law in rangka this execution resulted in the purpose of the law can not be met. PeneThis research is a normative juridical research that will answer several questions. First, what is the essence of the position of eksekutorial rights, execution parate, promise injury clause in fiduciary security rules. Second, how the juridical analysis of the Constitutional konstitusi tersebutCourt decision. This study produced several results, first the decision of the Constitutional Court contradicts the essence of the existence of executorial rights and the institution of Parate execution. executorial rights and execution parate institutions arise from the existence of special guarantees granted privileges through executorial rights institutions and execution parate institutions. The article of promise injury in the main agreement essentially serves as clause naturalia. The naturalia clause means that althoughthis clause is not expressly stated, theinjury clause promises to remain. The nature pelaksanaanof execution is because there is no voluntary act of implementing a decision that has permanent legal force. Thus, establishing the validity of the executorial right when there is a voluntary surrender is contrary to the nature of the execution itself. Second, in making a decision, the judge should put forward the principle of legal mind, namely legal certainty, justice and usefulness. In the Constitutional Court ruling amar judge's decision does not reflect the certainty, justice and kemanfaatn</em></p>

Identifying Security and Privacy Violation Rules in Trigger-Action IoT Platforms With NLP Models

Trigger-action platforms are systems that enable users to easily define, in terms of conditional rules, custom behaviors concerning Internet of Things (IoT) devices and Web services. Unfortunately, although these tools stimulate the creativity of users in building automation, they may also introduce serious risks for the users. Indeed, trigger–action rules can lead to the possibility of users harming themselves, for example, by unintentionally disclosing nonpublic information, or unwillingly exposing their smart environment to cyber-threats. In this article, we propose to use natural language processing (NLP) techniques to detect automation rules, defined within trigger–action IoT platforms, that potentially violate the security or privacy of the users. The proposed NLP-based models capture the semantic and contextual information of the trigger-action rules by applying classification techniques to different combinations of rule’s features. We evaluate the proposed solution with the mainstream trigger-action platform, namely, If-This-Then-That, by training the NLP models with a data set of 76 741 rules labeled by using an ensemble of three semi-supervised learning techniques. The experimental results demonstrate that the model based on bidirectional encoder representations from transformers (BERTs) obtains the highest performances when trained on all features, achieving average Precision and Recall values between 88% and 93%. We also compare the achieved performances with those of a baseline system implementing information flow analysis.

THE DEVELOPMENT OF THE UKRAINIAN AIRPORTS INFRASTRUCTURE ACCORDING WITH THE INTERNATIONAL EXPERIENCE

The article discusses the pre-war state of the Ukrainian airports infrastructure and determines the list of problems which interfere the development of aviation branch of Ukraine. The article considers, that airport as a single complex, consists of the list of manufacturing infrastructure objects, which are obliged to regular investments for its development, reconstruction or new construction. For its operation, airport should provide full maintains of flights according with the air companies’ standards, demands and rules of security. The problem with the runway destruction is the main trouble of the Ukrainian regional airports and one of the main state airports development initiatives direction. The another important infrastructure element of each airport is a terminal. So, one of the reasons of the Ukrainian airports infrastructure critical level is a permanent underfunding, which makes not only the production threatening, but also the national security. The article proves, that all Ukrainian airports are in need of modernization runways, terminals, buildings, special technics and equipment to meet the international certification requirements. Some airports are in need of renovation, but the most of the Ukrainian airports are in need of full reconstruction. So, because of the airport activity is capital intensive and needs big investments, the main way of the Ukrainian airports infrastructure development in accordance with the international experience is the state-private partnership.

A Network Function Virtualization Architecture for Automatic and Efficient Detection and Mitigation against Web Application Malware

This paper proposes and implements a Network Function Virtualization (NFV) security architecture to provide automatic and efficient detection and mitigation against Web application malware. The mitigation is given by dynamically chaining a Virtual Security Function (VSF) to the data stream to block malicious exploitation traffic without affecting the benign traffic. We implement an NFV Security Controller (NFV-SC) that interacts with an Intrusion Detection System and a Web Application Firewall (WAF), both implemented as VSFs. We also implement a vulnerability scanner and a mechanism to automatically create rules in advance in the WAF-VSF when a security vulnerability is found in an application, even if no malicious traffic has attempted to exploit the flaw. In addition, it dynamically identifies and removes no longer used security rules to improve performance. We implement and evaluate our security proposal in the Open Platform for NFV (OPNFV). The evaluation results in our experimental scenarios show that the NFV security architecture automatically blocks 99.12% of the HTTP malicious traffic without affecting 93.6% of the benign HTTP requests. Finally, we show that the number of rules in the WAF-VSF severely affects the latency to load HTTP response headers and that the number of redirection OpenFlow rules within Open vSwitches is not enough to significantly impact the end-user experience in modern web browser applications.

Frontier Workers’ Tax and Social Security Status in Europe – Optimizing the Legal Status in a Changing Landscape

This report of the European Region of IFA evaluates the tax and social security implications of frontier workers in Europe. The exact meaning and scope of “frontier worker” differ in tax law and social security law. Several relatively old tax treaties contain special tax provisions attuned to the cross-border situation of frontier workers that deviate from the general allocation rules for employment income (article 15 of the OECD Model). The common characteristics of these special treaty provisions of daily return and geographical proximity may lead to unconscious tax biases in a changing landscape of digitalization and globalization. Tax treaties – primarily drafted at a time when physical presence was the most reliable element in determining taxing rights – are not attuned to the increasing flexible forms of frontier work, which have gradually developed and are becoming more prevalent. Enhanced means of communication tools and transportation enabling telework and highly mobile work (e.g. individuals who reside in one state and work in more than one other state), amongst others, have increased the mobility and diversity of frontier work. Frontier workers may also encounter difficulties in equal treatment with obtaining tax and social benefits. Further inconveniences may arise from the deviation of social security rules from tax rules. The key challenges in the legislative framework suggest the need to revise the definition and legal status of frontier workers, especially in the aftermath of the COVID-19 pandemic. Suggestions are made to minimize the detected application and interpretation problems, and to enable a better coordination of tax and social security rules.

How to Understand Phishing

The article is based on the results of previous research, is focused on the analysis and classification of phishing emails, and documents the results of communication with the phisher attacker. In the first part of the article, an experiment carried out with a randomly selected set of emails confirms the considerable uncertainty of the correct result of automatic classification based on keywords using text analysis software. The second part of the article contains the experiment of communication with phishing attackers. A typical scenario of message exchange is presented. Thanks to the correct setting of security and protection rules, no security incident occurred. The literature search confirms the great interest in publishing in the field of phishing. Compared to the content of the published article, it turned out that its focus is completely original.

Индивидуальная виктимологическая профилактика киберпреступности

The article is devoted to the analysis of individual measures of victimological prevention of cybercrime. The paper defines the concept under consideration and describes its key properties. During the analysis of special literature, domestic and foreign sources, three levels of individual victimological prevention are identified: 1. Pre-incident (development of models for countering cybercriminals); 2. Incidental (development of victim behavior accounting standards); 3. Post-incident (development of standards for responding to cyber-victimization). Each of these levels is described in detail (including the rules of personal security in the pre-incident perspective; as well as scripts for responding to a virtual victim - at the post–incident stage). Each of these levels is a basic functional part of an individual psychological prevention in the information and telecommunications space.

Preventing waste in food supply networks - a platform architecture for AI-driven forecasting based on heterogeneous big data

Waste is a major challenge in today´s food supply networks. It induces economic, ecologic, and social implications. Current advanced supply and demand planning frameworks consider waste as an expected lost value in a profit-seeking trade-off. Consequently, existing initiatives for food re-distribution tackle the problem at the end of the supply chain, i.e., at the retailer stage. Advanced forecasting is foreseen as a facilitator of planning towards food waste prevention. However, companies in food production and retail seldomly utilize advanced forecasting methods, i.e., artificial intelligence. Deterrents for inadaptability rank from the differentiation between the role of pure data driven reliance and the human factor. Furthermore, no remarkable endeavor has so far combined heterogeneous external data integration with advanced forecasting techniques for food waste reduction. This paper proposes an architecture for a collaborative digital demand and supply matching platform for perishable food supply chains. Focus lies in the integration of heterogeneous big data (i.e., mobile transaction data and weather data) with AI-based forecasting methods. Building on the Design Science Research methodology, problems and requirements from the perishable food industry form the base for the platform architecture as the core artifact. The validation of the proposed architecture is undertaken by a panel of selected business experts from food retail and wholesale. The designed platform architecture consists of the core modules “data layer”, “logic layer”, “interaction layer”, and “data visualization”, and includes governance rules for sensible knowledge protection and data security. The present work contributes to the research area of food waste prevention by combining collaborative supply chain management approaches with advanced data-driven technologies including artificial intelligence and heterogeneous big data integration. Further research will extend this study by a use-case implementation.

Odgovornost Republike Hrvatske za štetu prouzrokovanu kompromitacijom informacionog sistema zemljišnih knjiga i katastra

Before their digitation, land registries in the Republic of Croatia had been kept manually (paper-based registration). The Land Registry Act stipulates that land registries in the Republic of Croatia are kept electronically by means of a Real Property Registration and Cadastre Joint Information System (hereinafter: JIS), containing harmonized real property and cadastral data. A real property and land database is created through the electronic entry of paper-based data, i.e. integration of real property and cadastral data into a single database. Hence, the protection of real property transfers is enhanced since the legal status of the land and all accompanying restrictions (concessions, public property status etc.) can be obtained in one place. The real property land database enables registration of every change to the real property without the need to inform both the land registration court and cadastre thereabout. The Real Property Registration and Cadastre Joint Information System is jointly coordinated and managed by the Ministry of Justice and Administration of the Republic of Croatia and the State Geodetic Administration. The Land Registry Act sets forth that the Republic of Croatia is strictly liable for any damage arising from flaws in keeping land registries. Such damage can occur in case of errors or malfunctions in the respective joint information system. This paper investigates the appropriateness of the measures for protection of the Real Property Registration and Cadastre Joint Information System and the general rules for security and control of the access to the said system, and analyses the risk of compromising it. Regarding the liability of the Republic of Croatia for any damage pertaining to flaws in the land records management, the paper depicts the model of defining the liability for any damage sustained by the holders of ownership rights due to unauthorized access to the said joint information system. The paper also sheds light on the advantages and disadvantages of the model for defining fault and strict liability in the above case, and examines some pending issues relating to the applicable model for defining such damage liability de lege lata as well as possible legal solutions and the potential need for the legislator's intervention de lege ferenda.

Protecting the information privacy of litigants during remote trials before UAE courts

This paper analyzes the increasing trend of courts in various countries towards using technology in litigation. Consequently, it is now reasonable to say that there is an integrated legal regulation of a remote trial. The paper stresses that the remote trial system applied before the UAE courts requires the use of court-specific systems and programs to process the personal data of litigants, defendants, victims, and witnesses as well as the data of the subject matter of the dispute. Therefore, this paper highlights the importance of applying information security rules during remote trials and taking all necessary precautions to protect data privacy from being hacked or compromised. To address this issue, three main points are studied: the first is the requirements for the success of the remote trial system. The second is the protection of the right to information privacy. The third relates to the mechanism for implementing the remote trial system and protecting the right to information privacy.

A Neutrosophic Model for Identifying and Analyzing the Effect of Relational Leadership on Information Security Policy Compliance: A Case Study of the Hotel Industry

Leaders at hotels are keen to learn how to improve staff adherence to their newly implemented information security rules in the wake of a spate of events involving the compromise of sensitive customer data. In this research, we analyze the relationship between workers' compliance intentions and their perceptions of deterrence, and the leadership styles of their bosses. Gender, education, role, tenure based on ethical leadership, and information security policy compliance intention were some of the particular leadership aspects connected to the information security policy that were evaluated in our research. The overall relevance of the standards may be calculated using the average method, which is used in decision-making. The suggested novel version of the MULTIMOORA (Multi-objective Optimization by Ratio Analysis Plus Full Multiplicative Form) approach uses a single-valued neutrosophic set to handle directly with the uncertainty of the starting point. Developing a decision-support system that takes into account the new conceptual composite framework we offer for selecting criteria, alternatives, and other aspects of leadership and information security policy in hotels is a feasible next step.

Bottleneck Generator Identification and the Corresponding N-1 Frequency Security Constrained Intraday Generator Dispatch

Generators are typically dispatched in a preventive way to guarantee frequency stability in any single generator trip contingency. The largest generator outage is regarded as the severest by the conventional N-1 frequency security rule, since the contingency size is often the dominating factor in traditional systems. However, with the continuous integration of renewable energy sources and fast response devices (e.g., battery), the inertia and frequency response characteristics of generators become diversified. In such situations, the largest generator cannot be simply identified as the bottleneck generator for preventive dispatch, since the post-contingency frequency dynamic is determined by both the contingency size and the frequency response ability of the remaining system. In this paper, a system's frequency response ability (FRA) is quantitatively defined and derived as a function of system intrinsic parameters (e.g., system inertia, ramp rates of generators, load frequency relief coefficient, etc.). Then, the bottleneck generator can be identified through comparing the capacity of a unit with the maximum FRA of its corresponding remaining system. On this basis, an innovative N-1 frequency security constrained optimal intraday generator dispatch scheme is correspondingly established. Simulation results verify the superiority of the proposed method in both frequency security improvement and operation cost saving.

Public control over the activities of local government bodies under the conditions of marital state

The article analyzes the peculiarities of public control over the activities of local self-government bodies during the war. The definition of the concept of «public control» has been clarified, as well as the subjects of implementation of this control. The importance of the functioning of the institution of local self-government in the conditions of martial law due to the performance of a number of functions that are directly related to the vital activities of the community has been established. In particular, it is about rebuilding the destroyed infrastructure, providing the population with food products, organizing the educational process, registering internally displaced persons, ensuring the operation of public transport, etc. At the same time, wartime conditions dictate certain legislative obstacles in the implementation of public control. In particular, the work of deputy commissions and local councils may take place in a closed format and, accordingly, their draft decisions may not be made public. In addition, information contained in public electronic registers may temporarily become inaccessible to citizens. An analysis of the legal forms of direct community participation in solving issues of local importance, such as: local referendum, general assembly, local initiative, public hearings, was carried out. It is also mentioned about other forms of public participation in the process of activities of local self-government bodies, in particular voter assignments to their local council members, citizens' appeals, the number of which has increased significantly in recent times, consultative surveys on the needs and interests of the community. Conclusions were made about the importance of maintaining and developing the relationship between the community and local self-government bodies in extremely difficult times. It is determined that these can be remote meetings, online consultations and any other forms of implementation of legal tools, taking into account security rules.

ZERO TRUST CONCEPT FOR ACTIVE DIRECTORY PROTECTION TO DETECT RANSOMWARE

This scientific article explores the approach to protecting Active Directory from threats associated with ransomware, which are becoming increasingly perilous to corporate information systems. The concept of "zero trust" in the context of Active Directory is defined as an approach aimed at eliminating trust from the security framework and constantly verifying the compliance of users and their devices with configured security policies, context, and other parameters. The article delves into methods and tools that enable the implementation of the zero trust concept within the Active Directory environment, including behavior analysis, network traffic monitoring, and the utilization of advanced security rules. The importance of combining event processing technologies and artificial intelligence for automated detection and response to abnormal activity is also investigated. The research findings indicate the potential to enhance the effectiveness of protecting Active Directory from ransomware threats and ensuring the resilience of corporate networks against them. The adoption of the zero trust concept could be a significant step in ensuring cybersecurity and maintaining the reliability of information resources in modern enterprises

���������� �������� ��²��������� ��������� ����������

The article substantiates the necessity of forming a culture of conscious digital consumption. It is noted that the categorical apparatus of the main concepts of digital consumption is not unambiguous and is at the stage of formation. The evolution of a number of definitions from the initial research models of "digital literacy", "digital competence", "digital consumption" to the intermediate models of "digital security", "digital inequality" and the modern model of "aware digital culture" in the context of domestic and foreign researchers is studied. The importance of taking into account the aspects of planetary synergy is emphasized so that each state does not lose its own identity, but is also not antagonistic to world trends and forms its own type of digital culture, which would be determined by scientific, technological, socio-economic and educational development programs. The prerequisites of digital transformation, opportunities for e-business and the trends of digital consumption are identified, among which the main ones are: the growth of online shopping, the emergence of new digital markets, the use of digital payments, increased competition, the influence of social media and multi-channel promotion. It was emphasized that these trends have a great impact on personal and social life and the business environment, and digital transformation will continue at an accelerated pace in the future. The advantages and disadvantages of digital consumption are determined. It is noted that an important task today is the formation of a culture of conscious digital consumption to help citizens become more conscious and aware of the use of digital technologies and services, reduce the risks of problems and increase the benefits of their use. The importance of compliance with cyber security rules, ensuring protection of copyright and personal data and responsible use of digital resources was emphasized. Attention is focused on Digital minimalism as a process of restructuring daily habits and value system, consciously rejecting applications and sites that spam time, removing information noise and going offline of all processes that are susceptible to it. The authors claim that the experience of digital limitations is only the beginning for conscious consumption, management of digital experience, digital behavior and responsible consumption of digital content for benefit, not harm. Further research will be aimed at forming a mechanism for implementing the culture of conscious digital consumption into social life and business practice Key words: digital consumption, digital literacy, digital competences, digital security, digital responsibility, culture of conscious digital consumption.

War in Ukraine as a Factor Determining the Scope of Judicial Review of Public Administration in Poland: Remarks on the Municipal Resolutions Providing Aid for Ukrainian Local and Regional Communities

This paper aims to determine whether the war in Ukraine will affect the scope of judicial verification of public administration in Poland. According to new legislation (the socalled Aid Act), which Polish Parliament passed shortly after February 24, 2022, the Polish municipalities (cities) are entitled to provide aid for local foreign communities, especially those within the borders of Ukraine. The basis for such aid will take the form of a proper municipal or city council resolution. The main issue concerning this form of aid is the necessity of applying Ukrainian law, at least in the context of decoding who is entitled to be a beneficiary. Against this background, it is vital to determine whether such circumstances as war and humanitarian reasons should affect the scope of judicial review. In theory, two approaches are available, formalism and judicial relativism which both are inappropriate. The author argues that the doctrine of deference, as understood by justice A. Scalia must be applied to secure both rule of law principle and the legitimacy of administrative courts in Poland. The main subject of the analysis was the content of the law, which was the starting point for analysing the views of the doctrine and jurisprudence. Due to the international nature of the issue, it was necessary to refer to the achievements of Ukrainian law.