Security Safeguards Research Articles

Strengthening character education with the implementation of machine learning in the millennial era industrial revolution 4.0

Education is a part that cannot be separated from human life. There is a relationship between education and prosperity and patterns of human life. In the context of human life, education has a significant role in aspects of social, economic, environmental, political and security safeguards. In terms of welfare, education has a large influence. One education actor who plays a very important role is the teacher, who will teach and become an example for his students. And things that should not be eroded by the development of the age are the cultivation of good character in educating students, including those that must be prevented are acts of violence against students maybe it can happen in the world of education, either by the teacher or fellow students. In this study a web-based Expert System will be designed using the Forward Chaining method. Forward Chaining is a search method or a forward tracking technique with information and merging rules to produce conclusions. With this system the teachers can conduct online consultations that will be applied in machine learning in the learning process, so that the teachers can find out whether their actions in the teaching and learning process are in accordance with the ethics of an educator.

Fictional Brief for the United States in United States v. Pear

In June, 2016, the Newseum hosted a mock Supreme Court hearing on whether the United States could compel a technology company to bypass its own security safeguards built into their devices. The fact pattern mirrored the real-world dispute between the FBI and Apple over access to the iPhone used by the San Bernadino shooter. This brief was written for the government. However, any views or ideas are mine alone and do not necessarily express any position of the United States Government. The Newseum is a museum in Washington, D.C. dedicated to freedom of the press and First Amendment issues.

Health Security in a Democratic State: Child Vaccination – Legal Obligation Versus the Right to Express Consent for a Medical Intervention

Abstract One of the major objectives in a democratic state is ensuring health security of the citizens including combating epidemic diseases. The subject matter of this article is the presentation and analysis of legal regulations regarding preventive vaccination in Poland, in particular the aspect of imposing a legal obligation and restricting parents’ right to express consent for medical intervention. The reflections made herein are aimed at finding an answer to the question whether the adopted legal solutions are admissible in a democratic state with regard to ensuring health security. The purpose of the analysis is also to assess whether the abovementioned legal regulations have been formulated in a clear way and do not raise interpretation doubts and, consequently, whether they are comprehensible to the parents obliged to comply with them. As it follows from analysis of the legal provisions, parents must not refuse to subject a child to obligatory preventive vaccination and their consent is not required by law, both as regards the medical qualifying examination to exclude contraindications to performing vaccination and the vaccination itself. It is a legal obligation, from which exemption is only possible on grounds of certain medical conditions that would render vaccination inadvisable. The legal provisions that concern obligatory preventive vaccination in Poland, including in particular those referring to its enforceability, have not been formulated in a way that is sufficiently comprehensible to parents who are under the obligation of complying with them, irrespective of the fact that the language of the provisions of law should be clear and raise no interpretative doubts. In a democratic state the protection of public health against epidemic hazards justifies the implementation of legal solutions that restrict an individual’s freedom of self-determination, thus limiting the right of patients or their statutory representatives to grant or refuse consent for a medical intervention in the form of preventive vaccination – the purpose of this legal solution being to prioritize the safeguarding of state health security. It is vitally important to engage in a social dialogue with the purpose of convincing the public of the need for vaccination, its significance and its implementation for the better good.

“If you know what to do, will you take action to avoid mobile phishing attacks”: Self-efficacy, anticipated regret, and gender

In recent years, mobile devices have increasingly become a key target for phishing attacks. As such, mobile users need to be able to confidently apply different security safeguards to thwart these mobile phishing threats. Thus, anti-phishing self-efficacy can be instrumental in explaining mobile phishing avoidance behavior. Therefore, the present study proposed a model to explain how anti-phishing self-efficacy along with anticipated regret and gender influences mobile users phishing avoidance behavior. Using data from 231 respondents, the study showed that besides the direct positive influence of both anti-phishing self-efficacy and anticipated regret on mobile phishing avoidance motivation and behavior, the interaction of these factors also has a positive and significant influence on avoidance behavior. Additionally, gender significantly moderated the influence of anti-phishing self-efficacy on both avoidance motivation and behavior with the relationships being more pronounced for women than for men. These results provide an enriched understanding of mobile phishing avoidance behavior, especially by showing the interactions of anti-phishing self-efficacy with anticipated regret and gender.

Генрі Уоллес і законодавче врегулювання контролю за використанням ядерної енергії в США у 1945-1946 рр.

У статті досліджується проблема формування Закону США «Про атомну енергію» 1946 р. під кутом протистояння цивільного та військового підходів до проблеми контролю над атомною енергією. Було встановлено, що природа протистояння пов’язана з різними поглядами на використання атомної енергії у післявоєнний період: для одних – інструмент підтримки національної безпеки за рахунок монопольного контролю над атомною зброєю, для інших – джерело небезпеки та фактор, перш за все, економічного розвитку. Розглянуто роль, яку відіграв Генрі Уоллес у недопущенні встановлення військової опіки над атомною енергією.

Log2Lose: Development and Lessons Learned From a Mobile Technology Weight Loss Intervention.

BackgroundProviding financial incentives has gained popularity as a strategy to promote weight loss, but questions remain about how best to utilize them. A promising mobile health strategy provides users with near-real-time financial incentives based on both the process of weight loss (behavioral modification) and actual weight loss. To maximize the impact of this strategy, a methodology is needed to close the gap between the desired behavior and the financial incentive. Leveraging mobile health tools—such as mobile phone apps, cellular body weight scales that transmit data to physicians and researchers, and text messaging for instructions and encouragement—has the potential to close this gap.ObjectiveThis study aimed to describe the development of an innovative technology-based solution and lessons learned from a feasibility trial—Log2Lose—that encouraged individuals to lose weight by providing near-real-time financial incentives for weight loss and/or dietary self-monitoring.MethodsWe recruited participants (N=96) with a body mass index greater than or equal to 30 kg/m2 for a 24-week weight loss trial. Participants received a behavioral intervention of biweekly, in-person group sessions and were instructed to log a minimum number of daily calories in MyFitnessPal and to step on the BodyTrace cellular scale at least twice per week. In a 2×2 design, participants were randomized into 4 groups to receive financial incentives for the following: (group 1) weekly weight loss and dietary self-monitoring, (group 2) dietary self-monitoring only, (group 3) weekly weight loss only, or (group 4) no financial incentives. Diet and weight data from the devices were obtained through application programming interfaces. Each week, we applied algorithms to participants’ data to determine whether they qualified for a monetary incentive (groups 1-3). A text message notified these participants of whether they met weight loss and/or self-monitoring requirements to earn an incentive and the amount they earned or would have earned. The money was uploaded to a debit card.ResultsOur custom-engineered software platform analyzed data from multiple sources, collated and processed the data to send appropriate text messages automatically, and informed study staff of the appropriate incentives. We present lessons learned from the development of the software system and challenges encountered with technology, data transmission, and participants (eg, lost connections or delayed communication).ConclusionsWith consistent and constant validation checks and a robust beta test run, the process of analyzing data and determining eligibility for weekly incentives can be mostly automated. We were able to accomplish this project within an academic health system, which required significant security and privacy safeguards. Our success demonstrates how this methodology of automated feedback loops can provide health interventions via mobile technology.Trial RegistrationClinicalTrials.gov NCT02691260; https://clinicaltrials.gov/ct2/show/NCT02691260

Ubiquitous Localization (UbiLoc): A Survey and Taxonomy on Device Free Localization for Smart World

The “Smart World” envisioned by technology will be achieved by the penetration of intelligence into ubiquitous things, including physical objects, cyber-entities, social-elements or individuals, and human thinking. The development of Smart World is enabled by diverse applications of wireless sensor networks (WSNs) into those components identified as things. Such a smart-world will have features controlled significantly by the location information. Control and Policy information of Smart World services, often addressed as location-based services (LBSs), are governed by location data. Localization thus becomes the key enabling technology for Smart World facilities. It is generally classified as active and passive techniques in nature. Active localization is a widely adopted localization scheme where the target is detected and tracked carries a tag or attached device. The other category, Passive methods, defines targets to be localized as free of carrying a tag or device, hence also referred to as device-free localization (DFL) or sensor-less localization. The passive approach is a well suited for the development of diverse smart world applications with ubiquitous localization. DFL schemes fall into a wide range of application scenarios within the Smart World ecosystem. A few notable examples are occupancy detection, identity definition, positioning, gesture detection, activity monitoring, pedestrian and vehicle-traffic flow surveillance, security safeguarding, ambient intelligence-based systems, emergency rescue operations, smart work-spaces and patient or elderly monitoring. In this paper, the revolution of DFL technologies have been reviewed and classified comprehensively. Further, the emergence of the Smart World paradigm is analyzed in the context of DFL principles. Moreover, the inherent challenges within the application domains have been extensively discussed and improvement strategies for multi-target localization and counting approach are discussed. Finally, current trends and future research directions have been presented.

신보호주의하에서 미국 무역구제제도의 변화와 주요 사례 연구 (A Study on Recent Changes in U.S. Trade Remedies: Cases Against Korean Exports)

Korean Abstract: 최근 미국 무역구제조치의 변화는 우리나라 기업의 대미 수출활동뿐만 아니라 정부의 산업정책에도 적지 않은 혼란을 야기하고 있다. 본 연구는 미국 무역구제제도의 주요 규정과 관행 변화의 영향을 구체적인 사례를 들어 분석하였다. 이를 통해, 미국 무역구제조치의 변화가 초래하는 위협의 원천을 식별하고 정부와 기업의 대응방안 수립에 도움이 될 시사점을 제시하였다. English Abstract: This study identifies potential threats to exporters to the U.S. caused by the recent changes in U.S. trade remedies. A close examination is conducted of U.S. trade remedy measures against Korean businesses. The second chapter reviews the political and economic background of the recent legislations for U.S. trade remedies. The third and fourth chapters analyze the institutional and implementational changes in antidumping and countervailing duties, and safeguard measures carried out under the Trump administration, respectively. Our results find that the series of amendments to U.S. trade remedy laws aim to grant the two investigation authorities, i.e. the U.S. International Trade Commission and Department of Commerce, greater discretion in making their decisions and in calculating the price advantage provided to foreign exporters. In antidumping and countervailing duty cases such amendments lead to more facile application of a higher dumping margin or subsidy rate to foreign producers through an increase in normal value, use of Particular Market Situation (PMS) or Adverse Facts Available (AFA) or both, and a failure to cooperate on the part of a respondent. In doing so they serve the purpose of strengthening the position of U.S. domestic industries with protectionist tendencies. The study shows that the U.S. laws on safeguards, general and security, have not changed much since the enactments, but there has been a significant change in their implementations. The Trump administration has consecutively triggered general safeguard measures against Korean residential washing machines and solar products for the first time in 16 years, and initiated investigations on a threat to national security posed by imported steel, aluminum, and automobile products. It has employed general safeguards to prevent foreign exporters from circumventing antidumping duties, which may not be in line with their original purpose, and has been applying security safeguards rarely used in the past to a breadth of imports, aggressively interpreting the definition of national security.

A Critical Analysis of ECG-Based Key Distribution for Securing Wearable and Implantable Medical Devices

Wearable and implantable medical devices (WIMDs) perform critical health monitoring and therapeutic functions. However, current WIMD products lack security safeguards to protect patients from fatal cyber attacks. In the recent past, electrocardiogram (ECG) signals-based security techniques have been widely explored to secure such devices by using two cryptographic primitives, the fuzzy commitment and the fuzzy vault, respectively. Nonetheless, differences, as well as similarities between these two primitives, have not been well investigated, making it difficult to decide which one would be appropriate for a particular setting. In this paper, we perform a critical analysis on both primitives and discuss their merits and drawbacks in the context of the ECG-based key distribution. We analyze the critical challenges within each primitive-based key distribution technique, such as binary sequence generation and polynomial computations. Experimental results show that the technique based on the fuzzy commitment has a better false acceptance rate due to the randomness of ECG binary sequences. On the other hand, the fuzzy vault based scheme can achieve an acceptable false reject rate (5%) with less cost to the WIMDs. Future research is suggested to enhance the precision of ECG signal processing, to improve the efficacy of binary sequence generation process as well as to suggest ways to reduce polynomial computations.

Healthcare Data Breaches: Implications for Digital Forensic Readiness.

While the healthcare industry is undergoing disruptive digital transformation, data breaches involving health information are not usually the result of integration of new technologies. Based on published industry reports, fundamental security safeguards are still considered to be lacking with many documented data breaches occurring as the result of device and equipment theft, human error, hacking, ransomware attacks and misuse. Health information is considered to be one of the most attractive targets for cybercriminals due to its inherent sensitivity, but digital investigations of incidents involving health information are often constrained by the lack of the necessary infrastructure forensic readiness. Following the analysis of healthcare data breach causes and threats, we describe the associated digital forensic readiness challenges in the context of the most significant incident causes. With specific focus on privilege misuse, we present a conceptual architecture for forensic audit logging to assist with capture of the relevant digital artefacts in support of possible future digital investigations.

Active authentication using file system decoys and user behavior modeling: results of a large scale study

Data theft is a growing threat to consumers and organizations which existing security safeguards do not sufficiently address. In particular, existing authentication mechanisms are frequently bypassed or circumvented although in situations where attacks are launched by malicious insiders who already possess valid credentials. We propose methods to enhance existing authentication paradigms with continuous active authentication. Our system adds additional levels of security without burdening the user with more credentials to manage. We utilize two complementary authentication modalities to validate user-identity: (1) behavior profiling for user-system interaction, and (2) baiting adversaries using automatically distributed file-decoy tripwires. We present the results from a 160-subject user study used to validate our system. Our results show that the presence of decoy documents on a system does not interfere with normal user activities, and that, with 95% accuracy, our system will detect an intrusion within 15 minutes with at most one false-positive for 40 hours of user activity.

The Intention of Repurchase on e-Service Quality by Online Travel Agency Site

Purpose – The purpose of this research is reflected on the rapid development of online tourism industries. The study was to establish the strategy for Korean tourism enterprises to develop tourist commodities suitable for Chinese tourists and attract them to visit Korea by the empirical analysis of the relation between repurchase intention of tourists and its premise variables (e-service quality, perceived value and satisfaction). Research design, data, and methodology – This research carried out a questionnaire survey on Chinese tourists who visited Korea with experience of using the online travel agency web sites. A total 398 answers were recovered, 41 of them were excluded due to the dishonest answers and 357 of them were finally analyzed. The data was analyzed with IBM SPSS AMOS 22.0. Results – The research results show that in the online travel agency web site e-service quality, convenience, interactivity, information validity, credibility had a positive impacts on perceived value and satisfaction. The perceived value of online travel agency website users has positive impart on satisfaction and repurchase intention. Satisfaction of online travel agency web site users have positive impacts on repurchase intention. But safety has no impact on perceived value while positive impacts on satisfaction was affected. Conclusions – First, in the online travel agency web site e-service quality, safety has no impact on perceived value while it was shown to have positive impacts on satisfaction because the users of online travel agency web sites believe that the protection of personal information, the defense of cracker and the safeguard of payment security are the basic premises of website operation. Although safety does not have impacts on perceived value, users benefits will suffer damage when hacker intrusion and other accidents occur so that online travel agency web sites should not ignore the security concerns. Second, credibility is a major concern for online travel agency web site users. At this time, it is necessary for the web site to establish a system to display both the commodity information and the using experience published on the user's SNS, thus improving the credibility of the website information.

Multi-layer fast neutron detectors based on composite heavy-oxide scintillators for detection of illegal nuclear materials

We developed and characterized a new type (designated ZEBRA) of multi-layer composite heavy-oxide scintillatordetectors for fast neutron detection for homeland security and nuclear safeguards applications. In this heterogeneous detector medium, composite layers comprised of micro-granules of heavy-oxide scintillators (ZWO, CWO, PWO, BGO, GSO(Ce), GOS(Ce) and others) dispersed in transparent plastic are alternated with layers of clear plastic that serve as scintillation light guides and as a neutron moderator material. The physical peculiarities of the neutron interactions and the principal mechanisms of fast neutron registration in these detectors are discussed in detail. The fast neutron intrinsic detection efficiencies and sensitivities of ZEBRA-detectors based on BGO, ZWO and GSO(Ce) composite scintillators in response to neutrons from 239Pu–Be and 252Cf sources were measured. These detectors had cross-sectional areas ranging from 16 to 100 cm2. The sensitivities of such detectors of size 100×100×41 mm3 were found to be 40–51 cps/(nps × cm−2), a level that is comparable to the sensitivity of a typical 3He counter of 1600 cm2 area. The intrinsic efficiencies and sensitivities of the ZEBRA-detectors also compare favorably with those of fast neutron detectors based on large-size heavy-oxide single crystals, but the multi-layer composite ZEBRA structures are much less expensive and can be easily manufactured in much larger dimensions. This work represents a significant advance from earlier single-crystal detector types as part of our effort to explore alternatives and improvements to conventional 3He counters.

Clinical Trial Participants’ Views of the Risks and Benefits of Data Sharing

BackgroundSharing of participant-level clinical trial data has potential benefits, but concerns about potential harms to research participants have led some pharmaceutical sponsors and investigators to urge caution. Little is known about clinical trial participants’ perceptions of the risks of data sharing.MethodsWe conducted a structured survey of 771 current and recent participants from a diverse sample of clinical trials at three academic medical centers in the United States. Surveys were distributed by mail (350 completed surveys) and in clinic waiting rooms (421 completed surveys) (overall response rate, 79%).ResultsLess than 8% of respondents felt that the potential negative consequences of data sharing outweighed the benefits. A total of 93% were very or somewhat likely to allow their own data to be shared with university scientists, and 82% were very or somewhat likely to share with scientists in for-profit companies. Willingness to share data did not vary appreciably with the purpose for which the data would be used, with the exception that fewer participants were willing to share their data for use in litigation. The respondents’ greatest concerns were that data sharing might make others less willing to enroll in clinical trials (37% very or somewhat concerned), that data would be used for marketing purposes (34%), or that data could be stolen (30%). Less concern was expressed about discrimination (22%) and exploitation of data for profit (20%).ConclusionsIn our study, few clinical trial participants had strong concerns about the risks of data sharing. Provided that adequate security safeguards were in place, most participants were willing to share their data for a wide range of uses. (Funded by the Greenwall Foundation.)

The Effectiveness of Health Care Information Technologies: Evaluation of Trust, Security Beliefs, and Privacy as Determinants of Health Care Outcomes.

BackgroundThe diffusion of health information technologies (HITs) within the health care sector continues to grow. However, there is no theory explaining how success of HITs influences patient care outcomes. With the increase in data breaches, HITs’ success now hinges on the effectiveness of data protection solutions. Still, empirical research has only addressed privacy concerns, with little regard for other factors of information assurance.ObjectiveThe objective of this study was to study the effectiveness of HITs using the DeLone and McLean Information Systems Success Model (DMISSM). We examined the role of information assurance constructs (ie, the role of information security beliefs, privacy concerns, and trust in health information) as measures of HIT effectiveness. We also investigated the relationships between information assurance and three aspects of system success: attitude toward health information exchange (HIE), patient access to health records, and perceived patient care quality.MethodsUsing structural equation modeling, we analyzed the data from a sample of 3677 cancer patients from a public dataset. We used R software (R Project for Statistical Computing) and the Lavaan package to test the hypothesized relationships.ResultsOur extension of the DMISSM to health care was supported. We found that increased privacy concerns reduce the frequency of patient access to health records use, positive attitudes toward HIE, and perceptions of patient care quality. Also, belief in the effectiveness of information security increases the frequency of patient access to health records and positive attitude toward HIE. Trust in health information had a positive association with attitudes toward HIE and perceived patient care quality. Trust in health information had no direct effect on patient access to health records; however, it had an indirect relationship through privacy concerns.ConclusionsTrust in health information and belief in the effectiveness of information security safeguards increases perceptions of patient care quality. Privacy concerns reduce patients’ frequency of accessing health records, patients’ positive attitudes toward HIE exchange, and overall perceived patient care quality. Health care organizations are encouraged to implement security safeguards to increase trust, the frequency of health record use, and reduce privacy concerns, consequently increasing patient care quality.

A Data-Driven Security Risk Assessment Scheme for Personal Data Protection

To protect collected personal data, current data protection laws and regulations usually request organizations that accumulate and use personal data to adopt reasonable security safeguards. In this case, risk assessment approaches enable organizations to specify security controls as appropriate risks to their personal data. This paper proposes a data-driven risk assessment approach for personal data protection. In the proposed approach, an organization can model flows of collected personal data using extended data flow diagrams. In addition to recognizing scenarios of personal data collection and usage, the organization can identify components used to process, store, and transmit data. Based on associated components for further risk evaluation, the organization can identify potential incidents to each personal data. Compared to a traditional asset-oriented risk assessment approach, the proposed method diminishes risks to assets associated with sensitive personal data. In addition, compared to a process-oriented risk assessment approach, our approach prevents organizations from overlooking risks to sensitive data that are not used in critical business processes. While the proposed approach can improve the risk assessment accuracy of personal data protection, the study may hopefully help organizations adopt more appropriate security safeguards to protect personal data.

Characterization and Monte Carlo simulations for a CLYC detector

The CLYC (Cs[Formula: see text]LiYCl[Formula: see text]:Ce) detector is a scintillator detector sensitive to both neutron and gamma radiation and capable of separating the two types of radiation by pulse-shape discrimination. This feature is interesting as pertains to the development of non-destructive assays for the safeguard of nuclear material, nuclear security, and fast-neutron personal dosimetry. A [Formula: see text] CLYC detector highly enriched with [Formula: see text]Li was purchased and tested with analog and digital electronics. In this work, we report on the characterization of the detector in terms of linearity, energy resolution, and full-energy efficiency for gamma rays. This characterization was achieved by measurements with calibrated gamma-ray point-sources with an analog measuring chain, in a well-defined, reproducible geometry. The experimental data were also used to validate a model of the detection system that was developed with the Monte Carlo code MCNP-CP. This work is part of a collaborative agreement between SCK•CEN and JRC-Geel.

From Healthcare to Warfare and Reverse: How Should We Regulate Dual-Use Neurotechnology?

Recent advances in military-funded neurotechnology and novel opportunities for misusing neurodevices show that the problem of dual use is inherent to neuroscience. This paper discusses how the neuroscience community should respond to these dilemmas and delineates a neuroscience-specific biosecurity framework. This neurosecurity framework involves calibrated regulation, (neuro)ethical guidelines, and awareness-raising activities within the scientific community.

Cloud Security - A Semantic Approach in End to End Security Compliance

Many firms are seeing the benefits of moving to the cloud. For the sake of their customers' data, cloud service providers are required by law to maintain the highest levels of data security and privacy. Most cloud service providers employ a patchwork of security and privacy safeguards while industry standards are being created. The upshot is that customers of cloud services are unsure whether or not the security protections supplied by these services are enough to meet their specific security and compliance requirements. In this article, we have discussed the many threats cloud users face and emphasized the compliance frameworks and security processes that should be in place to minimize the risk. To categorize cloud security measures, risks, and compliance requirements, we developed an ontology. We needed to design software to identify the high-level policy rules that must be applied in response to each danger as part of this initiative. Additionally, the program provides a list of cloud service providers that now satisfy specific security requirements. Even if they aren't familiar with the underlying technology, cloud users may utilize our system to build up their security policy and identify compatible providers.

‘Downpressor man’: securitisation, safeguarding and social work

The Counter Terrorism and Security Act came into force in July 2015 in the UK. This places a statutory duty on many front-line organisations, for example, schools, social services and prisons, to work within the PREVENT agenda, a policy arising from Britain’s overall counterterrorism policy, CONTEST. We argue that PREVENT is representative of increasingly securitised social policies that serve to: first, view people within particular individualised neoliberal discourses and thin narratives; and, second, coerce the profession of social work into hitherto unknown areas, namely, national security and counterterrorism. We note the unapologetic linkage of traditional forms of what we term here ‘welfare safeguarding’, customarily the domain of social work, with what we term ‘security safeguarding’. If the profession of social work in the UK, and we suspect other Western regimes, wishes to avoid becoming a profession of ‘downpressor men’, the uncritical incursion into issues of national security and counterterrorism must be highlighted.