Security Tasks Research Articles

PERLINDUNGAN HUKUM TERHADAP PETUGAS LEMBAGA PEMASYARAKATAN DALAM PELAKSANAAN TUGAS PENGAMANAN PADA LAPAS KLAS IIA PADANG

Legal protection against Correctional Officers in carrying out security duties is based on Law No. 12 of 1995 concerning Correctional Services. Given the risks posed by security duties at Correctional Institutions, the Security Officers need to be given legal protection so that the aims and objectives of implementing security tasks can be achieved. which in turn the correctional goals themselves can be realized. With such a background, there are two main problems in implementing legal protection against correctional officers, namely: First What is the legal protection of Correctional Officers in the implementation of security duties at the Padang Class IIA Correctional Institution? Second What are the Constraints of Constraints encountered in the Implementation of Legal Protection for Correctional Officers in the Implementation of the Duty of Security at the Padang Class IIA Correctional Institution? The implementation of legal protection in terms of answering the existing problems, which is seen in the implementation in Padang Class IIA Lapas can be understood that the legal protection of correctional officers in Lapas Klas IIA Padang is carried out based on legal provisions regarding correctional facilities. In this case Padang Class IIA Lapas provides legal protection to correctional officers in carrying out security duties carried out in accordance with applicable legal rules concerning correctional duties and legal rules regarding security itself. The rule of implementative law regarding correcting about safeguards refers to legal rules regarding correctional codes of ethics and legal rules concerning the security of prisons regulated in Permenkumham Number M.HH-16.KP.05.02 of 2011 concerning the Code of Conduct for Correctional Staff and Permenkumham No. 33 of 2015 concerning Security at Penitentiary Institutions and State Detention Houses. The implementation of legal protection against correctional officers in carrying out security duties is carried out based on these legal rules, so that legal protection for correctional officers can be provided in the event that correctional officers carry out security duties based on applicable legal rules.

Artificial intelligence and some issues of Russian security provision

Some cases of using Artificial Intelligence systems are analyzed in order to give reliable warning and optimal response to man-made and natural emergencies. The author considers the set of tasks of information and cyber security, of increasing the combat capability of the armed forces.

How Deep Learning Is Making Information Security More Intelligent

Manually analyzing vast amounts of newly released malware is a significant problem for the security community. Deep-learning techniques have recently been employed to automate security tasks such as malware analysis, intrusion detection, and botnet detection. We look at such techniques and investigate how practical and secure they are.

Constructing Bloom filters by reconfigurable means for solving information security tasks

Recently, the string matching task became a performance bottleneck in network intrusion detection, anti-virus, anti-worms and other signature-based information security systems. Unlike the firewall, NIDS examines not only packet headers, but also the packet bodies, that is, performs the deep packet inspection (DPI). The multi-pattern string matching task is a specific type of string matching functionality performed in DPI systems to search an input stream for a set of patterns rather than a single pattern. Due to rising traffic rates, increasing number and sophistication of attacks and the collapse of Moore's law for sequential processing, traditional software solutions can no longer meet the high requirements of today’s security challenges. Therefore, hardware approaches are proposed to accelerate pattern matching. Combining the flexibility of software and the near-ASIC performance, reconfigurable hardware devices based on Field Programmable Gate Arrays (FPGA) have become increasingly popular for this purpose. There are three main approaches to fulfill the computation-intensive multi-pattern string matching task using FPGA. The techniques (and underlying technologies) of these approaches are: content addressable memory (based on digital comparators), Bloom filter (based on hash-functions) and Aho-Corasick Algorithm (based on finite automata). This article is devoted to the investigation of the second approach - Bloom filter. The features (advantages and disadvantages) of this approach in terms of resource costs, speed/throughput parameters, as well as scaling parameters are explored. The basic scheme and its modifications are considered. The performance characteristics, problems and challenges of implementing this approach on reconfigurable accelerators as well as ways to overcome them are analyzed. The obtained results allow improving the technical parameters when designing pattern matching modules, which are speed-critical components of the signature-based information protection systems hardware. The knowledge obtained in this study allows developers to create more effective reconfigurable means for information security.

Open challenges in visual analytics for security information and event management

Introduction: Visual analytics techniques support efficient analysis of the ever-growing amounts of data generated by security sensors and facilitate a timely and reasonable response to the threats. Modern security information and event management systems propose various solutions for processing large data streams and integrating heterogeneous sources which can be used as a framework to construct a visual analytics system for security tasks. Purpose: The analysis of visual analytics techniques implemented in security information and event management systems and designed to support the studies on security incidents in the context of the main visual analytics problems, including the validation of automatic analysis models. Results: A contradiction has been detected between the capabilities of security information and event management systems in the visual analysis of security data and the implementation of these capabilities. Techniques for visual correlation of the data from different security sensors and for visual validation of automatic analysis models which would allow you to evaluate their accuracy and adaptability to the changes in data streams are almost missing. A possible way to resolve this contradiction is using techniques which support a flexible mechanism for adjusting the analyzed attributes of the network device events. The article presents the main approaches to the development of such techniques, discussing their advantages and disadvantages. We propose a dashboard for monitoring the behavior of an automated network traffic analysis model used in a cloud computing infrastructure. It allows you to monitor the analysis model behavior, perform a visual correlation of the analyzed parameters, and track changes in the network flows. Practical relevance: The results of the research can be used when designing security visual analytics tools for monitoring data flows and the behavior of automated analysis models.

Crisis Management

The security professionals are always talking about Emergency Plan, Emergency Preparedness, Emergency Response, Crisis Management, Crisis Management Plan, Business Continuity Management, Business Continuity Plan. etc. That is a question whichcomes to my mind do we know exactly what these phrases meanings are? My experiences show, usually we have different interpretations on the above mentioned expressions. Briefly we need to have an Emergency Plan to provide our Emergency Preparedness and to be able to take our Emergency Responses in case of a real Emergency situation. If we were able to eliminate the Emergency situation the problemhas been solved. If we had no success the Emergency can be develop a crisis situation which we need to manage by the Crisis Management Plan. As we are over the crisis we need to adopt our Business Continuity Plan to be able to manage our continuous operationor production. The aim of this study to providea useful tool or set up for security leaders on Crisis Management which is a clear security task and not as like Emergency Preparedness which is related to safety organization as Business Continuity is connected to each business functions.

A novel key management protocol for vehicular cloud security

Vehicular cloud computing (VCC) is a new hybrid technology which has become an outstanding area of research. VCC combines salient features of cloud computing and wireless communication technology to help drivers in network connectivity, storage space availability and applications. VCC is formed by dynamic cloud formation by moving vehicles. Security plays an important role in VCC communication. Key management is one of the important tasks for security of VCC. This paper proposes a novel key management protocol for VCC security. Proposed scheme is based on Elliptical Curve Cryptography (ECC). The simulation results demonstrated that the proposed protocol is efficient compared to existing key management algorithms in terms of key generation time, memory usage and cpu utilization.

Risk-Based Scheduling of Security Tasks in Industrial Control Systems With Consideration of Safety

Industrial control systems (ICSs) in networked environments face severe cyber-security risks and challenges. A timely response to cyber-attacks is of paramount importance for mitigating risks. However, the security policy developed for an ICS may be conflicting with the ICS's safety policy, on which much attention has been paid for a long time in industrial control. An inappropriate enforcement of the security policy may deteriorate the ICS performance or even result in severe unexpected consequences. To tackle this problem, a risk-based security task scheduling approach is presented for ICSs with consideration of the safety policy. It ensures a timely response to cyber-attacks without compromising safety. More specifically, the approach reconciles security tasks and safety tasks according to a designed resolution policy, so as to acquire contradiction-free security and safety (S&S) tasks. Then, a real-time risk assessment method is developed to characterize the subtle change of the system risk with the implementation of the reconciled S&S tasks. After that, a task scheduling method is designed with the risk as the optimization objective, i.e., it searches the optimal task scheduling scheme by minimizing the risk posture. The resulting scheduling scheme ensures the smooth implementation of the S&S policy, which reflects the optimal recovery process against the risk. Finally, case studies on a hardware-in-the-loop testbed are conducted to demonstrate the effectiveness of the proposed approach.

Information security burnout: Identification of sources and mitigating factors from security demands and resources

This study examines how information security burnout can develop from complying with organisational security demands, and whether security burnout can be reduced by engaging organisational and personal resources. The Job Demands-Resources model was extended to the IT security context, to develop and empirically test a security burnout model, using a sample of 443 participants in Vietnam. The results demonstrate that security task overload and difficult access to security requirements increased security burnout while dealing with challenging security requirements reduced burnout. Neither organisational resources nor user self-efficacy were effective in reducing burnout. Moreover, simple security tasks did not guarantee a burnout-free experience for users. The findings emphasise the significance of providing resources and designing security tasks as challenging and rewarding experiences, rather than simply reducing user involvement as a source of decreasing cyber security risks. The research establishes a theoretical basis for further studying the phenomenon of security burnout and its role in user security management.

Clinician App Tackles Stress of Patient Task Management.

Coordination of patient care is a complex process that requires the collaboration of a diverse team as well as management of critical, often disparate, tasks. Managing these processes puts clinicians and their teams under a lot of stress, often leading to feelings of fatigue and burnout. Designed to assist with the administrative burden of patient care and practice management, Dock Health is a secure collaboration and task management platform. Dock Health was the result of a collaboration between Michael Docktor, MD, a pediatric gastroenterologist and clinical director of innovation at Boston Children's Hospital (BCH), and Keather Roemhildt, a veteran user experience (UX) designer now at Twitter. Ahmed Morsy, Editor-in-Chief of IEEE Pulse, spoke with Michael Docktor (Figure 1) about the potential this platform has to assist with patient management tasks and ease the stress of clinician and administrative burnout.

Cognitive solutions for security and cryptography

This paper describes the new security solutions based on cognitive approaches and new computing paradigm called cognitive cryptography. This new security area establish a new generation of computational methods and security systems, focused on creation intelligent cryptographic algorithms and security protocols using cognitive information processing approaches. Such systems are designed for semantic evaluation of encrypted data, and allow to select the most appropriate techniques of its encryption. This paper presents a possible application of such techniques for different security tasks like authentication, secret sharing, secure data management etc. Additionally, some cryptographic solutions inspired by biological models will be presented.

Multi-robot adversarial patrolling: Handling sequential attacks

Robot teams are commonly used for security tasks, where they are required to repeatedly monitor an area in order to prevent penetrations, initiated by an adversary. Current research in this field focuses mainly on detecting penetration attempts, but not on responding. Requiring the robots to also inspect and handle the penetrations has a significant impact on the patrol, as each penetration attempt also influences the robots' behavior, making them vulnerable to multiple attacks. Moreover, a knowledgeable adversary can initiate two sequential attacks, where the second attempt exploits the vulnerable points caused by the requirement that a robot handle the first penetration attempt. In this work, we consider the problem of sequential attacks and examine different robot policies against such adversarial behavior. We provide an optimal patrol strategy for various penetration attempt patterns. Our novel approach considers a full history-length policy, while previous work only handled very limited lengths of history. The use of a longer history improves the results. Moreover, we show how to significantly reduce, in practice, the exponential space state of the problem, while maintaining the optimality of the solution.

Методика формирования структуры функций управления защитой информации значимых объектов критической информационной инфраструктуры Российской Федерации

The article deals with the method of formation of the structure of the functions of an automated information security management system. The essence of the technique is to build a model of information security problems Z, reflecting their dynamics and the relationship between the tasks of information security, as well as the situation of coincidence of tasks on the whole set of tasks of information security, and on this basis, the structure of the functions of the automated control system by setting in accordance with each task of information security and each pair (set) of matching tasks of information security corresponding to them functions of the automated control system.

The Anesthesia and Coping Strategies of Medical Care for Astronauts in Shenzhou Eleven Spaceship

To analyze the characteristics and basic principles of the medical support and anesthesia for the Shenzhou eleven astronaut landing field, and to summarize the experience of the medical care and anesthesia in the main landing field of our country, and to ensure the security tasks in the special environment such as the emergency return of manned space flight. To review the reports on the medical care and anesthesia of the astronauts at landing field, and summarize the experience of the medical care and anesthesia of the Shenzhou five to the Shenzhou ten astronaut medical support landing field, and put forward a series of organizations and prepositions on the environment characteristics of the "Shenzhou eleven" in the long time and the cold weather in the main landing field of the scheduled return time. Case, equipment and effective treatment plan, and be tested in actual combat. On the basis of the original first aid, the first aid equipment was adjusted, the first aid procedure was optimized, the heat preservation heating device was added, the laryngeal mask, the anti fog visible laryngoscope and the portable ultrasonic device were introduced, and the anesthesia and medical care plan for the manned space landing field was formulated, which was the astronaut stay in the space and the cold and complicated weather conditions. The treatment and medical care provided a strong guarantee. The first aid support scheme of the Shenzhou eleven spacecraft's main landing field was improved and optimized, and it fully met the medical security task of the special environment such as the astronaut emergency return and so on in the cold weather.

A Conceptual Model for a Metric Based Framework for the Monitoring of Information Security Tasks’ Efficiency

Information Security Governance Systems are not adequate to measure the effectiveness and efficiency of security tasks for the enterprises. Although some of the systems offer ways for measurement, they still need the definition of measurement objectives and metrics. This study proposes a conceptual framework mode which has human and tool/process related metrics. This system also allows the collection of evidence data for security-related tasks and ways to motivate the security staff to provide a more productive environment. This system may be applied to any size of enterprise independent of its business domain or functions as long as the aim is to improve the effectiveness and efficiency of security-related tasks.

Dizajn optimalne elise za buduću bespilotnu letelicu za velike visine i duge istrajnosti

The main roles of unmanned air vehicles (UAVs) include: observation, surveillance, transportation, remote sensing and various security tasks. Improved, augmented type of UAVs are high-altitude long-endurance (HALE) aircraft capable and designed, as their name suggests, for lengthy flights at higher altitudes (which also usually implies subsonic cruising velocities). Different variants, in both size and applied technical solutions, have been tried. Common approach incorporates standard wing-fuselage-aft empennage configuration and propelled flight as the most efficient for the required speed range. The paper gives a brief overview of a preliminary aerodynamic analysis of the main lifting surfaces as well as a detailed description of the performed multi-objective optimization of the propeller capable of producing a sufficient amount of thrust at the cruising altitude and speed. Aerodynamic performances of the investigated propellers are estimated by a simple blade element momentum theory (BEMT). The chosen optimizing method, genetic algorithm (GA), is suitable for dealing with a large number of input variables.

Classification Hardness for Supervised Learners on 20 Years of Intrusion Detection Data

This article consolidates analysis of established (NSL-KDD) and new intrusion detection datasets (ISCXIDS2012, CICIDS2017, CICIDS2018) through the use of supervised machine learning (ML) algorithms. The uniformity in analysis procedure opens up the option to compare the obtained results. It also provides a stronger foundation for the conclusions about the efficacy of supervised learners on the main classification task in network security. This research is motivated in part to address the lack of adoption of these modern datasets. Starting with a broad scope that includes classification by algorithms from different families on both established and new datasets has been done to expand the existing foundation and reveal the most opportune avenues for further inquiry. After obtaining baseline results, the classification task was increased in difficulty, by reducing the available data to learn from, both horizontally and vertically. The data reduction has been included as a stress-test to verify if the very high baseline results hold up under increasingly harsh constraints. Ultimately, this work contains the most comprehensive set of results on the topic of intrusion detection through supervised machine learning. Researchers working on algorithmic improvements can compare their results to this collection, knowing that all results reported here were gathered through a uniform framework. This work's main contributions are the outstanding classification results on the current state of the art datasets for intrusion detection and the conclusion that these methods show remarkable resilience in classification performance even when aggressively reducing the amount of data to learn from.

Magánbiztonsági tevékenység a tömeges bevándorlás okozta válsághelyzet szempontjából

A cím egy olyan a tömeges bevándorlás okozta válsághelyzetet értelmez, amelyben a magánbiztonságnak, a vagyonvédelmi iparágnak nincs törvényben előírt feladata. Menekültek nem tartózkodnak Magyarország területén, úgy mint azt 2015-bentapasztaltuk. Ennek az állapotnak a jövőbeni lehetősége nem kizárható. Az állami szervezetek a határőrizetből eredő folyamatos létszámhiány miatt partnereket keresnek. Tanulmányomban a magánbiztonság feladatait dimenziók szerint elemzem, mindezt a tömeges bevándorlás okozta válsághelyzet szempontjából.

ОБЕСПЕЧЕНИЕ ФИНАНСОВОЙ БЕЗОПАСНОСТИ РЕГИОНА КАК ЭФФЕКТИВНЫЙ ИНСТРУМЕНТ БЮДЖЕТНОЙ ПОЛИТИКИ

In modern conditions, one of the major tasks of regional financial security is to improve the quality of the use of budgetary resources. Implementation of the budget balance is an important part of budget policy of a state, and, particularly, of a region. Budgetary policy is a major leverage for the regional financial security. The paper presents the directions to strengthen the regional financial security through a balanced budgetary policy. We also suggest three possible scenarios that can affect the regional financial security in different ways. The data are relevant for the Novosibirsk region: the decline in revenues while reducing the costs of the consolidated budget; the growth of incomes at growth of expenses of the consolidated budget; the decrease in incomes at growth of expenses of the consolidated budget. To calculate the forecast values of indicators of the consolidated budget of the Novosibirsk region in 2018-2020 we use the average growth rate according to the geometric average formula. The method of calculating the forecast was that the values of the indicators of the previous year were adjusted to the average growth rate depending on the decline or growth rate. According to the results we propose a set of elements of budgetary policy to ensure the regional financial security.

Geoprostorna i vremenska distribucija krivičnih dela razbojništva na teritoriji Policijske uprave u Zrenjaninu 2009-2018

Robbery is a crime with a high level of life threat and bodily harm to a damaged party, and certainly the most violent and dangerous property crime. Robbery is a delict whose negative impact as well as the characteristics of the perpetrators compel the whole security system to act proactively against this phenomenon. One of the preconditions for successful police action against this phenomenon is geoinformational (analytical) decision-making support in planning and organizing daily security tasks (GIS). In this regard, the paper presents the possibilities of crime mapping based on GIS technologies as a component of the Police Intelligence Model. The obtained results of the study of geospatial and temporal distribution of the robberies in the territory of Zrenjanin police directorate are reflected in the identification and analysis of hotspots, analysis of conditions and causes of the treated type of property crime, prediction of its future manifestation and access to information needed to design and implement the most effective preventive, proactive and repressive criminalistics measures. The implementation of these measures necessarily leads to a more efficient and effective use of available police resources.