Computer Network Users Research Articles

Development a data mining techniques to detect and prevention cyber attack for cybersecurity

The identification and forecasting of cyber-attacks is crucial process. In this article, we describe a paradigm for cyber security that makes use of data mining to forecast cyberattacks and identify appropriate countermeasures. The framework’s two primary elements are the surveillance and prevention of cyberattacks. The system constructs a predictive model to forecast future cyberattacks after first extracting appropriate timing with cyberattacks from previous data that used a decision tree based on the J48 algorithm. A variety of cyber-attacks, involving DDoS, port scans, and SQL Injection, are described in the datasets. The suggested framework effectively recognizes cyberattacks and gives patterns associated with them. The suggested predictive algorithm for identifying cyberattacks has a 99% average prediction performance. The predictions model’s test outcomes demonstrate how effective it is at spotting potential cyberattacks in the future. Moreover, solutions like malware detection and monitoring were provided using data mining. Given the state of computer networks today Users of computer networks ought to take security very seriously. In this article, implications of data mining for risk evaluation and identification were highlighted, along with a unique method for quickly and accurately detecting malware.

A Classification Data Packets Using the Threshold Method for Detection of DDoS

Computer communication is done by first synchronizing one computer with another computer. This synchronization contains Data Packages which can be detrimental if done continuously, it will be categorized as an attack. This type of attack, when performed against a target by many computers, is called a distributed denial of service (DDoS) attack. Technology and the Internet are growing rapidly, so many DDoS attack applications result in these attacks still being a serious threat. This research aims to apply the Threshold method in detecting DDoS attacks. The Threshold method is used to process numeric attributes so obtained from the logfile in a computer network so that data packages can be classified into 2, namely normal access and attack access. Classification results using the Threshold method after going through the fitting process, namely detecting 8 IP Addresses as computer network users and 6 IP addresses as perpetrators of DDoS attacks with optimal accuracy.

Examining the Performance of Various Pretrained Convolutional Neural Network Models in Malware Detection

A significant quantity of malware is created on purpose every day. Users of smartphones and computer networks now mostly worry about malware. These days, malware detection is a major concern in the cybersecurity area. Several factors can impact malware detection performance, such as inappropriate features and classifiers, extensive domain knowledge, imbalanced data environments, computational complexity, and resource usage. A significant number of existing malware detection methods have been impacted by these factors. Therefore, in this paper, we will first identify and determine the best features and classifiers and then use them in order to propose the malware detection method. The comparative strategy and proposed malware detection procedure consist of four basic steps: malware transformation (converting images of malware from RGB to grayscale), feature extraction (using the ResNet-50, DenseNet-201, GoogLeNet, AlexNet, and SqueezeNet models), feature selection (using PCA method), classification (including GDA, KNN, logistic, SVM, RF, and ensemble learning), and evaluation (using accuracy and error evaluation metrics). Unbalanced Malimg datasets are used in experiments to validate the efficacy of the results that were obtained. According to the comparison findings, KNN is the best machine learning classifier. It outperformed the other classifiers in the Malimg datasets in terms of both accuracy and error. In addition, DenseNet201 is the best pretrained model in the Malimg dataset. Therefore, the proposed DenseNet201-KNN methods had an accuracy rate of 96% and a minimal error rate of 3.07%. The proposed methods surpass existing state-of-the-art approaches. The proposed feature extraction is computationally quicker than most other methods since it uses a lightweight design and fewer feature vector dimensions.

Technology of protection of authentication data of computer network users

The article is devoted to the problem of perfect protection of authentication data of users of computer systems, especially in the case of a large number of different rights and powers that are personally granted to users. The importance of this problem increases especially when the number of such users in the system is hundreds or thousands. At the same time, each of them must create conditions for access only to their data and ensure protection against any outside interference, both by other users and by staff. A typical example of such conditions are secret electronic voting systems. The software and technical solutions described in this work have passed many years of testing and continue to be practically used in the electronic voting system of the Kyiv National University of Civil Engineering and Architecture. This system is regularly used for conducting elections to student self-government bodies and for surveys among students regarding the quality of teaching subjects. With the help of this system, elections of leaders of the Red Cross Society of Ukraine were held during the pandemic, which was associated with the Covid-19 virus. The mathematical basis of the described authentication data protection technology is the theory of algebraic groups, namely, the problem of discrete logarithmization over large Galois fields. Thanks to the use of cryptographic transformations over these fields, instead of known hash functions, it was possible to get rid of the possibility of collisions and neutralize the disclosure of passwords by attackers who were able to do it with the help of specialized Internet resources. It was also possible to increase resistance to brute-force password cracking, since conversions to Galois fields take ten times more time than hash function calculations.

Trustworthy Artificial Intelligence Methods for Users’ Physical and Environmental Security: A Comprehensive Review

Artificial Intelligence is an indispensable element of the modern world, constantly evolving and contributing to the emergence of new technologies. We meet it in everyday applications, primarily using intelligent systems that aim to improve our lives. Artificial Intelligence techniques must inspire users’ trust because they significantly impact virtually every industry and person. For this reason, systems using Artificial Intelligence are subject to many requirements to verify their trustworthiness in various aspects. This review focused on users’ physical and environmental security, considering the safety and robustness dimensions of Trustworthy Artificial Intelligence. We examined these Trustworthy Artificial Intelligence solutions and dimensions because security is one of the most-critical aspects of human life and can be considered in many different contexts. We examined the trustworthiness of Artificial Intelligence techniques in systems supporting road safety and securing computer network users. Also, we analyzed the challenges and requirements of the newly designed solutions using Trustworthy Artificial Intelligence methods. Verifying Trustworthy Artificial Intelligence solutions and their practical use will increase users’ physical and environmental security.

Towards an Improved Taxonomy of Attacks Related to Digital Identities and Identity Management Systems

Digital transformation with the adoption of cloud technologies, outsourcing, and working-from-home possibilities permits flexibility for organizations and persons. At the same time, it makes it more difficult to secure the IT infrastructure as the IT team needs to keep track of who is accessing what data from where and when on which device. With these changes, identity management as a key element of security becomes more important. Identity management relates to the technologies and policies for the identification, authentication, and authorization of users (humans and devices) in computer networks. Due to the diversity of identity management (i.e., models, protocols, and implementations), different requirements, problems, and attack vectors need to be taken into account. In order to secure identity management systems with their identities, a systematic approach is required. In this article, we propose the improved framework Taxonomy for Identity Management related to Attacks (TaxIdMA). The purpose of TaxIdMA is to classify existing attacks, attack vectors, and vulnerabilities associated with system identities, identity management systems, and end-user identities. In addition, the background of these attacks can be described in a structured and systematic way. The taxonomy is applied to the Internet of Things and self-sovereign identities. It is enhanced by a description language for threat intelligence sharing. Last but not least, TaxIdMA is evaluated and improved based on expert interviews, statistics, and discussions. This step enables broader applicability and level of detail at the same time. The combination of TaxIdMA, which allows a structured way to outline attacks and is applicable to different scenarios, and a description language for threat intelligence helps to improve the security identity management systems and processes.

Computer Network Communication Security Encryption System Based on Ant Colony Optimization Algorithm

With the increasing number of computer network users, the problem of network communication security has become more and more serious. Encryption technology, as one of the key technologies for securing communication, has important research and application values. However, the security of conventional encryption methods is gradually challenged, and at the same time, traditional encryption algorithms require a large amount of computing resources, which makes it difficult to realize real-time encryption and decryption operations. Therefore, how to improve the confidentiality and efficiency of computer network communication security encryption system has become a current urgent problem to be solved. This paper firstly discussed the analysis of its application in the computer network communication security encryption system based on the ant colony optimization (ACO) algorithm. Through the theoretical analysis of the ACO algorithm in terms of bioheuristic optimization algorithm and the analysis of the characteristics of the algorithm, the optimization scheme of key distribution based on the ACO algorithm was discussed. Then, the differences between the ACO algorithm and the traditional encryption algorithm in terms of encryption duration, key distribution time, encryption strength and random number generation speed were further analyzed and verified by experimental data. The data results showed that the key distribution of the encryption system using the ACO algorithm had higher security and better performance compared with the traditional key distribution algorithm. By counting and comparing the data, it was found that the ACO algorithm showed very obvious advantages in terms of encryption and decryption time, key distribution time, encryption strength and random number generation. This indicates that the ACO algorithm has very important application prospects in computer network communication security encryption systems.

Computer Network Security and Privacy: A Review

The widespread use of laptop community programs has come a high level of concern for their security. Complex factors influence community protection. A challenging scientific endeavor, network security. The goal of this paper is to raise security awareness among computer network users and help them understand effective community safety technology. It does this by combining practical work experience with the risk of community safety, safety technology, and community a few suggestions and measures for the device design principle.

Analysis and Application of Access Control List (ACL) Methods on Computer Networks

Advances in information technology are currently growing to meet the needs of humans who want to obtain information easily, quickly and precisely. Therefore, we must continue to pursue and improve the quality and quantity of information technology. The purpose of this study is to find out how to perform the analysis and application of the Access Control List (ACL) method in a computer network. Mikrotik RB750 router is good to use for network security both in terms of reliability and in terms of cost. The method of network security using a firewall and address list is good because it can perform network security and restrictions on addresses that can be accessed and cannot be accessed. With this computer network security, computer network users can get internet access and local network access that is stable and smooth.

Modern Methods, Software and Hardware to Authenticate the Users of Computer Systems and Networks

The aim of the work is to review and analyze the existing methods, software and hardware for identifying and authenticating the users of computer systems and networks, and to define their promising development lines. The authentication methods and means used to control both local and remote access of users to computer resources are considered. Special attention is paid to multi-factor authentication in controlling remote access. The advantages and disadvantages of the considered methods and means in terms of ensuring reliable user authentication are noted. Despite the continuing widespread use of password authentication, its insufficient protection against password guessing attacks and password interceptions when the passwords are transmitted over the network urgently calls for a need of shifting to more reliable authentication methods. A version of local authentication is proposed that uses a handshake model based on a function specified in tabular form for calculating the response to a random request, which does not require the use of additional devices. Two methods for multi-factor authentication of users performing remote access are proposed: based on the knowledge of their interests and habits when working in the Internet and on the basis of a person whose image is transmitted to the authentication server in a one-time encrypted form (the encryption key is generated based on the user's private key and random admixture). These two solutions can be implemented using open source software and without involvement of third-party paid services. As a result of the performed analysis, the most effective methods and means for identification and authentication of users of various information systems have been defined. The obtained results can be used to enhance the security of computer systems and networks against unauthorized access to their resources. Ensuring the security of information and software systems is a must in improving the quality of such systems.

The WIRELESS COMPUTER NETWORK MANAGEMENT SECURITY ANALYSIS

The use of a wireless computer network in some institutions has become a very flexible option to connect all users of the existing computer network in the institution. This flexibility also has the disadvantage that anyone with a network password can take advantage of the wireless network. The possibility of threats to information security is very large, such as the presence of intruders on the network. Therefore, it is necessary to manage wireless networks that pay attention to information security issues on the network. The Directorate General of New, Renewable Energy and Energy Conservation at the Ministry of Energy and the Human Resources Republic of Indonesia was chosen as the research location given that computer network users in this institution are diverse and have also used The Dude MikroTik application to manage wireless computer networks, which are instruments to analyze information security. in this institution. The analysis was conducted to identify the activities and effectiveness of information security management in this institution. This study concludes that the use of The Dude MikroTik application is quite helpful in analyzing information security on wireless computer networks in this institution.

Pemanfaatan VLAN Untuk Meningkatkan Kinerja Jaringan Komputer BKPP Kabupaten Bogor

Computer networks have an important role in a government agency, especially BKPP. In their daily life, these institutions carry out activities of exchanging documents and data, printing files on the same printer and using hardware or software that is connected to the network together. Government agencies play a very important role in serving the community, therefore a good, secure, stable and fast network is needed in processing small and large data. The Bogor Regency Personnel, Education and Training Agency uses one computer that acts as a multifunctional server for the database server, DHCP server, and web server at the same time. From the results of the analysis, it was found that the topology used is an extended star with IP class C. Using a firewall that is applied to the router, as well as the default Windows antivirus that is already installed on every PC and laptop. Meanwhile, access point security uses WPA2-PSK. The problem faced is that it is easy for people from other divisions who are not interested in seeing and accessing files in other divisions that are confidential. Thus, a VLAN is needed to manage access rights between computer network users in order to maintain data and file authenticatio

РАЗРАБОТКА ПРОГРАММНО-АППАРАТНОГО СТЕНДА С ПРИМЕНЕНИЕМ СОВРЕМЕННЫХ СРЕДСТВ ВИРТУАЛИЗАЦИИ ДЛЯ ИЗУЧЕНИЯ КОМПЬЮТЕРНЫХ СЕТЕЙ СТАНДАРТА IEEE 802.11

The article analyzes the specifics of organizing the work of a software and hardware stand with wireless computer networks, the need for which arises when training future IT specialists in the system administration of wireless networks or when modeling an enterprise corporate network in order to apply and test modern technologies for protecting network infrastructure from information security threats, aimed at users of wireless computer networks. A feature of this stand is the use of advanced virtualization tools while maintaining the physical wireless environment, which allows you to effectively train modern competitive IT specialists and test the resistance of customized technologies to various computer attacks aimed at the wireless segment of corporate computer networks.

Понятие киберпреступности в Российской Федерации и Республике Казахстан

Relevance. The article is devoted to one of the current topical issues - the concept of cybercrime in the Russian Federation and the Republic of Kazakhstan. The concept of cybercrime is widely used in criminology and practical activities of the police of the two countries. However, an accurate and complete understanding of cybercrime, as well as its legislative consolidation, remains open to this day. The essence of this problem lies in the fact that the effectiveness of law enforcement agencies in preventing such crimes depends on the correct understanding of cybercrime. Currently, during the rapid development of information technology, the number of crimes committed in cyberspace is growing in proportion to the number of users of computer networks. The purpose is to give an accurate and complete definition of the concept of cybercrime in the Russian Federation and the Republic of Kazakhstan. Objectives: based on the available definitions in the legal literature, to identify the main signs of cybercrime and to systematize the concept of "cybercrime". Methodology. In the process of working on the study, methods of theoretical research (analysis and synthesis, induction and deduction, mental modeling), a comparative legal approach were used. Results. The study suggests an understanding of cybercrime as a historically volatile, latent, social and criminal-legal negative phenomenon, which is a system of crimes committed virtually in the information space using information and communication technologies. Conclusions. The study concluded that the analysis of doctrinal approaches does not show a consensus among scientists in the definition of cybercrime. This is due to different interpretations of cyberspace and ways of using computer systems when committing illegal actions. Despite the differences, scientists raise the question of the relationship between international legislation and Russian legislation, regarding the list of illegal actions that are attributed to crimes committed in the cybersphere. In our opinion, the concept of "cybercrime" can be applied to crimes that are committed using any means of in-formation and communication technologies. Cybercrime is a broader concept than "Internet crime", as it includes the possibility of committing crimes using any information or telecommunications networks.

Network Security Analysis and Bandwidth Management

Computer network users have to spend a lot of money to use the Internet. The Internet has given a very big change in the dissemination of information, so that many people are using data through the Internet. This problem can be solved by MikroTik as a regulator of Internet data traffic and limiting bandwidth that can interfere with computer network activities in accordance with the regulations that have been applied. As a result of not being limited in bandwidth, it causes an overload on a network which has an impact on disrupting internet traffic on that network. Each agency should implement bandwidth restrictions according to the needs of users using the internet. Result from this research is not being limited in bandwidth, it causes an overload on a network which has an impact on disrupting internet traffic on that network. Each agency should implement bandwidth restrictions according to the needs of users using the internet.

A Study on the Integration of Computer Network Information Security Prevention and Web Data Mining Technology

The rapid development of the information age is accompanied by the insecurity of information, and the convenience of data brings the problem of information security to us. In general, network security refers to information security and control security. ISO defines information security as “integrity, availability, confidentiality and reliability of information ”; control security refers to identity authentication, nonrepudiation, authorization and access control. In view of the current situation of computer network information security, we must take effective measures to prevent trouble [1]. From the source of thought, we should attach importance to the self-protection of information security. Computer network users should have a keen sense of protection, strengthen the study of network information security knowledge, and fully understand the importance and significance of computer network security. Among them Web mining technology is no lack of a good choice.

Pembagian jaringan komputer menggunakan virtual local area network guna mendukung perpustakaan digital

Digital libraries have been widely applied in educational institutions in Indonesia as a complement conventional libraries. The purpose of this research is to know division computer network access at the Adisutjipto Intitute of Technology (STTA) library. The research method used is a qualitative method using Prepare Plan Design Implement Operate and Optimize (PPDIOO). The result research is that people who have internet access will not be able to enter the digital library network. Computer network users who want to access digital libraries must log into the computer network that provides digital books in the library using a Virtual Local Area Network (VLAN). Making this VLAN requires a computer network infrastructure in the form of a Local Area Network (LAN) and computer network equipment in the form of a switch that can be used to configure multiple VLANs in a LAN. Some of the existing services in the library are placed on one VLAN and the digital library is placed on another VLAN. From the test results, it can be seen that between computers that provide services in the library on VLAN 2 cannot communicate via the connecting network to VLAN 1 where the digital library with website based services will be located. This is evidenced by the ping command which generates request time out information. VLANs network in the STTA library have been able to provide support for plans to improve services to members and academicians in the form of a digital library.

CYBER OFFENSE AS A THREAT TO ECONOMIC SECURITY OF UKRAINE

Purpose: the objective factors arising from the specificity of cybercrime, threats and their negative impact on the economic security of the state are considered, criminal offenses in the field of bank payment cards are characterized, features that distinguish cybercrime from other criminal offenses, the definition of «cybercrime» a cyber security system that must be based on certain principles, objects and entities that provide it. Methods: the study was conducted using methods such as analysis, synthesis, comparison. Results: it is concluded that cybercrime poses a threat to Ukraine’s economic security, so measures are taken at the legislative level to prevent and counteract such manifestations. Discussion: cybersecurity issues and prevention of cybercrime in the economic sphere. The widespread use of modern information technology in economic relations puts the solution of problems of economic security of society in the first place. Currently, the number of offenses committed in the industry is increasing in proportion to the number of users of computer networks. Such growth is an inevitable process for both the development of information technology and the improvement of the professionalism of offenders in the sphere of economic relations. In Ukraine, measures are being put in place at the legislative level to ensure cybersecurity in all spheres of society, including in the economic sphere. The manifestations of criminal use of high information technologies in the economic security of society is one of the main directions of counteracting cybercrime in the country. Cybersecurity should be an ongoing process for the activities of relevant government agencies to prevent and counteract cyberspace threats to Ukraine. It should be based on the principles of: the rule of law; ensuring the balance of rights and interests of a person, citizen, state; interaction between government agencies and the public. On the basis of the foregoing, we propose to identify cybercrime in the field of economic security as a system of cybercrime that encroaches on vital public relations in the economic sphere using computer systems and computer technologies.

DESIGN AND IMPLEMENTATION OF VIRTUAL LOCAL AREA NETWORK NETWORK AT PT. EDS MANUFACTURING INDONESIA

The need for information and communication has become a fundamental thing in human life, marked by the increasing human activity that no longer sees the distance and time to communicate with and share information. In 1960, the US Department of Defense conducted research on computer networks. Research carried out is to build a computer network with a method that mimics the workings of the telephone network, where one computer can be connected to other computers, both in one location or area known as a Local Area Network (LAN), and even can be connected to a place or a different country known as a Wide Area Network (WAN). LAN limitations give birth to a VLAN technology that allows for the configuration of a virtualized computer network. The higher the level of demand and the increase in computer network users resulting in broadcasts and traffic on the network itself. The current condition of PT. EDS Manufacturing Indonesia does not yet have a computer network concept that is in line with company needs, computer network activities that occur every day require concepts that are appropriate to the company. Then it is necessary to design a VLAN concept that is expected to provide better results and make it easier for IP Address segmentation to manage broadcast and traffic on a computer network.

Transmission Control Protocol Performance Monitoring for Simulated Wired University Computer Network using OPNET

Computer networks need protocols to govern all transmission and presentation processes. The transmission control protocol (TCP) is one of the most important protocols that have the compatibility to work with all types of computer networks, overcoming all architectural and operating system differences. Nowadays, networks depend on the TCP protocol to control data flow between all types of connected computers, whether it is client or server, over any type of media whether it is wired or wireless networks, for all network topologies. A simulation of a university campus network has been conducted to determine TCP protocol features; those features are taken into consideration as one of the most important network parameters. In all digital networks, the data transmission is not a continuous transmission – instead, it is a discreet transmission, presenting itself as packets. These packets transfer and propagate within the network between computers, and network nodes using the TCP protocol depending on the address, which is embedded in its header. TCP has a great influence on the network speed. The network simulator OPNET provides an easy way of campus design, predicting, and estimating the performance of networks in a university campus environment. In this research, wiredconnections reach all computer network users at fixed points to maintain higher Mbps and ensure reliable communications between all the campus network nodes, as well as to increase the overall network performance taking into account the future expansions for the university campus network design.