Various Types Of Threats Research Articles

EXAMINATION OF MODERN CONCEPTS FOR FIREWALLS AND COLLABORATIVE INTRUSION DETECTION

Background. Modern firewall systems are compared to classical concepts. The filtering rules are analyzed on the examples of the leading solutions (presented by Gartner Inc.). The collaborative intrusion detection systems and networks as well as the threats based on the insider attacks on CIDN are examined. A common CIDN functionality catalogue is discussed. The aspects of the application of modern systems of network intrusion detection and prevention by the peculiarities of their implementation at different levels are considered in accordance with the model of ISO/OSI. Brief recommendations on the use of known network security solutions in the construction of modern infocommunication networks to overcome various types of threats, in particular DoS type, virus and social engineering, are given. Objective. The aim of the paper is to study the implementation and application of modern concepts of firewalls and collaborative network intrusion detection systems. Methods. The research was carried out based on analysis of a large number of literary sources, the theory of building information security systems and avenues of manufacturers of systems for detecting and preventing network intrusion. Results. The advanced firewalls like SMLIF, IPS, the collaborative intrusion detection systems gain in importance increasingly nowadays. They can be also deployed within the scenarios of NFC and IoT (Internet of Things). The FW and IDS are often combined into individual participating peers (LAN, WLAN, 2G-4G, NFC and Bluetooth) with possibility of collaboration and better prevention of both external and insider attacks. Conclusions. The conducted research indicates the need to improve the implementation of modern network architecture with the use of integrated systems for detecting and counteracting network attacks. Despite the wide variety of network security solutions, this area of research remains relevant and suggests that the development of new concepts for protecting network architectures meets the current state of the industry, is timely and relevant, given the wide range of capabilities and scenarios for malicious intrusions and network system impacts. Keywords: firewall; network attacks; intrusion detection systems; intrusion prevention systems; CIDN.

Analysis and Risk Evaluation on the Case of Alteration, Revitalization and Conversion of a Historic Building in Gdańsk

Each investment plan, including the one concerning a building, is exposed to the consequences of various types of threats taking place. Therefore, in the case of some large-scale, atypical and complicated building ventures, some actions included in the procedure of risk management should be taken (identifications, analysis, measurements, control and supervision of the risk). This will allow for the risk to be eliminated or limited. While preparing a building venture, an investor does not possess full information about the course of events on each stage of investment completion. The identification of the above-mentioned unknowns, subjecting them to quantification and specifying the method of dealing with them, allows an investor to increase the effectiveness of the intended plan. The enterprise discussed in this article and analyzed in the context of risk, concerns alteration, revitalization and conversion for office purposes of two buildings located in Gdańsk at 1 and 2 Lastadia Street. These buildings are situated on the area of historical urban layout of Gdańsk, in the northern-eastern part of Stare Przedmieście District (Old Suburb), about 800 meters south from Dlugi Targ Street and 200 meters west from The Old Motława River. The investor is “Gdańskie Melioracje Ltd.”, a limited liability company, which belongs to the Council of Gdańsk. In order to increase the effectiveness of the intended investment venture, while organizing the investment process, the investor commissioned preparation of an analysis and risk evaluation connected with the above-mentioned intention. Based on an on-site visit, the opinions of experts, who have been involved in the process of the preparation of the investment, studies of the available monographies about the technical condition of the buildings at 1 and 2 Lastadia Street and their own experiences, the authors identified 54 types of relevant risks, which have been systematized into 10 subject groups (among others- investor’s risk due to the designing process, location of the investment, third party or investor business activity, force majeure, political, legal, financial, technical). The scope of the study includes the identification, analysis and risk evaluation connected with planning and completion of alteration, revitalization and conversion of a historic building located at 2 Lastadia Street for the office purposes. The risk has been analyzed from the investor’s perspective. The authors used a method of preliminary analysis and risk evaluation PHA (Preliminary Hazard Analysis) and the expert method.

Оценка степени влияния сопутствующих факторов на показатели информационной безопасности

The paper considers the problem of improving the reliability of estimates of indicators providing information-without danger on the basis of constructing cognitive models related factors are associated with the process of formation and development of various types of information security threats. There are new types of assessments of safety performance to ensure a certain guaranteed level of the range of possible values of the index, which provides a more responsive and more accurate assessment of safety performance. Formed procedure for constructing cognitive models related factors, as well as evaluation of safety performance based on the cognitive model built. This procedure is demonstrated by a specific example. Problem analysis of the level of information security is an important component of the problem and ensure even improve the functioning of the object of protection. However, existing methods of assessing the safety level often rely on the use of expert methods for direct assessment of information security indicators that have relatively less complex objects and data systems makes it quite rough estimates due to the availability of a sufficiently large number of uncertain and random factors. Here to solve the problem of improvement of quality evaluation is proposed to clarify the process of formation of various types of threats on the basis of the construction of cognitive models describing the dependence of the considered threats to a variety of factors that can have a significant effect on the consideration of information without the threat-risk.

The Project of Intellectual Multimodal Transport System

The article present ways to design and develop intelligent multi-modal transport system capable of improving the safety of citizens, society and the state, protect their interests from the various types of threats. Its architecture is described herein which ensures implementation of main functional elements, strategic model of the telecommunication subsystem of the motor transport mode (as a component of the intellectual transport system). Architecture of the road subsystem to manage the intellectual multimodal transport system is described in detail. Its design and implementation are able to improve functional efficiency, general service quality, level of ensured safety and environmental functioning of both the Russian and international transport systems.

Intrusion Detection System to Overcome a Novel Form of Replay Attack (Data Replay) in Wireless Sensor Networks

Wireless Sensor Networks (WSNs) are widely and successfully employed in various application domains. They are easily deployed to collect valuable information and monitor potential environmental phenomena. However, the special nature of WSNs as well as their severe constraints and resource limitations make them vulnerable to various types of threats. Replay attack, is one example. According to this attack, the adversary intercepts and replays several times the same (old) message leading either to missed alerts or to false alerts. Many solutions have been proposed to mitigate message replay attack. However, all these solutions are of cryptographic natures and consider only external attacks exercising a trivial scenario of replay attack. In fact, the attacker could be a lot smarter, and in this case, it replays only the data field in the message while keeping the remaining fields updated. This novel form of replay attack is much more dangerous and difficult to be detected. We call this attack variant by data replay attack. As sensor nodes may be easily captured and compromised, the worst scenario occurs if data replay attack is performed by an internal intruder. In this paper we propose an efficient intrusion detection framework to overcome data replay attack in WSNs. The proposed intrusion detection system is named DR-IDS (Data Replay Intrusion Detection System). The performance evaluations performed under NS2 simulator show that the proposed solution is sufficiently robust.

자동링크복구 기능에 따른 네트워크 비용분석

통신, 교통, 전력 및 물 공급 시스템과 같은 사회 인프라 시스템은 이제 구성 요소 장애, 보안 공격과 자연 재해 등을 포함하여 다양한 종류의 위협에 직면하고 있다. 이러한 바람직하지 못한 사건이 발생할 때마다, 사회 기반의 기능정지시간이 사회에 치명적인 결과를초래하기 때문에 가능한 한 빨리 시스템을 복구하는 것이 중요하다. 특히 네트워크상에서의 장애가 발생했을 때, 링크 장애를 자동적으로 복구해야 그 피해를 최소화 할 수 있다. 또한 네트워크 장애시 고객이 인식하기 전에 서비스가 복구 될 수 있게 하면 그 효과는 더 클 것이다. 본 논문에서는 네트워크에서의 자동복구성과 비용사이의 관계를 분석한다. The Social infrastructure systems such as communication, transportation, power and water supply systems are now facing various types of threats including component failures, security attacks and natural disasters, etc. Whenever such undesirable events occur, it is crucial to recover the system as quickly as possible because the downtime of social infrastructure causes catastrophic consequences in the society. Especially when there is a network link-failure, we need an automatic link-recovery method. This means that customers are aware of network failures that can be recovered before you say that service. In this paper, we analysis the relation between Auto-recovery performance and cost.

Video surveillance system based on a scalable application-oriented architecture

Nowadays, colossal numbers of facilities all over the world are protected from various types of threats by video surveillance cameras. Video surveillance systems are in urgent and increasing demand to ensure people, things and places security. These networks represent a huge amount of video to be transmitted, viewed and analyzed. However, current surveillance methodologies become increasingly ineffective as the number of cameras grows. To remedy this issue, we propose appending a pre-analysis stage to the video surveillance system. This stage extracts, compresses and sends only the information of interest from the captured video data. Through this paper, scalability, which has always been treated as a processing tool in video surveillance, is handled otherwise to generate more efficient and adaptable video surveillance systems. The pre-analysis phase works in a scalable way. It narrows down the analyzed data by extracting just the useful information depending on the final desired application. The originality of this work lies in the combination of the pre-analysis and the scalability to generate a progressive scalable video surveillance architecture responding to the end user needed application. The principal contributions mentioned in this paper are: i) A framework for a scalable application-oriented architecture for video surveillance systems; ii) A region of interest simplification method aiming to filter in a spatio-temporal way the captured data; iii) A region of interest modeling technique which simplifies the moving objects' representation in the image plane. The evaluation step shows promising results and demonstrates the effectiveness of the suggested architecture.

Opinions Regarding The New Challenges To The Critical Infrastructures

Abstract In Romania, the protection of critical infrastructure is seen as a dynamic process, with a variable geometry, which requires constant reporting to the various types of threats of the external environment: terrorism, organized crime, illegal migration, border insecurity, etc. For this reason, any process of designing/redesigning the concept of national critical infrastructure protection should relate to the complexity and the fluidity of the present international security environment and the fundamental reason of any initiative regarding this process is enhancing the status of “vector of stability” at the Eastern border of the European Union and NATO, considering that many of the transnational threats facing Europe originate from this area.

The Multi-agent Simulation-based Framework for Optimization of Detectors Layout in Public Crowded Places

In this work the framework for detectors layout optimization based on a multi-agent simulation is proposed. Its main intention is to provide a decision support team with a tool for automatic design of social threat detection systems for public crowded places. Containing a number of distributed detectors, this system performs detection and an identification of threat carriers. The generic model of detector used in the framework allows to consider detection of various types of threats, e.g. infections, explosives, drugs, radiation. The underlying agent-based models provide data on social mobility, which is used along with a probability based quality assessment model within the optimization process. The implemented multi-criteria optimization scheme is based on a genetic algorithm. For experimental study the framework has been applied in order to get the optimal detectors’ layout in Pulkovo airport.

Żandarmeria Wojskowa – oddziały służące zapewnianiu bezpieczeństwa i porządku publicznego w Polsce i Unii Europejskiej

There are many threats to national security today. Some of them are the negative aspects of globalisation. Increasing crime in many areas (as the results of social, economic and political consequences of terrorist acts, the excessive influx of illegal immigrants – often from other cultures and civilisations), as well as threats to personal safety have forced governments to search for new methods and tools to combat and prevent various types of threats – within the area of a single country and the entirety of the EU. Given its geographical position in Europe, Poland participates naturally in a number of supranational economic, political and military structures. Preventing threats has forced institutions today to become involved in securing safety across many fields of cooperation. The inability to accurately identify security threats requires advance planning, flexibility, responsiveness and a comprehensive approach to security and defense. This includes taking various initiatives using allied and multinational militaries and non-military solutions in response to contemporary threats. Both the Polish and European Gendarmerie Forces belong to a branch of special police constituted only by elements of police forces with military status in order to perform all police tasks within the scope of crisis management operations.

Classification of Security Threats in Information Systems

Information systems are frequently exposed to various types of threats which can cause different types of damages that might lead to significant financial losses. Information security damages can range from small losses to entire information system destruction. The effects of various threats vary considerably: some affect the confidentiality or integrity of data while others affect the availability of a system. Currently, organizations are struggling to understand what the threats to their information assets are and how to obtain the necessary means to combat them which continues to pose a challenge. To improve our understanding of security threats, we propose a security threat classification model which allows us to study the threats class impact instead of a threat impact as a threat varies over time. This paper addresses different criteria of information system security risks classification and gives a review of most threats classification models. We define a hybrid model for information system security threat classification in order to propose a classification architecture that supports all threat classification principles and helps organizations implement their information security strategies.

Comprehensive Laboratory Evaluation of a Highly Specific Lateral Flow Assay for the Presumptive Identification of Ricin in Suspicious White Powders and Environmental Samples

Ricin, a heterodimeric toxin that is present in the seeds of the Ricinus communis plant, is the biothreat agent most frequently encountered by law enforcement agencies in the United States. Even in untrained hands, the easily obtainable seeds can yield a highly toxic product that has been used in various types of threats, including "white-powder" letters. Although the vast majority of these threats are hoaxes, an impediment to accurate hazard assessments by first responders is the unreliability of rapid detection assays for ricin, such as lateral flow assays (LFAs). One of the complicating factors associated with LFAs is the incorporation of antibodies of poor specificity that cross-react with near-neighbors or with plant lectins that are capable of nonspecifically cross-linking the capture and detector antibodies. Because of the compelling and critical need to promote the interests of public safety and public health, the Department of Homeland Security conducted a comprehensive laboratory evaluation study of a commercial LFA for the rapid detection of ricin. This study was conducted using comprehensive inclusivity and exclusivity panels of ricin and near-neighbor plant materials, along with panels of lectins and "white-powders," to determine the specificity, sensitivity, limits of detection, dynamic range, and repeatability of the assay for the specific intended use of evaluating suspicious white powders and environmental samples in the field.

A Novel Digital Watermarking Algorithm using Random Matrix Image

The availability of bandwidth for internet access is sufficient enough to communicate digital assets. These digital assets are subjected to various types of threats. [19] As a result of this, protection mechanism required for the protection of digital assets is of priority in research. The threat of current focus is unauthorized copying of digital assets which give boost to piracy. This under the copyright act is illegal and a robust mechanism is required to curb this kind of unauthorized copy. To safeguard the copyright digital assets, a robust digital watermarking technique is needed. The existing digital watermarking techniques protect digital assets by embedding a digital watermark into a host digital image. This embedding does induce slight distortion in the host image but the distortion is usually too small to be noticed. At the same time the embedded watermark must be robust enough to with stand deliberate attacks. There are various techniques of digital watermarking but researchers are making constant efforts to increase the robustness of the watermark image. The layered approach of watermarking based on Huffman coding [5] can soon increase the robustness of digital watermark.[11] Ultimately, increasing the security of copyright of protection. The proposed work is in similar direction where in RMI (Random Matrix Image) is used in place of Huffman coding. This innovative algorithm has considerably increased the robustness in digital watermark while also enhancing security of production

Current status of Marsh Crocodiles Crocodylus palustris (Reptilia: Crocodylidae) in Vishwamitri River, Vadodara City, Gujarat, India

Data presented here is based on a three year study (2008-2010) on a population of Mugger Crocodylus palustris inhabiting Vishwamitri River near Vadodara City, Gujarat State, India. In total, 155 Muggers were counted in the 25km river stretch during 2010. In all, 40 burrows were observed along the river bank, and the same were clumped in certain sections of the river. Muggers fed eight species of birds, and domestic livestock in addition to scavenging. Eight instances of human-crocodile conflicts were observed including four human causalities. A total 90 Muggers were rescued from the urban areas and the same were relocated elsewhere in the river system. Various types of threats to Mugger were also noticed including habitat loss, alteration and soil erosion and mortality due to rail traffic. The present study suggests further research to propose strategies to conserve this population.

The Ideological Effects of Framing Threat on Immigration and Civil Liberties

Assuming that migration threat is multi-dimensional, this article seeks to investigate how various types of threats associated with immigration affect attitudes towards immigration and civil liberties. Through experimentation, the study unpacks the ‘securitization of migration’ discourse by disaggregating the nature of immigration threat, and its impact on policy positions and ideological patterns at the individual level. Based on framing and attitudinal analysis, we argue that physical security in distinction from cultural insecurity is enough to generate important ideological variations stemming from strategic input (such as framing and issue-linkage). We expect then that as immigration shifts from a cultural to a physical threat, immigration issues may become more politically salient but less politicized and subject to consensus. Interestingly, however, the findings reveal that the effects of threat framing are not ubiquitous, and may be conditional upon ideology. Liberals were much more susceptible to the frames than were conservatives. Potential explanations for the ideological effects of framing, as well as their implications, are explored.

Security threats categories in healthcare information systems

This article attempts to investigate the various types of threats that exist in healthcare information systems (HIS). A study has been carried out in one of the government-supported hospitals in Malaysia.The hospital has been equipped with a Total Hospital Information System (THIS). The data collected were from three different departments, namely the Information Technology Department (ITD), the Medical Record Department (MRD), and the X-Ray Department, using in-depth structured interviews. The study identified 22 types of threats according to major threat categories based on ISO/IEC 27002 (ISO 27799:2008). The results show that the most critical threat for the THIS is power failure followed by acts of human error or failure and other technological factors. This research holds significant value in terms of providing a complete taxonomy of threat categories in HIS and also an important component in the risk analysis stage.

The 12-Month Prevalence of Patient-Initiated Aggression against Psychiatrists: A New Zealand National Survey

We surveyed the prevalence of various types of threats or assaults by patients against psychiatrists and determined the impact of the most distressing event. An anonymous questionnaire was mailed to all 308 vocationally registered psychiatrists practicing in New Zealand. A response rate of 63.9% (n = 197) was obtained. In the preceding 12 months, as many as 46% (n = 89) of respondents had been verbally threatened and 39% (n = 76) had been physically intimidated by patients. In addition 16% (n = 32) had been assaulted without requiring medical attention, 14% (n = 27) had been harassed through formal complaint mechanisms, 10% (n = 20) had been sexually harassed, and 5% (n = 9) had been stalked. As indicated by responses on the Impact of Event Scale, only one-third of the psychiatrists had any symptoms related to the most distressing event and only two had symptoms that might be associated with clinically significant levels of distress. The prevalence of these events suggest a need for the development and evaluation of preventive interventions.

Personality traits and concern for privacy: an empirical study in the context of location-based services

For more than a century, concern for privacy (CFP) has co-evolved with advances in information technology. The CFP refers to the anxious sense of interest that a person has because of various types of threats to the person's state of being free from intrusion. Research studies have validated this concept and identified its consequences. For example, research has shown that the CFP can have a negative influence on the adoption of information technology; but little is known about factors likely to influence such concern. This paper attempts to fill that gap. Because privacy is said to be a part of a more general ‘right to one's personality’, we consider the so-called ‘Big Five’ personality traits (agreeableness, extraversion, emotional stability, openness to experience, and conscientiousness) as factors that can influence privacy concerns. Protection motivation theory helps us to explain this influence in the context of an emerging pervasive technology: location-based services. Using a survey-based approach, we find that agreeableness, conscientiousness, and openness to experience each affect the CFP. These results have implications for the adoption, the design, and the marketing of highly personalized new technologies.

Chemical and radiological vulnerability assessment in urban areas

Cities and towns are faced with various types of threat from the extraordinary events involving chemical and radiological materials as exemplified by major chemical accidents, radiological incidents, fires, explosions, traffic accidents, terrorist attacks, etc. On the other hand, many sensitive or vulnerable assets exist within cities, such as: settlements, infrastructures, hospitals, schools, churches, businesses, government, and others. Besides emergency planning, the land use planning also represents an important tool for prevention or reduction of damages on people and other assets due to unwanted events. This paper considers development of method for inclusion vulnerability assessment in land use planning with objective to assess and limit the consequences in cities of likely accidents involving hazardous materials. We made preliminary assessment of criticality and vulnerability of the assets within Belgrade city area in respect to chemical sites and transportation roads that can be exposed to chemical accidents, or terrorist attacks.

Moore's law in homeland defense: an integrated sensor platform based on silicon microcantilevers

An urgent need exists for the development of inexpensive, highly selective, and extremely sensitive sensors to help combat terrorism. If such sensors can be made miniature, they could be deployed in virtually any situation. Terrorists have a wide variety of potential agents and delivery means to choose from for chemical, biological, radiological, or explosive attacks. Detecting terrorist weapons has become a complex and expensive endeavor, because a multitude of sensor platforms is currently needed to detect the various types of threats. The ability to mass produce and cost effectively deploy a single type of sensor that can detect a wide range of threats is essential in winning the war on terrorism. Silicon-based microelectromechanical sensors (MEMS) represent an ideal sensor platform for combating terrorism because these miniature sensors are inexpensive and can be deployed almost anywhere. Recently, the high sensitivity of MEMS-based microcantilever sensors has been demonstrated in the detection of a variety of threats. Therefore, the critical requirements for a single, miniature sensor platform have been met and the realization of an integrated, widely deployable MEMS sensor could be near.