Search

Context: In this paper, we study distributed and decentralized systems in which each part is modeled as an agent in a multi-agent system. Those systems provide more scalable and easier ways to control complex, distributed and interconnected systems of embedded components. We are particularly interested in methods to secure these systems. Objectives: This study aims to identify the main security properties studied, the parts of a multi-agent architecture that are considered most often in security studies and the technical solutions used to secure those systems. Methods: We conducted a systematic mapping study on research works addressing the security of multi-agent systems with embedded agents. We identified which security features were addressed, and their roles in global security architecture. Results: We identified 70 papers published in journals and conferences. We classified the extracted data reporting a tendency to focus on securing the availability of systems under attack by means of trust schemes, sometimes supported by cryptographic primitives. Conclusion: The use of cryptography appears to be limited in decentralized systems. However, solutions should be provided to overcome those limits as other solutions such as trust schemes do not protect the system from the same type of attacks.

Artificial Intelligence (AI) is expected to have a revolutionary impact across societies and to create economic displacement and disruption in security and defense. Yet the impact of AI on national security and military affairs has received relatively scant attention. The existing policy-focused literature has concentrated mainly on the technological, ethical or legal limitations of deploying AI and on the risks associated with it. This paper seeks to contribute to the debate by outlining the strategic implications of the weaponization of AI for international security. It explores how and in what ways AI is currently being utilized in the defense sector to enhance offensive and defensive military technologies and operations and assesses the ways in which the incorporation of AI into military platforms will affect war fighting and strategic decision-making. The paper is in four sections. Section one develops a typology of military AI that forms a foundation for the rest of the paper. The second section examines the uses of AI in cyberspace and the relationships between ‘cyber weapons' and AI capabilities. The third section examines how the embeddedness of AI-based capabilities across the land, air, naval and space domains may affect combined arms operations. The final section distills the main strategic implications of weaponized AI, which include the speed of decision-making and action as well as enhanced domain situational awareness.

While States did not reach consensus on the 2017 report by the United Nations Group of Governmental Experts on Developments in the Field of Information and Telecommunications in the Context of International Security (UN GGE), the UN remains a core platform for diplomatic deliberations on international law, norms and principles for responsible state behaviour. At the same time, regional organisations play an increasingly important role in stabilising State relations in cyberspace. Their relevance is also recognised in the new UN GGE mandate for 2019–2021. For the first time, the UN GGE negotiations include a formal way of embracing regional cyber expertise, knowledge and concerns, albeit they are ambivalent about how the envisaged input will be incorporated into the UN GGE process. The paper argues that regional organisations should and are willing to increase their substantial input to the global debates on international cyber stability. Specifically, we analyse the benefits of the work of the Organization for Security and Co-operation in Europe (OSCE), the Organization of American States (OAS) and the Association of Southeast Asian Nations (ASEAN), undertaken in the context of Confidence-Building Measures (CBMs). In addition to global platforms, we see great potential in interregional collaboration. Moreover, the paper points out a number of suggestions which would enhance the inclusion of regional organisations' efforts into UN GGE; and potentially, also into the Open-Ended Working Group (OEWG) negotiations. More effective norm development and CBM implementation can be achieved by carefully assessing the pros and cons of various venues and formats as well as taking advantage of existing synergies between UN initiatives and regional CBM and capacity-building initiatives. Regional organisations have better insights into national or regional priorities; while domestic implementation frameworks may be developed by regional organisations for faster CBM and norm implementation procedures, and possibly allow for additional funding for priority areas. Regional roadmaps should be developed for more effective norm and CBM development, while joint implementation efforts could foster the global uptake of norms. Furthermore, regional organisations may serve as incubators for new ideas and share valuable experience of lessons learned.

Legal discussions about combatting global cyber threats often focus on international cybercrime arrangements or the application of the law of war to cyberspace. While these discussions are vital, policy-makers and scholars have not devoted adequate attention to creating a global legal framework to bolster the defenses of public and private infrastructure. Due to the interconnected nature of cyberspace and the cross-border impacts of attacks, inadequate security in one country could harm another. To build cyber strategies that rely in part on defense and deterrence by denial, governments should also focus both on the security of their systems and those of the private sector. Industry has been the target of some of the most destructive cyberattacks worldwide. Guiding international principles for a cyber security legal framework would help nations to build effective laws that reduce the likelihood of successful attacks, and increase resilience after attacks occur. Moreover, international collaboration on cybersecurity laws provides multinational companies with a more coherent legal framework. A patchwork of hundreds of different international security requirements is not only burdensome for companies, but it increases the potential for vulnerabilities, particularly if the company operates in countries with less stringent cybersecurity requirements. This paper sets out the need for nations to discuss common legal principles for promoting and regulating cybersecurity, similar to the privacy principles articulated in the Organization for Economic Cooperation and Development’s Fair Information Practices in 1980. As a starting point for discussion, this paper suggests four goals of common international principles for cybersecurity law: (1) modernization of cybersecurity laws; (2) uniformity of legal requirements; (3) coordination of cooperative incentives and coercive regulations; and (4) supply chain security. Although cybersecurity laws will always vary, international coordination could improve their efficacy by providing some degree of consistency. A dialogue also could help policy-makers learn from other nations’ cybersecurity successes and failures.

Threats to information security can have great impact on business finances and company's reputation. Traditional methodologies for evaluating the maturity of data centers investigate security parameters to determine the compliance of data centers and international security norms. This paper proposes two innovative evaluation procedures to capture other security perspectives on data center environments: (1) weighted analysis — it weights higher security controls simultaneously present in a higher number of norms; (2) it is sensitive to the importance level that the organization assigns to each security control. Through the proposed methodology, security engineers can identify security issues, characterize the security maturity, and suggest new policies improve security configurations of data centers. This paper also includes a case study to evaluate the benefits of the methodology in real-world scenarios. Results demonstrated that the proposed methodology evaluates higher the security elements more relevant for the company, where as traditional approaches consider all security aspects to be equally important.

Federated cloud networks are formed by federating virtual network segments from different clouds, e.g. in a hybrid cloud, into a single federated network. Such networks should be protected with a global federated cloud network security policy. The availability of network function virtualisation and service function chaining in cloud platforms offers an opportunity for implementing and enforcing global federated cloud network security policies. In this paper we describe an approach for enforcing global security policies in federated cloud networks. The approach relies on a service manifest that specifies the global network security policy. From this manifest configurations of the security functions for the different clouds of the federation are generated. This enables automated deployment and configuration of network security functions across the different clouds. The approach is illustrated with a case study where communications between trusted and untrusted clouds, e.g. public clouds, are encrypted. The paper discusses future work on implementing this architecture for the OpenStack cloud platform with the service function chaining API.

Smart grid is an electricity network to monitor and control all its physical environments of electricity infrastructure in a fully automated way. As the importance of reliable energy utility infrastructure is growing, various security countermeasures to protect power system from security threats have been suggested, whereas there were less consideration on security by design, from the bottom system modeling level. Thus, this paper first highlights the international security standard on network and system management (NSM) requirements suggested from International Electronical Committee (IEC). Then this paper proposes significance of security by design, especially the security object modeling as the most important factor in smart grid environment. In our approach, we propose a common NSM objects for IEC-61850 protocol based substation automation environment. Finally, we present the setup procedures to implement and test NSM objects for IEC 61850-based digital substation in Korean environment.

Individuals in any nation can use this paper as 1. An exploration of international policy issues related to insider threats and other cybersecurity concerns; and 2. A succinct educational guide to practices for stopping insider threats. A framework for international analysis of cybersecurity practices is introduced. Based on its analysis of more than 700 case studies, the CERT® Insider Threat Center recommends 19 best practices for preventing, detecting, and responding to harm from insider threats. This paper summarizes each practice, explains its importance, and provides an international policy perspective on the practice.

Advanced technologies, including pulsed power, play a vital role in preserving domestic and international security while working to counter terrorism. However, technology is not a universal sword and shield against terrorism. Technical countermeasures to terrorist activities must be cost effective and applied with some wisdom about terrorist objectives. The following paper features insightful perspectives on terrorism and terrorist organizations. The role of science and technology, as a tool against terrorism, is also discussed and examples of applied pulsed power technology are presented.

The current world leader in space exploitation, the United States, pursues its national goals in space without a stated military strategy to support those goals through the maintenance of national and international security. While the need for strategy can be dismissed as premature, the vacuum allows the unintentional creation of both strategy and policy through the classified quest for technological capabilities. This paper outlines the basic geopolitical structure in which military space strategy must function. I have included the physics governing space operations, philosophical goals stated by American administrations since the 1950s, tenets governing international relations, and probable military advantages/disadvantages. This paper is meant to stimulate thought for developing reasonable policies and strategies-not to present a "correct" answer. It is also intended to make today's space professionals aware that their technical pursuits may be unwittingly setting the philosophical course for the future.

Critical infrastructures, like airports and hospitals, provide essential services and are considered huge investments in any country. Ensuring the security of these critical infrastructures is a necessity in every possible aspect. These infrastructures, however, currently make use of different technological solutions with distinct security levels, features and knowledge representation formats which often do not communicate directly with each other, leaving the task of processing the global view of the institution's security to the end-users. In order to have a complete view of the current cybersecurity status of a given system, interoperability between these tools must be addressed. Different ontologies have been proposed to deal with subdomains of cybersecurity. Similarly, these fail to provide a full view of cyber and physical security that would be necessary to achieve a global security approach. In this paper, we explore the current status and activities of cybersecurity as a basis for the development process, propose an integrated ontology for combined cyber and physical security. After that, we suggest several evaluation methods to be applied to the resulting ontology in order to check its usefulness in achieving the interoperability goal. The focus will be on the different systems needed for an integrated security of airports.

Companies adopting agile development tend to face challenges in complying with security norms. Existing research either focuses on how to integrate security into agile methods or on discussing compliance issues of agile methods but independently of the regulation type, in particular of security standards. A comprehensive overview of this scattered field is still missing and we know little about how to achieve security compliance in agile software development. Existing secondary studies (mapping studies and literature reviews) analyze publications on secure agile development, but they do not analyze implications of security standard compliance, e.g., integration of specific standard requirements or compliance assessments. To close this gap, we report on a systematic mapping study. Starting with a set of 2,383 papers, our work distills 11 relevant publications addressing security compliance in agile software development. With this study, we contribute by describing the maturity of the field, as well as domains where security compliant agile software engineering was investigated. Moreover, we make explicit which phases of a secure development process are covered by the field and which agile principles are analyzed when aiming at compliance with international security standards, country-specific security regulations, industry-specific security standards, and other well-known security frameworks.

The globalization of terrorism has become a reality that cannot be challenged, a threat to domestic and international security and, implicitly, a phenomenon under the responsibility of the entire international community. Terrorist threats, theaters of operations with explosive traps everywhere, explosive substances with the possibility of explosions, drugs, etc. represent a permanent threat to the civilian population, the victim of any kind of interest. It is a permanent concern of many laboratories in the world to detect of the explosive substances in order to mitigate the risks they generate. This paper presents concerns about detecting explosives using the NQR principle. This is a multiple and selective detection method without being invasive. Instead, it has the disadvantage of the very poor signal response from the substance under detection and further research is being done to improve it. To obtain the best result, the detection method that we approached uses 6 algorithms for determining the presence of an illegal substance is used. In order to reduce the number of false alarms, the algorithms' results are fused and the decision is taken by applying specific weights to each result. This study proposes a genetic algorithm for finding the optimal weights, that is based on a dataset composed of 8000 acquisitions in different conditions. Sodium nitrite is used as the test substance, because it has a piezoelectric response which makes the detection process more difficult in particular situations.

Businesses are becoming increasingly interested in exploiting the Cloud Computing technology. However, Cloud insecurity is still among the main factors that are blocking the full migration towards this paradigm. Increasing security investments will speed up the Cloud adoption process and improve the trustworthiness of the Cloud Service Providers (CSP). Moreover, the integration of the security element into the process of resource allocation will help increase the protection of the deployed services. However, this integration requires suitable modeling of customers' security requirements and CSPs' security offerings. To this end, we propose in this paper a broker-based model for the allocation of resources in the Cloud based on service security satisfaction. The resource allocation problem is modeled as a linear optimization problem and solved using an Evolutionary Computation approach, namely, the Genetic Algorithm (GA). The objective is to maximize the global security satisfaction of users' services by placing them on the data centers that adhere the most to their security requirements. Results show that the GA achieves an acceptable approximation of the optimal solution and is computationally efficient, which makes it suitable to function in online mode and cope with the scalability of the Cloud environment.

Cyber security has long been the focus of international competition, may it be in political and economic theft or military confrontation. The lack of related legal norms and the inability to identify actual network actors led to constant frictions in the cyber security filed in the short-run. To deal with emerging issues of Internet sovereignty in the cyberspace, and base on the spirit of flag state jurisdiction under UNCLOS, this paper proposed to institute a digital network certification system, which provide Internet user to authenticate his/her nationality through systematic practices as a viable solution to settle future international conflicts in the cyberspace.

With the exponential hike in cyber threats, organizations are now striving for better data mining techniques in order to analyze security logs received from their IT infrastructures to ensure effective and automated cyber threat detection. Machine Learning (ML) based analytics for security machine data is the next emerging trend in cyber security, aimed at mining security data to uncover advanced targeted cyber threats actors and minimizing the operational overheads of maintaining static correlation rules. However, selection of optimal machine learning algorithm for security log analytics still remains an impeding factor against the success of data science in cyber security due to the risk of large number of false-positive detections, especially in the case of large-scale or global Security Operations Center (SOC) environments. This fact brings a dire need for an efficient machine learning based cyber threat detection model, capable of minimizing the false detection rates. In this paper, we are proposing optimal machine learning algorithms with their implementation framework based on analytical and empirical evaluations of gathered results, while using various prediction, classification and forecasting algorithms.

Modern life is permeated by software which provides a large attack surface, ranging from generic malware attacks that can be classed as mere nuisance to sophistically created and targeted code touted as a next generation of weapons. Although some research on this broad area of cyber weapons exists, the solicitation of public opinion through surveys is lacking. This paper presents the results of a questionnaire concerning the attitudes and understanding of cyber weapons in relation to international security. The results of the study suggest that there is a statistically significant difference between respondents employed in the 'Military', 'Academia', or 'Other' professions concerning questions of capabilities and the demise of the state-centric model.

We have developed a multi-tiered cloud security framework to facilitate cloud users’ need to match their security requirements with security provisions of cloud service providers (CSPs).Since the launch of Multi-Tiered Cloud Security Singapore standard (MTCS SS584) [1] in Oct 2013, the standard has been harmonized with several international security framework and standards [2] such as Cloud Security Alliance’s Open Certification Framework [3] and ISO/IEC 27001 [4] to enable cross-certification for greater adoption. This paper reports on research that studies the gaps in bridging MTCS and Singapore’s Healthcare IT Security Policy (HITSecP) so that CSPs who have been certified to MTCS, can know how well and best they could meet the security requirements of IT systems for healthcare industry in Singapore.

Information and communication security are one of the most global security issues. As a solution of this problem emerge quantum key distribution, technology that guarantees security by the laws of physics. But without authentication this technology is also subjected to cyberattacks. In this paper physical model for authentication of B92 protocol is proposed and explained. Based on analogy with optical chaotic systems this model gives advanced security in comparison to so far proposed systems.

Over twenty years ago, Arquilla and Ronfeldt warned that both “Netwar” and “Cyberwar” were coming, and could impact the 21st Century security landscape as significantly as combined arms maneuver warfare had impacted the security landscape of the 20th. Since that time, the concept of “Cyberwar” has received great attention, while the parallel concept of “Netwar” has languished, even as its salience to global security has continued to grow. This paper suggests that just as Cyberdefense organizations have been required to confront Cyberwar, Netwar organizations, or Netwar-savvy Cyberdefense organizations, are increasingly needed to counter Netwar. Revisiting the Netwar concepts of the 1990s, it offers a 21st century Netwar definition; examines Netwar from a non-western perspective, exploring intersections between Netwar and Russian concepts of ‘Information-Psychological,’ Chinese United Front Theory, and Chinese Legal Warfare, and concludes with thoughts on unique roles that today's Cyberdefence organizations may play in future Netwar conflict.

In international security, there are many cases of inter-group conflict where violence persists and conflict-oriented policies dominate at the expense of a more mutually beneficial allocation of societal goods. What are the barriers to successful negotiation in such scenarios, and why are conflict management policies difficult to achieve? Most studies of conflict focus on high-level political, economic, or sociological causes, however, psychological influences on decision-making, such as threat and personal motivation, play a large role in impeding conflict resolution or negotiation. In this paper, we analyze the psychological dynamics of threat perception and vested interests on the persistence or desistence of conflict. Threat perception can cause sudden and dramatic shifts in opinion and political choices, an effect which can be further amplified by media reporting. Leaders with a vested personal interest in continued conflict-"spoilers"-can manipulate this phenomenon to derail a peace process. We present a dynamic game theoretic framework of parallel inter-group negotiation and conflict models that incorporates this feedback between threat perception, motivations, leadership decisions, and the success of negotiations, explicitly representing the psychological components of conflict. A prototype implementation is used in empirical simulations to identify cases of conflict persistence and desistence.

In response to increasing number of threats to communication networks and information technology, such as data leakage or forgery, there is serious activity to give cryptographic countermeasures against threats. But even cryptographic solutions may not be properly implemented; therefore security evaluation standards must cover all requirements in order to neutralize threats. Because side-channel attacks are not presently covered by existent international security standards, the Japanese Research Center for Information Security (RCIS) and Tohoku University of Sendai have together developed the Side-channel Attack Standard Evaluation BOard (SASEBO) Project, which is synthetically described by this paper.

The NATO Network-Enabled Capabilities concept (NNEC) enables NATO to maximize the sharing of information and services in a wide variety of missions, characterized by a a-priori uncertainty about the mission service requirements, partner composition and command and control structures. NNEC guidance and principles are well documented in the NNEC framework and the NNEC Body of Knowledge (BoK). Experience and lessons learnt from mission support in Afghanistan's International Security Assistance Force (ISAF) and Libya (Operation Unified Protector OUP) have shown that deploying NNEC capabilities from scratch is complex and time consuming. Therefore, NATO and the Nations have decided to formalize the implementation of NNEC into a flexible, tailor-able and scalable capability known as the Future Mission Network (FMN). The FMN seeks to implement a NNEC-aligned set of network, systems and services, along with the necessary doctrine and processes, to facilitate federation of mission information and supporting capabilities in future operations. This paper will introduce the NATO NNEC framework and Body of Knowledge, its persistent requirements and the associated NNEC operational and technical achievements. Then, the NATO requirements for a Future Mission Network (FMN) are derived, taking into account experience from recent operations and also the NATO transformational vision and political guidance. Finally, the NNEC compliant approach for a NATO Future Mission Network is described, along with the high-level material and non-material solutions to facilitate information sharing in federated environments.

Cloud orchestration involves cloud resources scaling up and down, management, as well as manipulation to better respond user's requests and to facilitate operational objectives of the service providers. These promote the elastic nature of cloud platform but force upon significant challenges to cloud service providers. Particularly, security issues such as inconsistency may arise while dynamic changes such as virtual machine migration occur. In this paper, we propose a formal framework for the specification of virtual machines migration and security policies updates. This framework enables us to verify that the global security policy after the migration is consistently preserved with respect to the initial one. To this end, we define a new calculus, namely cloud calculus that can be used to specify the topology of a cloud computing system and firewall security rules. It also enables specifying the virtual machines migration along with their security policies. The semantics of our calculus is based on structural congruence and a reduction relation. In order to verify the global security policy within the new configuration, we define a testing equivalence over cloud terms. Finally, we provide an illustrative case study to demonstrate the applicability of our approach.

Country risk - the likelihood that a state will weaken or fail - and the methods of assessing it continue to be of serious concern to the international community. Country risk has traditionally been assessed by monitoring economic and financial indicators. However, social media (such as forums, blogs, and websites) are now important transporters of citizens' daily conversations and opinions, and as such may carry discernible indicators of risk, but they have been as yet little-used for this task. The Geopolitical Web project is a research effort with the ultimate goal of developing computational approaches for monitoring public opinion in regions of conflict, assessing country risk indicators in the social media of fragile or weakening states, and correlating these risk signals with commonly accepted quantitative geopolitical risk assessments. This paper presents the initial motivation for this data-driven project, collection procedures adopted, preliminary results of an automated topical analysis of the collection's content, and expected future work. By catching and deciphering possible signals of country risk in social discourse we hope to offer the international community an additional means of assessing the need for intervention in or support for fragile or weakening states.

Public Cloud Computing (PCC) delivers technology "As a Service". It is widely accepted by consumers, enterprises and, even governments because it reduces financial budget for acquiring Information technology (IT) infrastructure. The major deterrence against its adoption is security and governance risks. These risks are associated with three facets, geographical location of cloud provider, change of governance level within cloud service layers and inadequacy of existing international security standards to maintain security. In this paper, these three domains are researched to formulate governance life cycle framework for managing user data security in PCC

Humanity now finds itself faced with a range of highly complex problems - such as climate change, the spread of disease, international security, scientific collaborations, product development, and so on - that call upon us to bring together large numbers of experts and stakeholders to deliberate collectively on a global scale. Collocated meetings can however be impractically expensive, severely limit the concurrency and thus breadth of interaction, and are prone to serious dysfunctions such as polarization and hidden profiles. Social media such as email, blogs, wikis, chat rooms, and web forums provide unprecedented opportunities for interacting on a massive scale, but have yet to realize their potential for helping people deliberate effectively, typically generating poorly-organized, unsystematic and highly redundant contributions of widely varying quality. Large-scale argumentation systems represent a promising approach for addressing these challenges, by virtue of providing a simple systematic structure that radically reduces redundancy and encourages clarity. This paper will address this important question, discussing (1) the strengths and limitations of current deliberation technologies, and (2) how large-scale argumentation can help address these limitations.

Vulnerability discovery is base technology in information system development, product testing and counterinformation. At present, vulnerability discovery already has been turned into the hot spot of the global security researches. There are so many kinds of vulnerability discovery methods. Many vulnerabilities has been found each year. But the frame work of the vulnerability discovery is out of the researchers' sight. By analyzing the characters of the targets of vulnerability discovery, and researching the technological process of discovery process, and recovering the potential connections among each way of discovery. We present at first the architecture of vulnerability discovery technologies which divided into five layers namely, base layer, abstraction layer, discovery layer, analysis layer, and exploitation layer, and also explains in great detail the content, role and key supporting technologies of each layer. At last, this paper gives the outlook and the direction for the future work.

In recent years, web application security has become the primary discussion for security experts, as application attacks are constantly on rise and posing new risks for organizations. Several trends have emerged lately in the attacks launched against web application. The implementation of International security standard is to minimize the security failures and to mitigate their consequences. The aim of this research paper is to study and analyze the various International Standards like ISO-27002, OWASP, COBIT, PCI/DSS and depict the extent of coverage of countermeasures which focus on security of web applications from the perspective of preventing web applications attacks predominantly from Code Injections attacks.

This paper explores the relationships between contextual factors i.e. transparency and regulatory (legal) environments and security concerns (threats, risk, and vulnerabilities) in the financial services industry. The industry is chosen for illustration purposes and for its relevance in global economic development. The research uses a secondary data source, i.e. the 2009 Deloitte Touche Tohmatsu (DTT) global security survey. The analysis found significant relationships between some of the perceptions of security concerns and the aforementioned contextual factors. The uncovered variations suggest that security concerns vary among Global Financial Services Institutions (GFSI) respondents across the different regions/countries of the world. This fact is at odds with the belief in the industry suggesting that entities in the financial services comply with similar standards and practices. This study highlights the relevance of regulatory and transparency environments in the assessment of security concerns in the financial services industry. Corporate managers may benefit from the information provided in the research. This particular effort also complements prior studies examining the nexus between contextual factors and security concerns.

This paper presents a medium attack to current shareable interface object mechanism. This method can invoke the shareable interface service functions without triggering the security checks in the Applet. Then a trust model is used to clarify the relationship of the inter-applet shareable objects. According to the constraint of trust transfer we infer that a global security policy of card is necessary to prevent the unauthorized information flow in addition to the applet level access controls. Finally we design an implementation of the global security mechanism based on the security domain in the card.

This paper describes the role of the IEEE Global Education for Microelectronic Systems Initiative (I-GEMS) and its role in the nascent discipline of global security engineering and critical embedded systems engineering. Design for globalization defines the process for developing critical embedded systems in the global era. Our work specializes in systems that perform key monitoring and control functions for critical infrastructure and other applications that demand high levels of reliability.

International audience; In military missions in hostile environments involving teams of UAVs flying in formation, it is important to get the maximum benefits of the auto-protection systems of each aircraft to enhance the global security and efficiency of the team. One way to achieve this is to select a proper configuration for the formation. In this paper, we present an approach to autonomously adapt the configuration of a formation and we focus on its evaluation within a realistic framework where each UAV is simulated independently and communicate through a network.

Internet and information and communication technologies (ICTs) have contributed to the emergence of a new type of collaboration networks which is virtual organizations (VOs). VOs allow organizations to share and exchange resources and competencies for economical or educational purposes. Within VOs, each organization must open its information system; thus security concerns are raised to setup collaboration means. An information security policy is defined on the VO level. It must be consistent and be part of the global ISMS modelled and implemented according to the directives of international security standards. In this paper, we evaluate a proposal access control architecture for VOs using our maturity level tool based on the ISO/IEC 17799 international security standard.

In light of the fast propagation of recent Internet worms, human intervention in securing the Internet during worm outbreaks is of little significance. In order to reduce the damage worms may cause, existing intrusion detection systems (IDSs) need to be adaptive to the security-related requirements of their monitoring networks. This paper presents a Multilevel security based Autonomic Parameter Selector (MAPS) that can be implemented over any existing IDSs. The deployment architecture consists of a number of hierarchically placed local security managers, metropolitan security managers, and a global security manager. These security managers report events to a worm advisory system (WAS). WAS accordingly sets the threat level of the network. Based on this level, MAPS selects the most optimum parameters for the entire IDS to combat against the propagating worm. The MAPS architecture maintains the system performance by constantly evaluating three metrics, namely False Negative Avoidance, False Positive Avoidance, and performance overhead. Extensive experiments, using real network traffic and a recently proposed worm detection system, demonstrate that MAPS is capable of advising an IDS with optimum parameter values to effectively and promptly hinder further propagation of worms.

This paper explains how ConocoPhillips Venezuela adapted existing methodology to respond Venezuelan and international security regulations by completing an innovative security vulnerability assessment (SVA) of planned offshore facilities and activities in the Gulf of Paria, northeastern Venezuela. Following the discovery of offshore oil resources in the Gulf of Paria, northeastern Venezuela in 1999, ConocoPhillips and its partners began planning operations that will include offshore platforms, an offshore processing facility, a floating storage offtake, as well as interconnecting pipelines. Supporting these operations there will be inter-modal ports and commercial vessel traffic, including Venezuelan and internationally-flagged vessels. The Gulf of Paria presents a unique geographical setting and a complex socio-cultural environment. It is remote, isolated, and harbors high levels of aquatic biodiversity that support significant fishing activities. As signatory to the International Maritime Organization (IMO) Safety of Life at Sea, Venezuela - and the United States Marine Transportation and Security Act - are placing new security planning and preparedness requirements on oil and gas exploration and production facilities such as those proposed by ConocoPhillips. Qualifying facilities will need to have completed Security Vulnerability Assessments and considered security in their operations. However, there are currently no comprehensive SVA guidelines that companies can use to evaluate their onshore and/or offshore facilities. Furthermore, guidelines focus on security threats to existing facilities; and do not adequately address security concerns stemming from environmental and socio-economic complexities faced by many Companies worldwide. To assure successful and sustainable operations in this complex region, ConocoPhillips decided to evaluate, prioritize and mitigate for potential vulnerabilities and risks posed to their future facilities and operations based on the specific geographic, environmental and socio-cultural realities of the region. In late 2003 and early 2004, ConocoPhillips conducted an SVA meeting international and Venezuelan requirements, based on IMO and the U.S. Coast Guard standards. However, certain modifications to the methodology were needed. Results of the assessment addressed a wide range of security threats (natural and man made, accidental and deliberate) and proposed recommendations for improvements that are being used to make changes in the final offshore infrastructure, operational and/or procedural design. The SVA completed by ConocoPhillips is consistent with the Company s sustainable development approach in the region. It represents a first step in the process of identifying, planning, reviewing and continuously improving system-wide and facility-specific security measures to protect people, assets and the marine environment in the Gulf of Paria.

The upheaval in world geopolitical structure is changing the nature of international security and the nature of possible future conflicts. A review of the character of these future conflicts points to new critical roles for military radars. The paper assesses the nature of future conflicts and identifies certain critical radar systems and technology that are the keystone to winning these conflicts. The author concentrates on radars in unmanned air vehicles.

The AFSAB was tasked to examine the evolution of existing air and space forces into an integrated force that best exploits the unique attributes of both media to meet national security objectives in the decades ahead. Aerospace forces will be called upon to provide global, precisely calibrated, near-real time applications of both lethal and nonlethal effects. The emerging vision of US military superiority through information dominance relies heavily on the ability to gather, analyze, disseminate and act upon information more quickly and effectively than an adversary. The study examined a range of alternatives for future space assets and functions based on executing the military tasks likely to be encountered in the emerging global security arena. This paper presents an overview of the study report. Findings and recommendations cover a very wide range of subjects dealing with enhanced capabilities, improved operational efficiency and affordability, and associated programmatic and investment concerns. Among the topics discussed are migration of additional information gathering (sensor) functions to orbit; robust, high capacity connectivity; energy projection; lift systems and launch ranges; system protection; and the ability to analyze and demonstrate the military worth of space. The study concluded that significant new investments are required, but that efficiencies in existing systems and operations are available that would, if exploited, substantially offset the funding requirements.

Capacity, availability or resilience of clouds can be increased by interconnecting two or more cloud computing environments to form a cloud federation and share resources. Shared resources include compute and storage resources but also networking resources. By integrating software defined networks/ virtual networks (SDN), network function virtualization (NFV) and network function chaining (SFC) technologies into cloud management platforms it is possible to create more advanced and flexible cloud federation mechanisms. In this paper we show how to secure federated cloud networks and how to customise the security of each individual federated cloud network running in a cloud federation. We propose an architecture for securing federated cloud networks by enforcing a global security policy to all network segments of a federation, and local security policies on each network of the federation. Cloud stakeholders can specify the required security virtual network functions (VNF), how to configure them, and how to chain them in a service manifest. The proposed architecture is illustrated with a deep packet inspection case study. Future work on implementing the proposed architecture in an OpenStack federation is briefly discussed.