Search

Robust data privacy regulations hinder the exchange of healthcare data among institutions, crucial for global insights and developing generalised clinical models. Federated learning (FL) is ideal for training global models using datasets from different institutions without compromising privacy. However, disparities in electronic healthcare records (EHRs) lead to inconsistencies in ML-ready data views, making FL challenging without extensive preprocessing and information loss. These differences arise from variations in services, care standards, and record-keeping practices. This paper addresses data view heterogeneity by introducing a knowledge abstraction and filtering-based FL framework that allows FL over heterogeneous data views without manual alignment or information loss. The knowledge abstraction and filtering mechanism maps raw input representations to a unified, semantically rich shared space for effective global model training. Experiments on three healthcare datasets demonstrate the framework's effectiveness in overcoming data view heterogeneity and facilitating information sharing in a federated setup. [ABSTRACT FROM AUTHOR]

We investigate a continuous review inventory queuing system in the present study that has two heterogeneous servers: Server-2, which is reliable, and Server-1, which is unreliable. An exponentially distributed random time is used to describe the repair process when server-1 has an interruption. On the other hand, server-2 is completely dependable, but it goes on vacation when the system is empty. These two goods can be reordered under ordering regulations. To ensure customer satisfaction, an emergency replenishment of one item with no lead time occurs when the on-hand inventory level falls to zero. We use the matrix analytic approach for the QBD process under a steady-state probability vector. We also take into account the overall cost and the busy time. Furthermore, numerical data shows the benefits of the suggested approach in a range of random circumstances. [ABSTRACT FROM AUTHOR]

In this article, a working vacation policy-based on bulk arrival feedback retrial queueing system with variable server capacity has been analyzed. The server can serve a minimum of one customer and a maximum of B customers in a batch in accordance with the variable server capacity bulk service rule. As soon as the orbit becomes empty at the time of service completion, the server goes for a working vacation. The server works at a lower speed during a working vacation period. In addition, the steady state probability generating function for system size and orbit size is generated by incorporating the supplementary variables technique (SVT). Further, the conditional decomposition law is shown for this retrial queueing system. Moreover, system performance metrics, and significant special instances are discussed. Finally, the effects of various parameters on the system performance are analyzed numerically. [ABSTRACT FROM AUTHOR]

This paper introduces an advanced trash bin fill ratio detection system, addressing the challenges of municipal solid waste management. Utilising the ESP32 CAM module, the system captures and transmits bin images via the ESP MESH protocol, enhancing waste management efficiency. The hardware relies on sustainable energy sources, including a photovoltaic cell and LiPo battery, ensuring continuous operation. On the software front, a client-server architecture is employed. The client-side captures images, while the server-side processes these images using a Python script and SQL database to determine bin fill levels. This innovative approach offers a scalable, cost-effective solution for improving urban waste collection and management. [ABSTRACT FROM AUTHOR]

In this paper, we introduce the first generic framework of policy-based remote user authentication from multiple biometrics. The proposed framework allows an authorized user to remotely authenticate herself to an authentication server using her multiple biometrics, which enhances both the security and usability of user authentications. The authentication server approves a user's authentication request if and only if the user's multiple biometrics satisfies an authentication policy. In particular, the authentication policy can be dynamically updated to satisfy different security and usability requirements in practice. We implement an instantiation of the proposed framework and report its performance under various authentication policies. [ABSTRACT FROM AUTHOR]

The study is devoted to the organization of data transmission channel protection in software with a client-server architecture. In today's information environment, where data exchange takes place over the network, ensuring security becomes a critical task. The effectiveness of the data channel protection method in a client-server architecture program was developed and evaluated. A method has been developed that ensures encryption of messages from interception and data modification and prevents modification of the client software and abuse during its use. [ABSTRACT FROM AUTHOR]

The ever-growing deluge of astronomical data challenges traditional server-based processing, hindering real-time analysis and scientific discovery. This paper proposes a novel approach: edge computing directly on an sCMOS camera using a System-on-Chip (SoC) architecture currently developed at Creotech Instruments. We present a custom-designed camera equipped with an FPGA-based SoC, enabling on-board preprocessing and feature extraction of astronomical images. This significantly reduces data transmission, minimizes latency, and empowers real-time decision-making for critical observations. We showcase the camera's capabilities through real-world scenarios, demonstrating its usability in astronomy. [ABSTRACT FROM AUTHOR]

Copyright of International Journal of Engineering Transactions B: Applications is the property of International Journal of Engineering (IJE) and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Federated learning (FL) is an emerging paradigm for decentralized training of machine learning models on distributed clients, without revealing the data to the central server. The learning scheme may be horizontal, vertical or hybrid (both vertical and horizontal). Most existing research work with deep neural network (DNN) modeling is focused on horizontal data distributions, while vertical and hybrid schemes are much less studied. In this paper, we propose a generalized algorithm FedEmb, for modeling vertical and hybrid DNN-based learning. The idea of our algorithm is characterized by higher inference accuracy, stronger privacy-preserving properties, and lower client-server communication bandwidth demands as compared with existing work. The experimental results show that FedEmb is an effective method to tackle both split feature & subject space decentralized problems. To be specific, there are 0.3% to 4.2% improvement on inference accuracy and 88.9 % time complexity reduction over baseline method. [ABSTRACT FROM AUTHOR]

In recent times, the advent of innovative technological paradigms like the Internet of Things has paved the way for numerous applications that enhance the quality of human life. A remarkable application of IoT that has emerged is the Internet of Vehicles (IoV), motivated by an unparalleled surge of connected vehicles on the roads. IoV has become an area of significant interest due to its potential in enhancing traffic safety as well as providing accurate routing information. The primary objective of IoV is to maintain strict latency standards while ensuring confidentiality and security. Given the high mobility and limited bandwidth, vehicles need to have rapid and frequent authentication. Securing Vehicle-to-Roadside unit (V2R) and Vehicle-to-Vehicle (V2V) communications in IoV is essential for preventing critical information leakage to an adversary or unauthenticated users. To address these challenges, this paper proposes a novel mutual authentication protocol which incorporates hardware-based security primitives, namely physically unclonable functions (PUFs) with Multi-Input Multi-Output (MIMO) physical layer communications. The protocol allows a V2V and V2R to mutually authenticate each other without the involvement of a trusted third-party (server). The protocol design effectively mitigates modeling attacks and impersonation attempts, where the accuracy of predicting the value of each PUF response bit does not exceed 54%, which is equivalent to a random guess. [ABSTRACT FROM AUTHOR]

There is still a deficiency in the field of closedloop wireless control systems in terms of full real-time implementation and actualization. This paper explores the architecture, design, and implementation of Wireless Networked Control Systems (WNCS), emphasizing their operational problems. In particular, it investigates the implementation of an XBee platform-enabled Wireless Networked Control System to control an Electrostatic Precipitator (ESP) model using PC connection. The architecture of this control system is client-server. A realworld case study about the planning, creation, and implementation of a wireless monitoring control system for ESP is carefully scrutinized and assessed. The True time 1.5 simulator is used to illustrate simulation results, which provide insight into how different system factors affect overall performance and stability. The article also highlights how to use Matlab and Simulink capabilities to improve ZigBee network utilization for comprehensive feedback WNCS. [ABSTRACT FROM AUTHOR]

The article presents the conceptualization, development, and implementation of a sophisticated mobile robotic system with the purpose of providing aid in the medical care of those afflicted with severe cases of COVID‐19. The robotic system will engage in verbal communication with the patient and provide updates regarding the external environment. Additionally, it will facilitate the delivery of food, beverages, and other consumable items to the isolation room. The robot has the capability to navigate to its intended location using two distinct modes: autonomous mode and online control mode. The hardware is constructed within a mobile robot system that is interconnected to the Internet over a 4G mobile network. The system employs a client–server software architecture wherein the transmission of data between the client and the server occurs through various transport protocols. Experimental simulations were conducted in an active treatment room to evaluate the performance of autonomous operating mechanisms, including obstacle avoidance positioning, safe destination navigation, and feedback display for remote robot operation. [ABSTRACT FROM AUTHOR]

Mobile crowd sensing ( MCS) systems, which offer a great opportunity to take full advantage of the wisdom of the crowd, naturally benefit from low deployment cost and wide spatial coverage. Due to failure or risk caused by a central server, constructing an efficient MCS system with untrustworthy participants in a decentralized manner is investigated. An efficient and practical decentralized MCS system based on a distributed auction process and the blockchain system is proposed. The proposed method achieves the optimal social profit satisfying individual rationality and protecting their privacy, through a neutral, public and trustful platform. Both theoretical analysis and numerical experiments show the effectiveness of the proposed approach. [ABSTRACT FROM AUTHOR]

Medical information systems could benefit from electronic health records management using openEHR. On the other hand, such a standard adds an additional software layer to the system, which might impact performance. In this article, we present an in-depth comparison of open-source openEHR servers and propose tools for testing them. Load tests for selected opensource servers were prepared using Apache JMeter. Statistics of elapsed time of requests and throughput of each solution were calculated. Results show that open-source openEHR servers significantly differ in performance and stability and prove that load testing should be a crucial part of a development process. [ABSTRACT FROM AUTHOR]

This study investigates the time dependent behaviour of the single server queue with differentiated working vacations. The model also takes into account the possibility of a disaster happening during busy periods and working vacations, with the repair procedure starting right away. The time-dependent probabilities of system size are described in terms of modified Bessel functions in the paper using explicit equations that were generated using generating functions. Numeric instances have been added to support the theoretical findings even more. [ABSTRACT FROM AUTHOR]

The present study obtains the time-dependent solution of a two-dimensional state Markovian queuing model with infinite capacity, correlated servers, multiple vacation, balking and catastrophes. Inter arrival times follow an exponential distribution with parameters λ and service times follow Bivariate exponential distribution BVE (μ, μ, ν) where μ is the service time parameter and ν is the correlation parameter. Both the servers go on vacation with probability one when there are no units in the system and the servers keeps on taking a sequence of vacations of random length each time the system becomes empty, till it finds at least one unit in the system to start each busy period referred as multiple vacation. The unit finds a long queue and decides not to join it; may be considered as balking. All the units are ejected from the system when catastrophes occur and the system becomes temporarily unavailable. The system reactivates when new units arrive. Occurrence of catastrophes follow Poisson distribution with rate ξ. Laplace transform approach has been used to find the time-dependent solution. By using differential-difference equations, the recursive expressions for probabilities of exactly i arrivals and j departures by time t are obtained. The probabilities of this model are consistent to the results of “Pegden & Rosenshine”. The model estimates the total expected cost, total expected profit and obtained the optimal values by varying time t for cost and profit. These important key measures give a greater understanding of the model behaviour. Numerical analysis and graphical representations have been done by using Maple software. [ABSTRACT FROM AUTHOR]

Institutions of advanced education and research, through their libraries, invest substantially in licensed online resources. Only authorized users of an institution are entitled to access licensed online resources. Seamless on-campus access to licensed resources happens mostly through Internet Protocol (IP) address authentication. Increasingly, licensed online resources are accessed by authorized users from off-campus locations as well. Libraries will, therefore, need to ensure seamless off-campus access to authorized users. Libraries have been using various technologies, including proxy server or virtual private network (VPN) server or single sign-on, to facilitate seamless offcampus access to licensed resources. In this paper, authors share their experience in setting up a Shibboleth-based single sign-on (SSO) access management system at the JRD Tata Memorial Library, Indian Institute of Science, to enable authorized users of the institute to seamlessly access licensed online resources from off-campus locations. [ABSTRACT FROM AUTHOR]

Standardization and collaborative integration are fundamental for the implementation of Industry 4.0. The Open Communication Platform Unified Architecture (OPC UA) standard plays a crucial role in communication by enabling the development of heterogeneous systems and facilitating the seamless exchange of data between devices. To take full advantage of OPC UA's capabilities, it is necessary to unlock other application services, such as cloud computing. By having more tools at their disposal, industries can increase their efficiency and optimize data-driven decision making. In this study, it was proposed to use OPC UA standard in a Client/Server model to leverage OPC UA paradigms along with Software Development Kits (SDKs). The development was carried out using Python as the programming language, both to host the server on a Raspberry Pi 4B and to set up the client on a Personal Computer (PC). This client will centralize the data for sending to the Clever Cloud logging platforms and for web visualization on Tago.IO. The interoperability problem of communicating between two platforms with different Operating Systems (OS) was addressed by integrating the OPC UA standard. The configured interval of 10 s recorded an average of 11.11 s, with a maximum timeout of 59 s for data-logging temperature, pressure, humidity, and altitude. The client proved to be Hypertext Transfer Protocol Secure (HTTPS) compliant, allowing connection to Web platforms. [ABSTRACT FROM AUTHOR]

In the ever-evolving construction industry, the incorporation of the Industrial Internet of Things (IIoT) through Low-power Wireless Area Networks (LPWAN), such as LoRaWAN, has emerged as a practical solution for addressing the challenges posed by the limited 5G cellular coverage found in solutions like NB-IoT and LTE-M, especially when deployed in remote locations. Open-source LPWAN platforms like The Things Network (TTN) and ChirpStack have played a pivotal role in fostering the adoption of LoRa technology by providing a mature and cost-effective ecosystem that facilitates efficient device resource management. Within this context, maintaining continuous surveillance of LPWAN network gateways becomes critically important, requiring a meticulous examination of status indicators and an evaluation of the communication quality. This paper introduces a structured approach for extracting data from TTN to create a comprehensive gateway monitoring system. The methodology encompasses various aspects, including ensuring seamless server connectivity, specifically focusing on efficient information management and integration of real-world construction data. This foundational work sets the stage for a more in-depth exploration of the diverse management components within the network ecosystem. [ABSTRACT FROM AUTHOR]

Copyright of Automatisierungstechnik is the property of De Gruyter and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

With the large-scale usage of satellite navigation, spoofing and jamming are considerable threats to civilian society. Recent developments, such as Galileo's Open Service Navigation Message Authentication and GPS's Chimera, mitigate these risks. However, they provide authentication of the navigation message or ranging code, but not a true position in the case of interference. In critical applications, a protected navigation service is desired, such as Galileo's Public Regulated Service (PRS). PRS provides an access-controlled navigation service for authorized governmental users, with fully encrypted ranging codes and data channels, providing users with higher robustness against interference. The main challenge of implementing PRS on a large scale is the need to protect the cryptographic material that is required to access the PRS signals inside the receiver. For many applications, a stand-alone receiver solution is unnecessary. These applications could use a remote server for PRS. In this methodology, the end-user device has only a radio frequency front-end which sends short samples to a secure server. The (classified) signal processing is then carried out on this secure server, removing the need for the user device to protect cryptographic material. Besides decreasing the device's security requirements and power consumption, it also allows to utilize the advantages of PRS in applications that would otherwise not be able to use PRS. In this approach the PRS usage authorization would only be required for the server operations, and not for the end-user devices. It furthermore allows for using additional processing power for unaided PRS acquisition in case of interference. Within the Netherlands, a remote server solution is developed by CGI: S-TrackS, making PRS accessible. In this paper, the application of PRS and architecture for various use cases is presented. It is shown that PRS usage based on a remote server is feasible and can increase the robustness for governmental applications. [ABSTRACT FROM AUTHOR]

We have developed and experimentally tested a set of models for the detection and identification of sensor faults that commonly occur in wireless sensor networks. Considered faults include outlier, spike, variance, high-frequency noise, offset, gain, and drift faults. These faults affect the system operations and can endanger operators, final users, and the general public. The fault detection models are divided into two classes: data-centric models, which only analyze a single data stream, and system-centric models, which consider the overall system. For data-centric models, we use the magnitude, the gradient, and the variance of raw sensor data to model faults. For system-centric models, we introduce variogram-based techniques that allow faults to be detected by comparing readings from multiple sensors that measure related phenomena. For data-centric and system-centric sensor fault detection, we show how a few model parameters affect the sensitivity of wireless sensor network fault models. We present simulation and experimental results that illustrate the fault detection and identification models. The system is intended for health monitoring applications of the NASA Stennis Space Center (SSC) test stands and widely distributed support systems, including pressurized gas lines, propellant delivery systems, and water coolant lines. The testbed consists of Coremicro® reconfigurable embedded smart sensor nodes capable of wireless communication, a network-capable application processor, a wireless base station, the software that supports sensor and actuator health monitoring, a database server, and a smartphone running a health monitoring Android application. [ABSTRACT FROM AUTHOR]

Over the last decade, millions of 4G and 5G-enabled mobile devices have become part of the Internet. Almost, all the applications have been shifted to smartphones. A person connects his smartphone to several other devices or remote servers for exchanging sensitive data. In this sense, security threats in terms of authentication, data confidentiality, and data integrity are increasing day by day for mobile devices. The asymmetric key cryptosystem is considered more secure, but it is heavyweight for smart devices on the basis of computation and communication costs. The symmetric key cryptosystem is considered lightweight for smart devices in terms of computation and communication overheads, but it is vulnerable to several attacks such as MITM attacks. Several symmetric key security systems have been proposed for smart devices but adopt complex mathematical procedures. Therefore, existing symmetric key security systems increase the computation and communication overheads. In this paper, we propose a lightweight and authentic symmetric key cryptosystem for resource-constrained mobile client–server environments. Our proposed cryptosystem consists of a lightweight symmetric session key exchange algorithm, mutual authentication service, and data confidentiality service, respectively. Moreover, we prove the robustness of our proposed cryptosystem with the help of informal and formal security analysis through the AVISPA tool. In addition, performance evaluation and comparisons with existing security systems show that our proposed cryptosystem is efficient, lightweight, secure, and most suitable for mobile computing. [ABSTRACT FROM AUTHOR]

In different scientific disciplines, large-scale data are generated with enormous storage requirements. Therefore, effective data management is a critical issue in distributed systems such as the cloud. As tasks can access a nearby site to access the required file, replicating the desired file to an appropriate location improves access time and reliability. Replicating the popular file to an appropriate site is a good choice, as tasks can get the necessary file from a nearby site. In this research, a novel data replication algorithm is proposed that is consisted of four main phases: 1- determining 20% of commonly used files, 2- computing five conflicting objectives (i.e., average service time, load variance, energy consumption, average response time and cost) 3- finding the near-optimal solution (i.e., suitable locations for new replica) by the PSO technique to acquire a trade-off among the desired objectives. 4- replica replacement considering a fuzzy system with three inputs (i.e., Number of accesses, size of replica and the last access time). The experimental results denote that the proposed replication algorithm outperforms the Profit oriented Data Replication (PDR) and Bee colony-based approach for Data Replication (BCDR) strategies in terms of energy consumption, average response time, load variance, number of connections, Hit ratio, Storage usage, and cost. [ABSTRACT FROM AUTHOR]

Queuing models consisting of servers which may not work with full efficiency are modelled with the help of fractional differential equations. Such problems with partial activity of the server are designed with the help of differential-difference equations involving fractional derivatives whose solutions are expressed in terms of Mittag-Leffler function. In this paper, we propose an alternative approach which gives a transient solution of fractional M/M/1 queue in matrix form. The results obtained by this new approach are justified by comparing them with solutions of classical queue which are available in the literature. Efficacy of the model can be assessed by computing its state probabilities and also measures such as expected number of customers in the system etc. Also, the variations in these measures with respect to partial activity of the server have been presented graphically and numerically. Further, a mathematical procedure to find optimal efficiency of the server has been discussed. [ABSTRACT FROM AUTHOR]

First and most important step to making secure end-to-end encryption is key exchange. X3DH is one of the most used protocols to do that. It uses a trusted server to exchange keys. If the key exchange is secure then we have identification, authentication, integrity, non-repudiation, and confidentiality for messages. In X3DH, if the trusted server is compromised the entire end-to-end encrypted connection will be exposed. Transport Layer Security (TLS) is used for client-server communication. Therefore, the whole security is based on a certificate authority (CA) therefore there will be the single point of failure. In this paper, we proposed using blockchain as a trusted medium to exchange keys and identity authentication. The proposed method is based on the use of X3DH in instant messaging. This method improves the first step of the X3DH algorithm which includes authentication. This is the first time using blockchain directly to identify a user. [ABSTRACT FROM AUTHOR]

Many graph domination applications can be expanded to achieve complete cototal domination. If every node in a dominating set is regarded as a record server for a PC organization, then each PC affiliated with the organization has direct access to a document server. It is occasionally reasonable to believe that this gateway will remain available even if one of the scrape servers fails. Because every PC has direct access to at least two documents' servers, a complete cototal dominating set provides the required adaptability to non-critical failure in such scenarios. In this paper, we presented a method for calculating a graph's complete cototal roman domination number. We also examined the properties and determined the bounds for a graph's complete cototal roman domination number, and its applications are presented. It has been observed that one's interest fluctuate over time, therefore inferring them just from one's own behaviour may be inconclusive. However, it may be able to deduce a user's constant interest to some level if a user's networking is also watched for similar or related actions. This research proposes a method that considers a user's and his channel's activity, as well as common tags, persons, and organizations from their social media posts in order to establish a solid foundation for the required conclusion. [ABSTRACT FROM AUTHOR]

The study is devoted to the organization of data transmission channel protection in software with a client-server architecture. In today's information environment, where data exchange takes place over the network, ensuring security becomes a critical task. The effectiveness of the data channel protection method in a client-server architecture program was developed and evaluated. A method has been developed that ensures encryption of messages from interception and data modification and prevents modification of the client software and abuse during its use. [ABSTRACT FROM AUTHOR]

As new information technology (IT) platforms continue to emerge, the technical project risk associated with developing IT projects for these platforms is particularly challenging for organizations. We develop a nomological network of people, process, and technology to gain insight into how the effect of technical project risk can be mitigated at the IT project team level. Drawing on cultural contingency theory, the IT project risk framework, and the IT project management literature, we elaborate on the IT project team composition and team processes necessary to mitigate technical project risk. We tested the nomological network by conducting a field study of 325 IT project teams over a 3-year period at a large corporation in China. We found that project risk mitigation processes mediated the effect of IT project teams' cultural composition on IT project performance, and the effect of these processes on IT project performance was stronger under high levels of technical project risk compared to low levels of such risk. By incorporating the cultural contingency theory into developing a nomological network of technical risk mitigation processes, this work not only contributes to the IT project management literature, but also provides suggestions for practitioners on how to better leverage people, process, and technology in mitigating IT project risks. [ABSTRACT FROM AUTHOR]

Copyright of Journal Computer Technology is the property of ECORFAN-Mexico S.C. and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Taskfarm is a client/server framework that can be used to keep track of massive embarrassingly parallel workloads. The system is split up into two packages: (1) a flask server that hands out new tasks via HTTP and (2) a python client that requests and updates tasks. The server stores task progress in a database. This system has been designed to manage a satellite data processing workflow with hundreds of thousands of tasks with variable compute costs. It can be used for any problem that can be solved using a task farm. [ABSTRACT FROM AUTHOR]

Patient Electronic Health Records (EHRs) contain valuable clinical data that is useful for medical research and public health inquires. However, patient privacy regulation and improper resource sharing risks limit access to EHR medical data for research and public health purposes. In this paper, we introduce an end-to-end security solution that addresses both concerns and facilitates the sharing of patient EHR data over an unsecured third-party server using a leveled homomorphic encryption (LHE) scheme. Time testing for aggregating queries and linear computations was carried out using an HPE ProLiant DL580 Gen 10 server with an Intel Xeon Platinum 8280 Processor. [ABSTRACT FROM AUTHOR]

An intelligence information system (IIS) is a particular kind of information systems (IS) devoted to the analysis of intelligence relevant to national security. Professional and military intelligence analysts play a key role in this, but their judgments can be inconsistent, mainly due to noise and bias. The team‐oriented aspects of the intelligence analysis process complicates the situation further. To enable analysts to achieve better judgments, the authors designed, implemented, and validated an innovative IIS for analyzing UK Military Signals Intelligence (SIGINT) data. The developed tool, the Team Information Decision Engine (TIDE), relies on an innovative preference learning method along with an aggregation procedure that permits combining scores by individual analysts into aggregated scores. This paper reports on a series of validation trials in which the performance of individual and team‐oriented analysts was accessed with respect to their effectiveness and efficiency. Results show that the use of the developed tool enhanced the effectiveness and efficiency of intelligence analysis process at both individual and team levels. [ABSTRACT FROM AUTHOR]

Understanding the attributes of critical data and implementing suitable security measures help organisations bolster their data-protection strategies and diminish the potential impacts of ransomware incidents. Unauthorised extraction and acquisition of data are the principal objectives of most cyber invasions. We underscore the severity of this issue using a recent attack by the Clop ransomware group, which exploited the MOVEit Transfer vulnerability and bypassed network-detection mechanisms to exfiltrate data via a Command and Control server. As a countermeasure, we propose a method called Buffer-Based Signature Verification (BBSV). This approach involves embedding 32-byte tags into files prior to their storage in the cloud, thus offering enhanced data protection. The BBSV method can be integrated into software like MOVEit Secure Managed File Transfer, thereby thwarting attempts by ransomware to exfiltrate data. Empirically tested using a BBSV prototype, our approach was able to successfully halt the encryption process for 80 ransomware instances from 70 ransomware families. BBSV not only stops the encryption but also prevents data exfiltration when data are moved or written from the original location by adversaries. We further develop a hypothetical exploit scenario in which an adversary manages to bypass the BBSV, illicitly transmits data to a Command and Control server, and then removes files from the original location. We construct an extended state space, in which each state represents a tuple that integrates user authentication and system components at the filesystem level. [ABSTRACT FROM AUTHOR]