Search

Cyber threats have been growing tremendously in recent years. There are significant advancements in the threat space that have led towards an essential need for the strengthening of digital infrastructure security. Better security can be achieved by fine-tuning system parameters to the best and optimized security levels. For the protection of infrastructure and information systems, several guidelines have been provided by well-known organizations in the form of cybersecurity standards. Since security vulnerabilities incur a very high degree of financial, reputational, informational, and organizational security compromise, it is imperative that a baseline for standard compliance be established. The selection of security standards and extracting requirements from those standards in an organizational context is a tedious task. This article presents a detailed literature review, a comprehensive analysis of various cybersecurity standards, and statistics of cyber-attacks related to operating systems (OS). In addition to that, an explicit comparison between the frameworks, tools, and software available for OS compliance testing is provided. An in-depth analysis of the most common software solutions ensuring compliance with certain cybersecurity standards is also presented. Finally, based on the cybersecurity standards under consideration, a comprehensive set of minimum requirements is proposed for OS hardening and a few open research challenges are discussed.

The development of coastal infrastructure and related maritime transport necessitatesthe intensification of vessel traffic monitoring. Navigation systems used in this research are traditionally based on the information transmitted by radio waves. Marine traffic safety requires constant supervision carried out by dedicated systems, the operation of which may be limitedby difficult environmental conditions. The possibilities of supporting navigation systems with underwater observation systems are explored here. The research was carried out using an underwater measurement system. Local disturbances of the hydroacoustic and hydrodynamic field from the moving vessels were analysed. The potential for identifying a moving vessel, for example for offshore infrastructure security purposes, is demonstrated.

Big data is accumulate and development with the facilitate of disseminated encoding structures like Hadoop which handles the new encoding prototype. Big data can handle huge quantity of information with thousands of computers in clusters. Through the condition of compute of different possessions in public cloud, people and institute are clever to outsource their statistics storage and services. Conversely, the information owners are disturbed with security of their outsourced statistics. The Cloud Security Alliance has recognized and announced different security confronts with reverence to big data security and safe estimation in disseminated encoding structure veracity and immediate security. There are important investigate assistance establish in the survey. Conversely, a complete approach that provides to the security wants of the cloud-big data environment to stimulate of the different afore reveals dispute is lost. Consequently the plan of this proposal is to examine, design, and execute method for safe computation, big data privacy, big data security, and efficient statistics administration. Individual challenges are big data privacy, infrastructure security, big data security, and data management. Authentication using username and password which contains the user data such as identity number, data provider name, date and time of uploading the data is also used to recognize the person who uploaded the data into the big data cloud. It identifies the origin of data and someone who downloads the data could know the person who created it. A variety of cryptographic methods used for encryption are Attribute-Based Encryption as Scheme 1, Advanced Encryption Standard as Scheme 2, hybridized Attribute-Based Encryption and Advanced Encryption Standard as Scheme 3, and the proposed algorithm named Secure Dynamic Bit Standard as Scheme 4 which offer high security for the data stored and access by the end user. The Secure Dynamic Bit Standard algorithm provides the security during two dissimilar keys such as master key and session key produced by cloud service provider. The Secure Dynamic Bit Standard algorithms enclose the three disparate key lengths such as 128 bits, 256 bits, and 512 bits. The key length of the master key and session key randomly creates through the encryption process. This method will minimize the maximum number of unauthorized and unauthenticated users in the big data cloud. It also minimizes the maximum number of assault in the big data cloud environment such as collusion, brute force attack, and Structured Query Language.

With the expansion of the Internet of Things (IoT), security incidents about exploiting vulnerabilities in IoT devices have become prominent. However, due to the characteristics of IoT devices such as low power and low performance, it is difficult to apply existing security solutions to IoT devices. As a result, IoT devices have easily become targets for cyber attackers, and malware attacks on IoT devices are increasing every year. The most representative is the Mirai malware that caused distributed denial of service (DDoS) attacks by creating a massive IoT botnet. Moreover, Mirai malware has been released on the Internet, resulting in increasing variants and new malicious codes. One of the ways to mitigate distributed denial of service attacks is to render the creation of massive IoT botnets difficult by preventing the spread of malicious code. For IoT infrastructure security, security solutions are being studied to analyze network packets going in and out of IoT infrastructure to detect threats, and to prevent the spread of threats within IoT infrastructure by dynamically controlling network access to maliciously used IoT devices, network equipment, and IoT services. However, there is a great risk to apply unverified security solutions to real-world environments. In this paper, we propose a malware simulation tool that scans vulnerable IoT devices assigned a private IP address, and spreads malicious code within IoT infrastructure by injecting malicious code download command into vulnerable devices. The malware simulation tool proposed in this paper can be used to verify the functionality of network threat detection and prevention solutions.

A robust and secure IT infrastructure ensures reliable security, high speeds and connectivity, employee support and accessibility, and a positive user experience for clients. It is hard to manage a modern firm without a secure and adaptable IT infrastructure. Technology, when properly set up and networked, can improve back-office processes, increase efficiency, and simplify communication. This research explores how an organization assure the optimum level of infrastructure security in in three domains: network infrastructure security, physical infrastructure security, and cloud infrastructure security. Running a network infrastructure model comes with a variety of difficulties. The findings suggest that there are few recommendations for assuring right security level for the network infrastructure, including: conducting a network security assessment, keeping user access privileges to a bare minimum for work, updating programs, investigating cybersecurity tools and Increasing cyber-awareness. Physical infrastructure security is also crucial. We divided he dangers are divided into the following categories and suggested for appropriated measure: threats by environment, threats by technical infrastructure, threats by humans, inappropriate humidity and temperature, Electrification, Electromagnetic Interference (EMI), Unauthorized physical access. Cloud security is necessitated by the widespread adoption of cloud technology, as well as an ever-increasing volume and sophistication of cyber attacks. To ensure the right level of cloud security, this research recommend to take some measures, including: Transit and Rest Protection, Asset Security. Securing User Management, Integration of compliance and security, Authentication and Identity, and Operational Safety and Security While no amount of security will ever stop all attacks, organizations can significantly minimize risk of suffering a breach and the fallout from such attacks by taking a few critical steps to secure business’ network, physical and cloud infrastructure.

International audience; We present a control-theoretic approach to achieve Cyber-Physical Systems (CPS) resilient designs. We assume situations in which the CPS must maintain the correct operation of a set of crucial functionalities despite ongoing adversarial misbehavior. The approach is based on a moving target defense paradigm, driven by a linear switching of state-space matrices, and applied at both the physical and network layers of a networked-control system. We show that the final system maintains stability. We also evaluate, via simulation, a step-by-step procedure that takes a transfer function, representing the dynamics of the physical process. As a result, we obtain a resilient CPS design structured around a topology of decentralized controllers. Results show that the obtained approach is both innovative and promising.

Wireless sensor networks (WSNs) systems have been used for several applications from target tracking to environment monitoring. Recently, there has been increased interest in the design of WSN protocols for delay-sensitive applications, such as military surveillance, health monitoring, and infrastructure security. However, due to the strict resource constraints of the sensor nodes, WSNs pose critical challenges for network protocol design for reliable communications with delay constraints. Biologically inspired modeling techniques have received considerable attention for their robustness, scalability, and adaptability with simple local interactions and limited information. In this paper, we apply gene regulatory networks (GRNs) principles to the WSN system and propose a new GRN model for decentralized node coordination to achieve energy saving while meeting delay requirements. Using control theory, we provide conditions of system parameters to ensure system convergence and stability. Simulation results indicate that the proposed scheme achieves superior performance with energy savings as well as desirable delay guarantees compared with other well-known schemes.

By utilizing IT network infrastructure services optimally, the use of information systems and other IT activities in RSUD Provinsi NTB will run smoothly. However, there are some problems such as devices acquisition, maintenance and network infrastructure security that must be overcome to achieve the best services in accordance with the vision and mission. This research uses COBIT 4.1 framework and maturity level as a metric of current conditions and expected conditions in RSUD Provinsi NTB. This observation results that the current maturity level is 3 and is expected to be 5. We also propose some recommendations for improvements that are expected to overcome the faced problem and make improvements to the existing IT network infrastructure service.

open access article The Saudi Arabia government has proposed different frameworks such as the CITC’s Cybersecurity Regulatory Framework (CRF) and the NCA’s Essential Cybersecurity Controls (ECC) to ensure data and infrastructure security in all IT-based systems. However, these frameworks lack a practical, published mechanism that continuously assesses the organizations’ security level, especially in HEI (Higher Education Institutions) systems. This paper proposes a Cybersecurity Maturity Assessment Framework (SCMAF) for HEIs in Saudi Arabia. SCMAF is a comprehensive, customized security maturity assessment framework for Saudi organizations aligned with local and international security standards. The framework can be used as a self-assessment method to establish the security level and highlight the weaknesses and mitigation plans that need to be implemented. SCMAF is a mapping and codification model for all regulations that the Saudi organizations must comply with. The framework uses different levels of maturity against which the security performance of each organization can be measured. SCMAF is implemented as a lightweight assessment tool that could be provided online through a web-based service or offline by downloading the tool to ensure the organizations’ data privacy. Organizations that apply this framework can assess the security level of their systems, conduct a gap analysis and create a mitigation plan. The assessment results are communicated to the organization using visual score charts per security requirement per level attached with an evaluation report.

The U.S. President’s Commission on Critical Infrastructure Protection (PCCIP), convened in the wake of the bombing of the Murrah Federal Building in Oklahoma City, concluded that the nation’s physical security and economic security depend on our critical energy, communications, and computer infrastructures. While a primary motivating event for the establishment of the commission was the catastrophic physical attack of the Murrah Building, it is ironic that the commission focused its attention primarily on cyber threats. Their rationale was that cyber vulnerabilities posed a new, unaddressed challenge to infrastructure security. This approach was further questioned by the events of September 11, 2001 and the subsequent bio-threat events in America. During and shortly after the convention of the President’s Commission on Critical Infrastructure Protection in 1997-99, a working group met to look into the physical protection of critical U.S. infrastructure using underground structures. This “Underground Structures Infrastructure Applications” (USIA) group provided a timely balancing discussion of issues surrounding the physical vulnerability aspect of the infrastructure protection problem. The group convened a workshop on the subject under the auspices of the National Research Council’s Board on Infrastructure and the Constructed Environment. The present paper draws on the working group deliberations and NRC Workshop proceedings to address infrastructure assurance in the context of maximizing the physical protection of high value infrastructure by the use of underground construction. Although the PCCIP did not directly address a role for underground facilities (UGFs), its final report recommended a program of government and industry cooperation and information sharing to improve the physical security of critical United States infrastructure. We develop specific recommendations for the use of underground facilities to support implementation of the general PCCIP challenge. It is our contention that underground facilities reduce the risk of infrastructure disruption from both physical and cyber attacks. In the latter case, undergrounds provide secure reserve operations and back-up data storage locations to ensure the reconstitution of critical electronic information systems. In addition, noting that the Norwegians have placed much of their critical infrastructure underground, we provide information on the Norway’s experience gathered on a fact-finding trip to that country organized by one of the authors. The events of September 11, 2001 and the use of underground locations for terrorist security by the Taliban, provide a strong impetus for the use of underground construction to protect vital infrastructure. 1 Critical Foundations: Protecting America’s Infrastructures, Report of the President’s Commission on Critical Infrastructure Protection, October 1997 2 Use of Underground Facilities to Protect Critical Infrastructures, National Academy Press, Washington, D.C., 1998

The power grid is considered to be the most critical piece of infrastructure in the United States because each of the other fifteen critical infrastructures, as defined by the Cyberse-curity and Infrastructure Security Agency (CISA), require the energy sector to properly function. Due the critical nature of the power grid, the ability to detect anomalies in the power grid is of critical importance to prevent power outages, avoid damage to sensitive equipment and to maintain a working power grid. Over the past few decades, the modern power grid has evolved into a large Cyber Physical System (CPS) equipped with wide area monitoring systems (WAMS) and distributed control. As smart technology advances, the power grid continues to be upgraded with high fidelity sensors and measurement devices, such as phasor measurement units (PMUs), that can report the state of the system with a high temporal resolution. However, this influx of data can often become overwhelming to the legacy Supervisory Control and Data Acquisition (SCADA) system, as well as, the power system operator. In this paper, we propose using a deep learning (DL) convolutional neural network (CNN) as a module within the Automatic Network Guardian for ELectrical systems (ANGEL) Digital Twin environment to detect physical faults in a power system. The presented approach uses high fidelity measurement data from the IEEE 9-bus and IEEE 39-bus benchmark power systems to not only detect if there is a fault in the power system but also applies the algorithm to classify which bus contains the fault.

Fiber optic infrastructure security is of growing interest. The current distributed sensor systems are robust and expensive solutions, and their practical applications are uncommon. Research into simple and cost-effective solutions based on changes in the state of polarization is crucial. This paper expands the use of a vibration sensor based on the sensing of rapid changes in the state of polarization (SOP) of light in a standard single-mode optical fiber by using a convolutional neural network to detect trains running along the optical fiber infrastructure. It is a simple system that determines ongoing events near the optical fiber route by simply determining the signal boundaries that define the idle state. By using a neural network, it is possible to eliminate the distortion caused by the temperature changes and, for example, to improve detection in the the zones where the vibrations are not strong enough for a simple threshold resolution.

This chapter will introduce security solutions based on the security framework to enable the terminal, network, and cloud platform of the IoT system to have three functions: identification and authentication; OTA firmware update; and terminal device security protection. If these IoT infrastructure security construction strategies are used appropriately, they will become powerful tools for IoT manufactures to ensure device security.

In 2020, the Beidou-3 global satellite navigation system announced the official opening, officially providing services to the world, and the Beidou system has also entered a new era of scale, industrialization, internationalization and popularization. New era gave birth to the new requirements, how to provide safer, more stable, more reliable, higher-quality fixed navigation users worldwide location service has become a new target. In order to provide better navigation and positioning services, we must not only pay attention to technological innovation, but also maintain the safety of the satellite navigation system. Security issues have long been the focus of attention of all countries, and are also the main points of centralized regulation of laws and regulations. Infrastructure security is the most basic and most important point in system security. This article starts with the security protection system of satellite navigation systems and infrastructure, focusing on combing and analyzing the security protection systems of the three global satellite navigation systems in the United States, Russia, and the European Union. From the aspect, we will elaborate on the specific measures taken by foreign satellite navigation systems to protect their infrastructure.

The Cybersecurity and Infrastructure Security Agency (CISA), based in the USA, was probably the first agency that identified critical infrastructures (CIs) during the COVID-19 pandemic (CISAin Identifying critical infrastructure during COVID-19, 2020).