Search

Intelligent recommender systems provide personalized recommendation for users based on their behavior trajectories. Intelligent recommendation is a double-edged sword with increasing impacts. This study investigates the influencing mechanism of social media users’ satisfaction with behavior trajectory security protection in the context of intelligent recommendation, with the aim of promoting healthy development of mobile social media. This study applied the grounded theory method to identify relations among concepts and categories in terms of three-level coding. During open coding, 271 initial concepts and 26 subcategories were elicited; during axial coding, 10 categories were elicited; and during selective coding, relations among categories were identified and a theoretical model was developed. The results indicate that satisfaction with behavior trajectory security protection is directly influenced by security protection information quality, security protection system quality, security protection service quality, net benefits, external support, privacy concerns, and privacy cognitive biases. Privacy literacy has direct impacts on privacy concerns and privacy cognitive biases. Meanwhile, herd behavior directly impacts privacy concerns. Implications for theory and practice are discussed.

The security of industrial control protocol is the cornerstone to ensure ICS’s stable operation, a large number of industrial control protocols in the design phase ignore the consideration of security, resulting in most of the mainstream industrial control protocols generally having vulnerabilities. Considering the ICS architecture and the developmental characteristics of industrial control protocols, the various vulnerabilities and attack threats commonly faced by industrial control protocols were systematically summarized. At the same time, for the unknown potential vulnerabilities of industrial control protocols, the vulnerability mining techniques of industrial control protocols were analyzed in-depth, including the static symbolic execution-based, code audit-based, and fuzzing-based. The protocol design security protection technology was comprehensively dissected from the three directions of industrial control protocol specification design, communication mechanism, and third-party middleware. In addition, the future development trend of industrial control protocol security was further prospected from the aspects of sandbox development, security protection, and vulnerability mining.

The dedicated network of the Jiangsu Provincial Department of Ecology and Environment is in need of upgrades and transformation. A project team was established to conduct extensive research and analysis on technical systems. After a lot of technical system demonstration and research work, it was decided that the upgrade and transformation should be based on software-defined wide area network (SDWAN) technology. An overview of the current state of the dedicated network was proposed, a needs analysis was conducted, and a technical solution was proposed to meet the requirements of the upgrade. The proposed solution includes overall solution design, SDWAN solution design, security protection design, and network management design.

This paper aims to analyze the problems resulting from the voivode’s use of a recommendation tool issued for local government administration bodies, as well as recommendations issued for local government bodies. It investigates the characteristics of the dualistic system of local administration, along with a discussion of its structure and the importance of the connections resulting from centralization or decentralization. It explores problems related to determining the final nature of orders issued by the voivode for government administrative bodies and local government bodies. The study also encompasses the premises enabling the voivode to issue a recommendation and the positions of representatives of the doctrine on how to understand the concepts of protection of public security and order.

This paper aims to analyze the problems resulting from the voivode's use of a recommendation tool issued for local government administration bodies, as well as recommendations issued for local government bodies. It investigates the characteristics of the dualistic system of local administration, along with a discussion of its structure and the importance of the connections resulting from centralization or decentralization. It explores problems related to determining the final nature of orders issued by the voivode for government administrative bodies and local government bodies. The study also encompasses the premises enabling the voivode to issue a recommendation and the positions of representatives of the doctrine on how to understand the concepts of protection of public security and order. [ABSTRACT FROM AUTHOR]

In order to solve the problem of poor network security protection performance of traditional network information security protection systems, the author proposes a network information security system control modeling based on deep learning data interaction. Adopt CY8C2453 type processor to improve system data exchange and data processing speed, enhance system stability through peripheral backplane, and evaluate network information security, at the same time, the authority management mechanism is set, and the general strategy form of the network attack and defense game is defined as a triple, calculate the attacked path in a certain network area and the defense strategy that the defender should choose, so as to complete the network information security protection based on the attack-defense game model. Experimental results show that: The number of attacked information of the system is 58 less than that of the traditional system; In the webpage attack, the number of attacked information of the designed system is 82 less than that of the traditional system; In the data interception attack, the number of attacked information of the designed system is 77 less than that of the traditional system. Conclusion: Under different attack behaviors, the number of successful attacks on the network information security protection system based on the attack-defense game model designed this time is less than the number of successful attacks on the traditional system, which improves the security of network information.

Industrial control system (ICS) is gradually transitioning from being closed and isolated to open and interconnected. The network threats to ICS are becoming highly hidden, strong-confrontation, and cross-domain in nature. Once subjected to cyberattacks, industrial production will be directly affected. Consequently, network attacks on ICS and corresponding security protection technologies have attracted significant attention. This study focuses on the security protection issues of ICS. First, we analyzed the specific characteristics of ICS security protection, as well as the unclear and uncontrollable security challenges of ICS. The network attacks on ICS are summarized and analyzed, and then the security protection systems with a self-defense mode, such as border protection and defense in depth, are discussed. In view of the security challenges, the development ideas are given from the aspects of security and controllability of ICS and a novel security protection system of ICS, and key tasks and key technology research paths are as follows: establishing an autonomous and controllable ICS security ecology and a security assurance mechanism of foreign devices based on limiters, and exploring the new security protection system of ICS based on a self-defense plus guard mode, such that the security protection ability of ICS can be better improved.

To clarify the copyrights of 3D models of oblique photography (3DMOP) and guarantee their security, a novel security protection scheme of 3DMOP was proposed in this study by synergistically applying digital watermarking and data encryption. In the proposed scheme, point clouds were clustered first, and then the centroid and feature points of each cluster were calculated and extracted, respectively. Afterward, the watermarks were embedded into the point clouds cluster-by-cluster, taking distances between feature points and centroids as the embedding positions. In addition, the watermarks were also embedded using texture coordinates of 3DMOP to further enhance the robustness of the watermarking algorithm. Furthermore, Arnold transformation was performed on texture images of 3DMOP for security protection of classified or sensitive information. Experimental results have verified the strong imperceptibility and robustness of the proposed watermarking algorithm, as well as the high security of the designed data encryption algorithm. The outcomes of this work can refine the current security protection methods of 3DMOP and thus further expand their application scope. [ABSTRACT FROM AUTHOR]

Progress in this digital era and the growing economic activity that occurs in human existence, this is also what can be the focus. Due to the widespread use of the internet and social media in the country, the growth of the digital economy in Indonesia is considered to have great potential. In an economic context in this digital era, this is evidence that growth and development are growing. As a result, more and more commerce and commercial transactions use the Internet as a digital medium for communication, collaboration, and joint ventures between individuals or businesses. Cryptocurrencies are one of those things that are now making it easier for people to make virtual commercial transactions. Cryptocurrency is a technique that uses a cryptographic technology system to assist in processing cryptocurrencies, and digital assets. The Greek words graphein, meaning writing or science, and kriptó, meaning hidden or secret, are the sources of the words cryptology and cryptography. In this case, to be able to find out the regulations regarding the legitimacy of using crypto assets in the form of bitcoin to be used as a transaction tool in paying attention to the regulations of the Currency Law, ITE Law, and Bank Indonesia Regulations. As well as to identify whether the losses incurred on crypto assets can be guaranteed for their civil rights. [ABSTRACT FROM AUTHOR]

Considering the submarine drainage tunnel project of a nuclear power plant unit as an example, the principles and implementation plan for safety monitoring during construction are described in this study. Based on continuous monitoring data for seven years and two months, the deformation characteristics and rules of the deep foundation pit construction stage of the important node of the project were analyzed. Based on the geographical location of the nuclear power plant project, in view of the special hydrogeology, engineering geology, and other sites, the contents of geotechnical body stress and strain monitoring to ensure construction safety were formulated and the corresponding early warning indicators were established to permit real-time monitoring of horizontal displacement, vertical deformation, slope measurement, and other aspects of deep foundation pit engineering. The deep foundation pit engineering monitoring data revealed that the maximum surface settlement is located at a depth of 0.5× the depth of the foundation pit, the maximum lateral deformation is approximately 0.30% of the excavation depth, and the main influence range of the ground settlement is two times the excavation depth. The maximum displacement of the foundation pit envelope occurred at the top of the pile and was approximately 0.20% of the excavation depth. The displacement of the pile body is significantly related to the distribution thickness of the silt layer; the thicker the distribution of the silt layer, the larger the displacement of the supporting pile. This engineering practice can provide a useful reference for the safety monitoring of similar nuclear power construction projects and academic research on ground subsidence geological disaster prevention [ABSTRACT FROM AUTHOR]

With the gradual evolution of the traditional Internet to “Internet+”, the domain name system (DNS) had been continuously expanding from basic address resolution to new models such as comprehensive perception and reliable transmission.Due to the diverse functions and the extensive coverage of DNS in the new scenario, it will cause serious consequences once attacked.Therefore, the research on DNS attack detection and security protection continues and attracts more and more attention.Firstly, several common DNS attacks were introduced, including DNS spoofing, DNS covert channel, DNS distributed denial of service (DDoS) attack, DNS reflection amplification attacks, and malicious DGA domain names.Subsequently, these DNS attack detection technologies were systematically analyzed and summarized from the machine learning perspective.Then, the DNS security protection technologies were sorted out in decentralization, authenticated encryption and limited resolution.Finally, some future research directions were proposed.

With the increase of intelligent devices in the industrial Internet, the computing tasks of these devices are growing exponentially. However, due to the centralized deployment and long backhaul characteristics of cloud computing, it is difficult to meet the requirements of high real-time and high security industrial tasks. Edge computing offloads tasks to the edge side to effectively reduce latency and protect data security. In this paper, we establish an optimization model of task offloading with joint data compression and security protection. In our model, in order to solve the load problem of super-large tasks on link bandwidth in the industrial Internet, a data compression model is established by formulating the computing load of compression and decompression as a nonlinear function of the compression ratio. The model can determine the optimal compression ratio and reduce the transmission latency of the task. In addition, we establish a security protection model by setting different security levels for each task. Based on this model, tasks are offloaded to different locations to improve data security and meet the computing requirements of different tasks. To solve the task offloading strategy, we design an offloading algorithm based on the improved simulated annealing particle swarm algorithm (ISA-PSO). The simulation results show that the established offloading model has remarkable effect in data security protection, latency, and cost reductions, and the objective value is reduced by 17.41% after adding the compression model. Compared with the existing edge computing offloading algorithms, ISA-PSO has better convergence level and offloading effect, which can reduce the weighted cost by up to 27%. [ABSTRACT FROM AUTHOR]

Copyright of Cyber Security & Data Governance is the property of Editorial Office of Information Technology & Network Security and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

With the increasing risks of Internet of vehicles (IoV) attack, the network security threats of vehicle-mounted systems, vehicle-mounted terminals, vehicle-mounted information and service applications, the operation and service platform of intelligent connected vehicles (ICVs) are prominent.Information tampering and virus intrusion in the generalized network attack have been proved to be suitable for the attack of ICVs.The characteristics of weak password authentication and weak encryption in traditional IoV are hard to satisfy the current requirements of multi-network and multi-node security protection in the field of IoV.In addition, the lack of domestic security encryption authentication mechanism and the imperfect encryption authentication system make it more difficult to satisfy the requirements of IoV security.To solve the problem of IoV security encryption authentication, the paper studies IoV security encryption authentication technology in the age of big data.Firstly, this paper introduces the current situation and relevant concepts of IoV security in the era of big data.Then it contrasts and analyzes the current IoV security architecture, and puts forward IoV security encryption authentication system in the era of big data, and elaborates systematically the IoV security technology architecture and the encryption authentication way of IoV communication module.Then the architecture proposed in this paper is compared with the information security standards of the IoV and elaborates key technology and innovations of the IoV security encryption authentication.Finally, the paper summarizes and proposes the problems and challenges faced by the current security encryption authentication technology of IoV.

To clarify the copyrights of 3D models of oblique photography (3DMOP) and guarantee their security, a novel security protection scheme of 3DMOP was proposed in this study by synergistically applying digital watermarking and data encryption. In the proposed scheme, point clouds were clustered first, and then the centroid and feature points of each cluster were calculated and extracted, respectively. Afterward, the watermarks were embedded into the point clouds cluster-by-cluster, taking distances between feature points and centroids as the embedding positions. In addition, the watermarks were also embedded using texture coordinates of 3DMOP to further enhance the robustness of the watermarking algorithm. Furthermore, Arnold transformation was performed on texture images of 3DMOP for security protection of classified or sensitive information. Experimental results have verified the strong imperceptibility and robustness of the proposed watermarking algorithm, as well as the high security of the designed data encryption algorithm. The outcomes of this work can refine the current security protection methods of 3DMOP and thus further expand their application scope.

Although deep neural networks (DNNs) have been increasingly applied in industrial cyber physical systems (ICPSs), they are vulnerable to security attacks due to the tight interaction between cyber elements and physical elements. In this article, we aim to protect the core IP of DNNs, i.e., the model weights, against security attacks. Different from conventional approaches, a layerwise protection framework is proposed to ensure the confidentiality of DNN model weights during the inference procedure such that the security quality is maximized, while satisfying the latency constraint of the DNN task. Based on the layerwise execution characteristics of DNN tasks, the encrypted layer-related weights are decrypted and fed to the next layer of DNN in plaintext. CPU-field programmable gate array (FPGA) coscheduling is considered to accelerate the execution of confidentiality protection, where CPU is utilized to conduct the decryption of weights and FPGA is used to perform the layer execution of DNN. Considering to provide optimal confidential protection for each layer, the problem is transformed into a quality of security maximization problem subject to layerwise execution constraint and deadline constraint of the DNN application. Due to the problem being NP-hard, a fast approximation algorithm is proposed to obtain the near-optimal solution under given real-time and security constraints. Extensive experiments and a real-life ICPS application evaluate the efficiency of the proposed techniques. [ABSTRACT FROM AUTHOR]

With the gradual evolution of the traditional Internet to "Internet+", the domain name system (DNS) had been continuously expanding from basic address resolution to new models such as comprehensive perception and reliable transmission. Due to the diverse functions and the extensive coverage of DNS in the new scenario, it will cause serious consequences once attacked. Therefore, the research on DNS attack detection and security protection continues and attracts more and more attention. Firstly, several common DNS attacks were introduced, including DNS spoofing, DNS covert channel, DNS distributed denial of service (DDoS) attack, DNS reflection amplification attacks, and malicious DGA domain names. Subsequently, these DNS attack detection technologies were systematically analyzed and summarized from the machine learning perspective. Then, the DNS security protection technologies were sorted out in decentralization, authenticated encryption and limited resolution. Finally, some future research directions were proposed. [ABSTRACT FROM AUTHOR]

Due to the hierarchical management structure of electric power enterprises, data flow often needs to go through multiple layers of nodes for review, which makes data synchronization slow and distortion high and data reliability difficult to improve. The existing data asset management mode of electric power enterprises faces security problems such as node trustworthiness and data tampering in the process of identity mutual trust, transmission and storage, data collection and data usage. In view of this, this paper proposes a blockchain-based digital asset management framework using the decentralized, untrustworthy, and hard-to-tamper features of blockchain. In the proposed framework, we optimized security authentication mechanism, data recording and consensus process, and data storage and transmission strategy involved in blockchain data sharing applications. The framework can effectively ensure the security, integrity, operability and consistency of digital assets in the management process under the blockchain environment. [ABSTRACT FROM AUTHOR]

With the continuous evolution of the mobile communication generation, human society has gradually convert from the era of “Mobile Internet” to the era of “Internet of Everything”. 5G networks will break the limitations of the traditional mobile communication industry and reshape the social development model. 5G will realize a new round of information revolution. As a new generation of mobile communication technology, 5G could provide basic communication guarantee for current innovative applications, such as the Internet of Things, autonomous vehicles and industrial Internet, and meet the explosive growth of data traffic and massive device connections. Security is a core for the comprehensive promotion of 5G networks. This paper analyzes the security risks in 5G networks and clarifies its security requirements. Finally, it proposes the corresponding security architecture, which will provide reference for the subsequent development of 5G network security technology.

Due to the development of Internet of Things technology, the security protection of embedded systems has become a systemic problem that needs to be considered and tried to be solved urgently. A variety of embedded computer system security protection methods are compared, and ARM TrustZone security protection scheme is analyzed. The main differences between the two technologies (TrustZone-A and TrustZone-M) are analyzed, and the applicable scenarios and implementation characteristics of the two solutions are given. The implementation principle of the trusted startup process based on TrustZone technology is described, and the feasibility of the implementation of abnormal program detection based on the TrustZone-A monitoring mode code is discussed. Finally, combined with typical application scenarios, a security protection scheme based on TrustZone-M technology and an implementation example of a security communication protocol are designed and proposed. [ABSTRACT FROM AUTHOR]

Room‐temperature phosphorescence (RTP) from polymer carbon dots (PCDs) has attracted great attention for its potential applications in manufacturing anticounterfeit objects and digital encryption. However, most RTP raw materials with good performance are generally toxic, corrosive, and polluting, which will cause safety hazards during use and subsequent processing. Herein, facile, environmental‐friendly polymer carbon dots are prepared by hydrothermal treatment of gelatin and carboxylate (C‐PCDs) for the first time. The RTP of C‐PCDs is yellow emission and the lifetime up to 422 ms, which is three times that of PCDs produced only by gelatin. Then according to transmission electron microscope, atomic force microscopy, Fourier transform infrared, X‐ray photoelectron spectroscopy, gel permeation chromatography characterizations, and comparison of optical properties, it is found that the newly CONH formed by introduced carboxylate and free amino produced in the hydrolysis has an inhibitory effect on the hydrolysis of amide bonds contained in gelatin and deamination to a certain extent, which will be thought about more n‐π* transition from CO enhancing the conversion for triplet excitons. Moreover, the C‐PCDs with properties of fluorescence and phosphorescence are confirmed in the potential application of double anticounterfeiting under the excitation of ultraviolet lamps. [ABSTRACT FROM AUTHOR]

Wearable electronic equipments and wireless communications provide convenience to the patients. Wireless body area network has entered our lives, helping in making medical diagnosis. Despite various benefits brought by wireless body area network, some security challenges still restrict its application, like identity protection and mutual authentication. Certificateless authentication is a good solution to solve these issues. Recently, it has been seen that several authentication schemes that can get rid of restricts from security challenges. In this paper, we find security risks in a cloud-assisted authentication protocol and design a new anonymous certificateless authentication scheme based on the issue. The scheme can ensure secure and communication between the wearable devices and the cloud server. As for the security of the protocol, we give a description of security attributes and a security proof. Finally, the performance analysis of the scheme is shown at the end of the paper. [ABSTRACT FROM AUTHOR]

For the intrinsic safety and reliable operation of the SCADA system network of gas pipeline stations and the implementation of laws and regulations such as the People's Republic of China cyber security law, the network security protection scheme was designed and implemented during the construction of the SCADA control system of gas pipeline to ensure the safety control from boundary isolation, station network audit, firewall blocking, gatekeeper control, comprehensive analysis of situation awareness platform, etc. By virtue of the network audit, isolation and analysis functions of relevant equipment, combined with fall analysis, threat intelligence analysis, abnormal behavior analysis, unknown threat analysis, network anomaly analysis, domain name anomaly analysis, attack threat feature analysis, covert channel analysis and the rich overall security analysis and reporting functions, security threats such as external attacks, external threats, internal illegal connections, abnormal network session modes, etc. can be effectively detected. It is a perfection and improvement of the traditional security defense system and an integrated network security monitoring scheme from the station to the control center. The system adopts independent network transmission, which meets the protection and monitoring requirements of data communication between different systems, allows the access control between transnational control systems, and conforms to the management regulations of the national classified security protection evaluation, network security laws and industry security standards.

This paper studies the secure motion control problem for micro-spacecraft systems. A novel semi-homomorphic encrypted control framework, consisting of a logarithmic quantizer, two uniform quantizers, and an encrypted control law based on the Paillier cryptosystem is developed. More specifically, a logarithmic quantizer is adopted as a digitizer to convert the continuous relative motion information to digital signals. Two uniform quantizers with different quantization sensitivities are designed to encode the control gain matrix and digitized motion information to integer values. Then, we develop an encrypted state-feedback control law based on the Paillier cryptosystem, which allows the controller to compute the control input using only encrypted data. Using the Lyapunov stability theory and the homomorphic property of the Paillier cryptosystem, we prove that all signals in the closed-loop system are uniformly ultimately bounded. Different from the traditional motion control laws of spacecraft, the proposed encrypted control framework ensures the security of the exchanged data over the communication network of the spacecraft, even when communication channels are eavesdropped by malicious adversaries. Finally, we verify the effectiveness of the proposed encrypted control framework using numerical simulations.

The article presents the issues of protecting the security of cooperatives functioning against threats resulting from the criminal behavior of members of its bodies, which is penalized in the Cooperative Law and in the law on housing co-operatives. The organs of the cooperative are: the general meeting or the meeting of representatives, the board of directors, the board, and the cooperatives in which the general meeting is replaced by the gathering of representatives - a meeting of member groups. The statute may provide for the appointment of other bodies composed of members of the cooperative. The article is an attempt to analyze selected prohibited acts which are the basis of responsibility of members of cooperative bodies, in particular the management board and the supervisory board. Criminal liability of members of cooperative bodies is provided for in the following provisions: from cooperative law: art. 267b – a failure to report for bankruptcy, art. 267c – a failure to comply with obligations related to lustration, art. 267d – an announcement of false data of cooperatives, from the Act on housing co-operatives: art. 273 – a failure to provide documentation of cooperatives and untimely settlement of construction costs. The provisions presented contain sanctions primarily for acts that are covered by analogous liability in relation to members of capital bodies of commercial companies, which, like cooperatives, are legal persons, which is dictated by the normative, organizational and functional similarity of running a business as a cooperative and in the form of commercial companies or for acts covered by the specificity of cooperative law, in particular concerning one of the most popular types of cooperatives, that is, housing cooperatives, which harm the proper functioning of cooperatives.

Secret sharing is an important technique for security protection for multimedia information communication by dividing a secret message into several shadows that are held among a set of participants. In this paper, we introduce a novel secret image sharing (SIS) scheme using two meaningful digital images with cheating detection. It allows a dealer to share a secret message into two different meaningful images through the guidance of the turtle shell magic matrix. Then, after performing a permutation operation, two meaningful shadow images are generated and distributed to two participants. The secret message can be reconstructed only when both participants cooperate by releasing real shadow images. Honest participant in the proposed scheme can easily detect whether the other participant is cheating via presenting a fake shadow. Experimental results show that this method ensures high quality of shadow images and good embedding capacity. The cheating detection process is also effective and easy to implement.

Currently, with the growth of the Internet of Things devices and the emergence of massive edge resources, security protection content has not only empowered IoT devices with the accumulation of networked computing and storage as a flexible whole but also enabled storing, transferring and processing DIKW (data, information, knowledge, and wisdom) content at the edge of the network from multiple devices in a mobile manner. However, understanding various DIKW content or resources poses a conceptual challenge in unifying the semantics of the core concepts as a starting point. Through building metamodels of the DIKW framework, we propose to cognitively formalize the semantics of the key elements of the DIKW in a conceptual process. The formalization centers on modeling the perceived world only by relationships or semantics as the prime atomic comprising elements. Based on this cognitive world model, we reveal the difference between relationships and entities during the conceptualization process as a foundation for distinguishing data and information. Thereafter, we show the initial case for using this formalization to construct security protection solutions for edge computing scenarios centering on type conversions among typed resources formalized through our proposed formalization of the DIKW.

As high value geostationary earth orbit (GEO) satellites are under a range of threats, it is helpful to improve the survivability of satellite bus by exploring the technology system of on-orbit strong survivability (TSO2S2). Focusing on this, the concept of TSO2S2 is defined systematically. A protection system including warning and safety protection sub-system is built after the main threat sources are figured out. Firstly, 8 threats are divided into active type and passive type. The threat mechanisms are analyzed and the damage effects are evaluated using qualitative and quantitative methods. Secondly, an integrated space and terrestrial warning scheme is proposed and the equipment is designed which enabled 5 types of threats to be alarmed, including space debris, laser, et al. Finally, the protection technology and methods are summarized systematically, which can provide reference for the GEO satellite platform to improve the orbit safety. [ABSTRACT FROM AUTHOR]

Technological development expands the computation process of smart devices that adopt the telecare medical information system (TMIS) to fulfill the demands of the healthcare organization. It provides better medical identification to claim the features namely trustworthy, efficient, and resourceful. Moreover, the telecare services automate the remote healthcare monitoring process to ease professional workloads. Importantly, it is conceived to be more timesaving, economical, and easy healthcare access. Cloud-Based Medical Healthcare (CBMH) system is a standard platform that gives its support to the patients for emergency treatment from the medical experts over Internet communication. Since the medical records are very sensitive, security protection is much necessitated. In addition, patient anonymity should be well preserved. In 2016, Chiou et al. proposed a mutual authentication protocol for the Telecare Medical Information System (TMIS) using Cloud Environment (CE). They claim that their protocol satisfies patient anonymity. However, this paper proves that the Chiou et al. scheme is not only completely insecure against the patient anonymity, health-report revelation, health-report forgery, report confidentiality, and non-repudiation but also fails to validate the service access against verifiability, undeniability and unforgeability. In order to provide better mutual authenticity, this paper suggests the framework of smart service authentication to cross-examine the common secret session key among the communication entities. In order to examine the security properties, formal and informal verification was carried out. Lastly, to prove the security and performance efficiency of a system, the proposed SSA framework was implemented using FPGA and Moteiv TMote Sky-Mote. A proposed smart service authentication (SSA) framework is presented to ensure better data security between the patients and the physicians. The formal and informal security analysis proves the significance of the SSA framework model to withstand the security attacks such as health-report forgery, health-report revelation, server-spoofing etc. As a result, it is claimed that it can be well suited for TMIS. [ABSTRACT FROM AUTHOR]

The aim of this article is to analyze the process of establishing ordinance regulations in Polish municipalities and their role as a tool to protect local security. The article points to the essence of local security, and distinguishes and characterizes the individual levels of implementation, by local authorities, of tasks in the field of local security protection (crisis management, tasks implemented in emergency states, and tasks carried out under the standard operation of local government bodies). Against this background the verification of the statutory and subjective scope of establishing ordinance regulations in municipalities, the reasons for establishment of these provisions, and the principles legitimizing the process of their adoption were established. In order to undertake the research outlined above, the current normative acts and literature on the subject were reviewed, allowing for critical analysis. In turn, the synthesis of collected research material made it possible to form conclusions and final remarks.

The aim of this article is to analyze the process of establishing ordinance regulations in Polish municipalities and their role as a tool to protect local security. The article points to the essence of local security, and distinguishes and characterizes the individual levels of implementation, by local authorities, of tasks in the field of local security protection (crisis management, tasks implemented in emergency states, and tasks carried out under the standard operation of local government bodies). Against this background the verification of the statutory and subjective scope of establishing ordinance regulations in municipalities, the reasons for establishment of these provisions, and the principles legitimizing the process of their adoption were established. In order to undertake the research outlined above, the current normative acts and literature on the subject were reviewed, allowing for critical analysis. In turn, the synthesis of collected research material made it possible to form conclusions and final remarks. [ABSTRACT FROM AUTHOR]