System Security

An intrusion is defined as a violation of the security policy of the system, and hence, intrusion detection mainly refers to the mechanisms that are developed to detect violations of system security policy. Recently, data mining techniques have gained importance in providing the valuable information which in turn can help to enhance the decision on identifying the intrusions (attacks). In this paper; we evaluate the performance of various rule based classifiers like: JRip, RIDOR, NNge and decision table using ensemble approach in order to build an efficient network intrusion detection system. We use KDDCup'99, intrusion detection benchmark dataset (which is a part of DARPA evaluation program) for our experimentation. It can be observed from the results that the proposed approach is accurate in detecting network intrusions, provides low false positive rate, simple, reliable and faster in building an efficient network intrusion system.

In this paper, a hand biometric system for verification and recognition purposes is presented. The method is based on three keys. Firstly, the system is based on using a Natural Reference System (NRS) defined on the hand’s natural layout. Consequently, neither hand-pose training nor a pre-fixed position is required in the registration process. Secondly, the hand’s features are obtained through the polar representation of the hand’s contour. This implies minimum image processing and low computational cost. Thirdly, instead of common methods that use one hand, we use right and left hands. This allows us to consider distance measures for direct (R/R, L/L) and crossed (R/L, L/R) hands obtaining improvements in FAR/FRR and identification ratios. The paper shows details about the experimentation and presents the results of the method applied on 5640 images belonging to 470 users. The results are good enough to consider this biometric system for future security/control applications.

It was recently discovered that mammalian skin can produce serotonin and transform it into melatonin. Pathways for the biosynthesis and biodegradation of serotonin and melatonin have been characterized in human and rodent skin and in their major cellular populations. Moreover, receptors for serotonin and melatonin receptors are expressed in keratinocytes, melanocytes, and fibroblasts and these mediate phenotypic actions on cellular proliferation and differentiation. Melatonin exerts receptor-independent effects, including activation of pathways protective of oxidative stress and the modification of cellular metabolism. While serotonin is known to have several roles in skin-e.g., pro-edema, vasodilatory, proinflammatory, and pruritogenic-melatonin has been experimentally implicated in hair growth cycling, pigmentation physiology, and melanoma control. Thus, the widespread expression of a cutaneous seorotoninergic/melatoninergic syste,m(s) indicates considerable selectivity of action to facilitate intra-, auto-, or paracrine mechanisms that define and influence skin function in a highly compartmentalized manner. Notably, the cutaneous melatoninergic system is organized to respond to continuous stimulation in contrast to the pineal gland, which (being insulated from the external environment) responds to discontinuous activation by the circadian clock. Overall, the cutaneous serotoninergic/melatoninergic system could counteract or buffer external (environmental) or internal stresses to preserve the biological integrity of the organ and to maintain its homeostasis.-Slominski, A. J., Wortsman, J., Tobin, D. J. The cutaneous serotoninergic/melatoninergic system: securing a place under the sun.

In this work, several security features available on the Windows Embedded operating system were reviewed for their relevance in security achievement in case of protecting the classified data.  The prevention of usage of unwanted keyboard combinations, potentially malicious USB devices and preservation of confidentiality and integrity of data by encrypting the hard disk, restricting access to certain application, while maintaining  the centralized management capabilities over the devices for the administrators, are some of the security measures that could achieve the proper level of information security.

The increasing rate of crime, attacks by thieves, intruders and vandals, despite all forms of security gadgets and locks still need the attention of researchers to find a permanent solution to the well being of lives and properties of individuals. To this end, we design a cheap and effective security system for buildings, cars, safes, doors and gates,so as to prevent unauthorized person from having access to ones properties through the use of codes, we therefore experiment the application of electronic devices as locks.However, a modular approach was employed in the design in which the combination lock was divided into units and each unit designed separately before being coupled to form a whole functional system. During the design, we conducted Twenty tests with the first eight combinations being four in number, the next seven tests being five and the last five combinations being six. This was done because of the incorporation of 2 dummy switches in the combinations. From the result...

The development of radio networks has brought the problem of security specifically related to mobility of terminals sharply into focus, and has created the need for radio network operators to implement new security functionalities. The security level of the analog radio mobile systems (the so-called “first generation ” systems was very low, and these systems were often exposed to massive fraud. The development of digital radio mobile systems (the so-called “second generation” systems: GSM, DECT,. allowed the systematic introduction of cryptology based protection mechanisms. Hence, for gsm networks for instance, the main fraud and confidentiality problems were taken into account at the design stage and a security architecture was implemented to provide security services to users and network operators. The third generation mobile telecommunication systems belonging to the imt- 2000 family (which are still under specification within standardisation bodies in particular within the 3gpp worldwide third generation partnership project) will, in the forthcoming years, provide a wide variety of services on a single terminal in a multi-environment (domestic, public, business), multi-operator, and multi-service provider context. Security will be based on second generation systems security functions that have proved to be needed and reliable, and shall be adapted and improved to resolve security threats underlying to new services supplied by third generation radio systems. This document presents examples of security solutions currently implemented for protecting second generation radio mobile systems against frauds and attacks and gives an overview of potential solutions for protecting future third generation radio mobile telecommunication systems. Le développement des réseaux radiomobiles a mis en évidence des problèmes de sécurité spécifiques liés à la mobilité des terminaux, ce qui a conduit les opérateurs de ces réseaux à implanter de nouvelles fonctions de sécurité. Les systèmes analogiques dits de première génération présentaient un niveau de sécurité très faible, et nombre de ces systèmes étaient exposés à des fraudes massives. Le développement des systèmes numériques dits de deuxième génération (GSM, dect, etc.) a permis l’introduction de mécanismes de protection basés sur la cryptologie. Ainsi, pour les réseaux gsm, les principaux problèmes de fraude et de confidentialité ont été pris en compte dès la conception du système, et une architecture de sécurité a été mise en place pour offrir des services de sécurité aux usagers et aux opérateurs. Les systèmes mobiles de troisième génération de la famille imt- 2000 (dont la spécification est en cours dans divers organismes de normalisation, en particulier le projet 3gpp de partenariat mondial sur la mobilité 3g) fourniront dans les années qui viennent un large éventail de services sur un même terminal, dans un contexte multi- environnement (domestique, public, professionnel), multi-exploitant, et multi-fournisseur de services. La sécurité sera basée sur les fonctions de sécurité des systèmes de deuxième génération qui ont démontré leur utilité et leur robustesse, mais elle sera adaptée pour résoudre les menaces inhérentes aux nouveaux services qui seront offerts par ces systèmes. Cet article présente des exemples de mécanismes de sécurité actuellement utilisés pour la protection des mobiles de deuxième génération contre les fraudes et les attaques, et donne un aperçu des solutions envisagées pour la protection des systèmes mobiles de troisième génération.

Today, as systems become more and more complex, safety is becoming critical. Reducing the risk to an acceptable level with a complete risk management activity is necessary. This paper more precisely focuses on risk analysis; its demonstrate how the use of a risk analysis technic such as the Failure Modes, Effects and Criticality Analysis (FMECA) can be coupled to a object oriented system modeling process in order to guide the designer to exhaustively consider all potential risk, to increase the system security. For the system model, we chose the UML notation, which is now a standard in system and software engineering.

During the past decade Defence Research and Development Canada - Atlantic has been investigating the use of underwater deployable systems and autonomous vehicles. Both of these fixed and mobile systems are dependent on reliable underwater communications and, ideally, on the establishment of efficient and robust communication networks. This paper describes some of the project work that has been undertaken by

Notice of Violation of IEEE Publication Principles"A Dynamic Distributed Diagnosis Algorithm for an Arbitrary Network Topology with Unreliable Nodes and Links,"by Pabitra Mohan Khilar and Sudipta Mahapatra,in the Proceedings of the International Conference on Advanced Computing and Communications, 2007. ADCOM, Dec. 2007, pp. 125-130After careful and considered review of the content and authorship of this paper by a duly constituted expert committee, this paper has been found to be in violation of IEEE's Publication Principles.This paper contains significant portions of original text from the paper cited below. The original text was copied without attribution (including appropriate references to the original author(s) and/or paper title) and without permission.Due to the nature of this violation, reasonable effort should be made to remove all past references to this paper, and future references should be made to the following article:"A Distributed Network Connectivity Algorithm,"By E. Procopio Duarte Jr. and A.Weber,The Sixth International Symposium on Autonomous Decentralized Systems, 2003. ISADS 2003 April 2003, pp. 285-292This paper presents a distributed network diagnosis (DND) algorithm for an arbitrary network topology where every node needs to record the status of every other nodes and links assuming the nodes and links are subjected to crash and value faults in a dynamic fault environment (the node's or link's status may change during execution of algorithm). The algorithm operates correctly in each connected component if the network is partitioned due to a set of faulty links or faulty nodes. The worst-case bounds for diagnostic latency is at most O(td) rounds where t is the number of dissemination trees and d is the diameter of the network. The proposed approach uses non-broadcasting method of message dissemination that has similar diagnostic latency with flooding [4] and similar message co- mplexity with Chinese Agent [14] method of message dissemination respectively.

Multifaceted nature of frameworks are growing bit by bit. This prompts a consistently expanding number of weaknesses in the Systems. Assailants utilize these weaknesses for abusing the arrangement of casualty. It is more brilliant to find these weaknesses early before the assailant do. The power of Vulnerability assessment is commonly barely cared about. While Penetration Testing and Vulnerability Assessment can be utilized as digital protection innovation for giving proactive digital safeguard. It exhibited Penetration Testing and Vulnerability Assessment in this paper as digital protection innovation and how it can give dynamic digital safeguard utilizing Penetration Testing and Vulnerability Assessment. It depicted complete life pattern of Penetration Testing and Vulnerability Assessment on organizations and frameworks and proactive move taken to handle that stop conceivable assault and weakness. In this paper it has portrayed regular Vulnerability appraisal systems and some mainstream open source VAPT instruments. It has portrayed full methodology of how to utilize Penetration Testing and Vulnerability Assessment as an unbelievable digital protection innovation

Economic growth and information technology development has stimulated customer demand for foreign travel. In an intensely competitive and dynamic travel market, it is necessary for travel agencies to adopt innovative forms of information technology in order to survive and flourish. Travel executives are thus looking for an effective and efficient means to intelligently manage business-to-customer electronic commerce (B2C e-commerce) information technology applications in order to obtain and maintain sustainable competitive advantages. To this end, this study applies the multiple criteria decision-making (MCDM) method to examine consumer adoption of e-commerce. The results show that the critical success factors are associated with product information (product context) and system security (system context)—such as product content, privacy policy, purchase procedure, and product pricing. It is anticipated that by focusing on these key drivers when creating their main marketing strategies, travel agencies will be able to develop and facilitate B2C e-commerce transactions.