jehanweerasuriya/uni-ai-dataset huggingface dataset:
Fog computing security: a review of current applications and security solutions
Authors: Saad Khan, Simon Parkinson, Yongrui Qin
Published in: Journal of Cloud Computing Advances Systems and Applications (2017-08-16)

Fog computing is a new paradigm that extends the Cloud platform model by providing computing resources on the edges of a network. It can be described as a cloud-like platform having similar data, computation, storage and application services, but is fundamentally different in that it is decentralized. In addition, Fog systems are capable of processing large amounts of data locally, operate on-premise, are fully portable, and can be installed on heterogeneous hardware. These features make the Fog platform highly suitable for time and location-sensitive applications. For example, Internet of Things (IoT) devices are required to quickly process a large amount of data. This wide range of functionality driven applications intensifies many security issues regarding data, virtualization, segregation, network, malware and monitoring. This paper surveys existing literature on Fog computing applications to identify common security gaps. Similar technologies like Edge computing, Cloudlets and Micro-data centres have also been included to provide a holistic review process. The majority of Fog applications are motivated by the desire for functionality and end-user requirements, while the security aspects are often ignored or considered as an afterthought. This paper also determines the impact of those security issues and possible solutions, providing future security-relevant directions to those responsible for designing, developing, and maintaining Fog systems.
Enhancing Software Security: A Research-Driven Automation Framework
Authors: Pushpalika Chatterjee, Apurba K. Das
Published in: International Journal of Scientific Research and Management (IJSRM) (2024-12-16)

With the ever-growing dependency on software in critical systems such as healthcare, finance, transportation, and defense, among many others, the need for robust security in software has never been greater. Breaches of security, in which an undetected vulnerability was often the culprit, lead to severe financial loss, loss of reputation, and even legal action for organizations and end-users. While technology has considerably improved, conventional security practices have repeatedly have failed to address the rapid growth of complexity and dynamic nature in modern software systems. The paper presents a critical requirement for an organized and active approach toward software security for its lifetime. We propose an automation framework driven by research that responds to these challenges by fitting into the tight cooperation of security testing tools in order to automate the detection and mitigation of vulnerabilities: it engenders a continuous improvement culture of security. This framework will be tailored to support Agile development and DevOps workflows, seamlessly embedding security in the rapid, iterative cycles of development. This framework will allow an organization to measure and improve quantitatively its security practices over time by harnessing actionable metrics and insight.
An In-Depth Security Assessment of Maritime Container Terminal Software Systems
Authors: Joseph O. Eichenhofer, Elisa Heymann, Barton P. Miller, Arnold Kang
Published in: IEEE Access (2020-01-01)

Attacks on software systems occur world-wide on a daily basis targeting individuals, corporations, and governments alike. The systems that facilitate maritime shipping are at risk of serious disruptions, and these disruptions can stem from vulnerabilities in the software and processes used in these systems. These vulnerabilities leave such systems open to cyber-attack. Assessments of the security of maritime shipping systems have focused on identifying risks but have not taken the critical (and expensive) next step of actually identifying vulnerabilities present in these systems. While such risk assessments are important, they have not provided the detailed identification of security issues in the systems that control these ports and their terminals. In response, we formed a key collaboration between an experienced academic cybersecurity team and a well-known commercial software provider that manages maritime shipping. We performed an analysis of the information flow involved in the maritime shipping process, and then executed an in-depth vulnerability assessment of the software that manages freight systems. In this paper, we show the flow of information involved in the freight shipping process and explain how we performed the in-depth assessment, summarizing our findings. Like every large software system, maritime shipping systems have vulnerabilities.
A Machine Learning Security Framework for Iot Systems
Authors: Miloud Bagaa, Tarik Taleb, Jorge Bernal Bernabé, Antonio Skármeta
Published in: IEEE Access (2020-01-01)

Internet of Things security is attracting a growing attention from both academic and industry communities. Indeed, IoT devices are prone to various security attacks varying from Denial of Service (DoS) to network intrusion and data leakage. This paper presents a novel machine learning (ML) based security framework that automatically copes with the expanding security aspects related to IoT domain. This framework leverages both Software Defined Networking (SDN) and Network Function Virtualization (NFV) enablers for mitigating different threats. This AI framework combines monitoring agent and AI-based reaction agent that use ML-Models divided into network patterns analysis, along with anomaly-based intrusion detection in IoT systems. The framework exploits the supervised learning, distributed data mining system and neural network for achieving its goals. Experiments results demonstrate the efficiency of the proposed scheme. In particular, the distribution of the attacks using the data mining approach is highly successful in detecting the attacks with high performance and low cost. Regarding our anomaly-based intrusion detection system (IDS) for IoT, we have evaluated the experiment in a real Smart building scenario using one-class SVM. The detection accuracy of anomalies achieved 99.71%. A feasibility study is conducted to identify the current potential solutions to be adopted and to promote the research towards the open challenges.
Roadmap on optical security
Authors: Bahram Javidi, Artur Carnicer, Masahiro Yamaguchi, Takanori Nomura, Elisabet Pérez–Cabré, Marı́a S. Millán, Naveen K. Nishchal, Roberto Torroba, John Fredy Barrera, Wenqi He, Xiang Peng, Adrian Stern, Yair Rivenson, Ayman Alfalou, C. Brosseau, Changliang Guo, John T. Sheridan, Guohai Situ, Makoto Naruse, Tsutomu Matsumoto, Ignasi Juvells, Enrique Tajahuerce, Jesús Láncis, Wen Chen, Xudong Chen, Pepijn W. H. Pinkse, Allard P. Mosk, Adam Markman
Published in: Journal of Optics (2016-07-22)

Roadmap on optical security, Javidi, Bahram, Carnicer, Artur, Yamaguchi, Masahiro, Nomura, Takanori, Pérez-Cabré, Elisabet, Millán, María S, Nishchal, Naveen K, Torroba, Roberto, Barrera, John Fredy, He, Wenqi, Peng, Xiang, Stern, Adrian, Rivenson, Yair, Alfalou, A, Brosseau, C, Guo, Changliang, Sheridan, John T, Situ, Guohai, Naruse, Makoto, Matsumoto, Tsutomu, Juvells, Ignasi, Tajahuerce, Enrique, Lancis, Jesús, Chen, Wen, Chen, Xudong, Pinkse, Pepijn W H, Mosk, Allard P, Markman, Adam
Development &amp; psychometrics of the SOLID-S – An inventory assessing software security culture in software development companies
Authors: Christina Glasauer, Linda Maurer, Carina Spreitzer, Rainer W. Alexandrowicz
Published in: Computers & Security (2024-02-12)

Software security is a crucial requirement for most of the software used nowadays. Besides specialized knowledge of engineers and developers, organizational culture can contribute to software security to a great extent if specific cultural dimensions are in alignment with security. The purpose of this study is to develop and evaluate the SOLID-S, a six-dimensional inventory assessing this type of software security culture in software development companies. We present the iterative test development process of the inventory and examine its psychometric properties in an empirical study with N=327 participants by means of Item Response Theory. We identify the SOLID-S to have appropriate measurement qualities in terms of accuracy, fairness across subgroups, item fit and dimensionality. Results suggest that the inventory's subscales comply with the Partial Credit Model and, hence, raw sum scores of the subscales can be interpreted reliably. The SOLID-S can therefore be used for research, as a starting point for organizational change programs, or to evaluate the effectiveness of interventions aiming to improve security culture.
Security Testing for Naval Ship Combat System Software
Authors: Cheol-Gyu Yi, Young‐Gab Kim
Published in: IEEE Access (2021-01-01)

Military weapon systems are considered as “system of systems” (SoS). They comprise various equipment based on computers and networks and have been developed using commercial computing technology for several decades. The state-of-the-art weapon systems are information technology (IT) systems, for example, the cyber-physical system. In particular, the naval combat system, which is a weapon system, is a representative system interconnecting a number of equipments by using commercial computing technology. It is a software-based complex system, which produces and shares information about naval tactical situations by interconnecting the various systems installed on ships or remote platforms. Moreover, it performs tactical combat functions automatically or manually for assigned missions. As the core function and performance of the combat system shift from being hardware-centric to software-centric, cybersecurity threats to software that can affect the combat systems may emerge as a novel issue. The failure of the combat system to perform normal combat functions in an actual naval combat situation owing to cybersecurity issues is a very serious risk to naval operations. However, software security testing is not conducted systematically during system development because the cybersecurity of the combat system is evaluated to be less important than its function and performance, resulting in the development of an insecure and vulnerable combat system against cybersecurity threats. To build a secure combat system against cyberattacks, it is important to derive systematic and practical security testing for the combat system software during system development. This paper analyzes the previous researches on a software security test, characteristics of the combat system software, and guidelines for the software security testing of the Korean military's weapon system development. In addition, it proposes improved software security testing to strengthen the cybersecurity of the combat system based on its characteristics and missions.
A Review on Software Development Security Engineering using Dynamic System Method (DSDM)
Authors: Abdullahi Sani, Adila Firdaus, Seung Ryul Jeong, Imran Ghani
Published in: International Journal of Computer Applications (2013-05-17)

Agile methodology such as Scrum, Extreme Programming (XP), Feature Driven Development (FDD) and the Dynamic System Development Method (DSDM) have gained enough recognition as efficient development process by delivering software fast even under the time constrains. However, like other agile methods DSDM has been criticized because of unavailability of security element in its four phases. In order to have a deeper look into the matter and discover more about the reality, we conducted a literature review. Our findings highlight that, in its current form, the DSDM does not support developing secure software. Although, there are a few researches on this topic about Scrum, XP and FDD but, based on our findings, there is no research on developing secure software using DSDM. Thus, in our future work we intend to propose enhanced DSDM that will cater the security aspects in software development.
A review on software defined network security risks and challenges
Authors: Tsehay Admassu Assegie, Pramod S. Nair
Published in: TELKOMNIKA (Telecommunication Computing Electronics and Control) (2019-12-01)

Software defined network is an emerging networking architecture that separates the traditional integrated control logic and data forwarding functionality into different planes, namely the control plane and data forwarding plane. The data plane does and end to end data delivery. And the control plane does the actual network traffic forwarding and routing between different network segments. In software defined network the networking infrastructure layer where the entire networking device, such as switches and routers reside is connected with the separate controller layer with the help of standard called OpenFlow protocol. It is a standard protocol that allows different vendor devices like juniper switches, cisco switches and huawei switches to be connected to the controller. The centralization of the SDN controller made the network more flexible, manageable and dynamic, such as provisioning of bandwidth, dynamic scale out and scale in compared to the traditional communication network, however the centralized SDN controller is more vulnerable to security risk factors such as DDOS and flow rule poisoning attack. In this paper we will explore the architectures and principles of software defined network and security risks with the centralized SDN controller and possible ways to mitigate these risks.
Security-Centric Software Development: Integrating Secure Coding Practices into the Software Development Lifecycle
Authors: Md Abul Khair
Published in: HAL (Le Centre pour la Communication Scientifique Directe) (2018-02-02)

International audience
Gamifying Cybersecurity Education: A CTF-based Approach to Engaging Students in Software Security Laboratories
Authors: Hafidh Zouahi
Published in: Proceedings of the Canadian Engineering Education Association (CEEA) (2024-03-04)

CTF (Capture the Flag) competitions are increasingly being used in information technology and software engineering education to teach students about secure coding best practices. This paper presents an approach to improve engagement of software engineering students during software security laboratory assessments by using CTF-style challenges that are fun to solve and reflect modern security threats. The approach involves gamifying laboratory exercises by providing CTF-like challenges that are not only enjoyable but also reflect real-world security vulnerabilities. Additionally, students are given a single virtual machine bundled with everything needed for the entire semester, eliminating unnecessary logistic problems. Feedback from students confirms the effectiveness of this approach in reaching course objectives. Students were keen to learn more about the topic and showed greater interest in the laboratories. This approach provides a more dynamic and interactive learning experience that fosters critical thinking skills and encourages students to pursue careers in software security.
A Conceptual Security Framework for Cloud Computing Issues
Authors: Shadi Aljawarneh, Muneer Bani Yassein
Published in: International Journal of Intelligent Information Technologies (2016-04-01)

In this article, perspectives from Cloud computing practitioners are shown in order to address clients concerns and bring about awareness of the measures that put in place to ensure software security of the client services running in the Cloud. In addition, the authors have investigated the impacts of a number of the existing approaches and techniques to put a systematic survey of the current software security issues in the Cloud environment. Based on such perspectives and survey, a generic framework conceptually is designed to outline the possible current solutions of software security issues in the Cloud and to present a preferred software security approach to investigate the Cloud research community. As a potential enhancement on the proposed Cloud software security framework, the concepts of fuzzy systems might be used to solve a large numbers of issues in the Cloud security on different framework levels.
Security Testbed for Internet-of-Things Devices
Authors: Shachar Siboni, Vinay Sachidananda, Yair Meidan, Michael Bohadana, Yael Mathov, Suhas Bhairav, Asaf Shabtai, Yuval Elovici
Published in: IEEE Transactions on Reliability (2018-12-07)

The Internet of Things (IoT) is a global ecosystem of information and communication technologies aimed at connecting any type of object (thing), at any time, and in any place, to each other and to the Internet. One of the major problems associated with the IoT is the heterogeneous nature of such deployments; this heterogeneity poses many challenges, particularly, in the areas of security and privacy. Specifically, security testing and analysis of IoT devices is considered a very complex task, as different security testing methodologies, including software and hardware security testing approaches, are needed. In this paper, we propose an innovative security testbed framework targeted at IoT devices. The security testbed is aimed at testing all types of IoT devices, with different software/hardware configurations, by performing standard and advanced security testing. Advanced analysis processes based on machine learning algorithms are employed in the testbed in order to monitor the overall operation of the IoT device under test. The architectural design of the proposed security testbed along with a detailed description of the testbed implementation is discussed. The testbed operation is demonstrated on different IoT devices using several specific IoT testing scenarios. The results obtained demonstrate that the testbed is effective at detecting vulnerabilities and compromised IoT devices.
An Efficient Malware Detection Framework for Enhancing Software Security in Resource-Constrained Systems
Authors: Govind P. Gupta, Prabhat Kumar, Ahamed Aljuhani
Published in: IEEE Internet of Things Journal (2025-01-01)

The increasing adoption of Industrial Internet of Things (IIoT) networks has introduced new security challenges, particularly to ensure software security against evolving malware threats. IIoT systems rely on interconnected edge, cloud, and embedded devices, which are highly vulnerable to malware attacks that exploit software vulnerabilities, propagate across networks, and compromise industrial operations. However, existing malware detection approaches often struggle with resource constraints, high-dimensional feature spaces, and the need for real-time adaptability, making them inefficient for large-scale IIoT deployments. To address these challenges, this paper presents "GWPSO-GAMD," a resource-efficient malware detection framework designed to enhance software security in IIoT networks. The framework integrates a hybrid metaheuristic feature selection algorithm—Grey Wolf Optimization and Particle Swarm Optimization (GWPSO)—to identify the most discriminative and computationally efficient features, reducing processing overhead while maintaining high detection accuracy. These features are then analyzed by the Graph Android Malware Detector (GAMD), which leverages graph convolutional networks (GCNs) and attention mechanisms to model malware propagation behaviors and uncover complex attack patterns in IIoT environments. Empirical evaluations on two open-source malware datasets, CIC-MalDroid-2020 and CIC-MalMem-2022, demonstrate that the proposed model achieves detection accuracy above 98.41% while significantly reducing CPU usage by 47%, memory footprint by 57%, and training time by 67%. The results highlight GWPSO-GAMD’s ability to provide scalable, real-time malware detection for resource-constrained IIoT systems, advancing the vision of secure, intelligent, and resource-aware IIoT networks.
Software Security in Virtualized Infrastructures — The Smart Meter Example
Authors: Bernhard Beckert, Dennis Hofheinz, Jörn Müller‐Quade, Alexander Pretschner, Gregor Snelting
Published in: it - Information Technology (2011-05-01)

Abstract Future infrastructures for energy, traffic, and computing will be virtualized: they will consist of decentralized, self-organizing, dynamically adaptive, and open collections of physical resources such as virtual power plants or computing clouds. Challenges to software dependability, in particular software security will be enormous. We use the example of smart power meters to discuss advanced technologies for the protection of integrity and confidentiality of software and data in virtualized infrastructures. We show that approaches based on homomorphic encryption, proof-carrying code, information flow control, deductive verification, and runtime verification are promising candidates for providing solutions to a plethora of representative challenges in the domain of virtualized infrastructures.
Software & Security Assurance Metrics and methods for Software Certification
Authors: Fariborz Entezami
Published in:  (2011-10-19)

Our life has been affected by information technology. Software is used in most of our life even in some critical parts such as air traffic control or power plane to control very sensitive functions. Any misfunctionality or bugs in unreliable software could hide and it may cause problem and make cost even takes lives. Connectivity and complexity are common in software production today and these factors make assuring and certifying software big challenge that needs more money and time. In this paper, security and software certification and assurance have been considered and metrics which are used in this subject will cover and some techniques that reduce the effort of software evaluation will consider more.
Security in Telehealth Systems From a Software Engineering Viewpoint: A Systematic Mapping Study
Authors: Gastón Márquez, Hernán Astudillo, Carla Taramasco
Published in: IEEE Access (2020-01-01)

Telehealth systems deliver remote care of elderly and physically less able patients as well as remote surgeries, treatments, and diagnoses. In this regard, several systemic properties must be satisfied (such as security) in order to ensure the functionality of Telehealth systems. Although existing studies discuss different security episodes that involve Telehealth systems, it is difficult to have a clear standpoint about which are the most reported security issues and which solutions have been proposed. Furthermore, since Telehealth systems are composed of several software systems, it is not clear which critical areas of Software Engineering are relevant to develop secure Telehealth systems. This article reports a systematic mapping study (SMS) whose purpose is to detect, organize, and characterize security issues in Telehealth systems. Based on the SMS results, we examine how Software Engineering may help to develop secure Telehealth systems. From over a thousand studies, we distinguished and classified 41 primary studies. Results show that (i) four security classifications (attacks, vulnerabilities, weaknesses, and threats) concentrate the most reported security issues; (ii) three security strategies (detect attacks, stop or mitigate attacks and react to attacks) characterize security issues, and (iii) the most relevant research themes are related to insecure data transmission and privacy. The SMS's findings suggest that software design, requirements, and models are key areas to develop secure Telehealth systems.