jehanweerasuriya/uni-ai-dataset huggingface dataset:
A Study on ML-Based Software Defect Detection for Security Traceability in Smart Healthcare Applications
Authors: Samuel Mcmurray, Ali Hassan Sodhro
Published in: Sensors (2023-03-26)

Software Defect Prediction (SDP) is an integral aspect of the Software Development Life-Cycle (SDLC). As the prevalence of software systems increases and becomes more integrated into our daily lives, so the complexity of these systems increases the risks of widespread defects. With reliance on these systems increasing, the ability to accurately identify a defective model using Machine Learning (ML) has been overlooked and less addressed. Thus, this article contributes an investigation of various ML techniques for SDP. An investigation, comparative analysis and recommendation of appropriate Feature Extraction (FE) techniques, Principal Component Analysis (PCA), Partial Least Squares Regression (PLS), Feature Selection (FS) techniques, Fisher score, Recursive Feature Elimination (RFE), and Elastic Net are presented. Validation of the following techniques, both separately and in combination with ML algorithms, is performed: Support Vector Machine (SVM), Logistic Regression (LR), Naïve Bayes (NB), K-Nearest Neighbour (KNN), Multilayer Perceptron (MLP), Decision Tree (DT), and ensemble learning methods Bootstrap Aggregation (Bagging), Adaptive Boosting (AdaBoost), Extreme Gradient Boosting (XGBoost), Random Forest(RF), and Generalized Stacking (Stacking). Extensive experimental setup was built and the results of the experiments revealed that FE and FS can both positively and negatively affect performance over the base model or Baseline. PLS, both separately and in combination with FS techniques, provides impressive, and the most consistent, improvements, while PCA, in combination with Elastic-Net, shows acceptable improvement.
How to Break Web Software: Functional and Security Testing of Web Applications and Web Services
Authors: Mike Andrews, James A. Whittaker
Published in:  (2006-02-02)

Preface vii Acknowledgments ix About the Authors xi Chapter 1: The Web Is Different 1 Chapter 2: Gathering Information on the Target 11 Chapter 3: Attacking the Client 29 Chapter 4: State-Based Attacks 41 Chapter 5: Attacking User-Supplied Input Data 65 Chapter 6: Language-Based Attacks 85 Chapter 7: Attacking the Server 99 Chapter 8: Authentication 115 Chapter 9: Privacy 135 Chapter 10: Web Services 149 Appendix A: Fifty Years of Software: Key Principles for Quality 159 Appendix B: Flowershop Bugs 171 Appendix C: Tools 179 Index 207
Security of smart manufacturing systems
Authors: Nilufer Tuptuk, Stephen Hailes
Published in: Journal of Manufacturing Systems (2018-04-01)

A revolution in manufacturing systems is underway: substantial recent investment has been directed towards the development of smart manufacturing systems that are able to respond in real time to changes in customer demands, as well as the conditions in the supply chain and in the factory itself. Smart manufacturing is a key component of the broader thrust towards Industry 4.0, and relies on the creation of a bridge between digital and physical environments through Internet of Things (IoT) technologies, coupled with enhancements to those digital environments through greater use of cloud systems, data analytics and machine learning. Whilst these individual technologies have been in development for some time, their integration with industrial systems leads to new challenges as well as potential benefits. In this paper, we explore the challenges faced by those wishing to secure smart manufacturing systems. Lessons from history suggest that where an attempt has been made to retrofit security on systems for which the primary driver was the development of functionality, there are inevitable and costly breaches. Indeed, today's manufacturing systems have started to experience this over the past few years; however, the integration of complex smart manufacturing technologies massively increases the scope for attack from adversaries aiming at industrial espionage and sabotage. The potential outcome of these attacks ranges from economic damage and lost production, through injury and loss of life, to catastrophic nation-wide effects. In this paper, we discuss the security of existing industrial and manufacturing systems, existing vulnerabilities, potential future cyber-attacks, the weaknesses of existing measures, the levels of awareness and preparedness for future security challenges, and why security must play a key role underpinning the development of future smart manufacturing systems.
RESEARCH OF THE SOFTWARE SECURITY MODEL AND REQUIREMENTS
Authors: Serhii Semenov, Viacheslav Davydov, Daryna Hrebeniuk
Published in: Advanced Information Systems (2021-06-22)

The subject of research in the article is a software security model. The aim of the work is to research the quality characteristics of the software and requirements for the software security in order to improve their safety. The article solves the following tasks: researching the shortcomings of the existing security model in order to identify its main shortcomings; study of the quality characteristics of software that affect its security in order to identify the possibility of improving the quality of software. The following results were obtained: on the basis of the analysis of the existing model of software security, the main features of the attributes of this model were identified, their advantages and disadvantages were given. On the basis of the conducted analytical study, the necessity of improving the existing model of ensuring the security of software has been proved. Existing requirements for software and characteristics that affect its quality are considered. The characteristics of software security are highlighted, the indicators of which should be improved. Conclusions: a software security model has been studied. The need to develop this model is shown by introducing the possibility of adapting the existing requirements for the security of software tools throughout the entire life cycle of software development; the study of the quality characteristics of software showed that to ensure its security, it is necessary to improve the following characteristics: integrity, authentication, confidentiality, access control. However, it was shown that an increase in these characteristics can lead to a deterioration in other indicators of software quality: portability, maintainability, performance.
BCNBI: A Blockchain-Based Security Framework for Northbound Interface in Software-Defined Networking
Authors: Sultan Algarni, Fathy Eassa, Khalid Ali Almarhabi, Abdullah Algarni, Aiiad Albeshri
Published in: Electronics (2022-03-23)

Software-defined networking (SDN) has emerged as a flexible and programmable network architecture that takes advantage of the benefits of global visibility and centralized control over a network. One of the main properties of the SDN architecture is the ability to offer a northbound interface (NBI), which enables network applications to access the SDN controller resources. However, the NBI can be compromised by a malicious application due to the lack of standardization and security aspects in the most current NBI designs. Therefore, in this paper, we propose a novel comprehensive security solution for securing the application–controller interface, named BCNBI. We propose a controller-independent lightweight blockchain architecture and exploit the security features of blockchain while limiting the blockchain’s computational overhead. BCNBI automatically verifies application and SDN controller credentials through token-based authentication. The proposed solution enforces fine-grained access control for each application’s API request and classifies the permission set into strict and normal policies, in order to add an extra level of security. In addition, the trustworthiness of applications is evaluated in order to prevent malicious activities. We implemented our blockchain-based solution to analyze its security, based on the confidentiality–integrity–availability model criteria, and evaluated the introduced overhead in terms of processing time and packet overhead. The experimental results demonstrate that the BCNBI can effectively secure the NBI, based on the fundamental security goals, while introducing insignificant overhead.
A Hybrid Fuzzy Rule-Based Multi-Criteria Framework for Security Assessment of Medical Device Software
Authors: Abdullah Algarni, Masood Ahmad, Abdulaziz Attaallah, Alka Agrawal, Rajeev Kumar, Raees Ahmad Khan
Published in: International journal of intelligent engineering and systems (2020-08-25)

The third party software components for medical devices are a critical issue because the hackers can send the updates for medical device software which may contain malware that can affect the medical devices. To quote an instance in this regard is the report generated by Zoll, a supplier of medical devices, which states that several patients' data was exposed in 2019 due to an error which occurred at the time of software updating. In this paper we have attempted the assessment the security of medical devices software from different suppliers. We applied the Fuzzy Analytic Network Process (ANP) and Technique for Order Preference by Similarity to Ideal Solution (TOPSIS) methodology for the assessment of third party software component of medical imaging devices. We have listed the criteria and alternatives for the assessment of the software security. The tabulated results that have been presented in the study are evidently showing the satisfaction degree and the ranking of the software security in the obtained order of A6, A1, A2, A5, A4, and A3. Furthermore, the ranking of the software shows that Rank 1 obtained A6 alternatives, which implies that it is absolutely important. Likewise, Rank 2 implies strongly important, 3rd Rank shows fairly important, 4th shows weakly, 5th shows equally and the 6th Rank equates with bad. Use of our framework would be an apt guideline for the manufacturers and users in developing software that is efficacious while being secure for all the stakeholders associated with the use of medical devices. Should the developers adhere to the suggested framework in this study, they can be assured of developing secure medical device software at the initial level of development of the software.
Latest trends, challenges and solutions in security in the era of cloud computing and software defined networks
Authors: Wajid Hassan, Te‐Shun Chou, Xiaoming Li, Patrick Appiah-Kubi, Tamer Omar
Published in: International Journal of Informatics and Communication Technology (IJ-ICT) (2019-12-01)

The emergence of cloud computing has changed perception of all regarding software delivery, development models and infrastructure. Cloud computing has a potential of providing elastic, easily manageable, powerful and cost effective solutions. The rapid transition to cloud computing has fueled concerns on the security issues. The migration of the user’s data and applications in a shared environment of a cloud, where there is a collocation of several users increases security related concerns. Several research efforts have been made in evaluating challenges related to security faced by the cloud computing environments, a number of solutions of such problems have also been proposed. Integrated security solutions should be devised to deal with the increasing security risks. In this paper, a detailed cloud computing survey, key services and concepts are being presented. This paper attempts to evaluate various security threats to cloud computing and a number of security solutions have also been discussed. Furthermore, a brief view of the cloud security regulatory bodies and compliance have also been presented. Despite the research efforts in cloud security field, there are still some open research problems and challenges which are discussed in this paper.
An Energy-Efficient SDN Controller Architecture for IoT Networks With Blockchain-Based Security
Authors: Abbas Yazdinejad, Reza M. Parizi, Ali Dehghantanha, Qi Zhang, Kim‐Kwang Raymond Choo
Published in: IEEE Transactions on Services Computing (2020-01-15)

Internet of Things (IoT) is a disruptive technology in many aspects of our society, ranging from communications to financial transactions to national security (e.g., Internet of Battlefield / Military Things), and so on. There are long-standing challenges in IoT, such as security, comparability, energy consumption, and heterogeneity of devices. Security and energy aspects play important roles in data transmission across IoT and edge networks, due to limited energy and computing (e.g., processing and storage) resources of networked devices. Whether malicious or accidental, interference with data in an IoT network potentially has real-world consequences. In this article, we explore the potential of integrating blockchain and software-defined networking (SDN) in mitigating some of the challenges. Specifically, we propose a secure and energy-efficient blockchain-enabled architecture of SDN controllers for IoT networks using a cluster structure with a new routing protocol. The architecture uses public and private blockchains for Peer to Peer (P2P) communication between IoT devices and SDN controllers, which eliminates Proof-of-Work (POW), as well as using an efficient authentication method with the distributed trust, making the blockchain suitable for resource-constrained IoT devices. The experimental results indicate that the routing protocol based on the cluster structure has higher throughput, lower delay, and lower energy consumption than EESCFD, SMSN, AODV, AOMDV, and DSDV routing protocols. In other words, our proposed architecture is demonstrated to outperform classic blockchain.
Cyber Security and the Internet of Things: Vulnerabilities, Threats, Intruders and Attacks
Authors: Mohamed Abomhara, Geir M. K�ien
Published in: Journal of Cyber Security and Mobility (2015-05-22)

Internet of Things (IoT) devices are rapidly becoming ubiquitous while IoT services are becoming pervasive. Their success has not gone unnoticed and the number of threats and attacks against IoT devices and services are on the increase as well. Cyber-attacks are not new to IoT, but as IoT will be deeply interwoven in our lives and societies, it is becoming necessary to step up and take cyber defense seriously. Hence, there is a real need to secure IoT, which has consequently resulted in a need to comprehensively understand the threats and attacks on IoT infrastructure. This paper is an attempt to classify threat types, besides analyze and characterize intruders and attacks facing IoT devices and services.
DistB-SDoIndustry: Enhancing Security in Industry 4.0 Services based on Distributed Blockchain through Software Defined Networking-IoT Enabled Architecture
Authors: Anichur Rahman, Umme Sara, Dipanjali Kundu, Saiful Islam, Md. Jahidul, Mahedi Hasan, Ziaur Rahman, Mostofa Kamal
Published in: International Journal of Advanced Computer Science and Applications (2020-01-01)

The concept of Industry 4.0 is a newly emerging focus of research throughout the world. However, it has lots of challenges to control data, and it can be addressed with various technologies like Internet of Things (IoT), Big Data, Artificial Intelligence (AI), Software Defined Networking (SDN), and Blockchain (BC) for managing data securely. Further, the complexity of sensors, appliances, sensor networks connecting to the internet and the model of Industry 4.0 has created the chal-lenge of designing systems, infrastructure and smart applications capable of continuously analyzing the data produced. Regarding these, the authors present a distributed Blockchain-based security to industry 4.0 applications with SDN-IoT enabled environment. Where the Blockchain can be capable of leading the robust, privacy and confidentiality to our desired system. In addition, the SDN-IoT incorporates the different services of industry 4.0 with more security as well as flexibility. Furthermore, the authors offer an excellent combination among the technologies like IoT, SDN and Blockchain to improve the security and privacy of Industry 4.0 services properly. Finally , the authors evaluate performance and security in a variety of ways in the presented architecture.
A blockchain future for internet of things security: a position paper
Authors: Mandrita Banerjee, Jung­hee Lee, Kim‐Kwang Raymond Choo
Published in: Digital Communications and Networks (2017-11-01)

Internet of Things (IoT) devices are increasingly being found in civilian and military contexts, ranging from smart cities and smart grids to Internet-of-Medical-Things, Internet-of-Vehicles, Internet-of-Military-Things, Internet-of-Battlefield-Things, etc. In this paper, we survey articles presenting IoT security solutions published in English since January 2016. We make a number of observations, including the lack of publicly available IoT datasets that can be used by the research and practitioner communities. Given the potentially sensitive nature of IoT datasets, there is a need to develop a standard for sharing IoT datasets among the research and practitioner communities and other relevant stakeholders. Thus, we posit the potential for blockchain technology in facilitating secure sharing of IoT datasets (e.g., using blockchain to ensure the integrity of shared datasets) and securing IoT systems, before presenting two conceptual blockchain-based approaches. We then conclude this paper with nine potential research questions.
A Security Assessment Mechanism for Software-Defined Networking-Based Mobile Networks
Authors: Shibo Luo, Mianxiong Dong, Kaoru Ota, Jun Wu, Jianhua Li
Published in: Sensors (2015-12-17)

Software-Defined Networking-based Mobile Networks (SDN-MNs) are considered the future of 5G mobile network architecture. With the evolving cyber-attack threat, security assessments need to be performed in the network management. Due to the distinctive features of SDN-MNs, such as their dynamic nature and complexity, traditional network security assessment methodologies cannot be applied directly to SDN-MNs, and a novel security assessment methodology is needed. In this paper, an effective security assessment mechanism based on attack graphs and an Analytic Hierarchy Process (AHP) is proposed for SDN-MNs. Firstly, this paper discusses the security assessment problem of SDN-MNs and proposes a methodology using attack graphs and AHP. Secondly, to address the diversity and complexity of SDN-MNs, a novel attack graph definition and attack graph generation algorithm are proposed. In order to quantify security levels, the Node Minimal Effort (NME) is defined to quantify attack cost and derive system security levels based on NME. Thirdly, to calculate the NME of an attack graph that takes the dynamic factors of SDN-MN into consideration, we use AHP integrated with the Technique for Order Preference by Similarity to an Ideal Solution (TOPSIS) as the methodology. Finally, we offer a case study to validate the proposed methodology. The case study and evaluation show the advantages of the proposed security assessment mechanism.
Analyzing and Evaluating Critical Cyber Security Challenges Faced by Vendor Organizations in Software Development: SLR Based Approach
Authors: Abdul Wahid Khan, Shah Zaib, Faheem Khan, İlhan Tarımer, Jung Taek Seo, Jiho Shin
Published in: IEEE Access (2022-01-01)

Security is the protection from various kinds of threats and most organizations engage in the challenge of security especially cyber-attacks. The attacks are increasing rapidly, due to which cyber security does not now change on supervised and pattern-based detection algorithms which assure continuous security observing. There are many kinds of problems in vendor organizations like cyber theft, which is the most common attack in cyberspace. This research study is developing a Cyber Security Challenges Model (CSCM) that will facilitate vendors&#x2019; organizations to identify challenges of cyber security during the development of software in a vendor organization. To find cyber security issues/challenges, a Systematic Literature Review (SLR) is conducted on 44 relevant research publications by developing a search string based on research questions. As the final selected research publications were less in number and did not complete our aim, therefore, snow bowling technique is applied to 67 relevant research publications. This relevant data was comprised of different databases/sources e.g., Google Scholar, IEEE Explore, SpringerLink, ACM Digital Library, anFffid ScienceDirect. Furthermore, for the distinctive literature review, we&#x2019;ve carried out all of the steps in SLR, for example, improvement of SLR protocol, initials, and a very last collection of the applicable information, data extraction, data quality assessment, and data synthesis. Thirteen (13) critical cyber security challenges are identified which are; &#x201C;Security issues/Access of Cyberattacks&#x201D;, &#x201C;Lack of Right Knowledge&#x201D;, &#x201C;Framework&#x201D;, &#x201C;Lack of Technical Support&#x201D;, &#x201C;Disaster Issues&#x201D;, &#x201C;Cost Security issues&#x201D;, &#x201C;Lack of Confidentiality and Trust&#x201D;, &#x201C;Lack of Management&#x201D;, &#x201C;Unauthorized Access issues&#x201D;, &#x201C;Lack of Resources&#x201D;, &#x201C;Lack of Metrics&#x201D;, &#x201C;Administrative Mistakes during Development&#x201D; and &#x201C;Lack of Quality, Liability, and Reliability&#x201D;. The findings of our analysis study signify the similarities and dissimilarities in the recognized cybersecurity challenges in different decades, companies/firms, continents, databases, and methodologies.
Security in Low Powered Wide Area Networks: Opportunities for Software Defined Network-Supported Solutions
Authors: Gaurav Pathak, Jairo Gutiérrez, Saeed Ur Rehman
Published in: Electronics (2020-07-25)

The Internet of things (IoT) has revolutionized the use of connectivity and has given birth to new transmission technologies to satisfy the requirements of diverse IoT applications. Low powered wide area networks (LPWAN) is one of those transmission technologies, and is becoming exceptionally useful for IoT applications. The nodes use energy-efficient mechanisms for long-range data transmission (10–20 km), lasting in hostile environments for years and making them suitable for IoT applications such as environmental monitoring, automated billing systems, smart homes, smart offices, and patient monitoring. However, LPWAN devices have minimal resources, which makes it challenging to provide promising security to devices and data in the network. In this paper, we discuss the security mechanisms used in current LPWAN technologies along with their vulnerabilities and possible attacks on them. A detailed literature review is conducted on existing solutions on the security of constrained IoT networks similar to LPWAN using different networking frameworks. The reviewed literature is then compared based on various network security measures addressed by them. In addition, the emergence of software defined network (SDN) architecture for security in IoT is explained based on literature. Finally, the applicability of SDN in LPWAN security, its opportunities, and challenges in implementation are discussed.