jehanweerasuriya/uni-ai-dataset huggingface dataset:
Cybersecurity Awareness Based on Software and E-mail Security with Statistical Analysis
Authors: Mohammed Alqahtani
Published in: Computational Intelligence and Neuroscience (2022-03-18)

The aim of this study is to discover the impact of software security and e-mail security on overall cybersecurity among the students of Imam Abdulrahman Bin Faisal University in Dammam. Another main purpose to conduct this study is to know the level of knowledge students have in the developing countries about the cybersecurity and how much are they mindful of cyber-attacks and the level of awareness among the university students. Two important hypotheses were studied to discover their importance in awareness of cybersecurity. One is software security, and the other is e-mail security. A total of 11 relevant questions were drafted, and then these questions were distributed among the university students, and around 390 responded to the questionnaires. Statistical analysis was performed on the responses using tools. Initial tests such as validity and reliability test, feasibility test of a variable, correlation test, multicollinearity test, multiple regression, and Heteroskedasticity test were conducted using SPSS. And furthermore, multiple linear regression model and coefficient of determination, hypothesis test, ANOVA test, and partial test were conducted using ANOVA. The outcome of the analysis is software security variable (X1) that has a significant and positive effect on cybersecurity awareness ( <a:math xmlns:a="http://www.w3.org/1998/Math/MathML" id="M1"> <a:mi>p</a:mi> </a:math> value ≤0.001, β = 0.192). This shows that having a thorough understanding of software security can raise cybersecurity awareness up to 19.2%. E-mail security variable (X2) has a significant and positive effect on cybersecurityawareness ( <c:math xmlns:c="http://www.w3.org/1998/Math/MathML" id="M2"> <c:mi>p</c:mi> </c:math> -value ≤0.000). This shows that having a thorough understanding of email security can raise cybersecurity awareness up to 31.3%. Software security (X1) and e-mail security (X2) variables simultaneously have a significant effect on cybersecurity awareness ( <e:math xmlns:e="http://www.w3.org/1998/Math/MathML" id="M3"> <e:mi>p</e:mi> </e:math> -value ≤0.000) with a correlation coefficient of 12.1% (R2 = 0.121). This shows that the independent variable used can explain the level of cybersecurity awareness up to 12.1%. Research results show that students are aware of software or application updates. Furthermore, students’ awareness of email security is also good.
Evaluating the Impact of Software Security Tactics: A Design Perspective
Authors: Mamdouh Alenezi, Abhishek Pandey, Richa Verma, Mohd Faizan, Shalini Chandra, Alka Agrawal, Rajeev Kumar, Raees Ahmad Khan
Published in: Computers, materials & continua/Computers, materials & continua (Print) (2021-01-01)

Design architecture is the edifice that strengthens the functionalities as well as the security of web applications. In order to facilitate architectural security from the web application’s design phase itself, practitioners are now adopting the novel mechanism of security tactics. With the intent to conduct a research from the perspective of security tactics, the present study employs a hybrid multi-criteria decision-making approach named fuzzy analytic hierarchy process-technique for order preference by similarity ideal solution (AHP-TOPSIS) method for selecting and assessing multi-criteria decisions. The adopted methodology is a blend of fuzzy analytic hierarchy process (fuzzy AHP) and fuzzy technique for order preference by similarity ideal solution (fuzzy TOPSIS). To establish the efficacy of this methodology, the results are obtained after the evaluation have been tested on fifteen different web application projects (Online Quiz competition, Entrance Test, and others) of the Babasaheb Bhimrao Ambedkar University, Lucknow, India. The tabulated outcomes demonstrate that the methodology of the Multi-Level Fuzzy Hybrid system is highly effective in providing accurate estimation for strengthening the security of web applications. The proposed study will help experts and developers in developing and managing security from any web application design phase for better accuracy and higher security.
An overview of Fog computing and its security issues
Authors: Ivan Stojmenović, Sheng Wen, Xinyi Huang, Tom H. Luan
Published in: Concurrency and Computation Practice and Experience (2015-04-29)

Summary Fog computing is a paradigm that extends Cloud computing and services to the edge of the network. Similar to Cloud, Fog provides data, compute, storage and application services to end users. In this article, we elaborate the motivation and advantages of Fog computing and analyse its applications in a series of real scenarios, such as Smart Grid, smart traffic lights in vehicular networks and software defined networks. We discuss the state of the art of Fog computing and similar work under the same umbrella. Distinguished from other reviewing work of Fog computing, this paper further discloses the security and privacy issues according to current Fog computing paradigm. As an example, we study a typical attack, man‐in‐the‐middle attack, for the discussion of system security in Fog computing. We investigate the stealthy features of this attack by examining its CPU and memory consumption on Fog device. In addition, we discuss the authentication and authorization techniques that can be used in Fog computing. An example of authentication techniques is introduced to address the security scenario where the connection between Fog and Cloud is fragile. Copyright © 2015 John Wiley &amp; Sons, Ltd.
Open Source or Closed Source? A Competitive Analysis with Software Security
Authors: Xing Gao
Published in: Decision Analysis (2019-12-30)

Software security is an increasingly serious concern for users and ultimately impacts software firms’ choice of open source or closed source business models. However, the studies in this area are scarce, if not absent. This paper examines whether a software firm chooses open source or closed source in a competitive market when software security is taken into account. I construct a game-theoretic model in which two competitive firms first formulate their business models and then charge their prices for software products. I find that due to security concerns, two symmetric firms may choose a heterogeneous business model, in which one firm chooses open source and the other chooses closed source when the return of open source remains moderate. The two symmetric firms may be trapped in a prisoner’s dilemma with a moderate-high return of open source in which their equilibrium choices of business model, open source, lead to lower profits than when they switch to closed source. For two asymmetric firms in which only one has security concerns in its software products, I reveal that with a moderate return of open source, this firm follows closed source and the other without security concern employs open source. Interestingly, there never exists the other heterogeneous business model in equilibrium.
Software-Defined Security-by-Contract for Blockchain-Enabled MUD-Aware Industrial IoT Edge Networks
Authors: Prabhakar Krishnan, Kurunandan Jain, Krishnashree Achuthan, Rajkumar Buyya
Published in: IEEE Transactions on Industrial Informatics (2021-06-02)

To ensure the proper functioning and performance of Industrial grade Internet of Things devices (IIoT) in Industry 4.0 networks, it is critical to identify the capabilities and malfunctions of their component devices (e.g., sensors, actuators, and controllers) and detect potential misbehavior arising due to cyber-attacks, and misconfiguration. We envision future IoT devices embed behavioral profiles throughSecurity-by-Contract(S×C) that are easy to validate and verify against network security policies; manufacturers to provide manufacturer usage description (MUD) profiles as amanifestfor the devices to signal to the network what sort of access and network functionality they require to properly function. We design authentication in the IoT onboarding process, employ blockchains to a verifiable and immutable repository to store this network manifests, that is signed and verifiable with S×C basedsmart contractsby the device manufacturer, or industry authority. The integrated framework combines blockchains and S×C security contracts, MUD-based behavioral fingerprinting, and software-defined-networking for managing the security of IIoT ecosystems. Finally, the proposed scheme is validated in a simulated IoT environment on various performance parameters.
Managing Software Security Knowledge in Context: An Ontology Based Approach
Authors: Shao-Fang Wen, Basel Katt
Published in: Information (2019-06-20)

Knowledge of software security is highly complex since it is quite context-specific and can be applied in diverse ways. To secure software development, software developers require not only knowledge about general security concepts but also about the context for which the software is being developed. With traditional security-centric knowledge formats, it is difficult for developers or knowledge users to retrieve their required security information based on the requirements of software products and development technologies. In order to effectively regulate the operation of security knowledge and be an essential part of practical software development practices, we argue that security knowledge must first incorporate features that specify what contextual characteristics are to be handled, and represent the security knowledge in a format that is understandable and acceptable to the individuals. This study introduces a novel ontology approach for modeling security knowledge with a context-based approach, by which security knowledge can be retrieved, taking the context of the software application at hand into consideration. In this paper, we present our security ontology with the design concepts and the corresponding evaluation process.
Convolutional Neural Network Based Algorithm for Early Warning Proactive System Security in Software Defined Networks
Authors: Ahmed H. Janabi, Triantafyllos Kanakis, Mark Johnson
Published in: IEEE Access (2022-01-01)

Software-Defined Networking is an innovative architecture approach in the networking field. This technology allows networks to be centrally and intelligently managed by unified applications such as traffic classification and security management. Traditional networks’ static nature has a minimal capacity to meet organisations business requirements. Software-Defined Networks (SDNs) are the emerging architectures that address a range of networking challenges with new solutions. Nevertheless, these centralised and programmable techniques face various challenges and issues that require contemporary security solutions such as Intrusion Detection Systems. Recently, the majority of this type of security solution has been developed using Machine Learning techniques. Deep Learning algorithms have recently been used to provide more accuracy and efficiency. This paper presents a new detection approach based on Convolutional Neural Network (CNN). The experiments proved that the proposed model could be successfully implemented in a Software-Defined Network controller to detect various attacks with 100% accuracy, achieved a low degradation rate of 2.3% throughput and 1.8% latency when executed in a large-scale network.
Security-control methods for statistical databases: a comparative study
Authors: Nabil R. Adam, John C. Worthmann
Published in: ACM Computing Surveys (1989-12-01)

This paper considers the problem of providing security to statistical databases against disclosure of confidential information. Security-control methods suggested in the literature are classified into four general approaches: conceptual, query restriction, data perturbation, and output perturbation. Criteria for evaluating the performance of the various security-control methods are identified. Security-control methods that are based on each of the four approaches are discussed, together with their performance with respect to the identified evaluation criteria. A detailed comparative analysis of the most promising methods for protecting dynamic-online statistical databases is also presented. To date no single security-control method prevents both exact and partial disclosures. There are, however, a few perturbation-based methods that prevent exact disclosure and enable the database administrator to exercise "statistical disclosure control." Some of these methods, however introduce bias into query responses or suffer from the 0/1 query-set-size problem (i.e., partial disclosure is possible in case of null query set or a query set of size 1). We recommend directing future research efforts toward developing new methods that prevent exact disclosure and provide statistical-disclosure control, while at the same time do not suffer from the bias problem and the 0/1 query-set-size problem. Furthermore, efforts directed toward developing a bias-correction mechanism and solving the general problem of small query-set-size would help salvage a few of the current perturbation-based methods.
Lightweight model checking for improving software security
Authors: Hao Chen, David Wagner
Published in:  (2004-01-01)

Software assurance is a grand challenge in computer security; software vulnerabilities are responsible for many recurring attacks on computer systems. However, developers have few effective means of improving software security. Manual code inspection is tedious and unreliable. Complete formal verification is an automated approach that provides high assurance for software systems, however, it does not scale to large programs and it requires high expertise for writing specifications. As a result, software developers acutely need an effective yet practical approach that they can use for discovering and preventing security bugs in software development process. This dissertation shows that lightweight model checking is an effective, practical approach for improving software security. First, we designed a formal framework for checking source code for violations of security properties. Then, we implemented the framework in a tool called MOPS and developed the following key features for making MOPS practical: it scales to large programs; it allows ordinary programmers to write specifications; it reports concise, comprehensive error traces; and it integrates into software build process automatically. To validate our design goal of MOPS, we used MOPS to audit both application and kernel code: we ran MOPS on 60 million lines of C programs in RedHat Linux, during which we discovered dozens of security bugs, and we used MOPS to verify design invariants in the EROS kernel. Our success shows that lightweight model checking is a powerful, practical approach for improving security of large software systems.
An analysis of security issues for cloud computing
Authors: Keiko Hashizume, David G. Rosado, Eduardo Fernández‐Medina, Eduardo B. Fernández
Published in: Journal of Internet Services and Applications (2013-01-01)

Cloud Computing is a flexible, cost-effective, and proven delivery platform for providing business or consumer IT services over the Internet. However, cloud Computing presents an added level of risk because essential services are often outsourced to a third party, which makes it harder to maintain data security and privacy, support data and service availability, and demonstrate compliance. Cloud Computing leverages many technologies (SOA, virtualization, Web 2.0); it also inherits their security issues, which we discuss here, identifying the main vulnerabilities in this kind of systems and the most important threats found in the literature related to Cloud Computing and its environment as well as to identify and relate vulnerabilities and threats with possible solutions.
A Survey on Emerging SDN and NFV Security Mechanisms for IoT Systems
Authors: Ivan Farris, Tarik Taleb, Yacine Khettab, JaeSeung Song
Published in: IEEE Communications Surveys & Tutorials (2018-08-01)

The explosive rise of Internet of Things (IoT) systems have notably increased the potential attack surfaces for cybercriminals. Accounting for the features and constraints of IoT devices, traditional security countermeasures can be inefficient in dynamic IoT environments. In this vein, the advantages introduced by software defined networking (SDN) and network function virtualization (NFV) have the potential to reshape the landscape of cybersecurity for IoT systems. To this aim, we provide a comprehensive analysis of security features introduced by NFV and SDN, describing the manifold strategies able to monitor, protect, and react to IoT security threats. We also present lessons learned in the adoption of SDN/NFV-based protection approaches in IoT environments, comparing them with conventional security countermeasures. Finally, we deeply discuss the open challenges related to emerging SDN- and NFV-based security mechanisms, aiming to provide promising directives to conduct future research in this fervent area.
A Survey on Software-Defined Networking
Authors: Wenfeng Xia, Yonggang Wen, Chuan Heng Foh, Dusit Niyato, Haiyong Xie
Published in: IEEE Communications Surveys & Tutorials (2014-06-19)

Emerging mega-trends (e.g., mobile, social, cloud, and big data) in information and communication technologies (ICT) are commanding new challenges to future Internet, for which ubiquitous accessibility, high bandwidth, and dynamic management are crucial. However, traditional approaches based on manual configuration of proprietary devices are cumbersome and error-prone, and they cannot fully utilize the capability of physical network infrastructure. Recently, software-defined networking (SDN) has been touted as one of the most promising solutions for future Internet. SDN is characterized by its two distinguished features, including decoupling the control plane from the data plane and providing programmability for network application development. As a result, SDN is positioned to provide more efficient configuration, better performance, and higher flexibility to accommodate innovative network designs. This paper surveys latest developments in this active research area of SDN. We first present a generally accepted definition for SDN with the aforementioned two characteristic features and potential benefits of SDN. We then dwell on its three-layer architecture, including an infrastructure layer, a control layer, and an application layer, and substantiate each layer with existing research efforts and its related research areas. We follow that with an overview of the de facto SDN implementation (i.e., OpenFlow). Finally, we conclude this survey paper with some suggested open research challenges.
Analytic Review of Healthcare Software by Using Quantum Computing Security Techniques
Authors: Sultan H. Almotiri, Nadeem Mohd, A. Al Ghamdi Mohammed, Ahmad Khan Raees
Published in: International Journal of Fuzzy Logic and Intelligent Systems (2023-09-30)

The core objective of this security research is to ensure that healthcare software (HS) is secure when operating on a fully functional quantum computer.Developers are constantly coming up with innovative methods to maintain usability while maximizing security.The degree of security is not as high as it should be despite numerous efforts made in this area by developers and security specialists.It is also crucial to conduct additional research on the best methods for enhancing and assessing the security of healthcare technologies.This study specifically aims to assess the security of HS during quantum computing (QC) operations.Based on the empirical analysis of a substantial amount of data, this study makes recommendations for creating a secure HS.In the quantum age, decision-makers frequently experience difficulties in integrating extremely secure software.This study aims for the inclusion of security-related aspects.This study also suggests utilizing a novel technique that evaluates healthcare software security (HSS) simultaneously using the analytic hierarchy process (AHP), fuzzy sets (FS), and a method for order of preference by similarity to an ideal solution (TOPSIS).The F-AHP and F-TOPSIS hybrid solution techniques were evaluated using 10 quantum security algorithms.The security assessment conclusions indicate that this cutting-edge hybrid technique is the most accurate and useful method to evaluate the security of an HS.Most importantly, these findings will benefit security management without jeopardizing end users.
Software Security: State of the Art
Authors: Ross Anderson
Published in: IEEE Security & Privacy (2007-01-01)

Ross Anderson reviews Gary McGraw's book, Software Security: Building Security In.
On the Feasibility of Utilizing Security Metrics in Software-Intensive Systems
Authors: Reijo Savola
Published in:  (2010-01-01)

Security measurement of software-intensive systems is an emerging field, rapidly gaining momentum. Well-designed security metrics offer credible and sufficient evidence of security level and performance for security decision-making. In this study, we introduce a novel security metrics feasibility validation approach, consisting of validation criteria and an associated validation process that takes into account the used measurement approaches and the use of security metrics. The approach is based on the identification of needs for and challenges in using security metrics, and the identification of good properties of security metrics from related work. Key words: Security metrics, security measurement, feasibility, security
Power/energy: System security: The computer's role: Several security-related functions can be aided by the digital computer, and linked together by a software scheme
Authors: T.E. Dy Liacco
Published in: IEEE Spectrum (1978-06-01)

Security functions are now incorporated into computer programs to deal with operating conditions as well as with disturbances that could lead to equipment overloads, voltage degradation, frequency decay, system instability, service interruption, or the ultimate catastrophe of a system shutdown. This article discusses how these functions fit into the overall control structure of a power system, and summarizes the extent to which they have been realized in today's power-system control centers.
Security by Design in Software Engineering
Authors: Mark Kreitz
Published in: ACM SIGSOFT Software Engineering Notes (2019-11-14)

Security is a non-functional requirement difficult-to-handle during software development. However, it appears to be common in software engineering, that security is taken care of during the design- and test-phase only. If security is neglected during the implementation phase, flaws will be introduced. Those may be - if at all - found during testing where the cost-to-fix is higher as if found during the implementation phase. Hence, this research proposal suggests to investigate the extent to which code analysis tools can be used as a step towards continuous security inspection in software engineering projects. By automating security testing in development flaws can be found as soon as they are introduced. This could greatly reduce the cost to fix flaws and help building more secure software.