Innovative solutions for critical infrastructure resilience against cyber-physical attacks

Critical infrastructures (CIs), including energy, healthcare, and transportation, are vital to societal functions, making their security paramount. The emergence of edge computing as a means of safe data management is a direct result of the growing dependence of these infrastructures on real-time data and networked devices. Computing at the edge, or near the source of data, improves efficiency, simplifies data processing, and enables better real-time judgements by decentralising data processing. However, this distributed architecture introduces new security challenges, such as managing a broader attack surface and ensuring data integrity. This paper reviews the role of edge computing in securing critical infrastructures and discusses advanced security measures like encryption, access control, AI-driven anomaly detection, and blockchain. It also outlines future research directions, emphasizing the need for scalable, interoperable edge systems, AI-enhanced security models, quantum-safe encryption, and privacy-preserving techniques. Global standardization is highlighted as essential for consistent, reliable integration. Ultimately, edge computing offers a promising pathway to fortify critical infrastructures against evolving cyber threats, ensuring their continued, resilient operation in an increasingly connected and digital world

While the world is becoming increasingly interdependent, the countries are evermore dependent on information systems, high-speed communications and artificial intelligence. That is increasing the risks and threats to citizens' privacy, global trade, the resilient of critical infrastructure and even the readiness of the armed forces. Traditional security measures are lagging behind new challenges and they are insufficient to prevent emerging risks. The potential damage that these threats can inflict on security and economy grows tremendously, but countermeasures needs to be sophisticated and thus difficult for implementation. The 21st century instead to be the era of technologies and information revolutions is becoming of synonymous of global risks and uncertainty. This article explore the transformation of relations in cyberspace as a result of globalization and the development of information technologies, that create preconditions for new forms of criminal activity - cyberwar, cyber terrorism and cybercrime. The globalization of social and political processes lead to globalization of crime, which now is transnational. Today becomes more and more obvious the need for conceptual clarity and innovative approaches in security study for cyber threats in modern society. Understanding of interconnection between globalization in cyberspace and increasing insecurity in it as a consequence of that globalization and the relation between new information technology and emerging threats coning with their use is crucial for security of our societies. The article explore cyber security as one of the biggest challenges for today's interconnected world and how to achieve it resilient development and progress .

Critical infrastructures support essential services across various sectors, including finance, energy, healthcare, and public administration. However, their increasing exposure to the internet, combined with insecure communication protocols, weak authentication mechanisms, and misconfigurations, makes them prime targets for cyber threats. To address these risks, this paper presents a novel cybersecurity methodology tailored for Industrial Control Systems (ICS), leveraging the Shodan search engine for systematic vulnerability identification. The proposed approach integrates six key phases: IP discovery (1), DNS verification (2), port, protocol and service identification (3), operating system profiling (4), web application analysis (5), and comprehensive risk assessment using a customized risk matrix (6). This study contributes by (1) conducting a systematic literature review to identify gaps in existing ICS security frameworks, (2) developing a structured methodology for risk assessment across different ICS lifecycle phases, (3) applying the methodology to a real-world case study to validate its effectiveness, and (4) demonstrating its capability to systematically identify vulnerabilities, quantify risks, and provide actionable security insights. The results reveal critical security gaps, such as outdated software and unencrypted communication channels, emphasizing the need for improved security controls. By quantifying the attack surface and assessing risk levels, the proposed model enables stakeholders to prioritize remediation efforts effectively. The findings highlight the urgent need for proactive security measures in ICS environments, reinforcing the importance of continuous monitoring and risk mitigation strategies to enhance the resilience of critical infrastructures against evolving cyber threats.

This article explores the role of IT audits in strengthening cybersecurity for Bulk Electric Systems (BES). Focusing on compliance with NERC Critical Infrastructure Protection (CIP) standards, it highlights how IT audits enhance access management practices, mitigate risks, and safeguard sensitive data. Through actionable insights, such as improving access controls, permissions, and authentication methods, IT audits help organizations protect critical infrastructure from unauthorized access and evolving cyber threats.

By 2030, forecasts suggest that urban areas will house 60 percent of the world’s population and one in every three people will live in cities with at least half a million inhabitants. Within the same time frame, the number of global megacities is expected to jump from 33 today to 43 in 2030 [1]. Underpinning these large urban areas will be an interconnected network of critical physical infrastructures reliant on Internet-connected Industrial Control Systems and susceptible to increasingly sophisticated, e.g., AI-enabled, cyber threats. In hand, the cyber threat landscape is shifting rapidly. We are seeing a sharp rise in the number of cyberattacks on critical infrastructure [2] with significant impacts cascading across multiple sectors and causing disruption to the provisioning of essential goods and services. Security scholars suggest that these impacts are not always equitable and that disruption to critical infrastructure can affect vulnerable groups differently [3], which further emphasizes the need to improve cybersecurity between critical infrastructure sectors [4]. Through structured analysis of city statistics, demographic information, cyber incidents, and current cyber policy, our presentation will articulate potential social implications of megacity growth through the lens of cyber-physical infrastructure disruption. We investigate the largest 15 megacities in the world and find that megacities continue to grow in population but not in cyber policy. We highlight recent examples of cyber-physical disruption in Mumbai and New York City with focus on implications for vulnerable populations. Our work suggests the need for future research on social responsibility regarding security of these critical infrastructure sectors and on the need for technology-focused law, policy, and regulation guidelines.

A cyber-physical attack against critical infrastructures, such as water treatment and distribution plants, could lead to process anomalies. Several design and data centric approaches were developed to detect such anomalies when the physical processes of the underlying plant move from a normal to a malicious state. Although these approaches are necessary for the continued and reliable plant operation, they might not be sufficient to prevent service disruption or damage to components. This is because the impact of anomalies is already realized before the attack is detected. In this paper, we propose PCAT – PLC Command Analysis Tool that validates the control commands issued by the programmable logic controller (PLC). PCAT stops rogue attack commands before they reach the target actuators. In a case study, PCAT was deployed and validated on the operational water treatment plant named SWaT. The experimental results attest the performance of PCAT in ensuring the security, safety, and service status of the plant before it enters an anomalous state.

Supervisory Control and Data Acquisition (SCADA) systems play an important role in monitoring industrial processes such as electric power distribution, transport systems, water distribution, and wastewater collection systems. Such systems require a particular attention with regards to security aspects, as they deal with critical infrastructures that are crucial to organizations and countries. Protecting SCADA systems from intrusion is a very challenging task because they do not only inherit traditional IT security threats but they also include additional vulnerabilities related to field components (e.g., cyber-physical attacks). Many of the existing intrusion detection techniques rely on supervised learning that consists of algorithms that are first trained with reference inputs to learn specific information, and then tested on unseen inputs for classification purposes. This article surveys supervised learning from a specific security angle, namely SCADA-based intrusion detection. Based on a systematic review process, existing literature is categorized and evaluated according to SCADA-specific requirements. Additionally, this survey reports on well-known SCADA datasets and testbeds used with machine learning methods. Finally, we present key challenges and our recommendations for using specific supervised methods for SCADA systems.

For each layer of information security there is a number of techniques and tools that can be used to ensure information superiority. Indeed some experts would argue that you cannot have the former without the latter. In today's technological & interconnected world, however, information superiority is very hard to achieve and almost impossible to maintain. This paper will argue that the art of deception is a reliable and cost effective technique that can assure the security of an infrastructure. The paper will conclude by presenting a technical solution of the above statement.

Botnets have emerged as a significant threat to the security and resilience of critical infrastructure systems. These decentralized networks of compromised devices enable malicious actors to execute sophisticated cyberattacks, such as Distributed Denial of Service (DDoS) attacks, data exfiltration, and ransomware deployment, which can disrupt essential services and compromise national security. This paper examines the evolving landscape of botnet threats to critical infrastructure, highlighting the vulnerabilities inherent in increasingly interconnected systems, including industrial control systems (ICS), smart grids, and healthcare networks. It explores how advancements in artificial intelligence (AI), machine learning (ML), and the Internet of Things (IoT) have expanded the attack surface for botnets while also offering potential mitigation strategies. Furthermore, the paper reviews contemporary defense mechanisms, including anomaly detection, threat intelligence sharing, and network segmentation, and assesses their efficacy in safeguarding critical infrastructure. By identifying gaps in existing security frameworks and proposing a multi-layered, proactive defense approach, this study aims to enhance the resilience of critical infrastructure against botnet-driven threats. The findings underscore the urgent need for collaboration between policymakers, industry stakeholders, and cybersecurity experts to develop robust and adaptive solutions in the face of this escalating cyber threat.

A very high proportion of the seafood we eat comes from abroad, mainly from China and southeast Asia. Most of the active ingredients in medicines we take originate in other countries. A substantial share of the produce we consume is grown in Latin America. Many low- and middle-income countries have lower labor costs and fewer and less-stringent environmental regulations than the United States, making them attractive places to produce food and chemical ingredients for export. The diversity and scale of imports makes it impractical for U.S. Food and Drug Administration (FDA) border inspections to be sufficient to ensure product purity and safety, and incidents such as American deaths due to adulterated heparin imported from China propelled the problem to public awareness. The integrated global economy demands cooperation across borders, to thwart terrorists, reduce environmental hazards, and ensure that our food and medical products are safe and effective. This requires coordination across both industrialized trading partners and emerging economies that have not had the benefit of decades of legal and technical development to ensure the safety of food and medical products

In today's interconnected world, where businesses operate globally, Cross-Cultural Competence (CCC) in Human Resource Development (HRD) has become indispensable. This review explores the significance of CCC in fostering an inclusive and diverse workforce, focusing on strategies for its development. Cross-cultural competence refers to the ability of individuals and organizations to navigate and interact across different cultural contexts effectively. In the realm of HRD, cultivating CCC is essential for creating inclusive workplaces that embrace diversity, promote understanding, and harness the potential of all employees. One of the critical strategies for developing CCC in HRD is cultural awareness training. It involves educating employees about cultural norms, values, and communication styles, fostering empathy, and understanding. Organizations can minimize misunderstandings and conflicts by equipping employees with cultural knowledge, leading to enhanced collaboration and productivity. Another crucial aspect is the promotion of cultural sensitivity and open-mindedness within the organizational culture. HRD initiatives should emphasize the value of diversity and inclusion, encouraging employees to appreciate and respect differences. This can be achieved through policies celebrating diversity, such as diversity training programs, affinity groups, and inclusive leadership development. Effective communication is fundamental to CCC in HRD. Organizations must facilitate transparent and open communication channels accommodating diverse linguistic and cultural backgrounds. Encouraging multilingualism, providing translation services, and utilizing cross-cultural communication training can bridge language barriers and facilitate meaningful staff interactions.

Modern globalisation has transformed the field of translation, requiring skills that go beyond traditional linguistics. Using frameworks such as the European Master's in Translation (EMT) and literary analysis, this research explores how digital transformation, cultural convergence and market forces have reshaped translator competence. The findings show that translators must maintain strong linguistic foundations while also developing technological proficiency and intercultural mediation skills. Translators now act as cultural bridgebuilders, navigating complex contexts that require specialised knowledge, technological adaptability and market awareness. The study emphasises the importance of interdisciplinary education and adaptable learning in preparing translators for 21st century challenges, highlighting the need for skills such as collaborating with AI program, advanced intercultural communication and adapting multimodal content. The study contributes an updated competency framework that balances technological progress with the human element of translation. Comprehensive professional development strategies are proposed that respect both traditional craftsmanship and innovative methodologies in today's interconnected world.

Addressing the global health security agenda

Multi-agent learning is a crucial method to control or find solutions for systems, in which more than one entity needs to be adaptive. In today's interconnected world, such systems are ubiquitous in many domains, including auctions in economics, swarm robotics in computer science, and politics in social sciences. Multi-agent learning is inherently more complex than single-agent learning and has a relatively thin theoretical framework supporting it. Recently, multi-agent learning dynamics have been linked to evolutionary game theory, allowing the interpretation of learning as an evolution of competing policies in the mind of the learning agents. The dynamical system from evolutionary game theory that has been linked to Q-learning predicts the expected behavior of the learning agents. Closer analysis however allows for two interesting observations: the predicted behavior is not always the same as the actual behavior, and in case of deviation, the predicted behavior is more desirable. This discrepancy is elucidated in this article, and based on these new insights Frequency Adjusted Q- (FAQ-) learning is proposed. This variation of Q-learning perfectly adheres to the predictions of the evolutionary model for an arbitrarily large part of the policy space. In addition to the theoretical discussion, experiments in the three classes of two-agent two-action games illustrate the superiority of FAQ-learning.

Infectious diseases remain a threat to public health in today's interconnected world. There is an ongoing debate on how responses to threats of infectious diseases can best be coordinated, and the field remains nascent in understanding which specific structural governance arrangement will perform best. The present paper contributes to this discussion by demonstrating that it is possible to develop working hypotheses specifying the relationship between the type of infectious disease crisis and type of response to the crisis. For type of crises and type of response mechanisms there is still a lack of research, but the hypothesis combining these two provide a perspective for a future research and action agenda. It certainly prevents us from choosing between schism or hypes when it comes to crisis response. It provides instruments to realize that no single type of response is the most effective and that not all responses are equally effective in a concrete case.