On Distributed System Security

Purpose: The rapid advancement of digital technologies has necessitated robust security measures to protect information systems against escalating cyber threats. The objective is to study the effectiveness of the command line interface (CLI) in IT system security management. Design/methodology/approach: This paper explores the efficacy of the command line interface (CLI) in managing IT system security and examines the potential of integrating biometric data into cryptographic mechanisms. We delve into the CLI's precision and flexibility, which enable the execution of complex security tasks and its seamless integration with advanced security tools. Furthermore, we investigate the incorporation of biometrics, such as fingerprints and facial recognition, into encryption processes, offering enhanced security by binding access to individual biometric identifiers. Findings: Our findings suggest that while CLI remains a vital tool for security specialists, the convergence of CLI with biometric authentication can significantly fortify the security of information systems. Practical implications: The paper addresses the challenges and opportunities presented by this integration, including privacy concerns and the need for secure handling of biometric data. We also discuss the implications of such technologies in the context of the European Union's legal framework on cybersecurity. Originality/value: The article is aimed at those involved in cyber security management. The article presents the possibility of using biometric attestations to support the security of IT systems. Keywords: cybersecurity, European Union cybersecurity legislation, cryptographic mechanisms, data encryption, multi-factor authentication. Category of the paper: research paper.

The purpose of this paper is to study on the development of IT sys- tem emergency recovery focused on IT system security. There are some devel- opment efforts in terms of trial about prompt recovery solutions from securities incidents. In this paper, the main objective is to study about IT system emer- gency recovery solution during system down and security incident happening to react rapidly and correctly for normal condition recovery. This study is fo- cused on quick time back up confronting about security incidents from hacking attacks which cause system down, with a view to prompt recovery of IT system to normal operation conditions.

This book constitutes the refereed proceedings of the 18th Nordic Conference on Secure IT Systems, NordSec 2013, held in Ilulissat, Greenland, in October 2013. The 18 revised regular papers together with 3 short papers and one invited talk were carefully reviewed and selected from 35 submissions. The papers are organized in topical sections on formal analysis of security protocols, cyber-physical systems, security policies, information flow, security experiences, Web security, and network security

This paper reflects on the state of the art in cryptology and information security. It considers the main achievements and shortcomings of research and identifies the major challenges for the future. It explores which research approaches have a high potential to evolve from academic ideas to practical solutions. The paper concludes by discussing how the deployment of more secure and reliable IT systems requires a complete re-engineering including new architectures; it also sketches the broader societal context of such a redesign.

Data and IT systems security is a critical aspect and plays a significant role in protecting an organization’s business. Organizations must safeguard their information and assets to sustain their value and reputation. Security is essential to information systems because it concerns personal and confidential data belonging to users or companies. The study aims to indicate how enterprises in Poland guarantee the security of data and IT systems, as well as to estimate the complexity of this phenomenon. We have confirmed that small and medium enterprises (SMEs) organizations with a lower level of computerization generally invest fewer resources and possess less expertise in establishing and maintaining IT security policies and strategies.

Cloud computing, an infrastructure of providing computing utility as a service, is changing a large part of the IT industry. By delivering to users "infinite" computing resources in a pay-as-you-go manner, cloud computing is turning into reality a dream that has long been cherished by the IT industry. For years, people have been hoping to achieve the abilities of continuously scaling up and of elastic resource utilizing, which now are within grasp. However, building a scalable data management system on existing commercial cloud platforms, such as Amazon EC2, poses a grand challenge. Indeed, new application requirements and the underlying hardware environment affect every aspect of the data management system, from individual components to system architecture. In this talk, we will present the opportunities and challenges of developing a scalable cloud data management system. First, we examine the anatomy of a cloud data intensive system. Then, we present three main challenges posed by a scalable cloud data processing system, i.e., multitenancy architecture, high throughout low latency transactions, and high performance reliable query processing. We will discuss why existing large-scale distributed systems such as peer-to-peer systems, distributed data management systems and massive parallel processing systems may not be able to deliver sufficient scalability, fault tolerance and satisfactory performance at cloud scale. Finally, we discuss possible solutions, consider current practices, and speculate the future of cloud computing.

Information assets are an essential commodity that Cybersecurity systems must secure. Due to the velocity, variety, and volumes of data, IT professionals are seeking cyber analytic capabilities to detect Advanced Persistent Threats (APT) in real-time. IT security systems are dispersed throughout the enterprise, making this a daunting and time-consuming task. Consolidation of this security data requires an appropriate, centralized infrastructure ecosystem. IT security architects and engineers are struggling to identify the proper infrastructure components, network bandwidth, and architectures required to host cyber analytics capabilities. This study explores distributed architectures and infrastructure elements that swiftly ingest (via streaming), store, query, and tag large data sets required for big data cybersecurity analytics. It provides an overview of the functional requirements and their corresponding performance characteristics needed to operate a robust the cyber analytics ecosystem infrastructure component (CAEIC). Finally, this study recommended the use of edge computing within the Cyber Analytics Infrastructure Platform to establish a cyber baseline at the edge of the network.

Much work has been done on applying Business Intelligence (BI) in the healthcare sector. Most of these studies were focused only on Information Technology (e.g., to improve the Information and Communication Technology architectures and data management systems) or medical (e.g., to support prognoses and diagnoses) aspects, while the usage of BI for improving the management of healthcare processes is still overlooked. This research aims at filling this gap by investigating whether a decision support system (DSS) based on the exploitation of data through BI can outperform traditional experience-driven practices for managing processes in the healthcare domain. To accomplish this objective, we develop a DSS for reducing the overall costs of a specific healthcare process in the oncology field. The DSS was developed in two versions: the first is experience-driven (i.e., based only on scientific and historical literature and physicians' experience data), while the second is data-driven (i.e., based on additional information coming from hospital data). The results of our study demonstrate that the usage of BI for managing the healthcare processes proved to improve traditional activities and processes mostly based only on the physicians' experience, both from a business (i.e., costs reduction) and managerial (i.e., effectiveness improving) point of view.

In the previous chapter we presented an information technology reference architecture for FC and PAC. We now describe some Information Technology tools and standards, currently available and under development, which we believe may be important in realizing successful implementations of FC and PAC. Our primary objective in this chapter is to examine our information technology reference architecture for shop floor control systems, and associate with it specific hardware and software tools. We briefly review the most important information technology tools and standards, and give examples of how these tools can be applied in real-life shop floor control systems. Furthermore, we stress the importance of portability, flexibility and inter-operability for shop floor control systems, attributes which we believe are vitally important in a multi-vendor computing environment. The structure of this chapter is as follows: 1 We present an initial overview of information technology, highlighting the importance of flexibility, inter-operability and portability of IT systems. A general computing model is then introduced, and this contains four essential elements required to realize an information technology implementation of shop floor control. These elements are communication systems, data management systems, processing systems and user-interface systems. 2 The main body of the chapter describes the relevant state-of-the-art technologies of the four elements included in the general computing model. At the conclusion of each section, a synthesis of what we believe are the most suitable technologies is presented, in the form a shop floor control model for each particular computing element. Thus, we also present a communication systems model, a data management model, a processing model and an user-interface model for the implementation of FC and PAC systems. 3 Finally, we focus our attention on the emerging object-oriented technology, which holds the promise of highly portable, flexible and interoperable solutions within the domain of shop floor control.

Considering where the practice of information security started, the industry has certainly progressed over the past several decades. Forty years ago, only a handful of individuals understood the core concepts of computer system security. Today there are universities with degree programs in computer security, US federal mandates regarding IT system security, and a variety of industry-specific guidelines and auditing bodies.

Information Technology (IT) security has been a highlight of every organization since the inception of computer systems. We have seen the emergence of various forms of IT security or access controls from passwords to biometrics, especially biometrics. This paper is a compilation of different journals, articles and classroom discussions, where five key points have been extracted to show how to effectively manage access controls in organization. The five key points include upper level management's responsibility to (1) establish and implement a System-Specific Policy (SSP) and Access Control Policy (ACP) for access control, (2) foster an environment of trust with their employees, (3) overlap access control with risk management, (4) establish an optimum level of information security spending, and (5) have a liability or insurance policy for losses.

Access control (AC) is a computer security requirement used to control, in a computing environment, what the user can access, when and how. Policy administration is an essential feature of an AC system. As the number of computers are in hundreds of millions, and due to the different organization requirements, applications and needs, various AC models are presented in literature, such as: Discretionary Access Control (DAC), Mandatory Access Control (MAC), Role Based Access Control (RBAC), etc. These models are used to implement organizational policies that prevent the unauthorized disclosure of sensitive data, protecting the data integrity, and enabling secure access and sharing of information. Each AC model has its own methods for making AC decisions and policy enforcement. However, due to the diversity of AC models and the various concerns and restrictions, its essential to find AC metamodels with higher level of abstraction. Access control metamodels serve as a unifying framework for specifying any AC policy and should ease the migration from an AC model to another. This study reviews existing works on metamodels descriptions and representations. But, are the presented metamodels sufficient to handle the needed target of controlling access especially in the presence of the current information technologies? Do they encompass all features of other AC models? In this paper we are presenting a survey on AC metamodels.

: The discretionary access controls in today's computer systems are designed to enforce a specific access control policy. An application whose access control policies do not easily match the policy that is wired into the system is forced to work around that wired-in policy. As a result, the application itself must enforce discretionary security and cannot make use of the assurances of the computer system's discretionary access controls. This report presents a flexible approach to discretionary access control that allows the implementation of arbitrary access control policies. The generality of the approach allows a user to implement a discretionary access control policy that is tailored to an application, rather than having to work around a specific policy that is wired into the computer system. The report focuses on discretionary controls for object-oriented systems. Object-oriented systems are an emerging technology of great import for applications in business, industry, and the military. Many of these applications must share information among users with different needs and authorizations. The specific access rules desired will vary from application to application. Thus, a flexible approach to discretionary access control for such systems is proposed.

As the Information Technology developing, kinds of the IT applications have entered various government sectors. The E-Gov. has been an important method to improve government's transparency and social services ability. Meanwhile, the varieties of cyber-attacks which against the IT system cause mass unrecoverable damages. Therefore IT system's security should be considered systematically. The system has to be protected integrally. Classified Protection for Cyber Security has been hanged out by the National Security Departments.

The purpose of the study is to reveal the objective transformations that have occurred in information technology. Conceptualization of these transformations is also important. System, information, network and cognitive approaches allow to reveal the main aspects of the development of information technologies - technical and technological, software and hardware, network, communication, cognitive. The article considers the evolution of information technology. The relationship of information technology with its increasing role and importance of information in the life of man and society is analyzed. Information technologies are disclosed as technologies to create, store, record and process information. Technical and technological direction of information technology development is analyzed. The connection of the information technology concept transformation and development of the information society theory, in particular, the theory of post-industrial society, information society, network society, knowledge society and the digital world is revealed. The connection of the information technology concept transformation and the emergence of the media civilization and global information space is also revealed. The article shows that the development of information technology is an important factor in the development of the information society. Technology transition (the electronic computer as a machine) to the modern stage of development of digital technologies is characterized by the formation of a single technical and technological basis for the formation of the information society. The classification of information technology according to its application scope is proposed. Information and communication technologies characterize subject-to-subject interactions, among which pedagogical and political technologies are primarily distinguished. Information space is separate area of information technology application. Information processing technologies in the information space are the basis of modern democratic discourse. An important area of information technology is the information sphere. Information sphere is the sphere of information activity, information exchange and information relations, the regulator of which is the information law. Information security technologies ensure the protection of human rights, society and the state in obtaining objective information. Cybersecurity technologies protect critical infrastructure. The technologies of reality – virtual, cognitive, and augmented – provide the ability of a person’s consciousness and thinking to process and create new information. Identifying the social significance of the technical and technological development of information technologies becomes the basis of recommendations for the implementation of a strategies for the formation of the information society in Ukraine.