The Network Security Analysis System Design Based on B/S Structure

Occupational health and safety in hospitals is influenced by Occupational Safety and Health Management System or what is often called SMK3 which functions to regulate occupational safety and health in an industry or building. This research aims to analyze the relationship between inhibiting factors and the implementation of the occupational health and safety management system at the Royal Prima Medan Hospital. This research is an analytical survey research using a cross sectional study design carried out in June 2023. The sample in this research is all medical personnel who work in Royal Prima Medan Hospital, namely 121 people. The sample size is determined using the total population formula. Data were analyzed using the chi square test and logistic regression. The research results show that there is a relationship between HR quality, HR workload, HR work environment, wage levels and the rate of addition of new workers with the implementation of the occupational safety and health management system at the Royal Prima Medan Hospital. The most dominant variable related to the implementation of the occupational safety and health management system at the Royal Prima Medan Hospital is the wage level. It is recommended to the hospital that the results of this research can be used as input to improve and develop the level of occupational health and safety, especially for hospital workers, which can also indirectly improve the quality of service and work productivity of the hospital

Numerous manufacturing and service organizations have integrated or are considering integration of their respective occupational health and safety management and audit systems into the International Organization for Standardization-based (ISO) audit-driven Quality Management Systems (ISO 9000) or Environmental Management Systems (ISO 14000) models. Companies considering one of these options will likely need to identify and evaluate several key factors before embarking on such efforts. The purpose of this article is to identify and address the key factors through a case study approach. Qualitative and quantitative comparisons of the key features of the American Industrial Hygiene Association ISO-9001 harmonized Occupational Health and Safety Management System with The Goodyear Tire & Rubber Co. management and audit system were conducted. The comparisons showed that the two management systems and their respective audit protocols, although structured differently, were not substantially statistically dissimilar in content. The authors recommend that future studies continue to evaluate the advantages and disadvantages of various audit protocols. Ideally, these studies would identify those audit outcome measures that can be reliably correlated with health and safety performance.

Formal Safety Management Systems (SMS) have been required in the USA and elsewhere for the onshore refining and petrochemical industries since the mid 1980's (EU) or early 1990's (USA). While several different versions of SMS exist they are mostly similar in content. Risk based SMS are more modern in thinking than hazard based systems. The O&G and petrochemical industries have reduced occupational accidents by close to a factor of ten over the past 15–20 years. However, major accident performance has hardly improved globally. An exception is the North Sea where major accidents appear to have declined by close to a factor of ten as well as occupational safety. This paper reviews some key additional requirements in the North Sea and why these appear to address major accidents better - by focusing on risks and barrier management and verification focusing on these. The SEMS approach as mandated by BSEE is essential and will be improved by safety culture requirements BSEE is proposing. However, since SEMS is very similar to OSHA 1910, and much less than North Sea requirements, it is likely that achievements will mirror that of 1910 and unlikely that the desired order of magnitude improvement in major accidents will occur. Additional focus on risk and barrier management is still required and this is not part of SEMS. A strong culture for process safety requires a focus on risk assessment and barriers. Background to Safety Management Systems The requirement for formal safety management systems (SMS) in the process industry has been common since the 1980's with earlier development of formal SMS by leading companies. Examples of these include the DuPont SMS, Exxon OIMS - Operations Integrity Management System, BP Getting HSE Right, and the DNV International Safety Rating System. A common feature is that most of these systems were developed in response to some major accident. The insight was that accident causes are not simply technical, but have underpinning management system influences (root causes) and major accidents would recur unless improved management systems were implemented. The major accidents in the 1970's in Europe (i.e. Flixborough UK and Seveso Italy) spurred development of safety case regulations in the Seveso Directive (originally passed in 1984 and coming into force in 1986). This included a requirement for a formal SMS. Major accidents in the 1980's in the USA or affecting USA companies (i.e. Bhopal MIC release, Phillips Pasadena VCE, Marathon HF release Texas City) led OSHA to seek input for new regulations. API issued RP 750 for onshore and RP 75 (1991) for offshore and CCPS issued its Guidelines for Technical Management of Process Safety (1989). These guides were extensively used in the public process leading to development of OSHA 1910.119 - the Process Safety Management regulations (1992). About this time the UK HSE issued HSG 65 - Successful Health and Safety Management (1991). All of these systems used an element based approach to the SMS with 12–20 elements typically. Most had the same content and the differences were primarily textual. These initial processes were followed by other initiatives that continue to current times. The UK HSE Offshore Safety Case regulations (1992) were an extension of the requirements in the EU Seveso Directive and included more advanced risk thinking from the Cullen Inquiry. The EU Seveso Directive was updated on multiple occasions to address new threats as they occurred (e.g. environmental damage: pollution of the Rhine following a fire at Sandoz, and a major cyanide spill from a mining dam in Eastern Europe). A major revision increased the focus on major accidents and changed the degree of justification in the safety case (e.g. as implemented in the UK) from " describe?? the safety systems to " demonstrate?? the adequacy of safety systems. The US EPA (1996) issued the RMP regulations (Risk Management Plan). These were very similar to OSHA 1910, but required Offsite Consequence Analysis for standardized 10 minute worst case events and optional some alternative release scenarios. An RMP document had to be created describing the SMS and safety systems this had some similarity to the EU safety case document. OSHA 1910 required the SMS elements to be in place but not collected into a single document.

Network security is an important factor in securing data on a server, so a server needs to be kept safe from things that could threaten the validity and integrity of stored data. One way that can be used to detect threats on a server is implementing an Intrusion detection system on the server. A literature study conducted on research that implemented intrusion detection systems, found that there was a lack of intrusion detection system research that could detect one type of network security attack with a variety of attack variables and it was also found in research that had successfully implemented an intrusion detection system to detect network security attacks but still incorrectly identifying the type of attack. This research uses the Snort intrusion detection system method with an experimental model of an attack detection system and an Android application which is applied to monitor the statistics of attacks detected on the Xyz University network. The research results showed that the rules created on the IDS can detect network security attacks, especially DoS/DDoS and PortScan attacks. Then an IDS was created that can send application alert notifications and SMS with a response time that is quite responsive based on the NIST Cybersecurity reference with an average of 22 seconds for DoS/DDoS attacks and 21 seconds for Port Scanning attacks. For the percentage results from 3 times testing the rule by sending DoS/DDoS attack packets of 309,462 to 1,459,548, getting a high level of accuracy with an average of 92.1% on first test, 91.7% on the second test and 91.5% on the third test. In the results of testing the PortScan rule by sending 1,001 to 10,564 attack packets, a high level of accuracy was obtained with an average result of 92.2% in the first test, 94.2% in the second test and 93.4% in the third test.

This presentation will describe the Safety Management System that Azerbaijan International Operating Company (AIOC) has structured to assure that Company activities are performed in a manner that protects the public, the environment, contractors and AIOC employees. The Azerbaijan International Oil Company is a consortium of oil companies that includes Socar, the state oil company of Azerbaijan, a number of major western oil companies, and companies from Russia, Turkey and Saudi Arabia. The Consortium was formed to develop and produce a group of large oil fields in the Caspian Sea. The Management of AIOC, in starting a new operation in Azerbaijan, recognized the need for a formal HSE management system to ensure that their HSE objectives for AIOC activities were met. As a consortium of different partners working together in a unique operation, no individual partner company HSE Management system was appropriate. Accordingly AIOC has utilized the E & P Forum "Guidelines for the Development and Application of Health Safety and Environmental Management Systems" as the framework document for the development of the new AIOC system. Consistent with this guideline, AIOC has developed 19 specific HSE Management System Expectations for implementing its HSE policy and objectives. These specific expectations are the key elements under which HSE standards and operating procedures are developed. As AIOC operations increase and expand; additional standards and procedures will be progressively implemented based on a prioritized risk assessment. The objective is to establish and continue to maintain operational integrity in all AIOC activities and site operations. An important feature is the use of structured Safety Cases for the design engineering activity. The basis for the Safety Cases is API RP 75 and 14 J for offshore facilities and API RP 750 for onshore facilities both complimented by "Best International Oilfield Practice". When viewed overall, this approach provides a fully integrated system of HSE management from design into operation.

Security related data in cyberspace is multi-source and heterogeneous, so it cannot be effectively used in network security analysis. To solve this problem, a network security ontology model for network node security analysis is proposed. The model reflects the security status of network nodes through three key sub domains: network assets, security information, defense strategy, and modeling concepts and relationships in a hierarchical and structured form. Ontology related language is used for query, and user-defined rules are used to enhance the reasoning ability of ontology, so as to assist network security analysis. Experiments and quality evaluation results show that the ontology model can integrate multi-source data, query and reason the network security status, and has higher quality evaluation than the same type of ontology.

Health management systems played a crucial role in hazard reduction and prevention as well as in improving employee performance. The importance of a hospital health and safety management system and there has been no study in Indonesia with the same objective based on the OSHA indicator. The purpose of this study is to evaluate the performance indicators of Hospital Safety and health management systems in hospitals in the Gombong region, Indonesia, in terms of a nurse perspective. The research method used was descriptive-analytic. The sample size consisted of 450 nurses. The questionnaire used a standard questionnaire from hospital safety and health management systems which consisted of 53 questions including 6 domains; Leadership management, Hazard identification, employee participation, Hazard prevention, evaluation and improvement program, and Education and training. Using the 1-4 Likert scale of strongly disagree, disagree, agree, and strongly agree. The highest score was 4 and the lowest score is 1. Data analysis used SPPS, t-test, and analysis of variance (ANOVA) with a significant value 0.05. Based on the research results, poor conditions occurred in several domains except in the domain of employee participation. There were significant variables between hazard identification and gender, hazard prevention and improvement program and evaluation also. Conclusion of this study, hospital administrations need to be improved and pay more attention to occupational safety and health in the workplace. To get rid of weaknesses and a mistake, we need to continuous improvement and effective evaluation of staff in training programs.

Occupational safety and health are the main means of preventing accidents, disability and death as a result of work accidents. K3 aims to prevent, reduce, and even eliminate the risk of work accidents (zero accident). The application of this concept should not be considered as an effort to prevent work accidents and occupational diseases that cost the company a lot of money, but should be considered as a form of long-term investment that will provide abundant benefits in the future. This study aims to determine the implementation of the implementation and the level of success, as well as to determine the factors causing the delay in the implementation of the occupational safety and health management system (SMK3) in the construction project of the Hotel Santika Premiere Padang.The stage of this research is the study of various existing literatures to determine the variables to be used. The next stage is designing research questionnaires and then collecting data by distributing questionnaires directly to the field. The data obtained from the questionnaire will be analyzed for validity and reliability tests using the Statistical Package for Social Science (SPSS) software.The results of this study indicate that the success of the implementation of the occupational safety and health management system (SMK3), which is taken from the average sum of all variables, is 98.5%. So that it can be concluded that the level of achievement of the successful implementation of SMK3 in the construction project of the Hotel Santika Premiere Padang is based on the determination of the success value written in the Minister of Permenaker Number: 05/MEN/1996, eligible for a certificate and a gold flag. This is in accordance with category number 3, namely "where the level of achievement of 85-100% is given a certificate and a gold flag".

To allow a vehicle with highly automated driving functions to operate on the road the overall safety (safe functionalities, functional insufficiencies including cybersecurity) of the driving system must be guaranteed. Therefore, a generic Safety Management System (SMS), that includes all useful and necessary regulations should be applied. The given specifications regarding the safety of driving systems shall be understood and considered in order to define an acceptable SMS for the Highly Automated Driving Function (HADF). Derived from the generic SMS a specific management system has to be developed to guide the development and deployment of the HADF. The research presented in this paper investigates the currently available SMS in different sectors like aviation, marine, and railway to propose a new set of components and elements that are useful and modified for a HADF's SMS. Moreover, the paper provides a systematic approach to how the new set of components and elements can be applied for a HADF SMS. Additionally, well established hazard identification methods (scenario-based HARA and STPA) are compared and integrated into the safety concept phase. The complexity of scenarios is unique for a HADF. Since the SMS is going to be complicated for automotive HADFs and a constantly developing process, methods for evaluation and continuous improvement are needed. This paper gives insight into the structure of the SMS and to guarantee its applicability the use of a helpful software tool is considered. Furthermore, the proposed SMS approach can be adjusted as a groundwork for research concerns like validation for homologation and assess the safety of a HADF.

In the network security monitoring system, it is important to trace information source timely and accurately, which is an important way to investigate and collect evidence. But because of public network’s IP limited resources, LAN hosts usually share the public network’s IP resources by NAT way, and conceal internal network structure, which make the network security monitoring system unable to locate the real effective sensitive information source in LAN. Based on the study of WINPCAP network sniffing technology and the ARP deception protocol in exchange network environment, a network security monitoring system with mechanical properties suitable for LAN environment is designed and realized, which locate information source accurately through filtering and matching the sensitive information transmitting in LAN by setting the capture factors as key words of document, web site shared by FTP, QQ number etc.

Summary This paper describes the experience to date with safety management systems (SMS's) and describes their implementation after the Piper Alpha disaster and Lord Cullen's report. It also shows the gradual expansion of these systems toward fully integrated health, safety, and environment (HSE) management systems. Our company policy, which was clearly stated before publication of Lord Cullen's report, is that work should not start until the appropriate controls are in place. Work based on this policy and on objective-setting SMS's within Shell IntI. Petroleum Mij. (SIPM) E&P coordination started in earnest soon after the publication of the report in Nov. 1990 and has continued without interruption since that time. Objective-setting systems may be defined as systems where the company management sets its own objectives or goals on the basis of functional rather than prescriptive requirements and then goes on to demonstrate how such goals have been, or are being, met. The paper ends with a projection of what may be expected in the future. Introduction Following the Piper Alpha disaster and the in-depth public inquiry led by Lord Cullen, the recommendation was made that all offshore installations on the U.K. continental shelf should have safety cases similar to those already required under the U.K. Control of Industrial Major Accident Hazards Regulations. This recommendation was given effect by means of the safety-case regulation within the U.K. with a Nov. 1993 deadline for the submission of safety cases. Shell Expro, as a major operator in the U.K. sector of the North Sea, had already begun work on its safety cases before publication of the Cullen report and was one of the companies that contributed to the so called "voluntary" safety cases before this date. It was apparent to E&P management within SIPM that the SMS and the safety case provided better assurance of safe operation and were of real value to Shell operations worldwide. (In this paper, Shell is sometimes used for E&P companies of the Royal Dutch/ Shell group in general, and Shell E&P is used if experience was gained through technical service agreements supported by SIPM E&P). It was also clear that a worldwide move toward such systems would take place. Thus, application of these systems was both good business and appropriate for all Shell E&P operating companies. As a direct consequence, an integrated project team (both project engineering and operations) was set up to implement SMS and safety cases throughout Shell upstream operations worldwide.

Developments in information and communication technology which are increasing rapidly, it is also required to improve the quality of security. The increase of internet usage has led to high number of intrusions or attacks that exploit weaknesses in internet protocols, operating systems and application software. Due to the high number of attacks, information technology security is an important thing to consider in an organization or individual. One solution that can be applied to overcome this problem is to monitor network security. One of the implementations of network security monitoring is the implementation of an Intrusion Detection System (IDS). The purpose of this research was to design a Snort-based network security monitoring system as a tool for implementing IDS to detect attacks by sending notifications via Telegram Bot which is integrated with the server owned by Unit Sumber Daya Informasi Universitas Udayana using the Network Development Life Cycle (NDLC) method. Based on the configuration results of research conducted on the Unit Sumber Daya Informasi Universitas Udayana server, there was the lowest data on May 16, 2023 with 64,418 data and the highest data on April 04, 2023 with 261,672 data and 2 Nmap Scan attack data as the lowest type of attack and 13,703 DDoS attack data as the highest type of attack.

Purpose – The purpose of this paper is to propose a generic model of Integrated Management System of Quality, Environment and Safety (IMS-QES) that can be adapted and progressively to assimilate various Management Systems, of which highlights: ISO 9001 for Quality; ISO 14001 for Environment; OHSAS 18001 for Occupational Health and Safety. Design/methodology/approach – The model was designed in the real environment of a Portuguese Organization and 160 employees were surveyed. The rate response was equal to 86 percent. The conceived model was implemented in a first phase for the integration of Quality, Environment and Safety Management Systems. Findings – Among the main findings of the survey the paper highlights: the elimination of conflicts between individual systems with resources optimization; creation of added value to the business by eliminating several types of wastes; the integrated management of sustainability components in a global market; the improvement of partnerships with suppliers of goods and services; reducing the number of internal and external audits. Originality/value – This case study is one of the first Portuguese empirical researches about IMS-QES and the paper believes that it can be useful in the creation of a Portuguese guideline for integration, namely the Quality Management Systems; Environmental Management Systems and Occupational Health and Safety Management Systems among others.

ObjectiveIn its aim to develop a model of an occupational safety and health management system (OSHMS) for MSMEs in Indonesia, this study seeks to explore crucial factors in relation to the implementation of such a system in MSMEs by conducting a review of previous studies on the topic. MethodsThis systematic review is an exploratory study from several online databases our using a combination of two keywords that refer to the population and exposure variables in the PROSPERO Approach by using the “AND” strategy. Each literature goes through selection based on PRISMA flow chart. A Critical Appraisal Skill Programme (CASP) checklist for risk of bias assessment was used for the evidence quality appraisal. ResultFrom 37 papers, books, online books and local articles were selected, we identified pivotal factors in the implementation of OHSMS in MSMEs which can be classified into downstream factors (OSH training, commitment, risk management, and communication), middle stream factors (support from the third party), and upstream factors (the role of government). ConclusionVarious pivotal factors in promoting OSH implementation at MSMEs can be seen as role of MSMEs actors (employer and employee); third party and government.

Development of Safety Regulation and Management System in Energy Industry of China: Comparative and Case Study Perspectives