检索结果-南通市图书馆

Impact of Human Vulnerabilities on Cybersecurity

Computer Systems Science & Engineering 2022年第3期40卷 1153-1166页

作者： Maher Alsharif shailendra mishra Mohammed AlShehri Department of Information Technology College of Computer and Information SciencesMajmaah UniversityMajmaah11952Saudi Arabia Department of Computer Engineering College of Computer and Information SciencesMajmaah UniversityMajmaah11952Saudi Arabia

Today,security is a major challenge linked with computer network companies that cannot defend against cyber-attacks.Numerous vulnerable factors increase security risks and cyber-attacks,including viruses,the internet,communications,and hackers.Internets of Things(IoT)devices are more effective,and the number of devices connected to the internet is constantly increasing,and governments and businesses are also using these technologies to perform business activities effectively.However,the increasing uses of technologies also increase risks,such as password attacks,social engineering,and phishing attacks.Humans play a major role in the field of cybersecurity.It is observed that more than 39%of security risks are related to the human factor,and 95%of successful cyber-attacks are caused by human error,with most of them being insider threats.The major human factor issue in cybersecurity is a lack of user awareness of cyber threats.This study focuses on the human factor by surveying the vulnerabilities and reducing the risk by focusing on human nature and reacting to different situations.This study highlighted that most of the participants are not experienced with cybersecurity threats and how to protect their personal information.Moreover,the lack of awareness of the top three vulnerabilities related to the human factor in cybersecurity,such as phishing attacks,passwords,attacks,and social engineering,are major problems that need to be addressed and reduced through proper awareness and training.

关键词： Cybersecurity phishing attack password attack social engineering cybersecurity awareness security risk

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Web Security:Emerging Threats and Defense

引用

Computer Systems Science & Engineering 2022年第3期40卷 1233-1248页

作者： Abdulwahed Awad Almutairi shailendra mishra Mohammed AlShehri Department of Information Technology College of Computer and Information SciencesMajmaah UniversityMajmaah11952Saudi Arabia Department of Computer Engineering College of Computer and Information SciencesMajmaah UniversityMajmaah11952Saudi Arabia

Web applications have become a widely accepted method to support the internet for the past decade.Since they have been successfully installed in the business activities and there is a requirement of advanced functionalities,the configuration is growing and becoming more complicated.The growing demand and complexity also make these web applications a preferred target for intruders on the internet.Even with the support of security specialists,they remain highly problematic for the complexity of penetration and code reviewing methods.It requires considering different testing patterns in both codes reviewing and penetration testing.As a result,the number of hacked websites is increasing day by day.Most of these vulnerabilities also occur due to incorrect input validation and lack of result validation for lousy programming practices or coding errors.Vulnerability scanners for web applications can detect a few vulnerabilities in a dynamic approach.These are quite easy to use;however,these often miss out on some of the unique critical vulnerabilities in a different and static approach.Although these are time-consuming,they can find complex vulnerabilities and improve developer knowledge in coding and best practices.Many scanners choose both dynamic and static approaches,and the developers can select them based on their requirements and conditions.This research explores and provides details of SQL injection,operating system command injection,path traversal,and cross-site scripting vulnerabilities through dynamic and static approaches.It also examines various security measures in web applications and selected five tools based on their features for scanning PHP,and JAVA code focuses on SQL injection,cross-site scripting,Path Traversal,operating system command.Moreover,this research discusses the approach of a cyber-security tester or a security developer finding out vulnerabilities through dynamic and static approaches using manual and automated web vulnerability scanners.

关键词： SQL injection attack cross-site scripting attack command injection attack path traversal attack

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Blockchain-Based SQKD and IDS in Edge Enabled Smart Grid Network

引用

Computers, Materials & Continua 2022年第2期70卷 2149-2169页

作者： Abdullah Musaed Alkhiari shailendra mishra Mohammed AlShehri Department of Information Technology College of Computer and Information SciencesMajmaah UniversityMajmaah11952Saudi Arabia Department of Computer Engineering College of Computer and Information SciencesMajmaah UniversityMajmaah11952Saudi Arabia

Smart Grid is a power grid that improves flexibility,reliability,and efficiency through smart meters.Due to extensive data exchange over the Internet,the smart grid faces many security challenges that have led to data loss,data compromise,and high power consumption.Moreover,the lack of hardware protection and physical attacks reduce the overall performance of the smart grid network.We proposed the BLIDSE model(Blockchain-based secure quantum key distribution and Intrusion Detection System in Edge Enables Smart Grid Network)to address these issues.The proposed model includes five phases:The first phase is blockchain-based secure user authentication,where all smart meters are first registered in the blockchain,and then the blockchain generates a secret key.The blockchain verifies the user ID and the secret key during authentication matches the one authorized to access the network.The secret key is shared during transmission through secure quantum key distribution(SQKD).The second phase is the lightweight data encryption,for which we use a lightweight symmetric encryption algorithm,named Camellia.The third phase is the multi-constraint-based edge selection;the data are transmitted to the control center through the edge server,which is also authenticated by blockchain to enhance the security during the data transmission.We proposed a perfect matching algorithm for selecting the optimal edge.The fourth phase is a dual intrusion detection system which acts as a firewall used to drop irrelevant packets,and data packets are classified into normal,physical errors and attacks,which is done by Double DeepQNetwork(DDQN).The last phase is optimal user privacy management.In this phase,smartmeter updates and revocations are done,forwhichwe proposed Forensic based Investigation Optimization(FBI),which improves the security of the smart grid network.The simulation is performed using network simulator NS3.26,which evaluates the performance in terms of computational complexity,accuracy,false detection,and false alarm rate.The propo

关键词： Smart grid edge computing intrusion detection system blockchain quantum key distribution deep reinforcement learning

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Identity Governance Framework for Privileged Users

引用

Computer Systems Science & Engineering 2022年第3期40卷 995-1005页

作者： Mansour Hammoud Alruwies shailendra mishra Mohammed Abdul Rahman AlShehri Department of Information Technology College of Computer and Information SciencesMajmaah UniversityAl-Majmaah11952Saudi Arabia Department of Computer Engineering College of Computer and Information SciencesMajmaah UniversityMajmaah11952Saudi Arabia

Information technology companies have grown in size and recognized the need to protect their valuable assets.As a result,each IT application has its authentication mechanism,and an employee needs a username and password.As the number of applications increased,as a result,it became increasingly complex to manage all identities like the number of usernames and passwords of an employee.All identities had to be retrieved by users.Both the identities and the access rights associated with those identities had to be protected by an administrator.Management couldn’t even capture such access rights because they couldn’t verify things like privacy and security.Identity management can help solve this problem.The concept behind identity management is to centralize identity management and manage access identity centrally rather than multiple applications with their authentication and authorization mechanisms.In this research work,we develop governance and an identity management framework for information and technology infrastructures with privileged access management,consisting of cybersecurity policies and strategies.The results show the efficiency of the framework compared to the existing information security components.The integrated identity and access management and privileged access management enable organizations to respond to incidents and facilitate compliance.It can automate use cases that manage privileged accounts in the real world.

关键词： Privileged access management(PAM) lightweight directory access protocol(LDAP) identity management access control cyber-attack

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

IoT-Based Women Safety Gadgets (WSG): Vision, Architecture, and Design Trends

引用

Computers, Materials & Continua 2023年第7期76卷 1027-1045页

作者： Sharad Saxena shailendra mishra Mohammed Baljon Shamiksha mishra Sunil Kumar Sharma Prakhar Goel Shubham Gupta Vinay Kishore Department of Computer Science and Engineering Thapar Institute of Engineering and TechnologyPatialaPunjab147001India Department of Computer Engineering College of Computer&Information ScienceMajmaah UniversityMajmaah11952Saudi Arabia Department of Computer Science and Engineering National Institute of TechnologyJamshedpur831001India

In recent years,the growth of female employees in the commercial market and industries has increased.As a result,some people think travelling to distant and isolated locations during odd hours generates new threats to women’s safety.The exponential increase in assaults and attacks on women,on the other hand,is posing a threat to women’s growth,development,and security.At the time of the attack,it appears the women were immobilized and needed immediate support.Only self-defense isn’t sufficient against abuse;a new technological solution is desired and can be used as quickly as hitting a switch or button.The proposed Women Safety Gadget(WSG)aims to design a wearable safety device model based on Internet-of-Things(IoT)and Cloud Technology.It is designed in three layers,namely layer-1,having an android app;layer-2,with messaging and location tracking system;and layer-3,which updates information in the cloud database.WSG can detect an unsafe condition by the pressure sensor of the finger on the artificial nail,consequently diffuses a pepper spray,and automatically notifies the saved closest contacts and police station through messaging and location settings.WSG has a response time of 1000 ms once the nail is pressed;the average time for pulse rate measure is 0.475 s,and diffusing the pepper spray is 0.2–0.5 s.The average activation time is 2.079 s.

关键词： Perpetrator safety IoT women security GPS tracking GSM

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Secure Rotation Invariant Face Detection System for Authentication

引用

Computers, Materials & Continua 2022年第1期70卷 1955-1974页

作者： Amit Verma Mohammed Baljon shailendra mishra Iqbaldeep Kaur Ritika Saini Sharad Saxena Sanjay Kumar Sharma Department of Computer Science&Engineering Chandigarh Group of CollegesMohali140317India Department of Computer Engineering College of Computer&Information ScienceMajmaah University11952Saudi Arabia Department of Computer Science and Engineering Thapar Institute of Engineering&TechnologyPatiala147004India Department of Computer Centre&Campus Network Facility Science Complex PO Central UniversityGachibowliHyderabad500046TelanganaIndia

Biometric applications widely use the face as a component for recognition and automatic detection.Face rotation is a variable component and makes face detection a complex and challenging task with varied angles and rotation.This problem has been investigated,and a novice algorithm,namely RIFDS(Rotation Invariant Face Detection System),has been devised.The objective of the paper is to implement a robust method for face detection taken at various angle.Further to achieve better results than known algorithms for face detection.In RIFDS Polar Harmonic Transforms(PHT)technique is combined with Multi-Block Local Binary Pattern(MBLBP)in a hybrid manner.The MBLBP is used to extract texture patterns from the digital image,and the PHT is used to manage invariant rotation characteristics.In this manner,RIFDS can detect human faces at different rotations and with different facial expressions.The RIFDS performance is validated on different face databases like LFW,ORL,CMU,MIT-CBCL,JAFFF Face Databases,and Lena images.The results show that the RIFDS algorithm can detect faces at varying angles and at different image resolutions and with an accuracy of 99.9%.The RIFDS algorithm outperforms previous methods like Viola-Jones,Multi-blockLocal Binary Pattern(MBLBP),and Polar HarmonicTransforms(PHTs).The RIFDS approach has a further scope with a genetic algorithm to detect faces(approximation)even from shadows.

关键词： Pose variations face detection frontal faces facial expressions emotions

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Cross-Layer Design for EH Systems with Finite Buffer Constraints

引用

Computers, Materials & Continua 2021年第10期69卷 129-144页

作者： Mohammed Baljon shailendra mishra Department of Computer Engineering College of Computer and Information Sciences Majmaah UniversityMajmaah11952Saudi Arabia

Energy harvesting(EH)technology in wireless communication is a promising approach to extend the lifetime of future wireless networks.A cross-layer optimal adaptation policy for a point-to-point energy harvesting(EH)wireless communication system with finite buffer constraints over a Rayleigh fading channel based on a Semi-Markov Decision Process(SMDP)is investigated.Most adaptation strategies in the literature are based on channeldependent adaptation.However,besides considering the channel,the state of the energy capacitor and the data buffer are also involved when proposing a dynamic modulation policy for EH wireless networks.Unlike the channeldependent policy,which is a physical layer-based optimization,the proposed cross-layer dynamic modulation policy is a guarantee to meet the overflow requirements of the upper layer by maximizing the throughput while optimizing the transmission power and minimizing the dropping packets.Based on the states of the channel conditions,data buffer,and energy capacitor,the scheduler selects a particular action corresponding to the selected modulation constellation.Moreover,the packets are modulated into symbols according to the selected modulation type to be ready for transmission over the Rayleigh fading channel.Simulations are used to test the performance of the proposed cross-layer policy scheme,which shows that it significantly outperforms the physical layer channel-dependent policy scheme in terms of throughput only.

关键词： Energy harvesting technology cross-layer design delay tolerant network fading channels resource allocation telecommunication power management telecommunication scheduling

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Multilayer Self-Defense System to Protect Enterprise Cloud

引用

Computers, Materials & Continua 2021年第1期66卷 71-85页

作者： shailendra mishra Sunil Kumar Sharma Majed A.Alowaidi College of Computer and Information Sciences Majmaah UniversityMajmaah11952Saudi Arabia

A data breach can seriously impact organizational intellectual property,resources,time,and product value.The risk of system intrusion is augmented by the intrinsic openness of commonly utilized technologies like TCP/IP protocols.As TCP relies on IP addresses,an attacker may easily trace the IP address of the organization.Given that many organizations run the risk of data breach and cyber-attacks at a certain point,a repeatable and well-developed incident response framework is critical to shield them.Enterprise cloud possesses the challenges of security,lack of transparency,trust and loss of controls.Technology eases quickens the processing of information but holds numerous risks including hacking and confidentiality problems.The risk increases when the organization outsources the cloud storage services through the vendor and suffers from security breaches and need to create security systems to prevent data networks from being compromised.The business model also leads to insecurity issues which derail its popularity.An attack mitigation system is the best solution to protect online services from emerging cyber-attacks.This research focuses on cloud computing security,cyber threats,machine learning-based attack detection,and mitigation system.The proposed SDN-based multilayer machine learning-based self-defense system effectively detects and mitigates the cyber-attack and protects cloud-based enterprise solutions.The results show the accuracy of the proposed machine learning techniques and the effectiveness of attack detection and the mitigation system.

关键词： Cybersecurity cyber threats cyber-attacks attack mitigation system

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Applications of VANETs: Present &Future

引用

Communications and Network 2013年第1期5卷 12-15页

作者： Vishal Kumar shailendra mishra Narottam Chand Department of Computer Science & Engineering Bipin Tripathi Kumaon Institute of Technology Dwarahat India Department of Computer Science & Engineering National Institute of Technology Hamirpur India

The Vehicular Safety Consortium (VSC), the Crash-Avoidance Metrics Partnership (CAMP) consortium and the Vehicle Infrastructure Initiative (VII) [1] along with the giants of the light-duty vehicle manufactures, are working to develop pre-competitive safety technologies and various applications that can be offered in Vehicular ad-hoc Networks (VANETs), a special kind mobile ad-hoc networks where wireless equipped element called on-board unit (OBU) in vehicles form a network with the Roadside unit (RSU) without any additional infrastructure. In this paper, we are primarily categorizing various possible applications of vehicular network, along with its features, and implementations in the real world.

关键词： Roadside Unit WAVE VSC CAMP VII

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Variability in physical properties of plantation-grown progenies of Melia composita and determination of a kiln-drying schedule

引用

Journal of Forestry Research 2018年第5期29卷 1435-1442页

作者： shailendra Kumar Bhushan U.Kelkar Ajit K.mishra Susanta K.Jena Forest Products Division Forest Research Institute

Plantation-grown progenies of Melia composita Willd.were studied for variability in several physical properties： density,radial and tangential shrinkage,longitudinal permeability of heartwood and sapwood.Furthermore,flat-sawn planks from each of the progeny were subjected to a quick-drying test for determination of kilndrying schedule.The mean density of the species was 0.39 g cm^（-3） and the wood may be categorized as light wood.Mean radial shrinkage（%） for the species was 2.8% with progeny-wise variation in radial shrinkage from 1.56 to 4.11%.Mean tangential shrinkage（%） for the species was 5.54% with progeny-wise variation in tangential shrinkage from 3.69 to 7.71%.The resultant tangentialradial shrinkage ratio was 1.98（less than two）,which suggests that the wood is relatively stable with respect to drying behavior.Mean sapwood and heartwood longitudinal permeability of the species were 3.38 and 2.02 Darcy,respectively.Higher longitudinal permeability of sapwood and heartwood indicate better drying and preservative properties of the species.Terazawa quick-drying test method suggests that the species is less susceptible to drying defects.During the test,only moderate checks and cracks were observed.A tentative kiln-drying schedule was recommended based on these results.

关键词： Melia composita Willd. Density Radial and tangential shrinkage Longitudinal permeability Quickdrying test Kiln-drying schedule

来源：

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：