检索结果-南通市图书馆

Hybrid Computational Modeling for Web Application security assessment

在线全文

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2022年第1期70卷 469-489页

作者： Adil Hussain Seh Jehad F.Al-Amri Ahmad F.Subahi Md Tarique Jamal Ansari Rajeev Kumar Mohammad Ubaidullah Bokhari Raees Ahmad Khan Department of Information Technology Babasaheb Bhimrao Ambedkar UniversityLucknow226025Uttar PradeshIndia Department of Information Technology College of Computers and Information TechnologyTaif UniversityTaif21944Saudi Arabia Department of Computer Science University College of Al JamoumUmm Al Qura UniversityMakkah21421Saudi Arabia Department of Computer Applications Shri Ramswaroop Memorial UniversityBarabanki225003Uttar PradeshIndia Department of Computer Science Aligarh Muslim UniversityAligarh202002Uttar PradeshIndia

Transformation from conventional business management systems to smart digital systems is a recurrent trend in the current *** has led to digital revolution,and in this context,the hardwired technologies in the software industry play a significant role However,from the beginning,software security remains a serious issue for all levels of *** vulnerabilities lead to intrusions that cause data breaches and result in disclosure of sensitive data,compromising the organizations’reputation that translates into,financial losses as *** of the data breaches are financially motivated,especially in the healthcare *** cyber invaders continuously penetrate the E-Health data because of the high cost of the data on the dark ***,security assessment of healthcare web-based applications demands immediate intervention mechanisms to weed out the threats of *** aim of this work is to provide efficient and effective healthcare web application security *** study has worked with the hybrid computational model of Multi-Criteria Decision Making(MCDM)based on Analytical Hierarchy Process(AHP)and Technique for Order of Preference by Similarity to Ideal-Solutions(TOPSIS)under the Hesitant Fuzzy(HF)*** fuzzy sets provide effective solutions to address decision making problems where experts counter hesitation to make a *** proposed research endeavor will support designers and developers in identifying,selecting and prioritizing the best security attributes for web applications’*** empirical analysis concludes that Robustness got highest priority amongst the assessed security attributes set followed by Encryption,Authentication,Limit Access,Revoke Access,Data Validation,and Maintain Audit *** results of this research endeavor depict that this proposed computational procedure would be the most conversant mechanism for determining the web application *** study also establishes g

关键词： Healthcare web application security assessment hesitant fuzzy sets AHP-TOPSIS

Synthetic security assessment based on variable consistency dominance-based rough set approach

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

High Technology Letters 2010年第4期16卷 413-421页

作者：赵亮 Xue Zhi Department of Electronic Engineering Shanghai Jiao Tong University Shanghai 200240 P.R. China

security assessment can help understand the security conditions of an information system and yield results highly conducive to the solution of security problems in it. Taking the computer networks in a certain university as samples, this paper, with the information system security assessment model as its foundation, proposes a multi-attribute group decision-making （MAGDM） security assessment method based on a variable consistency dominance-based rough set approach （VC-DRSA）. This assessment method combines VC-DRSA with the analytic hierarchy process （AHP）, uncovers the inherent information hidden in data via the quality of sorting （QoS）, and makes a synthetic security assessment of the information system after determining the security attribute weight. The sample findings show that this method can effectively remove the bottleneck of MAGDM, thus assuming practical significance in information system security assessment.

关键词： multi-attribute group decision-making (MAGDM) security assessment variable consistency dominance-based rough set approach (VC-DRSA)

Synthetic security assessment for incomplete interval-valued information system

在线全文

学校读者我要写书评

暂无评论

High Technology Letters 2012年第2期18卷 160-166页

作者：赵亮 Xue Zhi School of Electronic and Electric Engineering Shanghai Jiaotong University.Shanghai 200240China

In order to understand the security conditions of the incomplete interval-valued information system （IllS） and acquire the corresponding solution of security problems, this paper proposes a multi-attribute group decision- making （MAGDM） security assessment method based on the technique for order performance by similarity to ideal solution （TOPSIS）. For IllS with preference information, combining with dominance-based rough set approach （DRSA）, the effect of incomplete interval-valued information on decision results is discussed. For the imprecise judgment matrices, the security attribute weight can be obtained using Gibbs sampling. A numerical example shows that the proposed method can acquire some valuable knowledge hidden in the incomplete interval-valued information. The effectiveness of the proposed method in the synthetic security assessment for IIIS is verified.

关键词： security assessment incomplete interval-valued information system(IIIS) multi-attribute group decision-making(MAGDM) technique for order performance by similarity to ideal solution(TOPSIS) dominance- based rough set approach(DRSA) Gibbs sampling

Crucial problems on security assessment of a building site adjacent to an excavated high slope

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Chongqing University 2002年第2期1卷 38-41页

作者：文海家 ZHANG Jialan 等 CollegeofCivilEngineering ChongqingUniversityChongqing400045P.R.China

The subject of this work is the assessment on the stability of an excavated high slope in order to insure the security of the building site adjacent to the slope, which is frequently encountered in town construction in mountainous areas due to terrain limit. On the base of some typical engineering cases in Chongqing, several crucial problems on security assessment of building site adjacent to an excavated high slope, including the natural geological conditions and man-destroyed degree, engineering environment, potential failure pattern of the high slope, calculation parameters and analysis methods, are roundly discussed. It is demonstrated that the conclusion of security assessment can be determined according to the aspects above-mentioned, and the security assessment is one of the fundamental data to insure the safety of the related construction, site and buildings.

关键词： excavated slope engineering environment geological condition security assessment

A Quantitative security Metric Model for security Controls:Secure Virtual Machine Migration Protocol as Target of assessment

在线全文

学校读者我要写书评

暂无评论

China Communications 2018年第8期15卷 126-140页

作者： Tayyaba Zeb Muhammad Yousaf Humaira Afzal Muhammad Rafiq Mufti School of Electrical Engineering and Computer Science(SEECS) National University of Sciences and TechnologylslamabadPakistan Riphah Institute of Systems Engineering(RISE) Riphah International UniversityIslamabadPakistan Institute of Computing Department of Computer ScienceBahauddin Zakariya UniversityMultanPakistan Department of Computer Sciences COMSATS Institute of Information TechnologyVehariPakistan

Quantitative security metrics are desirable for measuring the performance of information security controls. security metrics help to make functional and business decisions for improving the performance and cost of the security controls. However, defining enterprise-level security metrics has already been listed as one of the hard problems in the Info Sec Research Council's hard problems list. Almost all the efforts in defining absolute security metrics for the enterprise security have not been proved fruitful. At the same time, with the maturity of the security industry, there has been a continuous emphasis from the regulatory bodies on establishing measurable security metrics. This paper addresses this need and proposes a relative security metric model that derives three quantitative security metrics named Attack Resiliency Measure(ARM), Performance Improvement Factor(PIF), and Cost/Benefit Measure(CBM) for measuring the performance of the security controls. For the effectiveness evaluation of the proposed security metrics, we took the secure virtual machine(VM) migration protocol as the target of assessment. The virtual-ization technologies are rapidly changing the landscape of the computing world. Devising security metrics for virtualized environment is even more challenging. As secure virtual machine migration is an evolving area and no standard protocol is available specifically for secure VM migration. This paper took the secure virtual machine migration protocol as the target of assessment and applied the proposed relative security metric model for measuring the Attack Resiliency Measure, Performance Improvement Factor, and Cost/Benefit Measure of the secure VM migration protocol.

关键词： attack resiliency measure cost-benefit measure performance improvement factor security assessment formal verification security controls security metrics virtual machine migration protocol

A Potential security Threat and Its Solution in Coupled Urban Power-traffic Networks with High Penetration of Electric Vehicles

在线全文

学校读者我要写书评

暂无评论

CSEE Journal of Power and Energy Systems 2022年第4期8卷 1097-1109页

作者： Yujie Sheng Qinglai Guo Tianyu Yang Zhe Zhou Hongbin Sun State Key Laboratory of Power Systems Department of Electrical EngineeringTsinghua UniversityBeijing 100084China School of Mechatronic Engineering and Automation Shanghai UniversityShanghai 200444China

The growing penetration of electric vehicles(EVs)and the popularity of fast charging stations(FCSs)have greatly strengthened the coupling of the urban power network(PN)and traffic network(TN).In this paper,a potential security threat of the PN-TN coupling is *** from traditional loads,a regional FCS outage can lead to both the spatial and temporal redistribution of EV charging loads due to EV mobility,which further leads to a power flow *** assess the resulting potential threats,an integrated PN-TN modeling framework is developed,where the PN is described by a direct current optimal power flow model,and the TN is depicted by an energy-constraint traffic assignment *** protect the privacy of the two networks,an FCS outage distribution factor is proposed to describe the spatial-temporal redistribution ratio of the charging load among the remaining I ***,to protect the security of the coupled networks,a price-based preventive regulation method,based on the spatial demand elasticity of the EV charging load,is developed to reallocate the charging load as a solution for insecure *** simulation results validate the existence of the PN-TN coupling threat and demonstrate the effectiveness of the regulation method to exploit the spatial flexibility of EV loads.

关键词： Coupled power-traffic networks electric vehicle power flow redistribution security assessment spatial demand elasticity

Integrity assessment of Medical Devices for Improving Hospital Services

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2021年第6期67卷 3619-3633页

作者： Fahad A.Alzahrani Masood Ahmad Mohd Nadeem Rajeev Kumar Raees Ahmad Khan Department of Computer Engineering Umm Al-Qura UniversityMecca24381Saudi Arabia Department of Information Technology Babasaheb Bhimrao Ambedkar UniversityLucknow226025Uttar PradeshIndia Department of Computer Application Shri Ramswaroop Memorial UniversityBarabanki225003Uttar PradeshIndia

The present study examines the various techniques being used to maintain the integrity of the medical devices,and develops a quantitative framework to list these in the sequence of *** achieve the intended objective,the study employs the combined procedure of Fuzzy Analytic Network Process(ANP)and Fuzzy Technical for Order Preference by Similarities to Ideal Solution(TOPSIS).We selected fuzzy based decision making techniques for assessing the integrity of medical *** suggested methodology was then used for classifying the suitable techniques used to evaluate the integrity of medical *** techniques or the procedures of integrity assessment were ranked according to their satisfaction *** rating of the options determined the order of priority for the *** per the findings of the study,among all the options,A1 was assessed to be the most likely *** means that the integrity of medical devices of A2 is the highest amongst all the chosen *** analysis will be a corroborative guideline for manufacturers and developers to quantitatively test the integrity of medical devices in order to engineer efficacious *** evaluations undertaken with the assistance of the planned procedure are accurate and *** instead of conducting a manual valuation,this experimental study is a better and reliable option for assessing the integrity of the medical devices.

关键词： Integrity of the medical devices fuzzy-ANP.TOPSIS security assessment

Fortifying Smart Grids: A Holistic assessment Strategy against Cyber Attacks and Physical Threats for Intelligent Electronic Devices

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2024年第8期80卷 2579-2609页

作者： Yangrong Chen June Li Yu Xia Ruiwen Zhang Lingling Li Xiaoyu Li Lin Ge School of Computer Science Zhengzhou University of AeronauticsZhengzhou450046China Henan Xin’an Century Technology Co. Ltd.Henan Data Security Engineering Technology Research CenterZhengzhou450046China Key Laboratory of Aerospace Information security and Trusted Computing Ministry of EducationSchool of Cyber Science and EngineeringWuhan UniversityWuhan430072China

Intelligent electronic devices(IEDs)are interconnected via communication networks and play pivotal roles in transmitting grid-related operational data and executing control *** the context of the heightened security challenges within smart grids,IEDs pose significant risks due to inherent hardware and software vulner-abilities,as well as the openness and vulnerability of communication *** grid security,distinct from traditional internet security,mainly relies on monitoring network security events at the platform layer,lacking an effective assessment mechanism for ***,we incorporate considerations for both cyber-attacks and physical faults,presenting security assessment indicators and methods specifically tailored for ***,we outline the security monitoring technology for IEDs,considering the necessary data sources for their security ***,we classify IEDs and establish a comprehensive security monitoring index system,incorporating factors such as running states,network traffic,and abnormal *** index system contains 18 indicators in 3 ***,we elucidate quantitative methods for various indicators and propose a hybrid security assessment method known as GRCW-hybrid,combining grey relational analysis(GRA),analytic hierarchy process(AHP),and entropy weight method(EWM).According to the proposed assessment method,the security risk level of IEDs can be graded into 6 levels,namely 0,1,2,3,4,and *** higher the level,the greater the security ***,we assess and simulate 15 scenarios in 3 categories,which are based on monitoring indicators and real-world situations encountered by *** results show that calculated security risk level based on the proposed assessment method are consistent with actual ***,the reasonableness and effectiveness of the proposed index system and assessment method are validated.

关键词： Smart grid intelligent electronic device security assessment abnormal behaviors network traffic running states

Real-time Online Analysis of Power Grid

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

CSEE Journal of Power and Energy Systems 2020年第1期6卷 236-238页

作者： Mike Zhou Jianfeng Yan Xiaoxin Zhou China Electric Power Research Institute Beijing 100192China

The unprecedented operational complexity and se-curity risks in operating the Chinese UHV AC/DC power grid calls for a new generation of real-time(sec-order)online analysis systems to provide decision *** recent Digital Twin based online analysis research and development work to address the needs is *** addition,a high-level solution architec-ture for the future real-time online analysis systems is proposed for realizing:a)The delay of the virtual model to mirror the physical power grid is in sub-sec range;b)The downstream online analysis applications could have sec-order responsiveness.

关键词： Grid online analysis security assessment digital twin security constraint dispatching