Jul 2026· 2026 6th International Conference on Electrical, Computer and Energy Technologies (ICECET)· pp. 1-7· 0 citations· 21 references
Abstract
This paper addresses the automation of access control in Linux environments from a cybersecurity perspective, highlighting the critical need for secure and effective access control systems to mitigate insider threats. The study tackles the challenges associated with manual user access control systems and user privilege management. Using a methodological approach, the study developed an automated script in a Linux environment, leveraging its multi-user design and command line control. The script, written in Python, integrates Linux command utilities to manage user permissions dynamically. It targets specific cyberattacks such as unauthorized access, privilege escalation, and brute force attacks, enhancing overall organizational security. The criteria for defining predefined time frames for user access include user roles, security clearance levels, the sensitivity of the accessed data, and compliance with organizational policies and regulatory requirements. By implementing this automated system, the study aims to reduce insider threats, improve the efficiency of user privilege management, and demonstrate the scalability and flexibility of such systems in meeting various infrastructure needs. The script running time was averaged at 0.5 seconds per execution, with no execution errors observed across 50 test runs. Resource utilization was monitored, showing an average CPU usage of 1.5% and memory usage of 10MB during script execution. These benchmarks substantiate the claims of excellent script performance, error-free execution, and efficient resource utilization. The implementation of this automated access control system provides a robust solution for enhancing security in Linux environments.
Infrastructure as Code (IaC) has become an important approach for automating the provisioning, configuration, validation, and management of cloud and software infrastructure. This review covers five aspects of IaC: DevOps integration, security, automation, compliance, validation, and risk management. By version controlling, testing, validating, and automating the deployment of infrastructure configurations, IaC makes infrastructure changes and deployments more efficient and automated, which enables continuous integration and continuous deployment. Security considerations include misconfigurations, hardcoded secrets, inadequate access controls, vulnerable third-party modules, supply-chain attacks, and configuration drift. Infrastructure governance is reinforced by automation and compliance mechanisms that validate the infrastructure in the interest of a policy, check the compliance at runtime, and enforce the policy automatically. Automated validation embeds shift-left principles, static analysis, unit testing and policy-as-code to catch errors and violations before they reach the end-users. The other elements of risk management are identification of risk, configuration drift, vulnerability management, risk assessment, threat detection and continuous risk monitoring. In conclusion, the review underscores the importance of implementing secure, scalable, and reliable IaC practices that incorporates automation, compliance, validation, and risk management in the infrastructure lifecycle. These practices help reduce human error, ensure deployment uniformity, adhere to regulatory requirements, and enhance organizational resilience through sustainable infrastructure security, auditability, flexibility and suitability for changing operational needs.
Swapnil Joshi· International Research Journ...· 0 citations
This review's results show that penetration testing is an important part of improving cybersecurity because it helps identify weaknesses before they become problems and reduces risk.
Shruti Agarwal, S. Sharma· DMPedia Lecture Notes in Com...· 1 citation
A corporate architecture of information and cybersecurity is pro-posed, which will ensure a layered system of effective protection against cyber threats, including network protection solutions such as NGFW, workstation and server protection against malicious software based on EDR/XDR, and email system protection.
Yurii Lysetskyi, S. Bobrov, O. Danchenko· Mathematical machines and sy...· 0 citations
The PAM in z/OS systems needs additional measures in the realm of protecting sensitive data from misuse by insiders and credential abuse. Classic approaches using authentication through static mechanisms do not provide adequate protection of administrative sessions that use RACF, TSO, and SDSF, thus leaving systems open to risks associated with administrative activities. To combat these risks, this paper proposes implementing a new control approach for PAM known as the Zero-Trust Control Framework, based on behavioural analysis, graph theory, and entropy calculations. The new tool developed as part of this framework is called Behavioural Identity Drift Analyzer (BIDA). As such, the Privilege Interaction Graph Transformer (PIGT) leverages graph neural networks and transformers to generate privilege interaction graphs that detect the escalation routes, dependencies, and propagation vectors of insider threats in near real-time. Lastly, the Entropy Adaptive Zero-Trust Orchestrator (EAZTO) analyzes uncertainties in user actions, commands, and privileges in order to apply adaptive control measures such as multi-factor authentication, privilege reduction, or even session termination. In combination, these four modules provide layers of protection and achieve continuous PAM decision-making at 90 percent accuracy for the purpose of enhancing zero trust enforcement in z/OS administration.
R. Shaw· Journal of Intelligent Decis...· 0 citations
A four-plane theoretical model can be introduced to separate authentication, authorization reasoning, enforcement, and auditability into four closely coupled but independent evolving planes for the system, providing a unified point of reference for both researchers and practitioners in the field of secure and scalable identity management in today's enterprise world.
Ravi Kumar Kotapati· International Research Journ...· 0 citations
Public administration software systems are increasingly adopting microservices architectures to achieve scalability, flexibility, and resilience. However, the complexity of distributed systems poses challenges to access authorization management. This study presents the SIARE-Artefactos solution, which is designed to automate the registration and authorization of resources within Paraguay’s Integrated State Resource Management System (SIARE). SIARE-Artefactos leverages OAuth 2.0 and Spring Boot Starter to ensure secure and efficient authorization processes. SIARE-Artefactos leverages OAuth 2.0 and Spring Boot Starter to ensure secure and efficient authorization processes. SIARE-Artefactos has been implemented and used by public employees in Paraguay, enabling validation with real users. For the validation we adopted a mixed-methods, combining quantitative with qualitative sources, and a longitudinal observational design. The convergence of evidence allowed us to correlate the objective reduction in deployment times (from minutes to seconds) with the subjective perception of 'system predictability' reported by the DevOps team. Validation of the proposal demonstrates the solution's replicability to other cases with similar challenges and resources, as well as its ability to significantly improve system reliability and reduce configuration time by 74%. This highlights its potential to transform large-scale public administration systems using modern DevOps practices and agile methodologies.
