Nabeel Salih Ali Al-Bachachee

Cyber-Physical Systems refer to systems that have an interaction between computers, communication channels and physical devices to solve a real-world problem. Towards industry 4.0 revolution, Cyber-Physical Systems currently become one of the main targets of hackers and any damage to them lead to high losses to a nation. According to valid resources, several cases reported involved security breaches on Cyber-Physical Systems. Understanding fundamental and theoretical concept of security in the digital world was discussed worldwide. Yet, security cases in regard to the cyber-physical system are still remaining less explored. In addition, limited tools were introduced to overcome security problems in Cyber-Physical System. To improve understanding and introduce a lot more security solutions for the cyber-physical system, the study on this matter is highly on demand. In this paper, we investigate the current threats on Cyber-Physical Systems and propose a classification and matrix for these threats, and conduct a simple statistical analysis of the collected data using a quantitative approach. We confirmed four components i.e., (the type of attack, impact, intention and incident categories) main contributor to threat taxonomy of Cyber-Physical Systems

This study introduces a methodological framework to measure the influence of lack of the education, experience, and certification on Qualifications Gap (QG) among network technicians in Baghdad’s public universities. The research methodology includes preliminary study, literature review, data collection and analysis, proposal, and evaluation. Data are collected from 70 respondents through an online survey to test the proposed hypotheses. Four experts validated survey results through a structured interview. Most of the feedback of the experts matched the results of the questionnaire. The outcome of the study is a QG model for network technicians. The presented models that previously established models in industrial and public areas are compared, and the effects of the proposed factors are evaluated. The conducted model can be used as a reference by decision makers in public universities to enhance the level of the job handling by network technicians and to set employment requirements in the networking field.

In this paper, comparing between two type of broadcasting from the perspective of power density which is accredited by most of the organization that specializes in EMF. In the indoor broadcasting, different types of wireless broadcasting devices take as a sample to measure the power density, whilst, the in outdoor broadcasting Previous measurements take to compare with indoor measurements. The measurements obtained from this study show that the effects of the internal broadcasting devices are more influential than the external broadcasting devices that connected to the towers, especially for very close distances. Therefore, this study emphasizes to remove these devices from the bedrooms and classrooms and patients rooms

To maintain the attendance records, several government organisations and educational institutions in many countries still depend on the paper-based attendance approach. This approach has presented several disadvantages such as time-consuming and wastage of environmental resources. There is a necessity to change these traditional methods of attendance recording with more efficient ones. Thus, many works have been done in this direction. Moreover, this study aims to analyse the most recent studies on automated attendance systems regarding the timeline. Our critical review has highlighted studies in the existing literature concerning technology, application domain, and main findings. Moreover, shed light on most numerous studies on any of three previous aspects.

In this paper, an investigation of the power consumption is done by making a comparison between static and dynamic WSNs. We have compared the results of the static network with the results of the dynamic network. Static and dynamic wireless Sensor networks have the same architecture (Homogenous) and proposed protocol. Depending on the suggested protocol, the simulation results show that the energy consumption in the static wireless sensor network was less than the dynamic wireless sensor network. However, moving the sensors in the dynamic WSN present real improvement in delivering packets to the base station. In the proposed routing protocol, transmitting data process is done in a hierarchal way. Cheap sensors are introduced and deploy them intensively to improve the QoS in the network. The final results and the conclusion are reported.

In this study, current network architecture and characteristics of the campus network at the University of Kufa (UoK) is presented and survey. The research methodology includes preliminary study, data collection and analysis, modeling, proposing and evaluation phase. A survey questionnaire is conducted to evaluate the current network performance from the user’s perspective and administrators for different colleges. Data are collected from 186 respondents that included 178 employees and 8 admins through online and paper surveys. Survey results have shown that most users are not satisfied with the existing network performance regarding several network services such as availability, Quality of Service (QoS). Additionally, the survey is validated by three experts through a structured interview.

In this paper, proposed a realtime heart pulse monitoring system via conducted an electronic circuit architecture to measure Heart Pulse (HP) for patients and display heart pulse measuring via smartphone and computer over the network in real-time settings. In HP measuring application standpoint, using sensor technology to observe heart pulse by bringing the fingerprint to the sensor via used Arduino microcontroller with Ethernet shield to connect heart pulse circuit to the internet and send results to the web server and receive it anywhere. The proposed system provided the usability by the user (user-friendly) not only by the specialist. Also, it offered speed and results accuracy, the highest availability with the user on an ongoing basis, and few cost.

Problems on healthcare delivery have become the current concern in most studies in the academe and industries. These studies have been conducted by using evolving technical solutions. These solutions are driven by technological advancements both in medical sensors and low-power networked systems. Wireless Sensor Networks (WSNs) prompted the emergence of most healthcare systems in recent years. This work proposes a system architecture for a remote healthcare monitoring system using pulse sensor and temperature sensor to measure the physiological parameters including Heart Pulse (HP) and temperature of patients. The presented system is evaluated using several persons with different ages, gender, and situations. The conducted technique is achieved respecting to the cost of service, signal quality, and quality of service. Finally, the current system is effective given that all reported results are standard values.

Human-Computer Interaction (HCI) is concerned with how humans work with computers and how technologies can accommodate the needs of users to meet their goals. The early phases of Virtual Reality (VR) often involved headmounted computers in which users immersed themselves, as they could act, perceive, and interact with a three-dimensional world. This paper has two objectives: to conduct a detailed review of VR trends (previous, current, and forthcoming) and to highlight the applications and obstacles that affect each trend. Reliable survey data was obtained from sources such as ISI, Scopus, Springer, IEEE, and Google Scholar, as well as websites. The main contributions of this work are: (1) analysis and summary of VR trends in the past, present, and future, (2) details of the technical limitations of each trend and explication of their applications, technological requirements, and currently available solutions, (3) illustration of the direction, developments, issues, and challenges for each trend (previous, current, and future), (4) identification of the direction and important trends that require more comprehensive studies by future researchers.

At present, Web applications have been used for most of our life activities increasingly, and they affected by Structured Query Language Injection Attacks (SQLIAs). This attack is a method that attackers employ to impose the database in most of the web applications, by manipulate SQL queries, which sent to the Relational Database Management System (RDBMS). Hence, change the behavior of the applications. In This paper, developing Web Application SQLI Protector (WASP) tool in real-time web application to detect SQL injection attacks in stored procedures. Then, evaluated and analyze the developed tool respect to efficiency and effectiveness in practices. The propose technique uses realtime based on positive tainting, accurate and efficiency taint propagation, and syntax aware evaluation of the query strings at the application level to detect illegal queries before they reach at the database by using Microsoft ASP.NET. The developed tool effective due to it capable of detect and stop all SQLI attacks in real-time environment and did not generate any false negative, a few-false positive values in the results and impose minimal deploy requirements.

Generally, qualifications for personnel who work in IT field and network operators in particular are considered for many purposes, includes: measuring whether a specific employee capable to handle a certain job or not and it can be made as a direction in order to develop human esources. Whereas, the qualifications are different based on the needs of organizations and views. Furthermore, several influence factors for qualifications in the literature revealed have been employed for industry and academia domains such as, skill, knowledge, ability, attitude, certification, education, and experience. However, few studies have been investigated the impact of the qualifications gap for the previous elements especially inside public universities. On other hand, many studies have determined the values for each of the certification, education, and experience as qualifications for IT personnel. In this paper, conduct a new model to measure the influence for each of Certification Lack (CL), Education Lack (EL1), and Experience Lack (EL2) on the qualifications gap for network technicians inside Baghdad public universities. Data have collected by on-line survey from seventy respondents in order to analyze and test empirically the proposed hypotheses. Education Lack is the highest influencer of qualifications gap followed by Experience Lack, and Certification Lack are the findings of the proposed model.

Web applications have become widely pervasive in all types of Internet-based services. Thus, security is one of the major concerns as most web applications suffer from vulnerabilities, making them attractive targets for security attacks. Structured Query Language Injection Attack (SQLIA) on stored procedures poses serious threats in the underlying database of any application. This article presents the methodological issues of developing a web application SQLI protector tool to detect stored procedures of SQLIAs. Our technique uses real-time settings based on positive tainting approach, accurate and efficient taint propagation and syntax-aware evaluation of the query strings at the application level are used to detect illegal queries before they reach the database. Then, the proposed tool is evaluated based on its efficiency and effectiveness in practices. In addition, detection techniques used are also analysed. The developed tool is effective given its capability to detect and stop all SQLIAs in a real-time environment.

Recently, Web applications have been used for most of the activities in animation. These applications are affected by the structured query language injection (SQLI). In this paper, four major objectives can be organized to direct the work study are:(1) Conduct a detailed review of various SQLI attacks and investigation of previous approaches that detected and prevented these attacks in Web applications. (2)Compare the performance metrics of the different techniques to evaluate the precision of the results and the cost of the time required to identify the efficiency of the techniques. (3) Evaluate the effectiveness of the techniques in practices based on the effectiveness metrics. (4) Define the efficiency and effectiveness direction of defensive approaches. The main contributions of this work are: (1) Summary and analysis of a critical review (strengths and weaknesses) of the defensive approaches that have been implemented. (2) Comparison of the result accuracy of the different approaches through an evaluation using the standard performance metrics. (3) Evaluation of the effectiveness of the techniques in practice. (4) Identification and focus on the critical and important lines or defensive techniques that need comprehensive studies by future researchers through which the advantages of high efficiency and effectiveness can be obtained.

At present, web applications have been used for most of our activities in our life. Web applications are affected by the attacks of SQL injection. SQL injection is a prevalent technique that attackers appoint to impose the database in the most of web applications, by manipulate the SQL queries that send to RDBMS. Hence, change the behavior of the application. Stored procedures SQL injection attack is one of the serious attacks that posed database threats in the underlying database that underlie web applications. Whereas, the attack can be crafted to execute stored procedures that provided by a particular database, encompasses procedures that deal with the operating system. In this research, three major objectives can be organized to direct the work study are: Firstly, to investigate the attacks of SQL injection, and study what has been done to detect and prevent SQLIA in stored procedures in order to, eliminate the lack of their approaches and highlight their weakness, secondly, to identify the various obstacles and factors that would be encountered will be led to be successful to build an appropriate defensive approach to detect and prevent SQLIAs, and the third objective is, to develop WASP tool to build a real-time web application tool (RT-WASP) to detect the SQLIAs, and propose a suitable protective approach to prevent stored procedures SQLIAs. Our methodology encompassed, four phases, primary study or investigation phase, modeling phase, development and proposing phase, evaluations and discussion phase. Investigation phase will study current approaches to counter SQLIAs. Background study, highlight problems and weakness in order to address the gap in detection and prevention SQLIA domain. In modeling phase, evaluate the performance of the existing techniques to identify the factors that would be encountered will be led to get better and efficient results in our work study. In developing and proposing phase, a suitable tool will be developed, and effective preventive approach will be proposed. Evaluations and discussion phase will take a place in order to finalize our work research. The main contributions of this research study are: First, Summarized and analysis of a detailed review of various SQLI attacks and investigation of previous approaches that detected and prevented these attacks in Web applications. Second, developed WASP tool that has been proposed by Halfond.2008 to detect the attacks of SQLI in real-time web applications. Third, proposed a protective approach that includes three preventive mechanisms that are: parameterized stored procedures, customized error messages, and encryption stored procedures in the SQL server. In order to, prevent the danger of SQLIA in stored procedures, and the last contribution is, conducted a comparison analysis of the developed technique and proposed protective approach based on the evaluations respect to efficiency and effectiveness of the technique, and effectiveness of the proposed protective approach. RT-WASP was efficient due to able to stop all SQLIAs and did not generate any false negative, a few false positive values in the results, and pose, low overhead and minimal deploy requirements. Whilst, our protective approach was effectiveness due to, capable to prevent the attacks of stored procedures SQLIAs. Finally, identify and focus on the future scope.

You can Download slides via copy link below and paste it in a new page in your browser https://ndownloader.figshare.com/files/16120517

You can Download slides via copy link below and paste it in a new page in your browser https://drive.google.com/open?id=0B0zoo-emVJgyZG9iNkVvLWhWNmM

You can Download slides via copy link below and paste it in a new page in your browser https://ndownloader.figshare.com/files/16120547

You can Download slides via copy link below and paste it in a new page in your browser https://ndownloader.figshare.com/files/16120436