arXiv ScienceSearch

arXiv subjects

Sheldon Paul

Publications and source records attributed to Sheldon Paul.

4 recordsLinked to original sources

A Unified Compliance Aggregator Framework for Automated Multi-Tool Security Assessment of Linux Systems

Assessing the security posture of modern computing systems typically requires the use of multiple specialized tools. These tools focus on different aspects such as configuration compliance, file integrity, and vulnerability exposure, and their outputs are often difficult to interpret collectively. This paper introduces the Unified Compliance Aggregator (UCA), a framework that integrates several open-source security tools into a single composite score representing overall system security. The proposed framework combines outputs from Lynis, OpenSCAP (STIG and CIS profiles), AIDE, Tripwire, and Nmap NSE. A normalization process converts heterogeneous outputs into a consistent 0 to 100 scale, followed by weighted aggregation. We also introduce a logarithmic scoring model for file integrity measurements to address limitations observed in prior linear approaches. Experiments were conducted on Ubuntu 22.04 across different hardening levels and environments. Results show consistent improvement in composite scores as systems are hardened, while also revealing contrasting behavior between compliance and file integrity tools. Two case studies, a basic web server and a DVWA-based system illustrate how the framework can be applied in practical scenarios.

cs.CR

Security Hardening Using FABRIC: Implementing a Unified Compliance Aggregator for Linux Servers

This paper presents a unified framework for evaluating Linux security hardening on the FABRIC testbed through aggregation of heterogeneous security auditing tools. We deploy three Ubuntu 22.04 nodes configured at baseline, partial, and full hardening levels, and evaluate them using Lynis, OpenSCAP, and AIDE across 108 audit runs. To address the lack of a consistent interpretation across tools, we implement a Unified Compliance Aggregator (UCA) that parses tool outputs, normalizes scores to a common 0--100 scale, and combines them into a weighted metric augmented by a customizable rule engine for organization-specific security policies. Experimental results show that full hardening increases OpenSCAP compliance from 39.7 to 71.8, while custom rule compliance improves from 39.3\% to 83.6\%. The results demonstrate that UCA provides a clearer and more reproducible assessment of security posture than individual tools alone, enabling systematic evaluation of hardening effectiveness in programmable testbed environments.

cs.CR

Long-term LHC Discovery Reach for Compressed Higgsino-like Models using VBF Processes

The identity of Dark Matter (DM) is one of the most active topics in particle physics today. Supersymmetry (SUSY) is an extension of the standard model (SM) that could describe the particle nature of DM in the form of the lightest neutralino in R-parity conserving models. We focus on SUSY models that solve the hierarchy problem with small fine tuning, and where the lightest SUSY particles ($\tilde{\chi}_{1}^{0}$, $\tilde{\chi}_{1}^{\pm}$, $\tilde{\chi}_{2}^{0}$) are a triplet of higgsino-like states, such that the mass difference $\Delta m(\tilde{\chi}^{0}_{2},\tilde{\chi}^{0}_{1})$ is 2-50 GeV. We perform a feasibility study to assess the long-term discovery potential for these compressed SUSY models with higgsino-like states, using vector boson fusion (VBF) processes in the context of proton-proton collisions at $\sqrt{s} = 13$ TeV, at the CERN Large Hadron Collider. Assuming an integrated luminosity of 3000 fb$^{-1}$, we find that stringent VBF requirements, combined with large missing momentum and one or two low-$p_{T}$ leptons, is effective at reducing the major SM backgrounds, leading to a 5$\sigma$ (3$\sigma$) discovery reach for $m(\tilde{\chi}^{0}_{2}) < 180$ $(260)$ GeV, and a projected 95\% confidence level exclusion region that covers $m(\tilde{\chi}^{0}_{2})$ up to 385 GeV, parameter space that is currently unconstrained by other experiments.

hep-ph

Searching for New Heavy Neutral Gauge Bosons using Vector Boson Fusion Processes at the LHC

New massive resonances are predicted in many extensions to the Standard Model (SM) of particle physics and constitutes one of the most promising searches for new physics at the LHC. We present a feasibility study to search for new heavy neutral gauge bosons using vector boson fusion (VBF) processes, which become especially important as the LHC probes higher collision energies. In particular, we consider the possibility that the discovery of a $Z'$ boson may have eluded searches at the LHC. The coupling of the $Z'$ boson to the SM quarks can be small, and thus the $Z'$ would not be discoverable by the searches conducted thus far. In the context of a simplified phenomenological approach, we consider the $Z'\to\tau\tau$ and $Z'\to\mu\mu$ decay modes to show that the requirement of a dilepton pair combined with two high $p_{T}$ forward jets with large separation in pseudorapidity and with large dijet mass is effective in reducing SM backgrounds. The expected exclusion bounds (at 95\% confidence level) are $m(Z') < 1.8$ TeV and $m(Z') < 2.5$ TeV in the $\tau\tau j_{f}j_{f}$ and $\mu\mu j_{f}j_{f}$ channels, respectively, assuming 1000 fb$^{-1}$ of 13 TeV data from the LHC. The use of the VBF topology to search for massive neutral gauge bosons provides a discovery reach with expected significances greater than 5$\sigma$ (3$\sigma$) for $Z'$ masses up to 1.4 (1.6) TeV and 2.0 (2.2) TeV in the $\tau\tau j_{f}j_{f}$ and $\mu\mu j_{f}j_{f}$ channels.

hep-ph