Acceptable Security Research Articles

Maintenance with Weekly Carfilzomib in Elderly newly Diagnosed Multiple Myeloma (IFM 2012-03).

Prolonged treatments have significantly improved survival in newly diagnosed multiple myeloma (NDMM). Lenalidomide (IMiDs), is currently approved in this indication, but remains a daily treatment, although oral, and may favor side effects in the long run. Furthermore, the use of a proteasome inhibitor (PI) is warranted in certain type of MM, such as high-risk. Carfilzomib, a second generation PI, has proved active combined with an acceptable security profile, although its added benefit when given continuously is unknown.

A pre-silicon logic level security verification flow for higher-order masking schemes against glitches on FPGAs

Higher-order masking schemes have been proven in theory to be secure countermeasures against side-channel attacks in the algorithm level. The ISW framework is one of the most acceptable secure models of the existing higher-order masking schemes. However, a gap may exist between scheme and implementation. Several analyses have exhibited the weakness of masking in hardware designs on FPGAs. Firstly, we give the definition of leakage point and introduce three implementation logical flaws: glitch, EDA optimization and intermediate variable of scheme flaw. Secondly, we propose a leakage verification flow for implementing and verifying circuits realized higher-order masking schemes to avoid these leakage points. The flow provides an efficient evaluation method to locate and identify leakage points in masking hardware implementations. With the knowledge of the weaknesses of implementation, the implementation should be modified by corresponding methods to fix flaws, especially for glitch, which has been regarded as the main challenge of masking in hardware designs, we provide a method to remove the leakage point using Dijkstra algorithm with no extra time and area overheads. Finally, the design flow is evaluated on the implementation of Rivain&Prouff masking. Our experiments demonstrate how it automatically locates and protects the implementation. In addition, the experiments are also performed on flawed implementations due to EDA optimization and intermediate variables.

A novel randomized one-dimensional chaotic Chebyshev mapping for chosen plaintext attack secure image encryption with a novel chaotic breadth first traversal

We construct a novel randomized chaotic image encryption algorithm based on the one-dimensional chaotic Chebyshev mappings. We first define a novel chaotic breadth-first search algorithm and then use it to apply the permutation to image pixels. We also use a novel approach to construct the diffusion matrix using a chaotic sequence. Using a one-dimensional chaotic mapping in constructing image encryption algorithm has the advantage of lower computational and space complexities compared to hyper-chaotic encryption schemes. Moreover, our design favors brute-force search attack resistance because of a sufficiently large key space, as well as providing CPA-security and robustness against noise and data loss scenarios. Finally, the security performance of our proposed method is investigated against statistical analysis, key-sensitivity analysis, and differential attack analysis which shows acceptable security.

Combining RSA and audio steganography on personal computers for enhancing security

This paper proposed an enhanced system for securing sensitive text data on personal computer benefitting from the combination of both techniques: cryptography and steganography. The system security is generated by involving RSA cryptography followed by audio-based steganography as two sequential layers to ensure the best possible security gaining the advantages from both. The study modeled the system and implemented it to be tested to explore the relation between security, capacity, and data dependency. The experimentations covered securing data within 15 differently sized audios showing interesting results. The results gave enhancement in capacity versus security trade-off, allowing the user and application to be the decision maker in the choice. The work showed the possibility of accepting security of 1-LSB, 2-LSB, and 3-LSB methods and their reasonable effect on the cover. The study also shows that using 3-LSB is giving acceptable security benefitting extra capacity more than 1-LSB and 2-LSB found in the literature.

Efficient Edge Nodes Reconfiguration and Selection for the Internet of Things

Recent technological improvements have modernized the industrial sector. These improvements range from autonomous to automation of industrial processes. The industrial sector requires all the process to be accomplished locally because of the security and delay constraints. To accomplish the goal, edge/fog is a possible middleware between a cloud and an industrial environment. Edge nodes can provide processing with acceptable security and latency to robots, sensors, and actuators in the industrial environment. The industrial system configures various services at the edge nodes to enhance and automate the performance of the system. This paper considers an important but less investigated service hosting problem, where the edge nodes are dynamically reconfigured to host possibly the most recently requested services from the sensor nodes. Because of the limited storage and computational resource at the edge nodes, the problem of reconfiguration is important, which can increase the number and types of services hosted by the edge node. When a sensor node is within the transmission range of multiple fog nodes, to efficiently select the most appropriate fog node for data transmission, different types of fog node selection methods, random selection, shortest estimated latency first, and shortest estimated buffer first, have been considered and evaluated in this paper with satisfactory results.

Influence of Collateral Security on Performance of SMEs in Turbo Sub County, Kenya

Access to credit is a prerequisite for growth of any firm within the economy. It improves firms’ performance, facilitate market entry, growth of companies and promotes innovation and entrepreneurial activity. Small and medium enterprises play an important role of economic growth and on a macro level bring about employment within the economy. SMEs have been unable to access credit to lubricate their businesses due to their limited track record, limited acceptable collateral security, and inadequate financial statements, business plans among others. This has hence attracted the attention of scholars and policy makers. However, there has been disagreement among scholars on the relationship between access to credit and performance of these firms. The purpose of this study was therefore to access the influence of collateral security on performance of SMEs in Turbo s sub county, Kenya anchoring on the credit access theory. The study used a sample of 340 from a population of 2,901 entrepreneurs using both descriptive and correlational research design. From the regression results, the study concluded that collateral security had a positive and significant influence on access to credit hence performance of SMEs. Firms with collateral security accessed loans easily as opposed to those with none. The research hopes that the findings of this study will contribute significantly to the existing literature on access to credit and performance of SMEs. Keywords: Credit, SMEs, Collateral security, Kenya DOI : 10.7176/EJBM/11-18-03 Publication date :June 30 th 2019

Maintenance with weekly carfilzomib in elderly newly diagnosed multiple myeloma (IFM 2012-03).

8029 Background: Prolonged treatments have significantly improved survival in newly diagnosed multiple myeloma (NDMM). Lenalidomide (IMiDs), is currently approved in this indication, but remains a daily treatment, although oral, and may favor side effects in the long run. Furthermore, the use of a proteasome inhibitor (PI) is warranted in certain type of MM, such as high-risk. Carfilzomib, a second generation PI, has proved active combined with an acceptable security profile but its added benefit when given continuously is unknown. We thought to study maintenance Carfilzomib for elderly NDMM (eNDMM). Methods: The IFM 2012-03 multicenter phase I KMP (Carfilzomib, Melphalan, Prednisone) weekly study for eNDMM (≥ 65 years old) determined the maximal tolerated dose of weekly Carfilzomib at 70mg/m². We focus herein on the second part of the study with IV Carfilzomib monotherapy given at 36mg/m² for 13 cycles maintenance on an every 2 weeks schedule. Results: Thirty eNDMM were recruited in IFM 2012-03. Median age is 75, with 56% R-ISS 2 or 3 and 11% high-risk cytogenetic. With K weekly from 36 to 70mg/m², OS is reported at 93.3%, including 46.7% ≥CR; median PFS is 35.8 months and median OS was not reached. Twenty-two (73%) patients started K maintenance and 16 (73%) completed it. Four patients progressed and 2 stopped for AEs (renal amylosis, sensory neuropahty) during the maintenance phase. At maintenance completion, 50% were ≥CR. From the start of maintenance, in landmark analysis, median PFS is 28.1 months and the estimated 36-months OS approximately 70%. Conclusions: Carfilzomib monotherapy can be used safely in maintenance for 1 year in eNDMM, including for patients above 75 years. K maintenance may lead to deep response rate, certainly a most relevant prognostic factor for prolonged survival. Therefore, Carfilzomib maintenance, characterized with a simple administration modality, might be considered as an alternative to Lenalidomide and integrate the armamentarium of prolonged therapy in eNDMM. Clinical trial information: NCT02302495.

IoTsafe, Decoupling Security From Applications for a Safer IoT

The use of robust security solutions is a must for the Internet of Things (IoT) devices and their applications: regulators in different countries are creating frameworks for certifying those devices with an acceptable security level. However, even for already certified devices, security protocols have to be updated when a breach is found or a certain version becomes obsolete. Many approaches for securing IoT applications are nowadays based on the integration of a security layer [e.g., using transport layer security, (TLS)], but this may result in difficulties when upgrading the security algorithms, as the whole application has to be updated. This fact may shorten the life of IoT devices. As a way to overcome these difficulties, this paper presents IoTsafe, a novel approach relying on secure socket shell (SSH), a feasible alternative to secure communications in IoT applications based on hypertext transfer protocol (HTTP and HTTP/2). In order to illustrate its advantages, a comparison between the traditional approach (HTTP with TLS) and our scheme (HTTP with SSH) is performed over low-power wireless personal area networks (6loWPAN) through 802.15.4 interfaces. The results show that the proposed approach not only provides a more robust and easy-to-update solution, but it also brings an improvement to the overall performance in terms of goodput and energy consumption. Core server stress tests are also presented, and the server performance is also analyzed in terms of RAM consumption and escalation strategies.

Leak Point Locating in Hardware Implementations of Higher-Order Masking Schemes

Secure masking schemes have been proven in theory to be secure countermeasures against side-channel attacks. The security framework proposed by Ishai, Sahai, and Wagner, known as the Ishai–Sahai–Wagner scheme, is one of the most acceptable secure models of the existing $d$ th-order masking schemes, where $d$ represents the masking order and plays the role of a security parameter. However, a gap may exist between scheme and design. Several analyses have determined that the glitch has been regarded as the main challenge of masking in hardware designs. A practical method of locating the precise position of leakage points (LPs) in the original hardware design is very rare. Existing research on this glitch mainly focuses on the first-order leakages; however, higher-order analysis can combine several shares to recover the secret key. In this paper, we propose a practical method, sensitive glitch location (SGL) method to locate the less order leakage in hardware design. Specifically, the SGL method can locate any-order of LP in the hardware implementation of $d$ th-order masking schemes. We conducted experiments and verified that the time complexity of SGL on the $d$ th-order masking schemes is ${O(nm)}$ , where $m$ is the number of signals and $n$ is the number of shares in masking scheme. It can therefore be regarded as an efficient tool for the masking designs. In addition, we analyzed the $d$ th-order masking scheme proposed by Rivain and Prouff (2010) along with the SecMult algorithm from the Rivain–Prouff countermeasure, which has been analyzed by our SGL. The experimental results verified that a higher-order leakage may exist in certain hardware designs, even the masking scheme has been proven as a secure countermeasure. To the best of our knowledge, SGL is the first tool that can be used to locate any-order of power/electromagnetic LP in hardware designs. It thus shows the weakness in the original design file of hardware implementations. This property can help designers directly improve the real security of the designs. Moreover, SGL returns the path of the leakages, which can elucidate the original cause and propagation of the weakness.

Flexibility of controllable power transformers for managing wind uncertainty using robust adjustable linearised optimal power flow

As renewable energy sources (RESs) penetration increases in the power system, the transmission system operators face new challenges to ensure system reliability and flexibility while ensuring high utilisation of uncertain RES generation. Controllable transformers with on-load tap changers and phase shifting capability are the promising flexibility tools to keep the system acceptable security and flexibility levels by controlling the voltage levels and energy flow. The AC optimal power flow (AC OPF) with detailed modelling considerations such as the bus voltage magnitude by including these devices is challenging. This study develops the AC OPF model to propose a robust flexibility optimisation framework for daily scheduling problem with uncertain wind energy sources. Nevertheless, the proposed formulation representation is an intractable mixed integer nonlinear programming (MINLP) while it includes AC grid constraints and the augmented modelling of the mentioned transformers. Accordingly, the proposed MINLP problem has been converted into a mixed-integer linear program where a certain level of solution accuracy can be achieved for the available time budget. The effectiveness of the proposed method is demonstrated using a modified 6-bus and IEEE 118-bus test systems.

High Rate of Complete Response (CR) with Undetectable Bone Marrow Minimal Residual Disease (MRD) after Chemo-Sparing and MRD-Driven Strategy for Untreated Fit CLL Patients: Final Results of the Icll 07 Filo Trial

Achievement of CR with undetectable minimal residual disease (uMRD) may be associated with a longer survival in CLL, but BCR signaling inhibitors alone seldom allow reaching uMRD. We conducted a multicenter phase II trial aiming at exploring the efficacy of an induction treatment associating obinutuzumab and ibrutinib, followed by immunochemotherapy for patients who do not reach CR with uMRD. Previously untreated fit patients with active Binet stage A and B or stage C CLL, no TP53 mutation/deletion, CIRS score Between November 2015 and May 2017, 135 patients (89 males/46 females) were enrolled; 7% were Binet stage A, 67% stage B and 26% stage C. Median age was 62 years (range, 35-80). Genetic alterations included 26% del(11q), 19% trisomy 12 and 56% del(13q); 15% had a complex karyotype and 56% patients had unmutated IGHV status. Median Beta 2 microglobulin was 3.6 mg/L (1.5-7.5) and median GFR (Cockroft) was 81 mL/min (42-173). At Month 9, 92% patients had received the 8 planned infusions of obinutuzumab. Ibrutinib dosage was reduced in 4 patients and definitively discontinued in 3 of them (3.9%) due to AE (atrial fibrillation, atrial flutter and neutropenia). Fifty seven percent of the patients presented at least a grade (G) 3 toxicity during the first 9 months of treatment (neutropenia 24%, anemia 6% and thrombocytopenia 31%). One hundred and thirty patients were evaluable for response at M9 and 5 not evaluable (2 deaths: one sudden at M7 and one accidental at M8; one acute coronary syndrome; one listeria meningitidis and one acute pulmonary edema at day 1 cycle 1). In intention to treat (ITT), ORR was 100% with 41% of patients reaching CR (42% for evaluable patients) but only 12% had BM MRD At month 16, 115 patients were evaluable for response. In ITT, the CR rate was 69% (78% for evaluable patients) and 79% of patients had BM MRD During the trial second period (M9 to M16), 38% patients presented at least a G3 toxicity: neutropenia 24%, thrombocytopenia 15%, anemia 1.5%, febrile neutropenia 3%, gastrointestinal disorders 9.5% and cardiac events 2.4%. A total of 41 serious AEs were observed throughout the entire treatment duration: 9 cardiac events including 1 atrial flutter and 3 atrial fibrillations, 4 hemorrhagic events, 7 infections, 3 second cancers (2 basocellular carcinoma, 1 renal adenocarcinoma) and 2 deaths. In conclusion, this MRD-driven strategy given for a definite period of time leads to a very high rate of uMRD CR in previously untreated CLL fit patients without TP53 aberration and displays an acceptable security profile. To our knowledge, these results are superior to standard FC + rituximab (FCR) or any chemo-free regimen. We hypothesize that this very high rate of bone marrow undetectable MRD will translate in a prolonged PFS while discontinuing treatment. Disclosures Laribi:Novartis: Other: Grant and personal fees; Takeda: Other: Grant and personal fees; Teva: Other: Grant; Gilead: Other: Personal fees; Sandoz: Other: Grant; Roche: Other: Grant; Amgen: Other: Personal fees; Hospira: Other: Grant. Salles:Novartis: Consultancy, Honoraria; Roche: Honoraria, Research Funding; Celgene: Honoraria, Research Funding; Abbvie: Honoraria; Acerta: Honoraria; Amgen: Honoraria; Epizyme: Honoraria; Gilead Sciences: Honoraria; Janssen: Honoraria; Merck: Honoraria; Morphosys: Honoraria; Pfizer: Honoraria; Servier: Honoraria; Takeda: Honoraria. Leblond:Gilead: Honoraria, Speakers Bureau; Abbvie: Consultancy, Honoraria, Other: Travel, Accommodations, Expenses, Speakers Bureau; Roche: Consultancy, Honoraria, Other: Travel, Accommodations, Expenses, Speakers Bureau; Janssen: Consultancy, Honoraria, Speakers Bureau; Sandoz: Honoraria; Amgen: Honoraria. Cartron:Celgene: Consultancy, Honoraria; Roche: Consultancy, Honoraria; Sanofi: Honoraria; Gilead Sciences: Honoraria; Janssen: Honoraria. Ysebaert:Roche: Consultancy, Research Funding; Gilead Sciences, Inc.: Consultancy, Research Funding; Janssen: Consultancy, Research Funding. Cymbalista:Gilead: Honoraria; AbbVie, Inc: Honoraria; Janssen: Honoraria; Sunesis: Research Funding. Feugier:Gilead: Consultancy, Honoraria, Membership on an entity9s Board of Directors or advisory committees, Research Funding; Roche: Consultancy, Honoraria, Membership on an entity9s Board of Directors or advisory committees, Research Funding; Abbvie: Consultancy, Honoraria, Membership on an entity9s Board of Directors or advisory committees, Research Funding; Janssen: Consultancy, Honoraria, Membership on an entity9s Board of Directors or advisory committees, Research Funding.

Virtual Scribe Services Are Associated with Higher Physician Satisfaction than Traditional Documentation

Category: Other Introduction/Purpose: Introduction of a novel virtual scribe service is theorized to eliminate waste from clinic operations. The iScribes virtual scribe application is activated in clinic and records audio proceedings of patient encounters. Recordings are transmitted to a remotely located medical scribe who translates patient-physician discussions into comprehensive clinic notes per the physician’s preferences. We hypothesize that virtual scribe services result in accurate notes, simple integration and high satisfaction. Methods: A modified version of a previously validated survey on physician documentation quality and satisfaction was digitally distributed to 193 orthopaedic surgeons who were using the iScribes system. The survey consisted of 16 domains relating to implementation, ease-of-use, efficiency, integration with electronic medical records, information quality, overall satisfaction and comparison to prior documentation systems. Results: Of the 193 physicians surveyed, 94 responded (49%). The majority (85%) were in private practice with the remaining in private-academic hybrids (2%), university systems (5%) and hospital employment (7%). Prior documentation modes were standard dictation (80%), Dragon voice-recognition (14%) and self-written/typed notation (6%). The average practice duration was 15 years (range: 1-34 years), and the average time utilizing the virtual scribe service was 12 months (range: 1-48 months). Providers rated the following domains as “agree” or “strongly agree”: easy to use (96%), fast (92%), integrates with workflow (94%), acceptable security (90%), allows me to perform work well (95%), reliable (90%), information is complete/accurate (88%), satisfaction with technical support (92%), overall satisfaction (92%) and prefer iScribes over previous system (93%) (Figure 1). Conclusion: The iScribes virtual scribe service was associated with high physician satisfaction in all tested domains and was preferred over traditional documentation in the present cohort of orthopaedic surgeons. Prospective analysis of time, quality and cost metrics is warranted.

Optical camera communication for mobile payments using an LED panel light.

As mobile payments become increasingly popular, the security of the transaction process should be taken more seriously. Many mobile phones are equipped with complementary metal-oxide-semiconductor (CMOS) cameras, which can be used as visible light communication (VLC) receivers. An optical camera communication (OCC) system is a special VLC system that uses an optical camera as a receiver. OCC offers acceptable security, but challenges remain. In this paper, we propose an OCC system that uses an optical camera with a rolling shutter as a receiver and a light-emitting diode (LED) panel light as a transmitter. The feature of an LED panel light serving as a surface light source reduces the possibility of overexposure and avoids the blooming effect of the camera. The rolling shutter effect of the CMOS camera is used to increase the data rate, which is numerically much higher than the frame rate. Finally, the results of a symbol error rate (SER) test show that the VLC system exhibits error-free performance. The data rate is approximately 4.2kb/s, while the net data rate is approximately 2.46kb/s due to the redundancy of the 3-9 code bar code and the redundant cycle. This data rate is sufficient for mobile payments, which require only 60bits of data at a time.

Secure and Efficient Privacy-Preserving Ciphertext Retrieval in Connected Vehicular Cloud Computing

As vehicular equipment is becoming more and more intelligent, the vehicular information service, as the main means of capturing information, has been far from able to meet the needs of occupants [1, 2]. Cloud computing, with its powerful computing and storage capabilities, convenient network access, energy saving and excellent scalability, reliability, availability, and other advantages, can be an effective solution to the limitations of existing automotive information services. Connected vehicular cloud computing, which combines cloud computing and VANETs, has the characteristics of both a cloud platform and a mobile ad hoc network, including autonomy and no fixed structure, good scalability, and so on. However, during the information retrieval, high-density node distribution and high-speed mobile nodes may directly affect the information transmission capacity of a VANET by information tampering, transmission delay, and other issues. In this article, we propose a ciphertext-based search system that exploits RSUs as super peers for connected vehicular cloud computing. The proposed system supports ciphertext retrieval for related documents. In the proposed system, all the computations and retrieval operations are handled by super stationary peers, while documents are stored in the cloud to achieve high efficiency and security of the index structure. We can also reduce the impact of vehicle dynamics on the information retrieval process in this way. In our system, the indexing efficiency is also improved by utilizing a hybrid indexing structure in which binary trees are nested in a B+ tree. Through security analysis and performance evaluation, we demonstrate that our proposal can achieve acceptable security and efficiency.

RISC: a robust image symmetric cryptosystem

In recent years, AES is known as the excellent choice between the existing symmetric cryptosystems to encrypt binary or text data. However, this standard encryption algorithm is unsuitable for images regarding the particular features of these kinds of data such as high correlation, high redundancy, and voluminosity. Based on this fact, we have designed a new cryptosystem taking into account the aforementioned characteristics which provides high performance and security level. Actually, the cryposystem adopts a new structure named Outer-Inner structure. This new structure consists of two phases: Outer phase and Inner phase. In the former phase, the image is treated as a single block. The purpose of this phase is to address the correlation and the redundancy issue of images. In order to ensure the efficiency and to avoid the problem of treating an image as a single block where several image encryption algorithms suffer from it, this phase only involves lightweight operations. In the later phase the image is treated as a set of fixed blocks. The aim of this phase is to address the voluminosity issue. In fact, during this phase each block can be encrypted independently through an iterative function. The experiment results show that 7 rounds are sufficient to reach an acceptable security level.

Enhancing PC Data Security via Combining RSA Cryptography and Video Based Steganography

This paper proposed an enhanced system for securing sensitive text-data on personal computer benefitting from the combination of both techniques: cryptography and steganography. The system security is generated by involving RSA cryptography followed by video based steganography as two sequential layers to insure best possible security gaining the advantages from both. The study modeled the system and implemented it to be tested to explore the relation between security, capacity and data dependency. The experimentations covered testing securing data within 15 different size videos showing interesting results. The research gave enhancement to capacity vs. security, as enforced unavoidable tradeoff. The work uniqueness is presented in showing different measures allowing the user and application to be the decision maker to choose. The tests provided all possibilities of accepting security of 1-LSB, 2-LSB, and 3-LSB methods detailing their effects on the cover video. The main outcome proved applicability to be adopting 3-LSB approach to give acceptable security with practical capacity preferred making 3-LSB winning among 1-LSB and 2-LSB techniques.

Deep Inferior Epigastric Perforator Flap (D.I.E.P) for Breast Reconstruction: Impact of Intraoperative Intrathecal Morphine on Outcome

Background: Pain control after breast reconstruction with Deep Inferior Epigastric Perforator (DIEP) often requires intravenous narcotic analgesia and inpatient hospitalization. Intrathecal morphine (ITM) administration analgesia is increasing in popularity because it decreases the use of intravenous analgesic medications and offer comparable pain relief with less systemic side effects. Questions/purposes: The aim of this retrospective study was to evaluate the effect of intrathecal morphine on postoperative morbidity of breast reconstruction by Deep Inferior Epigastric Perforator flap and compare it with intravenous narcotic analgesia. Methods: 269 patients underwent immediate or delayed DIEP reconstruction after mastectomy, by the same surgeon, at Jules Bordet Institute. Patients receiving ITM analgesia (300 μ) were matched 1:3 with patients undergoing intravenous narcotic analgesia for pain control in the same years by the same surgeon. Differences in peri- and postoperative complications across the two groups were assessed. Results: The two groups were comparable in terms of demographic characteristics and factors of morbidity. Intraoperative variables were not statistically different between the groups except for intraoperative blood loss (P = 0.0001), transfusion (P = 0.0001) and Intraoperative liquid requirement (p = 0.0001). Intra and postoperative blood pressure were lower in ITM group (p < 0.05). Patients in ITM group showed lower postoperative analgesia requirement (P < 0,0001), less respiratory complications and less acute respiratory failure (P = 0,003 and P = 0,004, respectively). No statistically significant differences in the length of hospital stay (LOS) were noted Conclusion: We found that intrathecal morphine analgesia was associated with less blood loss and fluid administration, better postoperative pain control, and less respiratory complications with an acceptable security profile than intravenous narcotic analgesia. Clinical relevance: This study suggests that using intrathecal morphine may result in less blood loss and blood transfusion, better postoperative pain control, and less respiratory complications.

Multi-functional secure data aggregation schemes for WSNs

Secure data aggregation schemes are widely adopted in wireless sensor networks, not only to minimize the energy and bandwidth consumption, but also to enhance the security. Statistics obtained from data aggregation schemes often fall into three categories, i.e., distributive, algebraic, and holistic. In practice, a wide range of reasonable aggregation queries are combinations of several different statistics. Providing multi-functional aggregation support is also a primary demand for data preprocessing in data mining. However, most existing secure aggregation schemes only focus on a single type of statistics. Some statistics, especially holistic ones (e.g., median), are often difficult to compute efficiently in a distributed mode even without considering the security issue. In this paper, we first propose a new Multi-functiOnal secure Data Aggregation scheme (MODA), which encodes raw data into well-defined vectors to provide value-preservation, order-preservation and context-preservation, and thus offering the building blocks for multi-functional aggregation. A homomorphic encryption scheme is adopted to enable in-ciphertext aggregation and end-to-end security. Then, two enhanced and complementary schemes are proposed based on MODA, namely, RandOm selected encryption based Data Aggregation (RODA) and COmpression based Data Aggregation (CODA). RODA can significantly reduce the communication cost at the expense of slightly lower but acceptable security on a leaf node, while CODA can dramatically reduce communication cost with the lower aggregation accuracy. The performance results obtained from theoretic analysis and experimental evaluation of three real datasets under different scenarios, demonstrate that our schemes can achieve the performance superior to the most closely related work.

Efficient Secure Channel Coding based on QPP-Block-LDPC Codes

An encrypting block low-density parity-check code based on quadratic permutation polynomials (QPPs) (QPP-Block-LDPC) is proposed in this paper. The parity-check matrix of the encrypting QPP-Block-LDPC code is composed of a group of permutations, which can be mapped to QPPs. The coefficients of the QPPs, which are served as secret keys, are utilized to randomize the permutation submatrices. A secure channel coding scheme is presented using the QPP-Block-LDPC code to produce the error-correcting ciphertexts. The coding can achieve more efficient implementation and provide an acceptable security level for the communication over the Gaussian wiretap channel. Simulation results demonstrate that this coding offers good trade-offs between the error performance and the security level.

A Scalable and Lightweight Grouping Proof Protocol for Internet of Things Applications

The Internet of Things (IoT) is a new technology, which enables objects to exchange data via the internet network. One part of the infrastructure of IoT is Radio Frequency Identification (RFID). One way to fortify the system and prevent it against an unauthorized access is an authentication process. A grouping proof protocol is a protocol by which a reader authenticates two or more tags simultaneously in an authentication process. In this paper, we present a novel scalable grouping proof protocol. Since scalability is a challenge in grouping proof protocol, to solve the scalability problem in the proposed protocol, the reader broadcasts the messages and the tags respond to it independently. In terms of the performance, we use a 64-bit lightweight Pseudo-Random Number Generator (64-PRNG) function, which meets the needs of low-power and low-cost systems. In addition, the security analysis results prove that the proposed protocol is resistant against RFID threats and provides an acceptable security level and low computation cost.