Achieved Security Level Research Articles

GENERALIZED MODEL OF INFORMATION PROTECTION PROCESS IN AUDIOVISUAL CONTENT DISTRIBUTION NETWORKS

The most important indicators of the effectiveness of content protection systems are indicators of the achieved security level, i.e. functional properties of security. These indicators are: confidentiality, integrity, availability. Each of the indicators of the functional properties of content security is distributed according to the methods of ensuring and the degree of its achievement. A significant drawback of such indicators is that they are qualitative. This significantly narrows the scope of their use and makes it impossible to use them in mathematical expressions for optimizing the parameters of protection means, obtaining quantitative estimates of the performance quality of the protection system or its components, etc. The work offers a number of quantitative indicators, which, depending on the purpose, can be probabilistic and temporal. Calculation of such indicators makes it possible to assess the degree of ensuring the functional properties of information security or the possible degree of ensuring the functional properties of protected information.

Highly Efficient Authentication for CAN by Identifier Reallocation With Ordered CMACs

Most of the existing works on securing the CAN bus are using the limited data-field of CAN frames to embed a cryptographic payload. Only very few works have suggested the use of the identifier field since identifiers are critical for the arbitration procedure and changing them at random would interfere with message priorities. To preserve priority on the bus, in this work we use an ordered CMAC buffer. In this way, we can authenticate the identifiers of CAN frames and check that the sender is a legitimate node while arbitration on the bus remains unaltered. Moreover, we determine that for real-world scenarios the achieved security level is very close to the length of the ID field despite the constraints from ordering. This procedure easily circumvents replay attacks and fuzz testing on the bus, which were exploited by many recent works. We prove the feasibility of our approach by testing practical implementations on automotive-grade microcontrollers and CAN-bus traffic allocations from a high-end vehicle. The computational requirements are some of the lowest achievable for securing CAN, with a dozen CMAC-AES computations being sufficient for extracting a table of one hundred identifiers.

Security Level Identification and Secure Software Design of Safety Critical Embedded Systems: Methodologies and Process

AbstractThis paper is concerned with the process and technological aspects of Instrumentation & Control System, I&C System security and provides an overview of the recommended design practices and assessment methods for security aspects of control and instrumentation system used in Safety Critical Environments. This paper describes out how Security Levels of I&C systems and components of Safety Critical Facilities can be assigned by system designers. This is akin to Safety Integrity Level, SIL levels assigned for safety issues. It presents ideas about the three different security aspects viz Target Security Level, Achieved Security Level and Capability Security Level. The paper explains how it can be incorporated in the Life Cycle of an I&C System. It also factors the Physical Security issues, use of Wiring Harnesses. It then discusses the Security Level Vectors, the associated Foundational Requirements and the Security Lifecycle Program of an I&C System

Design and Performance of Secure Geocast for Vehicular Communication

The characteristics of vehicular communication environments and their networking and application requirements have led to the development of unique networking protocols. They enable vehicle-to-vehicle and vehicle-to-infrastructure communication based on the IEEE 802.11 technology, ad hoc principles, and wireless multihop techniques using geographical positions. These protocols, which are commonly referred to as Geocast, greatly support the vehicular communication and applications but necessitate a tailored security solution that provides the required security level with reasonable processing and protocol overhead, as well as reasonably priced onboard and road-side unit equipment. In this paper, we present the design of a security solution for Geocast, which is based on cryptographic protection, plausibility checks using secure neighbor discovery and mobility-related checks, trustworthy neighborhood assessment, and rate limitation. We analyze the achieved security level of the proposed scheme and assess its overhead and performance. Furthermore, we develop a software-based prototype implementation of a secure vehicular communication system. We find that the proposed security measures could result in a network performance bottleneck in realistic vehicular scenarios. Finally, we analyze the tradeoff between security overhead and protocol performance and determine the minimal processing overhead needed for acceptable performance.

Entropy Analysis and New Constructions of Biometric Key Generation Systems

In this paper, a new, soft two-level approach for the generation of multiple and revocable biometric keys, adapted to the analog nature of biometric signals, is proposed. It consists of a novel randomized soft code-offset construction for the Euclidean metric, at the first level, and a code-redundancy construction for the Hamming metric, possibly based on a Reed-Solomon code, at the second level. The Shannon entropy analysis shows that the new construction achieves optimal security with respect to biometric template protection, whereas the previously proposed constructions for the Euclidean metric are shown to be insecure in the multiple-key setting. In addition, a general code-offset construction for the Hamming metric is analyzed in terms of the Shannon entropy instead of the usual min entropy. This allows a nice characterization of the codes that provide biometric template protection in the multiple-key scenario as well as a further differentiation among these codes with respect to the achievable security level.

A secure data storage system based on phase-encoded thin polarization holograms

A novel secure data storage architecture based on phase-encoded, thin film, Fourier-type polarization holograms is reported. Efficient data encryption and verification can be obtained by phase modulation of the reference wave introduced by a phase-type spatial light modulator that is imaged onto the hologram plane. A physical model is formulated including phase-encoding, non-linear storage medium behaviour and features of the proposed optical system. A method is proposed and implemented in the form of a custom modelling tool for generating code sets optimal in terms of code number and security level. The utility of the architecture and the achievable security level are experimentally demonstrated.