Additional Security Research Articles

Development of hybrid heuristic‐assisted dynamic data auditing strategy in cloud sector

AbstractCloud computing is performed by hosting the data of data owners on cloud servers, where the data consumers (users) are able to get the data over servers. Though, several security aspects are raised during cloud storage regarding the data availability and data integrity. On the other hand, a novel scheme of data hosting services is introduced owing to data outsourcing which also raises additional security problems. In addition, several methods are presented by taking either “identity‐based cryptography (IBC) or public key infrastructure (PKI).” Hence, a secure and effective dynamic data auditing scheme is preferable for convincing data owners to ensure precise data storage in the cloud. This paper focuses on implementing a new hybrid heuristic‐assisted strategy for managing cloud storage with the help of efficient auditing schemes. This paper tries to optimize the data structures in the cloud storage with a new improved hybrid differential evolution‐teamwork optimization algorithm (HED‐TOA) with the integration of the teamwork optimization algorithm (TOA) and differential evolution (DE) algorithms. It aims to alleviate the problems raised during the dynamic data update operations including “insert, modify, delete, and append.” This improved HED‐TOA help in performing the data auditing. This model overcomes the problem of modifications occurring in the data structure while doing the dynamic data update operations and thus, it ensures efficient data auditing and data management in cloud computing. This work considers the aim of reducing computation as well as communication costs during the data storage process in the cloud. The performance estimation demonstrates that there is considerable contrast between the traditional methods and the proposed technique in terms of the communication and computation cost on the cloud and auditor.

Analisis Kesiapan Fasilitas dan Personel Unit Aviation Security di Bandar Udara Internasional Adi Soemarmo Boyolali Dalam Rangka Pembukaan Kembali Rute Internasional

The recovery of situation due to the spread of the Covid-19 virus, several airports will reopen international routes. Therefore the purpose of this research is to analyze the readiness of the facilities and personnel of the aviation security unit at Adi Soemarmo Boyolali International Airport in the reopening of international route. This research was conducted from 5 December 2022 to 5 January 2023, at Adi Soemarmo Boyolali International Airport. This research used a qualitative method, including data obtained from observations at the Adi Soemarmo Airport terminal, interviews with aviation security personnel, and supporting documentation. The results of this study indicate that the Aviation Security unit at Adi Soemarmo Boyolali International Airport is ready for the reopening of international routes. The facilities owned are certified in accordance with KP 138 of 2018. The number of personnel available is sufficient to carry out their duties and the working hours of personnel are in accordance with Law Number 13 of 2003. The obstacles experienced by personnel are that there are still several facilities that are not yet available and the need for additional personnel aviation security when there is a reopening of international routes. Keywords: Fasilities Aviation Secuity, Personnel Aviation Security, Readiness

The Method for Implementing Test Constructors Using the Lualatex Publishing System

One of the key factors of successful learning is the control of mastering the material that has been passed, which can be implemented, including by performing control test tasks. The work is devoted to the use of the desktop publishing system LuaLaTeX to automate the process of forming test control papers. The control generated with its help includes a set number of randomly selected test tasks on the specified topics, followed by mixing both the questions themselves and their answer options. Each generated control work is personalized, i.e. generated directly for a specific student, and is a control work in the form of a PDF-document. To achieve the goal of the work, the capabilities of the LuaLaTeX publishing system are used, which include: the Lua scripting language, which is used to form a pool of control work tasks and personalize it; the TeX language is used to design the content of the control work being formed; the capabilities of the PDF format, including the JavaScript programming language, implement automated verification of control work, demonstration of correct answers to questions, preservation of the test result and provide additional security, which consists in the use of hashes instead of correct answers to tasks and a password. As a practical significance of the proposed solution, we can note an increase in the efficiency of the process of controlling the development of the material passed by students by minimizing the speed of preparation of test control works and their verification, as well as the use of a minimum software tools for its implementation.

Video Based Fire and Smoke Detection Using Deep Learning

The objective of this work is to design models for computer vision-based fire and smoke detection. CCTV cameras are installed at major public locations, homes, and buildings in every city. These cameras are often used for surveillance purposes and used mostly for forensic purposes. As a side advantage, these cameras can also be used for detection of fire and smoke in the camera field of view. IoT based sensors are the traditional way of detecting fire and smoke. Additionally, video streams from the camera can also be processed to detect fire and smoke events. This will enable additional security in cases when IoT sensors fail to detect a real fire and smoke event. It is proposed to use the advancements of AI/ML for computer vision-based fire and smoke detection.

LSB Steganography using Dual Layer for Text Crypto-Stego

Cryptography and Steganography are two main components of information security. Utilizing encryption and Steganography to establish many layers of protection is a commendable approach. Our main objective of this paper is to build an integrated method of securely transmitting data through a combination of cryptography and Steganography. Cryptography and Steganography are two common methods of secretly transmitting information. RC4 is used in this paper to change information from plaintext to cipher, and then cipher text is integrated into the image by Least Significant Bit (LSB). The results are defined in terms of the processing time, the peak signal-to-noise ratio (PSNR), and mean square error (MSE). The experimental results showed the stego image’s acceptable quality and combining the two techniques provides additional security in the original Steganography.

Enhanced security in federated learning by integrating homomorphic encryption for privacy-protected, collaborative model training

A significant novel approach in distributed ML, Federated Learning (FL), enables multiple parties to work simultaneously on developing models while securing the confidentiality of their unique datasets. There are issues regarding privacy with FL, particularly for models that are being trained, because private information can be accessed from shared gradients or updates to the model. This investigation proposes SecureHE-Fed, a novel system that improves FL’s defense against attacks on privacy through the use of Homomorphic Encryption (HE) and Zero-Knowledge Proofs (ZKP). Before data from clients becomes involved in the learning procedure, SecureHE-Fed encrypts it. The following lets us determine encrypted messages without revealing the data as it is. As an additional security test, ZKP is employed to verify if modifications to models are valid without sharing the true nature of the information. By evaluating SecureHE-Fed with different FL techniques, researchers demonstrate that it enhances confidentiality while maintaining the precision of the model. The results of this work obtained validate SecureHE-Fed as a secure and scalable FL approach, and we recommend its use in applications where user confidentiality is essential.

Privacy-Preserving Image Retrieval Based on Additive Secret Sharing

The rapid growth of digital images motivates individuals and organizations to upload their images to the cloud server. To preserve privacy, image owners would prefer to encrypt the images before uploading, but it would strongly limit the efficient usage of images. Plenty of existing schemes on privacy-preserving Content-Based Image Retrieval (PPCBIR) try to seek the balance between security and retrieval ability. However, compared to the advanced technologies in CBIR like Convolutional Neural Network (CNN), the existing PPCBIR schemes are far deficient in both accuracy and efficiency. With more cloud service providers, the collaborative secure image retrieval service provided by multiple cloud servers becomes possible. In this paper, inspired by additive secret sharing technology, we propose a series of additive secure computing protocols on numbers and matrices with better efficiency, and then show their application in PPCBIR. Specifically, we extract CNN features, decrease the dimension of features and build the index securely with the help of our protocols, which include the full process of image retrieval in the plaintext domain. The experiments and security analysis demonstrate the efficiency, accuracy, and security of our scheme.

EOS software evolution enabling LHC Run 3

EOS software evolution enabling LHC Run 3

Modification of SHA-512 using Bcrypt and salt for secure email hashing

Email security, particularly against phishing, spoofing, and distributed denial-of-service (DoS) attacks, is a pressing concern given the essential role email plays in accessing various online accounts. The study introduced a modified SHA-512 algorithm, implementing additional security layers including randomly generated salt and the Bcrypt algorithm. The modified SHA-512 was comprehensively evaluated on parameters like hash construction, computational efficiency, data integrity, collision resistance, and attack resistance. The results showed its avalanche percentage exceeded the 50% target, reaching 50.08%. Experimental hash-cracking failed to decode the hashes created by the modified algorithm, verifying its protective efficiency. The algorithm also successfully demonstrated data integrity and collision resistance. This indicates that the enhanced SHA-512 algorithm is an effective, more secure hashing method, particularly applicable to email addresses.

Risks of Using Linux OS with Enabled Firmware Update Mechanism (Linux Vendor Firmware Service)

The article discusses the mechanism for updating the built-in software (firmware) in distributions of the Linux operating system (OS). Considering the import "substitution strategy" in Russia proposed in technology sector and the active transition to this OS, including in solutions related to the digitalization of the energy sector, the problem of additional control over the firmware update process, incl. in used domestic distributions (AstraLinux, AltLinux). At the moment most popular mechanism of automatic firmware update is Linux Vendor Firmware Service (LVFS), article includes brief description of its update process. Using software developed for complete monitoring LVFS metadata were found multiply inconsistencies of current scheme of firmware update — deleting of files from index, replacement of already uploaded images with same id. Also basing on client agent metadata it is possible to organize targeted substitution of binary images transferred by service directly to hardware bypassing built-in monitoring tools. Finally it is concluded that there are potential vulnerabilities in this mechanism and a solution is proposed in the form of organizing own service with additional layer for verification of "firmware" during process of its distribution. If scheme with additional security layer over base of popular and well proved by practice LVFS will be successful it can be used in industrial applications with including in future in appropriate standards as reference model.

Proposed Electrical System Design of Streetlights at Megadike Access Road

Due to the absence of streetlights, it is unsafe for drivers to travel during the night in the current state of Mega Dike. The lack of streetlights causes low visibility for drivers, which is one of the major factors that causes road crashes. Thus, this study aims to propose an electrical system design of streetlights at the Mega Dike Access Road. In order to plan an electrical system design, the proponents would take in consideration the following parameters; Illumination formula for pole spacing; voltage drop calculation; economic analysis; and simulation of the system. The results will be presented in tabulated form for the respective parameters. The study examines five (5) different cases, taking into account different lamp wattages, voltage drop considerations, and cost analysis. The study would abide with the standards set by the Philippine Electrical Code (PEC) and Department of Energy (DOE). The goal of the proposed streetlights is to provide additional security for drivers on the Mega Dike Access Road by improving visibility and reducing the risk of road crashes caused by low visibility. Generally, the significance of streetlights is needed in Mega Dike Access Road in order to address the issue of low visibility for drivers and improve overall road safety in the area.

Evaluation of Occupational Health Safety Management System in Hospitals in Banda Aceh City

The most dominant hospital activity actors at risk of occupational safety accidents (SMK3) are hospital employees such as nurses, cleaning services, patients and visitors. The purpose of this study was to evaluate the application and factors affecting the implementation of occupational health and environmental safety management systems at dr. Zainal Abidin Regional General Hospital, Meuraxa Hospital and Banda Aceh Mother and Child Hospital. The data collection technique uses a mix method that combines quantitative and qualitative data with sequential explanatory strategies. The legal basis is Permenkes No. 66 of 2016, and the data was analyzed using the Likert scale method points 1-5 through SPSS version 26. The results of research at RSUDZA, RSIA, and RSUDM Banda Aceh show that the application of SMK3 is good to very good. However, there are several inhibiting factors that need to be considered by the hospital in order to improve the implementation of the Occupational Safety and Health Management System (SMK3) at RSUDZA, RSIA, and RSUDM Banda Aceh, some improvements can be recommended. First, RSUDZA needs to ensure the stability of K3 field officers and improve the marking of K3 signs. In addition, the unification of the drug room with pharmacy employees must be separated to be more effective. RSIA needs to obtain budget for ceiling repairs so as to block various small dirt falling from roof gaps, avoid splashing rainwater falling through the roof insulators or regulators of heat and cold coming from the roof, roof frame covers to make the space neater and cleaner, sound dampers, both generated by rainwater and other sounds and rearrange the right material placement. RSUDM needs to overcome solid waste piles, improve the marking of K3 rooms, and improve the arrangement of parking areas. In addition, it is important to hire additional security personnel in the ER. All these improvements are expected to improve occupational safety and health conditions in hospitals.

An Extra Security Measurement for Android Mobile Applications Using the Fingerprint Authentication Methodology

This research discusses the development of an Android application through the integration of fingerprint recognition technology for user authentication as a way of improving security in the system. The app serves as an additional security layer, requiring users to verify their identity before gaining access to any installed applications on their Android device. The use of technologically developed devices with fingerprint scanners that have the capacity for analyzing biological traits facilitates a strong user verification process. The process makes use of a fingerprint previously registered by the user to authenticate user legitimacy, hence providing an efficient authentication process. A set of metrics was introduced and verified against a legacy system, proving that the proposed system surpasses the legacy system. This new approach offers the advantage of serving as an alternative to using PIN numbers or pattern unlocking on Android smartphones.

Provably Secure Lightweight Mutual Authentication and Key Agreement Scheme for Cloud-Based IoT Environments.

A paradigm that combines cloud computing and the Internet of Things (IoT) allows for more impressive services to be provided to users while addressing storage and computational resource issues in the IoT environments. This cloud-based IoT environment has been used in various industries, including public services, for quite some time, and has been researched in academia. However, various security issues can arise during the communication between IoT devices and cloud servers, because communication between devices occurs in open channels. Moreover, issues such as theft of a user's IoT device or extraction of key parameters from the user's device in a remote location can arise. Researchers interested in these issues have proposed lightweight mutual authentication key agreement protocols that are safe and suitable for IoT environments. Recently, a lightweight authentication scheme between IoT devices and cloud servers has been presented. However, we found out their scheme had various security vulnerabilities, vulnerable to insider, impersonation, verification table leakage, and privileged insider attacks, and did not provide users with untraceability. To address these flaws, we propose a provably secure lightweight authentication scheme. The proposed scheme uses the user's biometric information and the cloud server's secret key to prevent the exposure of key parameters. Additionally, it ensures low computational costs for providing users with real-time and fast services using only exclusive OR operations and hash functions in the IoT environments. To analyze the safety of the proposed scheme, we use informal security analysis, Burrows-Abadi-Needham (BAN) logic and a Real-or-Random (RoR) model. The analysis results confirm that our scheme is secure against insider attacks, impersonation attacks, stolen verifier attacks, and so on; furthermore, it provides additional security elements. Simultaneously, it has been verified to possess enhanced communication costs, and total bit size has been shortened to 3776 bits, which is improved by almost 6% compared to Wu et al.'s scheme. Therefore, we demonstrate that the proposed scheme is suitable for cloud-based IoT environments.

DESIGNING INVENTORY INFORMATION SYSTEM AT PT HAADI WAHANA JAYA DESKTOP BASED

This research documents the implementation process of a desktop-based inventory information system at PT Haadi Wahana Jaya with the aim of increasing the efficiency and accuracy of inventory management. Through a research and development approach, this system is designed to meet the company's specific needs. With an intuitive user interface design, the system provides easy access and navigation for users. The login form allows users to access inventory information securely, with the implementation of additional security features such as CAPTCHA. In addition, integration with financial and production systems ensures interdepartmental connectivity and better coordination. Implementation results show increased operational efficiency, optimization of inventory levels, and accurate real-time reporting. Although some challenges in terms of culture change were encountered, user feedback indicated a higher level of satisfaction. The conclusion of this research underlines the positive contribution of desktop-based inventory information systems to PT Haadi Wahana Jaya's inventory management.

Chance-constrained vulnerability assessment of smart water distribution systems against stealthy false data injection attacks

Smart water distribution systems (SWDSs) have not only enhanced the monitoring and control of the entire water infrastructure but have also jeopardized its security and resilience. The state-of-the-art examined the uncertainties in the water supply network to obtain optimal design parameters to ensure hydraulic integrity. However, the investigations of uncertainties in SWDSs from the cybersecurity perspective remain unexplored. To address this limitation, this paper utilizes a robust chance-constrained optimization strategy to scrutinize the vulnerable location of SWDSs against False Data Injection (FDI) attacks. This is achieved by factoring in the probabilistic behavior of water demand at junctions that can potentially facilitate stealthy FDI attacks on the hourly measurements of the pump’s flow rate. The proposed nonlinear model is validated with several case studies reflecting the real-world cyberattack consequences including cutoff water supply of the network, enhanced power consumption of the pump, and the undesirable pressure surge in the system at strategic locations of SWDSs. As a result of the studied cases, the cyberattack consequences on the entire water supply network are obtained while highlighting the threat-prone regions of the network. This paper contributes to embedding additional security layers to the existing water infrastructure at the vulnerable links and junctions.

Secure key real-time update and dynamic DNA encryption for CO-OFDM-PON based on a hybrid 5-D chaos.

A double key (DK) real-time update and hybrid five-dimensional (5-D) hyperchaotic deoxyribonucleic acid (DNA) dynamic encryption scheme is proposed, which can ensure the security in the orthogonal frequency division multiplexing passive optical network (OFDM-PON). Chaotic sequences for DNA dynamic encryption are produced using a four-dimensional (4-D) hyperchaotic Lü system and a one-dimensional (1-D) logistic map. In this scheme, the DK consists of an external key set, which is stored locally, and an internal key, which is associated with the plaintext and external key. In addition, a pilot cluster is used as the carrier of key transmission and key embedding is achieved by converting key to phase information of the pilot. To verify the feasibility of the scheme, a simulation validation is performed on a 46.5Gb/s 16 quadrature amplitude modulation (QAM) coherent OFDM-PON system transmitted over an 80 km transmission distance. The results show that the proposed scheme can improve the security performance of OFDM-PON at a low OSNR cost of 0.3 dB and the key space is expanded to (8.514 × 10102)S. When the correlation redundancy (CR) G⩾7, the 0 bit error rate (BER) of key can be achieved and the key can be updated and distributed in real-time without occupying additional secure channels.

A critical review of the state of computer security in the health sector

There is growing concern about IT security in the healthcare sector due to the number of cyberattacks. The objective of the review is to analyze the state of adoption of computer security in the healthcare sector and provide valuable knowledge to researchers and health organizations interested in this field of study. An exhaustive search of international and regional articles on computer security in healthcare organizations was conducted using Scopus, Dimensions, and pubMed databases. Preferred reporting items for systematic reviews and meta-analysis (PRISMA) statement was used for the selection of articles published between 2018 and 2022. The final number of articles considered is 50. The review explored approaches related to computer security types, mechanisms, and technologies. The findings reveal that blockchain is the most widely used technology to protect medical information. In addition, network, software, and hardware security approaches are employed, using mechanisms such as data encryption, authentication, and access control. Based on these findings, a perimeter security model for the protection of medical information is proposed. In conclusion, these results highlight the importance of adopting robust security measures in terms of networks, software, and hardware, as well as adopting blockchain technology to improve data security in the healthcare sector.

An efficient authentication protocol for smart grid communication based on on-chip-error-correcting physical unclonable function

Security has become a main concern for the smart grid to move from research and development to industry. Central to this security paradigm is the concept of resistance to threats, whether emanating from an active adversary seeking to disrupt operations or a passive entity covertly intercepting sensitive data. In this dynamic landscape, smart meters (SMs) stand as the sentinels at the edge of the grid, silently gathering and transmitting invaluable data. Yet, this very placement often leaves them vulnerable in unprotected areas, underscoring the paramount importance of physical security in the smart grid. It is here that Physical Unclonable Functions (PUFs) have emerged as a formidable ally. These unique constructs serve as guardians of physical security, leveraging the inherent unpredictability of manufacturing processes to create cryptographic keys. PUFs, however, are not without their own conundrums, primarily in the realm of reliability. This challenge has prevented their widespread integration into cryptographic applications. Fuzzy extractors have been considered as a solution to solve the reliability problem of PUFs, albeit at the cost of imposing significant computational burdens. To that end, we first propose an on-chip-error-correcting (OCEC) PUF that efficiently generates stable digits for the authentication process. Afterward, we introduce a lightweight authentication protocol between the SMs and neighborhood gateway (NG) based on the proposed PUF. The provable security analysis shows that not only the proposed protocol can stand secure in the Canetti–Krawczyk (CK) adversary model but also provides additional security features. Also, the performance evaluation demonstrates the significant improvement of the proposed scheme in comparison with the state-of-the-art.

Smart Contract-Based Access Control Framework for Internet of Things Devices

The Internet of Things (IoT) has recently attracted much interest from researchers due to its diverse IoT applications. However, IoT systems encounter additional security and privacy threats. Developing an efficient IoT system is challenging because of its sophisticated network topology. Effective access control is required to ensure user privacy in the Internet of Things. Traditional access control methods are inappropriate for IoT systems because most conventional access control approaches are designed for centralized systems. This paper proposes a decentralized access control framework based on smart contracts with three parts: initialization, an access control protocol, and an inspection. Smart contracts are used in the proposed framework to store access control policies safely on the blockchain. The framework also penalizes users for attempting unauthorized access to the IoT resources. The smart contract was developed using Remix and deployed on the Ropsten Ethereum testnet. We analyze the performance of the smart contract-based access policies based on the gas consumption of blockchain transactions. Further, we analyze the system’s security, usability, scalability, and interoperability performance.