Security Applications Research Articles

Analysis of Personal Privacy Leakage under the Background of Digital Twin

With the development and application of digital twin technology, the problem of privacy leakage is becoming increasingly prominent. Privacy leakage issues caused by data abuse and weak awareness have attracted high attention. In this regard, this paper analyzes the causes of privacy leakage in the digital twin, analyzes the difficulties of privacy protection under the background of the digital twin, and puts forward the “legal co-governance model.” Through multi-party cooperation, improving the system, and improving literacy, people can effectively protect private information, ensure the security application of technology, law, and ethics, and provide a guarantee for the sustainable development and social application of digital twin technology.

Temporal-Incremental Learning for Android Malware Detection

Malware classification is a specific and refined task within the broader malware detection problem. Effective classification aids in understanding attack techniques and developing robust defenses, ensuring application security and timely mitigation of software vulnerabilities. The dynamic nature of malware demands adaptive classification techniques that can handle the continuous emergence of new families. Traditionally, this is done by retraining models on all historical samples, which requires significant resources in terms of time and storage. An alternative approach is Class-Incremental Learning (CIL), which focuses on progressively learning new classes (malware families) while preserving knowledge from previous training steps. However, CIL assumes that each class appears only once in training and is not revisited, an assumption that does not hold for malware families, which often persist across multiple time intervals. This leads to shifts in the data distribution for the same family over time, a challenge that is not addressed by traditional CIL methods. We formulate this problem as Temporal-Incremental Malware Learning (TIML), which adapts to these shifts and effectively classifies new variants. To support this, we organize the MalNet dataset, consisting of over a million entries of Android malware data collected over a decade, in chronological order. We first adapt state-of-the-art CIL approaches to meet TIML's requirements, serving as baseline methods. Then, we propose a novel multimodal TIML approach that leverages multiple malware modalities for improved performance. Extensive evaluations show that our TIML approaches outperform traditional CIL methods and demonstrate the feasibility of periodically updating malware classifiers at a low cost. This process is efficient and requires minimal storage and computational resources, with only a slight dip in performance compared to full retraining with historical data.

Development of Mathematical Algorithm for Detecting XSS Attacks on Web Applications

The widespread usage of web applications has led to an increase in security threats, with Cross-Site Scripting (XSS) attacks being one of the most prevalent and damaging. Detecting and mitigating XSS attacks is crucial to ensure the integrity and confidentiality of sensitive user data. This article presents the mathematical algorithm and a way to identify XSS attacks using a bounded function from below, which depends on the input string, and highlights its potential impact in bolstering web application security. To construct this function, we used special characters and keywords that are frequently found in the construction of XSS attacks.

Watch Out for the Inherent Vulnerabilities in Developing Multi-tenant Cloud-FPGA: Communication Protocols

As FPGAs are being deployed in the cloud infrastructure for acceleration, the technology of multi-tenant FPGA has emerged as a topic of interest. This development has drawn considerable attention to its security issues. While previous research primarily focused on the security of applications, there has been limited exploration of the vulnerabilities inherent in FPGA IPs. In our work, we examine the vulnerabilities of two widely used data transmission protocols in modern FPGAs: the Advanced eXtensible Interface (AXI) and Peripheral Component Interconnect Express (PCIe). Our experiments, conducted with commercial FPGA development kits, launched fault injection attacks through the shared power distribution network (PDN). Through non-invasive electromagnetic (EM) trace measurement, we characterize the voltage fluctuation across various attack patterns. Subsequently, we simulate real-world data transfers using two crafted datasets with different statistical characteristics. The experimental results demonstrate the unique security vulnerabilities of the current AXI and PCIe protocols in the context of a multi-tenant cloud-FPGA. In response to such vulnerability, we further propose two defense strategies: InChAXI that utilizes integrity checking for AXI-based data, and FCPCIe that employs frequency scaling for PCIe-based data. The performance evaluation demonstrates that our proposed defenses can significantly reduce the fault injections on the AXI-based data transmission by 705 times with small overheads – 0.5% in hardware footprint and 7.9% in latency, respectively. On the other hand, FCPCIe effectively prevents the fault injection attack during the PCIe-based data transmission by reducing the user clock frequency, while incurring a 10.13% overhead on data throughput.

Influence of carbon dots as modifier and SiO2 shell coating as a protecting layer in YAlO3:Cr3+ phosphors for multimodal applications

This study focuses on the synthesis of SiO2-coated carbon dots (CDs) grafted onto YAlO3:Cr3+ (YAP:Cr3+) nanophosphors (NPs) through a combustion method. The CDs enhance the absorption cross-section of Cr3+ ions, significantly boosting the luminescence of YAP:Cr3+ by 19.29-fold. Further improvement is achieved with a SiO2 coating, leading to a 48.73-fold increase in photoluminescence intensity. The NCs are colour tunable, with emissions ranging from pinkish-red to blue, depending on the concentration of CDs and the excitation wavelength. These properties make them suitable for diverse applications, such as ratio metric fluorescence sensors for detecting Fe3+ ions within the 0–350 µM range, with high sensitivity (0.2 µM) and a low detection limit (4.93 μM). Additionally, they serve as material for white light-emitting diodes (W-LEDs), achieving CIE coordinates of (0.31, 0.30) and a rendering index of 94. The NCs also function as an optical thermometer with a sensitivity of 0.31 % K−1 at 320 K, making them ideal for temperature sensing applications. Moreover, their stability and dual-emissive nature make them highly effective in latent fingerprints (LFPs) detection, enabling high-resolution, level III fingerprint analysis. The dual emission properties of CDs and Cr3+ ions position these NCs as multifunctional materials, suitable for optical sensing, lighting, and security applications.

Enhancing the SRAM PUF with an XOR Gate

This study focuses on designing enhanced Physically Unclonable Functions (PUFs) based on SRAM devices and improving the security of cryptographic systems. Most SRAM PUFs are limited in their number of CRPs, which makes them vulnerable to enrollment attacks. In this research, we present an SRAM-based PUF design that greatly increases the number of CRPs and the entropy of the generated bits by performing exclusive-or (XOR) on the responses of two SRAM devices. This was implemented using a readily available development board, SRAM devices, and a user-friendly custom circuit board for cryptographic key generation. The cryptographic protocol was implemented using both C++ and python3. The proposed SRAM PUF design was experimentally demonstrated and showed substantial improvements in the security of various cryptographic applications as a hardware authentication device. It also addresses the specific vulnerabilities of legacy designs.

Three-Level Chirality Transfer and Amplification in Liquid Crystal Supramolecular Assembly for Achieving Full-Color and White Circularly Polarized Luminescence.

Chiral liquid crystal supramolecular assembly provides an ideal strategy for constructing excellent circularly polarized luminescence (CPL) materials. However, the chirality transfer in chiral liquid crystals normally occurs at two levels from the configurational chirality to the supramolecular phase chirality. The more precise and more levels of chirality transmission are fascinating but remain challenging. The present work reports the first success of three-level chirality transfer and amplification from configurationally point chirality of small molecules to conformationally helical chirality of helical polymers and finally to supramolecular phase chirality of cholesteric liquid crystals composed of chiral nonfluorescent polymers (P46) and nematic liquid crystals. Noticeably, the helical twisting power of P46 is five-fold larger than its monomer. Full-color and white CPL with maximum luminescence dissymmetry factor up to 1.54 and photoluminescence quantum yield up to 63.8% are realized utilizing helical supramolecular assembly combined with selective reflection mechanism. Also significantly, the electrically stimuli-responsive CPL switching device as well as anti-counterfeiting security, information encryption, and chiral logic gate applications are developed. This study deepens the understanding of chirality transfer and amplification across different hierarchical levels.

Can green trade development promote energy security in China? The role of financial development

Energy security is an essential component of overall national security. This paper investigates the impact of green trade (GRTR) on China's energy security and financial development's role in this nexus. The energy security evaluation index in this study is constructed from availability, applicability, acceptability, and affordability (the 4-As) and calculated by employing the Improved Entropy Method (IEM). Based on the two-step robust system-generalized method of moments (SYS-GMM) and data from China's 30 provinces between 2004-2020, this article investigates the impact of GRTR on energy security, the moderating effect of financial development and the impact mechanism of renewable energy development on the GRTR-energy security nexus. Our econometric analysis results indicate that increased GRTR can notably enhance energy security, and financial development can strengthen the positive impact of GRTR on energy security. The advancement of GRTR contributes positively to enhanced energy availability, acceptability, and affordability, but it could potentially decrease progress in the applicability of energy security; the promoting effect of GRTR on energy security in low-GRTR areas will be limited. The results of the mediating mechanism indicate that GRTR can accelerate energy security growth through renewable energy development. These insights provide policy implications for combining GRTR incentives to promote energy security.

Elliptic curve cryptography: Theory, security, and applications in modern network security

Abstract. Due to the swift advancement of Internet and computer technology in the 21st century, the demand for network security is increasing. Classic cryptographic algorithms like Rivest-Shamir-Adleman (RSA) and Digital Signature Algorithm (DSA) are insufficient in the face of modern network environments, while elliptic curve cryptography (ECC) has become a research hotspot due to its high security and high efficiency. The purpose of this paper is to discuss the theoretical basis, security analysis, and practical application cases of elliptic curve cryptography, to provide readers with a comprehensive understanding and trigger further research and thinking. This paper analyzes the theoretical basis of ECC, including group theory, domain theory, and the definition and properties of elliptic curves, and analyzes the application of ECC in combination with practical application cases, such as the SM2 algorithm. The article first introduces the concept of groups, the definition of domains, and the basic properties of elliptic curves. Then, the security of ECC is analyzed, especially the complexity of the Elliptic Curve Discrete Logarithm Problem (ECDLP) and the selection of key length. In addition, the security of ECC in practical applications is discussed, including digital signatures, key exchange protocols, and applications in blockchain technology. The results show that ECC provides comparable security to traditional public key algorithms at a short key length, and shows strong security and efficiency in practical applications. As technology progresses and new threats arise, research in ECC will also evolve.

Laser-engraved holograms as entropy source for random number generators

Our study introduces a novel approach to true random number generation (TRNG) using speckle patterns generated by laser-engraved holograms on carbon fiber-reinforced polymer (CFRP) composite substrates. Unlike previous methods, our approach simplifies the process by generating the necessary image dataset from a single microscope image of the engraved hologram. We achieve a high extraction ratio of 76 %, demonstrating the effectiveness of our TRNG. Moreover, our method successfully passes rigorous statistical tests proposed by the National Institute of Standards and Technology (NIST), indicating its suitability for cryptographic and secure system applications. This work offers promising implications for enhancing security in various domains, from secure communication networks to IoT devices.

XSShield: A Novel Dataset and Lightweight Hybrid Deep Learning Model for XSS Attack Detection

With the proliferation of web applications, cross-site scripting (XSS) attacks have increased significantly and now pose a significant threat to users' information security and privacy. To enhance the efficiency of XSS attack detection, the adoption of machine learning (ML) and deep learning (DL) techniques offers promising solutions, but their effectiveness is limited by the lack of comprehensive and diverse datasets. Moreover, existing approaches often prioritize detection accuracy over real-time processing capabilities, which are essential for effective defense. To address these challenges, in this paper, we propose a novel framework that automatically collects web resources, efficiently extracts informative features, and constructs an up-to-date XSS attack dataset, which is then used to train a machine learning-based XSS detection model. Using this framework, we created and published a well-structured dataset over 100,000 samples for the research community. Furthermore, we present a hybrid detection model that leverages the strengths of both Convolutional Neural Networks (CNNs) and Long Short-Term Memory (LSTM) networks. Extensive evaluations of our dataset demonstrate that the proposed model outperforms other baseline ML models across various metrics, including processing rate. Notably, our model achieves an accuracy of 99.27% while maintaining a low false positive rate of 0.06% and high processing rate of exceeding 1000 samples per second. These results highlight its high accuracy and robustness in detecting XSS, and suitability for real-time applications. Our work presents a comprehensive solution for enhancing web application security by providing a diverse dataset and a high-accuracy detection model with low latency.

Multimodal biometric identification: leveraging convolutional neural network (CNN) architectures and fusion techniques with fingerprint and finger vein data

Advancements in multimodal biometrics, which integrate multiple biometric traits, promise to enhance the accuracy and robustness of identification systems. This study focuses on improving multimodal biometric identification by using fingerprint and finger vein images as the primary traits. We utilized the “NUPT-FPV” dataset, which contains a substantial number of finger vein and fingerprint images, which significantly aided our research. Convolutional neural networks (CNNs), renowned for their efficacy in computer vision tasks, are used in our model to extract distinct discriminative features. Specifically, we incorporate three popular CNN architectures: ResNet, VGGNet, and DenseNet. We explore three fusion strategies used in security applications: early fusion, late fusion, and score-level fusion. Early fusion integrates raw images at the input layer of a single CNN, combining information at the initial stages. Late fusion, in contrast, merges features after individual learning from each CNN model. Score-level fusion employs weighted aggregation to combine scores from each modality, leveraging the complementary information they provide. We also use contrast limited adaptive histogram equalization (CLAHE) to enhance fingerprint contrast and vein pattern features, improving feature visibility and extraction. Our evaluation metrics include accuracy, equal error rate (EER), and ROC curves. The fusion of CNN architectures and enhancement methods shows promising performance in identifying multimodal biometrics, aiming to increase identification accuracy. The proposed model offers a reliable authentication system using multiple biometrics to verify identity.

Bipolar Complex Fuzzy Rough Sets and Their Applications in Multicriteria Decision Making

Bipolar complex fuzzy set (BCFS) is a more advanced and powerful phenomenon as it consists of two-dimensional data with positive and negative impacts of an element. It can solve the data consisting of the positive and negative impacts of an element which is a bipolar fuzzy set (BFS). It also covers the two-dimensional complex data which is a complex fuzzy set (CFS). Due to these attributes, BFS and CFS are less useful in comparison with BCFS to capture vagueness, complexity, and ambiguity in the data. Furthermore, lower and upper approximations based on equivalency relations constitute another significant phenomenon known as rough set (RS). This structure is also more powerful in dealing with real-life dilemmas. Rather than comparing the RS and BCFS, we combine both phenomena to handle the complexity more powerfully to deal with such types of phenomena that are not handled by other structures. So, by combining both phenomena, we introduce a novel structure known to be bipolar complex fuzzy rough set (BCFRS) in this manuscript. After that, we define some important operations, some significant properties related to this structure, and some aggregation operators (AOs) to solve decision-making (DM) problems related to cyber security. We address a practical application of cyber security (C-S) in computing for the protection of critical data to demonstrate the usefulness of the multi-attribute DM(MADM) approach. Based on the various criteria and attributes given by the experts, we find the best and better alternative to the C-S by applying the MADM approach. We get the A4 as the best and finest alternative by using bipolar complex fuzzy rough (BCFR) weighted arithmetic averaging (BCFRWAA), BCFR ordered weighted arithmetic averaging (BCFROWAA), and BCFR ordered weighted geometric averaging (BCFROWGA) operators. And, by using BCFR weighted geometric averaging (BCFRWGA), we get the A3 as the finest alternative. Lastly, to prove the superiority, validity, and generalization of our unique established theory, we give a detailed comparative study of our established work with several prevalent theories.

A secure and privacy preserving model for healthcare applications based on blockchain-layered architecture

Blockchain is one of the emerging technologies that are applied in various fields and its application in Healthcare 4.0 is crucial to handle the vast amount of health records that are growing continuously everyday. This paper explores the application of blockchain technology-based layered architecture integrated with Interplanetary File System (IPFS) storage to provide a secure and robust sharing platform for healthcare system. A multilayer security is provided in the proposed system including a 128-bit Random Deoxyribonucleic Acid (DNA) encoding sequence with a modified version of the 128-bit Advanced Encryption Standard (AES) key expansion symmetric key technique is being used before storing the records in the IPFS storage, Rivest–Shamir–Adleman (RSA) 2048 digital envelope is used for secure transmission of symmetric keys, RSA 1024 is used for digital signature, and Secure Hash Algorithm 256-bit (SHA-256) is used for hashing the record files. Comparative analysis with existing state-of-the-art in blockchain-based E-healthcare system is discussed. The performance of various assessment metrics is evaluated, including encryption and decryption time for EHR records, mining time, record retrieval time, smart contract execution time and network latency. Additionally, a reputation-based filtering mechanism specifically designed in the proposed model to detect and mitigate the various attacks.

FINANCIAL PROVISION OF MARKETING ACTIVITIES OF MACHINE-BUILDING ENTERPRISES FOR STRENGTHENING COMPETITIVENESS IN THE CONTEXT OF A NEW REALITY

The purpose of this article is to develop a methodological approach to evaluating all possible options for the financial provision of the marketing activities of modern machine-building enterprises under conditions of full-scale war. Thus, the new conditions of reality are characteristic specifically of Ukrainian machine-building enterprises, which become the key object of the study. As a result, within this article, the optimal forms of financial provision, both external and internal, were chosen based on evaluation results, which will allow not only to "survive" in the current conditions for Ukrainian machine-building enterprises but also to strengthen their competitiveness in the face of new challenges and threats. The identification of the most optimal forms of financial provision and the conduct of evaluations were made possible through the implementation of expert analysis, using the Delphi method. The central place in the methodology of the article is occupied by the method of hierarchical multicriteria evaluation. Its thorough substantiation has better reflected the main results of the research. The developed methodological approach is distinguished by its convenience and practical value in the conditions of the new reality, that is wartime. Another feature is the consideration of not only internal resources but also external ones. Ultimately, the proper and secure application of the defined forms of internal and external financial provision of marketing activities to change their own competitiveness was also substantiated. This, in turn, allowed forming the correct trajectory for how to evaluate one’s own financial provision options for marketing activities and how to apply them to enhance one’s competitiveness. The practical significance of the obtained results lies in substantiating recommendations for establishing the optimal form of financial provision of marketing activities for machine-building enterprises.

The role of APIs in modern software development

Application Programming Interfaces (APIs) play a critical role in modern software development, enabling seamless communication between disparate systems and enhancing the scalability, modularity, and security of applications. This research investigates the impact of APIs on software architecture, focusing on their use in facilitating interoperability across distributed environments. Using a mixed-methods approach, the study combines a literature review, a survey of 50 software developers, and case studies from industry leaders such as Amazon Web Services (AWS), Google, and Facebook. The findings reveal that REST APIs are the most widely used (75%), while GraphQL is gaining popularity for its ability to optimize data retrieval in complex systems. Security challenges, particularly vulnerabilities in REST APIs, were highlighted by 35% of developers, underscoring the need for stronger authentication and encryption methods like OAuth. This study also explores how APIs foster innovation by enabling third-party integrations, driving ecosystem growth in cloud computing and other sectors. The research concludes that while APIs are vital for the future of software development, addressing security risks and improving API management practices will be essential for maximizing their benefits in emerging technologies such as IoT and AI.

Emerging New-Generation Semiconductor Single Crystals of Metal Halide Perovskites for Radiation Detection

Radiation detection uses semiconductor materials to convert high-energy photons into charge (direct detection) or low-energy photons (indirect detection), and it has a wide range of applications in nuclear physics, medical imaging, astronomical detection, homeland security, and other fields. Metal halide perovskites have the advantages of high frequency number, high carrier mobility, high defect tolerance, low defect density, adjustable band gap, and fast light response, and they have wide application prospects in the field of radiation detection. However, the research is still in its infancy stage, and it is far from meeting the requirements of industrial application. This paper focuses on the advantages of metal halide perovskite single-crystal materials in both semiconductors-based direct conversion detection and scintillator-based indirect detection as well as the latest progress in this promising field. This paper not only introduces the latest application of lead halide perovskite monocrystalline materials in high-energy electromagnetic radiation detection (X-ray and γ-rays), but it also introduces the latest development of α-particle/β-particle/neutron detection. Finally, this paper points out the challenges and future prospects of metal halide perovskite single-crystal materials in radiation detection.

Establishment of Theoretically Guided Understanding for Magneto‐Optical Interactions through Ferromagnetic Fluids in Uniform, Static Magnetic Field

Prior magneto‐optical transmission models through ferrofluids are limited by oversimplifications which hinder accuracy and generalizability. To overcome this challenge, this study models the magnetic field effect on the magneto‐optical transmission through hematite ferrofluid using the method of invariant embedding. Optical coherence tomography (OCT) is used to extract the changes in the refractive index, enabling a discovery of a magnetodielectric effect for the hematite ferrofluid. To establish a basis for control and understanding, the influence of the magnetic field on the spatial transmission profile at different wavelengths, optical propagation lengths, and the effect of variation of each size parameter on the optical transmission have been investigated. Further parametric studies allowed finding out an analogy to nonuniform, cascade, volume holographic diffraction gratings, which is crucial for a wide range of optical and bioimaging applications. Compared to the experimental results, the presented model achieves 99% accuracy over the wavelength range (300–1100) nm under uniform static magnetic field (0–6.5) mT. Besides, the conspicuous lead of evidentiary understanding of magneto‐optical interactions with magnetic fluids, the structural milestones of the model can be further utilized to model similar challenging constructs in complex media. The innumerable applications of study extend to involve communication engineering, biomedical, optical, and security applications.

Biosensing technology for detection and assessment of pathogenic microorganisms.

At present, the prevalence of infectious diseases is rising annually, making it an important risk factor for human health that should not be neglected. Consequently, infection control and prevention have become even more important. The key to determining and designing the most effective anti-infectious medication depends upon the immediate and accurate identification of the causative agent. The standard techniques used for routine infection screening and surveillance tests are shifting toward biosensors. Furthermore, biosensors are projected to be employed for microbiological detection to satisfy the higher accuracy required for clinical diagnosis. This is because of their compact size, real-time monitoring and ability to analyze large sample numbers with less sophistication and manpower requirement, which have allowed them to develop quickly with extensive uses. Biosensors have multiple applications in food safety, environmental surveillance, drug sensing and national security because they offer several advantages such as quick response, outstanding sensitivity, remarkable selectivity, high degree of accuracy and precision, ease of use and affordable price. This review highlights the performance aspects of recently developed biosensors for the detection of infectious bacteria and viruses in biological and environmental samples and emphasizes the significance of nanotechnology in signal amplification for enhanced biosensor performance and dependability.

Enhanced Data Security Using 5x5 Hill Cipher with Modular 53

This research presents an optimized approach to the Hill Cipher encryption and decryption algorithm using a 5x5 matrix and modular 53 arithmetic. The traditional Hill Cipher, a well-known symmetric key algorithm, typically utilizes smaller matrices and modular arithmetic, which may not provide sufficient security for contemporary applications. By expanding the key matrix to a 5x5 structure and adopting a larger modulus of 53, the complexity and security of the cipher are significantly enhanced. The study details the methodology for constructing and implementing the 5x5 key matrix, as well as the processes for encryption and decryption under the modular 53 system. The computational efficiency and security improvements achieved through this optimization are analyzed. Comparative assessments with the conventional Hill Cipher demonstrate that the enhanced approach offers superior resistance against cryptographic attacks while maintaining manageable computational requirements. The results of this research indicate that the proposed optimized Hill Cipher can serve as a robust encryption method suitable for securing sensitive data in various modern applications. This study contributes to the field of cryptography by providing a more secure and efficient variant of the classical Hill Cipher algorithm