Big Security Research Articles

Various audio Steganography techniques for audio signals

The rapid development of multimedia and internet allows for wide distribution of digital media data. It becomes much easier to edit, modify and duplicate digital information. Besides that, digital documents are also easy to copy and distribute, therefore it will be faced by many threats. It is a big security and privacy issue, it become necessary to find appropriate rotation because of the significance, accuracy and sensitivity of the information. Steganography and Cryptography are considered as one of the techniques which are used to protect the important information, but both techniques have their pro’s and con’s. In this paper we have proposed a novel approach to hide the data in audio signals based on LSB technique. Performance of the proposed system is evaluated on various parameters and is compared with the existing systems.

Hash tree based trustworthiness verification mechanism in virtual environment

The trustworthiness of virtual machines is a big security issue in cloud computing. In this paper, we aimed at designing a practical trustworthiness mechanism in virtual environment. With the assist of a third certificate agent, the cloud user generates a trust base and extends it to its VMs. For each service running on the VM, a hash value is generated from all the necessary modules, and these hash values are organized and maintained with a specially designed hash tree whose root is extended from the user's trust base. Before the VM loads a service, the hash tree is verified from the coordinated hash value to check the trustworthiness of the service.

Detect repackaged Android application based on HTTP traffic similarity

In recent years, more and more malicious authors aim to Android platform because of the rapid growth number of Android Google, Menlo Park, California, USA applications or apps. They embedded malicious code into Android apps to execute their special malicious behaviors, such as sending text messages to premium numbers, stealing privacy information, or even converting the infected phones into bots. We called the app, which has been embedded with malicious code, as embedded repackaged app. This phenomena leads a big security risk to the Android users and how to detect them becomes an urgent problem. Previous research efforts focus on extracting the app's characteristics for comparison from its static program code, which neither can handle the code obfuscation technologies, nor can analyze the app's dynamic behaviors feature. To address these limitations, we propose an approach based on extracting the app's characteristics from the HTTP traffic, which is generated by the app. Moreover, we have implemented a multi-thread comparison algorithm based on the balanced Vantage Point Tree VPT, which can remarkably reduce the experiment time. In this experiment, we successfully detected 266 embedded repackaged apps from 7619 Android apps downloaded from six popular Android markets, and the distribution rate of each market ranges from 2.57% to 6.07%. Then based on the analyzing of the HTTP traffic generated by these embedded codes, we found that majority of them are advertisement traffic and malicious traffic. Copyright © 2015 John Wiley & Sons, Ltd.

When the West is far away: Romanian attempts to withdraw from World War II (1943-1944), Finnish views

This article approaches the Romanian foreign policy stakes in the aftermath of the Stalingrad Battle as seen from the perspective of a comrade-in-arms country, Finland, which shared with Romania many of the assumptions, fears and anxieties with regard to the outcome of the war. The article is shaped in Stephen M. Walt’s understanding of balancing and bandwagoning, Romania and Finland choosing Germany over the Soviet Union mainly for the reason that the latter was perceived as the biggest security threat and the former as the only possible deterrent and support. The material focuses on the analysis of Eduard Hjalmar Palin’s diplomatic dispatches from Bucharest. On one hand, they were the main source of information for the Finnish decision-makers with regard to the Romanian international situation and its foreign and domestic policies. On other hand, Palin was an experienced diplomat, with excellent connections in the Romanian society and enjoyed access to confidential information in the governmental circles due to a Romanian-Finnish agreement of summer of 1941. We can see, for instances, cases when Ion and Mihai Antonescu confided to the Finnish envoy Führer Adolf Hitler’s statements which could affect the situation in Finland or help its leaders to take decisions. The article shows how divided Romanian governmental and opposition circles were, not only between but also among themselves. By reading these diplomatic reports, we could also acknowledge the widening split between the views of the two most prominent Romanian governmental leaders, Ion and Mihai Antonescu, thus complementing other sources of information already published. We can also learn about some peace plans of Romanian opposition groups, some of whom are little known from other documentary sources.

Application of Wireless Transmission Technology in the Detection of Capacitive Charged Device

The capacitive device is a important equipment in the power system. Its working state is usually monitored by charged detection. However, the traditional detection method needs a lot of cable wiring for each test, which makes a big security hidden danger. In order to solve the problem, a new wireless measurement method based on 2.4G wireless and Bluetooth technology is proposed in this paper, which not only achieves wireless synchronous measurement of current and voltage, but also meets the requirements of capacitive equipment charged detection.

Research on Information Security Issues Facing the Era of Big Data

Today's society, IT technology has rapid updates, data is growing at an alarming rate of accumulation, the era of big data had come. The intelligent terminals are the main source of data sensor data big data era. Big data to people's lives is brings a lot of convenience, to the enterprise is provide more business opportunities. On the other hand, big data increases the risk of leaks important information, information security technology at this stage cannot meet big data information security needs, how to provide information security protection, strengthen information security, construction-related law is also the attendant problems.

Simulation Research on Dynamic Security Model of Information System in Cloud Computing Environment

Cloud computing can dynamically allocate the software or hardware resource and information resource in accordance with the needs of different computer users, so as to expand the virtual resources of computer, but data information exists a big security risk in the process of data parallel calculation or the data sharing, so it needs to carry out the risk assessment on the security of signal. In cloud computing, this paper introduces the second-order difference quotient calculation principle in the model of information risk assessment that has accelerated the speed of information risk assessment, and adopts second order linear security authentication model that has strengthened the security of the cloud computing. In order to verify the validity and reliability of the model, this paper uses C program language to design the algorithm and inspects the cloud data with possible existing risk, and then it obtains the deviation curve of numerical calculation and theoretical value, which provides the technical reference for the research of cloud information security technology.

Reflections on Security at the 2012 Olympics

Securing the 2012 Olympic Games was the biggest security operation in the UK for nearly 70 years. It demanded levels of resources unparalleled in peacetime and involved the British Government much more deeply in strategy, planning and assurance for a domestic security operation than is usual. The UK's counter-terrorist strategy, CONTEST, provided the basic framework for the approach to Olympic security but steps were needed to mitigate all risks to the Games security. It was an exceptional level of inter-agency coordination and cooperation, rather than any new techniques, that lay behind the success of the security posture.

Applications of Lagrange-Quasi-Newton Method in Power System Steady-State Security Region

With the proportion of the installed capacity of wind farm in the grid increasing, the impact of wind farm on the power system security becomes obvious. The steady-state security analysis is one of the important measures to improve the power system security. Based on DC flow, considering the available transmission capability limit, the paper chooses the biggest security region volume as objective function with the upper and lower limits of security region multi-dimensional cuboid being as control variables, which transforms the maximum steady-state security region into nonlinear programming problem with linear constraints. This not only includes the biggest points for the safe operation, but also the order expansion problem doesn’t exist. Then Lagrange-Quasi-Newton is used to solve the equation, and the analysis of the example proves the feasibility of the proposed model and algorithm. Then we assume that wind speed distribution is weibull distribution, so we can assess the safe operation probability of wind power.

안전한 웹 애플리케이션 개발을 위한 취약점 분석 및 위협 완화

Recently, as modern Internet uses mashups, Web 3.0, JavaScript/AJAX widely, the rate at which new vulnerabilities are being discovered is increasing rapidly. It can subsequently introduce big security threats. In order to efficiently mitigate these web application vulnerabilities and security threats, it is needed to rank vulnerabilities based on severity and consider the severe vulnerabilities during a specific phase of software development lifecycle (SDLC) for web applications. In this paper, we have first verified whether the risk rating methodology of OWASP Top 10 vulnerabilities is a reasonable one or not by analyzing the vulnerability data of web applications in the US National Vulnerability Database (NVD). Then, by inspecting the vulnerability information of web applications based on OWASP Top-10 2010 list and CWE (Common Weakness Enumeration) directory, we have mapped the web-related entries of CWE onto the entries of OWASP Top-10 2010 and prioritized them. We have also presented which phase of SDLC is associated with each vulnerability entry. Using this approach, we can prevent or mitigate web application vulnerabilities and security threats efficiently.

Certificate Path Discovery by Constructing VirtualHierarchy to Administer Trust Relationship using Peer toPeer PKI in MANETs

Due to unreliable wireless media and lack of infrastructure in MANETs, providing certificate path is a big challenge and also faces a big security problem [1]. MANETs are dynamic Peer-to-Peer PKIs and certification path can be built in case any part of the infrastructure that is temporarily not reachable. Hence efficient path discovery is very important. Path discovery is difficult since trust relationship is bidirectional. Certification paths are easy to find in case of hierarchical PKI since there is only one path among two entities. To obtain resilience and efficient path discovery among Peer- to –Peer trusted PKI’ s for issuing entities we use a tool to address these problems by overlying a virtual hierarchical architecture. Since it is executed for short time in a dynamic atmosphere this is suitable in case of MANETs. Proposed technique to establish a virtual hierarchy in a Peerto- Peer PKI, based on the trustworthiness of the participating neighbors. The upward approach is used to build the hierarchical structure i.e. from the leaves to the root. The main importance is given for the multi-rooted approach in case of building a hierarchy, depending upon the possibility. In addition the protocol does not require to issue new certificates among PKI entities, facilitates the certification path discovery process and the maximum path length can be adapted to the characteristics of the users with limited processing and Storage capacity.

Building Trust In Cloud Using Public Key Infrastructure - A step towards cloud trust

Cloud services have grown very quickly over the past couple of years, giving consumers and companies the chance to put services, resources and infrastructures in the hands of a provider. There are big security concerns when using cloud services. With the emergence of cloud computing, Public Key Infrastructure (PKI) technology has undergone a renaissance, enabling computer to computer communications. This study describes use of PKI in cloud computing and provides insights into some of the challenges which cloud-based PKI systems face.

The changing privacy landscape in the era of big data

Mol Syst Biol. 8: 612 Thirty years ago, it was relatively easy to protect one's privacy and remain anonymous. Few computerized systems existed to store our personal information, the internet was so primitive that most were not even aware it existed, and only a few thousand individuals were privileged enough to own a handheld cellular phone. Fast forward to our current day and life—everything has changed. Rapid electronic transactions among individuals and between individuals and entire communities occur on an unprecedented scale, our life stream is continuously digitized and archived—GPS positioning information, cell phone calls, text messages, credit card purchases, e‐mails, online social network chatter and even our electronic medical records (Figure 1). In fact, today the marketing department of your neighborhood Target can know before you that your own daughter is pregnant, given changes in purchase patterns (Duhigg, 2012). Long gone are the days of anonymity and privacy. Figure 1. Big data are all around us, enabled by technological advances in micro‐ and nano‐electronics, nano materials, interconnectivity provided by sophisticated telecommunication infrastructure, massive network‐attached storage capabilities, and commodity‐based high‐performance computing infrastructures. The ability to store all credit card transactions, all cell phone traffic, all e‐mail traffic, video and images from extensive networks of surveillance devices, satellite and ground sensing data informing on all aspects of the weather and overall climate, and now to generate and store massive data informing on our personal health including whole genome sequencing data and extensive imaging data, is driving a revolution in high‐end data analytics to make sense of the big data, drive more accurate descriptive and predictive models that inform decision making on every level, whether identifying the next big security threat or making the best diagnosis and treatment choice for a given patient. The life and biomedical sciences have not been shielded from—and …

A Secure Authentication Protocol for Cloud Services

The request about green IT technology is increasing recently. And effective use request of computer resource is increasing. So, necessity about Cloud computing is increasing rapidly thereby. However, Cloud computing environment<br/> have big security problems because embody using virtualization technology. It is Authentication that must solve in Cloud computing environment urgently. Therefore, we wishes to propose protocol that can solve suitable user and services<br/> certification in cloud computing environment. An novel authentication protocol that based on Kerberos. But it is faster than Kerberos and implement is easy.

Improving on Assembly of SCWR Using MOX Fuel

A calculation is made for certain Supercritical Water Cooled Reactor (SCWR) using UO2 fuel and MOX fuel respectively. The results indicate that MOX fuel has a simple power distribution with UO2 fuel, but there is a larger power uneven factor when using MOX fuel, and using MOX fuel including weapon grade Pu has larger power uneven factor than using MOX fuel including reactor grade Pu. However, in the case of same power distribution, the fuel rod using MOX fuel has a higher temperature than the one using UO2 fuel. Therefore with the more uneven power distribution, the fuel in SCWR using MOX fuel has a higher temperature. This will result in a big security issue when using MOX fuel in original design of SCWR. Through analyzing the result of power distribution, an improved assembly of SCWR is presented. It can reduce the power uneven factor and increase the security of fuel rod using the improved assembly of SCWR.

Detection and Identification of Leakage Signal in the Explosive Gas Atmosphere

Leakage is one of big security risks in the explosive gas atmosphere. In view of the weak current and detection difficulty of leakage signal, a novel method of leakage detection is proposed. According to leakage transient characteristics, this method takes zero-sequence voltage as the fault threshold value triggering measurement device. Auto-correlation function is used to analyze leakage signal energy and cross-correlation function is used to calculated leakage signal phase relationship in order to identify leakage line further. Theoretical analysis and simulation show that the proposed method can greatly improve the sensitivity of weak leakage signal detection.

Travel, borders and immigration

Biometric identification is the key for travel documents, border control and immigration management. This article, by Silicon Trust member Dr Detlef Houdeau, gives a silicon provider's overview of the technology, current standardisation work and applications. It also reflects on the big security and data protection issues in the market and examines new trends.

A secure media streaming mechanism combining encryption, authentication, and transcoding

Technology advancements are allowing more and more new media applications and services to be delivered over the Internet. Many of these applications and services require flexibility in media distribution as well as security in protecting the confidentiality of media content and ensuring its authenticity. However, achieving flexibility and achieving security are conventionally conflicting with each other. This is mainly because that security is traditionally implemented in a media-unaware manner that naturally prevents flexible handling of the media content during its distribution. This paper shows that the two goals can be simultaneously accomplished by making an overall plan and taking into consideration all the factors: coding, encryption, packetization, authentication, and transcoding. It emphasizes sender authentication, which is a big security issue for media streaming, but somehow left unresolved. We propose a secure media streaming mechanism which supports media-aware encryption, sender authentication and secure transcoding. Multimedia Application Routing Server (MARS) is especially used as an intelligent mid-network proxy with the ability to perform tasks of sender authentication and secure transcoding. A prototype system for securely streaming AVS media using MARS demonstrates the performance, thus proves the practicality of the proposed secure media streaming mechanism.

The enemy within

Today's biggest security menace is IT itself. There are particular problems with privileged passwords.

LOS SERVICIOS WEB EN ORGANIZACIONES ACADÉMICAS

The Pattern of Services Web in organizations colaborations had generated a great interest in the electronic business, because they allow the integration of their applications independently of the technology on which you/they are supported. The organizations can share this way for example not alone their existent applications but also their processes of business, integrating it directly with their partners of business or in their defect publishing them as a service. (1) The case proposed in this article consists on applying the Pattern to a case consistent service in generating bigger value in the organization UNMSM integrating with the systems of human resources of organisms public and private qualified professional personnel’s; this way the organizations would have bigger security in capturing human resources through the service, becoming the letter of presentation of the same institution that he/she prepares them; practically it is a mutual commitment, seeking this way to offer bigger quality of service to their users in this case the conclude and being placed the UNMSM like a supplier of qualified personnel’s services.