Secure Communication Research Articles

Provably Quantum Secure Three-Party Mutual Authentication and Key Exchange Protocol Based on Modular Learning with Error

With the rapid development of quantum computers, post-quantum cryptography (PQC) has become critical technology in the security field. PQC includes cryptographic techniques that are secure against quantum-computer-based attacks, utilizing methods such as code-based, isogeny-based, and lattice-based approaches. Among these, lattice-based cryptography is the most extensively studied due to its ease of implementation and efficiency. As quantum computing advances, the need for secure communication protocols that can withstand quantum computer-based threats becomes increasingly important. Traditional two-party AKE protocols have a significant limitation: the security of the entire system can be compromised if either of the communicating parties behaves maliciously. To overcome this limitation, researchers have proposed three-party AKE protocols, where a third party acts as an arbiter or verifier. However, we found that a recently proposed three-party AKE protocol is vulnerable to quantum-computer-based attacks. To address this issue, we propose a provably quantum secure three-party AKE protocol based on MLWE. The proposed scheme leverages the user’s biometric information and the server’s master key to prevent the exposure of critical parameters. We analyzed the security of the protocol using simulation tools such as the Burrows–Abadi–Needham (BAN) logic, Real-or-Random (RoR) model, and Automated Validation of Internet Security Protocols and Applications (AVISPA). Furthermore, comparative analysis with similar protocols demonstrates that our protocol is efficient and suitable.

When spies go public! Lessons learnt from the instrumentalization of intelligence for strategic communication in the run-up to the Russian-Ukrainian war

ABSTRACT Timely warning to policy-makers and the general public about the planned Russian invasion of Ukraine is hailed as an intelligence and strategic communication success. It has resulted in increased confidence in US and UK intelligence services and in revigorated involvement in strategic communication in security and defence. Decision-makers at all levels seem to have understood that employing intelligence in strategic communication in a timely and transparent manner can lead to enhanced public understanding of ongoing security challenges and support for measures that could affect their own well-being, as well as to restore confidence in government actions. The current research analyzes how intelligence was integrated into the strategic communications of the US, UK, NATO and the EU in the months preceding the Russian invasion in Ukraine. The objective of the research is to draw lessons learned during this period to better understand how, to what extent and in what circumstances traditionally classified intelligence products can be integrated in decision-makers’ strategic communication and what limitations need to be imposed.

AI-optimized elliptic curve with Certificate-Less Digital Signature for zero trust maritime security

The proliferation of sensory applications has led to the development of the Internet of Things (IoT), which extends connectivity beyond traditional computing platforms and connects all kinds of everyday objects. Marine Ad Hoc Networks are expected to be an essential part of this connected world, forming the Internet of Marine Things (IoMaT). However, marine IoT systems are often highly distributed, and spread across large sparse areas which makes it challenging to implement and manage centralized security measures. Despite some ongoing efforts to establish network connectivity in such environment, securing these networks remains an unreached goal. The use of Certificate-Less Digital Signatures (CLDS) with Elliptic Curve Cryptography (ECC) shows great promise in providing secure communication in these networks and achieving zero trust IoMaT security. By eliminating the need for certificates and associated key management infrastructure, CLDS simplifies the key management process. ECC also enables secure communication with smaller key sizes and faster processing times, which is crucial for resource-limited IoMaT devices. In this paper, we introduce CLDS using ECC as a means of securing IoT networks in a marine environment, creating a zero trust security framework for Internet of Marine Things (IoMaT). To increase security and robustness of the framework, we optimize the ECC parameters using two vital artificial intelligence algorithms, namely Genetic Algorithm (GA) and Particle Swarm Optimization (PSO). Evaluation results demonstrate a reduction in ECC parameter generation time by over 40% with GA optimization and 20% with PSO optimization. Additionally, the computational cost and memory usage for major ECC attacks increased significantly by up to 40% and 67% for Rho attacks, 34% and 53% for brute-force attacks, and 30% and 67% for improved hybrid attacks, respectively.

Secrecy Rate Bounds in Spatial Modulation-Based Visible Light Communications under Signal-Dependent Noise Conditions

This study examines the physical-layer security of an indoor visible light communication (VLC) system using spatial modulation (SM), which consists of several transmitters, an authorized receiver, and a passive adversary. The SM technique is applied at the transmitters so that only one transmitter is operational at any given time. A uniform selection (US) strategy is employed to choose the active transmitter. The two scenarios under examination encompass the conditions of non-negativity and average optical intensity, as well as the conditions of non-negativity, average optical intensity, and peak optical intensity. The secrecy rate is then obtained for these two scenarios while accounting for both signal-independent noise and signal-dependent noise. Additionally, the high signal-to-noise ratio (SNR) asymptotic behavior of the derived secrecy rate constraints is investigated. A channel-adaptive selection (CAS) strategy and a greedy selection (GS) scheme are utilized to select the active transmitter, aiming to enhance the secrecy performance. The current numerical findings affirm a pronounced convergence between the lower and upper bounds characterizing the secrecy rate. Notably, marginal asymptotic differentials in performance emerge at elevated SNRs. Furthermore, the GS system outperforms the CAS scheme and the US method, in that order. Additionally, the impact of friendly optical jamming on the secrecy rate is investigated. The results show that optical jamming significantly enhances the secrecy rate, particularly at higher power levels.

Quantum pairwise-parallel mismatch attack on Kyber

Abstract Quantum algorithm uses the quantum parallel method to calculate, which can better solve the encryption and decryption problems in cryptography and secure communication. This paper proposes a quantum pairwise-parallel mismatch attack on Kyber using the quantum binary search method. We first give quantum search methods for finding the secret key and show that our method can be applied to Kyber. Then, According to the proposed quantum search method, we compute the number of queries required and computational complexity for recovering the full key on Kyber. Compared with the existing results, our improved attack significantly reduces the number of queries and computational complexity.

Stealthy Messaging: Leveraging Message Queuing Telemetry Transport for Covert Communication Channels

Covert channel methods are techniques for improving privacy and security in network communications. These methods consist of embedding secret data within normal network channels, making it more difficult for unauthorized parties to detect such data. This paper presents a new approach for creating covert channels using the Message Queuing Telemetry Transport (MQTT) protocol, widely used in the context of the Internet of Things (IoT). The proposed method exploits storage channels by altering the field length of MQTT messages. Our solution leverages well-known one-way mathematical functions to ensure that data remain hidden from third parties observing the MQTT stream. In this way, we ensure that not only the content of the communication is preserved but also that the communication itself takes place. We conducted a security analysis to show that our solution offers the above-mentioned property even against severe threats, such as an adversary being able to observe all the messages exchanged in the network (even in the clear). Finally, we conducted an overhead analysis of our solution both in terms of the time required to perform the required operations and of the bytes to send. Our study shows that our solution adds no significant time overhead, and the additional overhead in terms of transmitted bytes remains within acceptable limits.

High extinction ratio multi-polarization states preparation based on SOI integrated chips

Quantum key distribution (QKD) leverages the principles of quantum mechanics to provide an unconditionally secure public-key cryptographic system. Polarization encoding is a commonly employed method in QKD. However, the low extinction ratio of polarization states significantly impacts the error rate in QKD systems, thereby threatening the security of communication. Here, we propose a structure and method for the preparation of high-extinction-ratio polarization states based on silicon photonic integrated chips. Our chip integrates thermo-optic modulators and silicon carrier-depletion modulators to achieve the transformation of information from path encoding to polarization encoding through a 2-D grating. We have successfully prepared six polarization states using only thermo-optic modulators, with an average polarization extinction ratio of 35.8 dB. Furthermore, we have successfully prepared six polarization states using a combination of thermo-optic and electro-optic modulators, with an average polarization extinction ratio exceeding 30.6 dB. Notably, our system demonstrated remarkable stability over a 2-h testing period, with the polarization extinction ratio remaining essentially unchanged.

Secure and covert communication strategy of UAV based on hybrid RF/FSO system

The hybrid radio frequency (RF)/free-space optical (FSO) system can improve communication security by using complimentary characteristics and mitigating the risks of RF links being susceptible to co-channel interference (CCI) and malicious eavesdropping. We investigate the secure and covert communication performance of unmanned aerial vehicles (UAVs) equipped with a hybrid RF/FSO system. In terms of secure communication, UAVs employ the strategy of transmitting private data concurrently through RF and FSO links, considering two modes based on active eavesdropping by a malicious user. Closed-form expressions for the secrecy outage probability (SOP) and effective secrecy throughput (EST) are derived. With respect to covert communication, the communication strategy is to utilize the RF link to generate interfering signals, thus aiding the FSO signals in accomplishing covert communication. We formulate an optimization problem that maximizes the EST while considering transmit power and user-acceptable detection error probability. A two-stage gradient-based iterative solution algorithm is proposed. The numerical results demonstrate the effectiveness of the proposed secure and covert communication strategy based on the hybrid RF/FSO system, which is expected to enhance the communication security of UAVs in the RF-challenged environment.

SCVAN- BKM: Swarm clustering for vehicular ad hoc network with a secure blockchain-based key management scheme

The advancements in telematics and communication technology for automobiles have contributed to the development of Vehicular ad Hoc Networks (VANETs). These networks serve as the foundation for Intelligent Transportation Systems (ITS). Communication across various VANET entities is challenging due to the open communication environment and the highly dynamic nature of VANETs. One of the major challenges in VANETs is ensuring stable and secure transmission. To address these factors, several studies have been conducted. The article discusses a clustering algorithm for VANETs that leverages SCVAN-DPSO to create stable clusters and provide secure communication for mitigating malicious nodes. Additionally, Hyperelliptic Curve Cryptography (HECC) with signcryption in blockchain is proposed. This algorithm is designed to identify and mitigate malicious nodes, ensuring robust and secure communication within the network. To verify vehicles in VANETs, this study also suggests a safe and reliable key management method that generates and stores cryptographic keys using blockchain’s distributed ledger technology. By doing so, the risk of rogue nodes is reduced, and a safe, stable connection between vehicles is guaranteed. This work has been implemented using NS 3.34 simulation with the SUMO real-time traffic mobility simulator, and its performance has been evaluated. The proposed algorithm SCVAN-BKM provides a 99.6 % packet delivery ratio for 20 nodes, 0.4 % packet loss, end-to-end delay of 32.65 ms, throughput of 9.522 Mbps, and a cluster lifetime of 105 s. As the number of nodes increases in the communication zone, stable communication is maintained due to the clustering algorithm used in the proposed approach, as cluster formation supports stability in the high-mobility nature of vehicles, while secure communication is ensured using blockchain technology. The findings demonstrate that our approach is more effective and yields better outcomes than existing systems.

Joint beamforming for ris-assisted integrated sensing and secure communication in UAV networks

Joint beamforming for ris-assisted integrated sensing and secure communication in UAV networks

NEAT Based Approach for Cognitive Covert Communication Assisted by UAV-IRS

Abstract To address the security vulnerabilities inherent in cognitive radio technology amidst extensive control information and data exchanges, this paper introduces the use of unmanned aerial vehicle equipped with intelligent reflecting surfaces (UAV-IRS) as relay nodes to facilitate covert communications for cognitive users. Given the complexities and dynamics of the electromagnetic environment, which involve multiple interconnected and constantly changing communication resources, as well as high-dimensional data, we propose the NeuroEvolution of Augmenting Topologies based Resource Optimisation Algorithm Method (NEAT-ROAM). This advanced algorithm continuously optimizes and adapts the network structure in response to the external environment, ensuring robust and secure communication in dynamic and challenging scenarios. The algorithm not only provides superior covert communication performance but also exhibits fast convergence, which can be applied to the problem of assisting covert communication under mobile conditions using UAV-IRS.

Complex dynamic behavioral transitions in auditory neurons induced by chaotic activity

Chaotic sequences are widely used in secure communication due to their high randomness. Chaotic resonance (CR) refers to the resonant response of a system to weak signals induced by chaotic activity, but its practical application remains limited. This study designs a simplified FitzHugh-Nagumo (FHN) auditory neuron model by simulating the physiological activities of auditory neurons and considering the combined stimulation of chaotic activity and sound signals. It is found that the neuron dynamics depend on both external sound stimuli and chaotic current intensity. Chaotic currents induce spikes in the neuron output sequence through CR, and the spikes become more frequent with increasing current intensity, eventually leading to a chaotic state regardless of the initial state. However, the sensitivity of the initial value of this chaotic sequence shifts to the chaotic current excitation system. The injection of chaotic currents can reduce the system's average Hamiltonian energy under certain conditions. By measuring the complexity of the generated sequences, we find that the addition of chaotic currents can enhance the complexity of the original sequences, and the enhancement ability increases with the intensity. This provides a new approach to enhance the complexity of original chaotic sequences. Moreover, different chaotic currents can induce different chaotic sequences with varying abilities to enhance the complexity of the original sequences. We hope our work can contribute to secure communication.

Enhancing Black Hole Attack Detection in VANETs: A Hybrid Approach Integrating DBSCAN Clustering with Decision Trees

Ensuring the security of communication is crucial in Vehicular Ad Hoc Networks (VANETs) to protect the integrity of information sharing among cars. To implement VANET communication as an answer for the different uses, secure communication is necessary. The unreliability of VANET environments is caused by message delays or tampering in VANET applications. Finding the sweet spot between VANET security and performance and dependability is the primary goal. This project’s overarching goal is to fortify VANETs against Blackhole Routing Attacks and, by identifying and blocking harmful nodes, to mitigate the blackhole impact. This paper proposes a robust hybrid approach for the detection of black hole attacks in VANETs, leveraging the synergy between DBSCAN (Density-Based Spatial Clustering of Applications with Noise) clustering and Decision Trees. DBSCAN, a density-based clustering algorithm, is employed to identify spatial clusters of vehicles, while Decision Trees are utilized to discern normal communication patterns from malicious ones within these clusters. The integration of these two techniques enhances the accuracy and efficiency of black hole attack detection in the dynamic and resource-constrained VANET environment. Experimental results demonstrate the effectiveness of the proposed hybrid approach, providing a promising solution for bolstering the security of VANETs against emerging threats. Here in result 73.89% improvement is received in Packet Drop Rate using DBSCAN, also minor improvement over Throughput and Average end to end delay and major improvement in terms of Network Routing Load.

An Enhanced RSA Algorithm to Counter Repetitive Ciphertext Threats Empowering User-centric Security

The technology-driven modern age emphasizes the security and privacy of communication. Through this paper, we delve deep into the need for user-centric security within cloud-based environments. The need for enhancement in encryption arises due to the increasing cases of data breaches and insider threats in cloud-based environments recently. The focus is laid upon the use of RSA encryption, end-to-end encryption, and anonymous messaging to address security-based concerns. The primary focus of this research is to develop a comprehensive security system to ensure the confidentiality and authenticity of text-based messages shared in the cloud. The proposed improved RSA algorithm, as suggested, incorporates three prime numbers in the key generation process. To address repetitive ciphertext, the proposed algorithm involves adding the index of each character in the plaintext string to the character’s integer value before encryption. Conversely, during decryption, the same index is subtracted. This proposed algorithm has been utilized in a practical scenario, specifically in the implementation of a chat application. This paper presents a proof-of-concept for the proposed enhanced version of the RSA algorithm, accompanied by a thorough comparison and analysis of computational times across various bit lengths. Increase in data security at a cost of minor increase in computation time was observed through this research.

Quantum Networking for Secure and Reliable Communication in Space Exploration

Quantum Networking for Secure and Reliable Communication in Space Exploration

DT-Block: Adaptive vertical federated reinforcement learning scheme for secure and efficient communication in 6G

The necessities of security and data sharing have focused on federated learning because of using decentralized data sources. The existing works used federated learning for security, however, it still faces many challenges such as poor security and privacy, computational complexity, etc. In this research, we propose adaptive vertical federated learning using a reinforcement learning approach and blockchain. The proposed work includes three phases: user registration and authentication, machine learning-based client selection, and adaptive secure federated learning. Initially, all the users register their credentials to the cognitive agent, which generates a private key, public key, and random number using a Chaotic Isogenic Post Quantum Cryptography (CIPQC) algorithm. Second, optimal clients are selected for participating in federated learning which improves learning rate and reduces complexity. Here, optimal clients are selected by the Enhanced Multilayer Feed Forward Neural Network (EMFFN) algorithm by considering CSI, RSSI, bandwidth, energy, communication efficiency, and statistical efficiency. Finally, adaptive secure federated learning is performed by the Distributed Distributional Deep Deterministic Policy Gradient (D4PG) algorithm, where the local models are adaptively used by the private strategy based on its sensitivity. The aggregated global models are stored in DT-block (dendrimer tree-based blockchain) which stores the data in a dendrimer tree structure for increasing scalability and reducing search time during data retrieval. The simulation of this research is conducted by NS-3.26 network simulator and the performance of the proposed DT-Block model is estimated based on various performance metrics such as accuracy, delay, loss, f1-score, and security strength this demonstrated that the suggested effort produced better results both in terms of quantitative and qualitative aspects.

AirQKD: The Role of Free-Space Optics Quantum Key Distribution Enabling Pragmatic Secure and Scalable Communications

AirQKD: The Role of Free-Space Optics Quantum Key Distribution Enabling Pragmatic Secure and Scalable Communications

Cyber Fraud, Causes and Its Effect on Money Deposit Banks

The study examined cyber fraud, causes and its effect on money deposit banks (DMB) in Nigeria: a study of Zenith Bank. The main objective is to examine electronic frauds, causes and its challenges in the banking sector. The study is hinged on two hypotheses; 49 branches; sample of 557 staff. Structured questionnaire was used to capture the response of the bank staff and it was analyzed using statistical package for social science version 27 (SPSS). Descriptive statistics and multiple regression were employed in the data analysis. Among the findings were accounting fraud by bank staff, identity theft, money laundering, phishing, pharming, computer virus, lack of oversight function,lack of standards, financial loss, absence of national central control, lack of credible infrastructure, porous internet, lack of national functional database, and inadequate awareness by bank customers were the challenges militating the effort towards curbing the cyber fraud in the banking system in Nigeria. The findings also revealed that cybercrime reduced productivity; vulnerability of banks Information and Communication Technology (ICT) systems and security audit. The study recommends adequate antivirus and antimalware software technology and the use of multi-factor authentication, use of biometrics, automatic logout are the solutions identified to curb cybercrimes in banks. The study concluded that the place of security in the cyber space of banks in Nigeria cannot be oversemphasied, therefore necessary measures should be put in place towards mitigating cybercrime in Zenith Bank. Equally, Zenith Bank should employ stringent measures to monitor staff activities especially in the confidentiality of customer information, cyber security audit should be done on regular basis, sensitization of bank customers, and Multifactor authentication, biometrics and automatic log out, and strong firewall should be adopted by Zenith Bank.

A measurement-device-independent quantum secure digital payment

In contemporary society, digital payment systems are crucial, yet vulnerable to security breaches. Based on the principles of quantum physics, quantum digital payment (QDP) protocols offer a theoretically superior security paradigm compared to those reliant on computational complexity. Nevertheless, those QDP protocols in practice are frequently compromised by imperfections in measurement devices, facilitating valuable information interception by malicious entities. Addressing this vulnerability, we propose a measurement-device-independent quantum secure digital payment (MDI-QSDP) protocol, designed to enhance security in digital payment systems by eliminating side-channel attacks on measurement devices. This protocol extends the framework of a novelly developed measurement-device-independent quantum secure communication (MDI-QSC) protocol, which supports secure dialogic exchanges without prior key sharing. Utilizing the proposed MDI-QSC protocol, participants can not only engage in secure direct communication but also establish a private key for subsequent encrypted interactions. Our MDI-QSDP protocol incorporates a robust authentication mechanism, ensuring that only legitimate participants can initiate transactions, thereby bolstering security. A comprehensive security analysis of the proposed protocol demonstrates its resilience against identity theft, information leakage, and other potential security breaches. Furthermore, simulations employing practical experimental parameters validate the protocol’s applicability and effectiveness in real-world scenarios, thereby confirming its potential to significantly enhance the security of future quantum digital payments.

Overview of Mobile Cloud Computing: Learning Prospects, an Essentiality to Realism of the Digital World

This paper has been worked on the relational significance of ‘Cloud Computing’ as a newer innovation of the digital world is a supportive system that enhancing the storage capacity of resources and data as needed by individuals who believes in its usage. Most effectively, the new concept ‘Cloud Computing’ has been designed to strengthen the network of communication transfer much faster and safer with more storage possibilities. The framework of this identity enables integrated systems to create a wider scenario of computer’s working space to equip effective processes of mobile cloud computing. The trends of this new technology is most favored among all groups of people and in different organizations as it provides security and privacy for the information stored. The paper explicates on the efficiency and efficacy of cloud computing with its potential usage. The necessity of such a service serves the background of necessity in the globalized digitized scenario. It also will investigate the current state of mobile cloud computing security and privacy, with a focus on the risks and vulnerabilities associated with this technology. It also discusses potential solutions and best practices for protecting mobile cloud users and their data that will give the asset to findings identified. This paper proposes several measures including secure communication protocols, strong authentication mechanisms, data encryption and user awareness with linked deliberation to education. In conclusion, it is clear that Cloud Computing is an innovative and evolving field and it requires a comprehensive approach to protect the users and their data for futurity which is the relevance to contribution from this paper.