Data Integrity Protection Research Articles

Antitamper Image Watermarking Based on Cellular Network Topology for IoT‐Themed Mobile Forensics

The Internet of Things (IoT) connects physical and digital worlds with mobile devices, accompanied by a surge in cybersecurity issues. With the rapid adoption of mobile devices, mobile forensics emerges as a new interdisciplinary field that concerns many forms of sabotage and cybercrime in the context of mobile computing. One of the most common cyberattacks is tampering. Digital watermarking is a tamper‐evident technique used to protect data integrity. In this paper, we present an antitamper image watermarking scheme designed for mobile communications with low computational cost. A reference matrix based on cellular network topology is introduced to guide the watermark embedding and extraction processes. This reference matrix serves as a lookup table to reduce computational complexity, thereby enabling efficient implementation on mobile devices. Our scheme is aimed at offering high accuracy in detecting and localizing tampered regions. We also achieve a high watermarking capacity while leaving the visual quality of the carrier images nearly unharmed. Experimental results validate the effectiveness of our scheme against various types of simulated forgery including cropping and copy/paste attacks.

Lightweight Public/Private Auditing Scheme for Resource-Constrained End Devices in Cloud Storage

Data integrity protection, an important feature in cloud storage services, can be achieved using auditing schemes. However, existing public and private auditing schemes are somewhat inefficient in practice. For example, in private auditing schemes, the trusted third-party is generally not able to settle disputes between users and the cloud storage server. In most existing public auditing schemes, it takes a user tens of seconds to generate data tags for every MB of file outsourced, which is clearly impractical particularly on resource-constrained end devices. Since the user is likely to have information than the auditor, we divide the verification phase into private verification and public verification phases. Then, we propose a public/private auditing model and a security model for public/private auditing. In our public/private auditing model, the user uses private verification phase to audit outsourced data promptly in most cases, and the auditor uses public verification phase to audit outsourced data only when dispute occurs or the user is not available to audit. Then, we propose a public/private auditing scheme, and present its security proof in the random oracle model under the discrete logarithm assumption. Experimental findings demonstrate that our scheme only need tens of microseconds to generate data tags for every MB file outsourced. In other words, the efficiency of our scheme is almost as high as existing high-performing private auditing schemes, and our scheme is more effective in comparison to existing efficient public auditing schemes.

СПОСОБ МОНИТОРИНГА ЦЕЛОСТНОСТИ ТЕЛЕМЕТРИЧЕСКОЙ ИНФОРМАЦИИ О СОСТОЯНИИ ДВИГАТЕЛЯ ЛЕТАТЕЛЬНОГО АППАРАТА

В статье представлен способ мониторинга целостности телеметрических данных о состоянии мобильного объекта, а именно, двигателя летательного аппарата, на основе сравнения технологических временных рядов. Технологические временные ряды, полученные с мобильного объекта, сравниваются с технологическими временными рядами, генерируемыми моделью мобильного объекта на предприятии-разработчике (изготовителе). Сравнение временных рядов осуществляется в выбранном временном окне за счет вычисления параметров согласованности: коэффициент детерминации, евклидово расстояние и средний процент отклонений. По вычисленным параметрам согласованности определяется тип согласованности в данном временном окне (7 типов), а также определяется тип динамики мобильного объекта: статический или динамический. Решение о целостности данных принимается по сформулированным правилам нечеткой логики, которые опираются на три параметра: тип динамики мобильного объекта, тип согласованности технологических временных рядов и сигнале системы контроля. Тестирование предложенного способа проводилось на данных, генерируемых системой автоматического управления двигателя летательного аппарата. Оценка вероятности правильности принятого решения составила 0,85.

An effective, secure and efficient tagging method for integrity protection of outsourced data in a public cloud storage.

Data Integrity Auditing (DIA) is a security service for checking the integrity of data stored in a PCS (Public Cloud Storage), a third-party based storage service. A DIA service is provided by using integrity tags (hereafter referred to tags). This paper proposes a novel tagging method, called Tagging of Outsourced Data (TOD), for generating and verifying tags of files. TOD has a number of unique properties: (i) it supports both public and private verifiability, and achieves this property with a low level of overhead at the user end, making it particularly attractive to mobile users with resource-constrained devices, (ii) it protects data confidentiality, supports dynamic tags and is resilient against tag forgery and tag tampering (i.e. by authorised insiders) at the same time in more secure and efficient, making the method more suited to the PCS environment, (iii) it supports tags deduplication, making it more efficient, particularly for the user who has many files with data redundancy. Comprehensive security analysis and performance evaluation have been conducted to demonstrate the efficacy and efficiency of the approach taken in the design.

Recruiting Nurses Via Social Media for Survey Studies.

Nurses are a difficult population to recruit for research. Barriers to recruitment of nurses include survey fatigue, hospital structures and institutional review boards as gatekeepers to accessing participants, and limited generalizability of findings. Social media present innovative opportunities to recruit participants for survey research. However, there is limited information about best practices for recruiting nurses through social media. The aim of this report was to examine the advantages and disadvantages of and determine the best practices for recruiting nurses for survey studies via social media. We examined recruitment strategies of three survey studies involving nurse participants. Each study used social exchange theory and leverage-saliency theory to guide recruitment. The studies included were (a) the Travel Nurse Onboarding Study, which recruited participants from a single closed group on Facebook; (b) the Presenteeism and Nursing Study where participants were recruited using association listservs, healthcare organizations, and paid ads and postings on social media; and (c) the Pain and Nursing Study in which participants were recruited through social media, association listservs, and in person at conferences. Social media offer accessible, low-cost, high-yield approaches to recruitment of nurses for survey studies. Useful strategies for crafting effective recruitment via social media are presented, including how, where, when, and how often to post. The generalizability of social media research is also discussed. Suggestions are provided for researchers using social media as well as guidelines for institutional review boards to address gray areas of social media research. Data integrity protection techniques are proposed to ensure social media survey data are not corrupted by malicious bots. This report outlines best practices for the recruitment of nurses for survey studies using social media.

ELEKTRONİK DELİLİN TOPLANMASI VE MUHAFAZASI

Elektronik delilin ceza yargılamasında kullanılabilmesi veri bütünlüğünün korunmuş olmasına bağlıdır. Zira bir elektronik delilin veri bütünlüğünün bozulmuş olması onun geçerliliğini de olumsuz etkileyecek ve ispat fonksiyonunun ortadan kalkmasına neden olabilecektir. Bir elektronik verinin bozulmasına neden olabilecek durumların başında ise onun uygun koşullarda toplanmamış ve muhafaza edilmemiş olması yer almaktadır. Bu bakımdan elektronik delilin yapısı itibariyle hassas özellik arz etmesi ve kolay bozulabilen nitelikte olması bu delilin toplanması sırasında bazı temel ilkelere uyulmasını, delil toplama sürecinde canlı analiz, imaj alma, hash değeri alma, zaman damgası ve koruma zinciri gibi bazı işlemlerin yapılmasını ve toplanan elektronik verilerin uygun şartlarda muhafaza edilmesini gerekli kılmaktadır. Biz de bu çalışmamızda elektronik delilin toplanması ve muhafazası sürecinde uyulması gereken prensipleri ve yapılması gereken işlemleri ele aldık.

4500 Providing a System for Practical Monitoring Training for Clinical Trials within Academic Institutions

OBJECTIVES/GOALS: The goal was to understand the effectiveness of a novel clinical trial educational module and a corresponding initiative designed and disseminated by the Southern California Clinical and Translational Science Institute (SC-CTSI) to increase the quality of clinical trials conducted in academia. METHODS/STUDY POPULATION: The CRCs (Clinical Research Coordinators) for the initiative are asked to complete the online training. Possible study protocols are picked to be monitored by the CRCs. The monitor is instructed to study the protocol extensively and prepare for their monitoring visit. The trained monitor from the initiative then reaches out to the CRC of the study that is to be monitored and carries out the monitoring visit. Afterwards, the monitor sends initiative personnel the monitoring report, which is evaluated to see if the monitor checked everything they should have during the visit. The PI of the study is contacted with highlights from the monitoring report and improvements that they can make. RESULTS/ANTICIPATED RESULTS: The first study monitored was a site of a large NIH-sponsored study where the consent forms were signed electronically. It was found that the monitor could not access the consent forms. Therefore, the monitor could not do source data verification. The PI of the study said that they would be raising this issue with the NIH. During the monitoring visit of the second study chosen for the initiative, patient binders were specifically examined for informed consent and source documentation completeness. The charts of patients were also reviewed. The only deviation found was a missing signature in the Investigator Site File. For the last two studies, data will be reported. DISCUSSION/SIGNIFICANCE OF IMPACT: Monitors were not only able to monitor efficiently, but also able to point out deficiencies in the monitoring practices of large studies. This model could be expanded to other academic institutions to establish quality management systems to ensure data integrity and subject protection.

4339 Exploring Physician Investigator Clinical Trials Training and Quality Management Systems and its Implementation in Medical School Curriculums

OBJECTIVES/GOALS: Although many physicians conduct clinical trials as Principle Investigators, a systematic training is often lacking. Instead, most receive on-site training, potentially compromising data quality and human subject safety. This research assesses the landscape for physician training through medical school curriculums. METHODS/STUDY POPULATION: This project explored training programs for physician researchers, specifically in the emerging field of quality management systems (QMS). To understand the scope of academic research available for QMS and Good Clinical Practice (GCP) training and lack of clinical trial training implemented in medical school curricula, a literature review was conducted. Available training for physicians was assessed through existing training programs from the FDA, NIH, DIAMOND, ACRP, and Google for accessibility in terms of costs, completion timelines and certification, format (online vs. in-person), and inclusion of GCP and QMS training in the curriculum RESULTS/ANTICIPATED RESULTS: Literature review revealed that not much is known about physician researcher training beyond the institutional requirement for minimal GCP review. Examination of select medical school curriculum also discovered a lack of clinical trial training for students interested in clinical research. Furthermore, existing training programs and modules available for physicians are limited as their syllabi do not include QMS training. In addition, these programs commonly have inaccessible registration links, are expensive, and have significant time commitments for in-person courses. These findings support the need for more accessible and effective training and certification tools for physician researchers. DISCUSSION/SIGNIFICANCE OF IMPACT : QMS training is not included medical school curricula or programs for physician researchers, potentially compromising data integrity and subject protection. This research supports the development of essential QMS training concepts and practical approaches for physician researcher clinical trials.

Blockchain Mechanism and Symmetric Encryption in A Wireless Sensor Network.

The Internet of Things (IoT) paradigm allows the connection and exchange of information between millions of smart devices. This paradigm grows and develops exponentially as do the risks and attacks on IoT infrastructures. Security, privacy, reliability, and autonomy are the most important requirements in IoT Systems. If these issues are not guaranteed, the IoT system could be susceptible to malicious users and malicious use. In centralized IoT systems, attacks and risks are greater, especially when data is transmitted between devices and shared with other organizations. To avoid these types of situations, this work presents a decentralized system that guarantees the autonomy and security of an IoT system. The proposed methodology helps to protect data integrity and availability based on the security advantages provided by blockchain and the use of cryptographic tools. The accuracy of the proposed methodology was measured on a temperature and humidity sensing IoT-based Wireless Sensor Network (WSN). The obtained results prove that the proposal fulfils the main requirements of an IoT system. It is autonomous, secure to share and send information between devices and users, has privacy, it is reliable, and the information is available in the infrastructure. Furthermore, this research demonstrates that the proposal is less susceptible to the most frequent attacks against IoT systems, such as linking attack, man in the middle, and Distributed Denial of Service (DDoS) attack.

Effectively Managing Connected Mobility Marketplaces

As new innovations in mobility have entered the marketplace, local government leaders have struggled to adapt their regulatory framework to adequately address new challenges or the needs of the consumers of these new services. The good news is that the technology driving this rapid change also provides the means for regulating it: real-time data. It is the responsibility of cities to establish rules and incentives that ensure proper behavior on the part of mobility providers while steering service delivery towards creating better public outcomes. Cities must use the levers at their disposal to ensure an equitable mobility marketplace and utilize real-time data sharing to enforce compliance. These include investing in and leveraging physical and digital infrastructure, regulating and licensing business conducted in public space, establishing and enforcing rules around public safety, rethinking zoning and land use planning to be transit-oriented, and regulating the digital realm to protect data integrity.

Vectorized linear approximations for attacks on SNOW 3G

SNOW 3G is a stream cipher designed in 2006 by ETSI/SAGE, serving in 3GPP as one of the standard algorithms for data confidentiality and integrity protection. It is also included in the 4G LTE standard. In this paper we derive vectorized linear approximations of the finite state machine in SNOW3G. In particular,we show one 24-bit approximation with a bias around 2−37 and one byte-oriented approximation with a bias around 2−40. We then use the approximations to launch attacks on SNOW 3G. The first approximation is used in a distinguishing attack resulting in an expected complexity of 2172 and the second one can be used in a standard fast correlation attack resulting in key recovery in an expected complexity of 2177. If the key length in SNOW 3G would be increased to 256 bits, the results show that there are then academic attacks on such a version faster than the exhaustive key search.

Public data integrity auditing without homomorphic authenticators from indistinguishability obfuscation

Cloud storage services allow users to outsource their data to remote cloud servers to relieve from the burden of local data storage and maintenance. Despite the benefits, data outsourcing has also made the data integrity protection in cloud storage a very challenging issue. Plenty of public auditing schemes have been proposed, which allow a third-party auditor to check the data integrity on behalf of users. However, most of these schemes are constructed on homomorphic authenticators, which require strong computation capability on the user side and incur high storage overhead. In this paper, a novel public data integrity auditing scheme is proposed from indistinguishability obfuscation. In our scheme, each user processes the entire data to be outsourced by using only symmetric key primitives, and the server only needs to store the outsourced data. In comparison with existing works, the proposed scheme frees users from the heavy burden on calculating the authenticators and reduces the storage overhead significantly. Moreover, we show the security of the proposed scheme with rigorous proofs. Finally, the performance analysis and comparison with existing works demonstrate the proposed scheme achieves better performance in terms of data processing cost on the user side and storage overhead.

A secure and efficient multi cloud-based data storage and retrieval using hash-based verifiable secret sharing scheme

As the availability of many smart devices rises, fast and easy access to data as well as sharing more information is felt. Cloud computing is a computational approach that shares configurable resources such as network, servers, storage space, applications and services on the internet. The confidentiality, integrity, and availability of the data, reducing computational cost and communication channel between the data owner and cloud service providers are essential parts of cloud computing. In the paper, we propose a new scheme to construct a secure cloud data storage based on the verifiable secret sharing scheme with public verifiability to protect data integrity. And the verification phase does not depend on any computational assumptions. The proposed scheme cannot only detect the cheating but also identify who are the cheaters. It is worth noting that the proposed scheme is more efficient compared with the other secret sharing-based cloud data storage since heavy and complex computation is not required.

A secure and efficient multi cloud-based data storage and retrieval using hash-based verifiable secret sharing scheme

As the availability of many smart devices rises, fast and easy access to data as well as sharing more information is felt. Cloud computing is a computational approach that shares configurable resources such as network, servers, storage space, applications and services on the internet. The confidentiality, integrity, and availability of the data, reducing computational cost and communication channel between the data owner and cloud service providers are essential parts of cloud computing. In the paper, we propose a new scheme to construct a secure cloud data storage based on the verifiable secret sharing scheme with public verifiability to protect data integrity. And the verification phase does not depend on any computational assumptions. The proposed scheme cannot only detect the cheating but also identify who are the cheaters. It is worth noting that the proposed scheme is more efficient compared with the other secret sharing-based cloud data storage since heavy and complex computation is not required.

Stochastic Blockchain for IoT Data Integrity

This paper proposes a blockchain-based data checking scheme to protect data integrity in Internet of Things (IoT). Traditional data integrity schemes such as symmetric key approaches and public key infrastructure (PKI) suffer from the single-point of failure and network congestion due to the centralized architecture. Motivated by the distributed data authentication in blockchain, we propose to adopt blockchain to ensure the data integrity in IoT networks. However, the existing blockchain scheme cannot be directly applied to IoT nodes with limited computing and network resources. Hence, we develop a stochastic blockchain scheme to limit the number of cooperative nodes and distribute the load to IoT edge nodes. In our scheme, the IoT data are broadcast by randomly selected cooperative nodes, thereby introducing uncertainty to the attacker and improving the system security level. Finally, we propose a lightweight mining process to make only the IoT edge nodes compete for block generation and share the block with other nodes. If our scheme is used in the case of having 9,000 legitimate nodes and 1,000 compromised nodes, only three cooperative nodes can achieve the probability of successful defense over 99 percent.

Long-term integrity protection of genomic data

Genomic data is crucial in the understanding of many diseases and for the guidance of medical treatments. Pharmacogenomics and cancer genomics are just two areas in precision medicine of rapidly growing utilization. At the same time, whole-genome sequencing costs are plummeting below $ 1000, meaning that a rapid growth in full-genome data storage requirements is foreseeable. While privacy protection of genomic data is receiving growing attention, integrity protection of this long-lived and highly sensitive data much less so.We consider a scenario inspired by future pharmacogenomics, in which a patient’s genome data is stored over a long time period while random parts of it are periodically accessed by authorized parties such as doctors and clinicians. A protection scheme is described that preserves integrity of the genomic data in that scenario over a time horizon of 100 years. During such a long time period, cryptographic schemes will potentially break and therefore our scheme allows to update the integrity protection. Furthermore, integrity of parts of the genomic data can be verified without compromising the privacy of the remaining data. Finally, a performance evaluation and cost projection shows that privacy-preserving long-term integrity protection of genomic data is resource demanding, but in reach of current and future hardware technology and has negligible costs of storage.

Blockchain data-based cloud data integrity protection mechanism

Despite the rapid development of cloud computing for many years, data security and trusted computing are still the main challenges in current cloud computing applications. In order to solve this problem, many scholars have carried out a lot of research on this, and proposed many models including data integrity test and secure multi-party calculation. However, most of these solutions face problems such as excessive computational complexity or lack of scalability. This paper studies the use of blockchain techniques to improve this situation. Blockchain is a decentralized new distributed computing paradigm. Applying blockchain technology to cloud computing, using the security mechanism of the former to improve the performance of the latter’s secure storage and secure computing is a promising research topic. In this paper, the distributed virtual machine agent model is deployed in the cloud by using mobile agent technology. The virtual machine agent enables multi-tenants to cooperate with each other to ensure data trust verification. The tasks of reliable data storage, monitoring and verification are completed by virtual machine agent mechanism. This is also a necessary condition for building a blockchain integrity protection mechanism. The blockchain-based integrity protection framework is built by the virtual machine proxy model, and the unique hash value corresponding to the file generated by the Merkel hash tree is used to monitor the data change by means of the smart contract on the blockchain, and the data is owned in time. The user issues a warning message for data tampering; in addition, a “block-and-response” mode is used to construct a blockchain-based cloud data integrity verification scheme.

A novel privacy- and integrity-preserving approach for multidimensional data range queries in two-tiered wireless sensor networks

To address the problem of storage nodes in wireless sensor networks being vulnerable to attack, this article proposes a new range query protocol, WQuery, based on multidimensional data privacy and integrity protection. To ensure the privacy of multidimensional data, the WQuery protocol encodes multidimensional sensing data and user query requests based on a bucket-partitioning scheme and sequential encryption mechanism at the sensor node and sink node. Therefore, the storage nodes cannot sense the real value of sensing data and query requests under the premise of correctly executing the request. To ensure the integrity of the multidimensional data query results, WQuery includes an integrity verification scheme based on the new tree-to-destination data structure. The scheme translates the actual query scope of a user request into a matched set of bucket labels and verifies the integrity of query results through the tree-to-destination data structure. Simulation results show that the tree-to-destination scheme is flexible, easy to implement, and highly secure, thereby effectively reducing energy consumption.

A Two-tier Security Solution for Storing Data Across Public Cloud

Background: Data integrity protection in Cloud Computing becomes very challenging since the user no longer has the possession of their own data. This makes cloud data storage security of critical importance. The users can resort to legal action against the cloud provider if the provider fails to maintain the integrity of the shared data, but it also raises a need to secure users' private data across the public cloud. Methods: In this paper, we propose a novel end-to-end solution to ensure the security of data stored over a public cloud. It is a two-tier approach where the data is stored in an encrypted format and only the owner of the data can have access to the original data shared across the cloud. The algorithm OwnData: Encryption and Decryption is based on AES file encryption, which has the flexibility to be implemented across different cloud platforms. Results: The proposed OwnData model to provide privacy and confidentiality to the user data successfully secures data in an encrypted format. The users can gain full access control over the accessibility of their data. The application has been improvised to minimize page load time which enables it to achieve improvements in scalability. Algorithm and concatenation operators (dot) give minimum computation load during uploading of data to the cloud platform or downloading the same. Conclusion: The algorithm is robust, scalable and secure and It gives the user complete authorization and control over the data even when data is being stored remotely or in any other cloud premises.

Enhanced Integrity Checking for Preserve Data Owner and User Level Privacy Using Dual Cryptography Approach

Using Cloud Storage, users can tenuously store their data and enjoy the on-demand great quality applications and facilities from a shared pool of configurable computing resources, without the problem of local data storage and maintenance. However, the fact that users no longer have physical possession of the outsourced data makes the data integrity protection in Cloud Computing a formidable task, especially for users with constrained dividing resources. From users’ perspective, including both individuals and IT systems, storing data remotely into the cloud in a flexible on-demand manner brings tempting benefits: relief of the burden for storage management, universal data access with independent geographical locations, and avoidance of capital expenditure on hardware, software, and personnel maintenances, etc. To securely introduce an effective Sanitizer and third party auditor (TPA), the following two fundamental requirements have to be met: 1) TPA should be able to capably audit the cloud data storage without demanding the local copy of data, and introduce no additional on-line burden to the cloud user; 2) The third party auditing process should take in no new vulnerabilities towards user data privacy. In this project, utilize and uniquely combine the public auditing protocols with double encryption approach to achieve the privacy-preserving public cloud data auditing system, which meets all integrity checking without any leakage of data. To support efficient handling of multiple auditing tasks, we further explore the technique of online signature to extend our main result into a multi-user setting, where TPA can perform multiple auditing tasks simultaneously. We can implement double encryption algorithm to encrypt the data twice and stored cloud server in Electronic Health Record applications.