Degree Of Security Research Articles

Chaos and Cellular Automata-Based Substitution Box and Its Application in Cryptography

Substitution boxes are the key factor in symmetric-key cryptosystems that determines their ability to resist various cryptanalytic attacks. Creating strong substitution boxes that have multiple strong cryptographic properties at the same time is a challenging task for cryptographers. A significant amount of research has been conducted on S-boxes in the past few decades, but the resulting S-boxes have been found to be vulnerable to various cyberattacks. This paper proposes a new method for creating robust S-boxes that exhibit superior performance and possess high scores in multiple cryptographic properties. The hybrid S-box method presented in this paper is based on Chua’s circuit chaotic map, two-dimensional cellular automata, and an algebraic permutation group structure. The proposed 16×16 S-box has an excellent performance in terms of security parameters, including a minimum nonlinearity of 102, the absence of fixed points, the satisfaction of bit independence and strict avalanche criteria, a low differential uniformity of 5, a low linear approximation probability of 0.0603, and an auto-correlation function of 28. The analysis of the performance comparison indicates that the proposed S-box outperforms other state-of-the-art S-box techniques in several aspects. It possesses better attributes, such as a higher degree of inherent security and resilience, which make it more secure and less vulnerable to potential attacks.

Analysis of Demand for China’s Commercial Health Insurance from the Perspective of Loss Aversion

China's health insurance industry has been developing continuously since its emergence in the 1980s, but at this stage, China's social security system is still at a relatively low level of development, and people's expenses incurred in a variety of medical needs cannot be given by the current social security system, while commercial health insurance has made a good supplement to this, ensuring people's practical interests, and is also its biggest competitive advantage. This paper lays out an overview of its market size, product structure and security degree, followed by effective suggestions of improvement in relation to the behavioral economical concept of loss aversion. The irrational misunderstanding of health insurance and the resulting problems of lack of insurance, insufficient coverage, excess insurance and double insurance have been puzzling the sustainable and healthy development of health insurance, which is also a hot issue of general concern at home and abroad. According to analysis of possible improvement measures about the effect of loss aversion on citizens, optimizing claims and modifying health service models in a desirable way will mitigate the loss aversion effects when purchasing commercial health insurance.

Testing the limits of general-purpose hypervisors for real-time control systems

With the emergence of the Industry 4.0 paradigm, there is a need to introduce a significant degree of flexibility, security and resilience in automation infrastructures, while keeping up with real-time requirements that are characteristic of such domains. Interestingly, many of these driving principles are the same that encouraged the adoption of virtualization technologies on the IT domain, somehow suggesting that the same benefits could be realisable for Industrial and Automation Control Systems, allowing to virtualise servers and cyber–physical system control devices. However, the suitability of using off-the-shelf hypervisor technologies to address the specific real-time requirements of automation infrastructures remains unclear, due to their focus on maximising systems throughput and capacity, often at the expense of determinism and increased latency.This work addresses this problem, presenting a discussion and an empirical evaluation on the feasibility of using general purpose off-the-shelf hypervisors to virtualise cyber–physical systems’ servers and control devices. While the evaluation concludes that some of these hypervisors are already capable of dealing with typical real-time workloads, this cannot be generalised to all types of real-time systems.

A Novel Method for Authentication Using Chaotic Behaviour of Chua’s Oscillator in (n,k) Secret Shared Data Scheme for Secure Communication

In the current scenario, the utilization, and advancement of security algorithms in communication models have been increased. The use of chaotic circuit-based secure algorithms can give a new direction to develop a highly secure communication model. Security in any communication model can be provided by various available methods. The main feature of any security method is to introduce randomness at every step of the algorithm. Generally, the security algorithms deal with random numbers that are generated using a random number generator with predefined logic in the conventional secure communication model. In this article, the chaotic behavioral circuit is used to handle the randomness. The three main classifications of security control are management security, operational security, and physical security controls. The chaotic behavior of high-dimensional Chua’s circuit has been used to implement these three security controls. The challenging task is to design and deploy <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$(n,k$</tex-math> </inline-formula> ) secret sharing scheme using Chua’s oscillator. The novel authenticator code function based on Chua’s oscillator is proposed in this paper. This authenticator code function is having almost the same characteristics as of hash code, but with a higher degree of security.

Implementation and Security Test of Zero-Knowledge Protocols on SSI Blockchain

The problem of digital identity acquires more relevance every day in the eyes of a society that spends more and more time connected to the Internet. It has evolved throughout its history to reach a decentralized model known as Self-Sovereign Identity (SSI), which finds its natural tools in the blockchain technology and Zero-Knowledge Proofs (ZKPs). ZKPs, in this context, allow users to prove that their credentials are legitimate without revealing more information than is strictly necessary, and constitute one of the most promising areas of applied cryptography. In this work, an application is developed for the study of Zero-Knowledge Proof methods and, specifically, in their application for authentication in public-private key encryption systems. It focuses on the study of three ZKP protocols (Feige-Fiat-Shamir, Guillou-Quisquater, and Schnorr, which rely on the problems of large number factorizations and discrete logarithms for security) in the practical use-case where a prover wants to demonstrate knowledge of a private key for a public key without revealing the key itself. The application allows the user to modify the necessary parameters in each method to achieve a better understanding of their role in their safety and efficiency. Several types of attacks are carried out against the above-mentioned protocols to analyze their degree of security and what recommendations can be made to improve it.

Economic independence of the Republic of Moldova

The current international economic and political situation proves to us once more that economic independence is a fundamental premise for strengthening the independence, sovereignty and national integrity of the Republic of Moldova. Epidemiological, political, economic and energy tensions, which deeply disturb the contemporary world economy, create great problems for developing countries, with economies vulnerable to fluctuations in the world market, to tariff and non-tariff policies promoted by various states, organizations or international institutions. Increasing the degree of autonomy and national security in key areas such as energy, health care, agriculture and food, etc. represents a major objective for every state in the world.

A novel watermarking scheme for medical image using support vector machine and lifting wavelet transform.

Digital image watermarking has become a valuable tool for preventing unauthorized use and alteration of digital images due to technological advancements. A fundamental difficulty in digital image watermarking is to provide resilience against geometrical assault while retaining a sufficient degree of imperceptibility and security. This study presents an efficient authentication scheme for digital image watermarking on medical images benefiting from both techniques: Support Vector Machine (SVM) and Lifting Wavelet Transform (LWT). In this article, we use two strategies, where SVM is used first to separate the Region of Interest (ROI) from the Non-Region of Interest (NROI) in the medical image. Then LWT is applied to embed watermark information within the NROI part of the medical image (Cover Image). Moreover, we have applied a shared secret key to enhancing the robustness of the proposed scheme. The method is tested on an extensive image database to see how it performs under different situations. The research looked into the various experimental analyses to establish the acceptability of the existing scheme. The simulation is performed to measure the imperceptibility and robustness using various evaluation metrics.

Security Control of Sampled-Data T–S Fuzzy Systems Subject to Cyberattacks and Successive Packet Losses

This article investigates the security control problem of sampled-data Takagi–Sugeno (T–S) fuzzy systems subject to cyberattacks and successive packet losses. The cyberattack considered in this article is a stochastic deception attack. The packet losses under consideration occur in the sensor-to-controller and controller-to-actor channels, both of which are modeled as two independent Bernoulli processes. On this basis, a novel successive packet loss modeling method is proposed with some basic assumptions. By the exact discrete-time model approach, a discretized sampled-data T–S fuzzy model is first established by considering the probability characteristic of the deception attacks and successive packet losses in a unified framework. Based on the established mode, the sufficient conditions to guarantee the security degree are derived by the Lyapunov function approach. Furthermore, the fuzzy security controller is designed in view of linear matrix inequalities. Finally, a benchmark example is given to show the validity of the proposed approach.

Multilayer Smart Holographic Label with Integrated RFID for Product Security and Monitoring

Counterfeiting presents a major economic problem and an important risk for the public health and safety of individuals and countries. To make the counterfeiting process more difficult, and to ensure efficient authentication, a solution would be to attach anti-counterfeit labels that include a radio frequency identification (RFID) element to the products. This can allow real-time quality check along the entire supply chain. In this paper we present the technology optimized to obtain a multilayer holographic label with a high degree of security, patterned on a thin zinc sulfide film of a semi-transparent holographic foil rather than on the standard substrate for diffractive optical elements (metallized foil). The label is applied onto the product surface or packaging for anti-counterfeit protection. The developed multilayer structure contains various elements such as: a holographic background, nanotext-type elements, holographic elements, and an RFID antenna. The employed semi-transparent holographic foil offers the RFID antenna the possibility to transmit the electromagnetic signal through the label and thus to maximize the antenna footprint, achieving up to 10 m reading distance, with a 6 cm × 6 cm label, much smaller than the commercial standard (minimum 10 cm × 10 cm).

Degree of Information Security at Telecommunications Sector in Yemen

This study aimed to determine the degree of information security (confidentiality, integrity, availability) at telecommunications sector in Yemen. To achieve this, the descriptive method was followed and a questionnaire was used for collecting data from the study sample at telecommunications sector, which includes the six telecommunication companies and Public Telecom Corp. The sample was selected by the complete census method. The questionnaire forms were distributed to (356) participants; however, only (218) forms were valid for analysis. The data were analyzed by the Statistical Package for the Social Sciences (SPSS) program. The study findings revealed that the degree of information security at telecommunications sector in Yemen was high; the degree of confidentiality was the highest, followed by integrity, then availability. The study recommended that the information security should be reinforced, and procedures for protecting information from disclosure or modification, as well as activities for authorized access to information and services should be supported.&#x0D; Keywords: information security, telecommunication sector, Yemen.&#x0D;

Degree of Information Security at Telecommunications Sector in Yemen

This study aimed to determine the degree of information security (confidentiality, integrity, availability) at telecommunications sector in Yemen. To achieve this, the descriptive method was followed and a questionnaire was used for collecting data from the study sample at telecommunications sector, which includes the six telecommunication companies and Public Telecom Corp. The sample was selected by the complete census method. The questionnaire forms were distributed to (356) participants; however, only (218) forms were valid for analysis. The data were analyzed by the Statistical Package for the Social Sciences (SPSS) program. The study findings revealed that the degree of information security at telecommunications sector in Yemen was high; the degree of confidentiality was the highest, followed by integrity, then availability. The study recommended that the information security should be reinforced, and procedures for protecting information from disclosure or modification, as well as activities for authorized access to information and services should be supported.&#x0D; Keywords: information security, telecommunication sector, Yemen.&#x0D;

Cyber Security for Medical Image Encryption using Circular Blockchain Technology Based on Modify DES Algorithm

Recently, with the requirement for protecting the privacy of images transferred over the internet and media networks. The need to protect these images from hacking by unauthorized persons and from the manipulation of these images has become very important in this research, Block chain technology was used for its importance in cybersecurity. To maintain the confidentiality of the patient's medical data, as a result, to solve this problem requires increasing the strength of the key used in the encryption process, which is responsible for ensuring the security of the image .In this paper, it is proposed to use block chain technology with the Data Encryption Standard (DES) algorithm for the purpose of increasing the degree of security of the transmitted images by enhancing the key during the process of encrypting the transmitted images as well as increasing the degree of authentication between the sender and receiver. Experimental outcomes manifested that the security of encryption image that gained via the suggested algorithm is higher, performing the goal of protecting the information of medical image, as presented by the results obtained in Entropy, MSE, and PSNR.

Performance Comparison between RSA and El-Gamal Algorithms for Speech Data Encryption and Decryption

This article presents a performance comparison of two known public key cryptography techniques namely RSA (Rivest–Shamir–Adleman) and El-Gamal algorithms to encrypt/decrypt the speech signals during transferring over open networks. Specifically, this work is divided into two stages. The first stage is enciphering-deciphering the input speech file by employing the RSA method. The second stage is enciphering-deciphering the same input speech file by employing the El-Gamal method. Then, a comparative analysis is performed to test the performance of both cryptosystems using diverse experimental and statistical analyses for the ciphering and deciphering procedures like some known speech quality measures: histogram, spectrogram, correlation, differential, speed performance and noise effect analyses. The analyses outcomes reveal that the RSA and El-Gamal approaches are efficient and adequate for providing high degree of security, confidentiality and reliability. Additionally, the outcomes indicate that the RSA speech cryptosystem outperforms its counterpart the El-Gamal speech cryptosystem in most of ciphering/deciphering speech performance metrics.

Physical education and sports as a means of increase the level of motivation to the defense capacity of the state

Numerous studies prove the fact that in the modern world, it is possible to ensure the state's defence capability only through cooperation with various fields, including physical education and sports. One of the important aspects of ensuring a reliable degree of the state's national security is its own combat-ready armed forces, which should include persons with an appropriate level of physical training and health condition. Currently, taking into account the break out of the COVID-19 pandemic, an insufficient level of physical activity is observed among young children, which poses a serious problem and a threat to modern society and its defence capability in the future. Scientific substantiation of pedagogical conditions, namely methods and means aimed at ensuring the effective development of schoolchildren's motor qualities, and their attitude to physical culture and sports is one of the most important and promising tasks aimed at improving the defence system of Ukraine. The future of the state depends on the current generation. The state's defence capability is the ability to defend itself in case of armed aggression or armed conflict, which is why physical culture and sports play a decisive role in this process. Various studies provide evidence that the foundation that affects a country's defence capability is laid in childhood.&#x0D; The relevance of the mentioned issue lies in the formation and selection of the main pedagogical conditions for the popularization of physical education and sports as a means of the defence capability of the state and the protection of its sovereignty. Pedagogical conditions are a category defined as a system of certain forms, methods, means, material conditions, and real situations that are objectively developed or subjectively created, necessary to achieve a specific pedagogical goal.&#x0D; One of the universal and most effective means of defence capability is physical activity, a healthy lifestyle, physical culture and sports, which enable us to raise healthy and strong defenders. The level of Ukraine's defence capability in the future depends on the extent to which schoolchildren will be involved in motor activity, a healthy lifestyle, and physical education and sports.

OpenStackDP: a scalable network security framework for SDN-based OpenStack cloud infrastructure

Network Intrusion Detection Systems (NIDS) and firewalls are the de facto solutions in the modern cloud to detect cyberattacks and minimize potential hazards for tenant networks. Most of the existing firewalls, perimeter security, and middlebox solutions are built on static rules/signatures or simple rule matching, making them inflexible, susceptible to bugs, and difficult to introduce new services. This paper aims to improve network management in OpenStack Clouds by taking advantage of the combination of software-defined networking (SDN), Network Function Virtualization (NFV), and machine learning/artificial intelligence (ML/AI) and for making networks more predictable, reliable, and secure. Artificial intelligence is being used to monitor the behavior of the virtual machines and applications running in the OpenStack SDN cloud so that when any issues or degradations are noticed, the decision can be quickly made on how to handle that issue, being able to analyze data in motion, starting at the edge. The OpenStackDP framework comprises lightweight monitoring, anomaly-detecting intelligent sensors embedded in the data plane, a threat analytics engine based on ML/AI algorithms running inside switch hardware/network co-processor, and defensive actions deployed as virtual network functions (VNFs). This network data plane-based architecture makes high-speed threat detection and rapid response possible and enables a much higher degree of security. We have built the framework with advanced streaming analytics technologies, algorithms, and machine learning to draw knowledge from this data that is in motion before the malicious traffic goes to the tenant compute nodes or long-term data store. Cloud providers and users will benefit from improved Quality-of-Services (QoS) and faster recovery from cyber-attacks and compromised switches. The multi-phase collaborative anomaly detection scheme demonstrates an accuracy of 99.81%, average latencies of 0.27 ms, and response speed within 9 s. The simulations and analysis show that the OpenStackDP network analytics framework substantially secures and outperforms prior SDN-based OpenStack solutions for Cloud architectures.

A Secure and Efficient Cryptography System Based on Chaotic Maps for Securing Data Image in Fog Computing

The huge availability and prosperity of net technology results in raised on-line media sharing over the cloud platform which has become one of the important resources and tools for development in our societies. So, in the epoch of enormous data great amount of sensitive information and transmission of different media transmitted over the net for communication. And recently, fog computing has captured the world's attention due to their inherent features relevant compared to the cloud domain, But this push to head for many issues related to data security and privacy in fog computing which it's still under studied in their initial juncture. Therefore, in this paper, we will review a security system that relies on encryption as a kind of effective solution to secure image data. We use an approach of using chaotic map plus space curve techniques moreover the confusion and diffusion strategies are carried out utilizing Hilbert curvature and chaotic map such as two-dimensional Henon map (2D-HM) to assert image confusion with pixel level permutation .Also we relied in our system the way of shuffling the image with blocks and use a key for each block, which is chooses randomly to have a high degree of security. The efficiency of the proposed technique has been tested utilizing different investigations like analysis of entropy [7.9993], NPCR [99.6908%] and finally UACI [33.6247%]. Analysis of results revealed that the proposed system of image encryption technique has favorable effects, and can achieve a good results moreover it fights different attacks and by comparing with another techniques denote that our proposed fulfills high security level with high quality.

ОСОБЕННОСТИ ЦИФРОВИЗАЦИИ ОТНОШЕНИЙ, СВЯЗАННЫХ С ОБОРОТОМ ПРАВ НА НЕДВИЖИМОЕ ИМУЩЕСТВО

This article discusses the features of digitalisation of relations related to the turnover of rights to real estate. It is proved that relations in the sphere of real estate turnover expressed in digital form are based on fundamentally different legal principles and requirements, and should also take into account the emergence of additional legally significant interests of their participants. Digitalisation of relations related to the turnover of rights to immovable property should provide a high degree of legal security and certainty of the desired relationship.

A cyber-physical approach for development of Vacuum Control System on the EBMR plant

One of the great challenges of the Fourth Industrial Revolution is the transition to Cyber-Physical Systems, which allows for a high degree of adaptability, autonomy, reliability, usability and security. Cyber-Physical Systems-based control and automation is one of the possible ways to implement a smart factory. The cyber-physical approach, proposed in this paper is based on to the standard for Batch Control IEC-61512 (also known as S88) and the standard for development of distributed process measurement and control systems - IEC-61499. The suggested approach is implemented for development of vacuum control system, which is a part of the electron beam melting and refining plant producing metals and alloys with a high degree of purity.

Supply reliability analysis of natural gas pipeline network based on demand-side economic loss risk

• An evaluation method for the economic loss risk on the demand side of a natural gas pipeline network system in a certain period is proposed. • User priorities are considered when there is a shortage of gas in the pipeline network. • The economic consequences on the demand side are quantified in terms of the alternative energy costs. • The effect of supply sequence of users on gas supply reliability is described. Most studies on the natural gas supply reliability evaluation have reflected on whether the volume of gas supply to users is sufficient. However, different types of users suffer from the same natural gas shortage, the consequences of loss are different. The abundance of the supplied gas volumes does not reflect the actual losses incurred by users. Moreover, when a gas shortage occurs, the supply flow of different types of users is redistributed according to the supply order. Therefore, this study proposes an evaluation method for the gas supply reliability based on demand-side economic risk. The user's supply sequence is integrated into the cost matrix to optimize the distribution of the user's demand flow under gas shortage. A calculation model of the economic loss cost is established using alternative energy sources. Finally, a reliability index is established based on economic risk to evaluate the degree of supply security. The results showed that the reliability based on the economic risk assessment was slightly higher than that based on the gas quantity assessment. The reliabilities were 99.988% and 99.991%, respectively. The economic risk is reduced and the reliability is improved for the important users after considering the influence of the demand-side supply order.

Analysis and Implementation of 3-D Transpositional Cipher Algorithm Based on Rubik’s Cube Mechanism

The algorithms that are used for encrypting the text information for security purpose are referred as encryption algorithms. They are widely employed for the application on data transmission over networks. This is seen as a necessary part of data transmission since confidentiality and data privacy are important factors. Different encryption algorithms have different complexities, speeds of execution, and degrees of security. The Advanced Encryption Standard (AES) is one of the algorithms acknowledged by the U.S. government and other major organizations. The AES algorithm guarantees high security since there is no known public attack that can crack it. The Blowfish algorithm on the other hand is very fast but less secure. The encryption algorithms in the average zone of these two algorithms are highly useful for the transmission of general information among people. Such an algorithm also guarantees a good amount of speed as well as more security. Non-conventional algorithms such as transpositional cipher based on Rubik’s Cube mechanism can be seen as a viable option to use in common applications. These algorithms can be further deepened with the help of more complex key generation parts that can be done to enhance the security of the data. This paper focuses on analytically evaluating if this algorithm can be treated as a viable replacement in an application compared to other algorithms. Moreover, this research covers some pros and cons noted while evaluating.