Distributed Security System Research Articles

AntibIoTic: The Fog-enhanced distributed security system to protect the (legacy) Internet of Things

The Internet of Things (IoT) is evolving our society; however, the growing adoption of IoT devices in many scenarios brings security and privacy implications. Current security solutions are either unsuitable for every IoT scenario or provide only partial security. This paper presents AntibIoTic 2.0, a distributed security system that relies on Fog computing to secure IoT devices, including legacy ones. The system is composed of a backbone, made of core Fog nodes and Cloud server, a Fog node acting at the edge as the gateway of the IoT network, and a lightweight agent running on each IoT device. The proposed system offers fine-grained, host-level security coupled with network-level protection, while its distributed nature makes it scalable, versatile, lightweight, and easy to deploy, also for legacy IoT deployments. AntibIoTic 2.0 can also publish anonymized and aggregated data and statistics on the deployments it secures, to increase awareness and push cooperations in the area of IoT security. This manuscript recaps and largely expands previous works on AntibIoTic, providing an enhanced design of the system, an extended proof-of-concept that proves its feasibility and shows its operation, and an experimental evaluation that reports the low computational overhead it causes.

Performance Improvement of Secret Key Generation Scheme in Wireless Indoor Environment

The Secret Key Generation (SKG) scheme that exploits the reciprocity and uniqueness of wireless channel between two users plays a significant part in a new increasing distributed security system. The scheme performance can be distinguished based on the low value of Key disagreement Rate (KDR), the high value of Key Generation Rate (KGR), as well as the fulfillment of the NIST randomness standard. The previous SKG scheme has a high KDR due to a direct quantization of a measurement result of the Received Signal Strength (RSS). To overcome the above issue, we conduct a pre-processing of measurement result before quantization with the Kalman method. The pre-process is carried out to improve the channel reciprocity between two legitimate users with the objective to reduce the bit mismatch. Through an experiment, we propose a new quantization scheme called a Modified Multi-Bit (MMB) that uses a multi-bit system on every level of quantization. The test results show that the proposed combination of preprocessing and the MMB scheme has a better performance compared to the existing schemes in terms of KDR and KGR. The Secret Key generated by our scheme also fulfills the NIST randomness standard.

Non-Repudiation-based Network Security System using Multiparty Computation

Security has always been a prominent concern over the network, and various essential requirements are required to cater to an efficient security system. Non-repudiation is a requirement about the non-deniability of services acting as a bridge between seamless relaying of service/data and efficient security implementation. There have been various studies carried out towards strengthening the non-repudiation system. There are certain pitfalls that render inapplicability on dynamic cases of vulnerability. The conventional two-party non-repudiation schemes have been widely explored in the existing literature. But this paper also advocates the adoption of multi-party computation, which has better feasibility toward strengthening a distributed security system. The current work presents a survey on the existing approaches of non-repudiation to investigate its effectiveness in the multi-party system. The prime aim of the proposed work is to analyze the current research progress and draw a research gap as the prominent contribution of the proposed study. The manuscript begins by highlighting the issues concerning multi-party strategies and cryptographic approaches, and the security requirements and standardization are briefly discussed. It then describes the essentials of non-repudiation and examines state-of-the-art mechanisms. Finally, the study summarizes and discusses research gaps identified through the review analysis.

IoT based Distributed Security System

IoT based Distributed Security System

A novel approach for RFID based distributed security against physical access of university data

A customized distributed security system has been designed by using RFID to achieve a reliable high-end communication system for universities. In this work, an overview of the existing problems related to distributed security has been introduced first and then the proposed systems are designed using RFID in detail. The problems related to security breeching in the universities are very common. A detailed study has been done considering the security breaching and access in case of the universities. Keeping in mind the present scenario of high-end securities for the corporate industries, banks etc., we have designed a distributed security system using Low frequency RFID technology for universities. The system has been practically implemented in laboratory, and the experimental data shows that this system can be used widely in the universities efficiently to maintain the confidentiality

Developing Agent-Oriented Video Surveillance System through Agent-Oriented Methodology (AOM)

Agent-oriented methodology (AOM) is a comprehensive and unified agent methodology for agent-oriented software development. Although AOM is claimed to be able to cope with a complex system development, it is still not yet determined up to what extent this may be true. Therefore, it is vital to conduct an investigation to validate this methodology. This paper presents the adoption of AOM in developing an agent-oriented video surveillance system (VSS). An intruder handling scenario is designed and implemented through AOM. AOM provides an alternative method to engineer a distributed security system in a systematic manner. It presents the security system at a holistic view; provides a better conceptualization of agent-oriented security system and supports rapid prototyping as well as simulation of video surveillance system.

A Trust Management System Through Ambient Communication for VANET

In a VANET, the network topology is constantly changing. In fact, it requires distributed self-organizing security systems. In this article, we propose a distributed self-organizing trust management system for vehicular ad-hoc networks (VANETs), given the disastrous consequences of acting on false information sent by the malicious peers in this context. Our application can verify the correctness of alert messages sent by other vehicles about road accident. We opted to apply ambient communication technology to provide a self-organized network. We introduce the concept of “ambient intelligent vehicle” that consists in integrating ambient intelligence features in VANET. Vehicles are considered as intelligent agents that communicate in an ambient environment. Such vehicles are able to control and to detect false warning based on trust management system depicted in this article. Vehicles are arranged into clusters in order to facilitate communication and to reduce overhead. We model how vehicle operate using UML state diagram. DOI: http://dx.doi.org/10.11591/ij-ict.v2i2.2980

A Novel Security Architecture for Peer-to-Peer IMS System

Recently, some proposals suggest to use a peer-to-peer network instead of servers to facilitate SIP user registration and location in IMS communication systems. Due to the lack of central authority, security issue becomes one of the main problems in such P2P IMS systems. In this paper, we propose a novel security architecture for P2P IMS system. By using this architecture, our P2P IMS system becomes a fully distributed secure system in which there is not a central server indeed. Furthermore, our system is a scalable system which is capable of anonymous yet accountable real time communication based on SIP protocol which enables the system compatible with any existing IMS systems.

Special Issue Editorial: New technologies of distributed systems

Special Issue Editorial: New technologies of distributed systems

Information flow control of component‐based distributed systems

SUMMARYNoninterference is a strong security policy that enforces confidentiality and integrity. Many solutions are proposed in the state of the art for verifying this policy in programs, but few tools are proposed to implement it. In this paper, we define a high‐level model called Component Information Flow, and we develop the tools that simplify distributed secure system development and deployment.The developer focuses on developing the functional part of his or her system and defines his or her system security properties by using a high‐level configuration. When this configuration is validated, that is, no security leak is detected, the system security code is generated. To validate and demonstrate the effectiveness of our approach, we apply the Component Information Flow tools to a classical Web service use case. Copyright © 2012 John Wiley & Sons, Ltd.

Research and Improvement on PXE Security of Dynamic Distributed Network of Non-Fixed Disk

PXE(Pre-boot Execution Environment) tech. has played great roles for the powerful compatibility and ease for maintenance. Internet requirement for data safety are more and more important while PXE methods is lacked. The applies diskless tech and dynamic distributed security system on data storage has been analyzed. According the PXE tech. improvement and design thus reduce the risk of letting out and dependability of the network data under the strict data management. The function may bring huge economic benefit with the popularization of the applications and low maintenance cost.

Dynamic Distributed Information Security System Based on Multi-Agent

With the growing population of using public network, network intrusion events happened more frequently. Aim to the drawbacks of traditional information security methods, the multi-agent system model was proved to be very promising. This paper proposes a dynamic distributed information security system based on multi-agent that dynamically integrates all distributed information security facilities to achieve efficiently collaborative information security. In order to validate this proposed approach, the authors give the material experiment test in the end of this paper. The final experiment result suggests that, this proposed approach is feasible, correct and valid.

An Agent based Distributed Security System for Intrusion Detection in Computer Networks

Intruders damage or steal valuable information by either bypassing security tools or penetrating through them, necessitating the need to detect such intrusion attempts especially in case of multi-event based distributed attacks spanning over a considerable amount of time. In this paper ecology of agents is being suggested that uses class hierarchy to define complex intrusions. The source and target containers produced thereof are analyzed for possible intrusion attempts thereby rendering the proposed system self-monitoring, robust, secure and reliable.

Experiences in Design and Development of a Highly Dependable and Scaleable Distributed Security, Alarm and Control System

The PHILIPS CSS-System (Compilable Security, Alarm and Control System) is developed and maintained by the Department of Information Technology of the Austrian Research Centre Seibersdorf, which is active in the field of designing and developing software for systems with high safety, reliability or availability requirements, as well as in the process of IT-standardization.Many dependability issues had to be tackled with in designing the system. The primary goals of the distributed security system are high availability, reliability and maintainability (especially scalability, ie. open to many types of system architectures within any topology (network, redundancy, diversity), and functional extendability). Maintenance problems arise especially with modifications in a distributed and redundant/diverse envi ronment.Additionally, safety and security issues have to be considered carefully, depending on the type of application. The system combines multiprocessing with functional distribution, configurability with a high degree of software ergonomy ("safe" human interface, reducing human mistakes in operating, maintaining and configuring an application by the customer/user). Standards have to be applied on all system levels where such are available - and applicable in practice !

A practical distributed secure system

The Distributed Secure System project being undertaken by the Royal Signals and Radar Establishment aims to provide distributed general-purpose computing systems capable of enforcing a variety of multi-level security policies. The project relies on the concept of synthesizing secure systems from standard untrusted components. These untrusted components are interfaced via small trustworthy security mechanisms to one or more local or wide area networks. The components are linked together in such a way that the total system is not only demonstrably secure, but is also very flexible and cost effective.

A Distributed Secure System

When the individuals concerned are members of an organization, however, that organization may circumscribe their discretionary power to grant access to information by imposing a mandatory security policy to safeguard the interests of the organization as a whole. The most widely used scheme of this type is the multilevel security, or MLS, policy employed in military and government environments[1]. Here, each individual is assigned a clearance chosen from the four hierarchically ordered levels, Unclassified, Confidential, Secret, and Top Secret, and each item of information is assigned a classification chosen from the same four levels. The fundamental requirement is that no individual should see information classified above his clearance.