Honey Encryption Research Articles

Blockchain-Enabled Secure Data Sharing with Honey Encryption and DSNN-Based Key Generation

Ensuring data confidentiality is a critical requirement for modern security systems globally. Despite the implementation of various access-control policies to enhance system security, significant threats persist due to insecure and inadequate access management. To address this, Multi-Party Authorization (MPA) systems employ multiple authorities for authorization and authentication, utilizing blockchain technology to store and access data securely, ensuring immutable and trusted audit trails. In this work, we propose a hybrid key-generation approach called the Identity and Attribute-Based Honey Encryption (IABHE) Algorithm combined with Deep Spiking Neural Network (DSNN) denoted by IABHE+DSNN for secure data sharing in a multi-party blockchain-based system. This approach incorporates various entities and multiple security functionalities to ensure data security. The data-sharing process involves several steps: initialization, authentication, initial registration, data protection, validation, and data sharing. Data protection is executed within the MapReduce framework, with data encryption performed using IABHE and key generation managed by DSNN. Experimental results demonstrate that the proposed IABHE+DSNN approach achieves a decryption time of 10.786 s, an encryption time of 15.765 s, and a key complexity of 0.887, outperforming existing methods.

A Hybridized Honey Encryption for Data Security using Residue Number System

Different encryption algorithms such as Advanced Encryption Standard (AES), Rivest, Shamir, Adleman (RSA) were proposed to protect the privacy of the data. However, most of these existing methods are vulnerable to a brute-force attack because the cipher text remains unintelligible until the original data is found. Consequently, this problem prompted researchers to introduce honey encryption (HE). HE helps to withstand the vulnerability of the encryption algorithms in brute force attacks making transmitted data more secure and efficient. Hence to reduce processing time we proposed a hybridized HE with Residue Number System. Traditional Moduli Set {2n-1, 2n, 2n+1} was used to generate the Key while Chinese Remainder Theorem (CRT), and HE technique were used for decrypting the data, based on the Distribution Transformation Decoder. Thus, anytime an attacker tries to access the data, so long the length of the guessed key is the same as the original key, the HE algorithm will generate meaningful but fake data, this helps to deter an attacker from further threat. The result showed that the proposed system was able to withstand brute force attacks with less processing time compared to other systems. N-values for the moduli set used were varied against encryption and decryption time. Comparing the obtained results with the existing system, the proposed system processing time was faster and more secure.

Towards secure IoT system from a smart city perspective: An optimized algorithm and implementation

AbstractSecuring Internet of Things (IoT) systems is crucial for maintaining the resilience and trustworthiness of smart cities. In this context, the routing protocol's efficiency is pivotal for large‐scale IoT applications. However, achieving dependable and energy‐efficient routing in wireless sensor networks (WSNs) poses significant challenges due to limited and non‐rechargeable node energy resources. Also, traditional approaches often fell short of ensuring robust security and efficient data transmission. Hence, the purpose of this research was to address these shortcomings by introducing the Blowfish Honey‐Improved Spotted Hyena Optimization (BONY‐ISHO) protocol aimed at bolstering the security and efficiency of clustering and data routing in WSNs. Firstly, it introduces blockchain technology to establish secure and authenticated clustering, ensuring that only legitimate cluster heads and member nodes can participate. This innovation significantly enhances network security. Secondly, our protocol incorporates a hybrid Blowfish‐Honey cryptographic technique for data protection within the Area of Interest (AOI). This dual‐layer security approach, comprising Blowfish encryption and Honey encryption for key management, guarantees robust privacy and security. Thirdly, we have optimized data routing through the Improved Spotted Hyena Optimization (ISHO) algorithm, extending the network's lifetime and conserving energy resources. Performance evaluations confirm the superiority of the BONY‐ISHO protocol and existing solutions. It achieves a higher packet delivery ratio (99.8%), increased throughput (45 000 kbps), reduced energy consumption (1.68 joules), and minimized latency (0.068 sec) when compared to traditional methods. These performance enhancements make the BONY‐ISHO protocol a compelling choice for securing and optimizing IoT‐based WSNs. Our study concludes that the BONY‐ISHO protocol is a highly effective solution for addressing security and efficiency challenges in IoT‐based WSNs. By combining blockchain‐based authentication, hybrid cryptography, and intelligent routing algorithms, we have achieved a comprehensive enhancement of network security and data transmission efficiency. The protocol's ability to thwart malicious nodes and optimize routing pathways ensures the integrity and reliability of IoT‐based WSNs.

Intelligent encryption with improved zealous method to enhance the anonymization of public health records in cloud

<p>In order to keep the cost of installing advanced encryption scheme (AES) hardware to a minimum and to hide the protected key from hackers, existing networks’ tactics are employed in this study. This is the biggest drawback of the present methods since there is no security while keeping the concealed key of the AES encryption method. The user is unable to remember all the AES keys since it is necessary to connect with several people using various AES keys. The suggested approach successfully counters both facet and brute force assaults. The advanced encryption method is the safest algorithm to utilize for trustworthy encryption, according to the findings. But the issue is that the advanced encryption scheme makes brute force attack less effective. Honey encryption is thus used. The recommended method encrypts the dataset after dataset anonymization to ensure privacy. An enhanced zealous technique is used to do anonymization when a middle dataset is created using the supplied key. After the dataset has been sorted, the dataset with the higher rank is the one that gets encrypted first. The user receives these datasets together with a decryption key for the encrypted records, enabling them to swiftly obtain the data they need.</p>

PASSWORD MANAGER SECURITY USING HONEY ENCRYPTION ALGORITHM AND HONEYPOT TECHNIQUE

Password managers are crucial tools for securely storing and managing multiple passwords. However, they can become targets for attackers attempting to gain unauthorized access to sensitive user data. In this paper, we propose an approach to password manager security by combining the Honey Encryption algorithm with the Honeypot technique. By implementing Honey Encryption on the authorization process of the password manager, we can effectively divert attackers to a honeypot, which contains a list of fake/honeyword passwords. The honeypot is designed to be high interaction, allowing us to gather valuable information about the attacker, such as their IP address and MAC address. This information can be crucial for further analysis and taking appropriate actions to mitigate the security breach. Our proposed system provides an additional layer of security to password managers, making them more robust against unauthorized access attempts.

A Review on Reading of Text Hidden in Image Using Steganography

We occasionally hear in the news about a breach or attack on certain well-known firms as though it were just another piece of news, but in reality, it is a serious problem because it involves the personal information of people, their money in trade, and the management of their businesses and projects. The honey encryption planner is going to be the topic of conversation for the duration of this essay. Honey Encryption is an encryption method that provides plain acceptable text in order to provide flexibility against brute-force attacks. Honey Encryption does this by encoding data in a way that is not easily broken. It is difficult to build a convincing message trap that is flawless enough to fool the striker even when he feels that he possesses the message in its original form. This is due to the fact that for each key that is used by a trespasser to decode a message, two key regions are open. The typo problem is the second difficulty, and it happens when a lawful user pushes the wrong key by accident. This causes the user to see what appears to be real false plain text even though the user did nothing wrong. Our goal is to come up with more foolproof ruses that are clever enough to prevent an intruder's attempts to discern the genuine meaning of what we are attempting to say through our communication. We also need new security methods because the attackers are looking for new ways to attack the systems, so we proposed a new way to protect messages and passwords well and make them difficult to break and take all of the possibilities of attack, including the brute-force, and then the data is hidden in an image with a public secret key. This solution was developed because the attackers are looking for new ways to attack the systems. This is due to the fact that the attackers are continuously searching for new ways to launch attacks on the systems.

INNOVATIVE APPROACH ENSURING SECURITY AND PRIVACY IN CLOUD COMPUTING

Many organizations had been keeping their data on the clouds. The trend nowhasbeen shifted from the pre-reservation of resources to store, manage and process data on clouds. In theinformation technology, the most challenging task isthe security of data and to avoid technical andinternal failures and attacks of unauthorized accesses. Consequently, the emphasis of this study wastoimplement Honey Encryption (HE)that offered more confidentiality and flexibility against the bruteforce attacks. HE ensured that the message that wasdecrypted with false keys, which looked like avalid key, so it was difficult to differentiate between authentic and unauthentic data. This studyprovidedthe confidentiality of data and maintained consistent relations integral in the cloud. Itempowered the user to perform computation and storage tasks withoutrevealing data innards.

HPAKE: Honey Password-Authenticated Key Exchange for Fast and Safer Online Authentication

Password-only authentication is one of the most popular secure mechanisms for real-world online applications. But it easily suffers from a practical threat - password leakage, incurred by external and internal attackers. The external attacker may compromise the password file stored on the authentication server, and the insider may deliberately steal the passwords or inadvertently leak the passwords. So far, there are two main techniques to address the leakage: Augmented password-authentication key exchange (aPAKE) against insiders and honeyword technique for external attackers. But none of them can resist both attacks. To fill the gap, we propose the notion of <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">honey PAKE (HPAKE)</i> that allows the authentication server to detect the password leakage and achieve the security beyond the traditional bound of aPAKE. Further, we build an HPAKE construction on the top of the honeyword mechanism, honey encryption, and OPAQUE which is a standardized aPAKE. We formally analyze the security of our design, achieving the insider resistance and the password breach detection. We implement our design and deploy it in the real environment. The experimental results show that our protocol only costs 71.27 ms for one complete run, within 20.67 ms on computation and 50.6 ms on communication. This means our design is secure and practical for real-world applications.

Secure user authentication and key agreement scheme for IoT device access control based smart home communications

The upcoming paradigm in Internet of Things (IoT) based applications is to afford effective interactional communication strategies between the devices in the smart home system. With the rapid growth of IoT services, the incorporation of security measures becomes a vital concern. The general issue faced in the security of the intercommunication between the devices and the users is improper authentication between them. Also, the access control of devices must be ensured with reliable features for establishing secure communication between the users and devices. Hence, we propose a protocol called Modified Honey Encryption using Inverse Sampling-Conditional Probability Model Transform (MHE-IS-CPMT) with Elliptic Curve Cryptography (ECC) to authenticate and perform the key agreement. Here, we employ the following steps: (1) Initialization, (2) Registration, (3) Login and data access Request, (4) Authentication and Session key agreement, and (5) Key update. At the commencement of the session, the users (u), Mobile Users (MU), and the other devices participating in the smart home system are initialized to the Home network head (H). Then, for the registration process, the user and the devices register them into H via the smart gateway (SG) by providing their own identities. The user details and the data about the devices are secured using the MHE-IS-CPMT with the ECC method. Next, during the login process, the registered users connect to the smart home system and send a request to SG to gain access to the devices. After verification, the user is authenticated and the system enables them to acquire the device access control by providing them with the private key of the device. In addition, the proposed system facilitates the secure key change procedure for the legitimate user to update their key whenever required. Hence, the performance of the model is secured against different types of attacks and also obtains more security features than existing methods.

A Composite Medical Image Optimization Scheme Using Honey Encryption and Antlion Algorithms for Secured Diagnostic Systems

Medical imaging technology is one of the most critical applications necessitating data protection, particularly if we need to keep track of any important patient information. This medical imaging system employs encryption and decryption. Using several cryptographic techniques, the security key was established to protect the data. Every network that sends and receives data needs to be secure in some way. In this paper, ALO along with the encryption algorithm honey is used to enhance the security of medical imaging technologies, the proposed study uses a variety of ways to protect important health information. In comparison to the existing one, the proposed honey algorithm attains better results. Further, the antlion optimizer uses random keys throughout the encryption and decryption. In the next step, the keys are remodeled using antlion optimization. After that, the updated key is optimized by analyzing every element and generating paths that trigger the traps and latching functions. The mean square error (MSE) is reduced to 1% and the peak signal-to-noise ratio (PSNR) is increased to 98% by using a hybrid strategy.

Honey Encryption Security Techniques: A Review Paper

From time to time, we hear in the news about a breach or attack on some well-known companies as just news, but it is a serious problem because it is the privacy of citizens, their money in trade and managing their businesses and projects. In this paper, we offer a review of the honey encryption planner. Honey Encryption is the encryption system that ensures flexibility versus the brute-force attack through the provision of plain reasonable text, but false for each key is invalid utilized by a trespasser to decrypt a message, two key areas are open it is difficult to create a compelling message trap that's perfect enough to deceive the striker even when he believes that he has the message in its original form. The next problem, the typo issue, where a valid phony plain text seem to a lawful user when he accidentally enters the wrong key. Our goal is to have more satisfaction disguised tricks that are perfect enough to prevent a trespasser from getting the original message, We also need new security methods because the attackers are looking for new ways to attack the systems, so we proposed a new way to protect messages and passwords well and difficult to break and take all the possibilities of attack, including the brute-force, and then the data is hidden in an image with a public secret key.

Honey Encryption Applied to Schnorr Signature Scheme

The security of any cryptosystem mostly depends on the reliability of the protection of secret keys used in it. In particular, key generation procedure must give a variety of keys so that they cannot be picked up by a brute-force attack. Honey encryption is used as an additional barrier of cryptosystems' keys protection to slow down a brute-force attack. As in the case of " white box cryptography'', different honey encryption schemes are considered depending on what the additional protection is aimed at. The need to additionally protect secret keys arises in remote access systems, when it is necessary to provide access to information to authorized users.The idea of encryption, which would provide adequate additional protection, is to build a system so that the attacker will not be able to recover the original text, even after searching through all possible options for passwords or keys. Based on the concept of lure systems, this system outputs messages that are difficult to distinguish from the true ones. Such messages are called honey, which, like the sweet substance, but in computer security terminology, " drag '' the opponent into a dead end.This article constructs schemes for additional key protection of the Schnorr Signature Scheme, describes the pseudocodes of the corresponding algorithms, analyzes the complexity of a brute-force attack.This scheme requires additional protection against the a secret key because storing it in the open is unreliable. With the proposed encryption algorythm, we can "hide'' a into a sequence of integers, and extract it back with the proposed decryption algorythm. If the sequence is entered by an attacker and does not contain a masked number a , decryption algorythm will return the result of multiplying the last number by the inverse q to the first prime number, if any, in the set, or the penultimate number in the set. Therefore, when trying to artificially pick up a secret key by a brute-force attack, the attacker will get a number similar to a but which he will not be able to use when trying to forge Alice's signature.

A Novel Hybrid Encryption Method Based on Honey Encryption and Advanced DNA Encoding Scheme in Key Generation

Nowadays, increased information capacity and transmission processes make information security a difficult problem. As a result, most researchers employ encryption and decryption algorithms to enhance information security domains. As it progresses, new encryption methods are being used for information security. In this paper, a hybrid encryption algorithm that combines the honey encryption algorithm and an advanced DNA encoding scheme in key generation is presented. Deoxyribonucleic Acid (DNA) achieves maximal protection and powerful security with high capacity and low modification rate, it is currently being investigated as a potential carrier for information security. Honey Encryption (HE) is an important encryption method for security systems and can strongly prevent brute force attacks. However, the traditional honeyword encryption has a message space limitation problem in the message distribution process. Therefore, we use an improved honey encryption algorithm in our proposed system. By combining the benefits of the DNA-based encoding algorithm with the improved Honey encryption algorithm, a new hybrid method is created in the proposed system. In this paper, five different lookup tables are created in the DNA encoding scheme in key generation. The improved Honey encryption algorithm based on the DNA encoding scheme in key generation is discussed in detail. The passwords are generated as the keys by using the DNA methods based on five different lookup tables, and the disease names are the input messages that are encoded by using the honey encryption process. This hybrid method can reduce the storage overhead problem in the DNA method by applying the five different lookup tables and can reduce time complexity in the existing honey encryption process.

A Secure IoT-Cloud Based Healthcare System for Disease Classification Using Neural Network

The integration of the Internet of Things (IoT) and cloud computing is the most popular growing technology in the IT world. IoT integrated cloud computing technology can be used in smart cities, health care, smart homes, environmental monitoring, etc. In recent days, IoT integrated cloud can be used in the health care system for remote patient care, emergency care, disease prediction, pharmacy management, etc. but, still, security of patient data and disease prediction accuracy is a major concern. Numerous machine learning approaches were used for effective early disease prediction. However, machine learning takes more time and less performance while classification. In this research work, the Attribute based Searchable Honey Encryption with Functional Neural Network (ABSHE-FNN) framework is proposed to analyze the disease and provide stronger security in IoT-cloud healthcare data. In this work, the Cardiovascular Disease and Pima Indians diabetes dataset are used for heart and diabetic disease classification. Initially, means-mode normalization removes the noise and normalizes the IoT data, which helps to enhance the quality of data. Rectified Linear Unit (RLU) was applied to adjust the feature weight to reduce the training cost and error classification. This proposed ABSHE-FNN technique provides better security and achieves 92.79% disease classification accuracy compared to existing techniques.

A Blockchain-Based Microgrid Data Disaster Backup Scheme in Edge Computing

In view of the problems of low security, poor reliability, inability to backup automatically, and overreliance on the third party in traditional microgrid data disaster backup schemes based on cloud backup, the edge computing is used to preprocess power big data, and a microgrid data disaster backup scheme based on blockchain in edge computing environment is proposed in this paper. First, the honey encryption (HE) technology and advanced encryption standard (AES) are combined to propose a new encryption algorithm HE-AES, which is used to encrypt the preprocessed data. Second, the Kademlia algorithm is embedded in the edge server to realize the distributed storage and automatic recovery of microgrid data. Finally, the traditional proof of authority (PoA) consensus mechanism is improved partially, and the improved PoA is used to make each node reach consensus and pack blocks on the chain. The scheme can not only realize the data disaster backup automatically but also has high efficiency of data processing, which can provide a new idea for improving the current data disaster backup schemes.

Multimodal Medical Imaging Security using Hybridization of Honey Encryption Algorithm with Binary Particle Swarm Optimization

Transmitting and receiving information through any network requires some sort of security. One of the major application requires data security is Medical Imaging System. Especially, for owning any significant information about patient details. This Medical Imaging System does the operation of encryption and decryption, for which the security key has been built to protect information using numerous cryptographic algorithms. Choosing an algorithm for secured information correspondence, to attain quality parameters such as higher privacy, confidentiality, integrity and effectiveness. This work proposed by hybridization of Honey Encryption Algorithm with Binary Particle Swarm Optimization to scramble the restorative medical data. Comparatively, this proposed algorithm reduces the Mean Square Error (MSE) to 1% and increased the Peak Signal to Noise Ratio (PSNR) value to 98.7%. The subsequent operation is performed using Binary particle swarm optimization for overhauling the keys.

RETRACTED ARTICLE: An improved source location privacy protection using adaptive trust sector-based authentication with honey encryption algorithm in WSN

A wireless sensor network is a set of sensor nodes used to identify the environment and the corresponding object. It collects all the data of the situation and transmits this detected data to the central node through a wireless network. However, some challenges are encountered in wireless sensor networks i.e., the efficient deployment of sensor nodes in an environment. Some of the issues are limited sources of energy, limited transmission bandwidth, short coverage, data distribution, data persistence, faulty node, and data security redundancy. The Discovery Configuration Protocol (DCP) has been signed for a period of time to monitor the applications. It is required for alternate use, which is very important to recreate the correct data source. Recently, Source Location Privacy (SLP) security at the WSN has attracted a way to prevent opponents from pursuing a backtracking strategy to capture the data source. Delivery of messages from different source nodes to sink nodes is done through an end-to-end location privacy process. With location-based services, data must be retrieved by users who do not have information about the data’s location. So, introduce a proposed Adaptive Trust Sector-Based Authenticated System (ATSAS), which is meant to evaluate the trust confidence value of each node with the help of agent sinks node. When the joining nodes discover their neighbors, they exchange information about the number of single-hop neighbors. The updated confidence value of the node is formed in the network algorithm. The first stage is done using the Honey Encryption (HE) for message authentication and packet encryption to provide security in WSN. These encryptions are making Distribution-Transforming Encoder (DTE) for space of the un-encrypted plain text message into the seed space of n-bit string. The output encryption point is the input to feedback for key generation. To the next level, both direct and indirect observations, such as its neighbor’s trust value, are calculated based on two sources of information. This protocol thereby increases secure communication in a hierarchical WSN. The trust rate control of the network at the source of the packet, which helps drive the time control mechanism. Such Network Control Point (NCP) system development methods provide security and reduce the occurrence of overload on distributed sensor nodes. The theoretical analysis and test results demonstrate that the proposed method improves security, reduces directional attacks, and increases the network’s longevity.

Integrated security for data transfer and access control using authentication and cryptography technique for Internet of things

The entire world is running behind the smart technology to accomplish the daily needs in a smart way such as smart farming, smart irrigation system, smart transportation system, smart medical management, handling of smart home appliances, smart security, etc. Smart technology is the soul property of internet services and accessing data from virtual servers, which raises the alarm of security vulnerability and threats. In recommended system we have focused on application layer security which are concerned with application interface and queue manager for service exchange. As application layer is the closest to end user and produces the big threat to the application platform it motivates us to recommend strong multilevel security system to identify the different activity of handlers and identify their roles to enroute of accessing confidential data services. Subsequently, our work is to assure that every user should have an authentication key with specific privileges to get the desired information. In focus, we see the security management by integrating the Kerberos authentication protocol with honey encryption technique to provide strong multilevel security system.

Algoritma Honey Encryption dalam Sistem Pendataan Sertifikat Tanah dan Bangunan di Universitas Malikussaleh

The management of Land and Building Certificates at Universitas Malikussaleh is still using a manual library in Biro Perlengkapan which contains some problem whereas it can be burned accidentally refers to fire case in 2017 in Rektorat Building at Universitas Malikussaleh. Given the problem faced by the staff in Biro Perlengkapan, the authors idea is to create a database-based data processing system, the authors designed an integrated information system which be able to anticipated such problem in the future and saving time to collecting important certificates such Land and Building Certificates at Universitas Malikussaleh and protecting them with Honey Encryption algorithm. The information system based on desktop and works as a client-server system. The result of this research provide that the honey encryption algorithm can protect the data and it can solve the problem in management system of land and building certificates.

Secured Access and Security Issues of Maintenance for Cloud Database

Users are using the cloud database services for storing there important data in order to utilized cloud services. Data confidentiality remains one of the main concerns and the major barrier to the development of cloud services. But at the same time users also think about “whether there data is in secured hands and how it is protected from the outside world?” In order to make sure users that there data is in safe hands, cloud database are using more secured mechanism for accessing the cloud database. In order to achieve the goal of security we are using AES and honey encryption (HE) algorithm for strong authorization. Before authorization we need to have authentication of the users. We are using keystroke dynamics as a biometrics authentication and second one as color code authentication. Cloud databases should also be properly maintained from security point of view. For the different levels of the cloud database we have find out the security issues which provide help in maintenance of cloud database. By implementing these issues the security of the cloud database will be more increased.