Illegal Data Research Articles

Dynamically redactable blockchain based on decentralized Chameleon hash

The immutability is a crucial property for blockchain applications, however, it also leads to problems such as the inability to revise illegal data on the blockchain and delete private data. Although redactable blockchains enable on-chain modification, they suffer from inefficiency and excessive centralization, the majority of redactable blockchain schemes ignore the difficult problems of traceability and consistency check. In this paper, we present a Dynamically Redactable Blockchain based on decentralized Chameleon hash (DRBC). Specifically, we propose an Identity-Based Decentralized Chameleon Hash (IDCH) and a Version-Based Transaction structure (VT) to realize the traceability of transaction modifications in a decentralized environment. Then, we propose an efficient block consistency check protocol based on the Bloom filter tree, which can realize the consistency check of transactions with extremely low time and space cost. Security analysis and experiment results demonstrate the reliability of DRBC and its significant advantages in a decentralized environment.

Legal aspects of children’s privacy on the Internet: balance between protection and freedom

The article is devoted to the study of legal aspects of protection of personal data of minors in the digital environment. In today’s world, the development of information technologies and the widespread use of the Internet create new challenges for the legal system, in particular with regard to the protection of personal data of children and adolescents. The article analyzes national and international legislation regulating the protection of personal data of minors, in particular the provisions of the General Data Protection Regulation (GDPR) and Ukrainian legal acts. Different approaches to giving consent to the processing of personal data by minors are highlighted, in particular, the role of parents or legal representatives in this process. Existing methods of ensuring consent, such as double opt-in, as well as challenges associated with the practical implementation of these methods are considered. The article also outlines the risks children face online, including illegal data collection, including cyberbullying, phishing, child trafficking and other threats. The need to implement effective legal mechanisms for the protection of children on the Internet, which ensure both safety and freedom of information activity, is emphasized. Ensuring the security of personal data of minors in the digital environment should become one of the priority tasks of modern legal regulation, which requires a comprehensive approach and integration of the best international practices. The author concludes that the effective protection of children’s personal data requires a balanced approach that would combine a high level of security with respect for the rights and freedoms of the child in the digital environment. Increasing the level of digital literacy among children and their parents, as well as creating an appropriate legal infrastructure, are important factors that will contribute to reducing risks in the digital environment. The integration of such approaches into the national legal system should become a priority to ensure the sustainable development of the information society. Successful implementation of these initiatives will not only reduce potential threats to children, but also contribute to the formation of a safe and responsible information space for future generations.

Concordit: A credit-based incentive mechanism for permissioned redactable blockchain

Malicious attacks and the introduction of illegal data put blockchains at risk, and blockchain governance is gaining increasing attention. The redactable blockchain technology has become a mainstream solution for blockchain governance. However, a low completion rate for redaction tasks limits current redactable blockchain technologies, primarily due to the absence of an effective incentive mechanism for participants. This gap underscores the urgent need for designing and implementing robust incentive mechanisms in redactable blockchains. Incentive mechanisms can motivate and guide entities to participate and perform desired behaviors through awards and punishments. This paper proposes Concordit, the first deployable credit-based incentive mechanism for redactable blockchains. Its purpose is to encourage submitters to submit legal redaction requests, modifiers to perform legal redaction operations, and verifiers to maintain the behavior consistent with the consensus algorithm. In the context of permissioned blockchains, Concordit utilizes a credit value system for awards and punishments. Additionally, we use a game theory-based mechanism to analyse and model participants’ behavior utilities in the redactable blockchain. Meanwhile, we evaluate the credibility of nodes by combining their static initial credit values and dynamic behavior-related credit values. This system prioritizes high-credibility nodes as participants, thereby enhancing the completion rate for redaction tasks. Finally, the implementation and performance evaluation of our Concordit incentive mechanism demonstrate its effectiveness and practicality.

An Approach to Secure Data Sharing in the Internet of Things Using Blockchain- Based Proxy Re-Encryption

The prevalence of data sharing has increased with the rise in popularity of cloud computing and the Internet of Things (IoT). However, ensuring data security is difficult because of the possible negative consequences of illegal data usage. This study presents a method for ensuring the secure transmission of data in cloud environments: proxy re-encryption. The identity-based encryption method enables data owners to transfer encrypted data to the cloud. Subsequently, a proxy re-encryption framework enables authorized individuals to access the data. To surpass the limitations of IoT device resources, we utilize an edge device as a proxy server to transfer computationally intensive tasks to a separate device. By utilizing the advantages of information-centric networking, we can optimize network capacity and enhance service quality by efficiently distributing cached content across the proxy. This method decreases bottlenecks in centralized systems while providing precise control over data access. The proposed work demonstrates the effectiveness of the strategy in ensuring data security, confidentiality, and integrity through thorough security research and plan review.

DNA Cryptography for Enhanced Data Storage Security in Cloud Environments

Despite the persistent security challenges inherent in cloud systems, a distributed cloud environment necessitates an access control model that is contextually aware to effectively manage these challenges. This model should incorporate a role activation process based on the user's contextual information. Within this role activation process, the rationale behind data collection and usage is disclosed, enabling administrators to establish context-based policies. Consequently, role permissions are dynamically activated based on the association of roles with context. To mitigate complications in the role-based access control model, users are categorized into classes or groups, each with its own access control standards. Access to specific resources is determined by the user's identity upon request. Traditional access control models often fall short in cloud environments due to their inability to address all aspects of the diverse entities, resources, and users present. In the proposed access control system with perception reasoning, entities are expanded using Extensible Access Control Markup Language (XACML), while a trust module monitors user behavior dynamically, detecting and restricting malicious users attempting illegal data access. This includes assigning an identity tag to malicious users, which involves task and data classification along with database tagging.

A Data Attack Detection Framework for Cryptography-Based Secure Aggregation Methods in 6G Intelligent Applications

Eagerly anticipated, 6G networks are attributed with a variety of characteristics by researchers. A pivotal characteristic of 6G networks is the deep integration of sensing and networking, along with intelligent network applications operating on top of this infrastructure. To optimally harness the data collected by sensors distributed across various locations, the training paradigm of the new generation of 6G intelligence applications aligns naturally with the federated-learning paradigm. The exposure of gradients in federated learning to inversion attacks is a critical concern. To address this, cryptography-based secure aggregation methods are commonly implemented to protect the privacy and confidentiality of gradients. However, the semantic meaninglessness of encrypted data makes it difficult to assess the correctness, availability, and source legitimacy of participants’ data. In this paper, we propose a data attack detection framework for cryptography-based secure aggregation methods in 6G intelligence applications that address the security vulnerabilities associated with encrypted data obscurity. We employ a suite of encrypted-data-auditing techniques to prevent data-aggregation errors, data poisoning, and illegal data sources. Additionally, we have compared a series of promising security methods, analyzed, and provided recommendations for the most suitable security approaches in specific 6G scenarios.

Development of Modified ECC-Based Secured FoG-Assisted Healthcare Data Management System in IoT-Enabled WSN

The Internet of Things (IoT) consists of a massive count of connected devices with different sensing support, particularly in medical health constraints sensing. In these summaries, secure communication and data collection to centralized servers is rather difficult for preventing the occurrence of diverse attacks for illegal data access. To tackle these problems, this task plans to design and implement the FoG-based secure data management system in IoT-WSN using adaptive encryption and decryption processes. As the FoG server is away from the corresponding aggregator node, it is transmitted via the other nodes using the proposed modified Elliptic Curve Cryptography (ECC)-based encryption process. For secured data transmission the designed method undergoes two main stages as message receiving stage, and the message-extraction stage. The hybridized meta-heuristic algorithm termed Jaya-Galactic Swarm Optimization (J-GSO) is used for modifying the ECC with an optimized key. From the simulation findings, the performance of the suggested scheme at the data size of three bytes is 3.08%, 3.22%, 3.65%, and 3.33% better than the MFO-m-ECC, PSO-m-ECC, GSO-m-ECC, and JA-m-ECC at the ECC curve variation of “secp192r1”. Experimental results reveal the superiority of the designed method when tested with baseline schemes regarding time complexity, space complexity, and cost function.

UAV Detection Using Reinforcement Learning.

Unmanned Aerial Vehicles (UAVs) have gained significant popularity in both military and civilian applications due to their cost-effectiveness and flexibility. However, the increased utilization of UAVs raises concerns about the risk of illegal data gathering and potential criminal use. As a result, the accurate detection and identification of intruding UAVs has emerged as a critical research concern. Many algorithms have shown their effectiveness in detecting different objects through different approaches, including radio frequency (RF), computer vision (visual), and sound-based detection. This article proposes a novel approach for detecting and identifying intruding UAVs based on their RF signals by using a hierarchical reinforcement learning technique. We train a UAV agent hierarchically with multiple policies using the REINFORCE algorithm with entropy regularization term to improve the overall accuracy. The research focuses on utilizing extracted features from RF signals to detect intruding UAVs, which contributes to the field of reinforcement learning by investigating a less-explored UAV detection approach. Through extensive evaluation, our findings show the remarkable results of the proposed approach in achieving accurate RF-based detection and identification, with an outstanding detection accuracy of 99.7%. Additionally, our approach demonstrates improved cumulative return performance and reduced loss. The obtained results highlight the effectiveness of the proposed solution in enhancing UAV security and surveillance while advancing the field of UAV detection.

Sensor Data Protection Through Integration of Blockchain and Camouflaged Encryption in Cyber-Physical Manufacturing Systems

Abstract The advancement of sensing technology enables efficient data collection from manufacturing systems for monitoring and control. Furthermore, with the rapid development of the Internet of Things (IoT) and information technologies, more and more manufacturing systems become cyber-enabled, facilitating real-time data sharing and information exchange, which significantly improves the flexibility and efficiency of manufacturing systems. However, the cyber-enabled environment may pose the collected sensor data with high risks of cyber-physical attacks during the data and information sharing. Specifically, cyber-physical attacks could target the manufacturing process and/or the data transmission process to maliciously tamper the sensor data, resulting in false alarms or failures in anomaly detection in monitoring. In addition, cyber-physical attacks may also enable illegal data access without authorization and cause the leakage of key product/process information. Therefore, it becomes critical to develop an effective approach to protect data from these attacks so that the cyber-physical security of the manufacturing systems can be assured in the cyber-enabled environment. To achieve this goal, this paper proposes an integrative blockchain-enabled data protection method by leveraging camouflaged asymmetry encryption. A real-world case study that protects the cyber-physical security of collected sensor data in additive manufacturing is presented to demonstrate the effectiveness of the proposed method. The results demonstrate that malicious tampering could be detected in a relatively short time (less than 0.05 ms), and the risk of unauthorized data access is significantly reduced as well.

Eğitim Kurumlarında Örgütsel İletişimin Fonksiyon ve Yöntemlerinin Değerlendirilmesi

English French and the origin of the definition of communication in our language, corresponds to the meaning of the word communication in French and English. The origin of the word means to share, to make common, and one of the goals of communication is to consent. The only purpose of being able to reach a partnership is to share feelings, thoughts and information with each other. The definition of communication in a general sense is the process of Deciphering meanings between individuals who interact with each other. Information is shared spontaneously between individuals in institutions arising from the obligation to work Decently in business life. Organizational communication, on the other hand, covers the flow of legal and illegal data in an open and step-type system. Formal communication is the communication system that occurs in accordance with the organizational structure of the enterprise. The bond between the subordinate and superiors gains functionality depending on formal communication. Dec. The purpose of formal communication is to obtain the necessary information for the group, to create the desired attitude for employees to be satisfied with the job, and to transfer information to the relevant people when necessary. The formal communication system shows the channels that are connected with the hierarchical structure of the organization and transfer information with the environment. Non-formal communication; natural groups within the organization, friends, family, etc. it shows the organizational communication channels that work in the direction of satisfying their needs and are based on personal relationships. Communication related to form has the role of ensuring the connection and coordination between the different organs, elements and tasks of the organization, as well as ensuring organizational integrity, determining responsibilities and fulfilling tasks. Dec. Organizational communication is not maintained only through formal channels created within the framework of a hierarchical order determined by the organization. Apart from this formal structure, another of the channels that provide organizational communication is non-formal communication channels. It is impossible to block non-formal communication, it is really important that the manager manages to turn this communication channel in favor of business purposes. The good functioning of formal communication channels is not always sufficient for organizational communication. No matter how well these channels work, non-formal communication will definitely arise due to issues arising from the need to socialize, such as friendship, sharing interests in every environment where people are together Key Words: Educational Institutions, Organizational Communication, Communication Function, Communication Method

Threat-Based Simulation of Data Exfiltration Toward Mitigating Multiple Ransomware Extortions

Network-based attacks and their mitigation are of increasing importance in our ever-connected world. Often network-based attacks address valuable data, which the attacker either encrypts to extort ransom or steals to make money reselling, or both. After the infamous WannaCry and NotPetya ransomware attacks in 2017, companies stepped up their cyber defenses. More emphasis was placed on backup and recovery processes so that even when files were destroyed, organizations had copies for quick recovery. However, cyber criminals have also adapted their methods. Instead of simply encrypting files, double extortion ransomware now exfiltrates the data first, before encrypting it. As a consequence, the early detection and prevention of data exfiltration is one of today’s major challenges of institutions connected to the Internet. If attempts to illegal data exfiltration are successfully detected, the attacked institution should address a probable subsequent encryption attack step as well. In particular, valuable business assets must be checked for unauthorized access and need to be protected. However, due to the bulk of network traffic and persistent data, automation is a key requirement to successfully defend contemporary threats. The main goal of this article is to present a concept and its initial evaluation to achieve automation of data exfiltration mitigation in a targeted manner. Our concept consists of two main steps. Based on recognized international approaches used in cyber threat intelligence, an automatic procedure on the base of the MITRE Adversarial Tactics, Techniques Common Knowledge (ATT&CK) framework for deriving current threats with respect to data exfiltration is presented in the first place. In the spirit of the Digital Threats: Research and Practice (DTRAP) forum, a practical approach is chosen in addition to the theory in this manner. Our evaluation reveals that we are able to automatically identify the most relevant recent risks of unauthorized data exfiltration. In our second step, we present the design of a simulation gear based on the attacks extracted from the MITRE ATT&CK framework. The aim is to simulate the greatest threats before they actually occur in the operational environment. The strict focus on the threats of data exfiltration characterizes our solution and makes our approach an ideal addition to existing solutions. We provide an evaluation of this initial simulation concept and its underlying technology for the implementation to show that we are on the right track.

A Robust Integrated Watermarking Algorithm for Vector Geographic Data Copyright Protection

Vector geographic data play an important role in the natural resources and environment sector as well as in other location information services. This is also one of the types of data where the cost to create it is relatively large because of the difficulty in surveying, collecting, and authorizing. The rapid development of the Internet has created many advantages in the distribution, exploitation, and use of vector geographic data, but it also gives rise to many problems such as duplication, redistribution, forgery, and illegal data use. The theft on the Internet is becoming more and more sophisticated and the number of violations is increasing, showing the urgent need to research and develop an effective solution to protect the copyright of vector geographic data and prevent them from being illegally collected and used. Among the major studies and solutions, digital watermarking emerges as an effective method and is an active research area for copyright protection. Towards a good solution for copyright protection of vector geographic data, our study proposes a new algorithm with three main contributions, including: (1) generating short, pseudo-random meaningful watermarks to in-crease robustness and to enable automated as well as visual manual verifying; (2) building a uniformly distributed mapping between the vertex coordinates and the watermark bit indexes to increase the robustness of the watermarks; and (3) integrating two types of watermarks, namely, spatial domain-based watermarking and zero-watermarking to be resistant to most common attacks on geographic vector data. The algorithm works on all types of vector geographic data, including points, polylines, and polygons.

Towards Forensics Investigation of Blockchain-based Healthcare Applications

Blockchain, an emerging technology benefits the new technological world from its features such as immutability, transparency, and decentralization. The diversity of its domain is from e-commerce, health care, real estate, and enterprise to NFT markets, voting, and digital currency trading. The underlying blockchain features make auditing blockchain applications a challenging task. In this paper, we thoroughly analyze the general challenges faced in blockchain forensics, application-specific challenges, and challenges with respect to public and private blockchains. The aim of this paper is to highlight the challenges faced during the forensics of blockchain-based applications. For this, we took a healthcare system, introduced a contract vulnerability in it, and defined two scenarios for attack depending on that vulnerability. One that allows an attacker to make a malicious transaction directly and the other in which the attacker first gives itself access and then adds malicious transactions. The attacks are generated just to analyze the difficulty level of forensics in blockchain applications. To achieve our goal, we performed log analysis for both scenarios and specified the challenges faced during the analysis. Our experiment shows that due to some blockchain-specific features such as anonymity, identification of malicious entities in the system sometimes becomes a hectic challenge. This research benefits the auditors by highlighting the forensics challenges and auditing issues so they can work on these areas to identify the attackers and illegal data modifications accurately in blockchain applications. Experimental results confirmed that our proposed technique enabled efficient forensics investigation of events inside blockchain-based healthcare applications.

Keamanan Informasi Data Dalam Pemanfaatan Teknologi Informasi Pada PT Bank Central Asia (BCA)

In this era of very rapid growth of information systems, the security of information is something that must be considered, because if information can be accessed by unauthorized or irresponsible people, then the accuracy of the information will be doubted, it will even become information that is healed. Basically a secure system will protect the data in it such as user assistance (user identification), user authentication (user authentication), user authorization (user authorization). Several possible attacks (Hacking) that can be carried out, such as Intrusion, denial of services, joyrider, vandals, piracy, sniffing, spoofing and others. There are many kinds of threats to information systems, including: data theft, illegal use of systems, illegal data destruction, illegal data modification, system failures, human error (HR-human resources), natural disasters. The purpose of information security is prevent threats to the system and detect and repair damage that occurs to the system.

A Low Financial Literacy On The Desire To Do Online Loans (Case Study Of Muhammadiyah Surabaya University Students)

Purpose:The purpose of this study is to find out the Low Financial Literacy Against the Desire to Make Online Loans (Case Study of University of Muhammadiyah Surabaya Students).Methodology:The type of research used in this study is a qualitative method. In this qualitative method, the researcher conducts research by considering the situation and condition of the respondents. The data collection method used is by conducting interviews and documentation. Interviews were conducted with 90 management students at the University of Muhammadiyah Surabaya. Meanwhile, the following data collection method is the method of documentation or collecting information in journals.Findings:The results of the study showed that there were still many students who had a lack of understanding. Then, many students do not understand the impact caused by the dissemination of personal information data. Then, many students have not been able to calculate the risk that will be obtained if the payment exceeds the maturity date or even the risk of spreading illegal data.Implication:This study underscores the importance of equipping students with the necessary skills to navigate financial decisions responsibly. It can include educating them about the implications of sharing personal information, understanding the risks associated with late payments, and recognizing the dangers of spreading illegal data.

NÃO HÁ FELICIDADE SEM AFLIÇÃO: IMPLEMENTAÇÃO DE SISTEMAS DE PROTEÇÃO DE DADOS PESSOAIS E VALOR CORPORATIVO

ABSTRACT The commercial exploitation of personal information has raised concerns regarding privacy, illegal data use, and information security, among others. Therefore, personal data protection systems (PDPS) play a significant role, and corporations are the primary enforcers of these systems’ regulation. However, PDPS require significant investment from companies, and there is no consensus regarding the economic outcomes of establishing these systems. This study investigates whether the establishment of PDPS affects short-term financial performance and long-term corporate value. After applying the propensity score matching method, a dataset comprising 912 firm-year observations of e-commerce companies listed on the Shanghai and Shenzhen Stock Exchanges from 2008 to 2020 was selected. The results show that PDPS implementation can improve a company’s short-term financial performance by a) exploring markets and strengthening internal control and b) increase long-term corporate value by strengthening corporate social responsibility. This study offers insights for companies to proactively implement PDPS and strengthen their management of personal data, thereby boosting the overall corporate value. In addition, this study can help governments to develop legislation on national information security and enhance international cooperation, especially for emerging markets.

Wise in Using Social Media: Education for Pahandut Residents of Palangkaraya

There have been complaints and reports to the police related to the increase of alleged violations in the use of social media such as defamation, hate speech, hoax, data theft, illegal data distributions, and racial issues. The method used in this research is an observation done by conducting a survey through which a team visits and meets the residents of Pahandut Village to find out their lack of understanding of the ITE (Electronic Information and Transactions) Law. The researchers found out that the residents have various interpretations of the ITE Law. Therefore, the researchers need to focus on the important issue and conduct socialization for them by educating families to cope with the problem. In the first phase, education can be done by avoiding provocative themes, checking sources of information and their authenticity, and thinking before sharing. The act of community empowerment in Pahandut Village and its Muhammadiyah residents as da'wah agents are the targets of community service activities. The result of this community service activity is the successful socialization and education concerning the ITE Law to the residents of Pahandut Village. The success of residents’ satisfaction level is measured by the high percentage of the residents who choose very important indicators in community service. The socialization of the ITE Law and education to the community is carried out through community service videos containing stories about families who use their social media wisely.

Wise in Using Social Media: Education for Pahandut Residents of Palangkaraya

There have been complaints and reports to the police related to the increase of alleged violations in the use of social media such as defamation, hate speech, hoax, data theft, illegal data distributions, and racial issues. The method used in this research is an observation done by conducting a survey through which a team visits and meets the residents of Pahandut Village to find out their lack of understanding of the ITE (Electronic Information and Transactions) Law. The researchers found out that the residents have various interpretations of the ITE Law. Therefore, the researchers need to focus on the important issue and conduct socialization for them by educating families to cope with the problem. In the first phase, education can be done by avoiding provocative themes, checking sources of information and their authenticity, and thinking before sharing. The act of community empowerment in Pahandut Village and its Muhammadiyah residents as da'wah agents are the targets of community service activities. The result of this community service activity is the successful socialization and education concerning the ITE Law to the residents of Pahandut Village. The success of residents’ satisfaction level is measured by the high percentage of the residents who choose very important indicators in community service. The socialization of the ITE Law and education to the community is carried out through community service videos containing stories about families who use their social media wisely.

Security and Privacy in IoT-based Healthcare Systems: A Review

IoT-based healthcare solutions have transformed patient care and improved results. These technologies capture and store sensitive patient data, raising security and privacy concerns. The paper first discusses IoT-based healthcare system security issues. It evaluates cyber threats, system unavailability, and vulnerabilities attackers can use to get patient data. The report also tackles IoT-based healthcare system privacy issues such illegal data access and sharing and patient data breach concerns. The study proposes numerous frameworks and solutions to protect patient data in IoT-based healthcare systems. Blockchain technology can increase data security and privacy by offering a transparent, decentralized, tamperresistant database. The report also discusses differential privacy, a statistical method that adds noise to sensitive patient data to protect privacy. The study also examines how AI and ML can detect and mitigate security vulnerabilities in IoT-based healthcare systems. The study also emphasizes the need for uniform security and privacy standards to protect patient data across healthcare companies. The report stresses the importance of integrating security and privacy into IoT-based healthcare systems from the start. In conclusion, the study emphasizes security and privacy in IoT-based healthcare systems and the problems of protecting patient data. It explores standardized security and privacy protocols and many frameworks and solutions to address these issues.

Blockchain-Enabled Multiparty Computation for Privacy Preserving and Public Audit in Industrial IoT

With the rapid increase of the industrial data and the development of the industrial Internet of Things (IIoT) paradigm, the efficiency and the quality of service of the emerging applications have been improved. However, the contradiction between data sharing and privacy preserving is still an obstacle in the IIoT. To this end, in this article, we propose a privacy-preserving and publicly auditable multiparty computation scheme for industrial data sharing and computing, which avoids privacy leakage and computation misbehavior by separating the data ownership, data use, and data verification. Using the blockchain technology, a transparent management platform is provided to recognize and trace the illegal data and computation behavior. Moreover, we integrate the noninteractive zero-knowledge proof in the multiparty interaction mechanism, wherein the verification of data consistency and computation validity is executed publicly on the blockchain. Finally, we implement experiment to evaluate the performance of the computation latency, communication overhead and the influence of encryption parameter, and the numerical results illustrate the efficiency and feasibility of our scheme.