Information Security Protocols Research Articles

Ethernet Information Security Protocols Based on Industrial Control Wireless Sensor Networks

This paper provides an in‐depth study and analysis of information security protocols for industrial Ethernet using wireless sensor networks. The optimal number of cluster heads for nonuniform subclustering is derived based on the sensor energy consumption model, and then, the EEUC contention radius formula is optimized to select candidate cluster heads with random values and energy as weights. A multihop approach based on the shortest offset is also proposed for intercluster information transmission. Experimental results show that the EEUC‐based improved cluster routing protocol proposed in this paper balances the node energy consumption and extends the network lifetime. In response to the problem that the coarsened hop value and average hop distance of the DV‐Hop localization algorithm cannot reflect the network topology, the improved DV‐Hop algorithm based on multicommunication radius and hop distance correction is proposed. Simulation experiments show that the improved algorithm based on multiple communication radius and hop count correction can significantly reduce the localization error and improve the accuracy of the algorithm. Aiming at the shortcomings of MRP with excessive risk concentration and transmission medium limitation, this paper proposes a fast self‐healing mechanism of industrial Ethernet with a multiexpert strategy. The PCP‐AP common platform architecture for openSAFETY sites is designed on the base sleeve of the implementation of the industrial Ethernet protocol Ethernet POWERLINK; the main communication part of POWERLINK is implemented through an FPGA hardware solution, and the openSAFETY site is implemented using AM335X high‐performance processor to implement openSAFETY security application functions. Finally, the article conducts field tests on the wireless signal information transmission, WSN data transmission, network connection, and power supply system in the system and compares and analyzes the data collected by the system with the monitoring data of the national control site. The data obtained by the system has real reliability. The communication module used is inexpensive, lightweight, and easy to operate. It can realize the collection of multiple pollution sources, and compared with traditional monitoring equipment, it avoids the difficulties of complicated wiring, difficult positioning of pollution sources, and restricted monitoring areas and largely reduces the investment in human and material resources.

Secure Information Transfer Using Two Keyless Cryptography Methods

In the current paper, some methods of information security protocols based on physical layer security are considered. It is proved that well known Shamir’s protocol can be applied to RSA cryptosystem but not to Rabin, Mac-Ellice and trellis based cryptosystems.The main stream of this paper is a description of key sharing protocol on constant public and noiseless channels (like Internet). It is shown that it is able to provide a high reliability and control of security in terms of Shannon’s information providing nothing-additional requirements to communication channels and without any cryptographic assumptions.

ВПЛИВ ПРОТОКОЛІВ ЗАХИСТУ ІНФОРМАЦІЇ НА ФОРМУВАННЯ ВАРТОСТІ КРИПТОВАЛЮТИ ТА ЇЇ КОЛИВАННЯ

The study is aimed at identifying the influence of information security protocols used in cryptocurrencies on the formation of the value of cryptocurrencies and fluctuations in their value. A comparison is made of the value fluctuations against the US dollar. Attention is paid to transaction security algorithms - protocols for protecting information from outside influence. The reasons for the sharp changes in cost are considered. Considering that the phenomenon called "cryptocurrency" is quite new, but at the same time attractive to many, the study of this phenomenon can be useful both from a practical and scientific point of view. Research for practitioners can have the effect of avoiding unpromising areas in cryptocurrency development. Scientific research could answer what explains the existence of this phenomenon. The article notes that the phenomenon is extremely insufficiently discussed in the scientific community (according to the information that we have). The main means of forming an idea about the phenomenon of cryptocurrencies are separate disparate messages on social networks, and forums of people united by this topic. Probably the phenomenon does not fit well with the classical concept of "money", therefore it is perceived ambiguously. It is little defined how the improvement of software (technical) measures affect the popularity of cryptocurrencies, is there a dependence on other factors? This article examines information security protocols as a factor influencing the popularity of cryptocurrencies. Based on the analysis, it is concluded that there is no direct and unambiguous dependence on the improvement of information security protocols for cryptocurrencies and the demand for them. At the same time, the article analyzes other factors and proposes an improved formula for assessing the potential attractiveness of cryptocurrencies.

Enhanced Information System Security in Internet Banking and Manufacturing

The internet has contributed significantly by changing how we interact with other people and how we execute business today. By virtue of the internet, electronic commerce has emerged, facilitating business to manage their customers and other corporations inside more effectively and outside their industries. The industry which is applying business transaction using this new communication channel to reach its customers is the banking industry. The electronic banking system addresses several emerging trends such as customer's demand for anytime, anywhere service, product time-to-market imperatives and increasingly complex back-office integration challenges. The challenges that oppose electronic banking are concerns of security and privacy of information. This paper will first discuss the current forms of security threats in the internet banking; secondly, it will investigate weaknesses in the current information security protocols of the internet banking. Thirdly, it will propose an enhanced information system security for internet banking.

Like Moths to a Flame: Unsecured Networks, Tech-Savvy Students, and District Policy

School systems collect and maintain increasingly significant amounts of data and information on students, faculty, and staff and have a duty of care to ensure that sensitive information remains secure. Therefore, sitting and/or aspiring school leaders need to develop at least a basic understanding of data privacy and information security considerations. In this case, students discover a way to log in to internal district information systems and gain access to sensitive school and district data and information. School and district leaders are faced with the challenge of how to respond to such an information security breach and how to discipline the students. This case should cause sitting and/or aspiring school leaders to think deeply about and examine technology policies, information security protocols, as well as related school discipline policies.

Result and Effectiveness of Malicious E-mail Response Training in a Hospital.

Malicious e-mails sent intentionally to institutions have caused an increase in data breaches. Measures against these methods must be taken by healthcare institutions to prevent leakage of sensitive personal medical information. As a form of training, we conducted a phishing simulation to gauge the response of the hospital staff to similar email attacks, and to raise awareness about information security protocols.

Detection of phishing websites using a novel twofold ensemble model

PurposePhishing is one of the major threats affecting businesses worldwide in current times. Organizations and customers face the hazards arising out of phishing attacks because of anonymous access to vulnerable details. Such attacks often result in substantial financial losses. Thus, there is a need for effective intrusion detection techniques to identify and possibly nullify the effects of phishing. Classifying phishing and non-phishing web content is a critical task in information security protocols, and full-proof mechanisms have yet to be implemented in practice. The purpose of the current study is to present an ensemble machine learning model for classifying phishing websites.Design/methodology/approachA publicly available data set comprising 10,068 instances of phishing and legitimate websites was used to build the classifier model. Feature extraction was performed by deploying a group of methods, and relevant features extracted were used for building the model. A twofold ensemble learner was developed by integrating results from random forest (RF) classifier, fed into a feedforward neural network (NN). Performance of the ensemble classifier was validated using k-fold cross-validation. The twofold ensemble learner was implemented as a user-friendly, interactive decision support system for classifying websites as phishing or legitimate ones.FindingsExperimental simulations were performed to access and compare the performance of the ensemble classifiers. The statistical tests estimated that RF_NN model gave superior performance with an accuracy of 93.41 per cent and minimal mean squared error of 0.000026.Research limitations/implicationsThe research data set used in this study is publically available and easy to analyze. Comparative analysis with other real-time data sets of recent origin must be performed to ensure generalization of the model against various security breaches. Different variants of phishing threats must be detected rather than focusing particularly toward phishing website detection.Originality/valueThe twofold ensemble model is not applied for classification of phishing websites in any previous studies as per the knowledge of authors.

Towards a user-centric theory of value-driven information security compliance

PurposeThe purpose of this paper is to fill a gap in the literature, by investigating the relationship between users’ perceptions of the value of the information that they are handling, and their resultant level of compliance with their organisation’s information security policies. In so doing, the authors seek to develop a theory of value-driven information security compliance.Design/methodology/approachAn interpretive, grounded theory research approach has been adopted to generate a qualitative data set, based upon the results of 55 interviews with key informants from governmental agencies based within Brunei Darussalam, complemented by the results of seven focus groups. The interviews and focus groups were conducted in two phases, so that the results of the first phase could be used to inform the second phase data collection exercise, and the thematic analysis of the research data was conducted using the NVivo 11-Plus software.FindingsThe findings suggest that, when assigning value to their information, users take into account the views of members of their immediate work-group and the espoused views of their organisation, as well as a variety of contextual factors, relating to culture, ethics and education. Perhaps more importantly, it has been demonstrated that the users’ perception of information value has a marked impact upon their willingness to comply with security policies and protocols.Research limitations/implicationsAlthough the authors have been able to develop a rich model of information value and security compliance, the qualitative nature of this research means that it has not been tested, in the numerical sense. However, this study still has important implications for both research and practice. Specifically, researchers should consider users’ perceptions of information value, when conducting future studies of information security compliance.Practical implicationsManagers and practitioners will be better able to get their colleagues to comply with information security protocols, if they can take active steps to convince them that the information that they are handling is a valuable organisational resource, which needs to be protected.Originality/valueThe central contribution is a novel model of information security compliance that centre stages the role of the users’ perceptions of information value, as this is a factor which has been largely ignored in contemporary accounts of compliance behaviour. This study is also original, in that it fills a methodological gap, by balancing the voices of both user representatives and senior organisational stakeholders, in a single study.

A secure user authentication and key-agreement scheme using wireless sensor networks for agriculture monitoring

Agriculture is the backbone of our economic system and plays an important role in the life of an economy. It does not only provide raw material and food, but also provides large employment opportunities. Therefore, agriculture requires modern technology for increasing the productivity. In this context, wireless sensor networks (WSNs) could be utilized for monitoring the climatic parameters such as (temperature, humidity, light, carbon dioxide, soil moisture, acidity etc.) in an agriculture field. The climatic parameters are very important in terms of growth, quality and productivity of crops. But, any kind of interception, modification, insertion, and deletion on these parameters can have negative effect on crop. Therefore, security and privacy are important issues in agriculture field. In this regard, we design a novel remote user authentication scheme using wireless sensor networks for agriculture monitoring. The protocol is validated through Burrows–Abadi–Needham (BAN) logic and also simulated using Automated Validation Information Security Protocols and Applications (AVISPA) tool. We formally analyze the security of the scheme using random oracle model. In addition, the informal security analysis shows that the proposed protocol is secure and resists various kinds of malicious attacks. As a results, the proposed protocol is applicable in a real life application.

Legislative Responses to Data Breaches and Information Security Failures

On July 23, 2008, the Payment Cards Center of the Federal Reserve Bank of Philadelphia hosted a workshop to discuss federal and state legislative responses to data breaches. The workshop addressed several laws and legislative initiatives designed to create greater safeguards for personal consumer information frequently targeted by data thieves and often subject to the failures of information security protocols. Diane Slifer, J.D., M.B.A., who has frequently presented at forums on data security and has represented clients in matters related to data breaches, led the workshop. Slifer examined several highly publicized data breaches and explained how various laws and regulations have been put in place in order to protect and inform consumers whose personal information has been compromised. Additionally, she discussed several legislative initiatives designed to potentially create a more structured and secure environment for private consumer data overall. This paper summarizes Slifer's presentation, the ensuing discussion, and additional Payment Cards Center research. In addition, it offers a brief overview of recent data breaches, a description of various ways that federal and state laws operate, and some thoughts on how effective these laws and regulations have been.

Geometrical contributions to secret sharing theory

Finite geometry has found applications in many different fields and practical environments. We consider one such application, to the theory of secret sharing, where finite projective geometry has proved to be very useful, both as a modelling tool and as a means to establish interesting results. A secret sharing scheme is a means by which some secret data can be shared among a group of entities in such a way that only certain subsets of the entities can jointly compute the secret. Secret sharing schemes are useful for information security protocols, where they can be used to jointly protect cryptographic keys or provide a means of access control. We review the contribution of finite projective geometry to secret sharing theory, highlighting results and techniques where its use has been of particular significance.