Integrated Security Framework Research Articles

Identity and Access Control Techniques for Enhanced Data Communication in Cloud

The preservation of sensitive data and prevention of unauthorized access are critical objectives in cloud computing environments, necessitating the implementation of robust security measures. The present study delves into the amalgamation of the Hierarchical Role Based Access Control Model (HR-ACM), Composikey, a composite key encryption algorithm, and Interactive Tree Based zero knowledge protocol (ITZKP) to construct a robust security framework for cloud security. This study presents an investigation into the viability and efficacy of integrating HRACM, Composikey, and ITZKP as a means of augmenting security measures and reducing potential hazards in cloudbased systems. The execution times comparison of the Composikey, IBPRE, and KPRE models were compared for different filesizes (1 KB to 2 GB) to evaluate the performance of the HRACM method. As roles increase, RBAC a execution time increases significantly. The HRACM Method takes 0.001 to 0.002 seconds to implement across all role counts. The results show that the HRACM Method is more efficient and time-effective than the RBAC Method. The response time measured in microseconds for the existing ZKP and Libra systems for different file sizes, ranging from 1KB to 1 GB. The results reveal that the verifier time for the ITZKP system aligns closely with the existing systems, demonstrating its ability to perform efficient verification processes. These findings collectively demonstrate the potential of the integrated security framework in enhancing cloud security.

Towards a lightweight security framework using blockchain and machine learning

Cyber-attacks pose a significant challenge to the security of Internet of Things (IoT) sensor networks, necessitating the development of robust countermeasures tailored to their unique characteristics and limitations. Various prevention and detection techniques have been proposed to mitigate these attacks. In this paper, we propose an integrated security framework using blockchain and Machine Learning (ML) to protect IoT sensor networks. The framework consists of two modules: a blockchain prevention module and an ML detection module. The blockchain prevention module has two lightweight mechanisms: identity management and trust management. Identity management employs a lightweight Smart Contract (SC) to manage node registration and authentication, ensuring that unauthorized entities are prohibited from engaging in any tasks, while trust management uses a lightweight SC that is responsible for maintaining trust and credibility between sensor nodes throughout the network's lifetime and tracking historical node behaviors. Consensus and transaction validation are achieved through a Verifiable Byzantine Fault Tolerance (VBFT) mechanism to ensure network reliability and integrity. The ML detection module utilizes the Light Gradient Boosting Machine (LightGBM) algorithm to classify malicious nodes and notify the blockchain network if it must make decisions to mitigate their impacts. We investigate the performance of several off-the-shelf ML algorithms, including Logistic Regression, Complement Naive Bayes, Nearest Centroid, and Stacking, using the WSN-DS dataset. LightGBM is selected following a detailed comparative analysis conducted using accuracy, precision, recall, F1-score, processing time, training time, prediction time, computational complexity, and Matthews Correlation Coefficient (MCC) evaluation metrics.

Integrated Security Framework for Healthcare Using Fog Computing

Integrated Security Framework for Healthcare Using Fog Computing

A novel verification framework to analyse security attacks in a fingerprint authentication system

The security vulnerabilities and flaws in the existing biometric fingerprint authentication system (FAS) are effectively overcome using the one time finger code (OTFC). Based on this OTFC technique, a new verification model is proposed in this work which is capable of evaluating and analysing the susceptibility of system to common security attacks. For verification and validation compliance, an integrated security framework with novel security protocol along with generation of a unique encryption key named terminal key is conceptualised and implemented. The exposure of the system to various security attacks are experimentally computed by measuring avalanche effect, which fetches an average value of 63.52%. Also, the severity of attack is verified by calculating base score obtained as 3, which is less in comparison with conventional systems. Hence it concludes that proposed FAS with new verification framework yields better results on exposure to common security threats than the conventional one.

Integrated Security Framework for Private Cloud Computing On-Premise

Development of a globally integrated framework, intended for implementation in a private on-premise cloud computing framework, structurally based on virtualization technologies, cloud computing, encryption, high availability and redundancy systems, data protection systems, governance, active steering, network monitoring systems, risk analysis and physical infrastructure protection.

A Framework and Cryptography Algorithm for Protecting Sensitive Data on Cloud Service Providers

Most companies are sceptical about the security and insurance measures offered by cloud services and are reluctant to store sensitive data, such as employee records, in the cloud. Thus, more effort is needed to support the security of information in cloud computing. This paper proposes a cryptography algorithm called ―random algorithm‖ because it is built on the idea of randomising the encryption of uploaded files among four encryption algorithms. The proposed fragmentation technique helps add security and privacy to cloud storage applications. Based on earlier studies, we have created a file-level fragmentation technique that does not work at the database level, in contrast to commonly employed approaches in the case of fragmentation techniques such as horizontal fragmentation, vertical fragmentation, and hybrid fragmentation, which do work at the database level. The proposed encryption algorithm and fragmentation technique work within an integrated security framework that includes a user authentication gateway that encrypts user registration data through a cryptography algorithm called the RivestShamir-Adleman algorithm (RSA). The results of the proposed security framework were positive, as it contributed to reducing the encryption time and decoding time by approximately 99%, compared to earlier studies

Network Threats Mitigation Using Software-Defined Networking for the 5G Internet of Radio Light System

Currently 5G communication networks are envisioned to offer in a near future a wide range of high-quality services and unfaltering user experiences. In order to achieve this, several issues including security, privacy, and trust aspects need to be solved so that the 5G networks can be widely welcomed and accepted. Considering above, in this paper, we take a step towards these requirements by proposing a dedicated SDN-based integrated security framework for the Internet of Radio Light (IoRL) system that is following 5G architecture design. In particular, we present how TCP SYN-based scanning activities and DHCP-related network threats like Denial of Service (DoS), traffic eavesdropping, etc. can be detected and mitigated using such an approach. Enclosed experimental results prove that the proposed security framework is effective and efficient and thus can be considered as a promising defensive solution.

An Integrated Security Framework for SOA

In today's Web environment, Service Oriented Architecture (SOA) becomes an efficient paradigm to integrate distributed applications. Due to loosely coupled nature of SOA, security is one of the most important issues that must be considered in SOA-based environments. Most of the existing security solutions are proposed only from one certain point of view, and they are difficult to integrate together. In this paper, an integrated framework for SOA are proposed to provides an overall security solution, which contains a three-dimensional security model, a security architecture and related security standards.

Configuration Tool for a Wireless Sensor Network Integrated Security Framework

Wireless Sensor Networks (WSNs) will benefit from security frameworks that provide easy to use security while hiding inherent complexity. In comparison to traditional networks, the hardware constra...

Layered security architecture for threat management using multi-agent system

The increasing complexity of software systems along with expanding connectivity has necessitated the evolution of an integrated security framework adopting innovative techniques for secure software systems. This paper proposes a layered security architecture for threat management using a multi-agent system to meet the above objective. Layer- 1 of this framework is designed for elicitation of realistic and flawless security requirements. Layer-2 uses a Multi-Agent system planning for avoidance of threats optimally. In this mechanism autonomous agents interact and coordinate with each other to achieve the common goal of software security. An adaptive defense mechanism using Meta-Agents in multi-agent system in conjunction with fuzzy logic to counter the adaptive and compound threats is the responsibility of Layer-3. Guidelines proposed in this paper have augmented this security architecture as a two-fold defensive strategy to ensure that a hacker is not able to tamper data even if they penetrate the periphery defenses. These proactive steps can be implemented during the design and development phases of the software life cycle in an incremental way as per the budget and security requirements of a software project. A case study on internet banking is included in the paper to describe the proposed security framework.

A Physical and Logical Security Framework for Multilevel AFCI Systems in Smart Grid

The arc fault circuit interrupter (AFCI) is expected to be one of the most essential components in smart grid systems for providing physical security and safety against electrical fire hazards caused by arc faults. As AFCIs are widely deployed as a part of mandatory installation requirements, a hierarchy consisting of multilevel AFCIs has been established, where a portable AFCI is connected serially to an outlet box AFCI. However, this multilevel AFCI structure causes serious problems when the AFCI detects arc faults in the surveillance area of its descendant AFCIs. This can cause de-energizing of the entire area covered by the upper-level AFCI, which may lead to blackouts over large areas. This paper proposes an integrated security framework comprised of physical and logical security measures as a solution for this problem. Firstly, the problem is tackled through communication between the hierarchy levels. Since the proposed system deals with physical security and safety, the communication must guarantee reliable message delivery within the specified deadlines. A controller area network (CAN) is chosen as the communication technology because it provides deterministic message delivery that meets the system requirements. Moreover, CAN has the advantages of verified performance and cost competitiveness through accelerated industrial adoption. Along with the physical security framework, a logical security framework is also proposed with group key management that prevents unauthorized access. Finally, this paper reports an integrated methodology for optimizing the design parameters satisfying the bandwidth and security demands of physical and logical measures because both demands competitively share a common communication resource.

INTEGRATED SECURITY FRAMEWORK FOR INDUSTRIAL R&D ENVIRONMENTS

As use of information systems in R&D environments has increased enormously, the risks of technology leakage through information systems have become more serious. To provide a basic guideline of R&D security which helps enterprise executives to solve the managerial problems of R&D security planning is a purpose of this paper. This paper provides an integrated security framework including R&D security goal, R&D-related division and activity, and pool of controls. With the integrated security framework suggested in this paper, an enterprise that invests hundreds of thousands of dollars to develop a new product can adapt itself to mitigate security risks and reduce potential losses of technology leakage. It could be believed to be the first attempt to provide the R&D-specific security framework for enterprise executives to solve the security problems in R&D environments.

Aviation Data Networks

Aircraft data networks are fast becoming more of a necessity due to their support for user mobility. Many aircraft manufacturers are planning to deploy data networks within their airplanes and provide internet connectivity to their passengers. While a data network within the aircraft and passenger access to it causes some security concerns, it open up some safety enhancement opportunities. With internet connectivity within the airplane, the activity within the airplane can be monitored in real-time from the ground station. Also, using the high bandwidth satellite links, the flight critical data could be downloaded to a server in the ground station in real-time flight or periodically, thereby enabling real-time flight status monitoring. The information technology (IT) revolution, combined with people’s need to access information quickly, has resulted in the explosive growth of the Internet in the past decade. An integrated security framework requires a careful consideration of the security features of the network within an airplane. Potentially, the aircraft could consist of three kinds of networks namely passenger network, crew network and control network. The security protocol implemented must ensure a proper separation of these networks and also watch for any security protocol violations. Ill. 5, bibl. 4 (in English; summaries in Lithuanian, English and Russian).

Aviation data networks: security issues and network architecture

The information technology (IT) revolution, combined with people's need to access information quickly, has resulted in the explosive growth of the Internet in the past decade. Ubiquitous access to the Internet has become an essential component of a mobile workforce, and multiple mechanisms are being devised to ensure seamless connectivity to corporate resources. An integrated security framework requires careful consideration of the security features of the network within an airplane. Potentially, the aircraft could consist of three kinds of networks, namely: passenger network, crew network, and control network. The security protocol implemented must ensure a proper separation of these networks and also watch for any security protocol violations. In this paper, the authors review existing aircraft data network standards, security provisioning, and security threats associated with the aircraft data networks. In addition, the authors also analyze the security threats associated with different network architectures.