Integrity Of Files Research Articles

Security audit in cloud-based server by using encrypted data AES -256 and SHA-256

Cloud service provides access to servers, databases, storage, and any application services over the Internet. Cloud computing allows users to store their data in the servers. This will ease user to access the data everywhere by only using the internet connection from any devices. Cloud service allows users to run application to many mobile users or to support business critical operations. Cloud service also provides rapid access to the flexible and low-cost IT resources. By using the cloud service technology, there is no need to invest a hardware and spent much time to manage that hardware. Although cloud technology has many advantages, there are also some disadvantages such as some security issues. The usage of internet connection gives a high risk in cyber-attacks. Sometimes the cloud service provider also misuses the data stored in the server. This paper proposes the integrity verification of data stored in the server by using Hash function SHA-256 and AES-256. The proposed scheme combines the mechanism of encryption as a strategy to verify the data integrity. This method will encrypt files stored in the servers that aims to ensure the integrity of file stored. This research is expected to help use to secure their data.

Monitoring File Integrity Using Blockchain and Smart Contracts

The adoption of cloud computing solutions is an established reality in government agencies and in small, medium, and large companies due to procurement easiness and the variety of available services, as well as its low cost compared to the acquisition and management of own infrastructures. Among the most used services is cloud file storage, and the security of this storage has been an essential subject of recent research, particularly customer data integrity. Thus, this article proposes a solution for the monitoring of the integrity of files stored in the cloud, based on the use of smart contracts in Blockchain Networks, symmetric encryption, and computational trust. The proposed solution consists of a protocol that provides confidentiality, decentralization, audit availability, and the secure sharing of file integrity monitoring results, without overloading the services involved, as well as an unabridged reference implementation which was used to validate the proposal. The results obtained during the validation tests have shown that the solution is feasible and faultless in detecting corrupted files. These tests also confirmed that the sharing of integrity monitoring results, coupled with the application of computational trust techniques, significantly increased the efficiency of the proposed solution.

ПРИКЛАДНІ ТА МЕТОДИЧНІ АСПЕКТИ ЗАСТОСУВАННЯ ХЕШ-ФУНКЦІЙВ ІНФОРМАЦІЙНІЙ БЕЗПЕЦІ

The article deals with the use of hashing algorithms for information security in training students of the specialty "125 Cybersecurity" at the Kiev Boris Grinchenko University. The modern hashing algorithms that are widely used in modern digital technologies, in particular, in the tasks of ensuring information security of modern information and communication systems has been analyzes in the article. The need for a thorough study of hashing as a means of ensuring information security has been identified and substantiated. The paper has present a thorough and detailed analysis of typical security tasks involving hashing algorithms such as implementing structures to efficiently store large data sets; searching and storing data in databases; password protection in the authentication process; formation of electronic digital signature; control of integrity and authenticity of important files; digital blockchain technologies and creation of cryptocurrencies. The special programs offered in the form of applications and online services for calculating hash codes of a file or text have been reviewed and compared. Among the tools used to provide students with practical hashing skills are the use of CryptoAPI, Cryptography Next Generation, and Security.Cryptography .NET Framework cryptographic services. Basic cryptographic functions that implement hashing algorithms have been considered. Prospective directions of hashing research for introduction into the educational process have been defined, namely: fuzzy hashing, quantum hashing. The study concluded that the need for a theoretical and practical study of hashing throughout the training of information security professionals.

Tolerancing from STL data: A Legacy Challenge

Abstract Part representation in additive manufacturing (AM) is dominated by the stereolithography (STL) file format as a universal mode for communicating and transferring part geometry from one system to another. However, when the CAD model is converted to the triangle mesh constituting the STL file the topology is no longer explicitly defined hence the design intent is lost together with any tolerancing information. Computer aided tolerancing of actual part geometry is hindered by the sparse information about the nominal geometry directly available in STL data, therefore the feature information is often assumed or recreated through reverse engineering methods. This paper investigates how nominal geometry can be deduced from STL data to support quality control by the identification of geometric elements from a triangle mesh. We further discuss how vectorial tolerancing can extend the scope of feature recognition to tolerancing and quality assessment. A method for automatic extraction and tolerancing of features from STL files is described and an application example is provided. The outlined method enables the automation of tolerancing activities and facilitates the integration of STL files into the digital pipeline of modern manufacturing systems.

Dynamic Multiple-Replica Provable Data Possession in Cloud Storage System

In cloud storage scenarios, data security has received considerably more attention than before. To ensure the reliability and availability of outsourced data and improve disaster resilience and data recovery ability, important data files possessed by users must be stored on multiple cloud service providers (CSPs). However, we know that CSP is invariably not reliable. In this situation, to verify the integrity of replica files stored by users on multiple CSPs simultaneously, a new dynamic multiple-replica provable data possession (DMR-PDP) scheme is proposed. In addition, due to the importance of the tag set, we utilize vector dot products instead of using the modular power calculation in the traditional PDP scheme, which greatly reduces the calculation time and storage space usage. Moreover, a novel dynamic data structure, the divided address-version mapping table (DAVMT), is presented and used to solve the problem of data dynamic operation. A practical experiment validates the effectiveness of our proposed scheme in the end.

Analysis of Blockchain Architecture in File Sharing Management for Tertiary Institution

The aim of this paper is to analyze the sharing and management of files in a tertiary institution using blockchain architecture. It is expected to enable an online system that could provide a decentralized architecture for multiple transfers and sharing of files amongst participants, to design a system that can provide data integrity and security of files using IBM Blockchain technology, to provide a system that can allow multiple user and multiple transactions at once. The research was motivated because of the security challenges associated with existing system which include: delay in transfer and sharing of files, much authority and task given to a single user in a centralized system, high risk of attack and loss of files, reduced speed of file transfer and file access/retrieval, limited number of users per time. Methodology adopted was Object Oriented Analysis Design Methodology (OOADM) in conjunction with Unified Modeling Language (UML) and IBM Blockchain Technology while the programming language used was HTML, CSS, Java and Node Js. The result after design was a decentralized cloud based file sharing and management system that enables multi-shared, replicated and permissioned transactions amongst participants in a network.

IPANM: Incentive Public Auditing Scheme for Non-Manager Groups in Clouds

Cloud storage services give users a great facility in data management such as data collection, storage and sharing, but also bring some potential security hazards. An utmost importance is how to ensure the integrity of data files stored in the cloud, particular for user groups without trusted managers. Existing literature focuses on integrity checking for groups with managers who have lots of permissions. To overcome the shortage of public auditing for non-manager user groups in clouds, we develop a novel framework IPANM that integrates (t, n) threshold technology, blinding technology, and incentive mechanism to realize an incentive privacy-preserving public auditing scheme. In IPANM, the data integrity is guaranteed by our (t, n) threshold signature based public auditing and the data privacy during public auditing is protected by the blinding technology. The generation of signatures can be accelerated by our blockchain-aided incentive mechanism that mobilizes the initiative of signers in the signature generation by rewarding the contributed signers. We formally prove the security of our IPANM and conduct numerical analysis and evaluation study to validate its high efficiency. The experimental results demonstrate that IPANM has lower overheads of storage, communication, and computation as compared to the state-of-the-art technique IAID-PDP and NPP.

Multiple Authority Based Data Fragmentation Technique for Providing Secure Storage in Cloud

The existing works on security storage in cloud computing cause overhead, data correctness issue, key escrow problem, single point of failure and so on. This develops Multiple Authority based Data Fragmentation Technique for providing Secure Storage in Cloud Computing. It aims to avoid the key escrow and single point of failure issues of secure storage. In this technique, the Cloud Service Provider (CSP) provides multiple services for a client, the trusted and verification authorities are responsible for jointly creating the master key and system parameters and the Cloud Data Owner (CDO) encrypts the documents using CP-ABE. In order to provide data recoverability, a file is divided into blocks and sectors. Probabilistic algorithm checks the integrity of fragmented file. By simulating, the proposed technique reduces the overhead and data failures.

Research on Android Application Reinforcement Method for Mobile Medical Service

In the field of mobile medicine, in order to improve the security of Android applications and prevent Android APP from malicious decompilation and tampering, a security reinforcement scheme for Android APP based on random confusion is proposed. By confusing a large number of random characters in the DEX header file, without affecting the execution efficiency of Android software, it increases the difficulty of decompiling the DEX file, improves the security of the source code, and ensures the correctness and integrity of the DEX file.

Hybrid Cryptography based E2EE for Integrity & Confidentiality in Multimedia Cloud Computing

Cloud Computing has become a desirable state for the mobile users by providing anytime and anywhere access to various services and resources. Likewisemultimedia data such as audio, images, video and gif files covers the maximum part of the network traffic, as most of the data shared, produced, processed and stored through numerous sources such as smart phones, computers, sensor networks, satellites, medical records etc. is of multimedia type. Such form of data requires huge computing power and storage capacities along with the major security constraints. Mobile devices with limited configuration and low computing powers are not able to match with the high level computing and manipulations required by costly multimedia softwares. That’s why demand for the Multimedia Cloud Computing came into frames. As multimedia data has distinct computing, storage and security constraints, this field has become anemerging and latest area of research. Many researches have also proposed separate architectures for Multimedia Cloud Computing. Security, integrity and confidentiality of private and secret media files is always a matter of stake for cloud users as well as for cloud providers. For multimedia cloud security concerns, cryptography is a guaranteed solution.This paper has discussed about the various needs and challenges faced by the multimedia cloud providers. This work has also proposed a hybrid cryptography algorithm based end-to-end encryption (E2EE) approach to maintain integrity and confidentiality in multimedia cloud computing environment. The second last section provides a performance analysis for the algorithm in terms of tables and graphs to justify the results.

VERBAL MODEL OF MANAGEMENT OF A VULNERABLE PROCESS OF DEDICATING THE ACCESS OF USERS TO THE SOFTWARE OF THE ELECTRONIC DOCUMENT SYSTEM

Objectives Traditional methods for solving the problem of protecting the information resource of electronic document management systems based on protective basic functions (identification, authentication and verification of users, etc.) of available tools and information security subsystems have a significant drawback - inefficiency when an attacker masters the password of regular users. In order to eliminate it, it is necessary to develop new methods related to managing the weakly vulnerable process of delimiting user access not only to confidential information, but also to the software of the electronic document management system.Method One way to solve this problem is to use the modified “soft administration” method, which consists in automatically generating lists of allowed source files in the authorization matrix by reducing the lists and comparing file integrity functions with a reference list for an existing software package. This allows you to automate the process of developing access control rules and provide management of the weakly vulnerable process of access control to software tools of the electronic document management system.Result A verbal model is developed for automated control of a weakly vulnerable process of differentiating access to software tools of an electronic document management system, and a system of performance indicators for the functioning of a promising subsystem for protecting confidential information characterizing it as a control object is proposed.Conclusion The presented verbal model provides for the possibility of distributed control, in which the security administrator directly controls the specified process using a remote software tool. The formation (change) of the authority establishment matrix for managing a weakly vulnerable process of access control using a promising subsystem for protecting confidential information and the development of a system of indicators to comprehensively evaluate the effectiveness of its functioning is one of the most important tasks of protecting information from unauthorized access, guaranteeing the implementation of a security policy throughout the entire operation period secure electronic document management system.

An Ontology Development for Anomaly Detection in File Integration Domain

Günümüzde, veri depolama ve yazılım geliştirme teknolojilerinin çeşitliliğinde büyük bir artış yaşanmıştır. Hızla gelişen ve değişen teknolojiler sebebiyle, ortak çalışan organizasyonlardaki entegrasyon ve çok çeşitlilik, temel bir sorun olarak ortaya çıkmaktadır. Bu kapsamda dosya entegrasyonları, farklı iş platformları arasındaki veri bütünleştirmesine yardımcı olan etkili bir çözüm olarak sunulmaktadır. Böylelikle, farklı elektronik sistemler arasındaki rutin iş süreçleri ve iş mantıkları otomatize edilebilmektedir. Anomali tespiti, sistemlerde meydana gelebilecek anormal durumları tespit eden bir veri analiz işlemidir. Anomali tespiti, bilgi tabanlı sistemlerde beklenmedik durumlara karşı farkındalık ve beklenen davranışa uymayan anomaliler karşısında gerekli eylemlerin yerine getirilmesini sağlamaktadır. Bu nedenle, anomali tespiti dosya entegrasyonlarında meydana gelen anomalilerin tespiti için önemli bir veri analizi işlemidir. Bu çalışma kapsamında, dosya entegrasyonu sistemlerinde gerçekleşen anomalileri tespit edebilmek için ontoloji tabanlı bir yaklaşım sunulmaktadır. Dosya entegrasyonlarında anormalliklerin tespiti, bilgi güvenliği üçlüsünden (gizlilik, bütünlük ve kullanılabilirlik) biri olan kullanılabilirlik açısından önemlidir. Entegrasyonlardaki anomalilerin büyük bir kısmı veri bütünlüğüne yöneliktir ve bu anomaliler transfer süresinden ya da gelen dosya boyutundan tespit edilerek yakalanabilmektedir. Önerilen ontolojik yaklaşımda, örnek bir sisteme yapılan dosya entegrasyonları sorgulanarak entegrasyon işlemlerinde meydana gelen anomaliler tespit edilebilmektedir. Önerilen yaklaşımın, dosya entegrasyon sistemlerinde veri bütünlüğüne ve kullanılabilirliğe (dosya akışını durdurabilecek anomaliler) yönelik anormal durumlara karşı ontoloji bazlı bir çözüm sunması amaçlanmaktadır.

Theory of Event Coding (TEC) V2.0: Representing and controlling perception and action

This article provides an update of the Theory of Event Coding (TEC), which claims that perception and action are identical processes operating on the same codes – event files consisting of integrated networks of sensorimotor feature codes. The original version of the theory emphasized its representational underpinnings, but recent theoretical developments provide the basis for a more integrated view consisting of both the codes that are shared between perception and action in the control processes operating on these codes. Four developments are discussed in more detail: The degree to which the integration and retrieval of event files depends on current goals, how metacontrol states impact the handling of event files, how feature binding relates to event learning, and how the integration of non-social events relates to the integration of social events. Case examples using various versions of the Simon task are used to explain how the new version of TEC explains interactions between perception and action in non-social and social situations.

Progressive structural deterioration of an endodontic instrument – A preliminary micro-computed tomography study

The aim of this study was to investigate the methodological potential of a new application of micro-computed tomography in providing an external and internal assessment of the structural integrity of an endodontic test file, and its progressive structural deterioration after repeated use in simulated root canals (resin blocks), until fracture. The progressive deterioration of the instrument was observed, and the external and internal defects were described. Radiolucent images suggestive of micro-cavities were observed in the instrument's core prior to its first use, and the formation and subsequent propagation of cracks in an apparently non-linear manner were observed after consecutive uses, until the final collapse of the whole structure. This novel assessment method allowed the visualization the external surface and the core of the same instrument at different time points in the instrumentation process, thus enabling researchers to identify where the cracks started and their progression during the course of instrument use.

A case study for the assessment of the suitability of gridded reanalysis weather data for hydrological simulation in Beas river basin of North Western Himalaya

The major problem of estimating snowmelt runoff for Beas river basin is inadequacy of observed meteorological data distributed across the basin. In this study, ERA-Interim global reanalysis data have been used for assessing the stream flow and sediment yield in Beas river basin of North Western Himalaya. The snow module of ARCSWAT hydrology model has been simulated by integration of subbasin-wise elevation band files for modeling snowmelt runoff process including sediment yield due to rainfall and temperature change for different elevation bands varying from 361 to 6188 m. The gridded reanalysis (0.125° × 0.125°) dataset produces a decreased maximum and minimum temperature and increased precipitation at higher elevation in comparison with IMD gridded weather data. The outcome of this study conveys that the reanalysis data represent better snowmelt runoff (NSE = 0.76, 0.70 and R2 = 0.80, 0.70) and sediment yield (NSE = 0.50, 0.53 and R2 = 0.72, 0.57) mechanism at Pong and Pandoh dams than IMD gridded weather data (NSE = 0.50, 0.47 and R2 = 0.65, 0.60) for stream flow and (NSE = 0.50, 0.53 and R2 = 0.65, 0.60) sediment yield during the period 1996–1999 and 1999–2002 for these two locations.

A Python Security Analysis Framework in Integrity Verification and Vulnerability Detection

Python is widely used in web crawler, machine learning, data analysis and so on. However, there is no guarantee that Python scripts are trusted in their whole lifetime because of system insecurity. When the system is attacked, scripts in the computer are likely to be tampered with. Therefore, the trustworthiness of Python scripts needs to be checked through different configuration strategies, including integrity verification and vulnerability detection. In this paper, integrity verification and vulnerability detection are based on two Python scripts, an original Python script and a current Python script, and the original Python script is assumed to has no vulnerabilities. By comparing with the original script, we can find out whether the current script is integrity or not and detect whether there are vulnerabilities if the integrity of the current file is destroyed. Integrity verification with Hash functions is not applied in some cases. In this mode, any changes including blank lines added are considered illegal. So loose integrity verification by combining UNIX diff tool with abstract syntax trees is proposed. The vulnerability detection starts from the premise that the original Python script has no vulnerabilities, and taint analysis is applied on the vulnerability detection framework Bandit to find vulnerabilities. Besides, in order not to change the usage of Python, both integrity verification and vulnerability detection modules are embedded in Python interpreter. The experiments show that the performance of security analysis framework is good and Bandit with taint can greatly reduce the false positive results without affecting the performance.

Modern file transfer protocol using lossless compression, lattice-based encryption, and a data integrity hashing function

With the recent advances in technology, the creation and access to voluminous amounts of data has become more and more common. From consumer computers and smartphones to big data, the transfer of data entailed a longer download and upload time as the size gets bigger, thus taking a significant amount of time for data to reach its destination. Moreover, data can be corrupted as it is being transferred over the network and most file transfer protocols do not have a file integrity check. Lastly, most file transfer protocols employ the RSA cryptosystem which can be broken through the use of a quantum algorithm known as Shor’s algorithm. The proponents have implemented a file transfer protocol that integrates file hashing, compression, and a quantum-resilient cryptosystem. The results show that the proposed file transfer protocol is faster than plain FTP and even faster against FTP over TLS.

Certificateless batch verification protocol to ensure data integrity in multi-cloud using lattices

Cloud storage provides flexible On-demand data storage services to users at anytime and anywhere. However, this model of data storage introduces number of new security threats in Cloud due to loss of control over the outsourced data. One of the security challenge in cloud is data integrity protection. In this work, we introduced certificateless batch verification protocol using lattices, which supports integrity checking of multiple data files in cloud environment. Here, third party auditor (TPA) check the integrity of the multiple files stored on cloud servers at a time. By utilising, random masking technique it preserves the privacy against TPA and in case of failure it identifies the invalid proofs using Fibonacci search. The security analysis proves the storage correctness and privacy against the TPA of the proposed method. The experimental results shows that the proposed method decreases computation cost over the TPA approximately 10% compared to individual verification.

CPDA: A Confidentiality-Preserving Deduplication Cloud Storage With Public Cloud Auditing

With growing popularity of cloud storage, the number of users of outsourcing data to cloud servers has increased dramatically. On the one hand, the rapidly increasing volume of data in the cloud is accompanied by a lot of data duplication. On the other hand, the cloud server stores only a unique copy of outsourced data in deduplication cloud storage system and the corruption or missing of the unique copy may bring immeasurable loss. Therefore, the file deduplication and integrity auditing are very important and how to securely and efficiently achieve them simultaneously needs to be settled urgently in academia and industry. In this paper, we propose a confidentiality-preserving deduplication cloud storage with public cloud auditing (CPDA). Firstly, our CPDA scheme achieves secure file deduplication on encrypted file, which supports public integrity auditing for the unique copy in the deduplication cloud storage system. Particularly, our CPDA scheme also realizes secure authentication tag deduplication. Secondly, our CPDA scheme utilizes the convergent encryption and random masking techniques to ensure data confidentiality during the file deduplication and integrity auditing process. Thirdly, our scheme not only supports each data owner to independently launch the integrity auditing of their own files, but also supports cloud server to periodically delegate the third party auditor to concurrently handle multiple auditing tasks to ensure the integrity of the outsourced files. Finally, the security of our scheme is formally proved and its performance is confirmed by numerical analyses and simulation experiments.

A Survey: Cryptographic Hash Functions for Digital Stamping

The current study aims to examine a general overview of the application of hash functions in cryptography and study the relationships between cryptographic hash functions and uses of the digital signature. Functions of the cryptographic hash are an important tool applied in several sections of data security, and application of hash function is common and used for various purposes such as File Integrity Verification, Key Derivation, Time stamping, Password Hashing, Rootkit Detection and Digital Signature. Digital Signature is a code that is linked electronically with the document including the sender's identity. Therefore, the digital signature is of high value in verifying digital messages or documents. Cryptographic hash functions do not present without mathematics. The success of computer science is attributed to mathematics; in other words, it is because of mathematical science, that computer science was understood and could be explained to all. The study aims to teach the reader hash functions and its applications such as digital signature and to show in details some hash functions and their designing.