Kinds Of Security Threats Research Articles

Arda ÖZKAN and Göktürk TÜYSÜZOĞLU (ed.), Security Studies: Classic to Post-Modern Approaches (Lanham, Maryland, Lexington Books, 2023)

What kinds of security threats do states currently face in international relations? What areas do security studies cover in the discipline? Contrary to the military security-oriented structure of the Cold War period, the new era requires a more inclusive and alternative approach to security studies due to the effects of globalization. Therefore, many areas that were seen as low politics issues in the early years of the discipline have begun to play an important role in shaping today’s international system and the security perception of states. For someone seeking to answer the above questions, Security Studies: Classic to Post-Modern Approaches, edited by Arda Özkan and Göktürk Tüysüzoğlu, is a good starting point. Within the framework of its eighteen chapters, the book is an important reference that not only deals with the classical approaches of the discipline, such as military issues, but also explores post-modern approaches and contemporary topics, such as energy, environment, migration, and so on.

Ancaman dan Langkah Pengamanan Sistem Informasi Menggunakan Metode Systematic Literature Review

This research aims to analyze security threats that occur in information systems and ways to overcome them. The method used in this research is Systematic Literature Review, where articles related to security threats in information systems are collected and analyzed qualitatively. The results show that there are various kinds of security threats in information systems, such as hacking, sabotage, espionage, and others. These threats can damage data, steal information, or disrupt system integrity. To overcome these threats, prevention and treatment efforts are needed. Prevention is done to prevent damage, loss, or theft of data, while treatment is done if data has already been attacked. Some ways to improve information system security include improving HR knowledge related to cyber threats, implementing readiness certification, and adopting security domains from other countries. Mapping the types of cyberattacks and selecting appropriate security technologies are also important. Some other efforts include regular operating system updates, applying encryption to data, controlling access, using firewall technology, and implementing standard operating procedures (SOPs) and privacy policies. This research can serve as a guide in developing effective policies and measures in maintaining information system security.

Performance evaluation of deep learning techniques for DoS attacks detection in wireless sensor network

Wireless sensor networks (WSNs) are increasingly being used for data monitoring and collection purposes. Typically, they consist of a large number of sensor nodes that are used remotely to collect data about the activities and conditions of a particular area, for example, temperature, pressure, motion. Each sensor node is usually small, inexpensive, and relatively easy to deploy compared to other sensing methods. For this reason, WSNs are used in a wide range of applications and industries. However, WSNs are vulnerable to different kinds of security threats and attacks. This is primarily because they are very limited in resources like power, storage, bandwidth, and processing power that could have been used in developing their defense. To ensure their security, an effective Intrusion detection system (IDS) need to be in place to detect these attacks even under these constraints. Today, traditional IDS are less effective as these malicious attacks are becoming more intelligent, frequent, and complex. Denial of service (DOS) attack is one of the main types of attacks that threaten WSNs. For this reason, we review related works that focus on detecting DoS attacks in WSN. In addition, we developed and implemented several Deep learning (DL) based IDS. These systems were trained on a specialized dataset for WSNs called WSN-DS in detecting four types of DoS attacks that affects WSNs. They include the Blackhole, Grayhole, Flooding, and Scheduling attacks. Finally, we evaluated and compared the results and we discuss possible future works.

Block chain enabled auditing with optimal multi‐key homomorphic encryption technique for public cloud computing environment

SummaryCloud storage is a significant cloud computing (CC) service which enables the client to save and retrieve the data at anytime and anywhere. Due to the increased demand and familiarity of the CC environment, different kinds of security threats and susceptibilities are raised. Data integrity and privacy are the major problems in CC environment where the data can be saved in distinct geographic regions. So, privacy preservation and data integrity become important factors of the user concern related to the CC environment. Several auditing protocols are majorly dependent upon the conventional public key infrastructure, which led to high computational complexity and it is unsuitable for the setting of multiple users. To resolve these issues, this study develops a new block chain enabled auditing with optimal multi‐key homomorphic encryption (BEA‐OMKHE) technique for public cloud environment. The proposed BEA‐OMKHE technique aims to assure data integrity, security, and auditing in public cloud storage. Besides, an OMKHE technique is derived to accomplish data integrating into the cloud environment by the design of end to end encryption system. A secure generation of keys and encryption processes are carried out by the use of MKHE technique; thereby the data becomes highly secure. In addition, the choice of keys is performed by the improved beetle antenna search optimization (IBAS) algorithm. Therefore, the proposed BEA‐OMKHE technique offers an efficient way of enhancing the data integrity in CC method. The performance validation of the BEA‐OMKHE technique takes place and the results are inspected under various aspects. The comparative result analysis ensured the betterment of the BEA‐OMKHE technique interms of different measures such as communication cost, encryption time, decryption time, computation cost, privacy preserving rate, and authentication accuracy.

EuDaimon: PUF-Based Robust and Lightweight Authenticated Session Key Establishment Protocol for IoT-Enabled Smart Society

The fast-growing technology has increased the demands of the Internet of Things (IoT) in different sectors, and the protection of security threats in IoT communication is a major challenge. This article presents a network diagram of the smart societies by enabling the sensor and camera technology. This article aims to provide and protect all kinds of security concerns during the transmission of sensed data to the cloud server. Therefore, a physically-unclonable-function-based authentication protocol has been proposed (called <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">EuDaimon</i> ) to establish secure communication among the entities involved. The EuDaimon protocol not only achieves the lightweight property, but also assists remote users who can access the cloud server as well as any sensor or camera after performing only one-time registration. The informal security analysis shows that the EuDaimon protocol is free from all kinds of security threats. The Scyther simulation ensures that the EuDaimon protocol has no security vulnerabilities. The performance comparison claims that the EuDaimon protocol is providing better performance although more participants are involved in the architecture.

Construction and Optimization of TRNG Based Substitution Boxes for Block Encryption Algorithms

Internet of Things is an ecosystem of interconnected devices that are accessible through the internet. The recent research focuses on adding more smartness and intelligence to these edge devices. This makes them susceptible to various kinds of security threats. These edge devices rely on cryptographic techniques to encrypt the pre-processed data collected from the sensors deployed in the field. In this regard, block cipher has been one of the most reliable options through which data security is accomplished. The strength of block encryption algorithms against different attacks is dependent on its nonlinear primitive which is called Substitution Boxes. For the design of S-boxes mainly algebraic and chaos-based techniques are used but researchers also found various weaknesses in these techniques. On the other side, literature endorse the true random numbers for information security due to the reason that, true random numbers are purely non-deterministic. In this paper firstly a natural dynamical phenomenon is utilized for the generation of true random numbers based S-boxes. Secondly, a systematic literature review was conducted to know which metaheuristic optimization technique is highly adopted in the current decade for the optimization of S-boxes. Based on the outcome of Systematic Literature Review (SLR), genetic algorithm is chosen for the optimization of s-boxes. The results of our method validate that the proposed dynamic S-boxes are effective for the block ciphers. Moreover, our results showed that the proposed substitution boxes achieve better cryptographic strength as compared with state-of-the-art techniques.

A Statistical Study into Network Security Issues of IT Companies in Accra

Wireless Sensor Network (WSN) is a rising technology that offers a great assurance towards a variety of revolutionary applications such as military and public. As wireless sensor networks continue to develop, there is a high importance in security mechanisms. As sensor networks works with responsive data and operate in antagonistic environments, it is crucial to address the security issues. The sensing technology united with wireless communication and processing power makes it rewarding. Due to these computing and inherent constraints in resource, sensor network security has special challenges. The low cost and collaborative nature of the wireless networks (WNs) offers significant advantages upon the conventional communication techniques. The wireless communication technology has several kinds of security threats. The spotlight of this paper is towards addressing the security issues and challenges of WSNs. Here the idea is to identify the threats and security mechanism of wireless sensor networks among WSNs companies in Accra. This paper will contribute to the literature of Wireless sensor networks security issues and challenges in society especially in Ghana. It is concluded that wireless sensor networks have security impact and challenges on information security in IT companies in Accra.

Study of Intrusion Detection System

An intrusion detection system (IDS) could be a device or software application that observes a network for malicious activity or policy violations. Any malicious activity or violation is often reported or collected centrally employing a security information and event management system. Some IDS’s are proficient of responding to detected intrusion upon discovery. These are classified as intrusion prevention systems (IPS). A system that analyzes incoming network traffic is thought as Network intrusion detection system (NIDS). A system that monitors important software files is understood as Host intrusion detection system (HIDS). Wireless sensor networks (WSNs) are vulnerable to different kinds of security threats which will degenrate the performance of the entire network; that may lead to fatal problems like denial of service (DoS) attacks, direction attacks, Sybil attack etc. Key management protocols, authentication protocols and secure routing cannot provide security to WSNs for these varieties of attacks. Intrusion detection system (IDS) could be a solution to the present problem. It analyzes the network by collecting sufficient amount of knowledge and detects abnormal behavior of sensor node(s).

Securing IoT Network against DDoS Attacks using Multi-agent IDS

The crucial issue of Internet of Things (IoT) is vulnerable towards various kinds of security threats, especially on denial-of-service (DoS) attacks as IoT network consists of millions of devices attached to the network. There are plenty of intrusion detection systems (IDSs) available for IoT networks, however, the accuracy detection yet still a big problem. To address the problem, this paper proposes an ensemble IDS for IoT networks. The proposed IDS uses Multi-agent System (MAS) concept and ensemble the Information Gain feature selection algorithm with J48 classifier algorithm for the proposed IDS. Experimental results show the proposed MAS-J48-IDS provides the best accuracy performance of 99.8% for all selected features compared to IDSs that use Naïve Bayesian (NB) and Random Forest (RF) classifiers. Besides, the use of MAS contributes towards the load balancing among the nodes in the network itself.

WITHDRAWN: A review for IOT authentication – Current research trends and open challenges

Abstract Internet of things is becoming the prime technology currently. By the utilization of IOT, different types of gadgets can interface, link and dialogue data without any interruption. IOT brings intelligence and automation in different areas like agriculture, transportation, industry, health and many more. The end point intention of the IOT operations is to extend opulence and productiveness of the stakeholders. IOT composition includes different sensors and other things which are associated with the web. As Web is open architecture, it lay out favourable ground to Intruders for performing different kinds of security threats. Security and Protection are the symbolic point of view for IOT system. IOT gadgets have limitation in terms of storage and also computational efficiency. So, existing traditional approaches can not be deployed directly into IOT Network. Confidentiality, Integrity and Authentication are pillars for IOT Security. Among them, Authentication service is prime nature because it validates identity of gadgets into the network. If Authentication approach is not secured enough than adversary can gain network control and also can launch various other kinds of attacks into the network. In this review article, a detailed analysis of the security related challenges specially related to Authentication and source of threats in IOT applications is discussed. A brief comparison of recent advancements in various domains of IOT Authentication security is also summarized with suggested enhancements. After doing critical review of existing algorithms; we have derived research gap which can provide opportunity for doing research work in IOT Authentication domain.

Cloud-based authenticated protocol for healthcare monitoring system

In this paper, we have developed cloud-based authentication protocol for e-health care monitoring system which provides a secure platform to the patients. By using this system, the patients can get best medical facilities and treatment from the doctors via mobile phones without physically visiting the hospitals. To provide the privacy of patients and the guarantee of the reliability of the system, we have done an informal security analysis of the proposed protocol which validates that it is defending various kinds of security threats. Apart from it, the security of the proposed protocol is also analyzed by using popular automated pro-verif tool. In addition, we compared the proposed protocol with other existing protocols in terms of performance evaluation. The performance evaluation is measured in the context of security features, communication and computation cost as well as execution time also which proves that the same protocol is more efficient, cost effective and applicable for real-life application.

Low-Cost AES-128 Implementation for Edge Devices in IoT Applications

Internet of Things (IoT) is an ecosystem of connected edge devices that are accessible through the internet. Recent research focusses on adding more smartness and intelligence to these edge devices making them susceptible to various kinds of security threats. These edge devices rely on cryptographic techniques to encrypt the pre-processed data collected from the sensors deployed in the field. Since the edge devices are resource constrained, low-cost implementations of cryptographic algorithms are desirable. This work proposes a novel low-cost implementation of a versatile symmetric encryption algorithm namely Advanced Encryption Standard (AES) using time-multiplexed architectures for edge devices. The optimization is carried out in a four-fold manner on AES encryption/decryption hardware based on the resource sharing mechanism with a modified Substitution box achieving a maximum of 1.053[Formula: see text]GHz operating frequency. The aim of this work is to develop an area-power efficient AES architecture with a reasonable throughput suitable for resource constrained applications. The proposed architectures are synthesized on a Virtex-6 FPGA board and the ASIC performance results are obtained using 180[Formula: see text]nm SCL technology library. Implementation results of the proposed AES core integrated with an UART module are shown as a proof of concept.

CONTEMPORARY FORMS OF POLICE TRAINING

Contemporary security challenges necessarily impose the need for changes in conventional police action, which from "power with a stick" should change police in a partner of the community that will jointly deal with global security threats, especially after the events of September 11, 2001, have important changed the perception of what kind of security threats should be handled by police services around the world. Transnational organized crime and money laundering are only part of a series of complex criminogenic forms whose dealing without an exceptionally high level of professionalism and expertise will not achieve more than mediocre results in the pre-trial procedure, which is key to the further form of criminal legal effect of the crime. Professionalism and expertise as one of the basic competencies of the police officer, to deal not only with contemporary, but also with routine police activities, have their foundations in the police training where is the start of all preconditions that form professional police officer.

Privacy Preserving Technique for Data Storage in Cloud Computing

With the emergence of Cloud computing, the traditional computing process has undergone a sea change. Cloud Computing has been proving to be a boon for IT industries in terms of its ability to provide cost effective, power efficient, extensible and pliable computing. Because of its substantial flexibility, Cloud Computing has become an escalate platform for the services of next generation. But inspite of all the advantages, security and privacy of the data being shared on Cloud remains a cause of concern for the users as well as service providers. This paper proposes a ‘Tortoise technique’ aiming to provide more privacy to user’s data without any kind of security threats from outside. As a part of the technique, reduced data is sent to cloud instead of the original encrypted data. We observed an improvement to an order of 2n in the security of data with the help of the proposed technique.

Wireless sensor networks security issues and challenges: A survey

Wireless Sensor Network (WSN) is a rising technology that offers a great assurance towards a variety of revolutionary applications such as military and public. As wireless sensor networks continue to develop, there is a high importance in security mechanisms. As sensor networks works with responsive data and operate in antagonistic environments, it is crucial to address the security issues. The sensing technology united with wireless communication and processing power makes it rewarding. Due to these computing and inherent constraints in resource, sensor network security has special challenges. The low cost and collaborative nature of the wireless networks (WNs) offers significant advantages upon the conventional communication techniques. The wireless communication technology has several kinds of security threats. The spotlight of this paper is towards addressing the security issues and challenges of WSNs. Here the idea is to identify the threats and security mechanism of wireless sensor networks.

Mobile jammer localization and tracking in multi-hop wireless network

The shared nature and open access to the wireless medium make the wireless network vulnerable to different kinds of security threats. Jamming attack may pose a significant threat to the wireless network by occupying the communication channel used by legal nodes. To tackle this security threat, a few anti-jamming schemes have been put forward, such as channel hopping, spatial retreat, etc. Among these strategies, jammer localization has attracted much attention in recent years since it is very helpful for jamming-avoidance routing or even jammer elimination. However, existing algorithms mainly focus on the localization of the stationary jammer, which fail to cope with the scenario where mobile one exists. Besides, the cooperative assumption in sensor localization and object tracking problems in cooperative network configurations will not hold for the jammer localization scenario since jamming attacks can seriously affect normal network transmission. In order to bridge this gap, a Mobile Jammer Localization and Tracking Scheme (MJLTS) is put forward, which contains four steps, i.e., Initial monitoring nodes selection, Cooperative nodes determination, Trilateration localization and Monitoring group handover. In order to evaluate the effectiveness of the proposed scheme, a series of simulation experiments have been conducted. Experimental results show that MJLTS can locate and track mobile jammer effectively and accurately.

Embedded System Confidentiality Protection by Cryptographic Engine Implemented with Composite Field Arithmetic

Embedded systems are subjecting to various kinds of security threats. Some malicious attacks exploit valid code gadgets to launch destructive actions or to reveal critical details. Some previous memory encryption strategies aiming at this issue suffer from unacceptable performance overhead and resource consumption. This paper proposes a hardware based confidentiality protection method to secure the code and data stored and transferred in embedded systems. This method takes advantage of the I/D-cache structure to reduce the frequency of the cryptographic encryption and decryption processing. We implement the AES engine with composite field arithmetic to reduce the cost of hardware implementation. The proposed architecture is implemented on EP2C70 FPGA chip with OpenRisc 1200 based SoC. The experiment results show that the AES engine is required to work only in the case of I/D-cache miss and the hardware implementation overhead can save 53.24% and 13.39% for the AES engine and SoC respectively.

Securing wireless sensor networks for improved performance in cloud-based environments

Cloud computing has a great potential to assist in storing and processing data collected from sensors placed in any environment such as smart homes, vehicles, hospitals, enemy surveillance areas, volcanoes, oceans, etc. The sensors may be implanted in the form of a body sensor network or placed in the surroundings. The data recorded by these sensors may further be used for several applications implemented in the cloud as well as other services. Here, the data is acquired from sensors through the wireless medium. Recent studies show that wireless sensor networks (WSNs) are vulnerable to various kinds of security threats and there is a requirement of a security solution that safeguards them from lethal attacks. In this paper, we modify the low-energy adaptive clustering hierarchy (LEACH) protocol for WSNs and add the functionality of intrusion detection to secure WSNs from sinkhole, black hole, and selective forwarding attacks. The modified protocol is called LEACH++. We perform two types of analyses: numerical analysis to check the effect on throughput and energy, and simulations in Network Simulator-2 (NS-2) to prove the results found from the numerical analysis. The results are quite promising and favor LEACH++ over LEACH under attack with respect to throughput and energy consumption.

Delay Efficient Authenticated Anonymous Secure Routing for MANETs

mobile ad hoc network (MANET) is nothing but the wireless connection of mobile nodes which provides the communication and mobility among wireless nodes without the need of any physical infrastructure or centralized devices such as access point or base station. The communications in MANET is done by routing protocols. At present MANET is used in many real time applications and hence such networks are vulnerable to different kinds of security threats. MANET networks suffered more from security attacks due to use of free wireless communication frequency spectrum and dynamic topology. Therefore it becomes very tough to provide secure to MANET under different adversarial environments like battlefields. For MANET, anonymous communications are vital under the adversarial environments, in which the identification of nodes as well as routes is replaced by pseudonyms or random numbers for the purpose of protection. There are many protocols presented for anonymous communication security for MANET, however suffered from limitations like worst delay, vulnerable to DoS attacks etc. In this paper presents Delay Efficient Authenticated Anonymous Secure Routing (DEAASR) which is extension of existing AASR approach presented recently. The main aim of DEAASR protocol is to provide secure data communication with the goal of improving performance packet delay and routing efficiency for different attacks in MANET.

Non-state Armed Groups as a Threat to Global Security: What Threat, Whose Security?

What kind of security threats do non-state armed groups pose, and to whom? The literature has tended to take the state as a reference point for the study of non-state armed groups: insurgents have long been regarded as domestic military threats, and since 9/11, terrorism has been increasingly treated as a major transnational military threat. Because literature on armed non-state actors typically situates them in the context of war or protracted conflict, the state-centric and militarized view of these groups is rarely contested. However, data on 232 armed groups in twenty-three Asian countries from 1985 to 2014 show that the primary threat such groups most consistently pose is to the human security of local civilian populations, rather than the military security of states. A human security perspective suggests alternatives to military responses, the need for more tailored non-military interventions, and the necessity of improved data collection on non-state armed groups that exist in- and outside the context of conventional war.