Modification Attacks Research Articles

ELPC-Trust Framework for Wireless Sensor Networks

Wireless Sensor Network (WSN) and its security concern play a vital part in its effecting functioning. WSN routing layer attacks pose a great threat to its functionality, whereas if a situation arises in which multiple attacks co-exist, then the scenario will become worse. In such cases the reliability of the network deployed is greatly questionable. Thus an Intrusion detection cum Trust based framework is mandatory to detect such co existing malicious activities in order to maintain the network reliability. Energy packed Cluster heads and sink nodes are utilized for this kind of trust computation process. To achieve this, an energy based abnormality detection of malicious nodes is proposed, upon which based on the packet rate and the lifetime of sensor nodes a trust value is computed. The trust framework involves two phases namely Threat Detection phase which performs attack categorization based on Energy, Packet Count and Z scores followed by the second phase which computes the trust values for each node. Trust scores are computed based on the intensity of the attack in terms of their network performance degradation. Attacks such as Gray hole, Black hole, Wormhole, Flooding and Data Modification attacks are addressed. Data Modification attacks are detected uniquely based on the Z scores values of the sensed data set and upon the location of the nodes. If any node is found to consume abnormal energy either below or above certain threshold, identified nodes are categorized into two groups based on their threshold. Hierarchical decision making is introduced, which implies only the abnormal energy consuming nodes (among the total sensor nodes deployed in the network) are considered for further packet count based attack categorization. This way we can reduce the computational overhead of traditional trust models in which each node is checked for its reliability against multiple trust factors. Upon detecting the attacks and computing the trust values of nodes, only the nodes which have a nominal trust value are included in the routing process. Simulations were carried out in NS2 Mannasim Framework with static and mobile sensor nodes. Proposed Energy-Lifetime-Packet Count (ELPC)-Trust framework was tested under five different types of attack scenarios in a co-existing manner. Performance of the network by including the proposed ELPC trust and by ignoring the detected malicious nodes increases the throughput by 500 and PDR by 40% when compared with the attack scenario. But on the other hand introduces a delay of 0.5 seconds. Network Performance is improved in case of static networks. Under mobile scenarios proposed ELPC trust incurs high amount of delay.

Safe is the New Smart: PUF-Based Authentication for Load Modification-Resistant Smart Meters

In the energy sector, IoT manifests in the form of next-generation power grids that provide enhanced electrical stability, efficient power distribution, and utilization. The primary feature of a Smart Grid is the presence of an advanced bi-directional communication network between the Smart meters at the consumer end and the servers at the Utility Operators. Smart meters are broadly vulnerable to attacks on communication and physical systems. We propose a secure and operationally asymmetric mutual authentication and key-exchange protocol for secure communication. Our protocol balances security and efficiency, delegates complex cryptographic operations to the resource-equipped servers, and carefully manages the workload on the resource-constrained Smart meter nodes using unconventional lightweight primitives such as Physically Unclonable Functions. We prove the security of the protocol using well-established cryptographic assumptions. We implement the proposed scheme end-to-end in a Smart meter prototype using commercial-off-the-shelf products, a Utility server, and a credential generator as the trusted third party. Additionally, we demonstrate a physics-based attack named load modification attack on the Smart meter to demonstrate that merely securing the communication channel using authentication does not secure the meter, but requires further protections to ensure the correctness of the reported consumption. Hence, we propose a countermeasure to such an attack that goes side-by-side with our protocol implementation.

Hybrid GSW and DM based fully homomorphic encryption scheme for handling false data injection attacks under privacy preserving data aggregation in fog computing

In recent years, the area of fog computing is receiving maximum focus due to the potential improvements in the cloud computing field. Fog computing is capable of resolving issues that includes location awareness, inadequate mobility support and high latency in the cloud computing environment. The internet of things (IoT) comprises of a collection of IoT equipments connected to fog nodes in order to aid the cloud service center for storing and processed a portion of data in prior. This process of storing and processing greatly minimizes the pressure in data processing with enhanced service and real time quality. However, data modification attacks and false data injection attacks introduce significant challenges over the fog nodes during the event of data processing. In this paper, Hybrid GSW (Gentry, Sahai, and Waters) and DM (Ducas and Micciancio) based fully homomorphic encryption (HGSW–DM–FHE) scheme was proposed for handling false data injection attacks under privacy preserving data aggregation in fog computing. This proposed HGSW–DM–FHE scheme is highly fault tolerant, since the process of data aggregation from other devices is not influenced even when the fog devices fails in operation. In addition, the proposed HGSW–DM–FHE scheme is determined to be efficient and secure by preventing the data injected from legal IoT devices are unaltered and protected immaterial to the honesty and maliciousness of the cloud control center and fog nodes.

Detection of integrity loss in networked control systems using an interval finite memory observer

The study focuses on the design of a diagnosis tool to detect a content modification attack of an uncertain network control system. In the literature, a content modification attack is designed to produce trajectory modification on tele-operated systems by modifying data transmitted through a network. Attack is difficult to detect because modification is transparent to classical detection tools. Moreover, uncertainties in this type of system complexify detection. So, an interval finite memory observer is used to estimate this type of system with uncertainties. Robust estimations provided by finite memory observers are combined with a specific strategy to detect modifications to measurements, further to an attack. Moreover, the corrupted data are corrected using an estimator to let the system continue working. A simulation of two haptic bilateral tele-operated systems validates the detection and data integrity correction strategies developed in this work.

Review of Prevention Schemes for Modification Attack in Vehicular Ad hoc Networks

Vehicular Ad-hoc Network (VANET) technology is the basis of Intelligent Transportation System (ITS) connectivity that enables the delivery of useful information to and fro between vehicles in vehicle-to-vehicle communication mode; or between vehicle and infrastructure in vehicle-to-infrastructure mode for safety and comfort. However, due to the openness of the wireless medium used by VANET, the technology is vulnerable to security threats in both communication modes. In this study, the essential background of VANET from architectural point of view and communication types are discussed. Then, the overview of modification attack in VANET is presented. In addition, this paper thoroughly reviews the existing prevention schemes for modification attack in VANET. This review paper reveals that there is still a need for a better and more efficient preventive scheme to address the modification attack in VANET.

RFPS: A Robust Feature Points Detection of Audio Watermarking for Against Desynchronization Attacks in Cyber Security

Digital watermarking is an effective covert communication technique in the military field, which can solve the problems in traditional encryption. In general, the Spread Spectrum (SS) algorithm can well satisfy the requirements of concealment and anti-interference in the covert communication process. However, it has a natural defect in resisting desynchronization attacks. In this paper, we propose a Robust Feature Points Scheme (RFPS) against desynchronization attacks by calculating the maximum response value of the second-order derivative of the original audio signal. The maximum response value will be used as a feature point and the audio segments centering at the detected feature points are extracted for both watermark embedding and extraction process. This study mainly focuses on cropping attacks and pitch invariant Time-Scale Modification (TSM) attacks. The experimental results show that under non-uniform cropping attacks, the proposed method can extract the watermark information without any bit error rate. Even in the case of the pitch-invariant TSM attacks, the proposed scheme has great improvement compared with the existing works.

Modeling software architecture design on data storage security in cloud computing environments

Cloud-based computation is known as the source architecture of the upcoming generation of IT enterprise. In context to up-coming trade solutions, the Information Technology sections are established under logical, personnel, and physical control, it transfers application software and large database to appropriate data centers, where security and management of database with services are not trustworthy fully. So this process may face many challenges towards society and organizations and that not been well understood over a while duration. This becomes one of the major challenges days today. So in this research, it focuses on security-based data storage using cloud, which plays one of the important aspects bases on qualities of services. To assure user data correctness in the cloud system, a flexible and effective distributed technique with two different salient features was examined by utilizing the token called homomorphic with erasure-coded data for distributed verification, based on this technique it achieved error data localization and integration of storage correctness. Also, it identifies server misbehaving, efficient, and security-based dynamic operations on data blocking such as data append, delete, and update methods. Performance analysis and security show the proposed method is more effective resilient and efficient against Byzantine failure, even server colluding attacks and malicious data modification attacks.

CL-CPPA: Certificate-Less Conditional Privacy-Preserving Authentication Protocol for the Internet of Vehicles

The conditional privacy-preserving authentication (CPPA) protocol has applications in the construction of secure Internet of Vehicles (IoV) due to its capability to achieve both privacy preservation and authentication simultaneously. We demonstrate the challenge in designing the secure CPPA protocols, e.g., the insecurity of master key, invalidity of pseudo-identity (PID), linkability, etc. Then, we present a certificate-less CPPA (CL-CPPA) protocol to be used in vehicular environments that supports both privacy and security requirements in the IoV system, where the vehicles and trusted authority (TA) does not need to store any certificates for verification and tracking, respectively. We also demonstrate that our proposed CL-CPPA protocol is secure against modification attacks, impersonation attacks, and other existing attacks. A comparative summary shows that our proposed CL-CPPA protocol has lower computation and communication costs in comparison to the state-of-the-art protocols.

A Secure Image Watermarking Architecture based on DWT-DCT Domain and Pseudo-Random Number

The outburst media contents in today's platforms a need for securing the ownership, authentication and data tampering raised. Protection against tapering the media contents is one of the challenges facing the individuals and industry in a digital age, in another hand rise of artificial neural network models such as deep fake and media contents editors threaten the originality and ownership of media in today digital base life. Demands to secure the ownership and authenticity of data that create by author risen. Hidden the true identity and originality of the media is one way to protect digital creation. Using a watermarked content is one way to protect the ownership of the digital media. It is possible to hide the watermark in the original content to secure it from tapering or illegally usage of the product, by hiding the watermark more securely and acceptable imperceptibility to sensors it is possible to have minimised the effect of watermark process on original contents. In this paper researchers designed an architecture that enhanced and centred on robustness and security of the watermarked image. In this method, we used four random number as seeds generated by a pseudo-random number generator, randomised numbers used as Initial value for encryption of watermark image. Watermark designed in a way that has a lesser footprint on the covered image. Outputs evaluate using PSNR, SSIM and different modification attacks tested against the watermarked image. The result shows that the architecture output is in acceptance range and enhanced the security and robustness of watermarking compere to some existing watermarking architectures and algorithms.

Fault tolerant controlled quantum dialogue against collective noise**Project supported by the National Natural Science Foundation of China (Grant No. 61502048), the Natural Science Foundation of Shanxi Province of China (Grant No. 201801D221159), the Scientific and Technological Innovation Programs of Higher Education Institutions in Shanxi Province of China (Grant No. 2019L0470), and Youth Research Foundation of Shanxi University of Finance and

Quantum system is inevitably affected by the external environment in the real world. Two controlled quantum dialogue protocols are put forward based on logical χ-type states under collective noise environment. One is against collective-dephasing noise, while the other is against collective-rotation noise. Compared with existing protocols, there exist several outstanding advantages in our proposed protocols: Firstly, the χ-type state is utilized as quantum channels, it possesses better entanglement properties than GHZ state, W state as well as cluster state, which make it difficult to be destroyed by local operations. Secondly, two kinds of logical χ-type states are constructed by us in theory, which can be perfectly immune to the effects of collective noise. Thirdly, the controller can be offline after quantum distribution and permission announcement, without waiting for all the participants to complete the information coding. Fourthly, the security analysis illuminates that our protocols can not only be free from the information leakage, but also resist against the intercept-and-resend attack, the entanglement-and-measure attack, the modification attack, the conspiring attack, and especially the dishonest controller’s attacks.

Secure Trust-Based Blockchain Architecture to Prevent Attacks in VANET.

Vehicular ad hoc networks (VANET) are also known as intelligent transportation systems. VANET ensures timely and accurate communications between vehicle to vehicle (V2V) and vehicle to infrastructure (V2I) to improve road safety and enhance the efficiency of traffic flow. Due to its open wireless boundary and high mobility, VANET is vulnerable to malicious nodes that could gain access into the network and carry out serious medium access control (MAC) layer threats, such as denial of service (DoS) attacks, data modification attacks, impersonation attacks, Sybil attacks, and replay attacks. This could affect the network security and privacy, causing harm to the information exchange within the network by genuine nodes and increase fatal impacts on the road. Therefore, a novel secure trust-based architecture that utilizes blockchain technology has been proposed to increase security and privacy to mitigate the aforementioned MAC layer attacks. A series of experiment has been conducted using the Veins simulation tool to assess the performance of the proposed solution in the terms of packet delivery ratio (PDR), end-to-end delay, packet loss, transmission overhead, and computational cost.

On verifying the authenticity of e-commercial crawling data by a semi-crosschecking method

Purpose Data crawling in e-commerce for market research often come with the risk of poor authenticity due to modification attacks. The purpose of this paper is to propose a novel data authentication model for such systems. Design/methodology/approach The data modification problem requires careful examinations in which the data are re-collected to verify their reliability by overlapping the two datasets. This approach is to use different anomaly detection techniques to determine which data are potential for frauds and to be re-collected. The paper also proposes a data selection model using their weights of importance in addition to anomaly detection. The target is to significantly reduce the amount of data in need of verification, but still guarantee that they achieve their high authenticity. Empirical experiments are conducted with real-world datasets to evaluate the efficiency of the proposed scheme. Findings The authors examine several techniques for detecting anomalies in the data of users and products, which give the accuracy of 80 per cent approximately. The integration with the weight selection model is also proved to be able to detect more than 80 per cent of the existing fraudulent ones while being careful not to accidentally include ones which are not, especially when the proportion of frauds is high. Originality/value With the rapid development of e-commerce fields, fraud detection on their data, as well as in Web crawling systems is new and necessary for research. This paper contributes a novel approach in crawling systems data authentication problem which has not been studied much.

FOTB: a secure blockchain-based firmware update framework for IoT environment

Recently, numerous exploitations and attacks in IoT environment occurred all over the world. One of the major attacking channels is utilizing the firmware of IoT devices as the access interface to compromise the targeted IoT devices. Therefore, it is important for IoT device manufacturers to support secure and efficient firmware update functionality for sold or deployed IoT devices. In this paper, a secure and verifiable blockchain-based firmware update framework for IoT environment is proposed. The aims of the proposed framework are providing secure peer-to-peer verification mechanism on each new version of firmware released by corresponding device manufacturer and providing a reliable way to distribute the updated firmware to IoT devices in timely manner. Furthermore, the utilization of blockchain technology in the proposed framework ensures the integrity of firmware during its distribution through Internet. The proposed firmware update framework consists of four processes: creation of firmware update contract, creation of third-party firmware update contract, PUSH update mechanism and PULL update mechanism. Six corresponding protocols are derived to support the four processes. The evaluation on performance and security strength of the proposed firmware update framework is conducted. Based on the proofs of formal security analysis, the proposed framework supports mutual authentication and defends against major cyber attacks: firmware modification attack, impersonation attack, man-in-the-middle attack and replay attack.

An improved three-factor authentication scheme for patient monitoring using WSN in remote health-care system

Background and objective: Wireless sensor network-based remote health-care systems are becoming popular day by day with the rapid growth of Internet technologies and the proliferation of Internet-based application. A remote health-care system always demands a flexible and secure mechanism since any misuse of health-care related data leads to the risk of a patient’s life. To make patient-related information more secure, we further consider that the patient related all the communication must be anonymous and untraceable to prevent traffic analysis. This particular approach makes the healthcare system more secure and suitable for real-time scenario.Methods: Recently, a three-factor mutual authentication scheme in wireless sensor networks (WSNs) is suggested by Challa et al. to deal with the security of the remote health-care system. They believe that their scheme is suitable and ensure the security of the remote health-care system. However, the authors of this article have found that their scheme suffers from sensor node capture attack; user identity reveals attack, session key leak attack, and message modification attack. Further, their scheme designs improper user revocation phase and re-registration phase, which produces the risk of illegal use of smartcard by a legitimate user. So, in this paper, the authors have given an enhanced mechanism for developing a three-factor secure mutual authentication scheme to attain effectively the security of the remote health-care system for patient monitoring. Further, the proper revocation and re-registration of users have been incorporated to support some additional securities in a case when the user lost his/her smartcard or smartcard is stolen.Results and conclusions: Testing with the BAN logic model affirms the accuracy of mutual authentication of the scheme designed in this paper. Also, the output of the AVISPA simulation depicts that the enhanced scheme efficiently tackle the active and passive attacks. Further, the comparative studies of our scheme with state-of-the-art schemes are also acceptable in terms of different security aspects.

An Efficient Hybrid Message Authentication Scheme in Vehicular Ad Hoc Networks

Vehicular ad hoc networks (VANETs) are under active development phase, especially due to the latest and foremost wireless communication and networking technologies. Basically VANETs consist of some parts which play the major role to enable message authentication between vehicles which are on-board units as well as roadside units. To reduce the load on trusted authorities several roadside units are set up and message authentication using proxy vehicles has been proposed. This used to minimize the computational overhead of roadside units significantly. Due to this message authentication scheme the efficiency of roadside unit improves. In this paper we propose an Efficient Hybrid Message Authentication Scheme (EHMAS) that deals with the technique where it not only guarantees message authenticity, but it is also resistant against impersonation and modification attacks. First we explain the properties of the attacks in security model. Second we provide an EHMAS scheme where a novel authentication technique is proposed for registration and verification of users using elliptic crypto system. Finally the paper concluded with the scope of the proposed work and provides future enhancement using machine learning techniques.

Intercept-and-resend attack and improvement of semiquantum secure direct communication using EPR pairs

Zhang et al. (Quantum Inf Process 16:117, 2017. https://doi.org/10.1007/s11128-017-1573-3 ) proposed a semiquantum secure direct communication (SQSDC) using Einstein–Podolsky–Rosen pairs. However, as shown in this study, an eavesdropper can reveal the sender’s secret message by performing an intercept-and-resend attack. Furthermore, an eavesdropper can also launch a modification attack to modify the sender’s secret message without being detected. Without considering these security issues, the SQSDC protocol could fail at providing the secret message. Thus, an improvement is proposed to circumvent these problems and to improve the qubit efficiency from 10 to 17%.

Distributed scheme to authenticate data storage security in cloud computing

Cloud Computing is the revolution in current generation IT enterprise. Cloud computing displaces database and application software to the large data centers, where the management of services and data may not be predictable, where as the conventional solutions, for IT services are under proper logical, physical and personal controls. This aspect attribute, however comprises different security challenges which have not been well understood. It concentrates on cloud data storage security which has always been an important aspect of quality of service (QOS). In this paper, we designed and simulated an adaptable and efficient scheme to guarantee the correctness of user data stored in the cloud and also with some prominent features. Homomorphic token is used for distributed verification of erasure – coded data. By using this scheme, we can identify misbehaving servers. In spite of past works, our scheme supports effective and secure dynamic operations on data blocks such as data insertion, deletion and modification. In contrast to traditional solutions, where the IT services are under proper physical, logical and personnel controls, cloud computing moves the application software and databases to the large data centers, where the data management and services may not be absolutely truthful. This effective security and performance analysis describes that the proposed scheme is extremely flexible against malicious data modification, convoluted failures and server clouding attacks.

Secure overlay communication and control model for decentralized autonomous control of smart micro-grids

Abstract The smart grid is expected to self-heal, self-optimize, self-configure, and self-protect from physical and cyber-disturbances. These requirements are expected to be built into intelligent electronic devices (IEDs), which would enable autonomous control of power distribution buses in the smart grid. Power distribution buses are used to redistribute electric loads across power generation sources, control voltage/VAR, satisfy economic dispatch objectives and improve the resiliency of the grid against physical disturbance and cyber-attacks. The current power grid has a centralized communication system with a centralized human-in-the-loop controller (such as in a typical SCADA system) in order to adjust operating configurations of equipment within a distribution zone. Implementing autonomous functions by moving from a centralized control architecture to a decentralized architecture can empower bus controllers with greater control over local equipment and operations. We present the secure overlay communication model (SOCOM) for smart microgrids as a solution to decentralizing the traditional centralized control architecture and a decentralized communication platform for peer bus controllers to operate and optimize operations of the grid. We demonstrate the utility of this overlay model in an 11-Bus microgrid network to achieve self-healing. Using this model, we were able to accurately detect data modification attacks that target the controller’s state-estimation and malicious control of switching devices.

Efficient Intrusion Detection With Bloom Filtering in Controller Area Networks

Due to its cost efficiency, the controller area network (CAN) is still the most wide-spread in-vehicle bus, and the numerous reported attacks demonstrate the urgency in designing new security solutions for CAN. In this paper, we propose an intrusion detection mechanism that takes advantage of Bloom filtering to test frame periodicity based on message identifiers and parts of the data-field which facilitates detection of potential replay or modification attacks. This proves to be an effective approach since most of the traffic from in-vehicle buses is cyclic in nature and the format of the data-field is fixed due to rigid signal allocation. Bloom filters provide an efficient time-memory tradeoff which is beneficial for the constrained resources of automotive grade controllers. We test the correctness of our approach and obtain good results on an industry-standard CANoe-based simulation for a J1939 commercial-vehicle bus and also on CAN with flexible data-rate traces obtained from a real-world high-end vehicle. The proposed filtering mechanism is straightforward to adapt for any other time-triggered in-vehicle bus, e.g., FlexRay, since it is built on time-driven characteristics.

Routing-Aware and Malicious Node Detection in a Concealed Data Aggregation for WSNs

Data aggregation in Wireless Sensor Networks (WSNs) can effectively reduce communication overheads and reduce the energy consumption of sensor nodes. A WSN needs to be not only energy efficient but also secure. Various attacks may make data aggregation unsecure. We investigate the reliable and secure end-to-end data aggregation problem considering selective forwarding attacks and modification attacks in homogeneous WSNs, and propose two data aggregation approaches. Our approaches, namely Sign-Share and Sham-Share, use secret sharing and signatures to allow aggregators to aggregate the data without understanding the contents of messages and the base station to verify the aggregated data and retrieve the raw data from the aggregated data. To the best of our knowledge, this is the first lightweight en-routing malicious node detection in concealed data aggregation. We have performed an extensive simulation to compare our approaches and the two state-of-the-art approaches PIP and RCDA-HOMO. The simulation results show that both Sign-Share and Sham-Share consume a reasonable amount of time in processing and aggregating the data. The simulation results show that our first approach achieved an average network lifetime of 102.33% over PIP and average aggregation energy consumption of 74.93%. In addition, it achieved an average aggregation processing time and sensor data processing time of 95.4% and 90.34% over PIP and 98.7% and 92.07% over RCDA-HOMO, respectively, and it achieved an average network delay of 71.95% over PIP. Although RCDA-HOMO is completely a different technique, a comparison was performed to measure the computational overhead.