Two-factor Research Articles

Peran Sistem Operasi Seluler dalam Meningkatkan Efisiensi Energi dan Keamanan Mobile Banking untuk Perekonomian Berkelanjutan

In the digital era, mobile operating systems (OS) play a pivotal role beyond mere application execution platforms. They are essential for optimizing energy efficiency and enhancing security, particularly in the realm of mobile banking. This paper explores the critical role of mobile OS in supporting sustainable economic growth through efficient energy use and robust security measures in mobile banking transactions. The focus is on how these OS advancements contribute to a secure and environmentally responsible digital economy. Key aspects covered include energy optimization strategies, security enhancements such as data encryption and multi-factor authentication, and the integration of these technologies into mobile banking applications. By addressing these challenges, mobile OS not only ensures sustainable economic development but also fosters financial inclusivity and security in an increasingly digital world.

A Privacy-Preserving Three-Factor Authentication System for IoT-Enabled Wireless Sensor Networks

Recently, Sahoo et al. introduced a three-factor authentication scheme for Wireless Sensor Networks (WSNs) based on an elliptic curve cryptosystem. Nonetheless, upon closer examination, we have identified critical vulnerabilities in their scheme, including susceptibility to user impersonation, gateway impersonation, sensor node impersonation attacks, and a breach in the three-factor security aspect. Further, the scheme fails to withstand offline sensor node identity guessing attacks, man-in-the-middle attacks, and known session-specific temporary information attacks. Intending to elevate both security and efficiency, we propose a novel three-factor authentication scheme that capitalizes on the strengths of a fuzzy extractor and a cryptographic one-way hash function. The proposed scheme’s security has been rigorously assessed using the SCYTHER tool, confirming its validity under the real-or-random (ROR) model. Moreover, a heuristic analysis exemplifies that the scheme effectively withstands various known cryptographic attacks. Consequently, the performance comparisons establish the superiority of our scheme over related approaches in terms of security and efficiency. Additionally, its suitability for WSNs is evident due to the minimal overhead on the sensor nodes, making it a highly promising solution for real-world implementation.

CYBERSECURITY SOLUTIONS AND PRACTICES: FIREWALLS, INTRUSION DETECTION/PREVENTION, ENCRYPTION, MULTI-FACTOR AUTHENTICATION

CYBERSECURITY SOLUTIONS AND PRACTICES: FIREWALLS, INTRUSION DETECTION/PREVENTION, ENCRYPTION, MULTI-FACTOR AUTHENTICATION

Penyalahgunaan Data Pribadi Sebagai Bentuk Kejahatan Sempurna Dalam Perspektlf Hukum Siber

The misuse of personal data has become a highly relevant issue in the digital age, where cases of privacy violations are increasing sharply. Personal data such as contact information, transaction history, and online activities have become prime targets for cybercriminals to use for fraud, identity theft, and even political manipulation. These crimes often occur in various locations around the world, taking advantage of regulatory breaks and jurisdictional differences, making law enforcement difficult. To address this problem, a multi-dimensional approach is required. Stricter regulations, such as the General Data Protection Regulation (GDPR) in the European Union, are needed to protect personal data with strict sanctions for violations. In addition, international collaboration is essential as cybercrime often crosses national borders, requiring close cooperation between countries to track and apprehend perpetrators. Public awareness and education are also key components in reducing the risk of cybercrime. People should be encouraged to take proactive measures such as the use of strong passwords and two-step verification. Companies and service providers also need to take responsibility for customer data security by implementing strong protection measures and transparency in data management. In conclusion, the use of personal data as a form of perfect crime is a complex issue, requiring strict regulation, international collaboration, and awareness raising to create a safer digital environment.

Perceptions of Students at Andalas University's Payakumbuh Campus Regarding the Security of Academic Information Systems

Higher Education is one of the public service providers that wants to provide the best service to internal and external parties who need information, namely by utilizing academic information systems. The use of academic information systems is prone to data and information crimes, which are problems experienced by many system users and this also occurs in Indonesia. The method in this study uses a qualitative description method in this study and data collection is obtained using triangulation techniques. The results of the study, that it is necessary to improve information security from various threats, thus ensuring the security of valuable information assets. Information security using The International Organization for Standardization (ISO)/IEC 27001. In addition, it is also necessary to perform two-factor authentication which adds a two-step verification process to access the account.

Multi-factor Authentication Framework for Secured Data Access in Cloud Computing

Aims and Background: Accessing data services on the cloud raises serious concerns about security and privacy. To verify a client's stated identity, the existing authentication approach uses just one authentication factor. However, traditional techniques of one-factor authentication are inefficient since they demand an excessive amount of user information and expose their private data to eavesdropping. Methods: Cloud-based data storage is susceptible to both external and internal threats. Information security relies heavily on authentication, which is a method for verifying user identities before granting them access to protected data. When it comes to protecting data in a cloud computing environment from the most cutting-edge methods of attack, traditional password authentication simply isn't enough. For the purpose of protecting user identities in the cloud, this study presents interactive multi-layer authentication systems. Various access control policies are used when validating users in the cloud. Registration, permissions, and authentication factors for users are all parts of the cloud app's security process. Results: An intrusion detection system is built into the security mechanism to help identify people who could be malevolent. Various techniques are available for user identity verification, including intrusion detection, access control, and multi-factor authentication. The last step is to encrypt the data so that no one else can read it. Conclusion: To guarantee the effectiveness and accuracy of the suggested frameworks and methodology, they are experimentally evaluated. There were few false positives and a high detection rate.

Enhancing Utility Sector Efficiency and Security: Integrating Digital Identity Systems Amidst Privacy and Ransomware Challenges

The integration of digital identity systems within gas and electric utilities has the potential to significantly enhance operational efficiency and customer service. However, this transformation brings forth critical challenges related to privacy and cybersecurity, including the rising threat of ransomware attacks. These attacks can severely disrupt operations and compromise data integrity, underscoring the need for both preventive measures and robust recovery strategies. This review paper delves into the intersection of these domains, analyzing the current landscape of digital identity systems in the utility sector, identifying key vulnerabilities, and evaluating existing regulatory frameworks. Through an examination of case studies and best practices, the paper offers recommendations to strengthen digital identity infrastructures, focusing on advanced encryption, multi-factor authentication, continuous monitoring, and effective ransomware recovery strategies. These insights aim to assist utility companies in safeguarding consumer data and ensuring the integrity of essential services

Patients' experiences of a digital group education targeting kinesiophobia after myocardial infarction or atrial fibrillation - a qualitative pilot study

Abstract Background Fear of movement (kinesiophobia) is common among patients after a myocardial infarction or atrial fibrillation. The kinesiophobia is developed due to the patients’ beliefs that physical activity may cause re-injury. This negatively affects their ability to perform physical activity which is stated as the first line treatment in present guidelines. Purpose To explore how patients with myocardial infarction and/or atrial fibrillation experience participation in a digital group education targeting kinesiophobia and physical activity. Methods Seven women (55-81 years) with myocardial infarction and/or atrial fibrillation that had occurred at least 6 months earlier, and kinesiophobia, i.e., score of ≥ 37 on the Tampa Scale of Kinesiophobia Swedish Version for the Heart, were included. They took part in a digital program that was based on problem-based learning and cognitive behavioural therapy and delivered via a video conferencing platform over 8 weeks and supervised by a nurse or physiotherapist. The program covered topics such as myocardial infarction, atrial fibrillation, kinesiophobia, physical activity, and exposure. A digital platform with two-factor authentication for login was developed to provide educational materials, including tutorial group scenarios, streamed lectures, factual texts, and homework assignments. Individual semi-structured interviews were conducted with the women via a video conferencing platform after the 8-week program and transcripts were analysed using conventional qualitative content analysis. Preliminary results The women felt empowered after the digital encounters and joyful discussions with the group members. The educational materials and their own search for information, which was discussed in the group made them feel enlightened. The kinesiophobia was relieved or gone according to their experiences. This promoted the women to be physically active based on their own preferences. Initially, experiences of stress due to technical problems were felt. The tutor was attentive and enabling in guiding the women during the meetings on the video conferencing platform. Conclusions A digital group education targeting kinesiophobia after myocardial infarction and/or atrial fibrillation was experienced as feasible, enlightening, and empowering in a small group of women. The kinesiophobia was relieved or gone. This promoted them to perform physical activity as they preferred, and which is important for their recovery. More and larger studies are needed to show if a digital group educational program via a video conferencing platform can reduce kinesiophobia and promote physical activity after myocardial infarction or atrial fibrillation.

Opportunistic Sensor-Based Authentication Factors in and for the Internet of Things.

Communication between connected objects in the Internet of Things (IoT) often requires secure and reliable authentication mechanisms to verify identities of entities and prevent unauthorized access to sensitive data and resources. Unlike other domains, IoT offers several advantages and opportunities, such as the ability to collect real-time data through numerous sensors. These data contains valuable information about the environment and other objects that, if used, can significantly enhance authentication processes. In this paper, we propose a novel idea to building opportunistic sensor-based authentication factors by leveraging existing IoT sensors in a system of systems approach. The objective is to highlight the promising prospects of opportunistic authentication factors in enhancing IoT security. We claim that sensors can be utilized to create additional authentication factors, thereby reinforcing existing object-to-object authentication mechanisms. By integrating these opportunistic sensor-based authentication factors into multi-factor authentication schemes, IoT security can be substantially improved. We demonstrate the feasibility and effectivenness of our idea through illustrative experiments in a parking entry scenario, involving both mobile robots and cars, achieving high identification accuracy. We highlight the potential of this novel method to improve IoT security and suggest future research directions for formalizing and comparing our approach with existing techniques.

Analysis of problems and countermeasures in computer network engineering security

This paper analyzes the existing security issues in computer network engineering and proposes a series of countermeasures. To address the problems of hacker attacks and information leakage, it is recommended to strengthen network monitoring and the application of encryption technology. For the issues of malware and virus dissemination, it is advised to regularly update antivirus software and enhance employee security awareness training. Regarding network data leakage and privacy breaches, the use of secure transmission protocols and multi-factor authentication technology is advocated. For network security management and maintenance issues, establishing a sound security management system and emergency response plans is recommended to ensure the stable operation of network systems. Through the implementation of the above measures, the security level of computer network engineering can be effectively improved, ensuring the normal operation of network systems and the security of information.

Realization of Reliable and Effective Authentication in Intelligent Systems by Using Visual Biometrics Methods

The main purpose of this article is to consider the aspects of ensuring security and increasing the efficiency of the authentication process in intelligent systems using visual biometrics. The work is aimed at the development and improvement of authentication systems using advanced biometric identification methods. An intelligent system has been created that ensures secure authentication of users of the current system, using a Siamese neural network. In addition to the implementation of basic security measures in the form of hashing and saving user logins and passwords, the implementation of two-factor authentication is important nowadays, which significantly strengthens the protection of user data and prevents most modern methods of hacking and stealing user data. Two-factor authentication is implemented as a technology for searching, recognizing and comparing the faces of system users, as visual biometrics is more secure than other types of two-factor authentication. Different variations of the possible implementation of Siamese neural network using Contrastive loss function and more modern Triplet loss function were reviewed and accordingly, a neural network using Triplet loss function was accomplished and trained. After training and verifying the correct operation of the neural network, it was integrated into the created intelligent system, thanks to which an effective way of recognizing the face of the system user was created, saving the received information in the database and further comparing the current user with the stored face during authentication. As a result, a secure and reliable intelligent system was created that cutting down the risk of unapproved access to the user account and uses an effective and modern method of user authentication.

IMPACT OF ONLINE PAYMENT SYSTEMS ON CUSTOMER TRUST AND LOYALTY IN E-COMMERCE ANALYZING SECURITY AND CONVENIENCE

This study systematically reviews the impact of online payment systems on customer trust and loyalty in e-commerce, adhering to PRISMA guidelines. The findings highlight the critical importance of security, convenience, and transparency in shaping customer perceptions and behaviors. Secure payment systems, featuring robust encryption and multi-factor authentication, are essential in protecting sensitive information and mitigating fraud risks, thereby enhancing customer confidence. Convenience, characterized by user-friendly interfaces, multiple payment options, and quick transaction processes, significantly improves the overall shopping experience and fosters customer satisfaction. Transaction transparency, through clear communication about charges, detailed receipts, and real-time tracking, is pivotal in building and maintaining trust. The review underscores the strong relationship between trust and loyalty, revealing that secure, convenient, and transparent payment systems are vital for achieving long-term customer loyalty. E-commerce platforms that prioritize these aspects can significantly enhance customer trust and loyalty, ensuring sustained success in the competitive digital marketplace. The study provides valuable insights and practical recommendations for e-commerce businesses to optimize their online payment systems and build lasting customer relationships.

The Current Status and Challenges of Cybersecurity Risks

<i>Research Context and Aims</i>: The swift expansion of internet technologies has rendered the digital network essential to contemporary life, highlighting the significance of cybersecurity. Network data not only encompasses personal information management and communication but also pertains to the protection of confidential corporate, governmental, and vital national infrastructures. Consequently, cybersecurity has become a critical issue in current society. Frequent occurrences like privacy violations, data thefts, and national security threats underline the critical need for enhanced network defenses and protective measures. <i>Research Approach</i>: This study examines the state of cybersecurity by assessing pertinent studies across public databases such as PubMed, CNKI, and CrossRef. It compiles and evaluates significant cybersecurity events including data breaches, malware attacks, and phishing, outlining key security challenges faced by networks. The paper also evaluates the current cybersecurity technologies and methods, pinpointing their effectiveness and limitations in addressing network threats. <i>Research Findings</i>: The findings reveal that cyber attackers have refined their methods, employing sophisticated, covert techniques for prolonged periods, which often outpace current defenses. In cases of data breaches, perpetrators frequently utilize precise social engineering or deploy advanced persistent threats (APTs). Additionally, the proliferation of IoT technology has not only obscured the boundaries of cybersecurity but also broadened potential attack vectors. Despite the implementation of security measures like encryption and multi-factor authentication, these can be compromised by managerial or operational oversights. <i>Research Conclusions</i>: With the cybersecurity landscape becoming increasingly challenging, future defenses will likely prioritize the adoption of integrated, proactive strategies. It is crucial to foster the development of smart security solutions, such as leveraging artificial intelligence to detect and respond to anomalies. Furthermore, boosting security awareness among users and ensuring standardized practices are imperative. Ultimately, formulating future cybersecurity policies will require a holistic approach, integrating technological, managerial, legal, and educational initiatives to forge a robust network defense architecture.

A methodical examination of single and multi-attacker flood attacks using RPL-based approaches

The Internet of Things (IoT) constitutes an intricate network of physical entities, ranging from vehicles to home appliances, each ingrained with electronics, software, sensors, and internet connectivity to facilitate data exchange and collection. This novel realm of interconnectivity, while yielding considerable advantages, also invites concerns over cybersecurity, as the vast amount of sensitive data gathered by IoT devices necessitates safeguarding against potential cyber breaches. In this context, the focus of cybersecurity in IoT involves the deployment of diverse technologies, standards, and optimum practices including, but not limited to, encryption, firewalls, and multi-factor authentication. Hence, while IoT contributes significantly to societal advancement, addressing the associated security concerns remains an imperative task. This study therefore delves into an examination of flood attacks, a prevalent form of cyber assault aimed at IoT devices. The study explored the ramifications of such an attack on an IoT system by analyzing network traffic in scenarios of singular and multiple attackers. A benchmark model devoid of an attack was employed for comparative purposes. To circumvent additional stress on the operational system, network packets were mirrored through cloud infrastructure and subsequently relayed to artificial intelligence (AI) and forensic analysis tools for real-time examination. To assure the integral cybersecurity component of continuity within IoT systems, the attacking entities were identified through AI, and forensic tools were employed to conduct real-time data analysis, thereby enabling continuous network monitoring. This study introduces an innovative approach to detecting flood attacks on IoT systems by leveraging a novel AI-based technique that integrates the ’6LoWPAN.Pattern’ feature, previously unexplored in this context. Extensive simulations were conducted to analyze the impact of flood attacks using both single and multiple-attacker scenarios. Our method demonstrated a 99.9% success rate in attacker identification, distinguishing it from existing techniques. This research contributes to the cybersecurity field by enhancing the detection capabilities within IoT networks and offering a robust model against a prevalent form of cyber threats.

An Automated Multi-Layered Methodology to Assist the Secure and Risk-Aware Design of Multi-Factor Authentication Protocols

An Automated Multi-Layered Methodology to Assist the Secure and Risk-Aware Design of Multi-Factor Authentication Protocols

Adoption of Bloom Filter and Firebase Framework to Enhance Authentication Time for Healthcare Systems Based on Blockchain Technology

Healthcare offers several advantages for actual-time smart healthcare. security concerns are growing due to its constrained computing power, storage capacity, and self-defense capabilities. The tamper-resistant decentralized architecture of more recent blockchain-based authentication solutions gives them significant security features, but they come with a high resource cost because they need a lot of processing power, additional storage, and lengthy authentication processes. Therefore, these challenges offer impediments to achieving the optimal degrees of temporal efficiency and scalability, which are critical for the effective operation of large-scale, time-sensitive IoHT systems. Our work provides an authentication solution specifically created for healthcare systems to address these issues. We work in three phases: initializing, registering, logging in, and authenticating. The suggested system combines blockchain technology, Firebase Framework, Bloom Filter, Multi-Factor authentication, and other elements to improve security and efficiency at the same time. We use the Python programming language to simulate the work, and our findings indicate that the Bloom filter decreases the amount of time it takes to determine whether a person is in the system compared to the previous way. Moreover, using Firebase may reduce transaction numbers by up to 73%. Using the Scyther tool, a security analysis of the proposed scheme proved that the suggested plan is safe from possible threats and maintains the IoHT system's scalability

Investigation of authentication methods on web services. Current trends and development prospects

In the development of information technology, software and data protection on web services are of great importance. To ensure security, various methods are used, and one of the main ones is the user authentication process. They use different authentication methods: password, two-factor authentication, biometric, multi-factor, based on artificial intelligence and blockchain technologies. Despite their diversity, each method has its own advantages and disadvantages. Current trends in authentication include combining different methods to increase reliability and improve the user experience. The future of this technology involves finding new ways to balance security and usability, as well as continually updating and adapting methods to changing security threats. This article conducts a study of various authentication methods for web services in order to identify their effectiveness, advantages and disadvantages.

Unveiling the core of IoT: comprehensive review on data security challenges and mitigation strategies

The Internet of Things (IoT) is a collection of devices such as sensors for collecting data, actuators that perform mechanical actions on the sensor's collected data, and gateways used as an interface for effective communication with the external world. The IoT has been successfully applied to various fields, from small households to large industries. The IoT environment consists of heterogeneous networks and billions of devices increasing daily, making the system more complex and this need for privacy and security of IoT devices become a major concern. The critical components of IoT are device identification, a large number of sensors, hardware operating systems, and IoT semantics and services. The layers of a core IoT application are presented in this paper with the protocols used in each layer. The security challenges at various IoT layers are unveiled in this review paper along with the existing mitigation strategies such as machine learning, deep learning, lightweight encryption techniques, and Intrusion Detection Systems (IDS) to overcome these security challenges and future scope. It has been concluded after doing an intensive review that Spoofing and Distributed Denial of Service (DDoS) attacks are two of the most common attacks in IoT applications. While spoofing tricks systems by impersonating devices, DDoS attacks flood IoT systems with traffic. IoT security is also compromised by other attacks, such as botnet attacks, man-in-middle attacks etc. which call for strong defenses including IDS framework, deep neural networks, and multifactor authentication system.

Multi-Factor Authentication: A User Experience Study

Usability issues prevent multi-factor authentication (MFA) systems from being widely used, despite the fact that they are essential for improving security measures. This study explores the problems with MFA systems' usability and suggests possible fixes to enhance the user experience. The study emphasizes the value of good design while highlighting the efficacy of graphical password systems as a user-friendly substitute for conventional MFA techniques. The report also makes recommendations for future research directions, such as assessing resilience against complex assaults, improving support for mobile applications, and weighing the benefits and drawbacks of image-based authentication systems. Comprehensive user research and assessments can yield important insights to improve the effectiveness and usability of different MFA approaches. Additionally, a two-way image-based mobile device authentication system devices is introduced in the article, demonstrating improved login success rates and security threat resistance. In order to further enhance the authentication process, future development will focus on scalability, user input surveys, and bolstering system security. Keywords: Multi-Factor Authentication (MFA), User Experience (UX), Security, Usability, Graphical Passwords, Biometric Authentication, Mobile Devices, Image- Based Authentication, Psychological Aspects, Resilience,Scalability, Advanced Security Features

An improved three factor authentication protocol for wireless body area networks

Wireless Body Area Networks (WBAN) is a concrete solution for the healthcare system, and it is paramount to ensure the sensed data by the WBAN sensors is secure against vulnerable threats and inaccessible by unauthorized entities. In light of this, highly robust authentication schemes and solutions are essential for the successful adoption of WBANs. To this end, a plethora of secure authentication solutions have been recommended by investigators over the past few decades. However, the absence of cohesive research work in view of secure mutual authentication schemes does not light on the extensive purpose of offering a bird’s-eye solution to the domain. To address the security issues in the previous schemes, we approach them in the following manner: We reviewed the Ali et al. scheme, a recently proposed authentication scheme for wireless medical sensor networks for healthcare monitoring, asserting that their scheme can withstand various attacks. Despite this, we proved that their scheme still has significant security weaknesses and is vulnerable to various attacks through rigorous cryptanalysis. Afterward, we proposed our three-factor authentication scheme to overcome the vulnerable attacks found in the Ali et al. scheme. Thereafter, we performed an extensive informal and formal analysis using Burrows-Abadi-Needham (BAN) logic to verify the robustness of the proposed scheme. From the analysis, we proved that the proposed authentication scheme is able to withstand various attacks on WBAN. Finally, a critical performance evaluation is done on our scheme. From the results, we identified that our scheme is a robust and identical solution for feature-rich WBAN health-care applications.