Security Of Proposed Protocol Research Articles

Lightweight Cryptography based Communication Model for Device Identification, Mutual Authentication, and Encryption in a Smart City Environment

Providing security to smart city networks is one of the challenging and demanding tasks in the present days, due to its increased utilization in smart intelligent transportation systems. For this purpose, there are various security protocols and mechanisms that have been developed in the existing works, which targets to establish the reliable and secured communication in smart city networks. However, it limits the major issues of increased computational cost, communication cost, storage overhead, and reduced efficiency. In order to solve these problems, the proposed work intends to design an intelligent security framework by using the Light-weight Cryptography based Communication Model (LCCM). Proposed framework includes the modules of setup initialization, vehicle registration, authentication, key generation, encryption, and decryption. Here, the Vehicle-to-Vehicle (V2V) and Vehicle-to-Infrastructure (V2I) communications are performed with reduced cost complexity. For guaranteeing the security of networks, the random value-based key generation, data encryption, and decryption processes are performed. During the performance analysis, various evaluation measures have been used to assess the results of both convention and proposed security protocols. This paper presented a new methodology named as, LCCM for enhancing the security of smart city transportation networks.

A security protocol for D2D communications in 5G networks using elliptic curve cryptography

Advancements in the field of wireless and mobile communication motivate academia, industry, and standardisation organisations to explore new technologies to improve overall efficiency, spectrum utilisation, power consumption, and security. One of the most essential technologies proposed for short-range communications, which will play a key role in 5G wireless networks, is device-to-device (D2D) communications. D2D communication enables direct communication between two devices when they are in close proximity without requiring the help of a fixed infrastructure like base stations. Despite the significant benefits provided by D2D communications, this new networking communication paradigm introduces unique security threats to D2D services that should be solved in order to limit any malicious attacks. Towards this end, in this paper, we focus on secure D2D communications and propose a protocol for establishing secure D2D communication using elliptic curve cryptography. The protocol utilises: (i) specific Mobile Identifiers acquired from the hardware of the mobile phone (i.e. IMEI) and the SIM card (i.e. IMSI, MSISDN) provided by the mobile operator and (ii) the SIM storage for saving private keys or signature data. The proposed security protocol is verified and validated with the help of the Scyther tool, and the performance is evaluated in terms of resiliency analysis.

Secure Optimized Request Zone Location-Aided Routing

Secure data transmission is one of the biggest challenges for Vehicular Ad Hoc Networks (VANETs) due to its dynamic and infrastructure-less characteristics. Such security services become a demand to provide safe and secure conversation between automobiles. In this paper, two optimized secure routing protocol for VANETs were proposed: 1) Secure Tilted-Rectangular-Shaped Request Zone Location-Aided Routing protocol (STRS-RZLAR); 2) Secure Cone-Shaped Request Zone LAR (SCS-RZLAR). Each proposed secure protocol integrates a security unit with an optimized shape request zone. The security unit in both protocols is a multi-layer unit that adopts two security agreement protocols: 1) modified Diffie-Hellman key agreement protocol; 2) short authentication string (SAS)-based key agreement protocol. The overall communication scheme is performed using Wi-Fi Direct out-of-band channels. The proposed secure protocols provide a reliable and secure data transmission between automobiles in a VANET and thus making it robust against man-in-the-middle attack (MITMA). Extensive simulations using three main network parameters: vehicular node density, number of malicious nodes and vehicle speed show that the proposed secure routing protocols provide superior performance regarding data delivery and normalized routing load (NRL) with a trade-off in average end to end packet delay. From the other side, Simulation results show that SCS-RZLAR protocol outperforms the STRS-RZLAR protocol regarding NRL and average end to end packet delay, while STRS-RZLAR protocol outperforms the SCS-RZLAR protocol regarding data delivery.

EC-SVC: Secure CAN Bus In-Vehicle Communications With Fine-Grained Access Control Based on Edge Computing

In-vehicle communications are not designed for message exchange between the vehicles and outside systems originally. Thus, the security design of message protection is insufficient. Moreover, the internal devices do not have enough resources to process the additional security operations. Nonetheless, due to the characteristic of the in-vehicle network in which messages are broadcast, secure message transmission to specific receivers must be ensured. With consideration of the facts aforementioned, this work addresses resource problems by offloading secure operations to high-performance devices, and uses attribute-based access control to ensure the confidentiality of messages from attackers and unauthorized users. In addition, we reconfigure existing access control based cryptography to address new vulnerabilities arising from the use of edge computing and attribute-based access control. Thus, this paper proposes an edge computing-based security protocol with fine-grained attribute-based encryption using a hash function, symmetric-based cryptography, and reconfigured cryptographic scheme. In addition, this work formally proves the reconfigured cryptographic scheme and security protocol, and evaluates the feasibility of the proposed security protocol in various aspects using the CANoe software.

Enhanced end-to-end security through symmetric-key cryptography in wearable medical sensor networks

This paper describes a security protocol and proof-of-concept implementation for wearable medical sensor devices that are deployed in hospitals. The sensor device measures the patient’s vital sign parameters and sends them to the hospital server, such that the data can be processed and stored in the EMR (Electronic Medical Record) of the patient. The proposed security protocol is based on symmetric-key cryptography and addresses the challenges of anonymity, unlinkability, mutual authentication and perfect forward secrecy. Moreover, it relies on decentralised authentication, avoiding an authentication server to be the single point of attack. Besides offering strong security features, the proposed protocol and implementation take into account that sensor devices are typically constrained with respect to communication bandwidth and computation power. Therefore, these parameters are evaluated in addition to the security analysis of the presented protocol. Our solution gives stronger security guarantees than related work, while featuring a comparable computation overhead and the lowest communication overhead.

A Key Agreement Scheme for IoD Deployment Civilian Drone

Drones are of different shapes, sizes, characteristics, and configurations. It can be classified for the purpose of its deployment, either in the civilian or military domain. The earliest usage of drones was totally for military purposes, but manufacturers promptly tested it for civilian fields like border surveillance, disaster relief, pipeline relief, and security. Drone’s manufacturing, equipment installation, power supply, multi-rotor system, and embedded sensors are not the pressing issues for researchers of drone technologies. What is required is to utilize a drone for a complex operation and ensure secured data broadcasting among drones with the ground control station via a self-organized, resourceless, and infrastructureless network (Flying Ad Hoc Networks (FANET)). These operations are no less important in areas like emergency, search and rescue operations, border surveillance, and physical phenomenon sensing for the end-user. However, it is not without some challenges for the researchers keeping in view the threats these operations are exposed to concerning security issues and challenges. To overcome these challenges, the designers have to strive towards a secured drone operation by developing a robust and lightweight key agreement protocol for IoD deployment civilian drone. Consequently, the researchers in this study have attempted to design a verifiably secure and lightweight authentication scheme for IoD deployment civilian drones. The proposed security protocol has been verified by ProVerif2.02 and Real-Or-Random (ROR) model, while its performance scenario has been tackled by considering storage, computation, and communication overheads analysis. In comparing the proposed framework with prior protocols, it has been demonstrated that the scheme is quite efficient and may be recommended for operations in a given IoD environment.

An energy-efficient lightweight security protocol for optimal resource provenancein wireless sensor networks

Security of resource sharing and provenance is a major concern in wireless sensor networks(WSNs),wherethe intruders can easily inject malicious intermediate nodes for various personal gains. This selective forwarding attack may reduce the flow of resource sharing and throughput in the network. Most of the existing techniques are complex and do not provide sufficient security to sensor nodes with low energy. This paper proposes an energy-efficient and lightweight security protocol for optimal resource provenance in multihop WSNs and the Internet of things (IoT) network. The sharing of the resources between the sensor nodes indicates the strength of the mutual cooperation between the nodes, which will act as a link to generate a cooperative correlating coefficient in the proposed security protocol. Thecooperative correlating coefficient is computed and matched at the source and destination sensor node, which is broadcast to all the connecting intermediate sensor nodes. A higher value of the cooperative correlating coefficient indicates stronger and secure resource sharing between the sensor nodes with optimal resource provenance, and the lower value indicates the possibility of the presence of adversarial sensor nodes between the hops. We calculate the energy dissipated for the sensor nodes and the complete sensor network. The real-time cooperative correlating coefficient values are derived from the cooperation of two USRPs. The simulation for the detection of adversarial sensor node and resource provenance is done using MATLAB. The experimental result demonstrates secure resource provenance sharing in a sensor network with high energy efficiency compared to the existing techniques.

IMSC-EIoTD: Identity Management and Secure Communication for Edge IoT Devices.

The Internet of things (IoT) will accommodate several billions of devices to the Internet to enhance human society as well as to improve the quality of living. A huge number of sensors, actuators, gateways, servers, and related end-user applications will be connected to the Internet. All these entities require identities to communicate with each other. The communicating devices may have mobility and currently, the only main identity solution is IP based identity management which is not suitable for the authentication and authorization of the heterogeneous IoT devices. Sometimes devices and applications need to communicate in real-time to make decisions within very short times. Most of the recently proposed solutions for identity management are cloud-based. Those cloud-based identity management solutions are not feasible for heterogeneous IoT devices. In this paper, we have proposed an edge-fog based decentralized identity management and authentication solution for IoT devices (IoTD) and edge IoT gateways (EIoTG). We have also presented a secure communication protocol for communication between edge IoT devices and edge IoT gateways. The proposed security protocols are verified using Scyther formal verification tool, which is a popular tool for automated verification of security protocols. The proposed model is specified using the PROMELA language. SPIN model checker is used to confirm the specification of the proposed model. The results show different message flows without any error.

Privacy-Preserving Distributed Analytics in Fog-Enabled IoT Systems.

The Internet of Things (IoT) has evolved significantly with advances in gathering data that can be extracted to provide knowledge and facilitate decision-making processes. Currently, IoT data analytics encountered challenges such as growing data volumes collected by IoT devices and fast response requirements for time-sensitive applications in which traditional Cloud-based solution is unable to meet due to bandwidth and high latency limitations. In this paper, we develop a distributed analytics framework for fog-enabled IoT systems aiming to avoid raw data movement and reduce latency. The distributed framework leverages the computational capacities of all the participants such as edge devices and fog nodes and allows them to obtain the global optimal solution locally. To further enhance the privacy of data holders in the system, a privacy-preserving protocol is proposed using cryptographic schemes. Security analysis was conducted and it verified that exact private information about any edge device’s raw data would not be inferred by an honest-but-curious neighbor in the proposed secure protocol. In addition, the accuracy of solution is unaffected in the secure protocol comparing to the proposed distributed algorithm without encryption. We further conducted experiments on three case studies: seismic imaging, diabetes progression prediction, and Enron email classification. On seismic imaging problem, the proposed algorithm can be up to one order of magnitude faster than the benchmarks in reaching the optimal solution. The evaluation results validate the effectiveness of the proposed methodology and demonstrate its potential to be a promising solution for data analytics in fog-enabled IoT systems.

A Trustworthy Privacy Preserving Framework for Machine Learning in Industrial IoT Systems

Industrial Internet of Things (IIoT) is revolutionizing many leading industries such as energy, agriculture, mining, transportation, and healthcare. IIoT is a major driving force for Industry 4.0, which heavily utilizes machine learning (ML) to capitalize on the massive interconnection and large volumes of IIoT data. However, ML models that are trained on sensitive data tend to leak privacy to adversarial attacks, limiting its full potential in Industry 4.0. This article introduces a framework named PriModChain that enforces privacy and trustworthiness on IIoT data by amalgamating differential privacy, federated ML, Ethereum blockchain, and smart contracts. The feasibility of PriModChain in terms of privacy, security, reliability, safety, and resilience is evaluated using simulations developed in Python with socket programming on a general-purpose computer. We used Ganache_v2.0.1 local test network for the local experiments and Kovan test network for the public blockchain testing. We verify the proposed security protocol using Scyther_v1.1.3 protocol verifier.

Resilient Containment Control in Adversarial Environment

This article considers the problem of containment control in an adversarial environment, where some of the agents might be misbehaving (or faulty). Despite the influence of network misbehaviors, the normal followers aim to move into the convex hull spanned by the normal leaders. Toward this goal, resilient containment control is investigated in this work. We propose secure protocols for both first-order and second-order systems, where each normal follower ignores the most extreme values in its neighborhood and modifies its state based on the remaining ones. Assuming that the number of malicious agents is locally upper bounded, sufficient conditions on the network topology are derived to guarantee the achievement of resilient containment. Numerical examples are also provided in the end to verify our theoretical results.

A secure IoT based flood warning system using elliptical curve cryptography

Objectives: To propose a design of an early flood warning system based on IOT with a strong emphasis on the security requirements of such systems. Methods/Analysis: The design of an early flood warning system is based on measuring the hydrological parameters of a river, which include water level and discharge through an IOT based network. To calculate the discharge of water in a river, Manning\'s equation has been employed. Security protocols based on elliptical curve cryptography has been proposed for authenticating the real-time hydrological data. The proposed security protocols have been formally validated and verified against various active and passive attacks using AVISPA and Scyther. Simulation of the proposed scheme has also been carried out on the TOSSIM simulator using the TinyECC library to estimate the radio and CPU energy overheads. Findings: The formal security validation of the proposed authentication scheme indicates that the scheme is SAFE against various active and passive attacks. The simulation on Scyther indicates that no attacks have been found in proposed authentication protocols. The AVISPA validation also declares the scheme as SAFE as all-important security goals have been achieved. The Energy analyses on TOSSIM indicate that each node in the scheme requires 133 mJ for radio transmission and 59 mJ for CPU operations about the Mica2 Energy Model. Novelty/Improvement: Researchers have proposed many designs and schemes for early flood warnings without giving much emphasis to the security of such systems. The paper focuses on the security requirements of such systems. Keywords: IoT; flood warning; authentication; ECC; AVISPA; Scyther; TinyOS; TinyECC; TOSSIM

Mediated Secure Multi-Party Protocols for Collaborative Filtering

Recommender systems have become extremely common in recent years and are utilized in a variety of domains such as movies, music, news, products, restaurants, and so on. While a typical recommender system bases its recommendations solely on users’ preference data collected by the system itself, the quality of recommendations can significantly be improved if several recommender systems (or vendors) share their data. However, such data sharing poses significant privacy and security challenges, both to the vendors and the users. In this article, we propose secure protocols for distributed item-based Collaborative Filtering. Our protocols allow to compute both the predicted ratings of items and their predicted rankings without compromising privacy nor predictions’ accuracy. Unlike previous solutions in which the secure protocols are executed solely by the vendors, our protocols assume the existence of a mediator that performs intermediate computations on encrypted data supplied by the vendors. Such a mediated setting is advantageous over the non-mediated one since it enables each vendor to communicate solely with the mediator. This yields reduced communication costs, and it allows each vendor to issue recommendations to its clients without being dependent on the availability and willingness of the other vendors to collaborate.

Building secure protocols for extensible distributed coordination through secure extensions

Mechanisms for distributed coordination are used in the development of many distributed systems and, generally, are implemented on top of coordination infrastructures, such as tuple spaces. Although tuple spaces provide the coordination functionalities, a recent study showed that extensibility is fundamental for performance. The main idea behind extensibility is to allow the servers, supporting the coordination infrastructure, to access and process coordination information. Consequently, it is not necessary to move information from servers to clients or to reprocess requests due to concurrency. Unfortunately, existing proposals for extensible distributed coordination do not provide security and privacy once servers access data in plaintext. This work uses robust cryptographic schemes recently integrated into DepSpace, a tuple space implementation, to propose secure protocols for coordination with and without extensions. Experiments compare the proposed solutions and consider also the proposed protocols without security and privacy, showing that extensible coordination significantly improves system performance even using costly cryptographic operations.

Novel Anonymous Key Establishment Protocol for Isolated Smart Meters

In a smart grid, fine-grained usage reports of consumers are gathered using some computationally constrained smart measurement devices. One of the most challenging requirements in the data aggregation is how to securely read the consumption data, while putting the least possible overhead on smart meters. For this reason, recently, two efficient security protocols have been proposed to be used for subsequent secure consumption reports gathered from isolated smart measurement devices. Nonetheless, in both protocols, for each key establishment, the smart reader requires to connect to the electricity service provider (ESP) via the Internet. This paper proposes a novel key establishment protocol, which is free from the ESP involvement during the key agreement and benefits from notable reduction in the communication cost. Our thorough efficiency and security analyses indicate the eminence of the proposed security protocol.

A Novel Protocol for Security of Location Based Services in Multi-agent Systems

Multi-agent systems are automated form of software technology to enhance many applications in our life. However, this technology does not come along with embedded security features which hindering its widespread usage in commercial systems such as those that depend on location-based services. This paper aims to design, develop, test and evaluate an efficient security protocol for the multi-agent system to support the secrecy of user location. At first, we have developed a new architectural approach, inspired by the well-known Kerberos protocol, that can provide a secure service for the end users. It offers the most important security requirements in this field, namely; mutual authentication, confidentiality, integrity, and authorization. The proposed security protocol so-called Multi-Agent Security using Enhanced Kerberos has been verified and validated using a formal verification tool called ProVerif. Also, we provide a comparison with the original Kerberos protocol in terms of efficiency, which tilts the balance to our protocol.

Special Issue on Recent Trends and Future of Fog and Edge Computing, Services and Enabling Technologies

Special Issue on Recent Trends and Future of Fog and Edge Computing, Services and Enabling Technologies

A Security Protocol for Route Optimization in DMM-Based Smart Home IoT Networks

Smart home networks have been recognized as one of its representative important applications in the forthcoming 5G era. It is also expected that in 5G networks, future smart home services will be much powered by mobility management, which enables users to remotely access and control their in-home Internet of Things (IoT) sensors and appliances anywhere anytime any device. As a major solution, Distributed IP Mobility Management (DMM) can be considered because it addresses the limitation of the centralized approaches as well as its flat architecture is suit for 5G networks. Obviously, without being protected, mobility management can cause smart home systems to be vulnerable to various security threats. Especially, it is of paramount important to protect data traffic transmitted between user mobile devices and their in-home IoT appliances because they include users' sensitive and critical privacy information. Taking this into consideration, it is necessary to support secure route optimization, which allows the involved devices to directly communicate each other in secure way while minimizing possibility of information leakage during data transmission. According to our best knowledge, there is no study on securing route optimization for DMM networks. Motivated by this, we propose a secure route optimization protocol for DMM-based smart home systems. The proposed security protocol, composed of the route optimization initialization and handover phases, is designed to provide mutual authentication, key exchange, perfect forward secrecy, and privacy protection. Its security is thoroughly verified through the two formal security analysis tools, BAN-logic and Automated Validation of Internet Security Protocols and Applications (AVISPA). From the comparison analysis, it is shown that the proposed protocol is better than other standard protocols.

Formal Verification of Confidentiality in DNSSEC and E-DNSSEC Protocols using pi-calculus and ProVerif

Security protocols are very important in every communication over the Internet. They aim to deliver safe services by ensuring authentication, confidentiality and integrity of the data transiting in the network. So, each new proposed security protocol should be tested and formally verified to be sure of security features since deploying new protocols without analyzing their security properties could causes bad impact on sensitive data. In this paper, we present a formal model for the verification of the E-DNSSEC protocol which is proposed to add confidentiality property to the DNSSEC protocol. For that purpose, the article provides first a brief description of DNSSEC and E-DNSSEC protocols. After that, we present the resolution process of both DNSSEC and E-DNSSEC protocols. Then, we give a formal specification of these protocols in the applied ‘pi-calculus’. Relying on this modeling, the confidentiality property of E-DNSSEC is verified by ProVerif.

SMCACC: Developing an Efficient Dynamic Secure Framework for Mobile Capabilities Augmentation Using Cloud Computing

Mobile capability development increases with the need to use it. However, mobile devices still lack computational resources. Mobile cloud computing is the solution to overcome these challenges. Extensive research has been conducted to solve these problems, and a large number of new techniques were developed. Many of these researches solve the resource problem by partitioning and offloading applications to the cloud to tap its full computational and storage availability. Other methods involve offloading part of the applications while retaining the rest for processing on the smartphone - the decision making in these techniques based on metrics such as power and CPU consumption. Also, small numbers of available solutions consider security issues. This paper proposed a new elastic framework named secure framework for mobile capabilities augmentation using cloud computing (SMCACC) that enables transparent use of cloud resources to augment the capabilities of resource-constrained mobile devices. A significant feature of this framework is the partition of a single application into multiple components. Mobile apps can be executed on the mobile device itself or offloaded to the cloud clone for execution. Thus, the elastic application can augment the capabilities of a mobile device to save energy for a mobile device. Besides, a hybrid cryptography method is used to secure data and take energy consumption in the considerations. The new proposed security protocols use a combination of both symmetric and asymmetric cryptographic techniques to avoids the disadvantages of the existing hybrid protocols. These methods help to protect users by securing data that offloaded to the cloud. The results of this framework without security show the resources consumed for executing the application on mobile and cloud are decreased approximately to half of the memory consumed for running app on the mobile-only. According to the security framework, the resources consumed for executing the application on mobile still decreased.