Secure Data Communication Research Articles

Two-Stage High-Efficiency Encryption Key Update Scheme for LoRaWAN Based IoT Environment

Secure data communication is an essential requirement for an Internet of Things (IoT) system. Especially in Industrial Internet of Things (IIoT) and Internet of Medical Things (IoMT) systems, when important data are hacked, it may induce property loss or life hazard. Even though many IoT-related communication protocols are equipped with secure policies, they still have some security weaknesses in their IoT systems. LoRaWAN is one of the low power wide-area network protocols, and it adopts Advanced Encryption Standard (AES) to provide message integrity and confidentiality. However, LoRaWAN's encryption key update scheme can be further improved. In this paper, a Two-stage High-efficiency LoRaWAN encryption key Update Scheme (THUS for short) is proposed to update LoRaWAN's root keys and session keys in a secure and efficient way. The THUS consists of two stages, i.e., the Root Key Update (RKU) stage and the Session Key Update (SKU) stage, and with different update frequencies, the RKU and SKU provide higher security level than the normal LoRaWAN specification does. A modified AES encryption/decryption process is also utilized in the THUS for enhancing the security of the THUS. The security analyses demonstrate that the THUS not only protects important parameter during key update stages, but also satisfies confidentiality, integrity, and mutual authentication. Moreover, The THUS can further resist replay and eavesdropping attacks.

The SPN Network for Digital Audio Data Based on Elliptic Curve Over a Finite Field

The mathematical operation of the Elliptic Curve over the prime finite field is wildly used for secure data communication as it provides high security while utilizing the same size as the secret key. This manuscript presents a novel approach the SPN (Substitution Permutation Network) for a new digital audio encryption scheme based on Mordell elliptic curve (MEC) over a finite prime field. The proposed scheme consists of a confusion and diffusion module. For the confusion module, the scheme initially generates 5×5 bijective S-boxes, which have never been applied in the present literature with good cryptographic properties. The generated S-box is then used parallel in the substitution module, which provides optimum confusion in the cipher data. For the diffusion property, the scheme generates pseudo-random number sequences used for block permutation and achieves the property of diffusion. The scheme has been thoroughly securitized against various attacks. The result shows the efficiency of the proposed algorithm over the existing schemes. In addition, the framework that is used to generate MEC points is based on the searching technique. Consequently, it significantly reduces the computational cost and enhances the scheme’s performance compared to the schemes presented in the literature.

A Modified PRBS: Vertical Stacked LFSR Primitive Polynomial for Secure Data Communication

Linear Feedback Shift Register (LFSR) generates the fault coverage test patterns to compute the target fault of data compression methods. Future Generation wireless communication covers irrespective of complex situation and dense environments marginable throughput to everyone. LFSR widely applied to generate Pseudo Random Noise Sequence, Digital Random Number Generator commonly employed in Cryptography, encoding techniques, Built in Self-Test (BIST) etc. Sequence generated by the LFSR are easily predictable as periodic nature of the sequence. A Modified Pseudo Random Sequence Generator (PRBS) with vertical stacked LFSR (VS-LFSR) is proposed to improve security against predictability nature of PRBS. The primitive polynomial of the nbit LFSR is vertically stacked with top most polynomial and ends with the least polynomial with this flexible of the primitive polynomial are processed and Random sequences are generated. The proposed method generates the random numbers of flexible ranges by appropriately selecting necessity primitive polynomial code in the vertical stack. Compare to conventional LFSR, all zero (0) states also generated in the VS-LFSR, enables the test pattern to have all 2npossible states of n-bit LFSR. With little hardware complexity, periodic pattern of LFSR is further improved with the maximum number of states and result attained maximum number of random outputs as Πn-202n-m - 1.

Radial Basis Kernel Regressive Feature Extraction and Robert Ensembled Brown Boost Classifier for Attack Detection in Cloud Environment

Cloud computing shares the resource in information technology field. The existing technique is failed to provide better results for identifying unknown attacks with higher accuracy and lesser time consumption. In order to address these problems, Radial Basis Kernel Regressive Feature Extracted Brown Boost Classification (RBKRFEBBC) method is introduced for performing the attack detection in cloud computing. The main objective of RBKRFEBBC method is to improve the attack detection performance with higher accuracy and minimal time consumption. Dichotomous radial basis kernelized regressive function is used in RBKRFEBBC method to extract the relevant features through determining the correlation between the output and one or more input variables (i.e., features of patient transaction data). After extracting relevant features, GRNBBC algorithm is used in RBKRFEBBC method to improve the secured data communication performance through classifying the patient data transaction as attack presence or attack absence. By this way, attack detection is carried out in accurate manner. Experimental evaluation is carried out by NSL-KDD dataset using different metrics like attack detection accuracy, attack detection time and error rate. The evaluation result shows RBKRFEBBC method improves the accuracy and minimizes the time consumption as well as error rate than existing works.

Lightweight and Secure Elliptical Curve Cryptography (ECC) Key Exchange for Mobile Phones

Open networks enable data communication between different types of mobile devices that showcase the need to enforce elevated security measures. Securing sensitive or confidential data in mobile phones is accomplished by implementing a diverse range of cryptographic techniques. While encryption algorithms, such as Rivest–Shamir–Adleman (RSA) may offer secure solutions that are often difficult to compromise, these in turn prerequisite high speed computational resources for effective operation. Elliptical curve cryptography (ECC) is well thought-out standard that offers a workable and feasible methods of encryption/decryption, whilst being applicable to resource constraint devices. This paper implements a novel key exchange mechanism that helps to secure exchange of data between the communicating mobile devices. The study aims to address the limitation of Elliptic Curve Deffie Hellman, which is susceptible to Man-in-the-Middle attack and proposes an enhanced Elliptic Curve Deffie Hellman (ECDH) technique for secure data communication in open networks. The study results reveal, how the implementation of ECDH allows exchange of keys between the two communicating devices with limited resources.

Communication Technologies for Smart Grid: A Comprehensive Survey.

With the ongoing trends in the energy sector such as vehicular electrification and renewable energy, the Smart Grid (SG) is clearly playing a more and more important role in the electric power system industry. One essential feature of the SG is the information flow over high-speed, reliable, and secure data communication networks in order to manage the complex power systems effectively and intelligently. SGs utilize bidirectional communication to function whereas traditional power grids mainly only use one-way communication. The communication requirements and suitable techniques differ depending on the specific environment and scenario. In this paper, we provide a comprehensive and up-to-date survey on the communication technologies used in the SG, including the communication requirements, physical layer technologies, network architectures, and research challenges. This survey aims to help the readers identify the potential research problems in the continued research on the topic of SG communications.

Implementation Method Of Remote Assistance Instruction Based On Hardware Secure Encryption

As a public service enterprise related to energy security and national economy and people’s livelihood, the safe work is related to all walks of life and thousands of households. In power scenarios, the remote cooperative guidance needs to ensure the security of data communication. The implementation method of remote cooperative guidance in power scenarios based on hardware security encryption realizes the functions of terminal registration, user online and offline management, message call, control signaling negotiation, audio and video real-time call, graphic guidance and target tracking and labeling. Configuration TF card encryption at the mobile terminal chip and video server configuration high speed encryption card, WIFI / 4 g wireless networks to establish encryption channel, remote collaborative guidance terminal power scene registration messages, messages, call, and by guiding and structured data security encryption transmission, the unstructured data such as audio stream and video stream is encrypted. It not only realizes the secure encryption of message communication, but also guarantees the high-speed transmission of audio and video streams.

Image steganography using genetic algorithm for cover image selection and embedding

Data interchange through internet becomes an eminent technique and hence data security has become a big challenge in the field of communication with the increased use of internet. Demand for data authentication and effective means to control data integrity has been steadily increasing. Such a demand is due to the ease with which digital data can be tampered. Thus, cryptography and watermarking can be replaced with steganography for secure data communication and data privacy. In this paper, the carrier image is selected such that the payload/secret image and least significant bits of carrier image are matched with larger degree of compatibility and the hiding process introduces negligible changes in the resulted stego image based on genetic algorithm. In the proposed method we have achieved 30 to 40% improvements in the performance when compared to different existing methods. Selection of a suitable cover image and hiding the secret data to enhance the imperceptibility is a very challenging task. Genetic algorithm is used to ease the work of exploring an impossible task of selection from the trillions and millions of combinations.

Multiple Image Based Dual Steganography Using Arnold Transform and Block Code Encoding

Security plays a crucial role in the field of Social media network. Securing the data become one among the largest challenges in the present scenario. Whenever we expect concerning the cyber security, the primary issue that involves our mind is ‘cyber crimes’ that are increasing vastly day by day. Embedding secret message into the image (Steganography) is associated with art and science of secure data communication wherever the key information or confidential information is hidden in host file. It's employed incompletely different helpful applications like secure electronic communication, health care and military. Confidential information’s are unremarkably keep in digital media and transmitted via network cause of rapid growth of internet. In this paper, steganography techniques which might be used to safeguard the information from intruders. Here, Steganographic technique is used to hide multiple secret images into a single 24-bit cover image using Least Significant Bit (LSB) and dual steganography method. Multiple secret images are scrambled and encoded before hiding into cover image using Arnold Transform and Block Code Encoding. The Proposed technique is Block Code Encoding to convert Secret message to binary and bit pairs to form safer information. The main goals of proposed work offers security and high limit based steganography plan of concealing a massive size secret image into a bit size cover image, to enhance security using dual steganography, image quality and to reduce error.

Two-Cored Energy Management System for Industrial Microgrid

Energy systems have to deal with energy cost and environmental concerns such as greenhouse gas emission. Industrial buildings considered as Microgrid (μG) with heavy load worsen these issues even more. Further, cyber-attacks on the data communication channel between utility and customer is also a potential threat and may alter the data as well as the confidentiality of it, resulting in an inaccurate result. To address these problems, this paper proposes two-cored Building Energy Management System (BEMS) for Industrial Microgrid (IμG) with first cored termed as the energy layer concentrating on energy cost and emission reduction, while second cored termed as security layer provides the un-authorized intrusion detection and prevention system (IDS/IPS) for cyber secure communication of data. The μG under consideration contains national grid, Natural Gas (NG), solar Photovoltaic (PV) as input carriers; electrical energy at output ports; electric vehicle (EV) fleet; battery bank; solar PV panel as non-dispatchable Distributed Energy Resources (DERs) and Internal Combustion Engine (ICE), Fuel Cell (FC) and Micro Turbine (MT) as dispatchable DERs. Energy layer optimization problem has been solved in MATLAB using flower pollination algorithm for µG energy consumption cost and emission reduction. To develop and analyze the security layer, Linux operating system based Smooth-sec software has been used. Devised security layer continuously monitors the network traffic between customers and BEMS as well as BEMS and utility server. During monitoring it distinguish the licensed user or malicious attacker to detect and prevent possible internal and/or external intrusions in the communication channel. Results show that EMS reduces energy cost and emission in addition to cyber security from internal threats. Proposed two-cored control may be manufactured for utilities to realize its benefits for industrial customers in a smart energy distribution system. Keywords: Demand Response, Energy Management System, Flower

Oppositional tunicate fuzzy C‐means algorithm and logistic regression for intrusion detection on cloud

SummaryCloud computing is the most popular emerging computational model in information technology. The data communication security requirement is increased day by day with the development of cloud computing. Virtualization facilitates cloud computing architecture, which raises a few security concerns. In the previous year, many new research approaches were introduced, resulting in more sophisticated and time‐consuming results, as well as less flexibility, a lower attack detection rate, and so on. In this article, we proposed a logistic regression‐based oppositional tunicate fuzzy C‐mean (LR‐OTSFCM) methodology for the detection of cloud intrusion. The major contribution of this article is attack detection from the cloud environment. The proposed work is classified into four stages, namely, preprocessing, partitioning, cluster handling, and intrusion detection stages. In the first stage, we use the text data as the input; then, it is preprocessed. Second, the feature selections are performed via a logistic regression model. The combination of the oppositional tunicate swarm algorithm (OPTSA) and fuzzy C‐mean clustering (FCM) model is to perform data clustering. Third, the cluster handling stage is handled by cluster expansion and integration. Fourth, the clustering result builds a profile of normal and abnormal behavior. The local optimum avoidance ability of OPTSA is tested using four benchmark problems, namely, composition functions, unimodal, multimodal, and fixed dimensions of multimodal functions with 20 benchmark functions. Ultimately, the proposed LR‐OTSFCM method is compared with state‐of‐art approaches such as ANN, LR‐HID, ML‐IDS, and En‐ABC. The proposed scheme effectiveness is carried out by using four datasets such as, namely, synthetic, NIB, CICID 2017, and CIDD datasets. The proposed method demonstrated a superior attack detection rate.

Encrypted and tunable graphene‐based metasurface refractive index sensor

AbstractEncryption is a very essential part to secure data communication in today's world where there is a threat of stealing data. We have proposed a graphene‐based metasurface biosensor for sensing and encryption applications. The biosensor is designed to sense the hemoglobin (HT) biomolecules with high sensitivity. The results are analyzed in the form of transmittance and electric field of the proposed graphene‐based metasurface biosensor. The graphene layer's chemical potential is varied to achieve the coding of ‘0’ and ‘1’. This creates one‐digit coding. The array of this proposed structure with this coding can be used for encryption applications. The biosensor design is analyzed for four HT concentrations and their sensitivity is compared. Different geometrical parameters are analyzed and their effect is observed for tunability. The response from the design can be useful in future biomedical and data encryption applications.

Secret Key Establishment Using Modified Quantization Log For Vehicular Ad-Hoc Network

Traditional cryptographic approaches such as symmetric and asymmetric cryptography are commonly employed to solve network security issues. The Secret Key Generation (SKG) system has the advantage of extracting secret keys from a wireless channel's physical layer information. It allows two wireless devices within the transmission range to extract a shared symmetric key without the use of a fixed key distribution infrastructure, allowing vehicular ad hoc networks to exchange information (VANET). This study aims to create a secure data communication system on the Vehicular Ad-Hoc Network using RSS Key Generation. Starting from the Modified Quantization Log, the results of the Modified Quantization Log show that the average KDRM between Alice and Bob is the average KDRM between Alice and Bob is 9.4%; meanwhile, the average KGR is 71.4 bps. This shows that the number of bit mismatches after the Modified Quantization Log process between the two valid users is already small, because they have used the pre-processing process in front of them, namely using the Kalman Filter and from the results of the BCH Code to be matched again so that it becomes the key. The next process is Universal Hash which is tested with the NIST test. The NIST Test parameters used are approximately entropy, frequency, block frequency, longest run, cumulative sum forward, and cumulative sum reverse. The existing results are appropriate; namely, the threshold in p whose value is above 0.01 is achieved. From the results of the Average Approximate Entropy, it is found that the largest value is obtained by the 40k10ms scheme, which is 0.7352.

A Review on Compressive Sensing for Distributed Signal Processing in WBAN

Wireless networks of the body (WBANs) that support healthcare applications are in the early stages of development but make valuable contributions to surveillance, diagnostics or therapy. They cover real-time medical information acquisition from various sensors with secure data communication and low power consumption. WBANs promises discreet outpatient medical monitoring over a long period of time and inform the physician in real-time about the patient's condition. They are widely used for ubiquitous healthcare, entertainment, and military applications. This article presents distributed wireless networks and describes the search for Orthogonal Matching Pursuit (OMP), Basis Pursuit (BP), Least Mean Square Technique (LMS), and Normalized Least Mean Square Technique (NLMS).

A random encoding method for secure data communication: An extension of sequential coding

The security of data communication is very important in all aspects. V. Shukla et al. had proposed a secure sequential coding method. They have shown the results for text secret messages only. In this paper, firstly we extend their scheme by showing the results for image secret messages. Secondly, we upgrade their scheme by proposing the similar method by using random encoding. Random encoding enhances the level of security. A separate section is provided for security analysis and associated advantages.

Key Independent Image Deciphering using Neighbourhood Similarity Characteristics and Divide-and-conquer Attack

Aim: The aim of the paper is to analyse the security strength of image encryption schemes which are based on pixel rotation and inversion functions. The key independent image decryption methodologies are presented to obtain original images with intelligible contents from encrypted images using neighbourhood similarity characteristics and divide-and-conquer attack. Background: The efficiency and security strength of secure communication of sensitive data depend on the computing resources and cryptographic strength of encryption schemes. An encryption scheme is cryptographically strong if it does not leave any weakness, vulnerability or pattern which could be exploited by cryptanalyst to obtain the original image from an encrypted image. Prior to the use of any image encryption scheme for multimedia security applications, it should be analysed for its security strength to ensure the safety of information so that an adversary could not extract intelligible information from encrypted image data. A number of encryption schemes developed for image security applications and claimed highly secure but some of these are cryptanalysed successfully and found insecure. Objective: The analysis of image ciphers which encrypt plain images by transforming its pixels using circular rotation or inversion function in a random fashion is carried out for decrypting encrypted images to obtain original images. The encryption schemes, namely ‘Chaotic Image Encryption (CIE)’ and ‘Graphical Image Encryption (GIE)’, were reported secure but we find that these schemes are insecure which can be exploited to obtain meaningful information from the ciphered images. We apply the similarity characteristics of images to mount cryptanalytic attacks on these ciphers and obtain original images without any knowledge of the encryption/decryption keys. These encryption schemes encrypting the specified region-of-interest (ROI) are also analysed to decrypt ROI encrypted images. Method: The methodology of decryption is key independent and based on divide-and-conquer strategy to obtain original images from the given encrypted images. It utilizes the neighbourhood similarity of pixels in an image which is measured in terms of pixel-to-pixel difference between adjacent pixels for pixel inversion based image cipher (GIE) and line-to-line correlation between adjacent lines for pixel rotation based image cipher (CIE). The ROI encrypted and masked encrypted images are also decrypted. Results: Experimental test results show that the decrypted images obtained are quite intelligible and one can understand the contents of decrypted images. It is also seen that an image cipher encrypting the ROI can be decrypted by utilizing unencrypted region surrounding encrypted ROI part of an image. Conclusion: It has been shown that CIE, GIE, ROI and masked encryption schemes reported for image security applications are insecure and not providing adequate security. Such encrypted images can be decrypted successfully without any key knowledge with high intelligibility by considering image similarity characteristics of neighbouring pixels and applying divide-and-conquer attack strategy. Future work: The key independent decryption methodology can be considered to cryptanalyse the encryption schemes under noise attack scenario as future work to see the applicability of decryption methods with respect to increase in noise in encrypted images. Moreover, other modern encryption schemes based on pixel inversion and rotation functions can be analysed for their security strength.

Machine learning based deep job exploration and secure transactions in virtual private cloud systems

Virtual Private Cloud (VPC) is an emerging cloud environment used to provide more secure data communication. VPC provides authentic communication channel for secure communication between the cloud participants. The cloud jobs and the description of the runtime cloud events must be evaluated to provide flawless VPC service. Although VPC provides security in network services, it has to be enriched with internal and external platform level security features. In this regard, secure job service schemes ensure elimination of attacks, unauthorized jobs, improper accesses and intrusions in VPC. These irrelevant tasks (activities) can be isolated before initiating job scheduling process. Particularly, providing security for zero-trust cloud environment is more challenging task. Zero-trust cloud environment has completely vulnerable trust model on both internal and external circumstances. The proposed Machine Learning Based Secure Cloud Job Services (MLSCS) is implemented to provide multi-level security in this zero-trust cloud job servicing system. The proposed MLSCS develops Multi-Server Queue Management techniques, Reinforcement Learning based deep Q Matrix (RL-Q Matrix) techniques, Authentic VPC configuration and VPC Genetic Algorithm Network (VGAN) for establishing security practices in complex job handling system. MLSCS applies effective techniques for eliminating irrelevant cloud jobs to reduce the scheduler complexity and processor utilization. In this work, irrelevant jobs are considered as the jobs that are not appropriate for particular VPC scheduling policies and security principles (attacks). These jobs are identified through various key validation procedures and VPC policy determination procedures. These jobs are eliminated and prohibited in to job scheduler. Consequently, the legitimate jobs are securely forwarded in to job scheduler through multi-server queues. In the experimental setup, the proposed MLSCS is compared with existing schemes such as Reinforcement Learning Based Distributed Heterogeneous Servicing technique (RLDH), Cat Swarm Optimization Based Job Servicing technique (CSOS) and Fuzzy Based Security-Driven Servicing technique (FSDS). The results show the MLSCS delivers 5% to 8% optimal results than existing schemes.

Towards the Design of Efficient and Secure Architecture for Software-Defined Vehicular Networks.

Recently, by the rapid development of Vehicular Ad Hoc Networks (VANETs) and the advancement of Software Defined Networking (SDN) as an emerging technology, the Software-Defined Vehicular Network (SDVN) has a tremendous attraction in the academia and research community. SDN’s unique properties and features, such as its flexibility, programmability, and centralized control, make the network scalable and straightforward. In VANETs, traffic management and secure communication of vehicle information using the public network are the main research dimensions in the current era for the researchers to be considered while designing an efficient and secure VANETs architecture. This paper highlights the possible identified threat vectors and efficiently resolves the network vulnerabilities to design a novel and secure hierarchic architecture for SDVN. To solve the above problem, we proposed a Public Key Infrastructure-based digital signature model for efficient and secure communication from Vehicle to Vehicle. We also used the public key authority infrastructure for Vehicle to Infrastructure and the three-way handshake method for secure session creation and secure data communication in the SDN controller. The proposed security is validated through the well-known simulation tool AVISPA. Additionally, a formal security model is applied to validate the design hierarchic architecture’s fundamental security properties for SDVN in an efficient and desirable way. In a comparative analysis, we prove that our proposed scheme fulfills all the essential security properties compared to other states of the art schemes.

Protokol HTTPS, Apakah Benar-benar Aman?

In particular, the method used in this research is a case study where previously the p3m.pnp.ac.id website still uses the http protocol. However http protocol does not have a method of securing data in its communication. The final result of this research is the design and implementation of the https protocol for data communication security that occurs between visitors and the p3m.pnp.ac.id website. The https protocol that has been implemented is tested to ensure the data traffic on the p3m.pnp.ac.id website is guaranteed to be safe and protected from possible piracy and data theft.

Dual-toroidal analog EIT with metamaterial

The dual-band analog electromagnetically induced transparency (EIT) with intriguing toroidal has been presented at microwave frequency. The proposed construction is composed of the split resonant rings with different sizes in two layers to induce dual-toroidal resonance. By optimizing the structure, two transparency peaks derived from strengthened toroidal could attain to 0.97 at 5.36 GHz and 0.94 at 10.23 GHz, which could be certified by numerical simulation, near-field distribution and scattered power of far-field. The experiment and simulation are almost consistent, and the dual-toroidal analog-EIT could have potential applications in many fields, such as ultrasensitive sensing and secure data communication.