Security Gateway Research Articles

Research and Application of the IOT Gateway Based on the Real-Time Specification for Java

The Internet Of Things (IOT) gateway plays an important role in connecting the traditional information network and network aware, in view of the present people use outdated development ways to realize Internet gateway software proposed a scheme of using real-time Java technology. This paper uses ARM cortex-A57 architecture of AMD Opteron 1100 processor as the core to build IOT gateway system hardware platform, through the gateway to realize remote monitoring of underlying device. The IOT gateway adopts "Internet + Sensor Network / FieldBus Technology" network schemes to realize wired / wireless data exchange, and use the fully compatible Real-Time Specification for Java (RTSJ) of the WebSphere Real Time development platform to achieve the Internet gateway protocol conversion and the design of the two layers network communication software to ensure the IOT gateway security real-time communication. Finally, this paper gives the implementation technique and application of the gateway.

A Secure Gateway Discovery Protocol Using Rabin Signature Scheme in MANET

Mobile ad hoc network is a compilation of various mobile nodes that form the network temporarily and then communicate with each other. The integration of the MANET with the internet enhances the network area and increases the application field of MANET. Different techniques have been proposed for the internet and MANET integration but they mostly work in non-conflicting environment. Due to the congestion in the network, malicious nodes misbehave in the route discovery process. Therefore, integrated internet MANET will not be prevailing without a feasible security solution due to energy constraint and wireless link. In this paper, a secure gateway discovery protocol is proposed that uses sign encryption mechanism that ensures confidentiality goal in heterogeneous environments. Registration process was included to remove the malicious nodes. The proposed protocol removes the threat of anti-confidentiality, anti – authentication and anti - duplication. The efficiency of this protocol is shown through AVISPA tool.

Research and Implementation of Gateway Security Technology in Internet of Things

Research and Implementation of Gateway Security Technology in Internet of Things

Multi-channel transmission method for improving TCP reliability and transmission efficiency in UNIWAY

In ubiquitous computing environment, data is collected by a number of devices and transmitted to a central server which is trusted to provide the information to the user. In order to cope with security threats targeting the central service providing system, there is a growing trend to use unidirectional data transmission gateway to completely block the possibility of intrusion of an external network and an internal network. There is a difficulty in that a physical unidirectional data transmission gateway up to now can use only a single session and does not support a private protocol. In this paper, we propose transmission control protocol based service which is a constraint in unidirectional security gateway system was being available, and unidirectional security gateway using multi-channel transmission method for transmission efficiency in multi-proxy operation and transmission control protocol’s reliability and enhance transmission efficiency of the unidirectional security gateway and shows the experimental results of proposed method.

Using a Virtual Plant to Support the Development of Intelligent Gateway for Sensors/Actuators Security

Our industries are facing a new revolution, about Connectivity, Information and Network. Nowadays, the threats on industrial cyber physical systems are not just theoretical. They can do major damage to our real world through cyberspace. In this paper, a demonstrator for security on Sensor/Actuator network in industrial applications is proposed. It consists of an operational part simulator SimSED and automation emulator Straton Runtime, linked together by TCP/IP. This demonstrator is dedicated to evaluate a secure gateway for security in Network Control System (NCS). Two support bricks of the gateway are introduced. The first one is a filter for demonstrator protocol. The second one an auto-generated input/output model which represents the protected system. The intelligent gateway will support safety, reliability and resilience objectives for security of NCS.

Secure gateway for Internet of Things with internal AAA mechanism

In this paper, we describe secure gateway for Internet of Things (IoT) devices with internal AAA mechanism, implemented to connect IoT sensors with Internet users. Secure gateway described in this paper allows to (1) authenticate each connected device, (2) authorise connection or reconfiguration performed by the device and (3) account each action. The same applies to Internet users who want to connect, download data from or upload data to an IoT device. Secure Gateway with internal AAA mechanism could be used in Smart Cities environments and in other IoT deployments where security is a critical concern. The mechanism presented in this paper is a new concept and has been practically validated in Polish national research network PL-LAB2020.

A Security Web Gateway Based on HTTP Reverse Proxy

In this paper, we try to solve the problems of traditional security protection technology, such as the structure coupling, the difficulty of module expansion and the performance bottleneck. A new web security gateway solution based on HTTP reverse proxy server is proposed and the related system design and implements of key technologies are introduced. We provide a new concepts that called Security Detection & Validate Chain (SDVC), based on SDVC and its hierarchical tree structure, and we can prevent network from attacking on the extensible way. This architecture can effectively resolve the difficult extending problem of the traditional web security protection problems. The web security gateway also can filter users by black & white list, and can restrict the resource access which needs to be protected, as well as matching & preventing many kinds of network attacking based on rules.

Network gateway security method for enterprise Grid: a literature review

The computational Grid has brought big computational resources closer to scientists. It enables people to do a large computational job anytime and anywhere without any physical border anymore. However, the massive and spread of computer participants either as user or computational provider arise problems in security. The challenge is on how the security system, especially the one which filters data in the gateway could works in flexibility depends on the registered Grid participants. This paper surveys what people have done to approach this challenge, in order to find the better and new method for enterprise Grid. The findings of this paper is the dynamically controlled enterprise firewall to secure the Grid resources from unwanted connections with a new firewall controlling method and components.

Secure communication channel architecture for Software Defined Mobile Networks

A Software-Defined Mobile Network (SDMN) architecture is proposed to enhance the performance, flexibility, and scalability of today’s telecommunication networks. However, SDMN features such as centralized controlling, network programmability, and virtualization introduce new security challenges to telecommunication networks. In this article, we present security challenges related to SDMN communication channels (i.e., control and data channel) and propose a novel secure communication channel architecture based on Host Identity Protocol (HIP). IPsec tunneling and security gateways are widely utilized in present-day mobile networks to secure backhaul communication channels. However, the utilization of legacy IPsec mechanisms in SDMNs is challenging due to limitations such as distributed control, lack of visibility, and limited scalability. The proposed architecture also utilizes IPsec tunnels to secure the SDMN communication channels by eliminating these limitations. The proposed architecture is implemented in a testbed and we analyzed its security features. The performance penalty of security due to the proposed security mechanisms is measured on both control and data channels.

Design and Implementation of Security Gateway for Synchrophasor Based Real-Time Control and Monitoring in Smart Grid

Synchrophasor technology has numerous applications ranging from simple grid monitoring/visualization to real-time protection and control. Most legacy phasor measurement units (PMUs) and phasor data concentrators (PDCs) deployed in power grids support the IEEE C37.118.2 communication framework, which is highly vulnerable to cyber attacks due to lack of inherent security mechanisms. The IEC 61850-90-5 recently emerged as new communication framework with support for security features but its use in commercial devices is still very limited. The replacement of legacy PMUs/PDCs in power grids is a big challenge due to cost and deployment complexity. The concept of a gateway has recently been proposed in the literature to enable IEEE C37.118.2 compatible PMUs to send data in IEC 61850-90-5 format. However, the published gateway has limited features and also lacks security functionalities. This paper addresses security, interoperability, and integration issues between legacy and state-of-the-art phasor devices through the design of a security gateway. The security gateway is implemented with flexibility in mind and can be used for PMUs as well as PDCs under different configurations. It provides: 1) protocol conversion functionalities (from IEEE C37.118.2 to IEC 61850-90-5 and vice versa) and 2) security functionalities based on IEC recommended group domain of interpretation security mechanism. The security gateway is very compact in size, based on low-power ARM processor and inexpensive to be deployed in power systems. Through detailed experimental evaluation with real PMU data, this paper also validated the suitability of the security gateway for different types of synchrophasor applications with strict latency and data rate requirements.

Provably Secure Gateway Threshold Password-Based Authenticated Key Exchange Secure against Undetectable On-Line Dictionary Attack

Provably Secure Gateway Threshold Password-Based Authenticated Key Exchange Secure against Undetectable On-Line Dictionary Attack

Secure and Resilient Cloud Services for Enhanced Living Environments

It is critical to provide enhanced living environments (ELEs) to people with special needs (such as the elderly and individuals with disabilities) that offer 24/7 continuous monitoring and control of the environment and access to care services when needed. Recently, there has been a strong interest in building ELEs using implantable and wearable sensors, and wireless sensor networks that are supported by cloud computing. However, ELE technologies and information are vulnerable to cyberattacks and exploitations that can lead to life-threatening scenarios such as incorrect medical diagnoses. This article presents a platform that offers secure and resilient services for ELEs. The main components of the platform are the ELE end nodes, secure gateway, and a secure and resilient cloud computing system. End nodes collect ELE variables and human body signals that are stored securely in the cloud using a secure gateway. The secure gateway manages communication between the end nodes and the cloud services using biocyber metrics for authentication. In addition, the cloud architecture provides the required ELE services at any time and from anywhere in a resilient manner.

PENGEMBANGAN KEAMANAN SISTEM INFORMASI SST (SELF SERVICE TERMINAL) STMIK PRADNYA PARAMITA MALANG

Information System Security is essential to ensure the proper functioning of the information system. Weak information system security may result that other people who do not have the right can be entered into the system information without passed the security and perform activities that can damage or destroy data on the information system, even can destroy that information system itself. On one side, security of the information system needs to be improved, like in login process to get into the information system. Login process becames a tool to pave the ways for someone to infiltrate into the information system. There are several ways to do so that login process to be secure, such as anti SQL Injection and Verification login with SMS Gateway. Expected by using the login process with anti SQL Injection and Verification login with SMS Gateway can reduce the occurrence of fraud against Information Systems in STMIK PPKIA Pradnya Paramita Malang. Keywords: Security, Information Systems, and SMS Gateway

Designing of Efficient Technique Blocking Abnormal Packets through Correlation Analysis in the Healthcare Environment

Background/Objectives: The development of IT medical technology has formed the environment where the effective management and analysis of medical information. Methods/Statistical Analysis: We must explore the ways to secure the security measures because the leak of personal medical information will cause a great risk of leading to the exposure of personal information. In this paper, as a way to defend against malicious attacks in the smart medical environment where the electronic medical devices and wired and wireless networks are combine. Findings: It is aimed to design an abnormal packet screening techniques through correlation analysis of abnormal conducts in the medical security gateway so that it can be safe from server attacks, medical information interception, any counterfeit and falsification thereof. Application/Improvements: It is expected to be utilized in a wide variety of platforms and infrastructure as an essential function enable to respond to threats in future medical security gateway.

Chitosan-functionalized poly(lactide-co-glycolide) nanoparticles: breaking through the brain’s tight security gateway

Despite the development of several progressive treatments, many effective anticancer drugs have failed in clinical examinations due to the inability to penetrate across the blood–brain barrier. For this reason, the local and controlled delivery of anticancer drugs using biodegradable polymeric nanoparticles is attracting increasing attention as a viable therapy for treating brain tumors. In the present study, poly(lactide-co-glycolide) (PLGA) nanoparticles (NPs) with high emulsifying effects were prepared in conjunction with vitamin E d-α-tocopheryl polyethylene glycol 1000 succinate (TGPS) and chitosan, which imparted the desired surface morphology and particle size. The particle sizes, the surface morphology and the phase composition were correlated with the loaded amount of chitosan and operating pH. The laboratory cytotoxicity of the particles was investigated using the PC12 cell line. An increase in the chitosan content decreased the particle sizes of the NPs in a semilinear pattern and increased the potential therapeutic effects as indicated by high cell viability. These chitosan surface-modified PLGA NPs could be used for local drug delivery, thereby greatly expanding the spectrum of drugs available for the treatment of brain tumors.

Hierarchical Privacy CAs for Cross-Border Transfer of Personal Data

The iKaaS (intelligent Knowledge-as-a-Service) platform integrates the data on multiple local cloudsystems organically and provides the data to various types of applications as knowledge while takingsecurity and privacy fully into account. However, access control on the iKaaS platform is not withoutcomplications because the application may access personal data in different countries from the onewhere the application exists. Hidano et al. thus designed a security gateway that is set at the entranceof each local cloud and controls access to the cross-border applications while interpreting regulationsrelated to personal data for both countries. In order to help the security gateway confirm the validityof the application, they introduced the concept of the privacy certificate authority (CA), which isbuilt for each country as an executive agency responsible for the national regulations governing thehandling of personal data. In this paper, we design a hierarchical model of multiple privacy CAsresponsible for regulations where the effective areas are different. The security gateway can therebycontrol the transfer of data not only to different countries, but also to different unions or cities.

Analyses of Requirement of Security based on Gateway Architecture for Secure Internetof Things

As IoT is broadly used in many fields, the security of IoT is becoming especially important and critical issues. Security and privacy are the key issues for IoT applications, and still faced with some enormous challenges. Sensor has limited resources such as computing power, memory, battery. By means of deeply analyzing the security architecture and features in security framework. While a number of researchers have explored such security challenges and open problems in IoT, there is an unfortunate lack of a systematic study of the security challenges in the IoT landscape. This special issue features recent and emerging Received (December 1, 2015), Review Result(December 15, 2015) Accepted(December 22, 2015), Published(March 31, 2016) 302-318 Dept. Dept. of Electronic Engineering, Mokwon Univ., Doan-dong, Seo-gu, Daejeon, Korea email: jtkim3050@mokwon.ac.kr This research was supported by Basic Science Research Program through the National Research Foundation of Korea (NRF) funded by the Ministry of Education, Science and Technology (grant number: 2015-R1D1A09061435) Analyses of Requirement of Security based on Gateway Architecture for Secure Internet of Things Copyright c 2016 HSST 462 advances IoT architecture, protocols, services and applications. The alternative method is IoT security gateway. In this paper, we surveyed the demands and requirements. By means of deeply analyzing the security architecture and features, we analyzed the demands and requirements for security based on gateway application.

Psoas myovascular window: A secure gateway for safeguarding the ureter at left laparoscopic colorectal resections

Despite its established competency, laparoscopic colorectal surgery is underutilized, even today. This is primarily attributed to the lack of structured training and the resultant steep learning curve. Moreover, these surgical interventions are frequently complicated by potentially life-threatening ureteric injuries ranging from an alarming 5-15%. To avert this, the essential pragmatic step is to access the “holy” avascular mesocolon/retroperitoneum interface accurately and protect the ureter as quickly and convincingly as possible. However, this tends to be easier said than done. Recent literature illustrates numerous methods focusing exclusively on perioperative localization of the ureter. However, such methods plausibly lack simplicity, accessibility and cost-effectiveness. Herein, we describe a particular way of dissecting around the inferior mesenteric artery that aims to identify and safeguard the left ureter very early in the course of mesocolic mobilization. We call this the “psoas myovascular window” technique. Having applied this technique on 82 consecutive occasions, we have consistently observed its precision, rapidity and ability to reduce the operative time (by avoiding random search of the ureter). It potentially allows surgeons to acquire the desired proficiency and self-confidence reasonably early on at their learning curves. To our knowledge, such a technique has yet to be reported in the literature.

A Study of Unidirectional Data Transmission System Security Model for Secure Data transmission in Separated Network

Act on Promotion of Information and Communications Network Use and Information Protection」 is revised in August 18, 2012. The law requires the network isolation to company that hold 1 million people or more than your personal information and revenue 10 billion won or more telecommunications service providers. Unidirectional Data Transmission System is very important in separated network. Because Received (September 09, 2015), Review Result(September 25, 2015) Accepted(October 12, 2015), Published(December 31, 2015) 138-200 KOSYAS, Inc. R&D Center, 63-10 Munjeong-dong, Songpa-gu, Seoul, Korea email: hjlee@kosyas.com 138-200 KOSYAS, Inc. R&D Center, 63-10 Munjeong-dong, Songpa-gu, Seoul, Korea email: chodi@kosyas.com (Corresponding Author) KOSYAS, Inc. R&D Center, 63-10 Munjeong-dong, Songpa-gu, Seoul, Korea email: kabseung@kosyas.com * 본 연구는 미래창조과학부 및 정보통신기술진흥센터의 정보통신 방송 연구개발사업의 일환으로 수행하였음. [13-912-06-005, 클라우드 환경에서 가상화 네트워크 및 시스템의 보안성 평가를 위한 보안 스캐너 개발] A Study of Unidirectional Data Transmission System Security Model for Secure Data transmission in Separated Network Copyright c 2015 HSST 540 Unidirectional Security Gateways is gateway to maintain security of protected network. But development Companies of Unidirectional Data Transmission System think that work efficiency is the important than security. In this paper, for secure data transmission between a separated network we propose a Security model for Unidirectional Data Transmission System.

Requirement of Security for IoT Application based on Gateway System

An integrated security mechanism is one of the key challenges in the open wireless network architecture because of the diversity of the wireless network in open wireless network and the unique security mechanism used in each one of these networks. The security consideration should satisfy a concise set of cryptographic and security mechanisms, single security policy framework, and configuration parameters policy-dependent. This may require consideration of system perspectives, taking into account the entire system and device lifecycle, ease-of-use and ease-of-deployment. Finally, we analyzed requirement of IoT security gateway system to improve vulnerability of sensor node.