Secure Information Exchange Research Articles

ПРИМЕНЕНИЕ АЛГОРИТМА РАЗДЕЛЕНИЯ СЕКРЕТА В СИСТЕМАХ ПЕРЕДАЧИ И ХРАНЕНИЯ ДАННЫХ

The possibility of using the secret sharing scheme for secure information exchange in data transmission and storage systems is given. Variants of 1) demultiplexing of transmitted data over two communication channels with different bandwidths are proposed, when a smaller part of information is transmitted over a closed communication channel with a lower capital capacity, and through an open channel with a higher bandwidth, most of the information; 2) distributed storage of data using the services of data processing centers, when not all information is transferred to storage, but some of its large part, which cannot be used to restore the original information.

Защита информации для предотвращения отказов элементов автоматизированных информационно-управляющих систем энергетических объектов

Introduction. One of the most important tasks in achieving reliability and safety of power supply as an element of ensuring technospheric security is the modernization of automated information and control systems for the transmitting and receiving sides, which ensures resistance against known types of attacks. The aim of the study is to solve the problem of secure information exchange within the framework of automated information and control systems, taking into account the low security of technological communication channels of power facilities to achieve the reliability and safety of power supply as an element of ensuring technospheric security based on the development of intelligent methods for detecting dangerous influences and intrusions to neutralize information security threats in relation to commands to control power equipment. Research methods. Within the framework of the study, general scientific and special methods of scientific knowledge were used, including analysis, synthesis, generalization, which were based on the main provisions and patterns of behavior of systems and information theory. Research results. It is proposed to create innovative algorithms for controlling power equipment, built on the basis of libraries of reference commands and reference sequences of commands used to replace commands intentionally or accidentally distorted by erroneous bits, as well as diagnosing vulnerabilities of information and control systems to ensure the correctness of the process of controlling power equipment. Conclusion. The listed technologies will make it possible to create a new class of efficient algorithms for power equipment control, built on the basis of intelligent methods for detecting dangerous influences and intrusions to neutralize information security threats in relation to control commands based on the analysis of high-level behavioral characteristics of the protected information and control system with the function of controlling the transition of the controlled system to the next a condition that depends on the exact correspondence of the generated commands to the reference commands and the reference sequence of commands, which will ensure the correctness of the control process of power equipment. Key words: energy, information and control networks, reliability, security, power supply, algorithms, monitoring, protection, information.

Machine learning based accident prediction in secure IoT enable transportation system

Smart city has come a long way since the development of emerging technology like Information and communications technology (ICT), Internet of Things (IoT), Machine Learning (ML), Block chain and Artificial Intelligence. The Intelligent Transportation System (ITS) is an important application in a rapidly growing smart city. Prediction of the automotive accident severity plays a very crucial role in the smart transportation system. The main motive behind this research is to determine the specific features which could affect vehicle accident severity. In this paper, some of the classification models, specifically Logistic Regression, Artificial Neural network, Decision Tree, K-Nearest Neighbors, and Random Forest have been implemented for predicting the accident severity. All the models have been verified, and the experimental results prove that these classification models have attained considerable accuracy. The paper also explained a secure communication architecture model for secure information exchange among all the components associated with the ITS. Finally paper implemented web base Message alert system which will be used for alert the users through smart IoT devices.

BodyWire-HCI

Communication during touch provides a seamless and natural way of interaction between humans and ambient intelligence. Current techniques that couple wireless transmission with touch detection suffer from the problem of selectivity and security, i.e., they cannot ensure communication only through direct touch and not through close proximity. We present BodyWire-HCI , which utilizes the human body as a wire-like communication channel, to enable human–computer interaction, that for the first time, demonstrates selective and physically secure communication strictly during touch. The signal leakage out of the body is minimized by utilizing a novel, low frequency Electro-QuasiStatic Human Body Communication (EQS-HBC) technique that enables interaction strictly when there is a conductive communication path between the transmitter and receiver through the human body. Design techniques such as capacitive termination and voltage mode operation are used to minimize the human body channel loss to operate at low frequencies and enable EQS-HBC. The demonstrations highlight the impact of BodyWire-HCI in enabling new human–machine interaction modalities for variety of application scenarios such as secure authentication (e.g., opening a door and pairing a smart device) and information exchange (e.g., payment, image, medical data, and personal profile transfer) through touch (https://www.youtube.com/watch?v=Uwrig2XQIH8).

Sharing is Caring: A collaborative framework for sharing security alerts

Collaboration is a keystone of defense in the field of cybersecurity. A collaborative detection system allows multiple collaborators or service providers to share their security-incident-response data, in order to effectively identify and isolate stealthy malicious actors who hide their traffic under the umbrella of legitimate Internet data transmissions. The fundamental challenge in the design of a collaborative system is ensuring the privacy of collaborators in a decentralized setting without incurring substantial computation and communication overheads. In this paper, we use healthcare as a case study and present Sharing Is Caring (SIC), a framework that allows multiple healthcare organizations to share their security defense and attack data with other organizations for the collaborative defense against common attackers without compromising the privacy of their system configurations and user data. The SIC framework ensures two essential properties: (1) it ensures that no party should learn how a particular healthcare organization has reacted to suspected IP addresses, attacks or security incidents; and (2) it performs operations in a decentralized setting, without relying on a trusted third party. We provide an analysis of the privacy and security properties of our framework against honest-but-curious as well as malicious players. We prototype the proposed system and evaluate its performance in terms of computation time and communication bandwidth. The reasonable computation cost and bandwidth overhead make the SIC framework a feasible choice for the privacy-preserving exchange of security information among the collaborating healthcare organizations.

Technological Aspects of Blockchain Application for Vehicle-to-Network

Over the past decade, wireless communication technologies have developed significantly for intelligent applications in road transport. This paper provides an overview of telecommunications-based intelligent transport systems with a focus on ensuring system safety and resilience. In vehicle-to-everything, these problems are extremely acute due to the specifics of the operation of transport networks, which requires the use of special protection mechanisms. In this regard, it was decided to use blockchain as a system platform to support the needs of transport systems for secure information exchange. This paper describes the technological aspects of implementing blockchain technology in vehicle-to-network; the features of such technology are presented, as well as the features of their interaction. The authors considered various network characteristics and identified the parameters that have a primary impact on the operation of the vehicle-to-network (V2N) network when implementing the blockchain. In the paper, an experiment was carried out that showed the numerical characteristics for the allocation of resources on devices involved in organizing V2N communication and conclusions were drawn from the results of the study.

WIRELESS WI-FI SECURITY ANALYSIS IN AUTOMATED RAILWAY SYSTEMS

Purpose. The article is aimed to analyze the basic security mechanisms available in Wi-Fi networks; show the mechanisms for attacking these defenses; carry out a comparative analysis of the effectiveness of protection mechanisms; provide recommendations for the use of these mechanisms in automated rail transport systems; build a demonstration model of attacks on Wi–Fi network security. Methodology. Based on the review of a significant number of domestic and foreign sources, a comparative analysis of the security mechanisms of the Wi–Fi network is carried out, where individual protection standards are analyzed, their strengths and weaknesses appear. A variety of attacks on authentication tools and mechanisms for ensuring the security of information exchange are shown. To demonstrate an attack on these security features, an algorithm has been developed for a demonstration simulation model of the WPA2 security protocol with the ability to attack this protocol. Findings. The basic standards of Wi–Fi security mechanisms have been compared. In particular, WEP, WPA, WPA2, WPA3. Different attacks on these standards have been demonstrated. The advantages and weaknesses of individual mechanisms of protective means are shown, recommendations for their use are provided. A demonstration model of attacks on wireless network protection mechanisms has been built, which demonstrates such attacks as an attack on a passphrase and a KRACK attack. To demonstrate in the program, the WPA2 standard with the PSK authentication mechanism and the cryptographic protection mechanism CCMP-128 is chosen. Originality. A wide range of Wi–Fi network security mechanisms is presented, the capabilities of individual security mechanisms are shown, and Wi–Fi network security standards are compared. The original software model shows how erroneous user actions help an attacker overcome modern security mechanisms. Practical value. Recommendations for the use of separate Wi-Fi security features can be used to build a security system for individual components of automated rail systems. A demonstration model of an attack on a Wi-Fi network can be used in a training process to train cybersecurity specialists.

Rapid Deployment of Inpatient Telemedicine In Response to COVID-19 Across Three Health Systems.

ObjectiveTo reduce pathogen exposure, conserve personal protective equipment, and facilitate health care personnel work participation in the setting of the COVID-19 pandemic, three affiliated institutions rapidly and independently deployed inpatient telemedicine programs during March 2020. We describe key features and early learnings of these programs in the hospital setting.MethodsRelevant clinical and operational leadership from an academic medical center, pediatric teaching hospital, and safety net county health system met to share learnings shortly after deploying inpatient telemedicine. A summative analysis of their learnings was re-circulated for approval.ResultsAll three institutions faced pressure to urgently standup new telemedicine systems while still maintaining secure information exchange. Differences across patient demographics and technological capabilities led to variation in solution design, though key technical considerations were similar. Rapid deployment in each system relied on readily available consumer-grade technology, given the existing familiarity to patients and clinicians and minimal infrastructure investment. Preliminary data from the academic medical center over one month suggested positive adoption with 631 inpatient video calls lasting an average (standard deviation) of 16.5 minutes (19.6) based on inclusion criteria.DiscussionThe threat of an imminent surge of COVID-19 patients drove three institutions to rapidly develop inpatient telemedicine solutions. Concurrently, federal and state regulators temporarily relaxed restrictions that would have previously limited these efforts. Strategic direction from executive leadership, leveraging off-the-shelf hardware, vendor engagement, and clinical workflow integration facilitated rapid deployment.ConclusionThe rapid deployment of inpatient telemedicine is feasible across diverse settings as a response to the COVID-19 pandemic.

Edge Computing-Based Privacy-Preserving Authentication Framework and Protocol for 5G-Enabled Vehicular Networks

Based on the functional characteristics of inter-vehicle communication networks under the current framework, a privacy-preserving authentication framework that combines fifth-generation communication technology (5G) and edge computing technology is proposed. The proposed framework is different from that used in the previous 802.11p-based inter-vehicle communication network architecture, and we use device-to-device technology to achieve communication between vehicles. One difference between a 5G-enabled model and a traditional model for vehicle ad hoc networks is that secure communication between vehicles in a 5G-enabled model is challenging. The authentication protocol proposed in this study can be divided into two parts. The first part involves authenticating and selecting an edge computing vehicle, wherein a fuzzy logic mathematical method is used in the selection process. The second part is the mutual authentication between edge computing and ordinary vehicles. In this process, the exchange of security information between vehicles in a group is possible. Simultaneously, the identity privacy and traceability of the vehicle are ensured. Moreover, the proposed signature scheme is proved to be secure under a random oracle model. Performance evaluation results demonstrate that our proposed scheme has relatively lower computational and communication overhead than existing schemes.

Multilevel Security Network Communication Model Based on Multidimensional Control

To solve the problems associated with the application of multilevel security to actual networks, such as flexibility, availability, security, and secure communication, this study proposes a multilevel security network communication model based on multidimensional control. In the model, access control is retained on the basis of security labels. In addition, relational restraints among protection domains, credibility degree restraints of subjects on security attributes, aggregation inference control restraints, and secure tunnel control restraints are introduced and applied. Thus, secure information exchange within a multilevel security network information system is ensured. Moreover, using this model, multilevel security virtual networks with logical and independent characteristics can be built to accomplish secure interconnection and communication between nonequivalent members, thereby reducing the probability of information leakage. Finally, the security of the model is confirmed by applying the nontransitive, noninterference theory, and the typical application of the model in actual networks is described.

Blockchain‐Based Dynamic Group Key Agreement Protocol for Ad Hoc Network

Group key agreement (GKA) is one of the key technologies for ensuring information exchange security among group members. While GKA is widely used in secure multi-party computation, safety of resources sharing, and distributed collaborative computing. It still has some security flaws and limitations. We proposes a Blockchain-based dynamic Group key agreement (BDGKA) protocol. In contrast to prior works, BDGKA differs in several significant ways: 1) anonymous identity authenticationit can prevent privacy leaks; 2) traceability-it can track illegal operating entities; 3) load balancing-it balances computation and communication to each node, avoiding the breakdown of single-point and network bottlenecks. This protocol is proven secure under the hardness assumption of decision bilinear DiffieHellman. The performance analysis shows that it is more efficient than the referred works.

Enabling Security-Aware D2D Spectrum Resource Sharing for Connected Autonomous Vehicles

With the emergence of automated driving technology, wireless demand for secure information exchange among automated vehicles has increased dramatically. To this end, we design a security-aware dynamic device-to-device (D2D) spectrum resource sharing mechanism to enhance the security of vehicular D2D communications with the improved spectrum efficiency. Considering both resource block (RB) sharing and power control, we model this joint D2D spectrum resource sharing process as a weighted bipartite graph matching problem whose weights are obtained through deriving the closed-form solutions of power control in an algebraic method. Then, the global optimal solutions of the matching problem are obtained by using the Hungarian algorithm. Furthermore, a security-aware RB and power allocation (SA-RBPA) mechanism compatible with existing cellular networks is proposed for the small cell base station applications. Extensive simulation results have shown that, compared with existing approaches that consider RB reusing strategy or power control scheme optimization alone, the SA-RBPA scheme is able to realize a better spectrum efficiency and security performance.

Scalability Challenges in Healthcare Blockchain System—A Systematic Review

Blockchain technology is a private, secure, trustworthy, and transparent information exchange performed in a decentralised manner. In this case, the coordination and validation efforts are simplified as the records are designed to update regularly and there is no difference in the two databases. This review focuses on how the blockchain addresses scalability challenges and provides solutions in the healthcare field through the implementation of blockchain technology. Accordingly, 16 solutions fell under two main areas, namely storage optimization and redesign of blockchain. However, limitations persist, including block size, high volume of data, transactions, number of nodes, and protocol challenges. This review consists of six stages, namely identification of research question, procedures of research, screening of relevant articles, keywording based on the abstract, data extraction, and mapping process. Through Atlas.ti software, the selected keywords were used to analyse through the relevant articles. As a result, 48 codes and 403 quotations were compiled. Manual coding was performed to categorise the quotations. The codes were then mapped onto the network as a mapping process. Notably, 16 solutions fell under two main areas, namely storage optimization and redesign of blockchain. Basically, there are 3 solutions compiled for storage optimization and 13 solutions for the redesign of the blockchain, namely blockchain modelling, read mechanism, write mechanism, and bi-directional network.

Secure and Privacy-Based Data Sharing Approaches in Cloud Computing for Healthcare Applications

The cloud framework is extensively employed in the medical industry for a broad range of applications including medical information storage, distribution, as well as administration. Given the advantages of cloud computing, several medical companies are exploring implementing such techniques to address various difficulties inside the medical sector. It evolved into an essential component of healthcare delivery. It may help medical companies concentrate on their activities, and medical assistance, including clinical management. This provides a safer approach for sharing confidential material with hospitals as well as third-party studies and medical institutes. Nevertheless, because the structure of cloud technology emerges as well as develops fast, especially theoretical and practical implications, significant legal/contractual, economical, customer satisfaction, connectivity, cybersecurity, and confidentiality problems remain in the research phase. In this article, we explain several cloud-based computing services, as well as implementation strategies, also highlight important problems. This study also focuses on safe and secure information exchange options within cloud technology for medical domains.

Dual Steganography Approach Using 3D Playfair Cipher and Pixel Value Differencing Method

In this paper we attempted to incorporate a text encoding technique 3D Playfair Cipher with Pixel Value Differencing (PVD) approach to achieve dual steganography. Dual steganography is very demanding in the present scenario, because steganography is only playing a role to stealth intruder, but sometimes existence of secret data got recognized, in such scenarios dual steganography can only protect our secret exchange. In steganography hiding capability is equally concerned as much as security, so compression of secret message is preferable before imparting it in cover medium. These requirements pushed us to implement a fast, secure, effective and handy steganographic approach to solve secure information exchange problems. In this research we took the advantage of 3D Playfair cipher not to only encode our secret message but also to reduce its size. Here dual steganography is formed using 3D Playfair cipher with PVD method. PVD method implements the concept that edge areas are more vulnerable that smooth areas in images to conceal secrets,which makes it a powerful approach in the field of image steganography due to its stegoimage quality and data hiding capabilities. PVD method hides data in cover image based on the difference of pixel value in the pixel pairs (nonoverlapping consecutive pixels). Proposed approach is much secure and better in data hiding capability along with ensuring better quality stego image quality, it also solves the problem of falling the boundary of the pixels presents in PVD method. Produced Stegoimage of proposed technique is secure enough against the RS detection attack and totally indistinguishable by human eyes.

The Simulation of one-time-pad quantum key distribution

The quantum key distribution provides a secure information exchange. The system employed a single photon as the messenger. In this study one-time pad (OTP) quantum key distribution provide a key which is use securely. For example, in a war. Therefore, it is not possible to share the secrete key in this condition, but the OTP can be generated several times as long as there is no eavesdropped detected. This paper discusses the simulation of a one-time pad quantum key distribution with event-by-event method.

CK-RAID: Collaborative Knowledge Repository for Intrusion Detection System

Intrusion Detection Systems (IDSs) are an integral part of an organization's infrastructure. Without an IDS facility in place to monitor network and host activities, attempted and successful intrusion attempts may go unnoticed. This study proposed a Collaborative Knowledge Repository Architecture for Intrusion Detection (CK-RAID). It is based on a distributed network of computer nodes, each with their individual IDS with a centralized knowledge repository system, and firewall acting as a defence. When an unfamiliar attack hits any node, the first step the intrusion monitor takes is to request from Knowledge Repository Server the most effective intrusion response. To improve performance, Intrusion Update module collaborates with IDSs sensor and log by updating their expert rule and intrusion information respectively and removing the old intrusion signature from the knowledge base with the aid of Intrusion Detector Pruning. To ensure security of information exchange, RSA encryption and Digital Signature were used to encode information during transit. The result showed that CK-RAID had a detection rate of 97.2%, compared with Medoid Clustering, Y-means, FCM and K-means that have an accuracy of 96.38%, 87.15%, 82.13% and 77.25% respectively. Therefore, CK-RAID can be deployed for efficient detection of all categories of intrusion detection and response.

An Efficient Collaboration and Incentive Mechanism for Internet of Vehicles (IoV) With Secured Information Exchange Based on Blockchains

With the rapid development of Internet of Things (IoT), mobile crowdsensing (MCS), i.e., outsourcing sensing tasks to mobile devices or vehicles, has been proposed to address the problem of data collection in the scenarios such as smart city. Despite its benefits for a wide range of applications, MCS lacks an efficient incentive mechanism, restricting the development of IoT applications, especially for Internet of Vehicles (IoV)—a typical example of IoT applications; this is because vehicles are usually reluctant to participate these sensing tasks. Moreover, in practice, some sensing tasks may arrive suddenly (called an emergent task) in the IoV environment, but the resources of a single vehicle may be insufficient to handle, and thus multivehicles collaboration is required. In this case, the incentive mechanisms for the participation of multiple vehicles and the task scheduling for their collaborations are collectively needed. To address this important problem, we first propose a new model for the scenario of two vehicles collaboration, considering the situation of the emergent appearance of a task. In this model, for a general sensing task, we propose a bidding mechanism to better encourage vehicles to contribute their resources, and the tasks for those vehicles are scheduled accordingly. Second, for an emergent task, a novel time-window-based method is devised to manage the tasks among vehicles and to incent the vehicles to participate. Finally, we develop a blockchain framework to achieve the secured information exchange through smart contract for the proposed models in IoV.

General Secure Information Exchange Protocol for a Multiuser MIMO Relay Channel

Secure information exchange occurs in many recently emerging cooperative-based networks, such as 5G networks (especially those with a Device to Device architecture), the Internet of Things, and vehicular ad hoc networks. However, the existing information exchange protocols only focus on either pairwise information exchange or group information exchange, and none of these protocols enable private and public information exchange to occur simultaneously. Thus, a general secure information exchange protocol for a multiuser channel is desirable. With this motivation, this paper investigates simultaneous private and public information exchange in a Multiple Inputs Multiple Outputs (MIMO) multiuser relay channel. In an aim to achieve this goal, signal alignment is chosen as the core technique. With the designed precoding matrix for each user, private information is aligned with its exchange partner, and public information forms a coding chain at the relay. With the aligned private signal and public coding chain, neither an untrusted relay nor external eavesdroppers can recover the original individual information. Performance analyses of the proposed protocol are conducted. First, we conduct transmission performance analyses from the perspective of time slot cost. Second, we conduct a security analysis for private information exchange and public information exchange. Third, we conduct secrecy sum-rate analysis for three attack scenarios: an untrusted relay attack only, an eavesdropper attack only, and both an untrusted relay and eavesdropper attack. The simulations are conducted to demonstrate that the proposed protocol can enable simultaneous private and public information exchange while resisting attacks by an undesired receiver, an untrusted relay, and external eavesdroppers.

Asymmetric cryptography with physical unclonable keys

Secure communication is of paramount importance in modern society. Asymmetric cryptography methods such as the widely used RSA cryptosystem allow secure exchange of information between parties who have never previously shared keys. However, the existing asymmetric cryptographic schemes rely on unproven mathematical assumptions for security. Further, the digital keys used in their implementation are susceptible to copying that might remain unnoticed. Here, we introduce a secure communication method based on Physical Unclonable Keys (PUKs), which we call PUK-Enabled Asymmetric Communication (PEAC). PEAC uses physical keys and thus overcomes the problem of unnoticed copying. As all the information about the PUK is allowed to be public, PEAC does not require the safekeeping of any digital information. Using optical PUKs realized in opaque scattering materials, we transmit messages in an error-corrected way employing off-the-shelf equipment. Information is transmitted as patterned wavefronts of few-photon wavepackets which can be successfully decrypted only with the receiver’s PUK. The security of PEAC assumes technological constraints in distinguishing between different few-photon wavefronts. A heuristic argument for the security of PEAC is outlined focusing on a specific attack, namely state estimation. We demonstrate secure transmission of messages over a 2 m free-space line-of-sight quantum channel. PEAC enables new directions for physical key based cryptography.