Secure Login Research Articles

Construction Worker Hiring Management System

The Integrated Construction Management System (ICMS) is a sophisticated web-based application developed to optimize the management processes associated with construction projects. Leveraging a technology stack that includes HTML, CSS, Bootstrap, PHP, and MySQL, this system aims to streamline communication, collaboration, and resource management within construction teams, ultimately contributing to the successful and efficient completion of projects. One of the primary features of ICMS is its robust user authentication and authorization system. The application implements a secure login mechanism that authenticates users while assigning distinct access levels based on their roles within the construction project. This ensures that project managers, architects, engineers, and other stakeholders have tailored access to relevant information and functionalities. The project dashboard serves as a centralized hub, providing a comprehensive overview of the project's status, milestones, and critical updates. Through real-time tracking of project progress, ICMS facilitates effective decision-making by offering stakeholders immediate insights into the current state of affairs. This dynamic approach extends to task and resource management, where tasks can be created, assigned, and tracked in real time, ensuring optimal workforce utilization

A Comprehensive Women's safety Platform Offering Secure Login, Emergency Panic, News Alerts, Route Navigation with Police Station Proximity, Incident Reporting

A significant challenge confronting by society is women's safety. The frequency of crimes targeting women, including sexual assaults, domestic abuse, and dawn teasing, is rising daily due to different social or ethnic reasons. Using a smartphone to seek assistance in matters of security can be one of the simplest options such as across the globe method of handheld data transmission and the global positioning system (GPS) .It was determined that in order to properly solve the issue, technologies emphasising automatic set-up warning production in addition less individual input additionally higher accuracy must be developed, despite delivering noteworthy research in the underlying subject .It makes advantage of the GPS tracking technology to give registered contacts an easy and quick way to find out if the individual has encountered troubles and to get in touch with them. It also has safety features like Disaster hotlines which could possibly contacted straight through phone to emergency services in accordance with the circumstances encountered with women in order to protect them, a live location of the victim that can assist by a law enforcement provides contextual and identifying information, and an alarm for notify individuals of all kinds misbehaviour. Keywords: Women’s safety, SOS, GPS, human safety, Android, security devices.

IMPLEMENTASI PENGEMBANGAN SISTEM JARINGAN INTERNET PT. INKA MULTI SOLUSI SERVICE BERBASIS ROUTER MIKROTIK

The high usage of internet networks, coupled with various direct and indirect attacks, will affect the activities on the internet network. The office of PT. INKA Multi Solusi Service, located in Madiun City, has each employee working with their own computers, and the office's internet speed is 150 Mbps. However, the internet network at PT. INKA Multi Solusi Service faces several optimization issues. Three of these issues are related to internet security login, bandwidth conflicts, and unrestricted website access, leading to virus-related problems. The proposed solution involves implementing the Hierarchical Token Bucket (HTB) method, a bandwidth management technique used to control internet networks. HTB operates by allocating bandwidth hierarchically based on user needs. One of its advantages is that any unused bandwidth will be reallocated according to the priority needs of each user in a network. A captive portal will be implemented to protect the network from unauthorized users, ensuring that users have been granted permission to access the network through a username and password. Web filtering will safeguard internet users from harmful websites and restrict access to specific websites, especially those that could be potential sources of network viruses.

Securing patient data in the healthcare industry: A blockchain-driven protocol with advanced encryption.

Ensuring the security and privacy of patient data is a critical concern in the healthcare industry. The growing utilization of electronic data transmission and storage in medical records has amplified apprehensions about data security. However, due to varying stakeholder interests, not all data can be freely shared, necessitating the development of secure protocols. This study presents a highly secure protocol that integrates blockchain technology, patient biometric information, and robust cryptographic algorithms (elliptic curve cryptography (ECC) and advanced encryption algorithm (AEC)) to facilitate data encryption and decryption. The protocol encompasses secure login, secure key sharing, and data sharing mechanisms among miners, offering comprehensive security measures. To validate the effectiveness of the proposed protocol, both informal and formal security analyses are conducted. The security protocol description language in Scyther is utilized to evaluate the protocol's resilience against attacks. The culmination of this research is a secure protocol that leverages blockchain technology and ECC for the secure storage and sharing of medical records. The protocol covers all stages, including system setup, user registration, login mechanisms, key exchange between users and blockchain, communication between blockchains, and interaction with other miners, with a steadfast emphasis on security. Furthermore, the protocol's communication and computation costs are assessed, with a comparison to existing blockchain-based schemes. Informal proofs establish the protocol's security against common attacks faced by medical institutions. Formal simulation of the protocol using the Scyther tool provides definitive evidence of its resistance to attacks. As a result, this protocol presents a viable real-time implementation solution for safeguarding patient data within the healthcare domain, representing a significant contribution to data security.

Integration of processes related to the implementation of the mediGOAT platform in diabetic patient care.

Diabetes has always been viewed through the prism of the fact that any expenditure in this area is a threat to the budget of the entire health care system. Most often it is the progress of science that forces integration activities. An example may be the integration processes related to the implementation and creation of the mediGOAT platform, which are focused on its multi-functionality, i.e. the ability to connect many different measuring devices (Glucometer, CGM, SmartPen, Insulin Pump, GlucoActive) from many manufacturers. They are made up of smaller particles with their own rules and goals, such as engaging and evaluating activities. We meet with this, among others by implementing good practices.
 As a result, such activities give the user more choice and independence from many native applications (manufacturers), and it enables cooperation with Google Health and iHealth (Apple). This makes it possible to use additional information provided by External Applications (meals, exercise, pressure, weight, ...) in the treatment process. In addition, it allows you to collect and store your medical records (including the results of medical tests). The indicated/selected medical/health data (in the future on-line measurements) can be provided to the doctor via the Portal, ensuring security (login via Apple and Google, Backup) and ease of use.
 Additional knowledge is written at various levels of detail, scattered in different places, its origin is sometimes uncertain, which makes it unreliable. It is often oversized where it is not necessary, and various sources can contradict each other. Therefore, it is important to use trusted sources. Controlling blood glucose levels is important, as are the circumstances surrounding such a measurement, what you do and where you are. Mobile Continuous Glucose Monitoring, using CGM, enables up to 288 readings per day, giving you insight into information that fingerstick tests cannot match. CGM provides real-time glucose readings every five minutes throughout the day and night, notifying you of high and low values. The sensor continuously measures the glucose level just below the skin and transmits the data wirelessly to the display device via the transmitter. This enables an immediate reaction. A discreet sensor placed just under the skin (the automatic applicator introduces the sensor just under the skin with one press) measures the glucose level for the time specified by the manufacturer. Glucose data is sent wirelessly to the analysing and smart device via Bluetooth® or NFC technology. Such a device can be a compatible smartphone or other optional receiver that displays and archives glucose data in real time.

Pembuatan Aplikasi Persediaan Barang Berbasis Web Pada PT. Bayan Resources Tbk

This research aims to design and implement a web-based Goods Inventory Information System at PT Bayan Resources Tbk. The company faces challenges in inventory management, such as stock uncertainty, variations in order cycle time, and operational efficiency levels that need to be improved. Waterfall method is used as a framework for system development, with stages of requirement analysis, design, implementation, testing, and maintenance. The system is designed to improve operational efficiency through integration of inventory data, order management, and item tracking. The result is a web-based application with features such as a secure login page, informative dashboard, master data management, efficient input of incoming and outgoing goods, and careful user control. With the implementation of dark mode, the system gives users the flexibility to customize the display according to their preferences. Users can easily access, track, and analyze inventory data, supporting faster and more accurate decision-making for the company.

355. DEVELOPMENT OF A CUSTOM RELATIONAL DATABASE FOR INTEGRATING CLINICAL AND RESEARCH DATA FOR THE STUDY FOR ESOPHAGEAL ADENOCARCINOMA

Abstract Background With the advent of next-generation sequencing, digital pathology, and other high-dimensional data sources used in modern research, improved data management is required to maintain organization and relationship to the corresponding patient and their outcomes. The complexity of the data often limits interpretation by clinicians not highly versed in its analysis. Conversely, data scientists may not be able to interpret the data in the correct clinical context. We describe here a relational database and custom tools which coordinates clinical, organoid, and genomic data in the study of esophageal adenocarcinoma. Methods Database architecture was designed with pillars of clinical data and outcome, organoid culture data, and next-generation sequencing data. Data dictionaries were composed for all tables in the database architecture. Oracle Database was utilized and populated with datasets formatted to adhere to data dictionaries. Application Express was used to develop web applications for users to enter, query, and analyze data. Automatic nightly backups, robust login security, and tiers of access protect confidential data against system failures, human error, and data theft. Custom tools with graphical user interfaces were developed for survival curve generation and organoid drug-screening results, to facilitate clinician use. Results This database now encompasses over 21 data tables comprising clinical, surgical, recurrence, treatment response, tissue sample storage, organoid research, and genomic data. Data scientists can link omic data directly to patient clinical data and clinician researchers can rapidly obtain patient and organoid survival data for covariates of choice using a graphical user interface. Conclusion Proper data management requires a substantial initial investment in designing of database architecture, deployment of software and servers, formatting of data, and the creation of front-end user applications. The investment is well worth the cost, however, as a centralized database allows for rapid querying of data that would otherwise be scattered or require individualized analysis for each project. This also facilitates the interactions between data scientists and clinician researchers.

Automatic Question Paper Generator

"This paper presents the design and development of an Automatic Question Paper Generator tailored to meet the needs of academic institutions. The system aims to streamline administrative tasks and enhancefaculty productivity, ultimately benefiting students in their assessment process. The proposed system offers two distinct workflows: one for administrators and another for faculty members. Administrators are granted privileged access to manage subjects, view registered faculties, and oversee the question bank and automatic question paper generation. Faculty members, on the other hand, can access approved subjects to post questions and generate question papers for assessments. For administrators, the system provides a secure login mechanism to access the admin dashboard. From there, administrators can efficiently monitor and manage the faculty registration process, approving or rejecting new faculty applications as needed. The dashboard allows administrators to add subjects to thesystem, ensuring faculty members can post questions for approved subjects only. Additionally, administrators can view the entire question bank categorized by subjects, review the history of question papers generated by faculty members, and handle any subject addition requests from faculty members. Faculty members log in through their individual accounts and access the faculty dashboard. Within the faculty dashboard, they can view a list of approved subjects, which enables them to post questions relevant to their expertise. Faculty members can effortlessly create question papers for assessments, specifying the total marks for each paper using the automatic question paper generation feature. Optionally, the system may include a feature allowing faculty membersto submit subject addition requests to the administrators, thereby enhancing the system's subject offerings. Overall, the proposed Automatic Question Paper Generator aims to streamline examination processes, reduce paperwork, and centralize academic assessment management. By optimizing administrative workflows and empowering faculty members, the system fosters efficiency and accuracy in academic evaluations, ultimately enhancing the learning experience for students.” Keywords— Automatic Question Paper Generator, Academic institutions, Administrative tasks, Faculty productivity, Question bank, Assessment process.

Mikrotik Login Security with Port-Knocking and Brute Force Firewall at PT. Time Excelindo

In today's digital era, the use of MikroTik routers is increasingly common in companies, including PT Time Excelindo. However, attacks on MikroTik router logins are a frequent problem, and the company has a need to have a cheap and simple security system. This thesis aims to implement login security techniques using Port-Knocking and brute force firewalls on MikroTik routers at PT Time Excelindo, with the aim of providing solutions that are affordable and easy to implement. This study focuses on identifying the problems faced by PT Time Excelindo, namely repeated attacks against MikroTik router logins. The proposed solution involves implementing a Port- Knocking technique which will hide the login port on the router, so that only legitimate access will be allowed after a series of specific requests are made to certain ports. In addition, the firewall will also be activated to block brute force attacks by limiting the number of failed login attempts

Siamese Neural Network for Keystroke Dynamics-Based Authentication on Partial Passwords.

The paper addresses issues concerning secure authentication in computer systems. We focus on multi-factor authentication methods using two or more independent mechanisms to identify a user. User-specific behavioral biometrics is widely used to increase login security. The usage of behavioral biometrics can support verification without bothering the user with a requirement of an additional interaction. Our research aimed to check whether using information about how partial passwords are typed is possible to strengthen user authentication security. The partial password is a query of a subset of characters from a full password. The use of partial passwords makes it difficult for attackers who can observe password entry to acquire sensitive information. In this paper, we use a Siamese neural network and n-shot classification using past recent logins to verify user identity based on keystroke dynamics obtained from the static text. The experimental results on real data demonstrate that keystroke dynamics authentication can be successfully used for partial password typing patterns. Our method can support the basic authentication process and increase users' confidence.

Supply Chain Management Information System Analysis In Services Private Banks

This study aims to get a more specific understanding by describing the Supply chain management information system in the mobile banking application and understanding the effectiveness of the use of m-BCA as a form of information system. This type of research is descriptive quantitative by analyzing and identifying problems in finding the effectiveness of m-BCA information system. The data collection process in this study was carried out by conducting experiments using m-BCA which became the main source and other data sources taken from various media containing m-BCA report data. Based on the results of the data that researchers do refer to the 3 main functions of mobile banking, namely convenient, practical and easy. While the results of 300 mobile banking users 93.3% rated effective at the level of need and convenience. Then 10% less effective and 3.3% less effective users agree and disagree because the UI (User Interface) of mobile banking is less attractive. Finally, the security level can be assessed as effective with a percentage of 80% and less effective 20% because the application login security does not yet have a fingerprint and face id which he thinks is more secure and practical.

Algorithm Policy for the Authentication of Indirect Fingerprints Used in Cloud Computing

User identity identification secures cloud computing. This study examined cloud service security authentication needs. Fingerprint recognition was used to create a new cloud security authentication system. The proposed system's design and process were thoroughly examined to secure cloud user data from unauthorized access. This study proposes a secure cloud server fingerprint match technique. Considering fingerprint uniqueness and stability, cloud security login authentication technology employing fingerprint recognition is researched to improve cloud services login security. Analyze the cloud security login system structure first. Next, fingerprint identification is explained. Finally, fingerprint identification of cloud security login systems is investigated from fingerprint registration, certification, fingerprint image processing perspectives, and a simple fingerprint image processing simulation. The results show that this login mechanism is secure and versatile. The biometric template is insecure, and stolen templates cannot be canceled, making user identity leaks easy. This work proposes indirect fingerprint authentication to address these issues. Finally, a thorough security analysis of the cloud computing method is offered.

Keystroke Dynamics-Based Authentication System Using Empirical Thresholding Algorithm

In a password-based authentication technique, whenever the typed password and username matches the system database, the secure login page allows the client to access it. Despite the password matching, the proposed method checks the similarity between the typing rhythm of entered password and the rhythm of password samples in client's database. In this paper, a novel algorithmic procedure is presented to authenticate the legal client based on empirical threshold values obtained from the timing information of the client's keystroke dynamics. The exploratory outcomes demonstrate an impressive diminish in both false rejection rate and false acceptance rate. Equal error rate and authentication accuracy are also assessed to show the superiority and robustness of the method. Therefore, the proposed keystroke dynamics-based authentication method can be valuable in securing the system protection as a correlative or substitute form of client validation and as a useful resource for identifying the illegal invasion.

Security Design Pattern for Login System through Authentication using Modified Sha 384 Algorithm

The research has been carried out to develop secure login system by authenticating the login using modified SHA-384 algorithm. It derives 896-bit hash value for the password entered by the user in the user registration form and saves the credentials entered by the user in system’s database. Results obtained are evaluated by resolving the general attacks confirmed that the modified SHA-384 algorithm was more secured compared to the original SHA-384 algorithm as it was not broken using generic attacks such as brute force, rainbow table and other cracking tools available online such as Cain and Abel. The performance of the modified algorithm was measured with only 2 ms additional execution time from SHA-384.

The Development of Baby Feed: A Web Application for Health Professionals and Parents to Improve Infant Diets

ObjectivesTo develop the web application “Baby Feed” that can: 1) Quickly and easily evaluate infant diets using a validated Infant Food Frequency Questionnaire (FFQ) developed by our group. 2) Provide automatic results online to clinicians on nutrients and foods/beverages consumed above or below the recommended levels. 3) Provide current diet recommendations by infant’s age for clinicians to discuss with parents during routine Well-Child Visits. 4) Provide parents online access to the infant diet recommendations and a short tracking question component, with the goal of improving the infant’s diet. This could translate into healthy weight gain during infancy and prevent early childhood obesity. MethodsIn collaboration with the computer science department, our group previously converted the 55-item Infant FFQ and nutrient/food database from paper format to web portals in Baby Feed. The web portals were built in MongoDB and deployed on Microsoft Azure. Next, a secure login system with usernames and passwords was created that directs users to their assigned portal: administrative, parental, or clinician. Tabs were created in the portals that show FFQ results, diet recommendations, and tracking history. The short tracking questions were created for parents to select whether their infant had consumed more, equal, or less than the recommended amounts of the 10 food groups during the past week. ResultsBaby Feed was developed where: (1) Parents can complete the Infant FFQ online. (2) Clinicians can view the automatic results, which are available in nutrients and foods/beverages color-coded to highlight those consumed above or below the recommended levels. (3) Diet recommendations are presented online in a friendly and graphic way that are easy to follow in tablespoons, cups, and ounces per day. (4) The short tracking questions can help parents at home make goals and stayed engaged in between Well-Child Visits. This use of technology can allow parents at their convenience to access knowledge in Baby Feed and develop skills in infant feeding. ConclusionsThe development of Baby Feed was successful, and the web application is ready to be pilot tested. Baby Feed could be used by health professionals and parents during routine Well-Child Visits as a tool to improve the diet quality in infants and prevent early childhood obesity. Funding SourcesCaplan Foundation for Early Childhood

Extended evaluation of the effect of real and simulated masks on face recognition performance.

Face recognition is an essential technology in our daily lives as a contactless and convenient method of accurate identity verification. Processes such as secure login to electronic devices or identity verification at automatic border control gates are increasingly dependent on such technologies. The recent COVID‐19 pandemic has increased the focus on hygienic and contactless identity verification methods. The pandemic has led to the wide use of face masks, essential to keep the pandemic under control. The effect of mask‐wearing on face recognition in a collaborative environment is currently a sensitive yet understudied issue. Recent reports have tackled this by using face images with synthetic mask‐like face occlusions without exclusively assessing how representative they are of real face masks. These issues are addressed by presenting a specifically collected database containing three sessions, each with three different capture instructions, to simulate real use cases. The data are augmented to include previously used synthetic mask occlusions. Further studied is the effect of masked face probes on the behaviour of four face recognition systems—three academic and one commercial. This study evaluates both masked‐to‐non‐masked and masked‐to‐masked face comparisons. In addition, real masks in the database are compared with simulated masks to determine their comparative effects on face recognition performance.

An Efficient Login Authentication System against Multiple Attacks in Mobile Devices

Access management of IoT devices is extremely important, and a secure login authentication scheme can effectively protect users’ privacy. However, traditional authentication schemes are threatened by shoulder-surfing attacks, and biometric-based schemes, such as fingerprint recognition and face recognition, that are commonly used today can also be cracked. Researchers have proposed some schemes for current attacks, but they are limited by usability. For example, the login authentication process requires additional device support. This method solves the problem of attacks, but it is unusable, which limits its application. At present, most authentication schemes for the Internet of Things and mobile platforms either focus on security, thus ignoring availability, or have excellent convenience but insufficient security. This is a symmetry problem worth exploring. Therefore, users need a new type of login authentication scheme that can balance security and usability to protect users’ private data or maintain device security. In this paper, we propose a login authentication scheme named PinWheel, which combines a textual password, a graphical password, and biometrics to prevent both shoulder-surfing attacks and smudge attacks and solves the current schemes’ lack of usability. We implemented PinWheel and evaluated it from the perspective of security and usability. The experiments required 262 days, and 573 subjects participated in our investigation. The evaluation results show that PinWheel can at least effectively resist both mainstream attacks and is superior to most existing schemes in terms of usability.

A Novel Hybrid Textual-Graphical Authentication Scheme With Better Security, Memorability, and Usability

Despite numerous efforts, developing an authentication scheme that offers strong security while offering memorability and usability remains a grand challenge. In this paper, we propose a textual-graphical hybrid authentication scheme that improves the security, memorability and usability inadequacies of existing authentication schemes. This has been achieved by combining a range of mechanisms together, in a novel manner, to address weaknesses of the existing security schemes. Firstly, two dynamically selectable modes of password entry (Easy Login, and Secure Login) provide a trade-off between usability and security, allowing the user to dynamically switch to any of these methods in real-time based on the security of the surrounding environment (e.g., secure home environment versus insecure public places) or the criticality of the user account (e.g., a bank account). The other mechanisms included a novel use of the drawmetric mechanism for setting the password to improve memorability, multistep authentication, a novel adaptation of one-time password (OTP) concept using a random selection of password elements, random placement of password elements in different steps, assigning random numbers to the password elements to increase security, and use of simple addition to improve security. We have implemented and analysed the proposed scheme for its security against brute-force attacks, dictionary, shoulder surfing, random guessing, phishing or forming, keystroke/mouse logger, and multiple recording attacks. We have also investigated its usability and memorability, reporting various trends of password elements used and the respective authentication times. Moreover, we have compared the proposed scheme with eight other well-known authentication schemes in terms of its resilience and authentication time. The results and analyses demonstrate the effectiveness of the proposed scheme. We believe that a range of novel methods introduced in this proposed scheme opens several doors for innovation in security techniques.

Detecting the Phishing Attack Using Collaborative Approach and Secure Login through Dynamic Virtual Passwords

User data protection is a major problem in the technical world. To get critical data from people such as bank account, credit card details and passwords, fraudulent people use different techniques for their advantages. Misuse of user credentials affects many industry sectors day by day. The fraudulent practice where more people connected to a network revealing sensitive data of individual, group or a company of legitimate sources called phishing. The aids for the hackers are forged websites and emails which look similar as original. There are different anti-phishing methods are proposed which follows various methods, to protect users against phishing. Proposed technique has detection of phishing at various stages. It contains incoming mail analysis for its feature as well as source. If mail has link to webpage, that cautious webpage is checked for its legitimateness. It is examined by using two methods. For popular sites, webpage content is compared with content of known legitimate site. The second step is to find whether any cautious site is increasingly dependable on any related pages to calculate relationship strength indirectly or directly associated pages. To protect from phishing attacks, these techniques uses virtual passwords for logging into sites.

Fast palmprint retrieval using speed up robust features

Background/Objective: Biometric usage is increasing in exponential series in all organisations for multiple purposes like employee attendance, Aadhaar based authentication and secure login using finger print etc. This biometric process should be as quick as possible without making much delay to retrieve the respective finger print. So an efficient quick retrieval procedure is required, in this regards a fast retrieval method for palm prints is proposed in this article. Method: This method uses Speed up Robust Features (SURF) and an efficient look up table for fast retrieval of palm prints. A key is computed for each palmprint by matching with a pre-selected palmprint called representative. This key is used, to place the palmprint into the look up table like traditional database record. To identify a query palmprint, key is computed and selects a set of palm prints from the look up table which are having similar key as possible matches. Findings: This proposed solution is experimented with multiple representative images to check the improved performance. As an outcome we could achieve better hit rate by comparing with existing systemNovelty:. This proposed method makes the new palm prints dynamically without disturbing the current records in the system. The entire solution is experimented on benchmark PolyU palmprint database of 7,753 images and significant performance is shown in results. This proposed solution shows better results with respect to hit rate and miss rate. Keywords: Palmprint; index key; SURF; similarity score; representative