Secure Information Processing Research Articles

Implementation of controlled unitary gates and its application in a remote-controlled quantum gate.

Recently, remote-controlled quantum information processing has been proposed for its applications in secure quantum processing protocols and distributed quantum networks. For remote-controlled quantum gates, the experimental realization of controlled unitary (CU) gates between any quantum gates is an essential task. Here, we propose and experimentally demonstrate a scheme for implementing CU gates between any pair of unitary gates using the polarization and time-bin degrees of freedom of single photons. Then, we experimentally implement remote-controlled single-qubit unitary gates by controlling either the state preparation or measurement of the control qubit with high process fidelities. We believe the proposed remote-controlled quantum gate model can pave the way for secure and efficient quantum information processing.

Cloud Computing Performance Evaluation Model for Open and Distance Learners in Nigeria

The increasing need for fast, secure and dynamic processing of information has necessitated the wide scale adoption of cloud computing. The educational sector especially the open and distance learning institutions are not left out of the need for distributed technology. This study presented a model that provided insight into the pre and post usage adoption variables associated with cloud computing adoption and performance in open and distance learning (ODL) setting. Partial Least Square (PLS) was adapted to test seven hypotheses on the causal relationship between the variables. Five out of the seven hypotheses were supported. The pre-usage and satisfaction oriented constructs showed more significant contributions in determining performance impact than the task technology fit oriented constructs. The study also provided insights on user preferences for decision making by educational institutions, service providers, business owners and government. Keywords: Cloud Computing, TUSPEM, Performance, Utilization, Cost, Ease Of Use

Expressing opinions about information security in an organization: the spiral of silence theory perspective

Purpose Expressing views on organizational information security (IS) by employees is vital for improving security processes, policies and trainings, while non-communication may conceal the true state of the human factor of IS and lead to security breaches. The purpose of this paper is to introduce the concept of opinion expressing about organizational IS, provide an explanatory model based on the theory of spiral of silence and offer its empirical validation. Design/methodology/approach Data from a web-based survey among the employees of one the universities in the European Union (n = 504) was analyzed with regression analysis to investigate the proposed hypotheses. Findings The study reveals that employees with positive opinions about IS will be more willing to share their opinions with coworkers and management. However, when employees perceive that their pro-IS opinions are not shared by other coworkers, they will remain silent, which increases the risk of problematic opinions spreading throughout the organization. Research limitations/implications The study highlights the need to focus on the communication perspectives of organizational information security, an area often overlooked in the human factor of information security research. Practical implications The results highlight the need to examine the gap between the dominant climate of opinion about IS in the organization and the display of compliant IS behaviors in order to strengthen IS endeavors. Organizations are encouraged to facilitate open dialogue about IS processes, policies and training and implement mechanisms for considering employees’ feedback in order to improve the organization’s IS. Originality/value The study contributes to a growing body of research that moves beyond viewing employees merely as subjects of compliance, recognizing instead their agency in IS issues that can enhance organizational resilience. To the best of the authors’ knowledge, this is the first study to apply the spiral of silence theory in the IS field, thereby helping to overcome the lack of communication science perspectives in organizational IS research.

Blockchain user digital identity big data and information security process protection based on network trust

This study aims to delve into the knowledge graph, functional pathways, and qualitative logic among elements such as network trust, blockchain organization, user identity, big data, and information security in the digital economy era. Through an analysis of the endogenous and exogenous explicit management logic relationships among these elements, this study innovatively constructs three primary dimensions and nine secondary dimensions of digital identity attributes for users. Additionally, it establishes a collaborative management mechanism between government organizations and non-governmental blockchain alliances corresponding to identity attributes based on the delegated proxy mechanism. Furthermore, it reconstructs the big data chain management framework for user digital identity under the zero-trust model and establishes a management process for blockchain digital identity information security protection under the zero-trust model. These efforts provide innovative solutions with both research and application value for the “virtual-real integration” global security governance of the metaverse, digital economy, and digital government.

SUBSTANTIATION OF THE NEED TO IMPLEMENT A CONTINUOUS INFORMATION SECURITY PROCESS AT ENTERPRISES

The article discusses information security in the system of an industrial enterprise. Attention is focused on the need to implement a continuous information security process to protect all information assets from leaks, theft and unauthorized disclosure, the main provisions of information security management standards are analyzed. Objective: To optimize the methods of software protection of modern industrial enterprises, as well as to reduce threats and vulnerabilities related to information security at enterprises. Method or methodology of the work: In the process of investigating the problem, analytical methods of analysis were used. Results: The need to use ISO/IEC 27001 standards and the PDCA (Plan-Do-Check-Act) model at industrial enterprises of high-tech sectors of the economy in order to reduce threats and losses of information security, identify critical factors that negatively affect business processes and the enterprises themselves. Practical implications: The results obtained can be used as a theoretical basis for existing assessments of information security tools and automated security systems at high-tech industrial enterprises in modern economic conditions.

Blockchain meets machine learning: a survey

Blockchain and machine learning are two rapidly growing technologies that are increasingly being used in various industries. Blockchain technology provides a secure and transparent method for recording transactions, while machine learning enables data-driven decision-making by analyzing large amounts of data. In recent years, researchers and practitioners have been exploring the potential benefits of combining these two technologies. In this study, we cover the fundamentals of blockchain and machine learning and then discuss their integrated use in finance, medicine, supply chain, and security, including a literature review and their contribution to the field such as increased security, privacy, and decentralization. Blockchain technology enables secure and transparent decentralized record-keeping, while machine learning algorithms can analyze vast amounts of data to derive valuable insights. Together, they have the potential to revolutionize industries by enhancing efficiency through automated and trustworthy processes, enabling data-driven decision-making, and strengthening security measures by reducing vulnerabilities and ensuring the integrity of information. However, there are still some important challenges to be handled prior to the common use of blockchain and machine learning such as security issues, strategic planning, information processing, and scalable workflows. Nevertheless, until the difficulties that have been identified are resolved, their full potential will not be achieved.

Costs and benefits of business information security

The article considers the process of information security from the position of cost-benefit assessment that allows to understand economic aspects of feasibility study of measures in the field of business information protection. In the practice of Russian business, the issues of information security are focused on compliance with regulatory requirements of the legislation. This leads to the fact that business entities neglect the procedure of comprehensive assessment of measures effectiveness that should consider the costs and benefits of legal, organizational, and technical information protection implementation. At the same time, in order to meet the new conditions of technological development of society, it is necessary to revise the concept of information protection of business entities and to fix in the policy of information security of activities the approaches to risk assessment based on assets value. The study contains a description of the cost/ benefit approach to the constituent components of ensuring information security of business process. To understand the economic aspects of information security, the research focuses on business entities of the market type of economic activity (the enterprise makes profit in its activity). The composition of components of the ensuring information security process has been defined. On the example of risk management costs and benefits of information security have been considered in detail.

A Practical Study of Big Data Technology in Computer Network Information Security Processing

In recent years, China has witnessed continuous development and progress in its scientific and technological landscape, with widespread utilization of computer networks. Concurrently, issues related to computer network information security, such as information leakage and virus invasions, have become increasingly prominent. Consequently, there is a pressing need for the implementation of effective network security measures. This paper aims to provide a comprehensive summary and analysis of the challenges associated with computer network information security processing. It delves into the core concepts and characteristics of big data technology, exploring its potential as a solution. The study further scrutinizes the application strategy of big data technology in addressing the aforementioned security issues within computer networks. The insights presented in this paper are intended to serve as a valuable reference for individuals involved in the relevant fields, offering guidance on effective approaches to enhance computer network information security through the application of big data technology.

Analysis on current opto-electronic transmission research and its materials with new perspectives

Opto-electric transmission technology serves as a basis for todays fast developing telecommunication, digital transmission and information processing. As the global community becomes more digitalized, there is a growing expectation for more convenient communication, information security, and ultra-fast data processing. This paper overviews recent works of opto-electric transmission including theoretical analysis, material construction, structural improvement of transmission apparatus and encryption schematics. In addition, a comparison of the wire and wireless transmission approach and analysis on the relationship between transmission performance indicators and influencing factors are presented. Progress and limitations of current opto-electric technology are discussed in the context of underlying principles and mechanisms. Prospect vision on trends of opto-electronic research in the near future is presented. In the future, opto-electric transmission is expected to possess higher speed, efficiency and security. This review paper aims to provide a picture of current research teams investigation focus and the present status of opto-electric transmission.

Automatic depersonalization of confidential information

Objectives. As the scope of personal data transmitted online continues to grow, national legislatures are increasingly regulating the storage and processing of digital information. This paper raises the problem of protecting personal data and other confidential information such as bank secrecy or medical confidentiality of individuals. One approach to the protection of confidential data is to depersonalize it, i.e., to transform it so that it becomes impossible to identify the specific subject to whom the data belongs. The aim of the work is to develop a method for the rapid and safe automation of the depersonalization process using machine learning technologies.Methods. The authors propose the use of artificial intelligence models to implement a system for the automatic depersonalization of personal data without the use of human labor to preclude the possibility of recognizing confidential information even in unstructured data with sufficient accuracy. Rule-based algorithms for improving the precision of the depersonalization system are described.Results. In order to solve this problem, a model of named entity recognition is trained on confidential data provided by the authors. In conjunction with rule-based algorithms, an F1 score greater than 0.9 is achieved. For solving specific depersonalization problems, a choice between several implemented anonymization algorithm variants can be made.Conclusions. The developed system solves the problem of automatic anonymization of confidential data. This opens an opportunity to ensure the secure processing and transmission of confidential information in many areas, such as banking, government administration, and advertising campaigns. The automation of the depersonalization process makes it possible to transfer confidential information in cases where it is necessary, but not currently possible due to legal restrictions. The distinctive feature of the developed solution is that both structured data and unstructured data are depersonalized, including the preservation of context.

Preface

This issue of the Journal of Physics: Conference Series contains the proceedings of the 2022 2nd International Conference on Communication Technology and Information Technology (ICCTIT 2022). The conference took place in Harbin, China during December 16th-18th, 2022 (virtual conference), with the attendance of about 50 prominent delegates in related fields all around the world.The conference established an international academic forum for scholars, specialists and researchers in related fields to present their research activities, share their professional experiences, exchange new ideas, and discuss the key challenges and research directions facing the development of related fields, as well as promoted the development of communication technology and information technology.To make this conference on schedule, we had a three-part plenary conference including a keynote speech part delivered by four speakers from different parts of China. Among them, Assoc. Prof. Pingyi Fan from Tsinghua University, China performed a keynote speech on Timeliness Challenges for 6G Wireless Networks Toward Metaverse. In this speech, he mainly focused on the implementation timeliness. If the promising scenarios is coming, what techniques we need to prepare in 6G wireless networks. He first introduced the Meatverse concept and its potential applications in our daily life and then present its challenge requirements for communication technologies, especially, on the implementation timeliness. Later on, he analyzed the existing status for wireless networks from multiple layers and point out the possible solutions to the existing problems and their corresponding new research directions. Finally, he gave a short summary to show what he and his team need to do in next step. We are very optimistic that all participants will acquire new ideas and knowledge from this conference to enhance the capability toward communication technology and information technology.Through a rigorous peer-review process, all submissions were performed double blind review to check their quality of content, level of innovation, significance, originality and legibility. Based on the expertise review comments, some excellent papers were accepted and the corresponding authors were invited to submit their papers for final publication. The accepted papers included topics on: Network and Wireless Communication, Network Information Security, Coding and Signal Processing, Data Science and Systems, Web Technologies, etc.We would like to thank the Conference Chairman and the Technical Program Committees for their hard work that lead to the organization of this event, to our colleagues who contributed to its realization, to the members of the Journal of Physics: Conference Series for their patience while waiting for the final versions of the papers and to every author who has contributed with an article to these proceedings. We firmly believe that all the attendees have had fruitful discussions and gained valuable knowledge, and will enjoy the opportunity for future collaborations.The Committee of ICCTIT 2022List of Committee member is available in this Pdf.

The principles of building a parallel program for steganographic file protection

In the modern era, the unprecedented growth of data and its consequential demands on transmission and storage systems have highlighted the necessity for efficient and secure information processing mechanisms. This paper delves into the potential of steganography as a robust tool for ensuring confidentiality by embedding data covertly within other files. Recognizing the limitations of traditional steganographic techniques in the face of expansive contemporary data sets, the paper explores the amalgamation of parallel programming with steganographic processes. Such a fusion promises to distribute computational tasks effectively, thereby reducing the overall execution time. Detailed discussions underscore the significance of data decomposition, process synchronization, and thread coordination, illustrating how parallel algorithms can markedly expedite concealed data embedding and extraction. However, inherent challenges like minimizing thread communication, optimizing shared data access, and preventing race conditions are brought to the fore. Solutions are proposed through diverse methods, tools, and design strategies aimed at streamlining workload distribution and enhancing task execution. In conclusion, the paper emphasizes that blending steganography with parallel programming can potentially revolutionize data protection systems, with continual refinements in techniques and methods driving the domain towards offering more potent solutions for electronic data confidentiality and security.

ISO 27001: ANALYSIS OF CHANGES AND COMPLIANCE FEATURES OF THE NEW VERSION OF THE STANDARD

Managing information security in the organization may be a daunting task, especially considering that it may encompass many areas from physical and network security to human resources security and management of suppliers. This is where security frameworks come in handy and put formality into the process of the design and implementation of the security strategy. While there are a bunch of different information security frameworks out in the wild, the most commonly-found and preferred by security professionals worldwide is ISO/IEC 27001. It combines both the quite comprehensive set of security controls to cover the most important security areas and wide applicability which allows applying this framework to all kinds of organizations. While cyberspace is constantly changing, companies should also adapt their approaches to the organization of information security processes. In order to respond to new challenges and threats to cyber security, the International Organization for Standardization (ISO) at the end of 2022 has published an updated version of the ISO/IEC 27001:2022 standard, which from now on should be taken into account by all organizations that aim to implement and certify its information security management system (ISMS). The purpose of this article is to provide a brief overview of the new edition of the popular standard, фтв describe the key changes in the structure and description of security controls; as well as develop recommendations for achieving compliance with the requirements of the updated version of the standard.

МАТЕМАТИЧНА МОДЕЛЬ ВЗАЄМОВІДНОСИН СИСТЕМИ КЕРУВАННЯ ІНФОРМАЦІЙНОЮ БЕЗПЕКОЮ

An effective solution to the problems of analysis and synthesis of information security management systems can not be provided by simple ways of simply describing their behavior in different conditions - systems engineering solves problems that require quantitative evaluation of characteristics. Such data, obtained experimentally or by mathematical modeling, should reveal the properties of information security management systems. The main one is efficiency, which means the degree of compliance of the results of information protection to the goal. The latter, depending on the resources available, the knowledge of developers and other factors, can be achieved to one degree or another, and there are alternative ways to implement it. In a number of publications the authors propose the basics of the categorical apparatus of set theory, which allows to explain the relationship between sets of threats and sets of information protection system, which allows to build different mathematical models to analyze information exchange systems in critical application systems. At present, the creation of information security management systems is not possible without research and generalization of world experience in building information systems and their constituent subsystems, one of the key of which are information protection and intrusion prevention systems. Components of the process of attacking the mechanisms of protection and blocking or destruction of cyber threats themselves are components of the mathematical support of such systems. The basis of such models is the mathematical apparatus, which should ensure the adequacy of modeling of information security processes for any conditions of cyber threats. When defining the mathematical apparatus, it is necessary to clearly understand how certain sets of cyber threats are built, and how the sets of cyber threat sets, sets of security system elements and sets of cyber attack detection systems, which should control the correctness of the information security process. The article analyzes various options for building models of information security management system and creates a mathematical model that takes into account the internal relationships of different subsets of components of the information security system under the influence of cyber threats.

Modern and Lightweight Component-based Symmetric Cipher Algorithms

Information security, being one of the corner stones of network and communication technology, has been evolving tremendously to cope with the parallel evolution of network security threats. Hence, cipher algorithms in the core of the information security process have more crucial role to play here, with continuous need for new and unorthodox designs to meet the increasing complexity of the applications environment that keep offering challenges to the current existing cipher algorithms. The aim of this review is to present symmetric cipher main components, the modern and lightweight symmetric cipher algorithms design based on the components that utilized in cipher design, highlighting the effect of each component and the essential component among them, how the modern cipher has modified to lightweight cipher by reducing the number and size of these components, clarify how these components give the strength for symmetric cipher versus asymmetric of cipher. Moreover, a new classification of cryptography algorithms to four categories based on four factors is presented. Finally, some modern and lightweight symmetric cipher algorithms are selected, presented with a comparison between them according to their components by taking into considerations the components impact on security, performance, and resource requirements.

Secure information processing for multimedia forensics using zero-trust security model for large scale data analytics in SaaS cloud computing environment

Trust is an essential security component and plays a crucial role in building secure information processing systems. Many organizations have adopted zero-trust principles in their security mechanisms, especially in Cloud Computing environments, where everything is presumed to be semi-honest and untrustworthy until proven otherwise. This is in blunt contrast to the traditional perimeter-security model, where it is presumed that the malicious actors are always outside the perimeter of the trusted network, and trustworthy users are always inside the network. One of the most significant challenges with the notion of trust is that till now more focus was put on the subjective aspect of trust which was challenging to evaluate and verify. There is an urgent need to address the objective and verifiable notion of trust, especially in the systems involving Federated Learning as in Cloud environments. We propose a Rich model based zero-trust security framework for trust verification of SaaS and employ machine learning functionalities to perform multimedia data analytics over the service processing behaviors for improved visibility into service operations and risks. Our proposed model relies heavily on the features extracted form Federated learning on the data of different cloud service users that is subjected to AI processing. We utilized the Rich models for feature extraction of large scale multimedia data for monitoring cloud service behavior and employed Ensemble classifier for analyzing the data features and employed majority voting of individual learners for decision making. The experiments performed on the standard dataset proved that the proposed model successfully monitored and analyzed the behavior of cloud services for validating the legitimacy of trusted SaaS and detecting any trust violations.

Demystifying quantum blockchain for healthcare

AbstractThe healthcare industry and the battle against the COVID‐19 pandemic are two areas where blockchain technology might be useful. In this study, blockchain's significance is examined. Blockchain technology and related procedures will be used in future healthcare systems for collecting sensor data, automated patient monitoring, and safe data storage. Because it can store a large amount of data in a dispersed and secure way and provide access whenever and wherever it is needed, this technology greatly simplifies the process of carrying out activities. The advantages of quantum computing, such as the speed with which patients can be found and monitored, may be fully used with the help of quantum blockchain. Quantum blockchain is an additional resource that may be used to safeguard the veracity, integrity, and availability of stored information. Combining quantum computing with blockchain technology may allow faster and more secure medical information processing. In this research, the authors examine the potential uses of blockchain and quantum technology in the healthcare industry. Quantum technologies, blockchain‐based technologies, and other cutting‐edge ICTs (such as ratification intelligence, machine learning, drones, and so on) were investigated and contrasted in this article.

Synchronization and different patterns in a network of diffusively coupled elegant Wang–Zhang–Bao circuits

Synchronization in coupled oscillators is of high importance in secure communication and information processing. Due to this reason, a significant number of studies have been performed to investigate the synchronization state in coupled circuits. Diffusive coupling is the simplest connection between the oscillators, which can be implemented through a variable resistor between two variables of two circuits. The Chua’s circuit is the most famous chaotic circuit whose dynamics have been investigated in many studies. However, Wang–Zhang–Bao (WZB) is another chaotic circuit that can exhibit exciting behaviors such as bistability. Thus, this study aims to investigate the cooperative dynamics of the WZB circuit in its elegant parameter values. To this issue, first, we explored the dynamic behavior of the elegant WZB circuit using the bifurcation diagrams, the Lyapunov exponents, and the basins of attraction. Based on the results, we found the range of the bifurcation parameter and the initial conditions wherein the system is bistable. Subsequently, setting the parameters in the monostable region, we studied the synchronization state of two diffusively coupled WZB circuits analytically and numerically. Consequently, we used master stability functions and temporally averaged synchronization error as the analytical and numerical tools to explore the synchronization state. Then we numerically examined the synchronization state in a network of 100 nonlocally coupled WZB oscillators. As a result, we found imperfect chimera and phase synchronization in the studied network before getting synchronized.

Application Research of Data Encryption Algorithm in Computer Security Management

In order to promote the research process of information security in the whole society, improve the safety factor of computer data communication, strengthen computer security management, the author proposes a computer data encryption strategy that combines the strong security of the 3DES encryption algorithm and the asymmetric encryption advantages of the RSA algorithm. Through the detailed analysis of DES encryption algorithm and 3DES encryption, creatively uses the RSA encryption algorithm to improve the single 3DES algorithm, consolidates the performance of the 3DES encryption algorithm to ensure data communication, and ensures the data integrity, better improve encryption performance. Experiments show that: The proposed encryption algorithm improves security performance by 10 times, and the response efficiency is only 1 ms away from other algorithms, compared with other algorithms, it has better encryption performance and is suitable for actual computer data communication scenarios. Conclusion: The encryption algorithm proposed by the author has achieved good results in terms of security performance and response efficiency, it is suitable for actual computer data security communication and can effectively improve computer security management.

A Secure and Stable Humanoid Healthcare Information Processing and Supervisory Method with IoT-Based Sensor Network

Nowadays, the Internet of things- (IoT-) based emerging technologies are playing a very pervasive role in healthcare systems where information is required on a real-time basis. These systems may provide real-time alerts with continuous monitoring to the concern in the odd conditions. Thus, these systems help the elderly and ill person with a good quality life and reduce the number of caregiver persons. Based on the above facts, this paper proposes a secure, efficient, and stable humanoid healthcare information processing and supervisory method with an IoT-based sensor network. Here, five different parameters specifically network residual energy, node density, node average energy, number of neighbors surrounded of a node, and distance between the sensor node and sink are considered for effective utilization of the energy of the sensor nodes. This method also reduces the communication distance of the nodes which helps in proficient data collection from the human body. The performance of the proposed and the existing work is considered the stability period, number of alive and dead nodes, total energy consumption, number of packets send to cluster heads, and base station metrics with two different monitoring areas. Thus, the stability period of the proposed method is increased by 144.52% with respect to the existing method protocol.