Security Certification Research Articles

The Effectiveness of the Maritime Labour Convention's Financial Security Certificates in Resolving Claims for Unpaid Seafarers’ Wages

The 2014 amendments to the Maritime Labour Convention entered into force on 18 January 2017. The primary drive of the amendments was to introduce a financial security certificate which would guarantee payment of seafarers’ wages and repatriation costs in the event of abandonment by shipowners. This paper seeks to provide a critical analysis of the effectiveness of financial security certificates in resolving claims for unpaid seafarers’ wages.

Current optimal active feedback and stealing response mechanism for low-end device constrained defocused iris certification

Addressing the problem of iris certification security and unclear textures caused by defocused scanning, the constrained defocused state iris scanned by a low-end device is taken as the research object. A codeless mode certification algorithm for label statistical learning based on current optimal active feedback is proposed. The certification model is improved based on the convolutional neural network structure. Guided by statistical learning, the features from the same category irises are set to the feature label of one category, and the iris certification function is designed. In addition, a current optimal active feedback mechanism is proposed. The certification effects of the certification model will be actively reflected in real time based on the current training data and the accumulated certification data, and the user can adjust the model structure and parameters in real time, to maintain the current optimality of the certification model structure. In addition, a result mapping layer included a stealing response mechanism is set between the certification result and the user. The stealing behavior that occurs can be made meaningless by changing the result output mapping relationship. Under the algorithm prerequisites, the JLU iris library is used to conduct experiments, and the accuracy of the algorithm can reach more than 99%, which indicates that this algorithm can effectively improve the accuracy of constrained state defocused iris scans with a low-end device, the model can be adjusted dynamically, and stealing attack behavior can be responded to effectively.

Iotverif: Automatic Verification of SSL/TLS Certificate for IoT Applications

Although extensive research has been conducted on securing the Internet of Things (IoT) communication protocols, various vulnerabilities and exploits are continuously discovered and reported. Since vulnerabilities are introduced from either insecure communication protocols or defectiveness of applications, it is difficult to identify them during the software development or testing phase. In this paper, we present IoTVerif, a system that automatically verifies the Secure Socket Layer/Transport Layer Security (SSL/TLS) certificate for IoT applications that utilize broker-based messaging protocols. IoTVerif constructs the specification of an IoT protocol and verifies its security properties, without relying on prior knowledge about communication protocols. Once the specification is constructed, a general-purpose model checker automatically verifies those properties, as well as generates counter-examples if any property does not hold. We analyze the effectiveness of IoTVerif with real-world IoT-related applications. Our evaluation results show that IoTVerif can successfully identify vulnerabilities from IoT applications, which are exploitable by the man-in-the-middle (MITM) and TLS renegotiation attacks. IoTVerif holds a great promise for reverse-engineering emerging IoT messaging protocols and identifies the vulnerabilities from IoT-related applications.

Prospects for innovative development of the Ukrainian tourist industry in the corona crisis

The general idea of prospects for innovative development of the Ukrainian tourist industry in the crisis caused by the pandemic coronavirus infection is given. The influence of a new global threat - the COVID-19 epidemic - on the tourism industry in Ukraine and the world is determined. Emphasis is placed on the need to stimulate innovation processes in the travel industry, which in the future will contribute to the expansion of promising opportunities for Ukraine to bring this economy sector to a qualitatively new level. The Ukrainian public innovation policy in tourism and prospects of its development are analyzed. The issue of general innovations classification in tourism is investigated and their three main groups are defined: product-related, technological, and managerial. Examples of successful innovative solutions for the revival of tourism in the conditions of coronavirus restrictions are given. Phototourism is presented as an example of product innovations, which focuses on the implementation of the environmentally responsible tourism concept for the low level of impact on the environment. Other examples of product innovations that attract the attention of travel services consumers in the context of coronavirus restrictions are the practices of staycation (short trips for short distances, which allow for a brief change of scenery and relaxation) and workation (combining work with vacation). Examples of technological innovations that have resulted from the development of scientific and technological progress are electronic tourism (ETravel), virtual tourism, tourist information systems, and others. The program "Tourist Cashback" and the introduction of passports of immunity and security certificates are described as an example of managerial innovations aimed at supporting domestic and regional tourism. The paper proves that the digitalization of all types of tourist services around the world in general and in Ukraine, in particular, meets the current conditions for the existence of the tourist market and opens wide prospects for the future.

Certificación de hoteles en materia de seguridad en Ciudad Juárez: sistematización de la experiencia

This article is derived from the entailment between productive sector, academia and social organizations. The purpose was to present the technical and analytical necessary elements to document the academic experience, related to hotel security certification process in Ciudad Juarez during 2018. Following criteria stablished by C-TPAT (The Customs Trade Partnership Against Terrorism), which are: physical security, access control, security procedures, security staff, education and capacity development. The used method was a systematization that holds concepts used as criteria for a hotel security audit with the purpose of certification that provide result analysis and offers revision suggestions if needed. It formulates pre-audit suggestions and propose required steps for the process; it stablish restrictions and address recommendations for successful audits.

A Lightweight and Formally Secure Certificate Based Signcryption With Proxy Re-Encryption (CBSRE) for Internet of Things Enabled Smart Grid

A smart grid is a new ecosystem, which is made by combining a number of smart Internet of Things (IoT) devices that manage wide energy sources by increasing the efficiency and reliability of the smart energy systems. As the IoT devices in the smart grid ecosystem generate a gigantic amount of data that needs to be stored and managed in the cloud server. On the other hand, the stored data in the cloud server can be accessible to a number of data users, therefore the data need authenticity and secrecy. Here, to fulfill the security requirements of such type of communication, signcryption with proxy re-encryption technique is the most suitable option where a semi-trusted third party can alter a ciphertext that has been encrypted for one user into another ciphertext without seeing the original content of the message. However, the existing signcryption with proxy re-encryption schemes for the smart grid environment is suffering from more bandwidth space and greater computational time requirements. Thus, in this paper, we propose a lightweight certificate-based signcryption with a proxy re-encryption (CBSRE) scheme for smart grid based-IoT devices with the intention of reducing the computational and communicational costs. For the security and efficiency of the proposed CBSRE scheme, we used a hyperelliptic curve cryptosystem that uses small parameters with a key size of 80-bits. Furthermore, the proposed scheme provides the security requirements of confidentiality (IND-CBSRE-CCA2-I and IND-CBSRE-CCA2-II), unforgeability (EUF-CBSRE-CMA-I and EUF-CBSRE-CMA-II) and forward secrecy. Additionally, we compared our proposed CBSRE scheme with the existing proxy signcryption with re-encryption schemes and the final results show that the new scheme provides strong security with the expanse of minimal computational and communications resources.

Research on Authentication of User Information in Cloud Manufacturing

Background: Aiming at the problem of user information security authentication in cloud manufacturing, a user information security authentication model is proposed. The model is introduced in detail. Methods: In the security authentication model, the point set topology group fractal transformation algorithm is combined with the biometric identification technology to acquire the user biometric information to generate the secret key. Combined with the AES (Advanced Encryption Standard) encryption algorithm, the user biometric information is encrypted. Results: It provides a stronger guarantee for the user's security certification. We revised all patents relating to pharmaceutical formulations of applicability in authentication of user information in cloud manufacturing. Conclusion: Experiments show that the research has credibility and practicability, which improves the overall security performance of cloud manufacturing user information authentication and access.

Credible Nuclear Security Commitments Can Backfire: Explaining Domestic Support for Nuclear Weapons Acquisition in South Korea

How does the alliance between a client state and its nuclear ally influence support for proliferation in the client? Conventional wisdom suggests that when nuclear security guarantees are not credible, support for proliferation will be high, since a domestic nuclear capability offers an alternative source of deterrence. I introduce a new theory, which posits that highly credible security guarantees can backfire by causing some individuals to fear their ally might miscalculate—either by using nuclear weapons in an unnecessary preventative attack or by precipitous escalation of a crisis or conflict. Survey experiments conducted among representative samples of South Korean citizens in 2018 and 2019 support this theory, showing that increases in the credibility of the US nuclear security guarantee lead to increased support for nuclear proliferation among South Korean respondents.

Application and Consideration of Dynamic Security Identity Authentication in Electric Power Business

This electronic document carries out the analysis of mouse, keyboard fingerprint characteristics and online time and user behaviour, establishes user behavior characteristics database and model of electric power business, realizes the identification and account risk control based on dynamic behavior characteristics, improves the account security of the system, and solves the problems. The former security certification method is single, and the ability of security risk prevention and control is insufficient.

Security Certificates Used in Public Web Sites of Banks in Czech Republic, Slovakia and Hungary

Security Certificates Used in Public Web Sites of Banks in Czech Republic, Slovakia and Hungary

데이터보안인증을 위한 DSMS 프레임워크 구축 연구

데이터보안인증을 위한 DSMS 프레임워크 구축 연구

Multiple Security Certification System between Blockchain Based Terminal and Internet of Things Device: Implication for Open Innovation

As the number of Internet of Things (IoT) devices increases, services expand and illegal hacking and infringement methods become more sophisticated, an effective solution for blockchain technology is required as a fundamental solution to security threats. In this paper, we develop the security module of an IoT device based on blockchain technology that blocks hacking and information infringement and forms a multi-security blockchain system between the IoT device and the user device and we develop a user application. We contribute to addressing the security threats faced by IoT application services by developing a new method. In particular, we present some schemes for the development of a multi-security certification system based on blockchain for IoT security.

Secure Group based Routing and Flawless Trust Formulation in MANET using Unsupervised Machine Learning Approach for IoT Applications

INTRODUCTION: Mobile Adhoc Network (MANET) is integrated with Internet of Things (IoT) in many application cases due to its flexibility and scalability. The dynamic nature of MANET introduces some security threats in IoT environment. In those threats, Blackhole attack and Grayhole attack are severe routing attacks that disrupts routing algorithm to crack transmission in the entire network. OBJECTIVES: Many security mechanisms are introduced in MANET based on trust computation schemes. However, computation of inaccurate trust value degrades the performance of mitigation schemes. Thus the major objective of this work is to design a novel security mechanism to protect the MANET-IoT from different adversaries. METHODS: in this paper we propose a novel group based routing algorithm with recommendation filtering supported by security monitors (SMs). Unsupervised machine learning algorithm is adapted for the purpose of recommendation filtering in the network. Initially the entire network is grouped by Secure Certificate based Group Formation (SCGF) algorithm. In each group, Recommendation Filtering by K-means algorithm (RF-K means) algorithm is employed to perform trust computation. For secure and optimal route selection, hybrid optimization algorithm that combines Genetic Algorithm and Fire Fly Algorithm (GA-FFA) is proposed. Data transmission is protected by novel Hash Message Authentication Code with Advanced Encryption Standard (HMAC-AES) algorithm in which hash function is integrated with cryptography function. RESULTS: The proposed work is validated in network simulator-3 environment and the obtained results show better performance in terms of packet delivery ratio (96.3%), throughput (135kbps), delay (3.26ms), detection rate (99%), and energy consumption (8.5%). CONCLUSION: The MANET-IoT network is secured by group formation and trust filtering approaches. Further, involvement of cryptography function ensures data security whereas hash function ensures data integrity.

대⋅중소기업 동반성장과 상생을 위한 중소 협력업체의 보안인증 제도 도입 방안

대⋅중소기업 동반성장과 상생을 위한 중소 협력업체의 보안인증 제도 도입 방안

Evaluation of Out-of-Band Channels for IoT Security

Secure bootstrapping is the process by which a device gets the necessary configuration information and security credentials to become operational. In many pervasive computing and Internet-of-Things scenarios, it is often not possible to rely on the existence of a trusted third party or other network infrastructure for bootstrapping. Therefore, several device bootstrapping protocols rely on an out-of-band (OOB) channel for initial device authentication and configuration. We begin this paper by understanding the need for OOB channels and performing a literature survey of existing standards and devices that rely on OOB channels. We then look at one candidate bootstrapping protocol: Nimble out-of-band authentication for EAP (EAP-NOOB). We provide a brief overview of the EAP-NOOB protocol and describe its unique OOB channel requirements. Thereafter, we implement three OOB channels for EAP-NOOB using near-field communication, quick response codes, and sound. Using our implementation, we evaluate the usability, security, benefits, and limitations of each of the OOB channels.

LightCert: On designing a lighter certificate for resource‐limited Internet‐of‐Things devices

AbstractInternet‐of‐Things (IoT) devices are typically resource constrained in terms of computing capabilities and battery power. Despite the efforts from the Internet Engineering Task Force (IETF) to established standards for IoT such as IPv6 over low‐power wireless personal area networks (6LoWPAN), routing protocol for low‐power lossy networks (RPL), and constrained application protocol (CoAP), certificate‐based Internet security protocols have not been fully addressed yet.We see the main cause of this being the size of the X.509‐based Internet certificates. Typically being 1 to 2 kB, the large size of these certificates can cause IEEE 802.15.4‐based IoT nodes to fragment the certificate into many smaller packet‐size chunks, which causes many packet transmissions to occur in the network. This work presents LightCert, a lightweight scheme to compress the size of the security certificates using the similarity of contents in X.509 certificates. Specifically, LightCert identifies common fields in a certificate and suppresses the transmission of these contents within the IoT subnet scope. This allows LightCert nodes to minimize the packet transmission overhead for supporting certificate‐based security mechanisms such as datagram transport layer security (DTLS), by as much as ∼37%. The added overhead of exchanging certificates when using LightCert is kept low to as much as ∼5 mJ of energy and ∼0.48 seconds of latency.

Security Credential Management & Pilot Policy of U.S. Government in Intelligent Transport Environment

This paper analyzed the SCMS and pilot policy, which is pursued by the U.S. government in connected vehicles. SCMS ensures authentication, integrity, privacy and interoperability. The SCMS Support Committee of U.S. government has established the National Unit SCMS and is responsible for system-wide control. Of course, it introduces security policy, procedures and training programs making. In this paper, the need for SCMS to be applied to C-ITS was discussed. The structure of the SCMS was analyzed and the U.S. government's filot policy for connected vehicles was discussed. The discussion of the need for SCMS highlighted the importance of the role and responsibilities of SCMS between vehicles and vehicles. The security certificate management system looked at the structure and analyzed the type of certificate used in the vehicle or road side unit (RSU). The functions and characteristics of the certificates were reviewed. In addition, the functions of basic safety messages were analyzed with consideration of the detection and warning functions of abnormal behavior in SCMS. Finally, the status of the pilot project for connected vehicles currently being pursued by the U.S. government was analyzed. In addition to the environment used for the test, the relevant messages were also discussed. We also looked at some of the issues that arise in the course of the pilot project.

Secret Image Digitization Over Public Cloud Through Cbtv Based Image Fusion

Data security in the modern world is a challenging aspect faced by common man in almost every field-either technical or non-technical. Particularly in Public Clouds where the data is openly available across the internet, customers are not much exposed to the working environment and the diverse spread of data across world wide geographic locations. Intruders attempt to misuse this data to serve their own commercial purpose. The government of India proposed NAD (National Academic Depository) which is a secure zone for people to deposit their valuable certificates rather than carrying to places. Towards this end, the goal of current work is to strengthen the security of certificates being loaded into the depositories by applying Image fusion technique through CBTV (Cloud Based Threshold Value). The proposed method gives a unique solution to prove authenticity of users by generating the secret image using image fusion technique integrated with public key infrastructure on the cloud prior to outsourcing. This is particularly useful to protect the patient health care reports to hide the disease description etc, which may otherwise have unintended consequences. The entire fusion is not disclosed at the cloud server end. The performance of the proposed approach, can be measure by calculating the robustness of the secret image (fused image) against different types of image processing attacks such as salt & pepper noise, Gaussian noise, JPEG compression, speckle noise, geometric noise etc. is calculated while stored at the cloud and effective results are achieved.

Security Using Modified Hierarchical Attribute Based Encryption for Mobile Cloud Computing

This manuscript is an undertaking to give an improved statistics amassing safety show in Cloud Computing as well as making a put confidence in condition in cloud computing. There is a significant proportion of persuading clarifications behind associations to send cloud-based limit. For another business, start-up expenses are basically reduced in light of the fact that there is no convincing motivation to contribute capital ahead of time for an inside IT structure to support the business. We judge so as to information storing safety in Cloud Computing, a domain overflowing with difficulties and of focal criticalness, is immobile in its soonest arranges currently, as well as various investigation issues be nevertheless to exist recognized. In this manuscript, we investigate the issue of statistics safety in cloud statistics accumulating, to make sure the rightness of clients' data in cloud statistics storing. We projected a Hierarchical Attribute -base safe Outsourcing pro admittance in Cloud computing which in like manner ensures data amassing protection as well as survivability thusly giving trust in condition to the customers. To fight beside unapproved in sequence spillage, receptive information must exist mixed via re-appropriating to offer start to finish information security certification in the cloud as well as past. We include condensed the estimation instance in light of input dimension via executing ECDSA algorithm pro Cryptographically undertakings. Many cloud has are giving administrations to various customers to their information. Because of calamity the executives cloud can be utilized as reliable stockpiling system. For such cloud stockpiles encryption is done numerous far for verifying information. The trait based encryption is the strategy to encode the substance. In like manner we exploit push mail algorithm pro solution exchange among owner as well as customer. It improves the security in the proposed show sufficiently.

Bargaining interactions reconsidered: the Korean Peninsula nuclear crisis viewed through the lens of hierarchy

Actors partially relinquish sovereignty in return for physical protection by a more powerful actor, generating a hierarchical relationship of a dominant, which supplies a political order, and subordinate(s), seeking the benefits that the political order can offer. This is the outcome of rationally assessing the respective situation, ultimately forgoing the presupposed paradigm that all actors are acknowledged as equal units in IR. The product of applying this hierarchical rubric to the Korean Peninsula offers a fundamental alternative for understanding how and why the current Korean Peninsula Nuclear Crisis unfolded in the manner that it did, while building upon relevant literature constituting the crux of hierarchy in international relations. What is presented are two political orders running parallel to one another: (1) the USA and the ROK and (2) China and the DPRK. Historically, both orders took fundamentally different tracks, as the USA and the ROK maintained a tight, valued and active social contract, while China and the DPRK periodically drifted into loose, devalued and inactive phases. Additionally, a paradigm has emerged following China’s inclusive behavior post-1978, the USA’s unipolar moment, and Washington’s aggressive signaling and actions, forcing the DPRK to reconsider its dominant’s reliability as a credible security guarantor. Having witnessed these seismic shifts, the DPRK has intensified its development of ‘the ultimate security guarantor’, leading to the contemporary crisis we are facing today.