Security Dangers Research Articles

Highly-Secure Backdoors: Internet of Traitorous Things (IoTT)

Highly-Secure Backdoors: Internet of Traitorous Things (IoTT)

Quaternion Security Using Modifying Vernam Cipher With İmage Steganography

The Internet is the essential wellspring of data in the present life where it offers the trade of data to the clients.The exchange of such data prompts an incredible security danger. Cryptography and steganography are two issues in security systems.Cryptography jumbles the message to be incomprehensible While Steganography shroud the message To be invisible. Therefore, Encryption any private data before concealing in the cover object will provide twofold security. This paper presents a technique for disguise message with four levels of security where the message first encrypt using modifying vernam cipher, in which the initial key originate automatically from random pixel of camouflage cover and alter continuously along message length then embedded cipher message in grayscale cover image, after that encrypt this cover using modifying vernam cipher also then embedded it in RGB color cover image. The simulation consequence illustrates that the scheme provides better protection.

A Study on Security Issues in the Internet of Things (IoT)

Remote correspondence systems are exceedingly inclined to security dangers. The actual uses of remote correspondence systems come in military, business, medicinal services, retail, furthermore, transportations. These frameworks utilize wired, cell, or adhoc systems. Our methodology depends upon vitality mindful types of the IoT application's plan in the BIP (Behavior, Interaction, Priority) segment system. This takes into account a nitty gritty formal portrayal of the framework's conduct and its resulting approval, consequently giving input to improvements in the pre-arrangement or pre-creation stages. The structure and advancement of a property security framework, in light of human movement identification and remotely checking innovation, to affirm guest personality and to manage Door openness has been accounted for in this paper. This paper portrays in regards to the execution and sending of remote control framework and openness directly into a property situation for confirmed individuals because it were. A PIR movement sensor and Camera module are utilized to identify movement and catch pictures separately are dedicatedly make the security framework alive as per the solicitation. Electromagnetic entryway lock module work the entryway openness, has been structured and created.

Acute exposure to ustiloxin A affects growth and development of early life zebrafish, Danio rerio

Ustiloxin A is a cyclopeptide mycotoxin originally isolated from rice false smut balls (FSBs) that formed in rice spikelets infected by the fungal pathogen Ustilaginoidea virens. Studies have shown that ustiloxin A was toxic to animals, but the toxicological evidence is still lacking. To reveal the negative influence of ustiloxin A on model organism, zebrafish were selected and exposed to ustiloxin A at concentrations of 0, 0.25, 2.5 or 25 μM from 2 h post-fertilization (hpf) to 144 hpf. The hatching rates of embryos in the 25 μM exposure group was 12.85% less than the control group at 96 hpf. Meanwhile, exposure to 0.25, 2.5 or 25 μM ustiloxin A resulted in a distinct dose-dependent increase in mortality rate of embryos at 96 hpf. We also found that exposed to ustiloxin A could cause some other damages on zebrafish larvae, such as growth delay and increased heart rate. In addition, the athletic behavior of zebrafish larvae exposed to ustiloxin A at 25 μM was dramatically different with that of control. Transcriptome sequencing showed that abundances of 339 transcripts (125 up-regulated and 214 down-regulated) were significantly altered in larvae exposed to 25 μM of ustiloxin A. Several of the crucial genes were validated by RT-qPCR. This is the first report on the toxicologic study of ustiloxins against model organism zebrafish. Results suggested that ustiloxins have become a potential danger for food security.

Malvertising Through Cortana

In the digital World full of hackers and scammers, data security is what everyone needs the most. Hackers and scammers invent the new ways of stealing the information on daily basis. A comparatively modern concept in the World of hacking is malvertising. The major focus of this research paper is to evaluate the concept of malvertising through Cortana an artificial intelligence-based assistant introduced by Microsoft in windows 10. Sources of data are websites and other research papers. The major security breaches through malvertising are under consideration in this research paper. By evaluation, malvertising can be considered as one of the most dangerous security threats in digital World.

Dimensions of security

The Arab uprisings’ failure to bring about either the scale or type of political change in the Maghreb that it initially seemed to promise belies the significance of its impact on the region. While Algeria, Mauritania and Morocco continue to be ruled by the same competitive authoritarian regimes that held power when the protests began, they, and the new governments in Tunisia and Libya, must now negotiate an altered and more dangerous security environment than before. The unsettling of Tunisia’s security apparatus and the outbreak of full-blown civil war in Libya have created new opportunities for terror and criminal groups to thrive and expand. The primary aim of this special issue is to chart and explain many of the critical changes in the Maghreb’s security environment that have occurred as a result of the Arab Spring. Each of the articles collected here identifies and analyses at least one important security issue in one or more Maghreb country as well as explain how that issue has emerged in response to or been affected by the Arab Spring.

Detecting wormhole attacks in 3D wireless ad hoc networks via 3D forbidden substructures

A wormhole in wireless ad hoc networks is a physically low-latency link that connects two topologically distant nodes. Thereby, an adversary can launch the wormhole attack by tunnelling recorded packets from one node to the other and retransmitting them in the network. Since the wormhole attack is independent of MAC layer protocols and immune to cryptographic techniques, it has been one of the most dangerous security threats to wireless ad hoc networks. At present, efficient algorithms have been applied to 2D networks to detect wormhole attacks by seeking for forbidden substructures. However, when we employ their defined forbidden substructures to detect wormhole attacks in 3D networks (which are more pervasive in reality), we encounter severe obstacles. Through an in-depth examination, we discover the existence of efficient 3D forbidden substructures by introducing maximum independent sets (MaxIS) into the network. Essentially different from 2D forbidden substructures, 3D forbidden substructures can hardly be intuitively perceived. Driven by above understandings, we design a MaxIS-based wormhole detection algorithm for 3D networks using only connectivity information. Furthermore, we conduct thorough theoretical analyses and illustrate that our algorithm is able to detect almost 100% wormhole attacks even in a wireless network with very poor connectivity.

Research on IPv4, IPv6 and IPV9 Address Representation

Abstract The new generation network architecture (IPV9) is designed to solve a series of problems such as the shortage of address space and the danger of information security. IPv4 addresses have a length of 32 bits and a theoretically expressible address space of 232, while IPv6 addresses extend to 128 bits and theoretically an address space of 2128. In this paper, by studying IPv4, IPv6 address structure focuses on the new generation of network IPV9 address representation method. This method adopts the address coding method of the variable-length and variable-position, ranging from 16 bits to 2048 bits. Moreover, it adopts the mechanism of verification before communication, and relies on the method of assigning addresses to the computers on the Internet with full character codes. It redefines the address structure of the future Internet and provides new solutions for the Internet of things and the Internet of everything.

Detection of malicious domain names based on an improved hidden Markov model

The ability to detect malicious domain names is critical for protection against internet security, data theft, and other dangers. Current methods for recognising malicious domain names have demonstrated poor detection accuracy in dealing with massive data. This paper proposes a novel malicious domain name detection method based on an improved Hidden Markov Model (HMM). Firstly, by analysing various characteristics of good and evil domain names in DNS communication, we can use Spark fast extraction to distinguish their attributes; then, we can quickly classify unknown domain names accurately by using Baum-Welch algorithm and Viterbi algorithm in Hidden Markov Model (BVHMM) to achieve the effective detection of malicious domain names; finally, to test our approach, we conducted a series of experiments, and the experimental results demonstrate that our model achieves good accuracy and recall rate as compared with other detection models.

Quaternion Security Using Modifying Vernam Cipher With Image Steganography

The Internet is the essential wellspring of data in the present life where it offers the trade of data to the clients.The exchange of such data prompts an incredible security danger. Cryptography and steganography are two issues in security systems. Cryptography jumbles the message to be incomprehensible While Steganography shroud the message To be invisible. Therefore, Encryption any private data before concealing in the cover object will provide twofold security. This paper presents a technique for disguise message with four levels of security where the message first encrypt using modifying vernam cipher, in which the initial key originate automatically from random pixel of camouflage cover and alter continuously along message length then embedded cipher message in grayscale cover image, after that encrypt this cover using modifying vernam cipher also then embedded it in RGB color cover image. The simulation consequence illustrates that the scheme provides better protection.

Mobile User Perception Factors for Express Bus Safety Journey Management System: A Survey Analysis

Public transportation represents a higher danger of safety and security as there happen to be more travellers in a single vehicle. In Malaysia, bus accident is the highest that occurred to death. Internet of Things (IoT) has expanded the utilization of 4IR for investigation and research. A 4IR mobile technology app for express bus safety and security system in Malaysia for bus user is suggested and required. It is important to identify the main factors that can be collected via the mobile app before the app is developed. Passenger perception on the used and relevancy of using information technology (IT) tools to increase their safety perception is also required. This information will give the developer an insight on the app usability. In this paper, observation from passengers regarded safety and security factors are gathered and investigated by utilizing the IT and non-IT related issue. From the survey, majority respondent agree with all seven IT related issues (at least 70%) and all eight non-IT related issues (at least 80%). This is important to understand the mobile user perceptions and provides safety to the passengers. From these factors, we proposed a conceptual framework for express bus safety journey management system to be developed in the future. Future speculation by enhancing existing express transport arrangement with varies variable information, for example, waiting time, unwavering quality and travel time. This information can positively affect the nature of express transport administrations. Gathered information is stored in the cloud. The express bus management can collect the information from the cloud to enhance safety and security of bus express.

SMART GRID INFRASTRUCTURE FOR CYBER SECURITY AND POWER SYSTE COMMUNICATION

The introduction of smart arrangements forces that digital security and power framework correspondence frameworks must be managed widely. These parts together are basic for appropriate power tr ansmission, where the data infrastruc-ture is basic. The improvement of correspondence abilities, moving power system from islands of computerization to-count coordinated PC situations, have opened up novel possibilities and vulnerabilities. Since a scarce power control frameworks have been secured with openness necessities, digital secu-rity dangers get to be distinctly clear. For restoration of a SCADA/EMS framework, a detachment of the operational and regulatory computer system must be acquired. The paper treats digital security concerns, and it highlights get to focuses in a substation. Cyber security concerns are indispensable for smart gride arrangements. Broadband communications open up for savvy meters, and the expanding utilization of wind power requires a smart grid system. Index Terms—Communication system, control system, digital security, data security, IT security, power system communication, control framework control, control frameworks, SCADA, security, shrewd matrix, wide-territory systems.

Classification of Website Phishing Data through Machine Learning Algorithms

Phishing is the dissemination of malicious web sites used to acquire passwords, credit card details or any sensitive personal information. Clients of web advancements deal with different security dangers and phishing is a standout amongst the most imperative dangers that should be addressed. Phishing sites have certain attributes and designs, in order to, distinguish those components that can help us to recognize phishing. In order to, recognize such elements information mining methods have been utilized. In this work, we depicted examination in arrangement of phishing sites utilizing diverse classification algorithms with genetic algorithms for enhancement, for example, as feature selection and generation. Keeping in mind the end goal to figure out which technique gives the prime outcomes in phishing sites characterization. Websites are characterized as “1” for "Legitimate”, “0” for "Suspicious" and “-1” for "Illegitimate". We have found that machine-learning algorithms along with feature selection algorithms were the best choice for detecting web phishing attacks.

Security Issues in Cloud Computing and Existing Solutions- a Survey

Cloud computing is turning into an outstanding fluff word these days. It is an appealing innovation for long-haul benefits through cost diminishment and change in business results. It additionally tackles numerous issues of stereotyped processing, including taking care of more volume of burdens, introducing programming updates, and, utilizing overabundance figuring cycles. Regardless, the contemporary advancement has new troubles, for instance, data security, information inborn, and trans-code data storing. Cloud computing is consumed and compared to the modern transformation. Cloud administrations are conveyed from server farms, for example, Amazon, Google, Microsoft et cetera, all through the world. The quick blast in the territory of "Cloud computing" moreover expands outrageous wellbeing concerns. This paper review cloud structure and the monstrous evaluation of Cloud computing with the essential consideration on holes and security issues. We perceive the best security dangers and their present arrangements.

Review on Huawei Fusion Sphere Security

The cloud computing virtualization stage, services as another method for giving computing resources, gives clients available and financially savvy benefits, and brings hazards in the meantime. In this way, ensuring the privacy, trustworthiness, and accessibility of client information turns out to be significantly more basic to distributed computing frameworks. Huawei gives the virtualization stage security answers to confront the dangers and difficulties postured to the distributed computing framework. This article portrays the techniques and measures received by Huawei cloud computing virtualization stage to react to the security dangers and dangers to distributed computing frameworks. Huawei cloud computing virtualization stage is intended to give secure and solid server virtualization solutions for clients.

Analyze of road transport dangerous goods security in Poland and the EU

Paper presents the most important aspects of safety in the transport of dangerous goods in Poland and the EU. The problems regarding procedures and potential threats of mentioned transport were presented. Furthermore statistical data on dangerous goods in Poland and the EU were stressed.. Finally the recommendations aimed at improving the safety of the described problem.

A Systematic Review on Integrity and Security in Adoption of Cloud Computing Technologies

Distributed computing has waved the technological era in the year 2013 at a meeting in San Francisco, with sellers giving a lot of items and administrations that outfit IT which manages to convey request to cloud turmoil. Distributed computing pattern is expanding quickly for making the distributed computing well verse. The initial step for the association is to distinguish correct zone where the cloud issues exist. Surprisingly, the role of distributed computing has uplifted the era of business and government issues which lead to challenges towards security. The role of cloud technology improvements lead to display give business – supporting innovations in a proficient manner than any time in recent memory .the move from server to benefit based innovation got an intense change figuring innovation. However these improvements have made novel security challenges, including certain issues whose impact is a rising.[1] This paper displays a diagram and investigation of distributed computing, with a few security dangers, security issues, as of now utilized cloud innovations and security arrangements.

Intrusion detection mechanism with machine learning process A case study with FMIFSSVM, FLCFSSVM, misuses SVM, anomaly SVM and Bayesian methods

Today, there is a far reaching of Internet benefits everywhere throughout the world, numerous sorts and vast number of security dangers are expanding. Since it isn't in fact possible to assemble a framework without any vulnerability, Intrusion Detection System (IDS), which can successfully distinguish Intrusion, gets to have pulled in consideration. Intrusion detection can be characterized as the way toward distinguishing irregular, unauthorized or unapproved action that objective is to target a system and its assets. IDS plays a very important role for analyzing the network passage, also it assumes a key part to analyze the system activity log and each log is portrayed by huge arrangement of highlights and it requires tremendous computational preparing force and time for the characterization procedure. This work proposes filter based feature selection methods to predict intrusion with Feature based Mutual Information Feature Selection Support Vector Machine (FMIFSSVM), Feature based Liner Correlation Feature Selection Support Vector Machine (FLCFSSVM), misuses SVM, anomaly SVM and Bayesian methods. The performances of these methods are considered by using the intrusion detection calculation data set called Knowledge Discovery in Databases (KDD) cup 99. Detection Rate (DR), False Alarm Rate (FAR) and Percentage of Successful Prediction (PSP) are the major performance measures studied in this work.

Airport security threats and strategic options for mitigation

This paper provides an overview of the security challenges and responses faced by airports. The number of air passengers is doubling every 15 years just as security dangers multiply across the world. Technology is enabling massive advances in security, but there are other elements that should be embraced — from exploring the power of human intuition to the lessons learnt by the military through the adoption of concentric rings of security and the very real dangers from insider threats. Cybersecurity is also an increasing and potentially catastrophic risk which, along with other emerging threats, needs to be addressed with greater creativity and imagination. Much is being done to deal with the risk — not least with industry programmes such as Fast Travel, Smart Security and now the International Air Transport Association’s (IATA) and Airports Council International’s (ACI) latest initiative, NEXTT (New Experience in Travel and Technologies) — but the message from every key organisation is that the industry must do more, particularly when it comes to political will and a readiness to share experiences and best practice.

THE SECURITY ISSUES IN CLOUD COMPUTING

Cloud computing will be an structural engineering to giving work to registering administration by means of the web on interest also pay for every use right will a pool about imparted assets in particular networks, storage, servers, benefits applications, without physically securing them. So it recoveries Dealing with expense and run through for associations. A large number industries, for example, such that banking, social insurance Also training would moving towards those cloud because of the effectiveness from claiming administrations given. Pay per use example in light of those assets for example, such that preparing control used, transactions conveyed out, data transfer capacity consumed, information transferred, or storage room possessed and so forth. Cloud computing will be a totally web indigent engineering organization the place customer information will be put away also uphold in the information focal point of a cloud supplier like Google, Amazon, Salesforce. Restricted control in those information might acquire different security issues furthermore dangers. Which incorporate information leakage, unstable interface, offering of resources, information accessibility also inside strike. There need aid different research tests also there to adopting Cloud computing for example, such that great figured out how administration level concurrence, privacy, interoperability furthermore dependability. This look into paper layouts what Cloud computing is, those different cloud models and the primary security dangers also issues that would presently display inside cloud computing business.