Security Applications Research Articles

MoSFPAD: An end-to-end ensemble of MobileNet and Support Vector Classifier for fingerprint presentation attack detection

Automatic fingerprint recognition systems are the most extensively used systems for person authentication although they are vulnerable to Presentation attacks. Artificial artifacts created with the help of various materials are used to deceive these systems causing a threat to the security of fingerprint-based applications. This paper proposes a novel end-to-end model to detect fingerprint Presentation attacks. The proposed model incorporates MobileNet as a feature extractor and a Support Vector Classifier as a classifier to detect presentation attacks in cross-material and cross-sensor paradigms. The feature extractor’s parameters are learned with the loss generated by the support vector classifier. The proposed model eliminates the need for intermediary data preparation procedures, unlike other static hybrid architectures. The performance of the proposed model has been validated on benchmark LivDet 2011, 2013, 2015, 2017, and 2019 databases, and overall accuracy of 98.64%, 99.50%, 97.23%, 95.06%, and 95.20% are achieved on these databases, respectively. The performance of the proposed model is compared with state-of-the-art methods and is able to reduce the average classification error of 3.63%, 1.86%, 1.83%, 0.05%, 0.93% on LivDet 2011, 2013, 2015, 2017, and 2019 databases, respectively for same and cross material protocols in intra-sensor paradigm. The proposed method also reduced the average classification error of 1.59%, 1.41%, and 2.29% for LivDet 2011, 2013, and 2017 databases, respectively for the cross-sensor paradigm. It is evident from the results that the proposed method outperforms state-of-the-art methods in intra-sensor as well as cross-sensor paradigms in terms of average classification error.

Privacy‐preserving collaboration in blockchain‐enabled IoT: The synergy of modified homomorphic encryption and federated learning

SummaryThe proliferation of network devices capable of gathering, transmitting, and receiving data over the Internet has spurred the widespread adoption of Internet of Things (IoT) devices, particularly in resource‐oriented applications. Integrating blockchain, IoT, homomorphic encryption, and federated learning requires a balance between computational requirements and real‐time performance. Secure key management is crucial to maintain data privacy and integrity. Compliance with privacy regulations requires careful implementation of privacy‐preserving mechanisms in blockchain‐enabled IoT environments, which can be subjected to various attacks. Addressing these challenges requires interdisciplinary expertise, research, and innovation to develop more efficient and effective privacy‐preserving techniques tailored to the unique characteristics of such environments. This research introduces the Modified Homomorphic Encryption Federated‐based Adaptive Hybrid Dandelion Search (MHEF‐AHDS) algorithm as an effective framework to enhance security in blockchain‐enabled IoT systems. The amalgamation of Modified Homomorphic Encryption (MHE) and Federated Learning (FL) constitutes a potent alliance that addresses privacy concerns within collaborative and decentralized machine learning environments. This facilitates secure and adaptable data collaboration, effectively mitigating privacy risks associated with sensitive information. The integration of quantum machine learning into security applications presents an exciting opportunity for distinctive progress and innovation. Within this work, the Adaptive Hybrid Dandelion optimization algorithm, featuring an Initial search strategy, is employed for hyperparameter optimization thereby elevating the performances of the proposed MHEF‐AHDS method. Furthermore, the integration of smart contracts and Blockchain‐based IoT enhances the overall security of the proposed method. MHEF‐AHDS comprehensively tackles privacy, security, and scalability challenges through robust security measures and privacy enhancements. The performance evaluation of the MHEF‐AHDS method encompasses a thorough analysis based on key metrics such as throughput, latency, scalability, energy consumption, accuracy, precision, recall, and f1‐score. Comparative assessments against existing methods are conducted to gauge the effectiveness of the proposed method in addressing security, privacy, and scalability concerns.

Z-K-R: A Novel Framework in Intrusion Detection system through enhanced techniques

Abstract Intrusion detection systems (IDS) are an important tool for securing computer networks from various types of cyberattacks. The increasing complexity of network attacks demands more sophisticated approaches to intrusion detection. This paper presents an innovative method for IDS that involves combining Z-Score outlier detection, KMeans clustering, and Random Forest classification techniques. We tested our methodology using the CICIDS2017 dataset, which is a standardization dataset for intrusion detection that is frequently utilized. Our proposed approach first uses Z-Score outlier detection to identify abnormal traffic flows in the network. Next, KMeans clustering is used to group the traffic flows into different clusters based on their similarity. Finally, Random Forest classification is used to classify each traffic flow into normal or abnormal categories. Based on our experimental results, our approach for intrusion detection shows superior performance compared to several other state-of-the-art methods in terms of accuracy and precision. Our proposed method achieved an accuracy rate of 95.75% and a precision of 95.76%, surpassing the performance of KNN, SVM, and decision trees approaches. In conclusion, the proposed Z-K-R approach offers a promising solution for IDS by leveraging the strengths of Z-Score outlier detection, KMeans clustering, and Random Forest classification techniques. This strategy has the potential to increase the efficiency of IDS and boost network security in applications that take place in the real world.

CapsRule: Explainable Deep Learning for Classifying Network Attacks.

Despite the potential deep learning (DL) algorithms have shown, their lack of transparency hinders their widespread application. Extracting if-then rules from deep neural networks is a powerful explanation method to capture nonlinear local behaviors. However, existing rule extraction methods suffer from inefficiency, incomprehensibility, infidelity, and not scaling well. Concerning security applications, they are not optimized regarding the decision boundary, data types and ranges, classification tasks, and dataset size. In this article, we propose CapsRule, an effective and efficient rule-based DL explanation method dedicated to classifying network attacks. It extracts high-fidelity rules from the feed-forward capsule network that explains how an input sample is classified. Using precomputed coupling coefficients, the training phase overlaps the rule extraction process to increase efficiency. The activation vector of a capsule can represent semantic intelligence about the attributes of the input sample. The rules extracted from CapsRule address the major concerns of network attack detection. The rules: 1) approximate the nonlinear decision boundary of the underlying data; 2) reduce the number of false positives significantly; 3) increase transparency; and 4) help find errors and noise in the data. We evaluate CapsRule on the CICDDoS2019 dataset that contains over a million of the most advanced Distributed Denial-of-Service (DDoS) attacks. The extensive evaluation shows that it generates accurate, high-fidelity, and comprehensible rules. CapsRule achieves an average accuracy of 99.0% and a false positive rate of 0.70% for reflection- and exploitation-based attacks. We verify that the learned features from the rulesets match our domain-specific knowledge. They also help find flaws in the dataset generation process and erroneous patterns caused by attack simulators.

Versatile Papertronics: Photo-Induced Synapse and Security Applications on Papers.

Paper is a readily available material in nature. Its recyclability, eco-friendliness, portability, flexibility, and affordability make it a favored substrate for researchers seeking cost-effective solutions. Electronic devices based on solution process are fabricated on paper and banknotes using PVK and SnO2 nanoparticles. The devices manufactured on paper substrates exhibit photosynaptic behavior under ultraviolet pulse illumination, stemming from numerous interactions on the surface of the SnO2 nanoparticles. A light-modulated artificial synapse device is realized on a paper at a low voltage bias of -0.01V, with an average recognition rate of 91.7% based on the Yale Face Database. As a security device on a banknote, 400 devices in a 20 × 20 array configuration exhibited random electrical characteristics owing to the local morphology of the SnO2 nanoparticles and differences in the depletion layer width at the SnO2/PVK interface. The security Physically Unclonable Functions (PUF) key based on the current distribution extracted at -1V show unpredictable reproducibility with 50% uniformity, 48.7% inter-Hamming distance, and 50.1% bit-aliasing rates. Moreover, the device maintained its properties for more than 210 days under a curvature radius of 8.75mm and bias and UV irradiation stress conditions.

Versatile Papertronics: Photo‐Induced Synapse and Security Applications on Papers (Adv. Mater. 38/2024)

Versatile Papertronics: Photo‐Induced Synapse and Security Applications on Papers (Adv. Mater. 38/2024)

Regulatory Compliance in Application Security Using AI Compliance Tools

Regulatory Compliance in Application Security Using AI Compliance Tools

Preparation, upconversion/downshifting emissions, temperature sensing, and thermochromic properties of one-dimensional Y2Zr2O7:Er3+/Yb3+ tube-in-tube nanostructures via single-nozzle electrospinning

One-dimensional (1D) Y2Zr2O7:Er/Yb tube-in-tube nanostructures were prepared via a simple electrospinning technique with a single nozzle. The diameter of the outer tube of the Y2Zr2O7:Er/Yb tube-in-tube nanostructures is 190–170 nm, the thickness of the outer wall is 22–20 nm, the diameter of the inner tube is 120–100 nm, and the wall thickness of the inner tube is 17–14 nm. The optical properties of the Y2Zr2O7:Er/Yb tube-in-tube nanostructures, including the up-conversion and downshifting luminescence spectra, temperature sensitivity, and thermochromic properties, were studied in detail. Under 980 nm excitation, two weak green emissions at 528 nm and 550 nm, as well as a strong red emission at 650 nm of Er ions, are presented. When excited at 378 nm, the Er ions exhibit strong green emission at 545 nm, two weak red emission peaks at 650 and 680 nm, and near-infrared emission peaks at 1400–1600 nm. With increasing environmental temperature, the luminescence color of the 1D Y2Zr2O7:Er/Yb tube-in-tube nanostructures exhibited a transition from “orange→yellow→ green” when excited at 980 nm. For the 1D Y2Zr2O7:xEr/yYb tube-in-tube nanostructures (x = 0.01, 0.02, 0.03; y = 0.05, 0.10, 0.15), the maximum values of Sr are 2.3 % K−1 under 980 nm excitation and 2.1%K−1 under 378 nm excitation within the temperature range of 303–723 K. This work develops integrated multifunctional optical materials and provides an alternative approach for the fabrication of nanoscale smart platforms, advanced displays, and applications in information security.

Plant Growth Promoting Rhizobacteria (PGPR) induced protection: A plant immunity perspective.

Plant-environment interactions, particularly biotic stress, are increasingly essential for global food security due to crop losses in the dynamic environment. Therefore, understanding plant responses to biotic stress is vital to mitigate damage. Beneficial microorganisms and their association with plants can reduce the damage associated with plant pathogens. One such group is PGPR (Plant growth-promoting rhizobacteria), which influences plant immunity significantly by interacting with biotic stress factors and plant signalling compounds. This review explores the types, metabolism, and mechanisms of action of PGPR, including their enzyme pathways and the signalling compounds secreted by PGPR that modulate gene and protein expression during plant defence. Furthermore, the review will delve into the crosstalk between PGPR and other plant growth regulators and signalling compounds, elucidating the physiological, biochemical, and molecular insights into PGPR's impact on plants under multiple biotic stresses, including interactions with fungi, bacteria, and viruses. Overall, the review comprehensively adds to our knowledge about PGPR's role in plant immunity and its application for agricultural resilience and food security.

A Study of Android Security Vulnerabilities and Their Future Prospects

Nowadays, smartphones are used for various activities, including checking emails, paying bills, and playing games, which have become essential parts of daily life. Also, IoT devices can be managed and controlled using applications. While applications can provide numerous benefits, they have also led to several security risks, such as theft of data, eavesdropping, compromised data, and denial-of-service attacks. This study examines security breaches, attacks targeting Android system applications, and vulnerabilities present at every layer of the Android architecture. Additionally, the study aims to compare and evaluate various treatment methods to identify their advantages and disadvantages. Furthermore, the study aims to examine Android's architecture for weaknesses that might lead to app vulnerabilities and potential attacks. To achieve the objectives of this study, a comprehensive analysis of security breaches and attacks targeting Android system applications will be conducted. Various treatment methods will be compared and evaluated through rigorous examination. Additionally, Android's architecture will be thoroughly examined to identify potential weaknesses and vulnerabilities. The analysis will focus on identifying the security risks associated with the use of applications on smartphones and IoT devices. The vulnerabilities present at every layer of the Android architecture will also be analyzed. Furthermore, the advantages and disadvantages of various treatment methods will be assessed. The findings of this study will reveal the various security risks, vulnerabilities, and potential weaknesses present in Android system applications and the Android architecture. The advantages and disadvantages of different treatment methods will also be highlighted. This study contributes to the development of more precise and robust security measures for Android, aiming to mitigate security breaches, attacks, and vulnerabilities. By identifying weaknesses and vulnerabilities, this study provides valuable insights for improving the overall security of Android system applications. Doi: 10.28991/HIJ-2024-05-03-020 Full Text: PDF

A Security Analysis Model for IoT-ecosystem Using Machine Learning-(ML) Approach

Introduction: The attacks on IoT systems are increasing as the devices and communication networks are progressively integrated. If no attacks are found in IoT for a long time, it will affect the availability of services that can result in data leaks and can create a significant impact on the associated costs and quality of services. Therefore, the attacks and security vulnerability in the IoT ecosystem must be detected to provide robust security and defensive mechanisms for real-time applications. Method: This paper proposes an analytical design of an intelligent attack detection framework using multiple machine learning techniques to provide cost-effective and efficient security analysis services in the IoT ecosystem. Result: The performance validation of the proposed framework is carried out by multiple performance indicators. Conclusion: The simulation outcome exhibits the effectiveness of the proposed system in terms of accuracy and F1-score for the detection of various types of attacking scenarios.

Fast Yet Effective Machine Unlearning.

Unlearning the data observed during the training of a machine learning (ML) model is an important task that can play a pivotal role in fortifying the privacy and security of ML-based applications. This article raises the following questions: 1) can we unlearn a single or multiple class(es) of data from an ML model without looking at the full training data even once? and 2) can we make the process of unlearning fast and scalable to large datasets, and generalize it to different deep networks? We introduce a novel machine unlearning framework with error-maximizing noise generation and impair-repair based weight manipulation that offers an efficient solution to the above questions. An error-maximizing noise matrix is learned for the class to be unlearned using the original model. The noise matrix is used to manipulate the model weights to unlearn the targeted class of data. We introduce impair and repair steps for a controlled manipulation of the network weights. In the impair step, the noise matrix along with a very high learning rate is used to induce sharp unlearning in the model. Thereafter, the repair step is used to regain the overall performance. With very few update steps, we show excellent unlearning while substantially retaining the overall model accuracy. Unlearning multiple classes requires a similar number of update steps as for a single class, making our approach scalable to large problems. Our method is quite efficient in comparison to the existing methods, works for multiclass unlearning, does not put any constraints on the original optimization mechanism or network design, and works well in both small and large-scale vision tasks. This work is an important step toward fast and easy implementation of unlearning in deep networks. Source code: https://github.com/vikram2000b/Fast-Machine-Unlearning.

GANs for Image Security Applications: A Literature Review

Generative Adversarial Networks (GANs) have earned significant attention in various domains due to their generative model’s compelling ability to generate realistic examples probably drawn from sample distribution. Image security indicates the process of protecting digital images from unauthorized access, modification, or distribution. This requires a guarantee of image privacy, integrity, and authenticity to prohibit them from being exploited by malicious attacks. GANs can also be utilized for improving image security by exploiting its generation ability in encryption, steganography, and privacy-preserving tech-niques. This paper reviews GANs-based image security techniques providing a systematic overview of current literature and comparing the role of GANs in image encryption, image steganography, and priva-cy preserving from multiple dimensions. Additionally, it outlines future research directions to further explore the potential of GANs in addressing privacy and image security concerns

Anamoly based intrusion detection using ensemble machine learning and block-chain

<p>A major issue facing the quickly evolving technological world is the surge in security concerns, particularly for critical Internet-of-Things (IoT) applications like health care and the military. Early security attack detection is crucial for safeguarding important resources. Our research focuses on developing an anomaly-based intrusion detection system (IDS) using machine learning (ML) models. With the use of voting strategies, Bagging Ensemble, Boosting Ensemble, and Random Forest, we created a robust and long-lasting IDS. The F1 score is a crucial metric for measuring accurate predictions at the class level and serves as the focus of these ML systems. Maintaining a high F1 score in critical applications highlights the constant need for development. Make use of the latest CICIoT2023 data-set employ Hyper-ledger Fabric to create a private channel in order to bolster the security of our IDS through the usage of block-chain technology. We use block-chain's immutable record and cryptographic techniques to establish a decentralized, tamper-proof environment. Consequently, our proposed approach provides an efficient intrusion detection system that significantly enhances resource protection and alerting the user in prior with intruder information incritical regions for Internet of Things security applications.</p>

A novel chaotic system with one absolute term: Stability, ultimate boundedness, and image encryption

This paper proposes a system with an absolute term, exhibiting chaos. The system's dynamics are examined by computation of bifurcation and Lyapunov exponents. This system has a countable finite coexisting nested attractors. The features of the system make it suitable for secure applications. The system is combined with the 4×4 Toeplitz matrix to generate an encryption algorithm, validated using security and performance analysis. Combining the proposed system and the Toeplitz matrix improves the pixel distribution's randomness, significantly increasing security. The test results showed that the suggested image scheme is very secure and impervious to differential, statistical analysis, and other types of attacks. Furthermore, the majority assessment shows that the presented approach performs noticeably better than previous techniques.

AI detection of malicious push notifications in augmented reality in the workplace

Distraction caused by the visual processing of multiple objects during augmented reality (AR) immersion could make users more susceptible to malicious push notifications, thus potentially exposing organisations to unwitting insider threats. This case study consulted four experts in the field of AR application development to design a proposed artificial intelligence (AI) equipped feature that could detect possibly malicious artefacts entering the user’s line of sight during partial immersion in an augmented reality application at the workplace. Participants included a business partner at an AR company, a security engineering manager, an AI engineer focused on machine learning (ML) and a data analytics specialist. The case study determined that a security application natively implemented into the device could use heuristic analysis of user screen captured activity to assess potentially malicious push notifications in real time.

Enhanced Motor Imagery Classification through Channel Selection and Machine Learning Algorithms for BCI Applications

Brain-Computer Interface (BCI) applications utilizing Electroencephalography (EEG) signals have garnered significant attention for their potential to facilitate through communication between the brain and external devices. EEG-based BCIs offer a non-invasive means to interpret neural activity, enabling a range of applications in healthcare, gaming, and cognitive neuroscience. This study explores motor imagery (MI) EEG signals classification, employing a variety of signal processing techniques as well as machine learning algorithms to increase accuracy and reliability. Using data from the BCI Competition IV dataset, the proposed methodology involves EEG band separation via Butterworth bandpass filters, channel selection through a wrapper method using K-nearest neighbors (KNN), and classification of motor imagery tasks. The study demonstrates a high classification accuracy of 98% across different motor imagery tasks, highlighting the effectiveness of the proposed approach. This method not only shows promise for BCI applications aimed at assisting individuals with motor disabilities but also for gaming and potential security applications such as user authentication. Future work will focus on further enhancing the model's accuracy and exploring its integration into diverse practical applications.

MobileNet based secured compliance through open web application security projects in cloud system

The daunting issues that are promptly faced worldwide are the sophisticated cyber-attacks in all kinds of organizations and applications. The development of cloud computing pushed organizations to shift their business towards the virtual machines of the cloud. Nonetheless, the lack of security throughout the programmatic and declarative levels explicitly prone to cyber-attacks in the cloud platform. The exploitation of web pages and the cloud is due to the uncrated open web application security projects (OWASP) fragilities and fragilities in the cloud containers and network resources. With the utilization of advanced hacking vectors, the attackers attack data integrity, confidentiality, and availability. Hence, it’s ineluctable to frame the application security-based technique for the reduction of attacks. In concern to this, we propose a novel Deep learning-based secured advanced web application firewall to overcome the lack of missing programmatic and declarative level securities in the application. For this, we adopted the MobileNet-based technique to ensure the assurance of security. Simulations are effectuated and analyzed the robustness with the statistical parameters such as accuracy, precision, sensitivity, and specificity and made the comparative study with the existing works. Our proposed technique surpasses all the other techniques and provides better security in the cloud.

Robot Vehicle with ESP32 CAM

Abstract: A surveillance robot equipped with ESP32-CAM is a setup that assembles a portable surveillance gadget from a robot frame and the ESP32-CAM board. The ESP32-CAM board is an affordable development platform featuring an integrated camera and Wi-Fi capabilities. This robot is capable of navigating and capturing video footage across various settings due to its frame. The gadget can be operated through a web-based interface on the ESP32-CAM board. Through this interface, users can direct the robot's movements, view real-time video feeds, and capture video snapshots. Moreover, the system can be configured to alert the user whenever it detects movement through computer vision methods such as tracking and identifying objects. This ESP32-CAM surveillance robot finds applications in home security, monitoring from afar, and industrial surveillance. Its low cost and user-friendly interface make it an attractive choice for those looking to remotely oversee their surroundings.

Generative AI in Fintech: Advancing Risk Assessment and Fraud Detection in Digital Payment Technologies

This article explores the transformative potential of artificial intelligence (AI), particularly generative AI, in enhancing risk assessment and fraud detection within digital payment technologies. As financial fraud evolves in sophistication, traditional detection methods often fall short. We propose a novel approach leveraging generative AI to create synthetic data that mimics real-world scenarios, thereby training more comprehensive and adaptive fraud detection models. This article addresses limitations in historical datasets, improves the accuracy of predictive models, and reduces false positives. Furthermore, we demonstrate how this approach enables proactive detection of emerging fraud trends, allowing fintech firms to stay ahead in the ongoing arms race against fraudsters. Our findings suggest that integrating generative AI into fraud detection systems can significantly enhance the security and reliability of digital payment platforms, potentially revolutionizing risk management in the fintech industry. This article contributes to the growing body of knowledge on AI applications in financial security and provides a foundation for future developments in this critical area.