Security Level Of System Research Articles

Stochastic Blockchain for IoT Data Integrity

This paper proposes a blockchain-based data checking scheme to protect data integrity in Internet of Things (IoT). Traditional data integrity schemes such as symmetric key approaches and public key infrastructure (PKI) suffer from the single-point of failure and network congestion due to the centralized architecture. Motivated by the distributed data authentication in blockchain, we propose to adopt blockchain to ensure the data integrity in IoT networks. However, the existing blockchain scheme cannot be directly applied to IoT nodes with limited computing and network resources. Hence, we develop a stochastic blockchain scheme to limit the number of cooperative nodes and distribute the load to IoT edge nodes. In our scheme, the IoT data are broadcast by randomly selected cooperative nodes, thereby introducing uncertainty to the attacker and improving the system security level. Finally, we propose a lightweight mining process to make only the IoT edge nodes compete for block generation and share the block with other nodes. If our scheme is used in the case of having 9,000 legitimate nodes and 1,000 compromised nodes, only three cooperative nodes can achieve the probability of successful defense over 99 percent.

E-Voting: Blockchain Based Voting For Secure Vote Casting

blockchain is decentralized immutable ledger technology maintaining integrity. So to conduct tamperproof election it’s one of the approach towards it. Smart contracts are Self executed code that is written on Ethereum platform in blockchain. An E-voting system should be completely secure and does not allow voting twice that is double spending in blockchain. So it should be completely transparent. In research work electronic voting application is implemented and tested using smart contract on Ethereum platform with the help of metamask wallet. The results of ballots and votes will be stored on Ethereum blockchain with the help of consensus algorithm proof of stake. This consensus is used in validating a transaction with concept of majority approval. Current electronic voting system requires a centralized authority to control the procedure from ballot input to result output and for monitoring of election. While blockchain technology provide decentralized system which is open across connected nodes. Blockchain assets provide increased level of system security from hacking and fraud. Every transaction in blockchain is time-stamped and signed digitally with the help of cryptographic algorithms, and it assigns unique hash value to every block so it can be trace easily. Blockchain technology is one of solutions because it embraces a decentralized system and the entire databases are owned by many users. The blockchain technology also has much vulnerability due to which many attacks like 51% attack, Double Spending attack, DDOS attack, Sybil attack, Eclipse attack and Routing attack can be performed on it.

Analysis Security of SIA Based DSS05 on COBIT 5 Using Capability Maturity Model Integration (CMMI)

A secure academic information system is part of the college. The security of academic information systems is very important to maintain information optimally and safely. Along with the development of technology, academic information systems are often misused by some irresponsible parties that can cause threats. To prevent these things from happening, it is necessary to know the extent to which the security of the academic information system of universities is conducted by evaluating. So the research was conducted to determine the Maturity Level on the governance of the security of University Ahmad Dahlan academic information system by using the COBIT 5 framework on the DSS05 domain. The DSS05 domain on COBIT 5 is a good framework to be used in implementing and evaluating related to the security of academic information systems. Whereas to find out the achievement of evaluation of academic information system security level, CMMI method is needed. The combination of the COBIT 5 framework on the DSS05 domain using the CMMI method in academic information system security is able to provide a level of achievement in the form of a Maturity Level value. The results of the COBIT 5 framework analysis of the DSS05 domain use the CMMI method to get a Maturity level of 4,458 so that it determines the achievement of the evaluation of academic information systems at the tertiary level is Managed and Measurable. This level, universities are increasingly open to technological developments. Universities have applied the quantification concept in each process, and are always monitored and controlled for performance in the security of academic information systems.

An iris biometric-based dual encryption technique for medical image in e-healthcare application

The main objective of this work is to develop a biometric key-based medical image watermarking in e-health care application. In this paper, two types of inputs are utilised namely, patient MRI image and electronic health record (EHR). Initially, the ROI region of input image is segmented and using SHA-256 algorithm the ROI region is encrypted. Then, the EHR information is encrypted with the help of ECC algorithm. In this ECC algorithm, for key generation iris biometric is utilised which is increase the security level of watermarking system. After the encryption process, the image and EHR information are concatenated. Further increase the system security, arithmetic encoding algorithm is utilised to compress the bit stream. Finally, the bit-stream is embed into cover image. The same process is repeated to the extraction process. The effectiveness of the algorithm is analysed in terms of peak signal to noise ratio (PSNR) and normalised correlation (NC).

Angle Multiplexing Optical Image Encryption in the Fresnel Transform Domain Using Phase-Only Computer-Generated Hologram

We propose an angle multiplexing method for optics-based image encryption using a phase-only computer-generated hologram (POCGH) in the tilted Fresnel transform (TFrT) domain. Modified Gerchberg-Saxton algorithms, based on the three types of rotation manipulation in both the hologram and reconstruction planes, are used with their corresponding TFrT parameters to extract the phase-only functions (POFs) of the target images. All the extracted POFs are then phase-modulated and summed to obtain the final POCGH, which is capable of multiplexing and avoiding overlap in the reconstructed images. The computer simulation results show that the images corresponding to the various rotation manipulations at the hologram and image reconstruction planes can be successfully restored with high correlation coefficients. Due to the encrypted nature of the multiplexed images, a higher system security level can be achieved, as the images can only be correctly displayed when all the required parameters in the TFrT are available. The angle sensitivity on the image quality for each manipulation is also investigated.

Environmental Monitoring with Distributed Mesh Networks: An Overview and Practical Implementation Perspective for Urban Scenario.

Almost inevitable climate change and increasing pollution levels around the world are the most significant drivers for the environmental monitoring evolution. Recent activities in the field of wireless sensor networks have made tremendous progress concerning conventional centralized sensor networks known for decades. However, most systems developed today still face challenges while estimating the trade-off between their flexibility and security. In this work, we provide an overview of the environmental monitoring strategies and applications. We conclude that wireless sensor networks of tomorrow would mostly have a distributed nature. Furthermore, we present the results of the developed secure distributed monitoring framework from both hardware and software perspectives. The developed mechanisms provide an ability for sensors to communicate in both infrastructure and mesh modes. The system allows each sensor node to act as a relay, which increases the system failure resistance and improves the scalability. Moreover, we employ an authentication mechanism to ensure the transparent migration of the nodes between different network segments while maintaining a high level of system security. Finally, we report on the real-life deployment results.

Study for Integration of Multi Modal Biometric Personal Identification Using Heart Rate Variability (HRV) Parameter

Authentication and Identification is primary part of biometric technology. Currently, electrocardiogram (ECG) is not only being used as a diagnostic tool for clinical purposes, but also as a new biometric tool for high level security system because of its liveliness and uniqueness that is hard to imitate and manipulate. There are many fiducial (signal mark) that is classified from ECG morphology (QRS Complex, P, T waves) has already been researched for this purpose. For non fiducial, many researches are focus on dynamic character from heartbeat (ECG Signal). Heart Rate Variability (HRV) analysis is part of non fiducial classifier. This paper reviews Heart Rate Variability analysis (time and frequency domain) as part of multi matches, one of scenario from multimodal biometric. Sample of person’s heartbeat signal is taken from ECG Database MIT-BIH (MIT and Harvard) and the result of every parameter will be analyzed by Biometric Performance Standards Tools (ISO/IEC IS 19795-1) such as: False Non-Match Rate (FNMR), False Match Rate (FMR) and Thresholds EER (Equal Error Rate). Analysis should show accuracy of multi matches Heart Rate Variability (HRV). As integrator tool, LabView is used to collect offline ECG, process the data and generate HRV Analysis.

A secure and efficient WSN by employing symmetric key matrix and rectangular frame scheme

SummaryCurrently, wireless sensor networks (WSNs) have been widely developed in different domains. Generally, sensors work independently, so it is relatively easier for a WSN to add new nodes. Often, a WSN is constrained to low energy consumption. However, data encryption/decryption not only takes a long time but also consumes many network resources. Due to limited battery power and CPU capability, a sensor's encryption algorithm should not be complicated. However, a simple security algorithm will downgrade the system's security level. Hence, designing a secure wireless transmission system with high encryption/decryption performance, particularly for 5G networks, is an urgent task. Therefore, in this study, we propose an efficient and secure approach, named the Symmetric Key Matrix and Rectangular Frame Scheme (SKeMRF, for short), which involves security mechanisms to speed up encryption/decryption operations for a WSN. Further, the SKeMRF integrates global Symmetric Key Matrix (SKM, for short) and other security mechanisms to ensure the security of transmitted data and enable the system to effectively resist the forgery KDS attack, thus greatly enhancing security of the whole system. Theoretical analysis and simulation show that the SKeMRF is an efficient and highly secure WSN compared with those state‐of‐the‐art schemes.

A Review on Security and Privacy Issues in Wireless Body Area Networks for Healthcare Applications

Wireless Body Area Network (WBAN) is a new trend in the technology that provides remote mechanism to monitor and collect patient’s health record data using wearable sensors. It is widely recognized that a high level of system security and privacy play a key role in protecting these data when being used by the healthcare professionals and during storage to ensure that patient’s records are kept safe from intruder’s danger. It is therefore of great interest to discuss security and privacy issues in WBANs. In this paper, we reviewed WBAN communication architecture, security and privacy requirements and security threats and the primary challenges in WBANs to these systems based on the latest standards and publications. This paper also covers the state-of-art security measures and research in WBAN.

A Review on Security and Privacy Issues in Wireless Body Area Networks for Healthcare Applications

Wireless Body Area Network (WBAN) is a new trend in the technology that provides remote mechanism to monitor and collect patient’s health record data using wearable sensors. It is widely recognized that a high level of system security and privacy play a key role in protecting these data when being used by the healthcare professionals and during storage to ensure that patient’s records are kept safe from intruder’s danger. It is therefore of great interest to discuss security and privacy issues in WBANs. In this paper, we reviewed WBAN communication architecture, security and privacy requirements and security threats and the primary challenges in WBANs to these systems based on the latest standards and publications. This paper also covers the state-of-art security measures and research in WBAN.

Design of Virtual Campus Card System Based on Micro-Service Architecture

Based on the analysis of the application status of campus card and aiming at the design of virtual campus card system under the architecture of micro-service, taking the newly-built campus card system of New Cape as an example, this paper analyses the overall requirements, system architecture, data center, system network and system performance, etc. By vertical splitting of the monolithic application, the platform's concurrent capability is greatly improved, the complexity of the monolithic application is solved, and the business response is more agile and fast. The application of the micro-service architecture will greatly improve the service capability and security level of the virtual campus card system, which can provide important reference function for the research and construction of the new generation campus card system.

Secure Clustered Distributed Storage Against Eavesdropping

This paper investigates interplay among storage overhead, bandwidth requirement, and security constraint in distributed storage. In the model used in our analysis, storage nodes are dispersed in multiple clusters. When a node fails, necessary content gets restored by downloading data from different nodes that may possibly be in other clusters. The bandwidth required for transferring data for node repair is assumed more scarce for cluster-to-cluster links than the links connecting intra-cluster nodes. Eavesdropping takes place on links across clusters only, and a fraction of the total number of clusters is assumed compromised. When a cluster is compromised, any repair traffic going in and out of it is eavesdropped. For this clustered model with eavesdroppers, we analyze the security of distributed storage systems (DSSs) and provide guidelines on designing system solutions for securing the data. First, under the setting of functional repair, we derive a general upper bound on the secrecy capacity, the maximum data size that can be stored in DSSs with perfect secrecy. In the practically important bandwidth-limited regime where the node storage size is equal to the repair bandwidth, the upper bound is shown to be achievable through proposed code constructions. Moreover, we obtain a closed-form expression for the required system resources-node storage size and repair bandwidth-to store a given amount of data with perfect secrecy. Second, we investigate the behavior of secrecy capacity as the number of compromised clusters increases. According to our mathematical analysis, the secrecy capacity decreases as a quadratic function until the number of compromised clusters reaches a certain threshold. Finally, based on the fundamental relationship between the system resources and the secrecy capacity, we provide a guideline on balancing intra- and cross-cluster repair bandwidths depending on the given system security level.

Event-driven finite-time control for continuous-time networked switched systems under cyber attacks

This paper addresses the issue of event-driven state-feedback controller design for networked switched systems in the finite-time sense. At the plant design level, the synchronism between switched systems and the corresponding controllers is guaranteed by introducing a mode-decision unit at the actuator side. Through intensive time interval analysis approach, the switched system, the event-triggered scheme, transmission delays and cyber attacks are unified into a new closed control system. Sufficient conditions are developed to ensure the networked switched system finite-time bounded by constructing a proper Lyapunov function. Then, the design methods for switched sub-controllers, optimal event-triggered parameters and restrictive average dwell-time switching law are presented. It is worth pointing out that the main results not only contribute to optimize limited network resources but also improve the system security level, which is validated through an illustrative example of a boost converter circuit.

Optimization of Rules for Intrusion Detection System (Org-Ids)

Computer Networks are prone to be attacked by a number of network attacks. To protect an individual system or the entire network from the malicious behaviour, a high level security system is needed. Intrusion detection system (IDS) is a system which give such protection to the network from the intrusions like misuse, unauthorised access etc. Even though many forms of new attacks come into practice, providing the security for the system from the known attack is also a challenging task. The solution is a Signature based IDS which is a potential tool to identify the known attack, sending alert and protect the networks. So a novel signature based IDS(ORG-IDS) with four phases such as Feature Selection, Classification, Optimized Rule generation and Pattern matching is proposed. For any efficient signature based IDS, it should have the signature rules in less number but it should be effective in identifying attacks with good time and memory complexity. In this paper, a new algorithm is proposed for Rule generation phase of proposed IDS to configure the rules by implementing Ant Colony Optimization Technique with Association Rule Mining . The parameters like number of rules, running time and memory utilization are measured and proved that this proposed algorithm outperforms the other existing algorithms.

Security Assessment Algorithm of Navigation Control System Based on Big Data

There is a trend of integration and modularisation in navigation control system. It has the characteristics of high resource sharing, fast information transmission and integration of software and hardware. It has high requirements for the safety of navigation control systems. In view of the low accuracy of traditional algorithms, a new big data-based security assessment algorithm of navigation control system is proposed. The structure of navigation control system is introduced and the realisation of navigation control system is analysed. In big data environment, common criteria (CCS) is used to determine the safety assessment objectives of the navigation control system. According to the different safety weights among the areas in the criterion layer, the pilots determine the weight of the assessment objectives by analytic hierarchy process based on the evaluation of the navigation control system and the corresponding safety rating indices. GRAP algorithm is used to acquire the security level of navigation control system so as to realise the safety assessment of the navigation control system. Experimental results show that the proposed algorithm can effectively improve the accuracy of assessment and reduce misclassification rate due to the comprehensive ability of this algorithm.

Time Frame Based Dynamic Data Shift Algorithm for Data Security in Mobile Cloud Computing

Mobile Computing is an Innovation in the Field of IT and it brought so many changes in the lives of Human Beings. Initially when mobile phone introduced it is a device useful only for Making and Receiving calls and Sending and Receiving Text Messages. As the technology changed drastically today’s mobile world has become Smart World. Where Mobile phone is not only for calls and messages, it will be used for different purposes starting from Storing The Data, Accessing Different Applications like MS Word, MS Excel etc.., to take photos, and listening songs etc..., So the mobile era brought so many changes in the life of human being, initially people are happy with 4GB memory devices now Smart Phones coming with 128GB and 256 GB still people need more memory. As the usage of Mobile Phone is getting increased storing data in the given space is becoming limited. To overcome this cloud computing has taken one more step to connect the applications running on mobile to connect with cloud to store and process the data. Initially the Application will be using only the memory of mobile phones but now the applications are moving to cloud. To give an example the applications like DROP BOX, Google Drive, One Drive are running on their servers now they moved to cloud where people can access the application with ease of access. The major problems faced by users are Security and Accessing the Applications without any interruption. In this Research Paper the major focus is on how to improve the security of the Data and the minor focus is on ease of access to applications. In order to provide security for the data two level security system will be implemented. For ease access there are few techniques and frameworks need to be changed according to the problem

Recognition of Text CAPTCHA by using Back Propagation Algorithm of Artificial Neural network

Text-based CAPTCHA is a very simple type of CAPTCHA which are most widely used. It uses only a group of characters. In this paper, we focus on how Text based CAPTCHA is recognized by machine learning techniques. This paper proposed a method based on Back Propagation algorithm to identify the Text based CAPTCHA. The proposed technique improves the security level of Text-based CAPTCHA storage system by using the Back-propagation method of Artificial Neural Network. We used NNToolbox to train the network in MATLAB software

Analisis Firewall Demilitarized Zone dan Switch Port Security pada Jaringan Universitas Putra Indonesia YPTK

The development of information technology so rapidly, greatly helped the works of man. On the one hand man to be very helpful, but on the other side of the system's security level to rise sharply so that in essence the sides of human life is in a threatened position. The techniques of network security systems and precautions against attacks on information systems continue to be developed so that the integrity, availability and confidentiality in an information system becomes more secure. One way is by building a network security system and attack prevention system. In this paper, the authors construct a computer network security systems using a firewall Demiliteralized Zone (DMZ) by using IPtables which is the standard of Linux systems and and Switch Port Security (SPS). Utilization by combining these two technologies to achieve maximum levels of security and is able to block the intruder will attempt an attack with a variety of attacks identified.

Security Login System on Mobile Application with Implementation of Advanced Encryption Standard (AES) using 3 Keys Variation 128-bit, 192-bit, and 256-bit

The development of mobile applications is unbalanced with the level of its security which is vulnerable to hacker attacks. Some important things that need to be considered in the security of mobile applications are login and database system. A login system that used the database as user authentication and passwords are very vulnerable to be hacking. In securing data, various ways had been developed including cryptography. Cryptographic algorithms used in securing passwords usually used MD5 encryption. However, MD5 as a broader encryption technique is very risky. Therefore, the level of login system security in an android application is needed to embed the Advanced Encryption Standard (AES) algorithm in its process. The AES algorithm was applied using variations of 3 keys 128-bit, 192-bit, and 256-bit. Security level testing was also conducted by using 40 SQL Injection samples which the system logins without security obtained 27.5% that be able to enter the system compared to the result of login systems that use AES algorithm 128-bit, 192-bit or 256-bit was obtained 100% that cannot enter into the system. The estimation of the average encryption process of AES 128, 192 and 256 bits are 5.8 seconds, 7.74 seconds, and 9.46 seconds.

Risk‐based security assessment of transmission line overloading considering spatio‐temporal dependence of load and wind power using vine copula

Location of wind power plants and demand centres are not always close by; hence, the transmission of energy puts a burden on existing grid infrastructure. This unwanted burden necessitates transmission lines to operate more and more frequently close to their operating limits. To alleviate such situations, this research addresses the advantages of modelling spatio-temporal dependence of load and wind power using vine copula. Probabilistic AC optimal power flow is performed on a modified IEEE 39-bus system with significant wind penetration. Real load and wind power data from a U.S. utility is mapped onto the test-case to achieve realistic results. Load flow calculation can help in performing steady-state voltage and overload evaluations for post-disturbance system conditions. Because the security level of a power system is determined by the likelihood and severity of security violation. In this research, the probability of line overload is calculated from load flow and the severity function describes the risk of line overloading. Two case studies depicting future operating conditions of massive wind power penetration with reduced fossil fuel and nuclear power generation are considered. Simulation results prove the advantage of addressing spatio-temporal dependency to quantify the overload risk index, which is treated as a security indicator.