Computing Data Security Research Articles

WITHDRAWN: Threshold secret sharing and multi-authority based data access control in cloud computing

The composition of virtualization, grid computing and distributed computing is known as cloud computing, and these systems are completely interconnected group of systems and which will dynamically provision and offering the one or more unified cloud-computing resources. The cloud service provider’s objective is to provide their services, to clients qualitative, more secure, abrupt, scalable, more responsive, cost-efficient, on demand and automatically provisioned services just like: storage services, computation services, network system etc. Cloud services are geographically dispersed everywhere throughout the world in a transparent way and help to improve business execution by making a commitment to decrease the expense of conveying IT assets to any association. Cloud services implementation helping to reduce in a organization is controlling IT resources the cost. These cloud services demands are day by day rapidly increase as financial model applied in cloud computing is “Pay-per-Use”. In cloud computing data security and data access control issues are most important requirements, presently some schemes are given to provide the data security and data access control in cloud computing but they have limitations in some ways such that by violating the data secrecy/confidentiality because of collusion-attack and too much processing (because of using maximum no of secret keys). To counter these important security issues in cloud computing we have proposed a system that uses attribute based encryption technique, threshold secret sharing and multi-authority access control mechanism in which the data owner divides the users in group and allocates the single secret key for entire Group to Decrypt the Data and Individual User in the created Group Shares Parts of the Secret Key. Proposed system provides strong data confidentiality, & also it reduces the usage of large no of Secret Keys.

Implementation and Performance Analysis of Hybrid Cryptographic Schemes applied in Cloud Computing Environment

Cloud computing provides customers with infrastructure, platform, and software as services through the internet in a cost-effective way based on user demand. Sensitive or confidential information might be stored on the cloud servers and infrastructures that are neither controlled nor maintained by the customers, which might be a potential data breach. Therefore, security is the basic concern that limits the advantages of cloud computing. Cryptography plays a vital role to achieve that level of security required on the cloud. Hybrid cryptography takes the advantage of integrating more than one cryptographic algorithms to enhance the overall security and performance. In our research, we have proposed a comparative study for two-tier versus three-tier hybrid cryptographic models applied to secure data on the cloud. Practical implementation was made to the studied hybrid models using python simulation. Finally, a performance analysis was conducted in terms of encryption time, decryption time, average throughput, and efficiency using relatively larger data files. According to the experimental results, we observed the superiority of the Advanced Encryption Standard (AES) hybrid model among the other algorithms in terms of performance. Also, we found that the two-tier hybrid cryptographic model is more efficient than the three-tier model, but the latter provides more security. We intend to present a scientific contribution in the field of cloud computing data security.

A Study On Customer Satisfaction in E-Retailing with Special Reference to Consumer Electronics and Appliances: An Analytical Research on Indian Perspective

A Study On Customer Satisfaction in E-Retailing with Special Reference to Consumer Electronics and Appliances: An Analytical Research on Indian Perspective

How Might Artificial Intelligence Applications Impact Risk Management?

Artificial intelligence (AI) applications have attracted considerable ethical attention for good reasons. Although AI models might advance human welfare in unprecedented ways, progress will not occur without substantial risks. This article considers 3 such risks: system malfunctions, privacy protections, and consent to data repurposing. To meet these challenges, traditional risk managers will likely need to collaborate intensively with computer scientists, bioinformaticists, information technologists, and data privacy and security experts. This essay will speculate on the degree to which these AI risks might be embraced or dismissed by risk management. In any event, it seems that integration of AI models into health care operations will almost certainly introduce, if not new forms of risk, then a dramatically heightened magnitude of risk that will have to be managed.

AN ENRICHED INFORMATION SECURITY FRAMEWORK FROM VARIOUS ATTACKS IN THE IOT

Security in various E-commerce Applications includes an efficient framework in Information Security especially in Computer Security, Data Security and other online transactions in E-commerce applications. Security in E-Commerce application plays an important role for the secure and scalable transaction which includes various dimensions such as security-integrity, Confidentiality, Non-repudiation, Privacy etc. Hence for the Security of Online Transactions in E-Commerce based application various Security algorithms are implemented. Although these Security algorithms are efficient and provides Security from various attacks but Data Storage during the transactions and Computational time of the algorithms is also important. The existing architecture proposed for the security of online e-transactions in web applications provides security from different attacks and is efficient in terms of computational parameters, but there are certain issues which need to be overcome such as: Security Prevention from different attacks during Online Transactions in Web Mining especially in E-commerce Applications, Increase use of Computational Cost at the Client and Server Side. The Proposed framework provides Security prevention from various attacks especially in IoT. The methodology implemented here works on the basis of authenticating the validity of the User by allocating a challenge value and hope that our proposed framework will be more effective and efficient.

An empirical study on business analytics affordances enhancing the management of cloud computing data security

The mechanism of business analytics affordances enhancing the management of cloud computing data security is a key antecedent in improving cloud computing security. Based on information value chain theory and IT affordances theory, a research model is built to investigate the underlying mechanism of business analytics affordances enhancing the management of cloud computing data security. The model includes business analytics affordances, decision-making affordances of cloud computing data security, decision-making rationality of cloud computing data security, and the management of cloud computing data security. Simultaneously, the model considers the role of data-driven culture and IT business process integration. It is empirically tested using data collected from 316 enterprises by Partial Least Squares-based structural equation model. Without data-driven culture and IT business process integration, the results suggest that there is a process from business analytics affordances to decision-making affordances of cloud computing data security, decision-making rationality of cloud computing data security, and to the management of cloud computing data security. Moreover, Data-driven culture and IT business process integration have a positive mediation effect on the relationship between business analytics affordances and decision-making affordances of cloud computing data security. The conclusions in this study provide useful references for the enterprise to strengthen the management of cloud computing data security using business analytics.

Information hiding using artificial DNA sequences based on Gaussian kernel function

Cryptography is one of the major concerned areas of computer networks and data security. An efficient direction of providing data security can be termed as DNA based on cryptography. In this paper, a new reliable and more secure approach for data hiding based on DNA sequences is introduced. The proposed approach has two rounds of encryption. This encryption is similar to an existing encryption method called the Data Encryption Standard (DES) algorithm. Through cryptography algorithm two secret keys are used for encryption the message. The first key is induced from the elliptic curve cryptography (ECC) and gaussian kernel function (GKF). The second key is constructed based on an arbitrary injective mapping on the second characters repeated in the first key. Finally, the encryption message randomly hides in the second DNA sequence based on the numbers from GKF.

A Conceptual Analysis and Review on Cloud Computing Data Security: Challenges and its Solutions

A Conceptual Analysis and Review on Cloud Computing Data Security: Challenges and its Solutions

Кэширование данных в мультиконтейнерных системах

Today, virtualization is a key technology for cloud computing and modern data centers, providing scalability and security, managing the global IT infrastructure and reducing costs. Among the methods of virtualization, the most popular was containerization, that is the isolation of related groups of linux processes that share a common Linux kernel. Containerization is more profitable that classical hardware virtualization because of compactness of containers and lower overhead costs of memory, disk, CPU. However, in comparison with classical architectures without process isolation containers can cost more, and in any case, the industry is waiting for additional optimization – the speed of launch, saving memory and disk space and other resources. Different caching techniques can help in this, because Caching is the oldest mechanism of increasing software productivity without radical modification of algorithms and hardware. However, there are a lot of architectural and engineering tradeoffs. Here we will consider modern scientific and technical approaches to their solution in different aspects – acceleration of launch, optimization of shared usage, acceleration of building container images, as well as some security problems caused by aggressive caching in modern processor architectures. And in some use cases for multi-container systems performance and latency are not important, but we have to ensure the maximum load of physical servers. In these cases, the algorithms of planning and placement of containers are relevant, and we give an overview of theoretical work on this topic.

Analytical Method to Compute the Cloud Computing Data Security Issues by Using Encryption Algorithms

All the associations are genuine thoughts to receive the cloud computing administrations, seeing its advantages as far as cost, openness, accessibility, adaptability and profoundly computerized procedure of upgrading. Cloud computing upgrade the present capacities progressively without further speculation. Cloud computing is a band of assets, applications, and administrations. With the execution of cloud computing, associations have solid worries about the security of their information. The research focuses on the security issues of cloud services. The AES and RSA algorithms will be verified on five parameters key generation time, encryption execution time, memory usage, file uploading time and file downloading time. The CloudSim simulator will be used to find results that the RSA is performing much better than AES in terms of encryption execution time.

Kompjuterski kriminalitet - specifičnosti i savremeni izazovi

Crime is a pathological social phenomenon of a universal character. Regardless of the degree of development and the form of organization of social community, crime is omnipresent. Viewed through the prism of the historical development of human civilization, the phenomenological features, forms and structure of crime changed over time. In addition to the existing incriminations, new forms of crime appear; concurrently, crimes that have been incriminated for a certain period cease to be prohibited and/or sanctioned. These processes are dynamic and not exclusively related to the temporal dimension; they depend on the level of development, tradition and culture, economic, legal and political system of individual states. The characteristic of the contemporary post-modern society is the emergence of a new form of criminality - cybercrime. As an inevitable consequence of the digital age and the application of information technologies in all aspects of social life, cybercrime entails new forms of criminal behavior resulting from the mass use and abuse of new technologies (computers, computer systems, electronic communication devices, the global network - Internet), as well as traditional offenses committed by using a computer. The provision of new criminal offences envisaged to provide protection of computer data security are only a small part of efforts to counteract cyber crime, particularly given the fact that computers are a potential tool for the execution of other criminal offenses. According to typology provided in the criminal law literature, cybercrime is most often studied as part of crimes against property. However, in addition to propertyrelated criminal offences, the distinctive featu­res and autonomy of the committed crimes show that cybercrime includes criminal offences which are traditionally part of general, political, economic or violent crimes. The paper provides analysis of the phenomenon of cybercrime and its specific features. The author discusses the challenges that have to be addressed by the modern society: the dynamic development of ample forms of cybercrime, the erosion of spatial and temporal boundaries in execution of these crimes, the specific profile of the perpetrators, the problems in detecting and proving these crimes, the high 'dark figure' and the massive exposure to victimization. The contemporary society has to provide an adequate response to all these issues.

Exploring students’ experiences in using a physical laboratory for computer networks and data security

ABSTRACTData and computer network security issues have become increasingly important in professional engineering practice, requiring educated engineers capable to solve the real security problems. This strongly emphasize the importance of including courses dedicated to data and computer network security in information technology curricula, and providing real first‐hands experiences with physical equipment to students. This article presents a qualitative study aimed at exploring students’ experiences in a physical laboratory for computer network and data security. Identified experiences were organized into a conceptual framework, providing a base for improvement of learning materials and the laboratory. Benefits and implications for students, lecturers, and researchers are also discussed. © 2017 Wiley Periodicals, Inc. Comput Appl Eng Educ 25:290–303, 2017; View this article online at wileyonlinelibrary.com/journal/cae; DOI 10.1002/cae.21797

Research on Cloud Computing Data Security Based on ECDH and ECC

Research on Cloud Computing Data Security Based on ECDH and ECC

Krivičnopravna zaštita bezbednosti računarskih podataka

Computer is one of the most significant achievements of technological development at the end of the 20th century. There isn't part of human life in which computers have found not their application. But, despite the fact that the computer has great advantages, it has quickly become a means of abuse. This is the beginning of computer crime as a special and specific form of crime. There are a several ways to protect the security of computer data. The authors describe only one system to protect the security of computer data in this paper. It is criminal protection. The authors analyze the legal solution and implement those solutions into practice.

Research and Implementation of Computer Data Security Management System

The intrusion detection systems, firewalls and other security devices provide a guarantee for the safe operation of the network, but with the wide application of network, virus, hackers and other security incidents are increasing, these security devices will send tens of thousands of a warning in a very short period of time, the network management personnel is difficult to find useful information from these massive alarms. In addition, with the increasingly large scale network, mobile network, data management, data related to SMS, MMS message service system, single security device cannot detect all intrusions, so we must consider how to make these equipments work harmoniously. In this paper, based on the above problems, the mobile data network security integrated management system is studied, and the research and implementation of security event management mechanism is discussed in detail. The event management proposed in this paper can be regarded as an extension of the concept of network management, which enriches the content of the five functions of network management. In addition, the traditional network management and system management are two independent concepts. The two management systems can be combined together through the event management, so that the network security operation can be further improved. The purpose of security event modeling is to format the events from different event sources to facilitate subsequent processing. In this paper, the object oriented modeling method is adopted, which is scalable, and at the same time, the difference of all kinds of events is fully considered. For the description of the model, this paper uses the XML language, which is universal. Harm of computer virus on the network security management is more and more big, the characteristics of computer virus and the typical symptoms and its harmfulness are analyzed, and the security of mobile communication network is analyzed. The proposed system modification virus prevention. Implementation of general security management system in mobile data network is the focus of this article, mainly from the three aspects of the audit log management, security event monitor and account password management in the mobile data network involving multiple business systems in the implementation of integrated security management system. In this paper, we adopt rule based hierarchical system architecture, the coupling degree of each module is relatively loose, and it has great flexibility in the deployment.

A k‐means clustering‐based security framework for mobile data mining

AbstractData mining is a process of digging data sets from large data‐bases, especially for use to improve the operation efficiency of a company, institution, or an organization. With the increasing cases of cyber and other computer‐related crimes, computer and mobile data security has become a matter of concern, secure, and non‐contaminated data is very important for data mining to improve the performance of a system. This paper proposes a system framework that is able to collect information and then be able to generate alerts in real time. The proposed scheme is then simulated using the K‐means clustering algorithm, which is one of the most popular clustering algorithms to determine the efficiency and the accuracy of the proposed scheme. The paper concludes by proposing further improvements to be undertaken on the proposed system to improve its efficiency and accuracy. Copyright © 2017 John Wiley & Sons, Ltd.

Differentiated management strategies on cloud computing data security driven by data value

ABSTRACTData security is a primary concern for the enterprise moving data to cloud. This study attempts to match the data of different values with the different security management strategies from the perspective of the enterprise user. With the help of core ideas on data value evaluation in information lifecycle management, this study extracts usage features and user features from the operating data of the enterprise information system, and applies K-means to cluster the data according to its value. A total of 39,348 records of logon log and 120 records of users from the information system of a ship-fitting manufacturer in China were collected for an empirical study. The functional modules of the manufacturer’s information system are divided into five classes according to their value, which is proven reasonable by the discriminant function obtained via discriminant analysis. The differentiated data security management strategies on cloud computing are formulated for a case study with five types of data to enhance the enterprise’s active cloud computing data security defense.

Research on dynamic heuristic scanning technique and the application of the malicious code detection model

With the rapid development of computer technology, people pay more attention to the security of computer data and the computer virus has become a chief threat to computer data security. By using an antivirus system that can identify randomly generated computer viruses and on the basis of the basic characteristics of the computer code, this paper investigates the heuristic scanning technique. This paper proposes the minimum distance classifier and detection model through the analysis of the malicious code. This model can identify unknown feature codes of illegal procedures and construct a healthy network environment by using a combination of model and experimental method, which can intercept the illegal virus program in the installation and operation stages.

Introduction to Secure Outsourcing Computation

With the rapid development of cloud computing, the enterprises and individuals can outsource their sensitive data into the cloud server where they can enjoy high quality data storage and computing services in a ubiquitous manner. This is known as the outsourcing computation paradigm. Recently, the problem for securely outsourcing various expensive computations or storage has attracted considerable attention in the academic community. In this book, we focus on the latest technologies and applications of secure outsourcing computations. Specially, we introduce the state-of-the-art research for secure outsourcing some specific functions such as scientific computations, cryptographic basic operations, and verifiable large database with update. The constructions for specific functions use various design tricks and thus result in very efficient protocols for real-world applications. The topic of outsourcing computation is a hot research issue nowadays. Thus, this book will be beneficial to academic researchers in the field of cloud computing and big data security.

Efficient and Reliable Data Storage Securityagainst Malicious Data Modification in CloudComputing

Cloud Computing becomes the next generation architecture of IT Enterprise. In contrast to traditional solutions, Cloud computing moves the application software and databases to the large data centers, where the management of the data and services may not be fully trustworthy. This unique feature, however, raises many new security challenges which have not been well understood. In cloud computing, both data and software are fully not contained on the user's computer; Data Security concerns arising because both user data and program are residing in Provider Premises. Clouds typically have single security architecture but have many customers with different demands. Every cloud provider solves this problem by encrypting the data by using encryption algorithms. This paper investigates the basic problem of cloud computing data security. We present the data security model of cloud computing based on the study of the cloud architecture. We improve data security model for cloud computing. In proposed system, we are going to make robust data storage security model in which group member’s data accessing scheme is used, for dynamic groups in the cloud. We analyze the security of our scheme with data confidentiality and demonstrate the efficiency of our scheme in experiments against malicious data modification.