Security Of Sensitive Information Research Articles

Identity-Based Auditing for Shared Cloud Data With Efficient and Secure Sensitive Information Hiding

Identity-Based Auditing for Shared Cloud Data With Efficient and Secure Sensitive Information Hiding

A Blockchain-Based Audit Trail Mechanism: Design and Implementation

Audit logs are a critical component in today’s enterprise business systems as they provide several benefits such as records transparency and integrity and security of sensitive information by creating a layer of evidential support. However, current implementations are vulnerable to attacks on data integrity or availability. This paper presents a Blockchain-based audit trail mechanism that leverages the security features of Blockchain to enable secure and reliable audit trails and to address the aforementioned vulnerabilities. The architecture design and specific implementation are described in detail, resulting in a real prototype of a reliable, secure, and user-friendly audit trail mechanism.

RBAC protection-impacting changes identification: A case study of the security evolution of two PHP applications

Web applications often use Role-Based Access Control (RBAC) to restrict operations and protect security sensitive information and resources.

APPLICATION OF ACHIEVEMENT TESTING SOFTWARE OF CADETS IN HIGHER MILITARY EDUCATIONAL INSTITUTIONS

The article presents description, advantages, and use of the Achievement Testing Software (ATS) developed by the authors – the teaching staff of the Military Diplomatic Academy named after Yevheniy Bereznyak – for cadets’ achievement testing in the educational process of higher military educational institutions. The authors prove the necessity of the ATS introduction into the educational process of such institutions due to the inability of existing computer testing software to fully satisfy their needs (high costs of technical maintenance, closed exit codes, and constant reliance on the Internet connection making it impossible to provide sensitive information security). Unlike other systems, the ATS is a reliable instrument of military educational control, capable of operating off-line. It was developed based on fundamental works in test theory, measurement and evaluation by Ukrainian and foreign scholars. It can be widely used for different types of achievement testing in higher military educational institutions: classroom; entrance or summative; and in any type of military course. The ATS rational use allows saving learning time and teachers’ effort, simultaneous engagement of many cadets in the training process, as well as objective measurement and evaluation through its automation. The ATS also provides capabilities of control over the educational process which allow curricula correction due to the constant feedback from cadets. Basically, the ATS performs two interrelated functions: test development and editing (by teachers); and academic achievement measuring (by cadets through the developed test items). The system can be easily installed on personal computers with Windows XP Professional SP2 operational system. The article describes in greater detail the procedure of operating in two modules: the Teacher’s Module and the Testing Module. Here, the ATS provides a user-friendly menu that can be easily navigated by pressing on buttons and selecting necessary options according to the instructions. The test entrance is password-protected, the test is encrypted, and the test score can be quickly viewed by cadets and teachers immediately after its completion. The ATS efficiency was proved through an experiment involving cadets of the Military Diplomatic Academy named after Yevheniy Bereznyak by demonstrating improvement in their performance.

On the non-intrusive extraction of residents’ privacy- and security-sensitive information from energy smart meters

Energy smart meters have become very popular in monitoring and smart energy management applications. However, the acquired measurements except the energy consumption information may also carry information about the residents’ daily routine, preferences and profile. In this article, we investigate the potential of extracting information from smart meters related to residents’ security- and privacy-sensitive information. Specifically, using methodologies for load demand prediction, non-intrusive load monitoring and elastic matching, evaluation of extraction of information related to house occupancy, multimedia watching detection, socioeconomic and health profiling of residents was performed. The evaluation results showed that the aggregated energy consumption signals contain information related to residents’ privacy and security, which can be extracted from the smart meter measurements.

A Review of Modern DNA-based Steganography Approaches

In the last two decades, the field of DNA-based steganography has emerged as a promising domain to provide security for sensitive information transmitted over an untrusted channel. DNA is strongly nominated by researchers in this field to exceed other data covering mediums like video, image, and text due to its structural characteristics. Features like enormous hiding capacity, high computational power, and the randomness of its building contents, all sustained to prove DNA supremacy. There are mainly three types of DNA-based algorithms. These are insertion, substitution, and complementary rule-based algorithms. In the last few years, a new generation of DNA-based steganography approaches has been proposed by researchers. These modern algorithms overpass the performance of the old ones either by exploiting a biological factor that exists in the DNA itself or by using a suitable technique available in another field of computer science like artificial intelligence, data structure, networking, etc. The main goal of this paper is to thoroughly analyze these modern DNA-based steganography approaches. This will be achieved by explaining their working mechanisms, stating their pros and cons, and proposing suggestions to improve these methods. Additionally, a biological background about DNA structure, the main security parameters, and classical concealing approaches will be illustrated to give a comprehensive picture of the field.

Privacy-Preserving in Healthcare Blockchain Systems Based on Lightweight Message Sharing.

Electronic medical records (EMRs) are extremely important for patients’ treatment, doctors’ diagnoses, and medical technology development. In recent years, the distributed healthcare blockchain system has been researched for solving the information isolated island problem in centralized healthcare service systems. However, there still exists a series of important problems such as the patients’ sensitive information security, cross-institutional data sharing, medical quality, and efficiency. In this paper, we establish a lightweight privacy-preserving mechanism for a healthcare blockchain system. First, we apply an interleaving encoder to encrypt the original EMRs. This can hide the sensitive information of EMRs to protect the patient’s privacy security. Second, a ()-threshold lightweight message sharing scheme is presented. The EMRs are mapped to n different short shares, and it can be reconstructed by at least t shares. The EMR shares rather than the original EMRs are stored in the blockchain nodes. This can guarantee high security for EMR sharing and improve the data reconstruction efficiency. Third, the indexes of the stored EMR shares are employed to generate blocks that are chained together and finally form a blockchain. The authorized data users or institutions can recover an EMR by requesting at least t shares of the EMR from the blockchain nodes. In this way, the healthcare blockchain system can not only facilitate the cross-institution sharing process, but also provide proper protections for the EMRs. The security proof and analysis indicate that the proposed scheme can protect the privacy and security of patients’ medical information. The simulation results show that our proposed scheme is more efficient than similar literature in terms of energy consumption and storage space, and the healthcare blockchain system is more stable with the proposed message sharing scheme.

Security Advanced Framework for the Robust Systems Monitoring

In the present communication technology the distributed networks have a vibrant job, Whether it's statutory or non-governmental organisations. The significant worry of the present IT industry is that stability, adaptability and the complexities of the distributed systems are handled. Robust distributed system (RDS) are hubs in organized PCs, which changes itself as indicated by changes to conditions. A study framework or tool is utilized to distinguish the adjustments in the distributed frameworks and many of the activities of the whole system. The intruder could compromise this monitoring system while gathering the data from the distributed framework. The following task will discuss this paper, the framework of security approaches for studying RDS. Initially, work into current studying tools to assess the impact of monitoring practices in RDSs. Once security-sensitive information is collected by the monitoring tool, the risk of information being leaked to unauthorized users is high, Secondly, a safe corresponding channel was introduced using the RSA algorithm to track confidential information. Thirdly, A stable, personalized network monitoring tool was introduced to provide the necessary protection for each parameter in the system. Protection metrics are used to calculate the security levels of each constraint to be monitored.

A Novel Encryption Algorithm by Fusion of Modified Blowfish Algorithm and Fermat’s Little Theorem for Data Security

Nowadays, protecting sensitive factual information from hackers when it is transmitted over the broad network to communicate around the world is a huge task. To provide secure online transactions, communication, and business, researchers are insisted to develop novel security techniques. One of these approaches is on the basis of encrypting a plaintext will be in ciphertext by applying some mathematical models. This paper suggested a modified Blowfish algorithm with Fermat’s Little Theorem to provide an additional layer of security for sensitive information while sending over a non-secure channel. The performance analysis of Modified Blowfish Algorithm and Fermat’s Little Theorem (BFLT) encryption algorithm reveals consumption of memory, time consumption for encrypting and decrypting by comparing with the standard encryption algorithm. According to the analysis, this proposed encryption algorithm provides significantly upper level of performance and security and BFLT can be used for real-time implementations.

Sources of threats and methods of securing information in companies in Poland compared to other EU countries

Abstract Nowadays, the electronic economy (e-economy) affects every area of ​​socio-economic life and modernizes traditional activities by using information and communication technologies in all branches of the economy. The internet revolution has made information protection in the virtual world an extremely important topic. The threats associated with the theft of sensitive and confidential data seem particularly dangerous. Such action poses a threat to the safe functioning of e-economy and even personal security. The purpose of the article is to analyze threats to the security of confidential information in e-economy. The elements limiting the further development of the information society undoubtedly include the security of sensitive information. Therefore, the rest of the article presents methods and ways of securing sensitive information as part of policies pursued by EU countries. The article analyzes quantitative data in EU Member States with particular emphasis on the position of Poland indicating the development of the information society. Thanks to adopting more than two criteria we can take a look on the problem from broader perspective.

Autonomic machine learning platform

Acquiring information properly through machine learning requires familiarity with the available algorithms and understanding how they work and how to address the given problem in the best possible way. However, even for machine-learning experts in specific industrial fields, in order to predict and acquire information properly in different industrial fields, it is necessary to attempt several instances of trial and error to succeed with the application of machine learning. For non-experts, it is much more difficult to make accurate predictions through machine learning.In this paper, we propose an autonomic machine learning platform which provides the decision factors to be made during the developing of machine learning applications. In the proposed autonomic machine learning platform, machine learning processes are automated based on the specification of autonomic levels. This autonomic machine learning platform can be used to derive a high-quality learning result by minimizing experts’ interventions and reducing the number of design selections that require expert knowledge and intuition. We also demonstrate that the proposed autonomic machine learning platform is suitable for smart cities which typically require considerable amounts of security sensitive information.

Chaotic Encryption Algorithm With Key Controlled Neural Networks for Intelligent Transportation Systems

The security of sensitive information is vital in many aspects of multimedia applications such as Intelligent Transportation Systems (ITSs), where traffic data collection, analysis and manipulations is essential. In ITS, the images captured by roadside units form the basis of many traffic rerouting and management techniques, and hence, we should take all precautions necessary to deter unwanted traffic actions caused by malicious adversaries. Moreover, the collected traffic images might reveal critical private information. Consequently, this paper presents a new image encryption algorithm, denoted as ChaosNet, using chaotic key controlled neural networks for integration with the roadside units of ITSs. The encryption algorithm is based on the Lorenz chaotic system and the novel key controlled finite field neural network. The obtained cryptanalysis show that the proposed encryption scheme has substantial mixing properties, and thus cryptographic strength with up to 5% increase in information entropy compared to other algorithms. Moreover, it offers consistent resistance to common attacks demonstrated by nearly ideal number of changing pixel rate (NPCR), unified averaged changed intensity (UACI), pixel correlation coefficient values, and robustness to cropped attacks. Furthermore, it has less than 0.002% difference in the NPCR and 0.3% in the UACI metrics for different test images.

Design and Analysis of DNA Encryption and Decryption Technique based on Asymmetric Cryptography System

Security of sensitive information at the time of transmission over public channels is one of the critical issues in digital society. The DNA-based cryptography technique is a new paradigm in the cryptography field that is used to protect data during transmission. In this paper we introduce the asymmetric DNA cryptography technique for encrypting and decrypting plain-texts. This technique is based on the concept of data dependency, dynamic encoding and asymmetric cryptosystem (i.e. RSA algorithm). The asymmetric cryptosystem is used solely to initiate the encryption and decryption processes that are completely conducted using DNA computing. The basic idea is to create a dynamic DNA table based on the plaintext, using multi-level security, data dependency and generating 14 dynamic round keys. The proposed technique is implemented using the JAVA platform and its efficiency is examined in terms of avalanche property. The evaluation process proves that the proposed technique outperforms the RSA algorithm in terms of avalanche property.

Identity-Based Auditing for Shared Cloud Data With Efficient and Secure Sensitive Information Hiding

The advent of cloud computing arouses the flourish of data sharing, promoting the development of research, especially in the fields of data analysis, artificial intelligence, etc. In order to address sensitive information hiding, auditing shared data efficiently and malicious manager preventing, we propose an identity-based auditing scheme for shared cloud data with a secure mechanism to hide sensitive information. This scheme provides a solution that allows users to share plaintext with researchers and keeps sensitive information invisible to the cloud and researchers at the same time. Besides, a formal security analysis is given to prove the strong security of the proposed scheme. Performance evaluation and experimental results demonstrate that our scheme is significantly more efficient over the existing scheme due to our novel mechanism for sensitive information hiding and simplifying signature algorithm. Compared to the existing approach to audit the integrity of shared data with sensitive information hiding, our scheme has desirable features and advantages as follow. Firstly, previous work has failed to construct a secure scheme to prevent malicious manager. We fill this gap and guarantee the integrity and authenticity of shared data. Secondly, our scheme constructs a novel system model to support high concurrency and massive data in the real scenario.

A software package for the application of probabilistic anonymisation to sensitive individual-level data: a proof of principle with an example from the ALSPAC birth cohort study

Individual-level data require protection from unauthorised access to safeguard confidentiality and security of sensitive information. Risks of disclosure are evaluated through privacy risk assessments and are controlled or minimised before data sharing and integration. The evolution from ‘Micro Data Laboratory’ traditions (i.e. access in controlled physical locations) to ‘Open Data’ (i.e. sharing individual-level data) drives the development of efficient anonymisation methods and protection controls. Effective anonymisation techniques should increase the uncertainty surrounding re-identification while retaining data utility, allowing informative data analysis. ‘Probabilistic anonymisation’ is one such technique, which alters the data by addition of random noise. In this paper, we describe the implementation of one probabilistic anonymisation technique into an operational software written in R and we demonstrate its applicability through application to analysis of asthma-related data from the ALSPAC cohort study. The software is designed to be used by data managers and users without the requirement of advanced statistical knowledge.

Unconditional security of a K-state quantum key distribution protocol

Quantum key distribution protocols constitute an important part of quantum cryptography, where the security of sensitive information arises from the laws of physics. In this paper, we introduce a family of key distribution protocols which generalize the PBC00 protcol. We compare its key with the well-known protocols such as BB84, PBC00 and generation rate to the well-known protocols such as BB84, PBC0 and R04. We also state the security analysis of these protocols based on the entanglement distillation and CSS codes techniques.

An encryption algorithm for user's sensitive information resources in network database

At present, the encryption process of simple one-dimensional chaotic system has limitations, which leads to the poor security of sensitive information in the network database. To solve this problem, in this paper, a secondary encryption algorithm based on NCA mapping was proposed for user’s information resource with spatio-temporal chaotic. By using the sensitivity, scrambling and randomness characteristics of initial value in dual chaotic system which was based on Logistic mapping combined with Henon mapping, the algorithm was applied to the generation of key, to make double encryption of plaintext. The dual chaotic system which combined Logistic mapping and Henon mapping was improved, and a new spatio-temporal chaotic system based on NCA mapping was constructed. NCA mapping was used to control the scrambling process of sensitive information, and the spatio-temporal chaotic sequence was used to change the diffusion process of sensitive information, to complete the encryption of user’s sensitive information resource in network database. The experimental results show that the proposed algorithm can effectively encrypt sensitive information and improve the security of network database operation.

Isolating Host Environment by Booting Android from OTG Devices

With the integration of smartphone into daily life, end users store a large amount of sensitive information into Android device. For protecting the sensitive information, a method of multi-booting Android OS from On-The-Go (OTG) device is proposed to meet the requirements of end users in different scenarios. The proposed method utilizes system domain isolation to guarantee the security of sensitive information on different Android OS. The difference with other solutions is that our proposed solution does not add additional components to Android OS, which makes the overhead of Android runtime has been effectively controlled. A prototype of the proposed method is implemented and deployed into the real android device to evaluate the effectiveness, the efficiency and the performance overhead. The experiment results show that the performance overhead is reasonable and our method can effectively mitigate the risk of sensitive information leakage when booting different Android instance in the same Android device.

Secure Quantum Steganography Protocol for Fog Cloud Internet of Things

The security of sensitive information is an urgent need in today’s communication, principally in cloud and Internet of Things (IoT) environments. Therefore, a well-designed security mechanism should be carefully considered. This paper presents a new framework for secure information in fog cloud IoT. In the framework, the user in one location embeds his/her valuable data via the proposed quantum steganography protocol and uploads the covered data to the fog cloud. The intended receiver in another location accesses the data from the fog cloud and extracts the intended content via the proposed extraction approach. This paper also presents a novel quantum steganography protocol based on hash function and quantum entangled states. To the best of our knowledge, there is no prior quantum steganography protocol that authenticates an embedded secret message. In the suggested protocol, the hash function is utilized to authenticate embedded secret messages. The presented protocol is secure against well-known attacks, such as message, man-in-the-middle, and no-message attacks. In addition, it does not consume additional channels besides the proposed one to send a secret message or verify security. The proposed approach is nominated for use in fog and mobile edge computing.

The access to secret evidence in expulsion proceedings under the European Convention on Human Rights

The key question tackled in this paper is how States as Parties to the ECHR can use and protect security-sensitive information (secret evidence) in expulsion proceedings. The purpose of this paper is to explore to what extent States may be justified to refuse to disclose to a non-citizen evidence related to State security which constitutes grounds for an expulsion decision, and not violate aliens’ procedural rights. Apart from the procedural mechanisms analysed in the paper, the major problems regarding the use of secret evidence in immigration cases are addressed. The views expressed in this article are solely those of the author.