SSL Protocol Research Articles

Efficiency comparison of message brokers

The aim of the article is to compare three main brokers used in the development of web applications: RabbitMQ, Apache Kafka and Apache Pulsar. To conduct the research, a custom application was created to compare two key metrics in the context of message queue performance. These metrics are: latency and number of processed messages per second. The conducted experiments showed that in scenarios requiring processing of backlogged messages by the broker and in cases of minimizing the impact of the SSL protocol on broker performance, Apache Pulsar proved to be the best solu­tion. In the scenario examining message delivery delays, RabbitMQ turned out to be the best tool, while in the case of examining the stability of message processing in real-time, the best results were achieved with Apache Kafka.

Signature identification and user activity analysis on WhatsApp Web through network data

WhatsApp messenger is a popular instant messaging application that employs end-to-end encryption for communication. WhatsApp Web is the browser-based implementation of WhatsApp messenger. Users of WhatsApp communicate securely using SSL protocol. Encryption and use of common port for communication by multiple applications poses challenge in traffic classification for application identification. It is highly needed to analyze the network traffic for the purpose of QoS, Intrusion Detection and application specific traffic classification. In this paper, we have done traffic analysis on the network packets captured through data transfer in whatsApp web. In the result, we have explored the user activities such as message texting, contact sharing, voice message, location sharing, media transfer and status viewing. Packet level traffic analysis of user activities reveal patterns in the encrypted SSL communication. This pattern is identified across SSL packet lengths for WhatsApp media transfer and voice message communication. Other important features WhatsApp is the ability to view the status of the message being sent. We have identified the read and unread message status in these data packets by exposing signatures in the network layer. These signatures are identified with the help of the SSL lengths in the TLS header information of WhatsApp Web network traffic traces. Various other information on WhatsApp traffic presented in our study is relevant to the version of WhatsApp Web v0.3.2386. Also in this work machine learning based classifier is trained to classify the encrypted malicious, normal network traffic. From the results it is clear that SVM classifier gives the highest accuracy of 0.9666.

Improving the security level of the information system using the SSL protocol

An important role in the organization of production sites is played by the security of information for the process of planning the management of the production site. Information security is a very important component of any information system used on the production site. Improving the quality of information system security can be achieved only by a set of data protection measures. The results of the implementation of these measures should provide a clear picture of the information system used, about users, about the separation of powers, etc., which will allow making the right management decisions in the event of an intrusion into the system. Improving the security of information systems, taking into account modern requirements of information security policies, involves the development of data protection concepts and the introduction of the latest encryption methods into the information system. The paper presents the concept of building an information system using data encryption based on SSL encryption. SSL — Secure Socket Layer, the level of secure sockets. SSL encryption is characterized by the creation of a cipher with a public key. This allows you to authenticate the user and the server by resorting to digital signature technology. In addition, this is how the session key is generated to develop a fast symmetric cipher algorithm, which allows you to encrypt a large mass of information.

Implementation of Omni-D Tele-Presence Robot Using Kalman Filter and Tricon Ultrasonic Sensors

The tele-presence robot is designed to set forth an economic solution to facilitate day-to-day normal activities in almost every field. There are several solutions to design tele-presence robots, e.g., Skype and team viewer, but it is pretty inappropriate to use Skype and extra hardware. Therefore, in this article, we have presented a robust implementation of the tele-presence robot. Our proposed omnidirectional tele-presence robot consists of (i) Tricon ultrasonic sensors, (ii) Kalman filter implementation and control, and (iii) integration of our developed WebRTC-based application with the omnidirectional tele-presence robot for video transmission. We present a new algorithm to encounter the sensor noise with the least number of sensors for the estimation of Kalman filter. We have simulated the complete model of robot in Simulink and Matlab for the tough paths and critical hurdles. The robot successfully prevents the collision and reaches the destination. The mean errors for the estimation of position and velocity are 5.77% and 2.04%. To achieve efficient and reliable video transmission, the quality factors such as resolution, encoding, average delay and throughput are resolved using the WebRTC along with the integration of the communication protocols. To protect the data transmission, we have implemented the SSL protocol and installed it on the server. We tested three different cases of video resolutions (i.e., , and ) for the performance evaluation of the video transmission. For the highest resolution, our TPR takes 3.5 ms for the encoding, and the average delay is 2.70 ms with 900 × 590 pixels.

Open VPN Application Under Campus Network

For security and intellectual copyright considerations, colleges and universities generally have the same problem: non-campus residents cannot access many resources on the campus network. OpenVPN is an open source based on the SSL protocol, combined with the actual needs of campus network applications, it describes in detail how to use the open source OpenVPN technology on the LINUX operating platform to build a user access system. Users can quickly access campus resources by establishing a connection with the OpenVPN server through the client program. Without additional investment, the confidentiality of data is ensured. It allows users to break through the limitations of time and space, which not only facilitates users, but also improves the utilization rate of campus network information resources.

Information And Consulting Service Using In The Organization Of Personnel Management

The aim of the article is to develop a procedure for implementing an information and consulting web service for personnel management using modern information technologies. It is proposed to use the object-oriented programming language Java. The work of the program is divided into separate blocks, which can be easily adjusted or even replaced. For this, Spring MVC web technologies are used.The system combines complex algorithms and calculations, while it has high flexibility and extensibility with the ability to implement a high level of protection. Another important aspect of developing a web application is ensuring an appropriate level of security with the ability to configure data transfer through encrypted communication channels using the SSL protocol. To increase the flexibility of the system, it is proposed to implement the relationship with the database as a separate module with the ability to adjust it without affecting the main algorithm.In the information and consulting web-service of the district level, a single program operates - the user interface for access to the client database. At this level, they collect, register and process data from enterprises in the region. This is preceded by the preliminary stages of developing the infological model of the subject area, for example, using the ER-model and data design, with further reflection in the datalogical relational model and its optimization (normalization). For the practical implementation of such a datalogical model, a distributed SQL-Server database management system can be used.

Security of the sensory data in the cloud

The integration between the clouds and the sensor networks makes it possible to solve the problem of the limited computing power and the limited capacity of the sensor networks, as well as for the storage and processing of the collected data, without unnecessarily increasing the cost of the sensor networks. A significant challenge is the security of the data transmission connection between the sensors and the cloud. An algorithm has been proposed that ensures security in the transmission of data from the sensor network to the cloud via the DLS security protocol. The algorithm is implemented through the ThingSpeak cloud, and the connection between the sensor network and the cloud is implemented through the MQTT protocol, creating the flow that will gather sensor data, using Node-RED and Generate a self-signed certificate with OpenSSL. The algorithm was tested with Wireshark software, which confirmed that the data packets sent from the sensor network to ThingSpeak use the MQTT data transfer protocol and connect to communication port 8883, which is protected/encrypted via TLS / SSL protocol.

Anomaly-Based Detection of Attack on SSL Protocol using Pyod

At the current era Security and Protection is of vital significance. While there is no system that is immune to attack, a steady and effective system-security-framework is fundamental to ensuring the protection of data. On a fundamental-level, we are living in a more technologically advanced world than we were as of a decade ago. This rise in the broad utilization of technology carried with it and ascent in network attack. Networked PCs have taken over practically all parts of our lives, they store and deal with a ton of data that whenever traded off could bring about critical results. Secure Sockets Layer and Transport Layer Security(SSL/TLS) are presently broadly embraced innovation to give security. SSL/TLS convention is made to give privacy to delicate data trade over the Web. They can be used to secure secrecy and protection however can in like manner be used to shroud vindictive exercises. Regardless, assurance right now in all the information being scrambled independent of whether the information is malignant or not. The SSL-Attackers don’t utilize a particular system for the assault, the attacker may attempt to stick the system by making superfluous-traffic. Using Anomaly-Detection-technique we find the outliers by analyzing the data-captured using Wireshark and identify any possible attack on the network. For detecting outlier in the traffic we have used ABOD technique contained in the PyOD-library, which is an open-source toolbox provided in Python for identification of anomaly on multi-variate information. Anomaly-Based-Detection is a practical and realistic option for identification of attack against security-convention.

Preventing phishing attacks using text and image watermarking

SummaryPhishing is a form of identity theft used to illegally gather personal and financial information by providing fake web pages designed to mimic the website of a legitimate business. In this paper, we propose a novel anti‐phishing approach based on using imperceptible watermarking and monitoring the HTTP requests. In the server‐side, a URL dependent watermark is generated and embedded in the elements of the web page, which are logo image and HTML/CSS files. In the client side, to authenticate the website and check its safety, the watermark is regenerated and compared with the extracted watermarks from the elements of the webpage. Security analysis of the proposed method demonstrates its robustness against some common attacks. The proposed method performs fully automatically and without user interaction. It can be simply implemented and used for all kinds of websites, either secured or not secured with SSL protocol.

Client Centric Model for Secure Session Management for SAAS in Cloud Environment

Now days Cloud computing is playing major role in IT Sector in terms of reducing expenditure and also playing major part in earning revenue but security and privacy issues making clients in doubt of adapting Cloud environment. Since cloud environment is new which contains three parties (i.e., Cloud service user, Cloud service provider/Cloud user, Cloud provider) the way of protecting the users private information will be different which may not be same as in older web application environments. For this reason, we propose in this paper that at the time of Service Level Agreement (SLA) provider provides online registered Software Component (SC) to be installed at the consumer (Client side) as add-on or as a software component as part of Browser (runtime component) which will have an unique-id and will be activated by the provider at the time of installation of component at client side over SSL protocol. The ID of the component is generated by an Application key or an enterprise key. When the client sends data (user-id, password, message) every time it is encrypted by SC along with ID by using Encryption scheme. So by using this mechanism we propose some of the solutions in this paper to session management and attacks at the client side in Cloud computing environment (SaaS).

Development of the IMB Model and an Evidence-Based Diabetes Self-management Mobile Application.

ObjectivesThis study developed a diabetes self-management mobile application based on the information-motivation-behavioral skills (IMB) model, evidence extracted from clinical practice guidelines, and requirements identified through focus group interviews (FGIs) with diabetes patients.MethodsWe developed a diabetes self-management (DSM) app in accordance with the following four stages of the system development life cycle. The functional and knowledge requirements of the users were extracted through FGIs with 19 diabetes patients. A system diagram, data models, a database, an algorithm, screens, and menus were designed. An Android app and server with an SSL protocol were developed. The DSM app algorithm and heuristics, as well as the usability of the DSM app were evaluated, and then the DSM app was modified based on heuristics and usability evaluation.ResultsA total of 11 requirement themes were identified through the FGIs. Sixteen functions and 49 knowledge rules were extracted. The system diagram consisted of a client part and server part, 78 data models, a database with 10 tables, an algorithm, and a menu structure with 6 main menus, and 40 user screens were developed. The DSM app was Android version 4.4 or higher for Bluetooth connectivity. The proficiency and efficiency scores of the algorithm were 90.96% and 92.39%, respectively. Fifteen issues were revealed through the heuristic evaluation, and the app was modified to address three of these issues. It was also modified to address five comments received by the researchers through the usability evaluation.ConclusionsThe DSM app was developed based on behavioral change theory through IMB models. It was designed to be evidence-based, user-centered, and effective. It remains necessary to fully evaluate the effect of the DSM app on the DSM behavior changes of diabetes patients.

基于TCM的SSL协议的优化

基于TCM的SSL协议的优化

Formally sound implementations of security protocols with JavaSPI

Abstract Designing and coding security protocols is an error prone task. Several flaws are found in protocol implementations and specifications every year. Formal methods can alleviate this problem by backing implementations with rigorous proofs about their behavior. However, formally-based development typically requires domain specific knowledge available only to few experts and the development of abstract formal models that are far from real implementations. This paper presents a Java-based protocol design and implementation framework, where the user can write a security protocol symbolic model in Java, using a well defined subset of the language that corresponds to applied π -calculus. This Java model can be symbolically executed in the Java debugger, formally verified with ProVerif, and further refined to an interoperable Java implementation of the protocol. Soundness theorems are provided to prove that, under some reasonable assumptions, a simulation relation relates the Java refined implementation to the symbolic model verified by ProVerif, so that, for the usual security properties, a property verified by ProVerif on the symbolic model is preserved in the Java refined implementation. The applicability of the framework is evaluated by developing an extensive case study on the popular SSL protocol.

Abstract 2606: Accelerating clinical research using cloud technology

Abstract Introduction: Existing protocols for clinical trials are typically slow and error-prone due to lack of informatics tools for sharing and accessing clinical data in real time. There is an increasing pressure on clinical trial laboratories to change the way clinical research is performed so as to minimize costs and speed up R&D, which in turn will produce better and faster outcomes. Cloud-based technologies are emerging as one of the most viable options for streamlining the heavily regulated clinical research processes. Description: Cloud-based software tools such as laboratory information management systems (LIMS) are much more capable than traditional paper-based or desktop tools for accelerating a clinical trial life cycle. Cloud-based LIMS enhance collaboration between sponsors and investigators, enabling more timely and accurate sharing of information with pharmaceutical companies. Summary: Many sponsors are now adopting cloud-based LIMS for conducting clinical trials. The onus is on service providers to keep pace with the demands of the industry, comply with the regulatory framework and at the same time deliver value to CROs and testing labs by reducing costs and maintaining efficiency. Conclusion: CloudLIMS.com has developed a cloud based software called CloudLIMS Lite for managing clinical research workflows to provide a cost effective solution to the clinical research industry. Being on the cloud, CloudLIMS Lite facilitates users to access and share data in real time, across multiple laboratories in different geographical locations and adhere to the regulatory framework. This in turn improves their operational efficiency. CloudLIMS Lite uses 256-bit AES encryption SSL protocol, thereby enabling secure data transmission. CloudLIMS Lite deploys a separate database layer for each of its customers making it impossible for any third party to view or access data. Citation Format: Arun Apte, Shonali Paul, Aditi Gade, Carolyn Compton. Accelerating clinical research using cloud technology [abstract]. In: Proceedings of the American Association for Cancer Research Annual Meeting 2017; 2017 Apr 1-5; Washington, DC. Philadelphia (PA): AACR; Cancer Res 2017;77(13 Suppl):Abstract nr 2606. doi:10.1158/1538-7445.AM2017-2606

An Authentication Technique for Accessing De-Duplicated Data from Private Cloud using One Time Password

Objective: The main aim is to de-duplicate the redundant files in the cloud and also to improve the security of files in public cloud service by assigning privileges to the documents when it is uploaded by confidential user. Methods: To achieve the objective the authors have used the AES algorithm to encrypt the file stored after de-duplication in the cloud. De-duplication is done based on comparison of contents, file type and size. For an authorized user to access the file from the cloud, generation of OTP using SSL protocol is adopted. Findings: Files uploaded in the cloud are encrypted using traditional encryption algorithms which don't provide high levels of security. Files can be accessed by anyone who is authorized. Privileges are not considered. During de-duplication, only the name and size of the files are considered. Application: Files within the public cloud can't be viewed by everyone who has registered with the cloud. Those who have the respective privileges can only view the file. Proof of Ownership is assured. Since de-duplication is done based on the content redundancy within the cloud storage is avoided. Usage of OTP ensures that the content is viewed by the individuals who have the respective privileges related to the file. These concepts provide additional security to the files stored in the public environment.

Secure Framework to Mitigate Man-in-the-Middle Attack over SSL Protocol

Background/Objectives: Technology has driven the conventional shopping from shop to internet based application tools like PCs, Laptops and smartphones and it is termed as E-Commerce, in which security plays a vital role since it deals with financial transactions. SSL/TLS is responsible for providing security to the application data on both client and server side. Method: An overview on E-Commerce security requirements, SLL layer protocol and security analysis of the protocol is conducted. Findings: Since E-Commerce services are very important, due to lack of efficient cryptographic encryption techniques, PKI infrastructure and digital signature deployment intruders are intercepting sensitive and valuable information of clients. So we conducted a survey on different attacks on SSL layer of E-Commerce applications and find that Man in the Middle (MitM) attack like phishing attack became a severe attack. Improvements: We propose a frame work to mitigate the MitM in SSL protocol which has there modules like front end authentication, backend authentication and bogus CA identification is proposed. Due to dual end authentication its secure compared to traditional SSL. In our future work we implement our proposed framework.

地域医療ネットワークのための暗号化パスワード・暗号化通信・リアルタイム暗号データベース

地域医療ネットワークのための暗号化パスワード・暗号化通信・リアルタイム暗号データベース

A New Network Traffic Classification Method Based on Classifier Integration

With development of scale, diversity and complexity of network traffic, the drawbacks of traditional machine learning methods on traffic classification is gradually exposed, especially the false positive problem in large-scale real network traffic classification is particularly serious. In this paper, aiming at reducing the false positive rate of network traffic classification, an effective network traffic classification method --- CMM method. CMM method contains three steps, including dividing the training set into clusters, forming sub-classifiers, and classifier integration in accordance with the principle of minimization and maximization. In this paper, we firstly demonstrate the effectiveness of this method in reducing the false positive rate. Secondly, we conduct experiments in large-scale national backbone network, such as the SSL protocol classification and experimental results verify the effectiveness of this method in large-scale the actual network traffic classification.

Providing Security to the Architecture of Presence Servers

Mobile cloud Computing is a new emerging technology. This technology supports many applications and one such application is presence enabled application. Mobile presence server is the main component in presence enabled applications and they provide presence services to all mobile users in the network. As number of mobile user increases to a great extent there arises buddy list search problem. In-order to solve this problem a scalable server architecture called presence cloud has been introduced. To provide security to the above server architecture SSL protocol is used. The performance is evaluated by using the parameters such as search latency and response time. SSL protocol involves determination and exchange of keys which increases buddy list search delay and response time. Therefore SSL session resumption is used to decrease this searching time and response time.

An Energy Efficient Protocol For The Internet Of Things

Abstract The Internet of Things (IoT) is a technological revolution that represents the future of computing and communications. One of the most important challenges of IoT is security: protection of data and privacy. The SSL protocol is the de-facto standard for secure Internet communications. The extra energy cost of encrypting and authenticating of the application data with SSL is around 15%. For IoT devices, where energy resources are limited, the increase in the cost of energy is a very significant factor. In this paper we present the energy efficient SSL protocol which ensures the maximum bandwidth and the required level of security with minimum energy consumption. The proper selection of the security level and CPU multiplier, can save up to 85% of the energy required for data encryption.