Third-party Attacks Research Articles

Measurement-device-independent quantum secure multiparty summation based on entanglement swapping

In this paper, we propose a measurement-device-independent (MDI) quantum secure multiparty summation protocol based on entanglement swapping. The protocol is capable of providing a secure modulo-2 summation method for n parties. Our protocol uses Bell states as the information vehicle and establishes encryption through entanglement swapping, and each party encodes the information orderly to complete the summation process through the simple single-qubit operation. In contrast to previous protocols, there is no pre-shared private key sequence and key storage process in our protocol, which helps to reduce the possibility of information leakage in transmission. Our protocol supports multiple summations by n participants, which improves quantum resource utilization. The protocol can be implemented with linear-optical devices. Furthermore, it can resist multiple attack modes including the intercept-resend attack, entangle-and-measure attack, dishonest third-party attack, and parties’ attack. Most significantly, the protocol enables to eliminate all side-channel attacks against detectors based on the MDI principle. Therefore, the protocol has advantages of high security, high efficiency, and good feasibility.

Multi-message multi-receiver signcryption scheme based on blockchain.

In conventional message communication systems, the practice of multi-message multi-receiver signcryption communication encounters several challenges, including the vulnerability to Key Generation Center (KGC) attacks, privacy breaches and excessive communication data volume. The KGC necessitates a secure channel to transmit partial private keys, thereby rendering the security of these partial private keys reliant on the integrity of the interaction channel. This dependence introduces concerns regarding the confidentiality of the private keys. Our proposal advocates for the substitution of the KGC in traditional certificateless schemes with blockchain and smart contract technology. Parameters are publicly disclosed on the blockchain, leveraging its tamper-proof property to ensure security. Furthermore, this scheme introduces conventional encryption techniques to achieve user identity privacy in the absence of a secure channel, effectively resolving the issue of user identity disclosure inherent in blockchain-based schemes and enhancing communication privacy. Moreover, users utilize smart contract algorithms to generate a portion of the encrypted private key, thereby minimizing the possibility of third-party attacks. In this paper, the scheme exhibits resilience against various attacks, including KGC leakage attacks, internal privilege attacks, replay attacks, distributed denial of service attacks and Man-in-the-Middle (MITM) attacks. Additionally, it possesses desirable security attributes such as key escrow security and non-repudiation. The proposed scheme has been theoretically and experimentally analyzed under the random oracle model, based on the computational Diffie-Hellman problem and the discrete logarithm problem. It has been proven to possess confidentiality and unforgeability. Compared with similar schemes, our scheme has lower computational cost and shorter ciphertext length. It has obvious advantages in communication and time overhead.

VC-PPQ: Privacy-Preserving Q-Learning Based Video Caching Optimization in Mobile Edge Networks

Mobile edge caching has great advantages in alleviating video traffic pressure and reducing transmission delay, which is considered as a hopeful solution to improve video resource utilization and achieve faster service response. However, due to insufficient and non-real time acquisition of the status between edge servers and mobile users, it is still difficult for existing solutions to improve the video quality of experience (VQoE) for mobile users. Besides, due to the mobility of users and malicious third-party attacks, users may suffer the risk of personal privacy (e.g. location, trajectory, preference, etc.) leakage when requesting video services that are scattered in different areas. In order to efficiently deal with these problems, this paper proposes a privacy-preserving Q-learning based video caching optimization framework in mobile edge networks (VC-PPQ), including a privacy scheme for user data and a dynamic video caching algorithm. Specifically, in the first task, the local differential privacy model is leveraged to protect the locations and preferences of users. Then, a data aggregation model is provided to make trade-off between aggregation accuracy and privacy protection. In the second task, we further obtain the video popularity in user's area by a computation service model, then formulate a caching objective function combined with transcoding technologies. Afterwards, Q-learning is adopted to obtain the goal of caching optimization, which can achieve low delay and high hit ratio. Finally, extensive simulations prove that our VC-PPQ framework delivers prominent performance advantages in terms of user privacy and caching services, which greatly improves the VQoE of users.

Cryptanalysis and improvement on two party quantum private comparison based on seven-qubit and eight-qubit states

Ji et al. [Mod. Phys. Lett. A 34, 1950229 (2019)] and Fan et al. [Mod. Phys. Lett. A 37, 2250026 (2022)] proposed two-party quantum private comparison (QPC) protocols based on 7-qubit and 8-qubit states, respectively. However, these two QPC protocols did not consider third-party (TP) attacks. Therefore, this study focuses on TP attacks and demonstrates that the property of a 7-qubit or 8-qubit entanglement state is useless in this attack situation; that is, the participant wastes resources to maintain the qubits. For the same assumption environment proposed by Ji et al. and Fan et al., this study proposes an improvement and simplification protocol that allows participants to reach the goal of private comparison by using only classical computation and the classical communication channel without any entanglement state.

Scattering of Perfect Optical Vortex Beams: Physical Unclonable Function

Now-a-days, data security has become an important part for anyone connected to the web. Data security ensures that data is getting transmitted securely without any modifications or alterations to the intended receiver. To achieve data security, we have focused on the cryptography which helps to protect our information from being stolen or third-party attacks. Encryption techniques demonstrate an excellent deal of data security when implemented in an optical system such as Holography due to the inherent physical properties of light and the precision it demands. Such systems are somehow vulnerable during their digital implementation under various attacks called crypt-analysis due to the predictable nature of security keys used for the encryption. In this work, we are presenting a Physically Unclonable Functions (PUFs) for producing a robust (stable over time) security key for digital encryption systems. More specifically, we have used the correlation functions of scattered perfect optical vortex beams for the generation of keys which can be used for encryption of data. Here, we convert the 2-D correlation function to 1-D key and digitize based on the average value which will be the random sequence of 1s and 0s. In the best of our knowledge, we are reporting this work for the first time. The experiment and simulation results are well matched.

Damage evaluation and protection method of resin pipe for gas conduit subjected to impact load

Medium-density polyethylene pipe has been widely introduced to low-pressure gas pipes because of its high flexibility and corrosion resistance. However, many third-party damages due to the impact of heavy equipment have been reported during the construction every year, thus, to prevent the third-party damage, materials such as high-density polyethylene and polyamide have been considered as the new gas pipe candidates. However, their impact resistance capacity under the third-party attack has not been clarified. In this study, static and impact loading experiments were conducted to compare load resistance capacities. As a result, it was revealed that the high-density polyethylene pipe and the polyamide pipe had higher static load capacity and impact resistance than the medium-density polyethylene pipe. By comparing the absorbed energy of the static test and the impact test and calculating the pseudo absorbed energy of the impact test, the evaluation formula judging the safer side of whether the penetration occurred was proposed. Furthermore, as one of the methods to protect the gas pipe, the protective effect of winding a sheet made of reinforced fiber and non-woven fabric was clarified.

Secured Aadhar Based E-Voting Application using RSA

The invasion of wireless, mobile phones and various internet technologies has resulted in the new implementation, making the e-voting method very quiet and effective. The E-voting ensures the option of a suitable, simple and secure manner of incarceration and the complete number of votes in an election. This study work offers the e-voting requirements and necessities using a platform based on Android or the internet. E-voting implies voting through electronic devices or websites in the election. An e-voting application is developed using the android or web platform. This request enables the user cast the ballot without going to the polling booth. To prevent fraud respondents using the scheme, the application utilizes adequate authentication steps. Once the polling process is completed in the electronic device, the outcomes can be obtained in a fraction of seconds instantly. All voting counts of applicants are encrypted using RSA and stored in the database to prevent third-party attack and disclosure of outcomes. Upon completion of the meeting, the admin can decrypt the count of votes and publish the outcome and finish the voting process.

An Anti-Eavesdropping Method in Data Collection of Smart Meter

At present, DL/T 645-2007 communication protocol is used to collect data for smart meters. However, in the beginning, this protocol is not designed to be a secure protocol and only the function and reliability were taken into account. Plaintext is used in the protocol for data transmission, as a result, attackers can easily sniff the information and cause information leakage. In this paper, man-in-the-middle attack was used to verify that the smart meter data acquisition process was vulnerable when facing third-party attacks, and this can result in data eavesdropping. In order to resist such risks and prevent information being eavesdropped, a real ammeter communication experimental environment was built, it realized two-way identity authentication between data acquisition center and ammeter data center. At the same time, RSA (Rivest-Shamir-Adleman) was used to encrypt the meter data, which encrypted the collection, storage process of meter data and ensured the confidentiality and integrity of the meter data transmission. Compared with other methods, this method had obvious advantages. The analysis showed that this method can effectively prevent the data of smart meters from being eavesdropped.

A Blockchain Approach to Mitigate Information Security in a Public Organization for Ecuador

It was analysed in a general way and the security problem of the public organizations of Ecuador was determined. The objective is to generate a prototype in a blockchain diagram, based on an algorithm using flowchart techniques to provide robustness against failures, third-party attacks and mitigate information vulnerabilities. The deductive and exploratory research method was used in order to analyse the information available in the medium and scientific articles. Resulted an algorithm developed through flow diagram techniques to improve the processing of information in a public organization in Ecuador from the use of the Blockchain technology and the use of the SHA 256 algorithm. It was concluded that access to the data to a generic public organization of Ecuador will have an alternative to improve the security of the information with the implementation of the blockchain.

Context residual energy-based trust management in mobile ad hoc networks

The rapid growth of network communications also discloses the problem of vulnerability to various third-party attacks. MANETs being unpredictable with its infrastructure and topology, it is prone to various attacks easily. Trust plays a pivotal role in the MANETs in predicting the trust values dynamically based on the particular situation or context of a node. In this paper we propose a context residual energy-based trust management in mobile ad hoc networks (CEBTM) by sharing the context data onto the other nodes in the network would give a better solution to this problem. We considered much context data like residual energy and packet drop strategy of the nodes are considered. An agent helps in retrieving the two context data from the neighbour nodes. Using this datum, the weight and reputation-based trust in each node with respect to the context data are found and is then fed into the fuzzy filter for analysis. This feature would help to understand whether the computed trust value is trustworthy or not. If not, a negative alarm is generated and sent to the other nodes for revocation. The proposed system is simulated in the ns-2 environment.

The code not taken: China, the United States, and the future of cyber espionage

China has drawn unwanted attention with its aggressive efforts to break into US government and business computer networks to steal information. The attacks are aimed at giving China a competitive economic advantage, and President Barack Obama is among those concerned that their continuation could weaken the United States economically. Washington has begun working with Beijing on cyber issues; more cooperation is needed in a range of many other areas. The question moving forward, the author writes, is whether the two countries can reduce the chances of destructive cyber conflict while continuing to conduct espionage against each other? Both China and the United States have a common interest in protecting national infrastructure from third-party attacks, but neither appears willing to give up cyber espionage.

Can Issue Linkage Improve Treaty Credibility?

Can issue linkage, the combining of multiple issues into a single agreement, enhance the credibility of an agreement? I use the alliance relations of buffer states (states located between two recently or currently warring rivals) to test the claim that issue linkage enhances compliance with treaty obligations. The alliance relations of buffer states create a “hard case” for treaty compliance because, by being prone to invasion and occupation, buffer states have difficulties inducing states to remain committed to an alliance agreement. Hence, if linkage provisions can enhance the credibility of alliance commitments for buffer states, then linkage provisions should improve treaty compliance in nearly any context. I find that buffer states in alliances with trade provisions experience fewer opportunistic violations of the alliance terms, avoid occupation and invasion at a higher rate, and experience fewer third-party attacks than buffer states in other alliance arrangements.

Authentication protocol using an identifier in an ad hoc network environment

This paper deals with device connections in a trust-based ad hoc network. Because a temporary device frequently joins or leaves a network, the authentication and security technology should be prepared for the malicious devices used in third-party attacks. An authentication scheme with the existing certification and ID, and security technology using symmetric and public keys are used. Therefore, in this paper we propose using two devices that have not shared information for mutual generation of authentication ID. The use of an authentication ID can establish mutual trust and provide security and efficiency for communication and generation of a symmetric key. Our analysis results show that an authentication operation reduction of up to 57%, compared to related work, is achieved by our protocol.

Attacking Recommender Systems: A Cost-Benefit Analysis

A work highlights the lack of robustness collaborative recommender systems exhibit against attack. This vulnerability can lead to significantly biased recommendations for target items. Here, we examine such attacks from a cost perspective, focusing on how attack size - that is, the number of ratings inserted - affects attack success. We introduce a framework for quantifying the gains attackers realize, taking into account the financial cost of mounting the attack. A cost-benefit analysis of third-party attacks on recommender systems shows that attackers realize profits even when incurring costs associated with rating insertions.