Tight Security Research Articles

Kasus Ikhtilath di Kabupaten Pidie: Tinjauan Terhadap Strategi Penyelesaian

The research method used to understand the mechanism of resolving cases of ikhtilath in Pidie District is qualitative research with direct data collection in the field. The results of the research show that cases of ikhtilath are not directly handled by the local village or sub-district authorities, but are handed over to the competent authorities because the perpetrators of ikhtilath often come from outside the area. This is done to ensure that the cases are resolved in accordance with the law and to deter the perpetrators and other members of the community. The mechanism for resolving cases of ikhtilath in Pidie District involves a legal process according to Qanun No. 6 of 2014. This process involves several parties, such as investigators, prosecutors, judges, and witnesses at the scene. Despite challenges such as limited resources and minimal budget, efforts are made to prevent ikhtilath through tighter security, family supervision, and community outreach. The sanctions imposed on perpetrators of ikhtilath are in accordance with existing regulations, but the lack of community participation in prevention and the shortage of PPNS investigators are inhibiting factors in handling these cases.

Identity-Based Encryption with (Almost) Tight Security in the Multi-instance, Multi-ciphertext Setting

We construct an identity-based encryption (IBE) scheme that is tightly secure in a very strong sense. Specifically, we consider a setting with many instances of the scheme and many encryptions per instance. In this setting, we reduce the security of our scheme to a variant of a simple assumption used for a similar purpose by Chen and Wee (CRYPTO 2013, Springer, 2013). The security loss of our reduction is O(k)\\documentclass[12pt]{minimal} \\usepackage{amsmath} \\usepackage{wasysym} \\usepackage{amsfonts} \\usepackage{amssymb} \\usepackage{amsbsy} \\usepackage{mathrsfs} \\usepackage{upgreek} \\setlength{\\oddsidemargin}{-69pt} \\begin{document}$$\ extbf{O} (k)$$\\end{document} (where k\\documentclass[12pt]{minimal} \\usepackage{amsmath} \\usepackage{wasysym} \\usepackage{amsfonts} \\usepackage{amssymb} \\usepackage{amsbsy} \\usepackage{mathrsfs} \\usepackage{upgreek} \\setlength{\\oddsidemargin}{-69pt} \\begin{document}$$k $$\\end{document} is the security parameter). Our scheme is the first IBE scheme to achieve this strong flavor of tightness under a simple assumption. Technically, our scheme is a variation of the IBE scheme by Chen and Wee. However, in order to “lift” their results to the multi-instance, multi-ciphertext case, we need to develop new ideas. In particular, while we build on (and extend) their high-level proof strategy, we deviate significantly in the low-level proof steps.

Software Defined Netconomics

This paper is based on the fair analysis on the economic benefits of software defined networking. The paper will explain vividly the concept of software defined networking and its applications together with the economic advantage(s) with respect to both the client perspective and server perspective. In general, SDN provides lower hardware and operational cost in an excessive traffic load of nowadays users. It has tighter security and faster response time with improved management and planning of server controller. SDN when deployed provides better service(s) with respect to lowering cost and of course with better efficiency. Software Defined Network (SDN) is a great revolutionary idea to change IT Industry of which includes cloud computing and many others. The beauty of its architecture is the decoupling of the essential control and data planes from the application layer, thus the underlying infrastructure is abstracted but the network intelligence is logically centralized with state. This architecture gives access to the enterprise to control, program, automate, scale and secure the network according to the business needs, together with securing a safe benefit in competiveness that has risen due to fast advancement in technology. This architecture is even more important to fulfilling the demands of various clients in the current model of networking. The concept of SDN has the potential to change the current networking model. With SDN, for network services, the underlying network infrastructure can be abstracted by the administrators for many applications. In theory, it can be shown that SDN has many benefits over current IT systems but in practical systems, IT companies are reluctant to work with, tend to oppose nor are they ready to deploy SDN. In this paper, the economic benefits are explored and discussed without bias, and it will be shown that new protocol of SDN provides many economic benefits and guidance to IT companies to establish more secure and efficient network.

Tight security analysis of the public Permutation-based $ {{\textsf{PMAC_Plus}}} $

Tight security analysis of the public Permutation-based $ {{\textsf{PMAC_Plus}}} $

Analisis Standar Operasional Prosedur Dalam Pengamanan Pertandingan Sepak Bola

Supporters are people who provide active support. These supporters are different from ordinary football spectators who only see the football match because supporters are football spectators who support a certain team, and are ready to give up all their energy in motivating their favorite club. These football fans are very active and have excessive fanaticism for the team they support. It is this fanaticism that usually causes chaos and riots at every football match in Indonesia. Because riots and riots in soccer matches often occur, the police, in this case the police, tighten security at every soccer match. However, the tight security often leads to repressive actions that lead to violence against supporters by the police in securing football matches. The violence perpetrated by the security forces against the fans clearly violated the provisions of the applicable law. And this is a violation of the law for which there must be criminal accountability for the perpetrators of the violence so that there is no more violence experienced by fans in football matches.

A Novel Approach for Block Chain Technology based Cyber Security in Cloud Storage Using Hash Function

Block chain is generic name to describe the technology used by Bitcoin and other digital currency to record and secure transaction. This technology enables a highly accessible ledger with greatly reduced risk for tampering. The dynamic immutable, data ledger makes ideal for real time monitoring of the shipment of goods. Cloud is an important of distributed storage system of networking. Cloud system need for security, storage management, minimize the cloud cost and fast storage could be improved. The security using new most development security system of block chain technology is used to improve the cloud security. The data owner to be uploads the data on web page and access the folder. The user has been accessing the data on cloud storage using encryption and decryption using block chain based cyber security system. the problem for security in cloud storage because data transmission and data sharing, the alternate for security solution using Post Quantum-proof cryptography algorithm is used to improve the encryption and decryption process and more tight security for block chain technology for the cloud system. The SHA-3 512 Hash function algorithm automatically generate the key for data security enhancements of cloud networks. Post Quantum-proof cryptography algorithm has been improved the encryption Performance and reduced the power consumption, and increase the Latency performance, and boost up the security performances. Finally Post Quantum-proof cryptography algorithm for well support for security system of the cloud networks. Even some passwords, which are often cited as the weakest link in cyber security, may not be necessary.

Automation Bias and the “Goldilocks Effect” in Auditing Blockchain

ABSTRACT Blockchain technology appears to have unique characteristics such as inherent trust, immutability, transparency, and tighter security that might facilitate the audit process. Using a survey of AICPA members, we examine responses to the evaluation of audit evidence related to management assertions in a blockchain-enabled environment. We posit three possible effects pertaining to reliance on audit evidence in blockchain-enabled environments: (1) Goldilocks Effect (no automation bias) or the ideal scenario where auditors exhibit “just right” levels of professional skepticism and due care resulting in an optimal level of auditing; (2) Halo Effect or positive automation bias, which potentially results in over-reliance on evidence and, in turn, underauditing and; (3) Hype Effect or negative automation bias, which potentially results in under-reliance on evidence and, in turn, overauditing. Our results suggest that respondents to our survey are predominantly influenced by the Halo Effect, indicating a propensity for positive automation bias across management assertions.

Compact Structure-Preserving Signatures with Almost Tight Security

In structure-preserving cryptography, every building block shares the same bilinear groups. These groups must be generated for a specific, a priori fixed security level, and thus, it is vital that the security reduction in all involved building blocks is as tight as possible. In this work, we present the first generic construction of structure-preserving signature schemes whose reduction cost is independent of the number of signing queries. Its chosen-message security is almost tightly reduced to the chosen-plaintext security of a structure-preserving public-key encryption scheme and the security of Groth–Sahai proof system. Technically, we adapt the adaptive partitioning technique by Hofheinz (Eurocrypt 2017) to the setting of structure-preserving signature schemes. To achieve a structure-preserving scheme, our new variant of the adaptive partitioning technique relies only on generic group operations in the scheme itself. Interestingly, however, we will use non-generic operations during our security analysis. Instantiated over asymmetric bilinear groups, the security of our concrete scheme is reduced to the external Diffie–Hellman assumption with linear reduction cost in the security parameter, independently of the number of signing queries. The signatures in our schemes consist of a larger number of group elements than those in other non-tight schemes, but can be verified faster, assuming their security reduction loss is compensated by increasing the security parameter to the next standard level.

A secure and efficient authenticated key exchange scheme for smart grid

Smart grid provides convenience for power generation, consumption and distribution. Authenticated key exchange (AKE) is a fundamental technique to protect data transmission from interception and tampering in smart grid. However, since the smart meters only have limited resources in computation and communication, most of the existing AKE schemes are inefficient for smart grid. First, many schemes have to use large security parameters to compensate the loose reduction in their security proofs. Second, most of these schemes require at least three-round of communication to negotiate a secret session key with explicit key confirmation. To alleviate these issues, we propose a novel two-round AKE scheme with tight security for smart grid. Our proposed scheme integrates Diffie-Hellman key exchange and a tightly secure digital signature, in which not only mutual authentication can be realized but also the communicating parties can confirm that session keys are negotiated between them explicitly. Compared with the existing AKE schemes, the overheads in both communication and computation are lighter in our proposed scheme, because fewer rounds of communication are required and smaller security parameters can be used to achieve the same security level. Therefore, our scheme contributes to a more practical solution for secure key establishment in smart grid.

Credit Risk Analysis and Microfinance Loan Quality in Rwanda: A Case Study of Cooperative COPEDU Ltd

The key objective of Microfinance Institutions (MFIs), like any other business organization is to maximize profits. However, the increased rates of non-performing loans (NPLs) hinder microfinance institutions from achieving their main objective. This study aimed to examine the effect of credit risk analysis on the quality loan portfolio of Microfinance Institutions in Rwanda. The credit risk analysis was measured using collection policy, loan policy and client credit appraisal. On the other hand, the loan quality portfolio was measured by Non-performing Assets (NPAs). A descriptive research design was used to describe the relationship between the study variables. A total of 30 respondents consisting of managers and credit officers were purposively selected. Data was collected from primary and secondary sources using questionnaires and financial reports. Data was analyzed by using both descriptive and inferential statistics. The results from the survey indicated that all aspects of credit risk management have got an effect on the quality loan portfolio, as evidenced by an R-square of 34.8% and a P-value of 0.01. Findings further revealed that poorly formulated Credit policy and lack of monitoring of loans through inadequate loan appraisal and loan collection procedures were identified as the main causes of Non-Performing Loans (NPLs), at 43.3%; 66.7%; 53.3%, respectively, further evidenced by the P-values of 0.01,0.012 and 0.000. The researchers further found that management decisions, conditions, and procedures have the greatest effect on non-performing loans at M=4.30; SD .887; and M=4.23; SD= .679, respectively. To address the danger of non-performing loans in the MFIs, the following measures were recommended to the management of COPEDU LTD. Effective monitoring of loans, credit training programs, tight security requirements and seeking the services of credit reference bureau and committed debt collectors.

Analisis Sistem Manajemen Keamanan Di Perusahaan Tokopedia Dalam Menigkatkan Proteksi Data Dan Privasi Pengguna

With the increasing use of information technology in various fields, including e-commerce, ensuring user data and privacy protection is crucial for companies like Tokopedia, one of the largest e-commerce companies in Indonesia. This research aims to identify Tokopedia's security management system and its challenges in protecting user data and privacy. The study utilizes a literature review methodology, analyzing various documents, books, and journals related to Tokopedia's security management system. The research objectives are to understand the system's effectiveness, challenges, and Tokopedia's efforts to improve data and privacy protection. Tokopedia has prioritized information security since its establishment, implementing tight security measures, and continuously improving them. Tokopedia Shield, a security feature introduced in 2015, has significantly reduced fraud risk in the platform. Additionally, the company has taken several steps to secure user data, such as data encryption, access restriction, and password quality enhancement. Tokopedia continuously develops its security system, incorporating the latest technologies such as Artificial Intelligence (AI) and Big Data Analytics to detect potential threats early and improve the security system's responsiveness.

Security Implication of Mutual Police and Societal Corruption in Nairobi County, Kenya

This paper uses data collected for an MA Thesis on the security implication of the mutual police and societal corruption in Nairobi County, Kenya. The study was motivated by increased insecurity in Embakasi North constituency despite tight security in the area. This study attributed this to mutual police and societal corruption that this study sought to establish. This study was guided by the Erosion Theory (ET) of corruption explaining why so many potentially good people get drawn into the vice. The study used cross-sectional survey design and stratified random sampling techniques and enlisted, 196 respondents and 10 Key Informants (K. I’s). The main data collection methods were the questionnaires for the main respondents and interviews for K. I’s. The main data collection tools were the questionnaires and Key Informants schedules. Quantitative data will be analyzed with the aid of statistical package for social sciences (SPSS). This study unraveled both, Macro and Micro police contextual obstacles where the extent and implications of the state organs such as the legislature, executive, and justice sector institutions suggested corrupt political contexts, hence constraining policing function with criminological approaches to corruption. With reference to the second objective, the study revealed the main forms of police corruption in the area which included receiving bribes to; release suspects from lawful custody, assist suspects evade arrest, cover up criminal activities, reveal police operations; protection of illegal activities, evidence tampering & theft and disclosure of privileged Information amongst others. These forms of corruption benefited organized criminal groups, which were said to be potentially risky to an extent of disabling both individuals and entire institutions, besides seeking state capture; in polity and economy. Finally, the study revealed a deeper relationship between police and society corruption based on determinant factors such as culture (p=0.01), systemic failure of governance(p=0.01), and failed economy (p=0.02). Deeper insight of police corruption seems to draw from a society wide cultural corruption paradigm. This study recommends that recommends an anti-corruption approach that goes beyond targeting “bad apples” and adopt a systems approach. Further, Political will from a benevolent dictator with presidential degrees on matters corruption will help crush this cancerous vice to the nib.

Toward Tight Security of the Galindo–Garcia Identity-based Signature

Toward Tight Security of the Galindo–Garcia Identity-based Signature

Signed (Group) Diffie–Hellman Key Exchange with Tight Security

We propose the first tight security proof for the ordinary two-message signed Diffie–Hellman key exchange protocol in the random oracle model. Our proof is based on the strong computational Diffie–Hellman assumption and the multiuser security of a digital signature scheme. With our security proof, the signed DH protocol can be deployed with optimal parameters, independent of the number of users or sessions, without the need to compensate any security loss. We abstract our approach with a new notion called verifiable key exchange. In contrast to a known tight three-message variant of the signed Diffie–Hellman protocol (Gjøsteen and Jager, in: Shacham, Boldyreva (eds) CRYPTO 2018, Part II. LNCS, Springer, Heidelberg, 2018), we do not require any modification to the original protocol, and our tightness result is proven in the “Single-Bit-Guess” model which we know can be tightly composed with symmetric cryptographic primitives to establish a secure channel. Finally, we extend our approach to the group setting and construct the first tightly secure group authenticated key exchange protocol.

A modern approach to cyber threat protection: The holy grail of cyber security departments?

Cyber security is not only a hot topic debated intensely among business managers, but also a growing concern that enforces unplanned and often undesirable changes. Too tight security measures usually result in a spike in customer complaint volumes; too slack cause a lot of grey hair, especially after a breach. Continuously accelerating growth in number of IT applications, proliferation of various types of devices, software versions, channels and endpoints are significantly increasing the surface area of potential attacks. For professionals with strong links with the world of finance and security, it comes as no surprise that the old approaches are rapidly becoming obsolete. In many cases they cannot handle new challenges, not to mention elaborate and constantly evolving sociological theft strategies. New approaches are desperately sought. The hunt for the holy grail in a cyber security area has been on for quite some time now — apparently without a clear conclusion, as cybercrime is on the rise, regardless of the industry or geographical region. Data leaks and account takeovers have become daily news stories that many people pay attention to. This is why decision makers are exploring different approaches to security by venturing into new territories that were previously not purely classified as directly connected with security issues. Yet, if we want to ensure our clients’ finances, data and interests are appropriately protected, surely all options should be considered? This paper aims to shift the way managers view security in their institutions by highlighting alternative ways of approaching the subject. By incorporating into security interconnected and interdependent layers of verification mechanisms, higher fraud/takeover detection rates can be achieved without affecting usability. Readers will gain complex insights as to how these layers behave and how they operate within the financial institutions.

A Zero Trust Framework Security to Prevent Data Breaches and Mitigate the Cloud Network Attacks

Abstract: Due to new modes of communication, we have seen a surge in the use of wireless networks in recent years. Online safety has become a contentious issue in the community. People want to be able to access all of your applications and resources at any time and from any location. As the use of cloud computing and the Internet of Things grows, so does the number of linked devices, increasing the number of cyber crime targets. A simple shift in mindset can help secure data and the network as a whole. This article defines a Zero Trust Network and illustrates some of the concepts that underpin this architecture/philosophy. Everything inside or outside the network is not reliable unless it is confirmed, according to the Zero Trust design. Zero Trust is a sophisticated security approach in which all users, both inside and outside an organization's network, must be authorized, authenticated, and validated of their security posture and configuration on a continuous basis before being granted access to the network, data, and applications. To validate a user's identity while ensuring tight security, this strategy employs high-end security technologies such as multi-factor authentication, next-gen endpoint security, and identity & access management. Keywords: Cyber security, Zero Trust Network,logical components, security solutions, Google Beyond Corp.

On the Security of the Dandelion Protocol

In this paper, we review the peer-to-peer blockchain transaction protocol, Dandelion, and develop an oracle-based model for its network and security. We formalize a series of security and functional criteria, such as unforgeability, non-repudiation, and immutability, into security experiments. In our model, we consider a quantum-capable adversary who seeks to undermine any of the security criteria while using oracles to simulate and interact with the Dandelion network. We then prove the security of Dandelion in our model with a series of (tight) security reductions as our main result. In addition, we prove that Dandelion is resistant to double-spending attacks.

Tight Security of Twin-DH Hashed ElGamal KEM in Multi-User Setting

Tight Security of Twin-DH Hashed ElGamal KEM in Multi-User Setting

Novel lightweight interactive IoT end device architecture with tight security intelligence confidentiality, integrity, authenticity and availability

Novel lightweight interactive IoT end device architecture with tight security intelligence confidentiality, integrity, authenticity and availability

The effect of 3.6 million refugees on crime

Most studies examining the impact of migrants on crime rates in hosting populations are in the context of economic migrants in developed countries. However, we know much less about the crime impact of refugees in low- and middle-income countries—whose numbers are increasing worldwide. This study examines this issue in the context of the largest refugee group in any country—Syrian refugees in Turkey. Although these refugees are much poorer than the local population, have limited access to formal employment, and face partial mobility restrictions, we find that total crime per person (including natives and refugees) falls due to the arrival of the refugees. This finding also applies to several types of crime; the only exception is smuggling, which increases due to the population influx. We also show that the fall in crime does not result from tighter security; we find no evidence of a change in the number of armed forces (military and civil personnel) in the migrant-hosting regions.