Traditional Security Protocols Research Articles

Proactive Response Model for App Centric Attack Recognition

Safeguarding strong security while reducing energy usage is still a top priority in the world of smartphone applications. In addition to addressing these important concerns, this work presents a revolutionary paradigm that advances attack modeling and intrusion detection in a proactive manner. Taking advantage of the novel framework of Application-based Behavioral Model Analysis (ABMA), our approach goes beyond traditional security protocols by deeply examining the complex behaviors of mobile applications. Through the smooth integration of advanced intrusion detection systems with ABMA, we present a comprehensive solution that maximizes energy efficiency while strengthening application security. We enable both users and developers to proactively prevent possible threats, including communication-based assaults, by rigorous analysis and modeling. This comprehensive strategy ushers in a new era of mobile security and energy efficiency by protecting sensitive data and user privacy while also ensuring an effective and sustainable ecology for smartphone applications.

AI-Driven Security: Redefining Security Informations Systems within Digital Governance

The increasing integration of Artificial Intelligence (AI) within Security Information Systems (SIS) presents a significant shift in digital governance, where governments rely heavily on secure digital infrastructures to manage public services. The escalating threat landscape has necessitated a proactive approach to cybersecurity, and AI is proving crucial in enhancing threat detection, automating responses, and minimizing human error. However, many governments, particularly in developing nations, are struggling to bridge the gap between their current security measures and the complex challenges posed by sophisticated cyber threats. This study aims to explore how AI can redefine SIS in digital governance by improving national resilience and addressing the gaps in traditional security protocols. The study employs a systematic literature review methodology, examining recent research to analyze AI’s role in enhancing SIS, with a particular focus on machine learning, deep learning, and adaptive security measures. Findings indicate that AI-driven security significantly enhances the speed and accuracy of threat detection, providing dynamic solutions that continuously adapt to evolving threats. Nonetheless, the study also highlights concerns around ethical governance, data privacy, and transparency, pointing to the need for robust regulatory frameworks to govern AI’s deployment in public sector security systems. The implications of this research are twofold: theoretically, it contributes to the broader understanding of AI’s role in cybersecurity resilience; practically, it offers insights for policymakers aiming to integrate AI into their governance strategies. The study concludes by recommending further empirical research, particularly in the context of developing nations, where AI-driven security solutions are needed to enhance national cybersecurity frameworks and protect critical public infrastructures.

Securing IoT Devices from DDoS Attacks through Blockchain and Multi-Code Trust Framework

In an era where IoT devices are integral components of numerous systems, their security from prevalent DDoS attacks has become imperative. The traditional security protocols are unable to withstand the sophisticated nature of these attacks, presenting an escalating vulnerability issue in the network security ecosystem. This research proposes a revolutionary approach to address these challenges through a “Blockchain and Multi-Code Trust Framework” utilizing the “UNB IoT DDoS Data Set.” Leveraging the decentralized and immutable characteristics of blockchain technology, alongside a multi-code driven trust mechanism, this framework aims to create a secure, robust, and resilient environment for IoT devices. Our methodology capitalizes on blockchain's transparency to foster trust and validation in network transactions, significantly reducing the threat surface for DDoS attacks. Furthermore, the incorporation of a multi-code system intensifies the security measures, providing several layers of protection against potential breaches. Data sets used in this study encompass diverse real-world IoT network traffic, meticulously collected from the “UNB IoT DDoS Data Set,” to facilitate a comprehensive analysis of the system's performance under various attack scenarios. Our preliminary findings indicate a remarkable improvement in the security posture of IoT devices, exhibiting a substantial reduction in successful DDoS attacks, thereby achieving a new pinnacle in IoT security. This research not only proposes a robust solution to a pressing issue but also opens avenues for further innovations in IoT device security using blockchain technology.

Hybrid trust-based secure routing protocol for detection of routing attacks in environment monitoring over MANETs

Maintaining a healthy environment requires constant vigilance. Keeping constant tabs on environmental factors might be a useful tool in the fight against and recovery from environmental degradation. It is possible to send environmental data from strategically positioned sensors that monitor the surrounding circumstances. Environmentalists are the first to arrive at a disaster site, assess the situation, and take corrective measures. To get information from the sensors, they must coordinate with one another. Remote environmental sensing, the tracking from several physical systems, as well as risk assessment and management, have all seen significant improvements as a result of the use of these networks, which are comprised of many dispersed devices, each of which includes sensing, processing, and wireless technology capabilities. To facilitate communication between sensors and ecologists, the authors of this research suggest the usage of MANETs. To address these issues, a hybrid trust-based secure routing protocol is designed. Firstly, nodes are clustered using the Skill Optimization Technique. The Direct and Indirect (Hybrid) trust is computed using the Deep Q-Learning technique and then Routing is established using Diffusion Convolutional Neural Networks. With these methods, routing attacks such as Black Hole, Gray hole, and Wormhole attacks are identified and compared with the traditional security protocols using network simulation tools.

Critical Controlling for the Network Security and Privacy Based on Blockchain Technology: A Fuzzy DEMATEL Approach

The Internet of Things (IoT) has been considered in various fields in the last decade. With the increasing number of IoT devices in the community, secure, accessible, and reliable infrastructure for processing and storing computed data has become necessary. Since traditional security protocols are unsuitable for IoT devices, IoT implementation is fraught with privacy and security challenges. Thus, blockchain technology has become an effective solution to the problems of IoT security. Blockchain is an empirical data distribution and storage model involving point-to-point transmission, consensus mechanism, asymmetric encryption, smart contract, and other computer technologies. Security and privacy are becoming increasingly important in using the IoT. Therefore, this study provides a comprehensive framework for classifying security criteria based on blockchain technology. Another goal of the present study is to identify causal relationship factors for the security issue using the Fuzzy Decision-Making Trial-and-Evaluation Laboratory (FDEMATEL) approach. In order to deal with uncertainty in human judgment, fuzzy logic is considered an effective tool. The present study’s results show the proposed approach’s efficiency. Authentication (CR6), intrusion detection (CR4), and availability (CR5) were also introduced as the most effective and essential criteria, respectively.

PROLISEAN

The vision for programmable matter is to create a material that can be reprogrammed to have different shapes and to change its physical properties on demand. They are autonomous systems composed of a huge number of independent connected elements called particles. The connections to one another form the overall shape of the system. These particles are capable of interacting with each other and take decisions based on their environment. Beyond sensing, processing, and communication capabilities, programmable matter includes actuation and motion capabilities. It could be deployed in different domains and will constitute an intelligent component of the IoT. A lot of applications can derive from this technology, such as medical or industrial applications. However, just like any other technology, security is a huge concern. Given its distributed architecture and its processing limitations, programmable matter cannot handle the traditional security protocols and encryption algorithms. This article proposes a new security protocol optimized and dedicated for IoT programmable matter. This protocol is based on lightweight cryptography and uses the same encryption protocol as a hashing function while keeping the distributed architecture in mind. The analysis and simulation results show the efficiency of the proposed method and that a supercomputer will need about 5.93 × 10 25 years to decrypt the message.

Node Density Based Security Level Determining to Prolong the Lifetime of WSN through Network Conditions

A wireless sensor network (WSN) consists of sensor nodes with low cost and limited performance. The energy needed for node management is important because it is difficult to manage the deployed nodes. Several traditional security protocols prevent several known attacks in WSNs, such as s false report injection attack. However, the traditional protocols do not consider the false traffic ratio and geographical environment factors. Therefore, to extend the network lifetime, a new design is needed that maintains security and considers environmental factors. This paper introduces a method to increase the energy efficiency and increase the detection rate of false reports by adjusting the security strength of the report generated at the node according to the node density and geographical location. The proposed method has the advantage that it can be applied to various security protocols based on Message Authentication Code (MAC).

A secure architecture for TCP/UDP-based cloud communications

Cloud communication is an intrinsic aspect of cloud architecture. It is an internet-based communication that enables access to millions of cloud services. These services are provided using TCP/UDP-based communications and protected by traditional security protocols (e.g., SSL/ TLS/DTLS). However, security threats in cloud communications become the most serious issue nowadays. To address some of the shortcomings of traditional security protocols, we propose a secure cloud communication architecture (Graphene) for both TCP- and UDP-based communications. Graphene can provide security for data-in-transit and authenticity of cloud users and cloud service providers. It protects the communication channel against most common attacks such as man-in-the-middle (including eavesdropping, sniffing, identity spoofing, and data tampering), sensitive information disclosure, replay, compromised-key, repudiation, and session hijacking attacks. This work also involves the designing of a novel high-performance cloud-focused security protocol that works for both TCP and UDP communications. Especially for UDP, it uses an asynchronous re-transmission mechanism to ensure datagram delivery. This protocol efficiently utilizes the strength and speed of symmetric block encryption with Galois/Counter mode, cryptographic hash, public key cryptography, and ephemeral key-exchange. It provides faster reconnection facility for supporting frequent connectivity and dealing with connection trade-offs. The security analysis of Graphene shows promising protection against the above discussed attacks. Graphene also outperforms TLSv1.3 (the latest stable version among the SSL successors) and DTLSv1.2 (the latest stable version of datagram TLS) in performance and bandwidth consumption significantly and shows reasonable memory usage at the server side.

2720 Published By: Blue Eyes Intelligence Engineering & Sciences Publication Retrieval Number: A9752109119/2019©BEIESP DOI: 10.35940/ijeat.A9752.109119 Journal Website: www.ijeat.org AN Improved Energy Aware Secure Cluster Based Multiple Hop Routing Protocol for Wireless Sensor Network

Due to the technological advancement in wireless communication, energy-efficient power supply, and semiconductor technology, the smart sensor becomes popular in many applications. In WSN, the private data collected and processed by the sensor node must be protected from the malicious attack. Due to the resource constraint nature of WSN, the traditional security protocols do not apply to this network as it involves huge and complex computation. Furthermore, the energy supplied by the battery is not renewable. This paper proposes a secure cluster-based multiple-hop routing protocol for prolonging the lifetime of WSN and securing the data in transit and storage. This protocol proposes the matrix transposition cryptographic techniques for securing the sensor data. This protocol compares the energy consumption and throughput of two secure routing protocols.

Secure Industrial Internet of Things Critical Infrastructure Node Design

Integration of industrial Internet of Things (IIoT) into critical infrastructures (CIs) is aiming to improve efficiency in many crucial areas. The positive benefits of IIoT are increasing the demand for devices, but without proper security design foundations, CIs may be open to many different attack vectors. This lack of IIoT device security standards is a major concern. Due to the nature of these infrastructures and impact of compromises, CI device security is an utmost concern and must be focused on during all phases of development and manufacturing as opposed to the addition of security after functional design as seen with many current Internet of Things (IoT) devices. Many of these sensors and devices have limited resources, such as low power consumption, reduced memory storage, and reduced fixed-point processing capabilities. Traditional security protocols and solutions are often not practical on these restrained devices, and there are no current standards for characterizing device security. This paper presents a candidate security level-based architecture for low power IoT-CI devices implementing modular, low power, security primitives that are shown through simulation models and embedded software implementation to create a robustly layered defense-in-depth IoT architecture. This candidate architecture will help provide a foundation for future CI-IoT device security standardization.

An Edge-Fog Secure Self-Authenticable Data Transfer Protocol.

Development of the Internet of Things (IoT) opens many new challenges. As IoT devices are getting smaller and smaller, the problems of so-called “constrained devices” arise. The traditional Internet protocols are not very well suited for constrained devices comprising localized network nodes with tens of devices primarily communicating with each other (e.g., various sensors in Body Area Network communicating with each other). These devices have very limited memory, processing, and power resources, so traditional security protocols and architectures also do not fit well. To address these challenges the Fog computing paradigm is used in which all constrained devices, or Edge nodes, primarily communicate only with less-constrained Fog node device, which collects all data, processes it and communicates with the outside world. We present a new lightweight secure self-authenticable transfer protocol (SSATP) for communications between Edge nodes and Fog nodes. The primary target of the proposed protocol is to use it as a secure transport for CoAP (Constrained Application Protocol) in place of UDP (User Datagram Protocol) and DTLS (Datagram Transport Layer Security), which are traditional choices in this scenario. SSATP uses modified header fields of standard UDP packets to transfer additional protocol handling and data flow management information as well as user data authentication information. The optional redundant data may be used to provide increased resistance to data losses when protocol is used in unreliable networks. The results of experiments presented in this paper show that SSATP is a better choice than UDP with DTLS in the cases, where the CoAP block transfer mode is used and/or in lossy networks.

A real-time multi-agent system for cryptographic key generation using imaging-based textural features

Traditional network security protocols depend on exchanging the security keys between the network nodes, and thus opposing the network to different classes of security threats. In this paper, a multi-agent system for cryptographic key generation is proposed for real-time networks. The proposed key generation technique generates a 256-bit security key for the advanced encryption standard (AES) algorithm using the textural features of digital images. By implementing this key generation technique at both the sender and receiver network nodes, the process of exchanging the security keys through the network would be eliminated, and thus making communication between network nodes robust against different security threats. Simulation results over a real-time network show the efficiency of the proposed system in reducing the overhead of the security associations performed by the IPsec protocol. On the other hand, the proposed agent-based system shows a high efficiency in guaranteeing the quality-of-service (QoS) of the real-time requests in terms of miss-ratio and total average delay through applying the best scheduling algorithm.

POPSTAR

The shrinking size of microprocessors as well as the ubiquity of wireless communication have led to the proliferation of portable computing devices with novel security requirements. Whereas traditional security protocols achieve their security goals relying solely on cryptographic primitives like encryptions and hash functions, the protocols employed to secure these devices establish and rely in addition on properties of the physical world. For instance, they may use, as basic building blocks, protocols for ensuring physical proximity, secure localisation, or secure neighbourhood discovery. The aim of the POPSTAR ERC project is to develop techniques and tools to analyse protocols that establish and rely on properties of the physical world. We foresee that, at the end of the project, appropriate verification tools will be available to analyse the security and privacy of these "physical protocols". The research community in logics, program verification, and security has already a long tradition in developing techniques and tools to analyse key establishment and authentication protocols. Distance bounding protocols which are used to provide secure proximity control, raise new research challenges, and can not be analysed today using off-the-shelf verification tools.

Muscle Activity‐Driven Green‐Oriented Random Number Generation Mechanism to Secure WBSN Wearable Device Communications

Wireless body sensor networks (WBSNs) mostly consist of low‐cost sensor nodes and implanted devices which generally have extremely limited capability of computations and energy capabilities. Hence, traditional security protocols and privacy enhancing technologies are not applicable to the WBSNs since their computations and cryptographic primitives are normally exceedingly complicated. Nowadays, mobile wearable and wireless muscle‐computer interfaces have been integrated with the WBSN sensors for various applications such as rehabilitation, sports, entertainment, and healthcare. In this paper, we propose MGRNG, a novel muscle activity‐driven green‐oriented random number generation mechanism which uses the human muscle activity as green energy resource to generate random numbers (RNs). The RNs can be used to enhance the privacy of wearable device communications and secure WBSNs for rehabilitation purposes. The method was tested on 10 healthy subjects as well as 5 amputee subjects with 105 segments of simultaneously recorded surface electromyography signals from their forearm muscles. The proposed MGRNG requires only one second to generate a 128‐bit RN, which is much more efficient when compared to the electrocardiography‐based RN generation algorithms. Experimental results show that the RNs generated from human muscle activity signals can pass the entropy test and the NIST random test and thus can be used to secure the WBSN nodes.

Security Analysis and Improvement of the TNC IF-T Protocol Binding for Tunneled EAP Methods

The TNC IF-T Protocol Binding for Tunneled EAP Methods (TIPBTEM) is specified by Trusted Computing Group (TCG) for TNC assessment (i.e., PlatformAuthentication) exchanges. Because the TIPBTEM includes Platform-Authentication in addition to the usual user authentication, it differs greatly from the traditional security protocols in terms of security requirements. To analyze the security of the TIPBTEM correctly, the extended strand space model (SSM) for trusted network access protocols is applied in this paper. And it is pointed out that the TIPBTEM cannot prevent manin-the-middle (MITM) attacks in some cases. To eliminate MITM attacks, the unsecure cases of the TIPBTEM are improved based on cryptographic binding. And then it is showed that these improved TIPBTEM cases can resist MITM attacks in the extended SSM.

Security analysis and improvement of TNC IF-T Protocol Binding to TLS

The TNC IF-T Protocol Binding to TLS (TIPBT) is specified by Trusted Computing Group (TCG) for TNC assessment exchanges. However, the TIPBT cannot be analysed by current Strand Space Model (SSM) because of the different requirements from the traditional security protocols. In order to solve this problem, first, we give an extension of the SSM and point out the TIPBT cannot prevent Man-in-the-Middle (MITM) attacks in some cases based on the extended SSM. Then, we improve the TIPBT and show that the improved TIPBT can resist MITM attacks in the extended SSM.

Enabling end-to-end secure communication between wireless sensor networks and the Internet

In the paradigms of the Internet of Things (IoT) as well as the evolving Web of Things (WoT) and the emerging Wisdom Web of Things (W2T), not only can the data collected by the sensor nodes (i.e., the things) in the wireless sensor networks (WSNs) be transmitted to and processed at Internet nodes and subsequently transformed into information, knowledge, wisdom and eventually into services to serve humans, but human users can also access, control and manage the sensor nodes in the WSNs through nodes in the Internet. Since data are the basis for enabling applications and services in W2T, it becomes imperative that enabling technologies for end-to-end security be developed to secure data communication between Internet user nodes and sensor server nodes to protect the exchange of data. However, traditional security protocols developed for the Internet rely mostly on symmetric authentication and key management based on public key algorithms, thus are deemed to be unsuitable for WSNs due to resource constraints in the sensor nodes. Specifically, acting as the server nodes in this scenario, sensor nodes cannot take on the heavy duty like regular servers in the Internet. Meanwhile, current security mechanisms developed for WSNs have mainly focused on the establishment of keys between neighboring nodes at the link layer and thus are not considered to be effective for end-to-end security in the W2T scenario. In this paper, we propose an end-to-end secure communication scheme for W2T in WSNs in which we follow an asymmetric approach for authentication and key management using signcryption and symmetric key encryption. In our proposed scheme, a great part of the work for authentication and access control is shifted to a gateway between a WSN and the Internet to reduce the burden and energy consumption in the sensor nodes. In addition, our scheme can ensure the privacy of user identities and key negotiation materials, and denial of service (DoS) attacks targeted at the sensor nodes can be effectively blocked at the gateway. We will also conduct quantitative analysis and an experiment to show that our proposed scheme can enhance the effectiveness of end-to-end security while reducing the cost of sensor nodes in terms of computation, communication and storage overhead as well as the latency of handshaking compared to similar schemes that are based on Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols.

A Security Adaptation Reference Monitor for Wireless Sensor Network

Security in Wireless Sensor Network has become a hot research topic due to their wide deployment and the increasing new runtime attacks they are facing. We observe that traditional security protocols address conventional security problems and cannot deal with dynamic attacks such as sinkhole dynamic behavior. Moreover, they use resources, and limit the efficient use of sensor resources and inevitably the overall network efficiency is not guaranteed. Therefore, the requirements of new security mechanisms must be addressed in a flexible manner. Indeed, there is a lack of generic security adaptation protocols to deal with extremely dynamic security conditions and performances in a context of Wireless Sensor Network where reliability is a critical criterion for many applications. This paper proposes our Security Adaptation Reference Monitor for Wireless Sensor already validated in proximity-based wireless network. It is based on an autonomic computing security looped system, which fine-tunes security means based on the monitoring of the context. Extensive simulations using agent-based approach have been conducted to verify the performance of our system in the case of sensor network in the presence of sinkhole attacks. The results clearly show that we are efficient in terms of survivability, overall network utilization, and power consumption.

SNUAGE: an efficient platform-as-a-service security framework for the cloud

In this paper we present SNUAGE, a platform-as-a-service security framework for building secure and scalable multi-layered services based on the cloud computing model. SNUAGE ensures the authenticity, integrity, and confidentiality of data communication over the network links by creating a set of security associations between the data-bound components on the presentation layer and their respective data sources on the data persistence layer. SNUAGE encapsulates the security procedures, policies, and mechanisms in these security associations at the service development stage to form a collection of isolated and protected security domains. The secure communication among the entities in one security domain is governed and controlled by a standalone security processor and policy attached to this domain. This results into: (1) a safer data delivery mechanism that prevents security vulnerabilities in one domain from spreading to the other domains and controls the inter-domain information flow to protect the privacy of network data, (2) a reusable security framework that can be employed in existing platform-as-a-service environments and across diverse cloud computing service models, and (3) an increase in productivity and delivery of reliable and secure cloud computing services supported by a transparent programming model that relieves application developers from the intricate details of security programming. Last but not least, SNUAGE contributes to a major enhancement in the energy consumption and performance of supported cloud services by providing a suitable execution container in its protected security domains for a wide suite of energy- and performance-efficient cryptographic constructs such as those adopted by policy-driven and content-based security protocols. An energy analysis of the system shows, via real energy measurements, major savings in energy consumption on the consumer devices as well as on the cloud servers. Moreover, a sample implementation of the presented security framework is developed using Java and deployed and tested in a real cloud computing infrastructure using the Google App Engine service platform. Performance benchmarks show that the proposed framework provides a significant throughput enhancement compared to traditional network security protocols such as the Secure Sockets Layer and the Transport Layer Security protocols.

Verification of Trusted Network Access Protocols in the Strand Space Model

Trusted network access protocols are proposed for the security and authorization of network-access requests. Because they differ greatly from traditional security protocols on security demands, they can not be analyzed with previous strand space works directly. To solve this problem, we first give some extensions necessary to verify them in this letter. Moreover, we point out Zhuo Ma et al.'s MN-TAP protocol is unsecure based on the Strand Space Model (SSM), and then improve the MN-TAP protocol and show that the improved MN-TAP protocol is secure in the SSM.