Types Of Security Attacks Research Articles

A Cryptosystem for Database Security Based on TSFS Algorithm

Implementation of TSFS (Transposition, Substitution, Folding, and Shifting) algorithm as an encryption algorithm in database security had limitations in character set and the number of keys used. The proposed cryptosystem is based on making some enhancements on the phases of TSFS encryption algorithm by computing the determinant of the keys matrices which affects the implementation of the algorithm phases. These changes showed high security to the database against different types of security attacks by achieving both goals of confusion and diffusion.

Authentication-Based Secure Data Dissemination Protocol and Framework for 5G-Enabled VANET

The amalgamation of Vehicular Ad hoc Network (VANET) with the Internet of Things (IoT) leads to the concept of the Internet of Vehicles (IoV). IoV forms a solid backbone for Intelligent Transportation Systems (ITS), which paves the way for technologies that better explain about traffic efficiency and their management applications. IoV architecture is seen as a big player in different areas such as the automobile industry, research organizations, smart cities and intelligent transportation for various commercial and scientific applications. However, as VANET is vulnerable to various types of security attacks, the IoV structure should ensure security and efficient performance for vehicular communications. To address these issues, in this article, an authentication-based protocol (A-MAC) for smart vehicular communication is proposed along with a novel framework towards an IoV architecture model. The scheme requires hash operations and uses cryptographic concepts to transfer messages between vehicles to maintain the required security. Performance evaluation helps analyzing its strength in withstanding various types of security attacks. Simulation results demonstrate that A-MAC outshines other protocols in terms of communication cost, execution time, storage cost, and overhead.

An Efficient and Secure Certificateless Aggregate Signature From Bilinear Maps

Certificateless signature schemes are a very intriguing aspect in information security because of its capability of removing the well-known key escrow problem predominately in ID-based cryptography. He et al. proposed an efficient certificateless aggregate signature scheme and proved that their scheme is secure against all possible types of security attacks. However, the authors still managed to find loopholes in the form of insecurities against ‘honest but curious' and ‘malicious but passive' attacks during cryptanalysis of He et al.'s scheme. The authors propose an efficient certificateless aggregate signature scheme which fills the security gaps in He et al.'s scheme and demonstrate the security in their scheme via a mathematical proof, and reinforce the fact that their scheme is much more efficient in a thorough performance comparison of their scheme against the previous schemes.

Authentication-Based Vehicle-to-Vehicle Secure Communication for VANETs

Communication in VANETs is vulnerable to various types of security attacks since it is constructed based on an open wireless connection. Therefore, a lightweight authentication (LIAU) scheme for vehicle-to-vehicle communication is proposed in this paper. The LIAU scheme requires hash operations and uses cryptographic concepts to transfer messages between vehicles, in order to maintain the required security. Moreover, we made the LIAU scheme lightweight by introducing a small number of variable parameters in order to reduce the storage space. Performance analysis shows that the LIAU scheme is able to resist various types of security attacks and it performs well in terms of communication cost and operation time.

Security Attacks in Named Data Networking of Things and a Blockchain Solution

The Internet of Things (IoT) is visioned to connect everything in the world by a common networking technique. In spite that Internet protocol is the most prevailing networking solution, it is difficult to adapt to IoT which is born with scalability, heterogeneity, and dynamics. Thanks to the content-centric communication paradigm, it exerts data-naming strategy to incorporate the heterogeneity and dynamics so as to apply for IoT, composing Named Data Networking (NDN) of Things. However, the paradigm also introduces new types of security attacks. In this paper, the NDN of Things architecture will be illustrated and the security analysis is conducted. Furthermore, the potential security attacks of NDN of Things are categorized and the performance impact caused by security attacks is evaluated. Finally, the solutions for NDN of Things security attacks are discussed and a blockchain solution is illustrated.

A Pattern-Based Multi-Factor Authentication System

User authentication is an indispensable part of a secure system. The traditional authentication methods have been proved to be vulnerable to different types of security attacks. Artificial intelligence is being applied to crack textual passwords and even CAPTCHAs are being dismantled within few attempts. The use of graphical password as an alternate to the textual passwords for user authentication can be an efficient strategy. However, they have been proved to be susceptible to shoulder surfing like attacks. Advanced authentication systems such as biometrics are secure but require additional infrastructure for efficient implementation. This paper proposes a novel pattern-based multi-factor authentication scheme that uses a combination of text and images resulting for identifying the legitimate users. The proposed system has been mathematically analyzed and has been found to provide much larger password space as compared to simple text based passwords. This renders the proposed system secure against brute force and other dictionary based attacks. Moreover, the use of text along with the images also mitigates the risk of shoulder surfing.

<inline-formula> <tex-math notation="LaTeX">$iCLAS$ </tex-math> </inline-formula>: An Improved Certificateless Aggregate Signature Scheme for Healthcare Wireless Sensor Networks

As the world’s population gradually enters the aging stage, the smart healthcare demand has become extremely urgent and incomparably important. Healthcare wireless sensor networks (HWSNs) is one of the foundations of smart healthcare. Medical information is extremely sensitive information. However, HWSNs uses a common communication channel and is vulnerable to various types of security attacks. Therefore, ensuring the communication and data security of HWSNs and protecting patient privacy are the basis of smart healthcare. After analyzing the deficiencies of a certificateless aggregation signature scheme for HWSNs, an improved certificateless aggregation signature scheme (called iCLAS) is proposed in this paper. We present rigorous security proof that shows iCLAS can resist all kinds of security attacks and can ensure patient privacy protection. The detailed performance comparisons show iCLAS has clear advantages in computation and communication cost.

Performance Analysis of Aes and 3des for Implementing Multi Level Authentication in Cloud Through Rest Api

Last couple of decades, internet usage has been changed each and every technology domain. This has lead to implementation and accommodation of cloud computing. As the Cloud has the nature of sharing the data, it led to various types of security attacks. Hence security mechanisms which has various features/types are needed and hence security breaches can be prevented. Authentication is one of the vital techniques playing a major role in security part. Cloud Computing verifies the identification of a user during the process of accessing the services from cloud servers. Different authentication techniques are used to verify the user’s identity before granting the access to them. This paper analyze the performance of AES and 3DES algorithms and find out the best suit for implementing multi level authentication in cloud. Based on execution time, request and response time against the concurrent user load and file size, AES is faster, more secure and safer than 3DES.

Issues, Challenges, and Research Opportunities in Intelligent Transport System for Security and Privacy

Intelligent transport system (ITS), owing to their potential to enhance road safety and improve traffic management, have attracted attention from automotive industries and academia in recent years. The underlying technology—i.e., vehicular ad-hoc networks (VANETs)—provide a means for vehicles to intelligently exchange messages regarding road and traffic conditions to enhance safety. The open nature of ITS as wireless communication technology leads to many security and privacy challenges. These challenges pertain to confidentiality, authentication, integrity, non-repudiation, location privacy, identity privacy, anonymity, certificate revocation, and certificate resolution. This article aims to propose a novel taxonomy of security and privacy issues and solutions in ITS. Furthermore, categorization of security and privacy schemes in ITS and their limitations are discussed with various parameters—scalability, privacy, computational cost, communication overhead, latency—and various types of security attacks has been analyzed. This article leverages new researchers for challenges and opportunities related to security and privacy in ITS.

Cyber and Physical Security Vulnerability Assessment for IoT-Based Smart Homes.

The Internet of Things (IoT) is an emerging paradigm focusing on the connection of devices, objects, or “things” to each other, to the Internet, and to users. IoT technology is anticipated to become an essential requirement in the development of smart homes, as it offers convenience and efficiency to home residents so that they can achieve better quality of life. Application of the IoT model to smart homes, by connecting objects to the Internet, poses new security and privacy challenges in terms of the confidentiality, authenticity, and integrity of the data sensed, collected, and exchanged by the IoT objects. These challenges make smart homes extremely vulnerable to different types of security attacks, resulting in IoT-based smart homes being insecure. Therefore, it is necessary to identify the possible security risks to develop a complete picture of the security status of smart homes. This article applies the operationally critical threat, asset, and vulnerability evaluation (OCTAVE) methodology, known as OCTAVE Allegro, to assess the security risks of smart homes. The OCTAVE Allegro method focuses on information assets and considers different information containers such as databases, physical papers, and humans. The key goals of this study are to highlight the various security vulnerabilities of IoT-based smart homes, to present the risks on home inhabitants, and to propose approaches to mitigating the identified risks. The research findings can be used as a foundation for improving the security requirements of IoT-based smart homes.

Advanced formal authentication protocol using smart cards for network applicants

The rapid growth of internet technologies has provided various functions that allow easy remote user or customer access to its many systems. However, the responsibility of the system does not end after providing access to such remote users. The framework must consummate a precise level of security, because otherwise, an adversary may be able to disrupt the system or use its resources without authorization. This affects the system and its clients directly or obliquely, and to restrict access, an authentication scheme must be implemented. Recently, Nikooghadam et al. proposed an authentication and key agreement protocol and illustrated how it would be secure against various types of security attacks. In this study, we show that their proposed system is susceptible to insider, replay, and password-guessing attacks. We propose a more secure authentication system that can withstand discrete attacks, and measure the total execution time to determine what realistic implementation is needed to carry out an entire scheme.

Secure Monitoring of Patients With Wandering Behavior in Hospital Environments

Today there is considerable interest for making use of the latest technological advancements for several healthcare applications. However, there are several challenges for making use of different technologies for healthcare applications. In particular, there is a need to ensure that the healthcare related services receive priority during events, such as legitimate failures of devices, congestion, and attacks in the networks. In this paper, we discuss some of the requirements for making use of technology for healthcare applications and propose techniques for secure monitoring of patients with wandering behavior in a hospital or elderly care environment. One of the aims of our work is to use technology for secure monitoring of patients with wandering behavior to keep them away from danger, or detect if the behavior of the patient violates the policies of the hospital, or even violates privacy policies of other patients. Our approach makes use of software defined networking (SDN), Wireless LAN (WLAN), and wearable devices for the patients. Our approach incurs low cost since WLAN is widely deployed. However, there are some challenges for making use of WLAN for monitoring dementia patients, since it is primarily used for accessing the Internet and its open nature is vulnerable to different types of security attacks. Hence we make use of SDN to solve some of these challenges and provide priority for the monitoring services. We have developed a security application for an SDN controller that can be used to enforce fine granular policies for communication between the hosts, real time location tracking of the patients, and deal with attacks on the hospital networks. The policy-based security enforcement helps to differentiate healthcare related traffic from other traffic and provide priority to the healthcare traffic. The real time location tracking detects wandering by patients and if necessary can raise alarms to the staff. The attack detection component makes use of attack signatures and behavior-based intrusion detection to deal with attacks on hospital networks. We will also present the prototype implementation of our model using ONOS SDN controller and OpenFlow Access Points.

SecSPS: A Secure and Privacy-Preserving Framework for Smart Parking Systems

Smart parking systems are a crucial component of the “smart city” concept, especially in the age of the Internet of Things (IoT). They aim to take the stress out of finding a vacant parking spot in city centers, due to the increasing number of cars, especially during peak hours. To realize the concept of smart parking, IoT-enabling technologies must be utilized, as the traditional way of developing smart parking solutions entails a lack of scalability, compatibility with IoT-constrained devices, security, and privacy awareness. In this paper, we propose a secure and privacy-preserving framework for smart parking systems. The framework relies on the publish/subscribe communication model for exchanging a huge volume of data with a large number of clients. On one hand, it provides functional services, including parking vacancy detection, real-time information for drivers about parking availability, driver guidance, and parking reservation. On the other hand, it provides security approaches on both the network and application layers. In addition, it supports mutual authentication mechanisms between entities to ensure device/ data authenticity, and provide security protection for users. That makes our proposed framework resilient to various types of security attacks, such as replay, phishing, and man-in-the-middle attacks. Finally, we analyze the performance of our framework, which is suitable for IoT devices, in terms of computation and network overhead.

An efficient approach to circumvent black hole nodes in manets

MANETs are self-configured network. Nodes in Manets need not follow a specific infrastructure. Nodes are connected wirelessly and so nodes can travel to any direction. Manets assure that all its nodes are cooperating with each other. Sometimes, some nodes may not be reliable. These unreliable intermediate nodes participate in the packet forwarding and drop the packets instead of forwarding them to the destination node. This type of security attack is called black hole attack (Baadache and Belmehdi in Int Comput Sci Inf Sec 7(1):1–10, 2010). In this paper, an efficient method of route discovery process is used which bypasses the black hole nodes and uses only the reliable route for transmission. The main advantage of using the proposed method is that there is no need to maintain black hole list. So, there is no need to check the black hole list each time during route discovery. Dynamic source routing (DSR) is used for the transmission of packets. The simulations are done to measure packet delivery ratio, packet drop, average throughput, normalized routing overhead and average end-to-end delay. Simulation results shows that the proposed method improves the packet delivery ratio in presence of black hole and reduces the packet drop. Also the communication overhead is reduced which in turn minimizes the resource utilization in Manets.

A Multi-factor Trust Management Scheme for Secure Spectrum Sensing in Cognitive Radio Networks

Cognitive radio (CR) is an emerging technology for efficient utilization of the limited and scarce radio spectrum resources. Spectrum sensing is a key task in CR system for detecting the unused radio spectrum or spectrum holes by the primary users. In this regard, collaborative spectrum sensing (CSS) has shown to as an efficient way to improve such spectrum holes detection in cognitive radio network (CRN). However, this cooperative nature makes it vulnerable to many types of security attacks. In this paper, we focus one of these potential CRN specific security attack called spectrum sensing data falsification attack or Byzantine attack. In which the malicious internal member of the network, reports false sensing results with a aim to increase the sensing errors. In order to ensure the security requirements of CRN, we proposed a novel trust management mechanism that evaluates the trustworthiness of each node participating in the CSS scheme called sensing reputation (SR). To reflect the complexity, the SR calculation involves multiple decision factors like history based trust factor, active factor, incentive factor and consistency factor. Based on this SR value, the suspicious users are identified and the malicious users are filtered out from the decision making process of the CSS scheme. We further introduce the concept of sensing reputation chain to record and track the future behavior of the identified suspicious users. Theoretical analysis and simulation results demonstrate the effectiveness of our proposed malicious user detection technique with a higher accuracy and lower false alarm rate.

Wireless Sensor Network Security Enhancement Using Directional Antennas: State of the Art and Research Challenges.

Being often deployed in remote or hostile environments, wireless sensor networks are vulnerable to various types of security attacks. A possible solution to reduce the security risks is to use directional antennas instead of omnidirectional ones or in conjunction with them. Due to their increased complexity, higher costs and larger sizes, directional antennas are not traditionally used in wireless sensor networks, but recent technology trends may support this method. This paper surveys existing state of the art approaches in the field, offering a broad perspective of the future use of directional antennas in mitigating security risks, together with new challenges and open research issues.

EAM: Architecting Efficient Authentication Model for Internet Security using Image-Based One Time Password Technique

In the era of Internet world, passwords are essential to protect our data and the application. Relying on a simple plaintext password would lead to vulnerability. Apart from choosing strong passwords, the authentication model plays a crucial role in Internet Security by protecting the web applications efficiently from various security attacks. Objectives: The aim of the paper is to provide an Efficient Authentication Model and adopt a new technique in generating a dynamic salt from the client. Hence it protects Internet applications from five types of security attacks, namely password-guessing attack, keylogger attack, replay attack, streaming bots, and screen-capture attacks. Methods: The One Time Password (OTP) based image-selection enables the user to protect the Internet application from streaming bots, keyloggers and screen-capture attacks. Findings: The architecture has been designed efficiently to minimize the number of transactions between the client and the server. The dependency on hardware devices for authentication can be completely eradicated by using Efficient Authentication Model (EAM). Hence, the authentication is well-suited for Internet applications requiring higher levels of security. Application: It is a single solution for multiple security problems with minimal cost and highly secured with improved performance. Hence, it can be implemented by banks, financial organization, etc. where security is very significant.

A Survey on VANETs Security Attacks and Sybil Attack Detection

With increase in human population and economic development, population of private vehicles on road has also increased. This has resulted in increased accident probability and fatalities on the roads. Vehicular Ad-hoc Networks (VANETs) have shown promise of bringing down road accidents and fatalities thereof by enabling communication between vehicles. VANETs also allow the road operators to control and monitor vehicles for rash driving and quick relief. However, these networks face challenges of Design, Routing, Communication and Security. Use of wireless medium for communication has left these networks vulnerable to different type of security attacks. One of the important vulnerability in such networks is caused when a malicious vehicle or RSU is able to acquire multiple identities. The attack is termed as Sybil Attack. In VANETs, a malicious vehicle may send wrong messages related to traffic, accident ahead, road closed, etc. This may force the motor driver to take a different route thus making him prone to an untoward incident. In this paper, we present a survey on different detection schemes for detecting Sybil attack. Comparison among these schemes is also presented. Keywords: Vehicular Ad hoc Networks (VANETs), VANETs Architecture, Security Attacks, Sybil Attack detection.

A Novel Honeypot Based Detection and Isolation Approach (NHBADI) To Detect and Isolate Black Hole Attacks in MANET

Mobile adhoc networks (MANETs) suffer from various types of security attacks. In this paper, a novel probabilistic approach is proposed to detect and to isolate the Black Hole attack from MANET. Routing algorithms that are used nowadays are not designed to handle these types of attacks. This paper proposes a technique which is known as NHBADI, which uses Honeypot methodology to detect and isolate Black Hole attacks. Unlike existing techniques, the proposed Honeypot technique enhances the security of the MANET by reducing the network overhead. To measure the effectiveness of the proposed system, NS-2 simulator is used. The proposed technique not only detects malicious Black Hole nodes but also isolates the vulnerable Black Hole nodes from the network. The proposed NHBADI scheme reduces network overhead, normalized routing load and packet drop ratio.

Protecting Mobile Crowd Sensing against Sybil Attacks Using Cloud Based Trust Management System

Mobile crowd sensing (MCS) arises as a new sensing paradigm, which leverages citizens for large-scale sensing by various mobile devices to efficiently collect and share local information. Unlike other MCS application challenges that consider user privacy and data trustworthiness, this study focuses on the network trustworthiness problem, namely, Sybil attacks in MCS network. The Sybil attack in computer security is a type of security attack, which illegally forges multiple identities in peer-to-peer networks, namely, Sybil identities. These Sybil identities will falsify multiple identities that negatively influence the effectiveness of sensing data in this MCS network or degrading entire network performance. To cope with this problem, a cloud based trust management scheme (CbTMS) was proposed to detect Sybil attacks in the MCS network. The CbTMS was proffered for performing active and passive checking scheme, in addition to the mobile PCS trustworthiness management, and includes a decision tree algorithm, to verify the covered nodes in the MCS network. Simulation studies show that our CbTMS can efficiently detect the malicious Sybil nodes in the network and cause 6.87 Wh power reduction compared with other malicious Sybil node attack mode.