User Authentication Research Articles

Security enhancement by intelligent reflecting surfaces for visible light communications

As a revolutionizing technology, intelligent reflecting surfaces (IRS) are expected to enhance the physical layer security (PLS) by constructing a controllable wireless environment. In this paper, we consider an IRS-aided visible light communication (VLC) system with a legitimate user and a malicious eavesdropper, in which the IRS is implemented by an intelligent rotatable mirror array. Our objective is to provide a desired optical reflecting environment with enriched spatial degrees of freedom by jointly optimizing the rotation angles of arrayed mirrors. First, from the perspective of information theory, we derive the achievable secrecy rate for the IRS-aided VLC system. Then, we formulate an achievable secrecy rate maximization problem with the orientations of mirror elements as optimization variables. Since the effect of mirror elements’ orientations on the IRS channel gain makes the formulated problem hard to solve, we propose a reflected spot search (RSS) method to transform the original problem into one with reduced dimension of optimization variables. Besides, bearing in mind that the VLC system has the dual task of communication and illumination, we define and analyze the illumination uniformity of the IRS-aided secure VLC system. Our simulation results show that by utilizing the proposed method, the VLC system can achieve significant secrecy enhancement, especially when the eavesdropper is close to the legitimate user.

An Anti-Jamming Game Between Dynamically-Sensing Jammer and Legitimate User With Faking-Slot Transmission

An Anti-Jamming Game Between Dynamically-Sensing Jammer and Legitimate User With Faking-Slot Transmission

User Authentication on Earable Devices via Bone-Conducted Occlusion Sounds

User Authentication on Earable Devices via Bone-Conducted Occlusion Sounds

Exploiting Screen-Touch Trajectory for Passive User Authentication in Industrial Internet of Things Systems

Exploiting Screen-Touch Trajectory for Passive User Authentication in Industrial Internet of Things Systems

A Novel Deep Ensemble Learning to Enhance User Authentication in Autonomous Vehicles

A Novel Deep Ensemble Learning to Enhance User Authentication in Autonomous Vehicles

Blockchain-Based User Authentication and Data-Sharing Framework for Healthcare Industries

Blockchain-Based User Authentication and Data-Sharing Framework for Healthcare Industries

تدريب خوارزميات التعلم الآلي للكشف عن هجمات رفض الخدمة الموزعة

Cyber-attacks are becoming more and more sophisticated, posing a serious threat to our technologically dependent society. Such an attack is the Distributed Denial of Service (DDoS) attack, which is becoming a serious threat to businesses that have integrated their technology with public networks since they enable numerous attackers to obtain data or provide services to major corporations or nations. When a company's servers are overloaded with fraudulent requests while legitimate users' requests are denied, Distributed Denial of Service (DDoS) attacks disrupt Web service availability for an arbitrary amount of time. This results in financial losses since services are rendered unavailable. This paper provides a comparative analysis of popular ML algorithms, including Logistic Regression, Random Forest, and Neural Network, in terms of their effectiveness in DDoS attack detection. Along with a comprehensive evaluation of its performance. The study incorporates numerical data analysis and relevant diagrams to offer insights into the comparative efficacy of different ML techniques for DDoS attack detection. Keywords: DDoS attacks, machine learning, random forest, Logistic Regression, Neural Network

On the trade‐off between rate and reliability for secret key generation in wireless channels

AbstractWireless propagation channels can be used to obtain secret keys to enhance security. By exploiting the reciprocity of the channel between legitimate users and its independence of an eavesdropper's channel, it can be quantised to produce a string of bits. The quality of these bits can be enhanced by using guard bands when quantising, which means that some samples are not used due to their poor quality. Although this increases the probability that the legitimate users produce the same bits, it also reduces the number of generated bits. We derive the optimal trade‐off between these contrasting quantities, first for a single sample and then extended to a frequency‐selective channel. The results are presented for both software simulations and hardware evaluations.

Sequence-to-sequence Vision Transformer for Improving Authentication Speed and Efficiency in ECG-Based User Authentication Systems

Sequence-to-sequence Vision Transformer for Improving Authentication Speed and Efficiency in ECG-Based User Authentication Systems

BIKE RENTAL SYSTEM

Abstract The Bike Rental Management System is an innovative web application designed to revolutionize the rental process of bicycles for short-term urban use. It offers a comprehensive solution that caters to both customers and administrators, ensuring a seamless experience for all users.At its core, the system boasts a user-friendly interface that simplifies the process of searching for available bikes, selecting preferred options, and completing rentals. Real-time availability information is provided, empowering customers to make informed decisions. The secure payment processing feature guarantees a safe and convenient transaction experience, instilling trust and reliability in the system.For administrators, the system includes a robust admin panel that allows for efficient management of bikes, user accounts, and rentals. This panel provides a comprehensive overview of the rental operations, enabling administrators to make informed decisions and optimize the rental process for better efficiency.The technology stack behind the system is equally impressive, utilizing Java Servlet for backend logic, JDBC for database connectivity, JavaScript for client-side interactivity, and Bootstrap for responsive design. This ensures a smooth and seamless user experience across different devices and platforms.One of the key advantages of the Bike Rental Management System is its contribution to promoting eco-friendly urban mobility. By encouraging the use of bicycles for short-distance travel, the system helps reduce traffic congestion and carbon emissions, ultimately leading to a cleaner and greener environment. Additionally, the system promotes healthier lifestyles by encouraging physical activity through cycling.In conclusion, the Bike Rental Management System is a comprehensive and innovative solution that offers a wide range of benefits for both users and the environment. Its user-friendly interface, secure payment processing, efficient admin panel, and eco-friendly initiatives make it a standout choice for urban mobility solutions. Index Terms – Bike Rental, JDBC, User Authentication, Product Management, Admin Panel, Payment Processing, Scalability, Rental Process.

Python's Role in Accelerating Web Application Development with Django

Efficient, secure, and scalable web services are critical in today's digital environment. This study explores the field of web service development and addresses issues such system efficiency, project duration, and changing requirements. The goal of this study is to ensure reliable and efficient web services by streamlining the development process and utilizing the Django framework. The study highlights the application of Django's Model-Template-View (MTV) design pattern, which is customized for a listing management system. Smooth data interaction and effective system performance are ensured by the study's seamless integration of Django's capabilities with MySQL for database management. To further improve system performance, focus is given to standardizing data sharing protocols and expediting user authentication procedures. The automation of web page construction with Python, HTML, and CSS modules, which increases system efficacy, is a crucial component of the research. Furthermore, the study shows how crucial security measures are, such as encryption for data confidentiality and integrity, which are made possible by the REST API interaction with the front end and the Django REST framework. Along with discussing key attacks and weaknesses that are frequent in web technology, the article also offers strategies to reduce these risks. Through the use of suitable SDLC models and testing procedures, it recognizes the crucial role that software engineering processes play in the development process. Focusing attention to Django's feature set, scalability, and wide library support, the study proves its advantages over competing web frameworks. The goal of the research is to provide developers and students with the skills they need to fully utilize Django's capabilities, making it easier to create dependable, successful and safe online applications. This study advances knowledge in the field of web technology and service development by lighting the development, difficulties, and current solutions in these fields. The study's ultimate goal is to open the door for comprehensive, modern, and efficient web service creation in order to satisfy the growing need for effective web solutions in the current digital era.

Investigation of authentication methods on web services. Current trends and development prospects

In the development of information technology, software and data protection on web services are of great importance. To ensure security, various methods are used, and one of the main ones is the user authentication process. They use different authentication methods: password, two-factor authentication, biometric, multi-factor, based on artificial intelligence and blockchain technologies. Despite their diversity, each method has its own advantages and disadvantages. Current trends in authentication include combining different methods to increase reliability and improve the user experience. The future of this technology involves finding new ways to balance security and usability, as well as continually updating and adapting methods to changing security threats. This article conducts a study of various authentication methods for web services in order to identify their effectiveness, advantages and disadvantages.

Study of web application development methodology for a medical clinic using React

The article explores in detail the methodologies for developing web applications for medical clinics using the popular React library. The main goal of this study is the analysis of modern approaches to the creation of web applications that meet the specific requirements of medical institutions. Particular attention is paid to the functional and non-functional characteristics that are critical to such systems, including data security, user experience, integration with existing systems, and compliance with regulatory standards. First of all, a comprehensive analysis of the requirements of medical clinics for web applications was carried out. Data security is one of the most important aspects as healthcare institutions work with sensitive information. The study examines methods for ensuring the confidentiality and integrity of medical data, including compliance with HIPAA and GDPR standards. React makes it easy to integrate modern security tools such as JWT (JSON Web Tokens) for authentication and authorization, and use secure HTTP connections for data transfer. In addition, special attention is paid to the user experience (UX/UI), which should ensure the convenience and efficiency of using the web application by both medical personnel and patients. React allows you to create dynamic and interactive interfaces that can adapt to different devices and screens, thus providing a high-quality user experience. This is especially important for medical applications, where the accuracy and speed of interaction can affect the quality of healthcare delivery. A detailed description of best practices and approaches to web application development using React is provided. A component architecture is considered, which provides modularity and code reuse, which is a key factor in creating scalable and easily maintainable applications. Different methods of state management in the application, such as the use of Context API and Redux, have been explored, which allows for efficient data management and stable operation of the application. Guidelines for configuring routing using the React Router library are described, allowing you to create dynamic and multi-page applications while providing smooth navigation and a good user experience. In addition, ways to ensure application security are considered, including protection against XSS attacks, CSRF and other types of vulnerabilities, which is critical in medical applications. The article provides specific recommendations for implementing a web application for a medical clinic. They include practical code examples that demonstrate the implementation of key functionalities such as user registration and authentication, medical record processing, and database interaction. The process of setting up the infrastructure for development, testing and deployment of the application is described, including the use of CI/CD tools to automate these processes, which contributes to increasing the efficiency of development and the quality of the final product. The article provides valuable information for developers who seek to create effective and secure web applications for medical clinics using modern technologies. The conclusions and recommendations presented in the study will help ensure high quality and compliance of the developed solutions with modern industry standards and requirements, which will contribute to increasing the efficiency of the work of medical institutions and the quality of medical services provided to patients

Addressing environmental stochasticity in reconfigurable intelligent surface aided unmanned aerial vehicle networks: Multi-task deep reinforcement learning based optimization for physical layer security

Deep Reinforcement Learning (DRL) is a powerful tool for optimizing communications in reconfigurable intelligent surface (RIS)-assisted millimeter-wave unmanned aerial vehicle (UAV) systems, particularly for ensuring physical layer security by dynamically maximizing signal strength for legitimate users while minimizing leakage towards eavesdroppers. However, existing approaches often overfit the DRL agent to a non-stochastic environment, where the trajectories of users and eavesdroppers are fixed. This results in a single-task DRL agent that cannot generalize beyond the training environment/task. In response, this study introduces a novel multi-task DRL framework to address this limitation. Firstly, recognizing that not all tasks share the same solution, we proposed a reward-driven clustering method to group similar tasks based on their reward scores. This enables the training of a shared multi-task DRL agent for each cluster. Each cluster can be treated as an expertise, and the cluster-specific multi-task DRL agents are considered the 'experts'. Meanwhile, we leverage federated learning (FL) to speed up the training of the shared multi-task DRL agent. By combining these two techniques, our reward-driven clustered FL autonomously groups similar tasks together rapidly. Simulation results demonstrate a reduction in the number of agents from 50 to 10 specialized 'experts', while achieving a 10X speedup compared to conventional single-task DRL training. Furthermore, the study presents a mixture of experts (MoE) model that unifies these 'experts' into a single model. The MoE is trained to select the most suitable 'expert' when encountering new tasks. Our MoE exhibits robustness by effectively generalizing to 50 novel tasks without fine-tuning.

Visions of the Future: What Could Happen to User Authentication?

The most prevalent information system security feature for the user is the authentication process. Passwords have been the primary authentication method for decades due to their simplicity for both the user and the system provider. However, over recent years, the digitalization of services has increased the number of credentials each user must manage, making traditional password authentication problematic for the user. Strong candidates for easier and more secure authentication methods are emerging (e.g., FIDO alliance, Single-sign-on, biometrics). Still, a single method has yet to dominate the market due to the rapid changes in technology, costs of implementation, trust in these methods, and the vast number of users and digital services. Due to the varied reasons that affect the adoption of these methods, it is unclear what kinds of authentication methods will be the forerunners in the future. This study aims to envision the future of user authentication and security features emerging from the interaction of different factors. We present a qualitative interview study, which examines six experts from the fields of authentication, cybersecurity, and emerging technologies. A hermeneutic mode of analysis is used to form scenarios of the future based on the observations of different experts. The results reflect an understanding of how users and their interactions with security features, such as authentication, may change over the following decade and beyond and how security professionals intend to incorporate this knowledge into future security systems. The results shed light on the influence of society, developing technology, and the need for user- and future-proof security in the coming years. This study will have several implications, as it will contribute to forming a coherent picture of the different elements that shape the future and give an idea of how to prepare for what is coming. Furthermore, it will provide an understanding of how choices with technology today lead to different futures.

Rancang Bangun Sistem Autentikasi Hotspot Berbasis Radius Server Menggunakan Mikrotik Pada Sekolah Menengah Kejuruan Negeri 5 Luwu

This study aims to design and build a hotspot network system using userman and proxy server radius at SMK Negeri 5 Luwu to solve problems because users are not limited in using devices to make internet connections in the school environment. Radius servers run a centralized user administration system. This system will certainly simplify the task of an administrator. With this system, users can use hotspots in different places by authenticating to the radius server. This research was conducted at SMK Negeri 5 Luwu. The research method used in this study is Network Development Life Cycle (NDLC). Data collection methods consisting of direct observation methods to the research location, interviews with one of the operators as well as network operators / administrators in the school, literature studies. Testing was conducted using browser, CMD and Speedtest. The results of research with the hotspto using userman and radius server using the same user as the password in user authentication management to improve network security have been successfully implemented internet networks in schools to improve network security, so it is very helpful for network providers in managing and monitoring all users connected to their networks.

Forensic Approaches for End-to-End Encryption Cloud Storage Services: MEGA as a Case Study

The advancement of cloud-based data storage technology allows users to conveniently access and manage files using endpoint devices without being constrained by their environment. While cloud storage services have improved the efficiency of performing our daily tasks, they have also become a medium for criminals to distribute illegal materials. Services that support end-to-end encryption (E2EE), cannot decrypt data even when it's stored on their servers, attracting users who require high security. There are some existing studies related to cloud-based services using E2EE, but they only deal with local artifacts, which makes it difficult to analyze when local devices cannot be found or when there are changes to local artifacts. This study identifies the mechanisms by which MEGA, a cloud-based file hosting service, operates to obtain user authentication, explore metadata, and collect files while applying end-to-end encryption. Furthermore, we propose a forensic investigation methodology to explore various metadata and selectively acquire cloud resources relevant to an incident through an understanding of E2EE algorithms. Also, we apply MEGA to the existing framework to suggest improving the framework that encompasses E2EE cloud-based services. The findings of this study serve as a valuable reference for dealing with cloud-based services with E2EE from the perspectives of computer security and digital forensics.

Outlier detection for keystroke biometric user authentication.

User authentication is a fundamental aspect of information security, requiring robust measures against identity fraud and data breaches. In the domain of keystroke dynamics research, a significant challenge lies in the reliance on imposter datasets, particularly evident in real-world scenarios where obtaining authentic imposter data is exceedingly difficult. This article presents a novel approach to keystroke dynamics-based authentication, utilizing unsupervised outlier detection techniques, notably exemplified by the histogram-based outlier score (HBOS), eliminating the necessity for imposter samples. A comprehensive evaluation, comparing HBOS with 15 alternative outlier detection methods, highlights its superior performance. This departure from traditional dependence on imposter datasets signifies a substantial advancement in keystroke dynamics research. Key innovations include the introduction of an alternative outlier detection paradigm with HBOS, increased practical applicability by reducing reliance on extensive imposter data, resolution of real-world challenges in simulating fraudulent keystrokes, and addressing critical gaps in existing authentication methodologies. Rigorous testing on Carnegie Mellon University's (CMU) keystroke biometrics dataset validates the effectiveness of the proposed approach, yielding an impressive equal error rate (EER) of 5.97%, a notable area under the ROC curve of 97.79%, and a robust accuracy (ACC) of 89.23%. This article represents a significant advancement in keystroke dynamics-based authentication, offering a reliable and efficient solution characterized by substantial improvements in accuracy and practical applicability.

Underwater Wavelength Attack on Discrete Modulated Continuous-Variable Quantum Key Distribution.

The wavelength attack utilizes the dependence of beam splitters (BSs) on wavelength to cause legitimate users Alice and Bob to underestimate their excess noise so that Eve can steal more secret keys without being detected. Recently, the wavelength attack on Gaussian-modulated continuous-variable quantum key distribution (CV-QKD) has been researched in both fiber and atmospheric channels. However, the wavelength attack may also pose a threat to the case of ocean turbulent channels, which are vital for the secure communication of both ocean sensor networks and submarines. In this work, we propose two wavelength attack schemes on underwater discrete modulated (DM) CV-QKD protocol, which is effective for the case with and without local oscillator (LO) intensity monitor, respectively. In terms of the transmittance properties of the fused biconical taper (FBT) BS, two sets of wavelengths are determined for Eve's pulse manipulation, which are all located in the so-called blue-green band. The derived successful criterion shows that both attack schemes can control the estimated excess noise of Alice and Bob close to zero by selecting the corresponding condition parameters based on channel transmittance. Additionally, our numerical analysis shows that Eve can steal more bits when the wavelength attack controls the value of the estimated excess noise closer to zero.

A secure user authentication scheme for crypto-wallet in IoT environment

A secure user authentication scheme for crypto-wallet in IoT environment