Various Types Of Security Attacks Research Articles

A Distance Vector Hop-Based Secure and Robust Localization Algorithm for Wireless Sensor Networks

Location information of sensor nodes in a wireless sensor network is important. The sensor nodes are usually required to ascertain their positions so that the data collected by these nodes can be labeled with this information. On the other hand, certain attacks on wireless sensor networks lead to the incorrect estimation of sensor node positions. In such situations, when the location information is not correct, the data may be labeled with wrong location information that may subvert the desired operation of the wireless sensor network. In this work, we formulate and propose a distance vector hop-based algorithm to provide secure and robust localization in the presence of malicious sensor nodes that result in incorrect position estimation and jeopardize the wireless sensor network operation. The algorithm uses cryptography to ensure secure and robust operation in the presence of adversaries in the sensor network. As a result of the countermeasures, the attacks are neutralized and the sensor nodes are able to estimate their positions as desired. Our secure localization algorithm provides a defense against various types of security attacks, such as selective forwarding, wormhole, Sybil, tampering, and traffic replay, compared with other algorithms which provide security against only one or two types. Simulation experiments are performed to evaluate the performance of the proposed method, and the results indicate that our secure localization algorithm achieves the design objectives successfully. Performance of the proposed method is also compared with the performance of basic distance vector hop algorithm and two secure algorithms based on distance vector hop localization. The results reveal that our proposed secure localization algorithm outperforms the compared algorithms in the presence of multiple attacks by malicious nodes.

NovelADS: A Novel Anomaly Detection System for Intra-Vehicular Networks

Modern vehicular electronics is a complex system of multiple Electronic Control Units (ECUs) communicating to provide efficient vehicle functioning. These ECUs communicate using the well-known Controller Area Network (CAN) protocol. The increasing amount of research in the Intelligent Transportation System (ITS) domain has demonstrated that this protocol is vulnerable to various types of security attacks, compromising the safety of passengers and pedestrians on the roads. Hence, there is a need to develop novel anomaly detection systems to address this problem. This work presents a novel deep learning-based Intrusion Detection System incorporating thresholding and error reconstruction approaches. We train and explore multiple neural network architectures and compare their performance. The proposed anomaly detection system is tested on four kinds of attacks - Denial of Service (DoS), Fuzzy, RPM Spoofing and Gear Spoofing using evaluation metrics such as Precision, Recall and F1-Score. We also present reconstruction-error distribution plots to give a qualitative intuition about the proposed system’s ability to distinguish between genuine and anomalous sequences.

A novel deep learning based security assessment framework for enhanced security in swarm network environment

Security assessments are essential in network systems to improve the reliability of the environment. This study presents a deep learning-based security assessment model as a proactive approach for monitoring network activities. This approach can improve security across the network environment and connected computing infrastructures by detecting and classifying various types of security attacks. Deep learning is one of the emerging solutions for integrating intelligent and smart techniques into traditional solutions for improving the performance of security detection. Leveraging a multilayer perceptron (MLP) combined with an XGBoost classifier for large-scale data processing and classification, the performance of the approach demonstrated an accuracy of 93.30% and a precision of 92.73% for malicious attack detection.

Security Trend and Trust in India's E-Governance Framework

In an e-governance framework, the end user frequently falls victim to the digital divide and a lack of required knowledge regarding self-protection against cyber-attacks. The purpose of this research is to examine the threats to the e-governance framework, end users' trust in the security of e-governance applications, and end users' security behaviour on the Internet. Additionally, the research forecasts future trends in various types of security attacks in India. To forecast future trends in various types of security attacks in India, historical data from the CERT-in annual report is gathered (2006 to 2020). To forecast future trends, the AutoRegressive Integrated Moving Average (ARIMA) is applied to the collected data. Additionally, an anonymous survey of 1,000 end users was conducted to ascertain end users' trust in the security of e-governance applications and some end users' security behaviour on the Internet. The research concludes that five of the six attack categories identified by CERT-in will see a consistent increase in the next five years.

Combined Anomaly Detection Framework for Digital Twins of Water Treatment Facilities

Digital twins of cyber-physical systems with automated process control systems using programmable logic controllers (PLCs) are increasingly popular nowadays. At the same time, cyber-physical security is also a growing concern with system connectivity. This study develops a combined anomaly detection framework (CADF) against various types of security attacks on the digital twin of process control in water treatment facilities. CADF utilizes the PLC-based whitelist system to detect anomalies that target the actuators and the deep learning approach of natural gradient boosting (NGBoost) and probabilistic assessment to detect anomalies that target the sensors. The effectiveness of CADF is verified using a physical facility for water treatment with membrane processes called the Secure Water Treatment (SWaT) system in the Singapore University of Technology and Design. Various attack scenarios are tested in SWaT by falsifying the reported values of sensors and actuators in the digital twin process. These scenarios include both trivial attacks, which are commonly studied, as well as non-trivial (i.e., sophisticated) attacks, which are rarely reported. The results show that CADF performs very well with good detection accuracy in all scenarios, and particularly, it is able to detect all sophisticated attacks while ongoing before they can induce damage to the water treatment facility. CADF can be further extended to other cyber-physical systems in the future.

Smart home security: challenges, issues and solutions at different IoT layers

The Internet of Things is a rapidly evolving technology in which interconnected computing devices and sensors share data over the network to decipher different problems and deliver new services. For example, IoT is the key enabling technology for smart homes. Smart home technology provides many facilities to users like temperature monitoring, smoke detection, automatic light control, smart locks, etc. However, it also opens the door to new set of security and privacy issues, for example, the private data of users can be accessed by taking control over surveillance devices or activating false fire alarms, etc. These challenges make smart homes feeble to various types of security attacks and people are reluctant to adopt this technology due to the security issues. In this survey paper, we throw light on IoT, how IoT is growing, objects and their specifications, the layered structure of the IoT environment, and various security challenges for each layer that occur in the smart home. This paper not only presents the challenges and issues that emerge in IoT-based smart homes but also presents some solutions that would help to overcome these security challenges.

Authentication-Based Secure Data Dissemination Protocol and Framework for 5G-Enabled VANET

The amalgamation of Vehicular Ad hoc Network (VANET) with the Internet of Things (IoT) leads to the concept of the Internet of Vehicles (IoV). IoV forms a solid backbone for Intelligent Transportation Systems (ITS), which paves the way for technologies that better explain about traffic efficiency and their management applications. IoV architecture is seen as a big player in different areas such as the automobile industry, research organizations, smart cities and intelligent transportation for various commercial and scientific applications. However, as VANET is vulnerable to various types of security attacks, the IoV structure should ensure security and efficient performance for vehicular communications. To address these issues, in this article, an authentication-based protocol (A-MAC) for smart vehicular communication is proposed along with a novel framework towards an IoV architecture model. The scheme requires hash operations and uses cryptographic concepts to transfer messages between vehicles to maintain the required security. Performance evaluation helps analyzing its strength in withstanding various types of security attacks. Simulation results demonstrate that A-MAC outshines other protocols in terms of communication cost, execution time, storage cost, and overhead.

Authentication-Based Vehicle-to-Vehicle Secure Communication for VANETs

Communication in VANETs is vulnerable to various types of security attacks since it is constructed based on an open wireless connection. Therefore, a lightweight authentication (LIAU) scheme for vehicle-to-vehicle communication is proposed in this paper. The LIAU scheme requires hash operations and uses cryptographic concepts to transfer messages between vehicles, in order to maintain the required security. Moreover, we made the LIAU scheme lightweight by introducing a small number of variable parameters in order to reduce the storage space. Performance analysis shows that the LIAU scheme is able to resist various types of security attacks and it performs well in terms of communication cost and operation time.

<inline-formula> <tex-math notation="LaTeX">$iCLAS$ </tex-math> </inline-formula>: An Improved Certificateless Aggregate Signature Scheme for Healthcare Wireless Sensor Networks

As the world’s population gradually enters the aging stage, the smart healthcare demand has become extremely urgent and incomparably important. Healthcare wireless sensor networks (HWSNs) is one of the foundations of smart healthcare. Medical information is extremely sensitive information. However, HWSNs uses a common communication channel and is vulnerable to various types of security attacks. Therefore, ensuring the communication and data security of HWSNs and protecting patient privacy are the basis of smart healthcare. After analyzing the deficiencies of a certificateless aggregation signature scheme for HWSNs, an improved certificateless aggregation signature scheme (called iCLAS) is proposed in this paper. We present rigorous security proof that shows iCLAS can resist all kinds of security attacks and can ensure patient privacy protection. The detailed performance comparisons show iCLAS has clear advantages in computation and communication cost.

Performance Analysis of Aes and 3des for Implementing Multi Level Authentication in Cloud Through Rest Api

Last couple of decades, internet usage has been changed each and every technology domain. This has lead to implementation and accommodation of cloud computing. As the Cloud has the nature of sharing the data, it led to various types of security attacks. Hence security mechanisms which has various features/types are needed and hence security breaches can be prevented. Authentication is one of the vital techniques playing a major role in security part. Cloud Computing verifies the identification of a user during the process of accessing the services from cloud servers. Different authentication techniques are used to verify the user’s identity before granting the access to them. This paper analyze the performance of AES and 3DES algorithms and find out the best suit for implementing multi level authentication in cloud. Based on execution time, request and response time against the concurrent user load and file size, AES is faster, more secure and safer than 3DES.

Issues, Challenges, and Research Opportunities in Intelligent Transport System for Security and Privacy

Intelligent transport system (ITS), owing to their potential to enhance road safety and improve traffic management, have attracted attention from automotive industries and academia in recent years. The underlying technology—i.e., vehicular ad-hoc networks (VANETs)—provide a means for vehicles to intelligently exchange messages regarding road and traffic conditions to enhance safety. The open nature of ITS as wireless communication technology leads to many security and privacy challenges. These challenges pertain to confidentiality, authentication, integrity, non-repudiation, location privacy, identity privacy, anonymity, certificate revocation, and certificate resolution. This article aims to propose a novel taxonomy of security and privacy issues and solutions in ITS. Furthermore, categorization of security and privacy schemes in ITS and their limitations are discussed with various parameters—scalability, privacy, computational cost, communication overhead, latency—and various types of security attacks has been analyzed. This article leverages new researchers for challenges and opportunities related to security and privacy in ITS.

Advanced formal authentication protocol using smart cards for network applicants

The rapid growth of internet technologies has provided various functions that allow easy remote user or customer access to its many systems. However, the responsibility of the system does not end after providing access to such remote users. The framework must consummate a precise level of security, because otherwise, an adversary may be able to disrupt the system or use its resources without authorization. This affects the system and its clients directly or obliquely, and to restrict access, an authentication scheme must be implemented. Recently, Nikooghadam et al. proposed an authentication and key agreement protocol and illustrated how it would be secure against various types of security attacks. In this study, we show that their proposed system is susceptible to insider, replay, and password-guessing attacks. We propose a more secure authentication system that can withstand discrete attacks, and measure the total execution time to determine what realistic implementation is needed to carry out an entire scheme.

SecSPS: A Secure and Privacy-Preserving Framework for Smart Parking Systems

Smart parking systems are a crucial component of the “smart city” concept, especially in the age of the Internet of Things (IoT). They aim to take the stress out of finding a vacant parking spot in city centers, due to the increasing number of cars, especially during peak hours. To realize the concept of smart parking, IoT-enabling technologies must be utilized, as the traditional way of developing smart parking solutions entails a lack of scalability, compatibility with IoT-constrained devices, security, and privacy awareness. In this paper, we propose a secure and privacy-preserving framework for smart parking systems. The framework relies on the publish/subscribe communication model for exchanging a huge volume of data with a large number of clients. On one hand, it provides functional services, including parking vacancy detection, real-time information for drivers about parking availability, driver guidance, and parking reservation. On the other hand, it provides security approaches on both the network and application layers. In addition, it supports mutual authentication mechanisms between entities to ensure device/ data authenticity, and provide security protection for users. That makes our proposed framework resilient to various types of security attacks, such as replay, phishing, and man-in-the-middle attacks. Finally, we analyze the performance of our framework, which is suitable for IoT devices, in terms of computation and network overhead.

Wireless Sensor Network Security Enhancement Using Directional Antennas: State of the Art and Research Challenges.

Being often deployed in remote or hostile environments, wireless sensor networks are vulnerable to various types of security attacks. A possible solution to reduce the security risks is to use directional antennas instead of omnidirectional ones or in conjunction with them. Due to their increased complexity, higher costs and larger sizes, directional antennas are not traditionally used in wireless sensor networks, but recent technology trends may support this method. This paper surveys existing state of the art approaches in the field, offering a broad perspective of the future use of directional antennas in mitigating security risks, together with new challenges and open research issues.

A Novel Honeypot Based Detection and Isolation Approach (NHBADI) To Detect and Isolate Black Hole Attacks in MANET

Mobile adhoc networks (MANETs) suffer from various types of security attacks. In this paper, a novel probabilistic approach is proposed to detect and to isolate the Black Hole attack from MANET. Routing algorithms that are used nowadays are not designed to handle these types of attacks. This paper proposes a technique which is known as NHBADI, which uses Honeypot methodology to detect and isolate Black Hole attacks. Unlike existing techniques, the proposed Honeypot technique enhances the security of the MANET by reducing the network overhead. To measure the effectiveness of the proposed system, NS-2 simulator is used. The proposed technique not only detects malicious Black Hole nodes but also isolates the vulnerable Black Hole nodes from the network. The proposed NHBADI scheme reduces network overhead, normalized routing load and packet drop ratio.

An Empirical Study of Routing Attacks in Mobile Ad-hoc Networks

Mobile ad-hoc network is an infrastructure-less and self-organizing network, where nodes communicate through wireless links. Because of its dynamic topology, security becomes a vital issue compared to infrastructure networks. MANETs are more vulnerable to various types of security attacks due to the absence of trusted centralized authority. Several routing protocols have been proposed for these networks to establish an end to end link for communication between the nodes. These protocols are prone to attacks by the malicious nodes and there is always a need to detect and prevent the attacks timely before the collapse of network. In this paper the focus lies on current routing attacks, security issues of ad-hoc networks and solutions to mitigate attacks against the routing protocols based on cooperation between nodes in network.

A Survey on Different Software SecurityAttacks and Risk Analysis Based on SecurityThreats

Security attacks play a major role in software. Attacks are classified in to active and passive attack some attacks are passive information are monitored whereas others are active information are altered. Attacks aims to exploit, destroy, and steal the authorized information. The main goal of software security is to protect confidentiality, maintain integrity and to ensure availability. The need of security is to identify the risk of threats and vulnerabilities in the software. The risk analysis is to identify the risk in the software the identified risks are analysed, accepted and managed. Vulnerability refers to the security flaw in the system that allows an attack to be successful. Threat includes spyware and malwares that can cause harm to the organization. The proposed work focuses on various types of security attacks are discussed in terms of information, hardware, hacker and software.

Secure Routing Protocol in Delay TolerantNetworks Using Fuzzy Logic Algorithm

Security is the biggest challenge in MANET. MANET presents various types of security attacks on data exchanges taking place between source and destination. In this misbehavior detection schemes for conventional wireless networks has opposed black hole attack and malicious node occur routing, this proposed technique as a great challenges in networks. In this iTrust, a probabilistic misbehavior detection scheme is highly desirable to assure the secure DTN routing as well as the establishment of the trust, among DTN nodes. A zone (routing zone) of a node is used to collect the node information within the range. In this protocol, it cannot achieve the packet delivery ratio, performance and data loss rate. In this paper we are providing the solution against black hole attack which is based on fuzzy rule. Fuzzy rule is used to identify the infected node as well as provide the solution to reduce data loss over network. Fuzzy logic ranges between the value as {0, 1}. Geographic routing is one of the most suitable routing strategies in wireless mobile Adhoc network mainly due to its scalability. Multi Input Multi Output technique used to send data frequently in routing protocol. Analysis and simulation results demonstrate the effectiveness and efficiency of the drop node analysis, high packet delivery ratio, throughput and delay.

An RGB image encryption using diffusion process associated with chaotic map

Image encryption and decryption are essential for securing images from various types of security attacks. In this paper, we have proposed a new algorithm for RGB image encryption and decryption using diffusion method with a combination of chaotic maps. We have formulated a new algorithm for the entire possible range to choose keys for encrypting and decrypting RGB image. Computer simulation with two standard examples and results are given to analyse the capability of the proposed approach. Several important analysis like key space, key sensitivity, NPCR, UACI, MSE and PSNR analysis are performed. Results of various analysis and computer simulation confirm that the new algorithm offers high security and is suitable for practical image encryption.

Reduced Overhead Based Approach for Secure Communication in Mobile Ad Hoc Network

Mobile ad hoc network (MANET) is an infrastructureless mobile networks where nodes can freely move and join. MANET has attracted much attention in recent years owing to the increased focus on wireless communication. It is a highly flexible network, vulnerable to various types of security attacks by malicious nodes. Ensuring network security is a major concern in the case of MANET. Certificate revocation play an important role in securing the network by isolating attackers from further participating in network activities. Certification Authority (CA) is responsible for revoking the certificates of attacker nodes. CA maintains two lists, warning list and black list to keep accusing and accused nodes respectively inorder to perform revocation process by considering the first arrived accusation packet. In this paper we focus on the problems of certificate revocation based on first accusation. A threshold based approach is proposed for certificate revocation with better performance, but there is some sort of overhead exist. Inorder to make the communication in MANET more secure we propose a reduced overhead based approach that enhances threshold based approach which introduce an additional list, intermediate list in the CA. The scheme is evaluated and results demonstrate that the proposed scheme is effective and efficient to provide secure communication in mobile ad hoc network.