Wireless Security Research Articles

Mimic Encryption Box for Network Multimedia Data Security

With the rapid development of the Internet, the security of network multimedia data has attracted increasingly more attention. The moving target defense (MTD) and cyber mimic defense (CMD) approaches provide a new way to solve this problem. To enhance the security of network multimedia data, this paper proposes a mimic encryption box for network multimedia data security. The mimic encryption box can directly access the network where the multimedia device is located, automatically complete the negotiation, provide safe and convenient encryption services, and effectively prevent network attacks. According to the principles of dynamization, diversification, and randomization, the mimic encryption box uses a reconfigurable encryption algorithm to encrypt network data and uses IP address hopping, port number hopping, protocol camouflage, and network channel change to increase the attack threshold. Second, the mimic encryption box has a built-in pseudorandom number generator and key management system, which can generate an initial random key and update the key with the hash value of the data packet to achieve “one packet, one key.” Finally, through the cooperation of the ARM and the FPGA, an access control list can be used to filter illegal data and monitor the working status of the system in real time. If an abnormality is found, the feedback reconstruction mechanism is used to “clean” the FPGA to make it work normally again. The experimental results and analysis show that the mimic encryption box designed in this paper has high network encryption performance and can effectively prevent data leakage. At the same time, it provides a mimic security defense mechanism at multiple levels, which can effectively resist a variety of network attacks and has high security.

Analysis of wireless network security systems problems and those solutions

In the people's lives wireless networks play a big role. It is necessary to understand the basic concept of wireless networks, to consider the security issues related to them, and then observe how they work and what benefits they can bring in different cases. In this regard the given research paper presents the fundamental principles of security as well as related open questions. It reviews the security issues of the wireless networks. Security of protocols of wireless network routing has become an urgent necessity to stimulate the network launching and expand the area of its usage. Therefore, the presented research paper proposes and defines different solutions and concepts for security.

Regional robust secure precise wireless transmission design for multi-user UAV broadcasting system

In this paper, two regional robust secure precise wireless transmission (SPWT) schemes for multi-user unmanned aerial vehicle (UAV), (1)regional signal-to-leakage-and-noise ratio (SLNR) and artificial-noise-to-leakage-and-noise ratio (ANLNR) (R-SLNR-ANLNR) maximization and (2) point SLNR and ANLNR (P-SLNR-ANLNR) maximization, are proposed to tackle with the estimation errors of the target users’ location. In the SPWT system, the estimation error for SPWT cannot be ignored. However, the conventional robust methods in secure wireless communications optimize the beamforming vector in the desired positions only in statistical means and cannot guarantee the security for each symbol. The proposed regional robust schemes are designed for optimizing the secrecy performance in the whole error region around the estimated location. Specifically, with the known maximal estimation error, we define the target region and wiretap region. Then, we design an optimal beamforming vector and an artificial noise projection matrix, which achieve the confidential signal in the target area having the maximal power while only few signal power is conserved in the potential wiretap region. Instead of considering the statistical distributions of the estimated errors into optimization, we optimize the SLNR and ANLNR of the whole target area, which significantly decreases the complexity. Moreover, the proposed schemes can ensure that the desired users are located in the optimized region, which are more practical than the conventional methods. Simulation results show that our proposed regional robust SPWT design is capable of substantially improving the secrecy rate compared to the conventional non-robust method. The P-SLNR-ANLNR maximization-based method has the comparable secrecy performance with lower complexity than that of the R-SLNR-ANLNR maximization-based method.

Indoor channel modeling for continuous variable quantum key distribution in the terahertz band.

Continuous-variable quantum key distribution (CVQKD) in an indoor scenario can provide secure wireless access for practical short-distance communications with high rates. However, a suitable channel model for implementing the indoor CVQKD system has not been considered before. Here, we establish an indoor channel model to show the feasibility of CVQKD in terahertz (THz) band. We adopt both active and passive state preparation schemes to demonstrate the performance of the indoor CVQKD system involving multi-path propagation. We achieve the channel transmittance characterized by frequency, water-vapor density, antenna gain, reflection loss and the surrounding itself. The ray-tracing based numerical simulations show that the multi-path propagation can degrade the performance of the indoor CVQKD system. The maximum transmission distance is two meters at 410 GHz for both active and passive state preparations, and it can be extended to 35 and 20 meters respectively by using high gain antenna to combat the multi-path propagation.

Secure and reliable wireless advertising system using intellectual characteristic selection algorithm for smart cities

Smart cities wireless advertising (smart mobile-AD) filed is one of the well-known area of research where smart devices using mobile ad hoc networks (MANET) platform for advertisement and marketing purposes. Wireless advertising through multiple fusion internet of things (IoT) sensors is one of the important field where the sensors combines multiple sensors information and accomplish the control of self-governing intelligent machines for smart cities advertising framework. With many advantages, this field has suffered with data security. In order to tackle security threats, intrusion detection system (IDS) is adopted. However, the existing IDS system are not able to fulfill the security requirements. This paper proposes an intellectual characteristic selection algorithm (ICSA) integrated with normalized intelligent genetic algorithm-based min-max feature selection (NIGA-MFS). The proposed solution designs for wireless advertising system for business/advertising data security and other transactions using independent reconfigurable architecture. This approach supports the wireless advertising portals to manage the data delivery by using 4G standard. The proposed reconfigurable architecture is validated by using applications specific to microcontrollers with multiple fusion IoT sensors.

An Efficient Hybrid Signcryption Scheme With Conditional Privacy-Preservation for Heterogeneous Vehicular Communication in VANETs

Vehicular ad hoc networks (VANETs) ensure improvement in road safety and traffic management by allowing the vehicles and infrastructure that are connected to them to exchange safety messages. Due to the open wireless communication channels, security and privacy issues are a major concern in VANETs. A typical attack consists of a malicious third party intercepting, modifying and retransmitting messages. Heterogeneous vehicular communication in VANETs occurs when vehicles (only) or vehicles and other infrastructure communicate using different cryptographic techniques. To address the security and privacy issues in heterogeneous vehicular communication, some heterogeneous signcryption schemes have been proposed. These schemes simultaneously satisfy the confidentiality, authentication, integrity and non-repudiation security requirements. They however fail to properly address the efficiency with respect to the computational cost involved in unsigncrypting ciphertexts, which is often affected by the speeds at which vehicles travel in VANETs. In this paper, we propose an efficient conditional privacy-preserving hybrid signcryption (CPP-HSC) scheme that uses bilinear pairing to satisfy the security requirements of heterogeneous vehicular communication in a single logical step. Our scheme ensures the transmission of a message from a vehicle with a background of an identity-based cryptosystem (IBC) to a receiver with a background of a public-key infrastructure (PKI). Furthermore, it supports a batch unsigncryption method, which allows the receiver to speed up the process by processing multiple messages simultaneously. The security of our CPP-HSC scheme ensures the indistinguishability against adaptive chosen ciphertext attack (IND-CCA2) under the intractability assumption of q -bilinear Diffie-Hellman inversion ( q -BDHI) problem and the existential unforgeability against adaptive chosen message attack (EUF-CMA) under the intractability assumption of q -strong Diffie-Hellman ( q -SDH) problem in the random oracle model (ROM). The performance analysis indicates that our scheme has an improvement over the existing related schemes with respect to the computational cost without an increase in the communication cost.

End-to-End Learning of Secure Wireless Communications: Confidential Transmission and Authentication

Aiming to provide more efficient and robust physical layer security strategies for wireless communications, this article investigates the endogenous security of end-to-end learning of communication by addressing two main security issues of communication: confidential transmission and user authentication. For confidential transmission, we have redesigned the loss function of the autoencoder-based deep learning communication model to combat illegal eavesdropping over wireless broadcast channels. While assuming that the eavesdropper has three different ways of decoding prior information, the probability of successful eavesdropping attack is evaluated using the bit error rate criterion. In terms of user authentication, an authentication scheme using symbol-level fingerprints is designed for a single user, which takes advantage of the high complexity of parameters of the deep learning model and its natural sensitivity to training conditions. In addition, by leveraging a denoising autoencoder, we extend the authentication to adapt to the multi-user access situation. Experiments have shown that the proposed authentication scheme could guarantee reliability under dynamic channel and resistance to wireless attacks. The results inspire us to rebuild an efficient physical layer secure framework for wireless communication through a new deep learning method.

Pilot and Data Power Allocation in Poisson Interference Field With Protected Zone for Physical-Layer Security

Physical-layer security has become widely recognized as a promising technique to enhance wireless security by exploiting the characteristics including fading, noise, and interference. This letter explores an opportunity to enhance physical-layer security by balancing the power expense between pilot and payload signals without any prior knowledge related to eavesdroppers. In lieu of presuming perfect channel acquisition, we consider a practical wiretap channel with the receivers enabled by pilot-aided channel estimation (CE). The problem is tackled by accounting for the network interference from cochannel interferers in unknown locations by which the secrecy level is significantly affected. Specifically, the secrecy transmission rate (STR) reflecting the CE errors is derived for the worst-case within the use of a protected zone. We investigate the feasible region of pilot and data power allocation under reliability and secrecy constraints, and the optimal power allocation for pilot and data to maximize the STR is proposed, whose performance is verified via simulations.

WIRELESS WI-FI SECURITY ANALYSIS IN AUTOMATED RAILWAY SYSTEMS

Purpose. The article is aimed to analyze the basic security mechanisms available in Wi-Fi networks; show the mechanisms for attacking these defenses; carry out a comparative analysis of the effectiveness of protection mechanisms; provide recommendations for the use of these mechanisms in automated rail transport systems; build a demonstration model of attacks on Wi–Fi network security. Methodology. Based on the review of a significant number of domestic and foreign sources, a comparative analysis of the security mechanisms of the Wi–Fi network is carried out, where individual protection standards are analyzed, their strengths and weaknesses appear. A variety of attacks on authentication tools and mechanisms for ensuring the security of information exchange are shown. To demonstrate an attack on these security features, an algorithm has been developed for a demonstration simulation model of the WPA2 security protocol with the ability to attack this protocol. Findings. The basic standards of Wi–Fi security mechanisms have been compared. In particular, WEP, WPA, WPA2, WPA3. Different attacks on these standards have been demonstrated. The advantages and weaknesses of individual mechanisms of protective means are shown, recommendations for their use are provided. A demonstration model of attacks on wireless network protection mechanisms has been built, which demonstrates such attacks as an attack on a passphrase and a KRACK attack. To demonstrate in the program, the WPA2 standard with the PSK authentication mechanism and the cryptographic protection mechanism CCMP-128 is chosen. Originality. A wide range of Wi–Fi network security mechanisms is presented, the capabilities of individual security mechanisms are shown, and Wi–Fi network security standards are compared. The original software model shows how erroneous user actions help an attacker overcome modern security mechanisms. Practical value. Recommendations for the use of separate Wi-Fi security features can be used to build a security system for individual components of automated rail systems. A demonstration model of an attack on a Wi-Fi network can be used in a training process to train cybersecurity specialists.

Information encryption communication system based on the adversarial networks Foundation

We propose an encryption communication system based on the adversarial networks, called Adversar; Network Encryption System (ANES), which contains Sender, Receiver and various Attackers. Using a general loss function, we design three types of ANES with different Attackers, which simulate different password attacks on communications. Through the one-to-one adversarial training between Sender and these all Attackers, ANES can frequently master One Time Pad (OTP) algorithms without human cognition. We find that the more and stronger the opponents ANES encountered, the higher the probability of learning OTP. We also present a more aggressive attack network based on Chosen Ciphertext Attack (CCA) as the antagonist of Sender and Receiver, and finally the system learns OTP with a considerable probability. Experimental results demonstrate that our encryption strategy is comparable to other related works.

Mobile Phone Signals Interference Cancellation With Improved WLAN Transmission and Thermal Insulation of Buildings Using FSS and RC Film

For macro-femto network, intratier and cross-tier interference (CI) must be canceled to achieve the quality of service, better indoor coverage, and higher data rates. Moreover, for better wireless local area network (WLAN) and mobile communication services while ensuring WLAN security, appropriate temperature in modern buildings with reduced energy cost is also required. To address these issues, RadioClear (RC) film can be pasted on an ordinary glass and installed in different sections to cancel the intratier interference between the femto network as well as CI between the femto and macro network. Moreover, this technique can also ensure enhanced WLAN security and thermal insulation in modern buildings. For WLAN transmission, a fractal dual bandpass frequency selective surface (FSS) designed in the RC sheet can be used to improve the WLAN communication in a situation where two or more than two rooms are served through a single WLAN router. Theoretical results are presented which are further verified through the experimental results.

Distributed Beamforming in the Presence of Adversaries

In this article, we investigate the problem of distributed coherent beamforming in wireless networks where multiple distributed transmitters adjust the phases of their signals to form a directional and targeted communication link to a client receiver. The quality-of-service (QoS) and security are key components of robust and secure wireless networks. Although the security can be improved by exploiting information about potential adversaries, such information may not be available in practical networks since the adversaries are often passive. Therefore, we introduce transmission strategies which not only send a confidential message by forming a beam towards the client but also broadcast interference with the aim of obfuscating adversaries without having any information about them. Since the interference may degrade the QoS of the client, the transmitters radiating the interference steer a null to the client to alleviate the interference. We develop two algorithms. The first assumes that a subset of the transmitters send the confidential message in the direction of the client via coherent beamforming. Then, the others transmit interference while creating a null towards the client. In the second, each node transmits both the confidential message and interference simultaneously. Two different client feedback scenarios are considered, two-bit and rich feedback. Both of the proposed algorithms can be performed in a fully distributed manner without any knowledge about potential adversaries. Numerical simulations in both microwave and low-very high frequency (low-VHF) bands validate the effectiveness of the proposed schemes.

Physical layer authentication in wireless communication networks: A survey

Physical layer security (PLS) in wireless communication systems has attracted extensive research attentions in recent years. Unlike cryptography-based methods applied in upper-layer in network, PLS methods are applied in physical layers and can provide information-theoretic security by utilizing the randomness of signals and wireless channels. In this survey, we provide a comprehensive review in the domain of physical layer authentication (PLA) in wireless communication systems, including the concepts, several key techniques of typical PLA architectures as well as future challenges and research trends in more sophisticated communication systems. The survey begins with an overview of the background and basic concepts of PLA, such as the general model of wireless security communication system, typical frameworks of key-based/less PLA systems, and the common attack models. We then discuss the major concerns and key techniques that are applied in PLA systems, where three types of authentication schemes are considered, i.e., the authentication based on channel information, radio-frequency and identity watermarks. Basic models and representative research results about key approaches and techniques applied to the authentication systems above are subsequently covered. Finally, the associated challenges and potential research trends of PLA in future communication systems are presented at the end of the survey paper.

The Best Defense Is a Good Offense: Adversarial Attacks to Avoid Modulation Detection

We consider a communication scenario, in which an intruder tries to determine the modulation scheme of the intercepted signal. Our aim is to minimize the accuracy of the intruder, while guaranteeing that the intended receiver can still recover the underlying message with the highest reliability. This is achieved by perturbing channel input symbols at the encoder, similarly to adversarial attacks against classifiers in machine learning. In image classification, the perturbation is limited to be imperceptible to a human observer, while in our case the perturbation is constrained so that the message can still be reliably decoded by the legitimate receiver, which is oblivious to the perturbation. Simulation results demonstrate the viability of our approach to make wireless communication secure against state-of-the-art intruders (using deep learning or decision trees) with minimal sacrifice in the communication performance. On the other hand, we also demonstrate that using diverse training data and curriculum learning can significantly boost the accuracy of the intruder.

A Security Concept Based on Scaler Distribution of a Novel Intrusion Detection Device for Wireless Sensor Networks in a Smart Environment.

Following the significant improvement of technology in terms of data collection and treatment during the last decades, the notion of a smart environment has widely taken an important pedestal in the science industry. Built in order to better manage assets, smart environments provide a livable environment for users or citizens through the deployment of sensors responsible for data collection. Much research has been done to provide security to the involved data, which are extremely sensitive. However, due to the small size and the memory constraint of the sensors, many of these works are difficult to implement. In this paper, a different concept for wireless sensor security in smart environments is presented. The proposed security system, which is based on the scaler distribution of a novel electronic device, the intrusion detection system (IDS), reduces the computational functions of the sensors and therefore maximizes their efficiency. The IDS also introduces the concept of the feedback signal and “trust table” used to trigger the detection and isolation mechanism in case of attacks. Generally, it ensures the whole network security through cooperation with other IDSs and, therefore, eliminates the problem of security holes that may occur while adopting such a security technique.

On the Physical Layer Security of Millimeter Wave NOMA Networks

For the capability of providing multi-giga BPS (bits per second) rates, millimeter wave (mmWave) communication is one of the key enabling technologies for the new and future generations of mobile communications, i.e., the fifth generation (5G) and beyond. Meanwhile, non-orthogonal multiple access (NOMA) can significantly increase the spectral efficiency by simultaneously serving multiple users in the same channel. Thus, mmWave NOMA networks have recently attracted considerable research attention. Meanwhile, a large number of confidential messages exchanged within highly interconnected systems has posed tremendous challenges on secure wireless communications, and thus in this article, we investigate the physical layer security of mmWave NOMA networks. Considering the limited scattering characteristics of mmWave channels and imperfect successive interference cancellation at receivers, we develop an analytic framework for the secrecy outage probability (SOP) for mmWave NOMA networks, in which legitimate users and eavesdroppers are randomly distributed. Based on the directional transmission property of mmWave signals, we propose a minimal angle-difference user pairing scheme to reduce the SOP of users. Considering the spatial correlation between the selected user pair and eavesdroppers, we develop two maximum ratio transmission (MRT) beamforming schemes to further enhance the secrecy performance of mmWave NOMA networks. Closed-form SOPs for the paired users with different eavesdropper detection capacities are derived. Numerical results show the effectiveness of our analysis and that there exists an optimal radius of network coverage ranges and transmit power to minimize the SOP of the user pair.

Enhancing security in multicasting through correlated Nakagami-[formula omitted] fading channels with opportunistic relaying

We consider a confidential wireless multicasting scenario in which a base station sends a common stream of information to a group of U users via K relays. V eavesdroppers are trying to decode that confidential information. We are interested to protect the decoding of that information and to see, how the opportunistic relaying can be used to enhance the level of security reducing the effect of correlations. We derive the closed-form analytical expressions for the probability of non-zero secrecy multicast capacity and the secure outage probability for multicasting in terms of the best relaying, and the correlation coefficients of constant, exponential and arbitrary correlations. Our results show that all the correlations are enemy of wireless security in multicasting and the impact of constant correlation is more significant than the exponential and arbitrary correlations. Although the performance of confidential wireless multicasting scenario decreases with the number of multicast users and due to the effect of correlations but this performance can be improved to an original one using the well known opportunistic relaying technique instead of increasing transmit signal power. Since all the relays compete to be the best relay, hence the trade off between the number of relays and multicast users has been established to maintain the acceptable security level reducing the effect of correlations. Finally, analytical results are verified via Monte-Carlo simulation.

Robust Beamforming Designs in Secure MIMO SWIPT IoT Networks With a Nonlinear Channel Model

In this article, we study a robust beamforming design for multiuser multiple-input–multiple-output secrecy networks with simultaneous wireless information and power transfer (SWIPT). In this system, an access point, multiple Internet-of-Things (IoT) devices under the nonlinear energy harvesting (EH) model with a help of one cooperative jammer (CJ). We employ artificial noise (AN) generation to facilitate efficient wireless energy transfer and secure transmission. To achieve EH fairness, we aim to maximize the minimum harvested energy among users subject to secrecy rate constraint and total transmit power constraint in the presence of channel estimation errors. By incorporating a norm-bounded channel uncertainty model, the original robust problem is transformed into a two-layer optimization problem, where the inner layer problem is reformulated as semidefinite programming (SDP) and the outer layer problem is solved by a one-dimensional (1-D) line search algorithm. In addition, in order to reduce computational complexity, we propose an algorithm based on sequential parametric convex approximation (SPCA). Finally, simulation results show that the proposed SPCA method achieves the same performance as the two-layer algorithm with much lower complexity.

A Three-Step Strategy for Recommendation in Mobile Police Video Secure Access

Mobile police video security access link is an important boundary channel to ensure the secure and trusted access of mobile video in the private video network. Therefore, this paper proposes a three-step strategy for access control, encrypted transmission, and wireless video security inspection. While carrying the ability to carry higher video streams, it is both safe and reliable, and has strong scalability in performance. This paper analyzes the access mechanism of SSL VPN in encryption, identity authentication and resource access control. Proposes a mobile police video security access link solution based on SSL VPN for network clients. Respectively presents a secure access solution for wired video and wireless video. And a load balancing access scheme based on NAT address translation is designed. Finally, a test scenario for the maximum number of concurrent users and server bandwidth performance is designed, implemented and analyzed. In actual application, the trial projects have been highly recognized by public security customers.

Tactical approach to identify and quarantine spurious node participation request in sensory application

Securing Wireless Sensor Network (WSN) from variable forms of adversary is still an open end challenge. Review of diversified security apprroaches towards such problems that they are highly symptomatic with respect to resiliency strength against attack. Therefore, the proposed system highlights a novel and effective solution that is capable of identify the spurios request for participating in teh network building process from attacker and in return could deviate the route of attacker to some virtual nodes and links. A simple trust based mechanism is constructed for validating the legitimacy of such request generated from adversary node. The proposed system not only presents a security solution but also assists in enhancing the routing process significantly. The simulated outcome of the study shows that proposed system offers significantly good energy conservation, satisfactory data forwarding performance, reduced processing time in contrast to existing standard security practices.