检索结果-南通市图书馆

security and Privacy Challenges in SDN-Enabled IoT Systems: Causes, Proposed Solutions,and Future Directions

Computers, Materials & Continua 2024年第8期80卷 2511-2533页

作者： Ahmad Rahdari Ahmad Jalili Mehdi Esnaashari Mehdi Gheisari Alisa A.Vorobeva Zhaoxi Fang Panjun Sun Viktoriia M.Korzhuk Ilya Popov Zongda Wu Hamid Tahaei Institute of Artificial Intelligence Shaoxing UniversityShaoxing312000China Department of Computer Engineering Gonbad Kavous UniversityGonbad-e Kavus49717-99151Iran Faculty of Computer Engineering K.N.Toosi University of TechnologyTehran196976-4499Iran Department of Computer Science and Engineering Saveetha School of EngineeringSaveetha Institute of Medical and Technical SciencesChennai602105India Secure Information Technologies Department National Research University ITMOSt.Petersburg197101Russia School of Electrical and Computer Engineering Shiraz UniversityShiraz71946–84334Iran Department of Computer Science and Engineering Islamic Azad UniversityDamavand***Iran Department of R&D Shenzhen BKD Co.Ltd.Shenzhen518000China

Software-Defined Networking(SDN)represents a significant paradigm shift in network architecture,separating network logic from the underlying forwarding devices to enhance flexibility and centralize ***-rently,the Internet of Things(IoT)connects numerous devices to the Internet,enabling autonomous interactions with minimal human ***,implementing and managing an SDN-IoT system is inherently complex,particularly for those with limited resources,as the dynamic and distributed nature of IoT infrastructures creates security and privacy challenges during SDN *** findings of this study underscore the primary security and privacy challenges across application,control,and data planes.A comprehensive review evaluates the root causes of these challenges and the defense techniques employed in prior works to establish sufficient secrecy and privacy *** investigations have explored cutting-edge methods,such as leveraging blockchain for transaction recording to enhance security and privacy,along with applying machine learning and deep learning approaches to identify and mitigate the impacts of Denial of Service(DoS)and Distributed DoS(DDoS)***,the analysis indicates that encryption and hashing techniques are prevalent in the data plane,whereas access control and certificate authorization are prominently considered in the control plane,and authentication is commonly employed within the application ***,this paper outlines future directions,offering insights into potential strategies and technological advancements aimed at fostering a more secure and privacy-conscious SDN-based IoT ecosystem.

关键词： security privacy-preserving software-defined network internet of things

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

security Analysis in Smart Agriculture: Insights from a Cyber-Physical System Application

引用

Computers, Materials & Continua 2024年第6期79卷 4781-4803页

作者： Ahmed Redha Mahlous College of Computer and Information Sciences Prince Sultan UniversityRiyadh11586Saudia Arabia

Smart agriculture modifies traditional farming practices,and offers innovative approaches to boost production and sustainability by leveraging contemporary *** today’s world where technology is everything,these technologies are utilized to streamline regular tasks and procedures in agriculture,one of the largest and most significant industries in every *** research paper stands out from existing literature on smart agriculture security by providing a comprehensive analysis and examination of security issues within smart agriculture *** into three main sections-security analysis,system architecture and design and risk assessment of Cyber-Physical Systems(CPS)applications-the study delves into various elements crucial for smart farming,such as data sources,infrastructure components,communication protocols,and the roles of different stakeholders such as farmers,agricultural scientists and researchers,technology providers,government agencies,consumers and many *** contrast to earlier research,this work analyzes the resilience of smart agriculture systems using approaches such as threat modeling,penetration testing,and vulnerability *** discoveries highlight the concerns connected to unsecured communication protocols,possible threats from malevolent actors,and vulnerabilities in IoT ***,the study suggests enhancements for CPS applications,such as strong access controls,intrusion detection systems,and encryption *** addition,risk assessment techniques are applied to prioritize mitigation tactics and detect potential hazards,addressing issues like data breaches,system outages,and automated farming process *** research sets itself apart even more by presenting a prototype CPS application that makes use of a digital temperature *** application was first created using a Tinkercad simulator and then using actual hardware with Arduino *** CPS application’s defenses against p

关键词： Smart agriculture cyber-physical system IoT security temperature sensor threats vulnerabilities

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Review on security Defense Technology Research in Edge Computing Environment

引用

Chinese Journal of Electronics 2024年第1期33卷 1-18页

作者： Ke SHANG Weizhen HE Shuai ZHANG National Digital Switching System Engineering and Technological R&D Center

Edge computing, which achieves quick data processing by sinking data computing and storage to the network edge, has grown rapidly along with the Internet of things. The new network architecture of edge computing brings new security challenges. Based on this, this paper investigates the edge computing security literature published in recent years and summarizes and analyzes research work on edge computing security from different attack surfaces. We start with the definition and architecture of edge computing. From the attack surface between device and edge server, as well as on edge servers, the research describes the security threats and defense methods of edge computing. In addition, the cause of the attack and the pros and cons of defense methods is introduced. The challenges and future research directions of edge computing are given.

关键词： Cloud computing Systems architecture Computer architecture Network architecture Data processing security Servers

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

On the security of Homomorphic Encryption Schemes with Restricted Decryption Oracles

引用

Journal of Systems Science & Complexity 2024年第5期37卷 2240-2261页

作者： MA Guangsheng LI Hongbo School of Mathematics and Physics North China Electric Power University Academy of Mathematics and Systems Science Chinese Academy of Sciences University of Chinese Academy of Sciences

Fully homomorphic encryption（FHE） can be used for privacy-preserving aggregation of medical data. In this typical application, the security against passive attacks has been well studied by Li and Micciancio（2021）. In this paper, the authors further consider a “nearly passive” kind of attack, where the attacker may behave like a passive attacker in the view of the third-party *** capture the security against this hard-to-detect attack, the authors propose a new notion of IND-CPArDsecurity. The authors show that the standard LWE encryption and its related FHE schemes can not defend against IND-CPArDattack, even under a stricter rule limiting the content and number of queries made by the attacker. To make the application of FHE schemes more secure, the authors discuss some possible modifications that may serve as countermeasures to IND-CPArDattack.

关键词： Homomorphic encryption privacy secure cloud computing security

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

A Review on the security of the Ethereum-Based DeFi Ecosystem

引用

Computer Modeling in Engineering & Sciences 2024年第4期139卷 69-101页

作者： Yue Xue Dunqiu Fan Shen Su Jialu Fu Ning Hu Wenmao Liu Zhihong Tian Cyberspace Institute of Advanced Technology Guangzhou UniversityGuanzhou510000China Innovation Center NSFOCUS Inc.Beijing100089China Engineering Research Center of Integration and Application of Digital Learning Technology Ministry of EducationBeijing100816China

Decentralized finance(DeFi)is a general term for a series of financial products and *** is based on blockchain technology and has attracted people’s attention because of its open,transparent,and intermediary *** them,the DeFi ecosystem based on Ethereum-based blockchains attracts the most ***,the current decentralized financial system built on the Ethereum architecture has been exposed to many smart contract vulnerabilities during the last few ***,we believe it is time to improve the understanding of the prevailing Ethereum-based DeFi ecosystem security *** that end,we investigate the Ethereum-based DeFi security issues:1)inherited from the real-world financial system,which can be solved by macro-control;2)induced by the problems of blockchain architecture,which require a better blockchain platform;3)caused by DeFi invented applications,which should be focused on during the project *** on that,we further discuss the current solutions and potential directions ofDeFi *** to our research,we could provide a comprehensive vision to the research community for the improvement of Ethereum-basedDeFi ecosystem security.

关键词： Blockchain smart contract decentralized finance DeFi security

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Systematic security Guideline Framework through Intelligently Automated Vulnerability Analysis

引用

Computers, Materials & Continua 2024年第3期78卷 3867-3889页

作者： Dahyeon Kim Namgi Kim Junho Ahn Computer Information Technology Korea National University of TransportationChungju27469Korea Department of AI Computer Science and Engineering Kyonggi UniversitySuwon16227Korea

This research aims to propose a practical framework designed for the automatic analysis of a product’s comprehensive functionality and security vulnerabilities,generating applicable guidelines based on real-world *** existing analysis of software security vulnerabilities often focuses on specific features or *** partial and arbitrary analysis of the security vulnerabilities makes it challenging to comprehend the overall security vulnerabilities of the *** key novelty lies in overcoming the constraints of partial *** proposed framework utilizes data from various sources to create a comprehensive functionality profile,facilitating the derivation of real-world security *** guidelines are dynamically generated by associating functional security vulnerabilities with the latest Common Vulnerabilities and Exposure(CVE)and Common Vulnerability Scoring System(CVSS)scores,resulting in automated guidelines tailored to each *** guidelines are not only practical but also applicable in real-world software,allowing for prioritized security *** proposed framework is applied to virtual private network(VPN)software,wherein a validated Level 2 data flow diagram is generated using the Spoofing,Tampering,Repudiation,Information Disclosure,Denial of Service,and Elevation of privilege(STRIDE)technique with references to various papers and examples from related *** analysis resulted in the identification of a total of 121 *** successful implementation and validation demonstrate the framework’s efficacy in generating customized guidelines for entire systems,subsystems,and selected modules.

关键词： Framework automation vulnerability analysis security guidelines

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Network security Enhanced with Deep Neural Network-Based Intrusion Detection System

引用

Computers, Materials & Continua 2024年第7期80卷 1457-1490页

作者： Fatma S.Alrayes Mohammed Zakariah Syed Umar Amin Zafar Iqbal Khan Jehad Saad Alqurni Information Systems Department College of Computer and Information SciencesPrincess Nourah bint Abdulrahman UniversityRiyadh11671Saudi Arabia College of Computer and Information Sciences King Saud UniversityRiyadh11362Saudi Arabia College of Computer and Information Sciences Prince Sultan UniversityRiyadh11586Saudi Arabia Department of Educational Technologies College of EducationImam Abdulrahman Bin Faisal UniversityP.O.Box 1982Dammam31441Saudi Arabia

This study describes improving network security by implementing and assessing an intrusion detection system(IDS)based on deep neural networks(DNNs).The paper investigates contemporary technical ways for enhancing intrusion detection performance,given the vital relevance of safeguarding computer networks against harmful *** DNN-based IDS is trained and validated by the model using the NSL-KDD dataset,a popular benchmark for IDS *** model performs well in both the training and validation stages,with 91.30%training accuracy and 94.38%validation ***,the model shows good learning and generalization capabilities with minor losses of 0.22 in training and 0.1553 in ***,for both macro and micro averages across class 0(normal)and class 1(anomalous)data,the study evaluates the model using a variety of assessment measures,such as accuracy scores,precision,recall,and F1 *** macro-average recall is 0.9422,the macro-average precision is 0.9482,and the accuracy scores are ***,macro-averaged F1 scores of 0.9245 for class 1 and 0.9434 for class 0 demonstrate the model’s ability to precisely identify anomalies *** research also highlights how real-time threat monitoring and enhanced resistance against new online attacks may be achieved byDNN-based intrusion detection systems,which can significantly improve network *** study underscores the critical function ofDNN-based IDS in contemporary cybersecurity procedures by setting the foundation for further developments in this *** research aims to enhance intrusion detection systems by examining cooperative learning techniques and integrating up-to-date threat knowledge.

关键词： Machine-Learning Deep-Learning intrusion detection system security privacy deep neural network NSL-KDD Dataset

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

A Holistic Secure Communication Mechanism Using a Multilayered Cryptographic Protocol to Enhanced security

引用

Computers, Materials & Continua 2024年第3期78卷 4417-4452页

作者： Fauziyah Zhaoshun Wang Mujahid Tabassum School of Computer and Communication Engineering University of Science and TechnologyBeijing100000China Noroff School of Technology and Digital Media(Noroff Accelerate) Noroff University CollegeKristiansand4612Norway

In an era characterized by digital pervasiveness and rapidly expanding datasets,ensuring the integrity and reliability of information is *** cyber threats evolve in complexity,traditional cryptographic methods face increasingly sophisticated *** article initiates an exploration into these challenges,focusing on key exchanges(encompassing their variety and subtleties),scalability,and the time metrics associated with various cryptographic *** propose a novel cryptographic approach underpinned by theoretical frameworks and practical *** to this approach is a thorough analysis of the interplay between Confidentiality and Integrity,foundational pillars of information *** method employs a phased strategy,beginning with a detailed examination of traditional cryptographic processes,including Elliptic Curve Diffie-Hellman(ECDH)key *** also delve into encrypt/decrypt paradigms,signature generation modes,and the hashes used for Message Authentication Codes(MACs).Each process is rigorously evaluated for performance and *** gain a comprehensive understanding,a meticulously designed simulation was conducted,revealing the strengths and potential improvement areas of various ***,our cryptographic protocol achieved a confidentiality metric of 9.13 in comprehensive simulation runs,marking a significant advancement over existing ***,with integrity metrics at 9.35,the protocol’s resilience is further *** metrics,derived from stringent testing,underscore the protocol’s efficacy in enhancing data security.

关键词： Cryptographic security privacy preservation decryption integrity

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

A Review on security and Privacy Issues Pertaining to Cyber-Physical Systems in the Industry 5.0 Era

引用

Computers, Materials & Continua 2024年第9期80卷 3917-3943页

作者： Abdullah Alabdulatif Navod Neranjan Thilakarathne Zaharaddeen Karami Lawal Department of Cybersecurity College of ComputerQassim UniversityBuraydah51452Saudi Arabia Department of ICT Faculty of TechnologyUniversity of ColomboColombo00700Sri Lanka Department of Computer Science Federal University DutseDutse720102Nigeria Faculty of Integrated Technologies Universiti Brunei DarussalamGadongBE1410Brunei Darusalam

The advent of Industry 5.0 marks a transformative era where Cyber-Physical Systems(CPSs)seamlessly integrate physical processes with advanced digital ***,as industries become increasingly interconnected and reliant on smart digital technologies,the intersection of physical and cyber domains introduces novel security considerations,endangering the entire industrial *** transition towards a more cooperative setting,including humans and machines in Industry 5.0,together with the growing intricacy and interconnection of CPSs,presents distinct and diverse security and privacy *** this regard,this study provides a comprehensive review of security and privacy concerns pertaining to CPSs in the context of Industry *** review commences by providing an outline of the role of CPSs in Industry 5.0 and then proceeds to conduct a thorough review of the different security risks associated with CPSs in the context of Industry ***,the study also presents the privacy implications inherent in these systems,particularly in light of the massive data collection and processing *** addition,the paper delineates potential avenues for future research and provides countermeasures to surmount these ***,the study underscores the imperative of adopting comprehensive security and privacy strategies within the context of Industry 5.0.

关键词： Cyber-physical systems CPS Industry 5.0 security data privacy human-machine collaboration data protection

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Towards a lightweight security framework using blockchain and machine learning

引用

BLOCKCHAIN-RESEARCH AND APPLICATIONS 2024年第1期5卷 107-118页

作者： Ismail, Shereen Nouman, Muhammad Dawoud, Diana W. Reza, Hassan Univ North Dakota Sch Elect Engn & Comp Sci Grand Forks ND 58202 USA COMSATS Univ Islamabad Dept Comp Sci Islamabad 44000 Pakistan Univ Dubai Coll Engn & Informat Technol Dubai U Arab Emirates

Cyber-attacks pose a significant challenge to the security of Internet of Things (IoT) sensor networks, necessitating the development of robust countermeasures tailored to their unique characteristics and limitations. Various prevention and detection techniques have been proposed to mitigate these attacks. In this paper, we propose an integrated security framework using blockchain and Machine Learning (ML) to protect IoT sensor networks. The framework consists of two modules: a blockchain prevention module and an ML detection module. The blockchain prevention module has two lightweight mechanisms: identity management and trust management. Identity management employs a lightweight Smart Contract (SC) to manage node registration and authentication, ensuring that unauthorized entities are prohibited from engaging in any tasks, while trust management uses a lightweight SC that is responsible for maintaining trust and credibility between sensor nodes throughout the network's lifetime and tracking historical node behaviors. Consensus and transaction validation are achieved through a Verifiable Byzantine Fault Tolerance (VBFT) mechanism to ensure network reliability and integrity. The ML detection module utilizes the Light Gradient Boosting Machine (LightGBM) algorithm to classify malicious nodes and notify the blockchain network if it must make decisions to mitigate their impacts. We investigate the performance of several off -the -shelf ML algorithms, including Logistic Regression, Complement Naive Bayes, Nearest Centroid, and Stacking, using the WSN-DS dataset. LightGBM is selected following a detailed comparative analysis conducted using accuracy, precision, recall, F1 -score, processing time, training time, prediction time, computational complexity, and Matthews Correlation Coefficient (MCC) evaluation metrics.

关键词： Blockchain Machine learning IoT security Integration Smart contracts

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：