检索结果-南通市图书馆

A decade of research on patterns and architectures for IoT Security

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

CyberSecurity 2022年第2期5卷 27-55页

作者： Tanusan Rajmohan Phu H.Nguyen Nicolas Ferry Capgemini OsloNorway SINTEF OsloNorway UniversitéCôte d’Azur I3S/INRIA KairosSophia AntipolisFrance

Security of the Internet of Things (IoT)-based Smart Systems involving sensors, actuators and distributed control loop is of paramount importance but very difficult to address. Security patterns consist of domain-independent time-proven Security knowledge and expertise. How are they useful for developing secure IoT-based smart systems? Are there architectures that support IoT Security? We aim to systematically review the research work published on patterns and architectures for IoT Security (and privacy). Then, we want to provide an analysis on that research landscape to answer our research questions. We follow the well-known guidelines for conducting systematic literature reviews. From thousands of candidate papers initially found in our search process, we have systematically distinguished and analyzed thirty-six (36) papers that have been peer-reviewed and published around patterns and architectures for IoT Security and privacy in the last decade (January 2010–December 2020). Our analysis shows that there is a rise in the number of publications tending to patterns and architectures for IoT Security in the last three years. We have not seen any approach of applying systematically architectures and patterns together that can address Security (and privacy) concerns not only at the architectural level, but also at the network or IoT devices level. We also explored how the research contributions in the primary studies handle the different issues from the OWASP Internet of Things (IoT) top ten vulnerabilities list. Finally, we discuss the current gaps in this research area and how to fill in the gaps for promoting the utilization of patterns for IoT Security and privacy by design.

关键词： Internet of Things IoT Security Privacy Architecture Pattern Review SLR

A comprehensive survey on Security issues in vehicle-to-grid networks

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Control and Decision 2023年第2期10卷 150-159页

作者： Arun Sekar Rajasekaran Maria Azees Fadi Al-Turjman Department of Electronics and Communication Engineering GMR Institute of TechnologyRajamIndia Artificial Intelligence Engineering Department. Research Center for AI and IoTAI and Robotics InstituteNear East UniversityMersin 10Turkey

Vehicle to grid(V2G)is the most hopeful approach to transfer energy as well as information in the bidirectional way.V2G network is formed by electric vehicles which connect with smart metres for information and energy transfer in a wireless manner.Even though many Security preserving schemes developed in V2G networks,they were prone to enormous number of Security breaches.A countless deal of works has been done towards it,but Security mechanisms in V2G networks are not effective.This survey work provides a summary about the V2G network characteristics,significance,Security services and the Security challenges.Moreover,this work offers a summary of some foremost Security attacks on various Security services such as accessibility,confidentiality,authentication,integrity and non-repudiation and the related countermeasures to make the V2G communications more protected.

关键词： Authentication confidentiality integrity privacy Security

Proof of Activity Protocol for IoMT Data Security

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Systems Science & Engineering 2023年第1期44卷 339-350页

作者： R.Rajadevi K.Venkatachalam Mehedi Masud Mohammed A.AlZain Mohamed Abouhawwash Department of Information Technology Kongu Engineering CollegeErode638060TamilnaduIndia Department of Applied Cybernetics Faculty of ScienceUniversity of Hradec KrálovéHradec Králové50003Czech Republic Department of Computer Science College of Computers and Information TechnologyTaif UniversityTaif21944Saudi Arabia Department of Information Technology College of Computers and Information TechnologyTaif UniversityTaif21944Saudi Arabia Department of Mathematics Faculty of ScienceMansoura UniversityMansoura35516Egypt Department of Computational Mathematics Scienceand Engineering(CMSE)Michigan State UniversityEast LansingMI48824USA

The Internet of Medical Things(IoMT)is an online device that senses and transmits medical data from users to physicians within a time interval.In,recent years,IoMT has rapidly grown in the medicalfield to provide healthcare services without physical appearance.With the use of sensors,IoMT applications are used in healthcare management.In such applications,one of the most important factors is data Security,given that its transmission over the network may cause obtrusion.For data Security in IoMT systems,blockchain is used due to its numerous blocks for secure data storage.In this study,Blockchain-assisted secure data management framework(BSDMF)and Proof of Activity(PoA)protocol using malicious code detection algorithm is used in the proposed data Security for the healthcare system.The main aim is to enhance the data Security over the networks.The PoA protocol enhances high Security of data from the literature review.By replacing the malicious node from the block,the PoA can provide high Security for medical data in the blockchain.Comparison with existing systems shows that the proposed simulation with BSD-Malicious code detection algorithm achieves higher accuracy ratio,precision ratio,Security,and efficiency and less response time for Blockchain-enabled healthcare systems.

关键词： Blockchain IoMT malicious code detection Security secure data management framework data management PoA

Adaptive Marine Predator Optimization Algorithm(AOMA)-Deep Supervised Learning Classification(DSLC)based IDS framework for MANET Security

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Intelligent and Converged Networks 2024年第1期5卷 1-18页

作者： M.Sahaya Sheela A.Gnana Soundari Aditya Mudigonda C.Kalpana K.Suresh K.Somasundaram Yousef Farhaoui Department of Electronics and Communication Engineering Vel Tech Rangarajan Dr.Sagunthala R&D Institute of Science and TechnologyChennai 600069India Department of Computer Science and Engineering Saveetha School of EngineeringSIMATSChennai 602105India JNIAS School of Planning and Architecture Hyderabad 500034India Department of Computer Science and Engineering NPR College of Engineering and TechnologyNatham Dindigul 624401India Department of Computer Science and Engineering PSNA College of Engineering and TechnologyPoolangulathupatti 620009India Department of Computer Science and Engineering Sri Muthukumaran Institute of TechnologyChennai 600069India Department of Computer Science Moulay Ismail UniversityMeknes 5003Morocco

Due to the dynamic nature and node mobility,assuring the Security of Mobile Ad-hoc Networks(MANET)is one of the difficult and challenging tasks today.In MANET,the Intrusion Detection System(IDS)is crucial because it aids in the identification and detection of malicious attacks that impair the network’s regular operation.Different machine learning and deep learning methodologies are used for this purpose in the conventional works to ensure increased Security of MANET.However,it still has significant flaws,including increased algorithmic complexity,lower system performance,and a higher rate of misclassification.Therefore,the goal of this paper is to create an intelligent IDS framework for significantly enhancing MANET Security through the use of deep learning models.Here,the min-max normalization model is applied to preprocess the given cyber-attack datasets for normalizing the attributes or fields,which increases the overall intrusion detection performance of classifier.Then,a novel Adaptive Marine Predator Optimization Algorithm(AOMA)is implemented to choose the optimal features for improving the speed and intrusion detection performance of classifier.Moreover,the Deep Supervise Learning Classification(DSLC)mechanism is utilized to predict and categorize the type of intrusion based on proper learning and training operations.During evaluation,the performance and results of the proposed AOMA-DSLC based IDS methodology is validated and compared using various performance measures and benchmarking datasets.

关键词： Intrusion Detection System(IDS) Security Mobile Ad-hoc Network(MANET) min-max normalization Adaptive Marine Predator Optimization Algorithm(AOMA) Deep Supervise Learning Classification(DSLC)

Usability and Security of Arabic Text-based CAPTCHA Using Visual Cryptography

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Systems Science & Engineering 2022年第2期40卷 421-440页

作者： Suliman A.Alsuhibany Meznah Alquraishi Department of Computer Science College of ComputerQassim UniversityBuraydah51452Saudi Arabia

Recently,with the spread of online services involving websites,attack-ers have the opportunity to expose these services to malicious actions.To protect these services,A Completely Automated Public Turing Test to Tell Computers and Humans Apart(CAPTCHA)is a proposed technique.Since many Arabic countries have developed their online services in Arabic,Arabic text-based CAPTCHA has been introduced to improve the usability for their users.More-over,there exist a visual cryptography(VC)technique which can be exploited in order to enhance the Security of text-based CAPTCHA by encrypting a CAPTCHA image into two shares and decrypting it by asking the user to stack them on each other.However,as yet,the implementation of this technique with regard to Arabic text-based CAPTCHA has not been carried out.Therefore,this paper aims to implement an Arabic printed and handwritten text-based CAPTCHA scheme based on the VC technique.To evaluate this scheme,experi-mental studies are conducted,and the results show that the implemented scheme offers a reasonable Security and usability levels with text-based CAPTCHA itself.

关键词： Visual cryptography Arabic text-based CAPTCHA usability Security printed and handwritten Arabic script

TrustControl:Trusted Private Data Usage Control Based on Security Enhanced TrustZone

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2022年第12期73卷 5687-5702页

作者： Hong Lei Jun Li Suozai Li Ming Huang Jieren Cheng Yirui Bai Xinman Luo Chao Liu School of Cyberspace Security(School of Cryptology) Hainan UniversityHaikou570228China SSC Holding Company Ltd. Chengmai571924China Oxford-Hainan Blockchain Research Institute Chengmai571924China China Electronics Corporation Hainan Joint Innovation Research Institute Co.Ltd Chengmai571924China School of Computer Science and Technology Hainan UniversityHaikou570228China The Blockhouse Technology Limited OxfordOX26XJUnited Kingdom

The past decade has seen the rapid development of data in many areas.Data has enormous commercial potential as a new strategic resource that may efficiently boost technical growth and service innovation.However,individuals are becoming increasingly concerned about data misuse and leaks.To address these issues,in this paper,we propose TrustControl,a trusted data usage control system to control,process,and protect data usage without revealing privacy.A trusted execution environment(TEE)is exploited to process confidential user data.First of all,we design a secure and reliable remote attestation mechanism for ARM TrustZone,which can verify the Security of the TEE platform and function code,thus guaranteeing data processing Security.Secondly,to address the Security problem that the raw data may be misused,we design a remote dynamic code injection method to regulate that data can only be processed for the expected purpose.Our solution focuses on protecting the sensitive data of the data owner and the function code of the data user to prevent data misuse and leakage.Furthermore,we implement the prototype system of TrustControl on TrustZone-enabled hardware.Real-world experiment results demonstrate that the proposed Trust-Control is secure and the performance overhead of introducing our prototype system is very low.

关键词： TrustZone data usage control privacy Security

Design of an Information Security Service for Medical Artificial Intelligence

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2022年第1期70卷 679-694页

作者： Yanghoon Kim Jawon Kim Hangbae Chang Department of Cyber Drone Bot Military Engineering Shinhan UniversityUijeongbu-si11644Gyeonggi-doKorea Department of Security Convergence Graduate SchoolChung-Ang UniversityDongjack-gu06974SeoulKorea Department of Industrial Security Chung-Ang UniversityDongjak-gu06974SeoulKorea

The medical convergence industry has gradually adopted ICT devices,which has led to legacy Security problems related to ICT devices.However,it has been difficult to solve these problems due to data resource issues.Such problems can cause a lack of reliability in medical artificial intelligence services that utilize medical information.Therefore,to provide reliable services focused on Security internalization,it is necessary to establish a medical convergence environment-oriented Security management system.This study proposes the use of system identification and countermeasures to secure systemreliabilitywhen using medical convergence environment information in medical artificial intelligence.We checked the life cycle of medical information and the flow and location of information,analyzed the Security threats that may arise during the life cycle,and proposed technical countermeasures to overcome such threats.We verified the proposed countermeasures through a survey of experts.Security requirements were defined based on the information life cycle in the medical convergence environment.We also designed technical countermeasures for use in the Security management systems of hospitals of diverse sizes.

关键词： Medical artificial intelligence medical information Security convergence environment

Enhancing Blockchain Security Using Ripple Consensus Algorithm

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2022年第12期73卷 4713-4726页

作者： A.Baseera Abeer Abdullah Alsadhan School of Computing Science and Engineering VIT Bhopal UniversityBhopal466114India Department of Computer Science Imam Abdulrahman Bin Faisal UniversityDammam34212Saudi Arabia

In the development of technology in various fields like big data analysis,data mining,big data,cloud computing,and blockchain technology,Security become more constrained.Blockchain is used in providing Security by encrypting the sharing of information.Blockchain is applied in the peerto-peer(P2P)network and it has a decentralized ledger.Providing Security against unauthorized breaches in the distributed network is required.To detect unauthorized breaches,there are numerous techniques were developed and those techniques are inefficient and have poor data integrity.Hence,a novel technique needs to be implemented to tackle the new breaches in the distributed network.This paper,proposed a hybrid technique of two fish with a ripple consensus algorithm(TF-RC).To improve the detection time and Security,this paper uses efficient transmission of data in the distributed network.The experimental analysis of TF-RC by using the metric measures of performance in terms of latency,throughput,energy efficiency and it produced better performance.

关键词： Blockchain Security ripple breaches twofish network

Networked TT&C for Mega Satellite Constellations:A Security Perspective

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

China Communications 2022年第9期19卷 58-76页

作者： Yafeng Zhan Guanming Zeng Xiaohan Pan Beijing National Research Center for Information Science and Technology Beijing 100084China Department of Electronic Engineering Tsinghua UniversityBeijing 100084China

Satellite constellations are promising in enabling the global Internet.However,the increasing constellation size also complicates tracking,telemetry and command(TT&C)systems.Traditional groundbased and space-based approaches have encountered significant obstacles due to,e.g.,the limited satellite visible arc and long transmission delay.Considering the fast development of intersatellite communications,synergy among multiple connected satellites can be exploited to facilitate TT&C system designs.This leads to networked TT&C,which requires much less predeployed infrastructures and even performs better than traditional TT&C systems.In this paper,we elaborate system characteristics of networked TT&C compared with traditional ground-based and spacebased TT&C,and propose the unique Security challenges and opportunities for networked TT&C,which includes secure routing and trust mechanisms.Furthermore,since networked TT&C is a novel scenario with few relevant researches,we first investigate the current researches on secure routing and trust mechanisms for traditional terrestrial and satellite networks,and then accordingly deliver our Security perspectives considering the system characteristics and Security requirements of networked TT&C.

关键词： mega-constellation TT&C network Security routing trust mechanisms