Search

In this thesis, an investigation into the feasibility and performance limits of QR code technology to enable secure air-gapped military communication was performed. Conducted in collaboration with Saab Training & Simulation, the research was motivated to improve traditional communication methods within the military, prone to security vulnerabilities. The study centered on QR code technology’s capability to transfer large volumes of military data efficiently, accurately, and securely between desktop systems and mobile platform systems without an active network or physical connection. Using a quantitative experimental approach, the study derives the maximum data capacity transferable, the efficiency of encoding and decoding as well as the most suitable cryptographic protocol to secure QR-encoded data. Employing a multiplexed color QR code system, the findings demonstrated that the QR code system could facilitate the transfer of up to 5906 bytes of data with an accuracy rate of 100%. However, the transmission accuracy decreases rapidly with larger datasets, as a result of color distortion and capture noise. Furthermore, the evaluation of XOR encryption, AES-128, and ChaCha20, found that AES-128 proved to provide a favorable balance between security and efficiency. The presented work advances the understanding of QR code technology and its capacity within military communication. While the use of QR codes in this study highlights the potential to facilitate transmission of information for military use, the challenges with larger datasets necessitate further advancements and continued research to enhance QR code technology for broader application and practical deployment.

In the ever-expanding landscape of social media, users struggle with navigating an overwhelming volume of information. This research introduces an innovative approach to Information Foraging by incorporating data encryption as a core component-a novel perspective never before explored in this context. The goal is to fortify the confidentiality and integrity of users’ critical data, setting a standard for safeguarding information from external threats. Within this work, we employ Fully Homomorphic Encryption in conjunction with AGNES clustering. While Fully Homomorphic Encryption ensures robust data protection, the model’s efficiency is guaranteed through a hierarchical clustering structure facilitated by AGNES. The evaluation was carried out on a dataset encompassing over 900,000 posts obtained from the social network X, covering a diverse array of topics. The results underscore the model’s competence in efficiently and securely identifying relevant information while upholding users’ privacy. Furthermore, a comparative analysis with existing approaches from the literature highlights the superiority of our proposal, establishing a new frontier in the integration of data encryption within the Information Foraging paradigm.

In this thesis, an investigation into the feasibility and performance limits of QR code technology to enable secure air-gapped military communication was performed. Conducted in collaboration with Saab Training & Simulation, the research was motivated to improve traditional communication methods within the military, prone to security vulnerabilities. The study centered on QR code technology’s capability to transfer large volumes of military data efficiently, accurately, and securely between desktop systems and mobile platform systems without an active network or physical connection. Using a quantitative experimental approach, the study derives the maximum data capacity transferable, the efficiency of encoding and decoding as well as the most suitable cryptographic protocol to secure QR-encoded data. Employing a multiplexed color QR code system, the findings demonstrated that the QR code system could facilitate the transfer of up to 5906 bytes of data with an accuracy rate of 100%. However, the transmission accuracy decreases rapidly with larger datasets, as a result of color distortion and capture noise. Furthermore, the evaluation of XOR encryption, AES-128, and ChaCha20, found that AES-128 proved to provide a favorable balance between security and efficiency. The presented work advances the understanding of QR code technology and its capacity within military communication. While the use of QR codes in this study highlights the potential to facilitate transmission of information for military use, the challenges with larger datasets necessitate further advancements and continued research to enhance QR code technology for broader application and practical deployment.

This thesis examines the certification management challenge faced by Integrity360. The decentralized approach, characterized by manual processes and disparate data sources, leads to inefficient tracking of certification status and study progress. The main objective of this project was to construct a system that automates data retrieval, ensures a complete audit, and increases security and privacy. Leveraging the ASP.NET Boilerplate (ABP) framework, Angular, and MongoDB, an efficient and scalable system was designed, developed, and built based on DDD (domain-driven design) principles for a modular and maintainable architecture. The implemented system automates data retrieval from the Credly API, tracks exam information, manages exam vouchers, and implements a credible authentication system with role-based access control. With the time limitations behind the full-scale implementation of all the planned features, such as a dashboard with aggregated charts and automatic report generation, the platform significantly increases the efficiency and precision of employee certification management. Future work will include these advanced functionalities and integrations with external platforms to improve the system and increase its impact on operations in Integrity360.

The research presented focuses on cryptographic-agility for End-to-End Encryption systems (E2EE) that could be implemented for telemetry data encryption. The recent report 1 by Microsoft after a security incident, describes the consequences that lead to encryption key leakage from telemetry data of highly protected production system. Internet of Things (IoT) and mobile devices constantly produce telemetry data which contains sensitive information. The data partially belongs to vendor, but IoT consumer’s consent is needed to access such data for troubleshooting or forensic analysis. Goyal et al [2] proposed Attribute Based Encryption (ABE) as a solution for legitimately access the audit log contents by engineering team. © 2024 Copyright held by the owner/author(s).

We provide an efficient algorithm deciding chaos for linear cellular automata (LCA) over (Z/mZ)(n), a large and important class of cellular automata (CA) which may exhibit many of the complex features typical of general CA and are used in many applications. The efficiency of our algorithm is mainly due to fact that it avoids the computation of the prime factor decomposition of m which is a well-known difficult task. Instead of factoring m we make use of a new and efficient generalized technique for computing the greatest common divisor (gcd) of polynomials with coefficients not belonging to a field, which in itself is an interesting result. We wish also to emphasize that the gcd computations required by our algorithm always involve polynomials of degree at most n.We also illustrate the impact of our algorithm in real-world applications regarding the growing domain of cryptosystems, the latter being often based on LCA over (Z/mZ)(n) with n>1. As a matter of facts, since cryptosystems have to satisfy the so-called confusion and diffusion properties (which are ensured if the involved LCA is chaotic) our algorithm turns out to be an important tool for building chaotic LCA over (Z/mZ)(n) and, hence, for improving the existing methods based on them.

The research presented focuses on cryptographic-agility for End-to-End Encryption systems (E2EE) that could be implemented for telemetry data encryption. The recent report 1 by Microsoft after a security incident, describes the consequences that lead to encryption key leakage from telemetry data of highly protected production system. Internet of Things (IoT) and mobile devices constantly produce telemetry data which contains sensitive information. The data partially belongs to vendor, but IoT consumer’s consent is needed to access such data for troubleshooting or forensic analysis. Goyal et al [2] proposed Attribute Based Encryption (ABE) as a solution for legitimately access the audit log contents by engineering team. © 2024 Copyright held by the owner/author(s).

This thesis examines the certification management challenge faced by Integrity360. The decentralized approach, characterized by manual processes and disparate data sources, leads to inefficient tracking of certification status and study progress. The main objective of this project was to construct a system that automates data retrieval, ensures a complete audit, and increases security and privacy. Leveraging the ASP.NET Boilerplate (ABP) framework, Angular, and MongoDB, an efficient and scalable system was designed, developed, and built based on DDD (domain-driven design) principles for a modular and maintainable architecture. The implemented system automates data retrieval from the Credly API, tracks exam information, manages exam vouchers, and implements a credible authentication system with role-based access control. With the time limitations behind the full-scale implementation of all the planned features, such as a dashboard with aggregated charts and automatic report generation, the platform significantly increases the efficiency and precision of employee certification management. Future work will include these advanced functionalities and integrations with external platforms to improve the system and increase its impact on operations in Integrity360.

The research presented focuses on cryptographic-agility for End-to-End Encryption systems (E2EE) that could be implemented for telemetry data encryption. The recent report 1 by Microsoft after a security incident, describes the consequences that lead to encryption key leakage from telemetry data of highly protected production system. Internet of Things (IoT) and mobile devices constantly produce telemetry data which contains sensitive information. The data partially belongs to vendor, but IoT consumer’s consent is needed to access such data for troubleshooting or forensic analysis. Goyal et al [2] proposed Attribute Based Encryption (ABE) as a solution for legitimately access the audit log contents by engineering team. © 2024 Copyright held by the owner/author(s).

The research presented focuses on cryptographic-agility for End-to-End Encryption systems (E2EE) that could be implemented for telemetry data encryption. The recent report 1 by Microsoft after a security incident, describes the consequences that lead to encryption key leakage from telemetry data of highly protected production system. Internet of Things (IoT) and mobile devices constantly produce telemetry data which contains sensitive information. The data partially belongs to vendor, but IoT consumer’s consent is needed to access such data for troubleshooting or forensic analysis. Goyal et al [2] proposed Attribute Based Encryption (ABE) as a solution for legitimately access the audit log contents by engineering team. © 2024 Copyright held by the owner/author(s).

The research presented focuses on cryptographic-agility for End-to-End Encryption systems (E2EE) that could be implemented for telemetry data encryption. The recent report 1 by Microsoft after a security incident, describes the consequences that lead to encryption key leakage from telemetry data of highly protected production system. Internet of Things (IoT) and mobile devices constantly produce telemetry data which contains sensitive information. The data partially belongs to vendor, but IoT consumer’s consent is needed to access such data for troubleshooting or forensic analysis. Goyal et al [2] proposed Attribute Based Encryption (ABE) as a solution for legitimately access the audit log contents by engineering team. © 2024 Copyright held by the owner/author(s).

With the development of high-throughput sequencing, whole-genome analysis, such as genomic prediction and genome-wide association studies (GWAS), plays an important role in animal and plant breeding. Under the infinitesimal model, complex traits are assumed to be affected by many genes with small additive effects, and the relationship between genotypes and phenotypes is linear. In most GWAS and genomic prediction studies, one goal is to estimate the joint effects of all SNP markers. The landmark paper by Meuwissen et al. (2001) introduced the Bayesian linear mixed model for whole-genome prediction, which has been widely used in breeding programs.However, as the amount and diversity of omics data continue to grow, several challenges arise for the linear mixed model. First, there is a need to extend mixed models to incorporate multiple sequential layers of data as one connected network (e.g., the regulatory cascades). Second, due to increasing concerns about data privacy, there is a need to adopt mixed models for encrypted data, enabling the sharing of confidential data in genome-to-phenome analyses.New methods were proposed in this thesis that try to solve these two challenges. For the first challenge, we provide a novel framework named mixed model neural network ("NNMM") to extend the mixed model ("MM") to a multilayer neural network ("NN"), thus incorporating sequential layers of data as a unified multilayer network. Nonlinear relationships between different layers of data are allowed via nonlinear activation functions in neural networks. Moreover, NNMM allows various missing patterns for the data in the middle layer, and the network architecture of NNMM can be predefined to be partially connected.For the second challenge, a homomorphic encryption method based on high-dimensional random orthogonal transformations of the raw data has been proposed in Mott et al. (2020). This method is specifically suited for single-marker regression in GWAS using linear mixed models

Företaget Provsvaret vill utveckla en labbportal avsedd för företagskunder. Företaget kommer att arbeta med ett externt labb för att starta självtest som en tjänst. Detta innebär att regler och begränsningar måste beaktas vid behandling av personuppgifter. Under 2018 trädde GDPR i kraft för att stärka skyddet kring datasekretess. Detta skapade ytterligare arbete för e-handelsplattformar som behöver vidta tekniska säkerhetsåtgärder. GDPR har även definierat nya rättigheter för användarna såsom rätt till information, rätt till tillgång och rätt till radering. Denna studie riktar sig mot att undersöka de rättigheter och säkerhetsåtgärder som har angetts av GDPR. Målet kommer vara att konstruera en e-handelsplattform med efterlevnad av GDPR som utgångspunkt. Under projektets gång så har man utfört en analys där man har jämfört olika psuedonymiseringsarkitekturer och har baserat på den analysen kunnat tillämpa pseudonymisering inom labbportalen. Under implementerprocessen var det nödvändigt att ta användning av en molnleverantör för att tillhandahålla krypteringsnycklar. Efter en noggrann jämförelse har man valt att gå vidare med Google Cloud Platform (GCP) pågrund av att GCP var kost effektivt och var mer användarvänlig mot småföretag som Provsvaret. Användbarhetstesteterna har även utförts i syfte av att undersöka i vilken mån av efterlevnad som plattformen hade i förhållande till GDPR rättigheter. Som slutsats så kan man konstatera att labbportalen hade en bra efterlevnad av GDPR däremot så fanns det vissa aspekter som behövde förbättras. Information och villkoren på plattformen kan visas på ett tydligare sätt samt så kan man även förbättra på hur man hantera invändningar och radering av konto. Implementeringen av BankID har genomgått väl och i slutendan så har labbportalen de funktionalitet som eftersöktes., The company Provsvaret is looking to develop a lab portal intended for corporate customers. The company will be working with an external lab to bootstrap self-test as a service. This entails that regulations and restrictions must be taken into account when processing personal data. In 2018, the GDPR came into force to strengthen the protection of data privacy. This created additional work for e-commerce platforms that need to implement technical security measures. GDPR has also defined new rights for users such as the right to information, the right to access and the right to erasure. This study aims to examine the rights and security measures designated by the GDPR. The goal will be to construct an e-commerce platform based on compliance with the GDPR. During the project, an analysis has been performed where different pseudonymisation architectures have been compared and based on that analysis, been able to apply pseudonymisation within the lab portal. During the implementation process, it was necessary to use a cloud provider to provide encryption keys. After a careful comparison, Cloud Platform (GCP) has been chosen as the selected cloud provider due to the fact that GCP was cost effective and was more user-friendly towards small companies such as Provsvaret. The usability tests have also been performed for the purpose of examining the degree of compliance that the platform had in relation to GDPR rights. In conclusion, it can be stated that the lab portal has good compliance with GDPR, however, there are certain aspects that need to be improved. Information and conditions on the platform can be displayed in a clearer way and the lab portal can also improve on how it handles objections and deletion of accounts. The implementation of BankID has been successful and in the end the lab portal has the functionality that was sought after.

Gizli kalması gereken verilerin hızlı bir şekilde verinin kaynağından hedefe ulaşması için günümüzde internet gibi herkese açık ve güvensiz kanallar kullanılmaktadır. Bu verilerin güvenliğini sağlamak kimi zaman hayati önem taşıdığından farklı şifreleme yöntemleri dünyanın dört bir yanında geliştirilmekte ve kullanılmaktadır. Bu duruma bir başka yaklaşım ise; veri güvenliğini veriyi gizleyerek sağlayan steganografik yöntemlerdir. Bu çalışmada, güvenlik seviyesini arttırmak için şifreleme ve veri gizleme bir arada kullanılmaktadır. Şifreleme için öncelikle AES-256 algoritması kullanılmakta ve algoritmanın çıktısı olan veriler, gizlenirken kullanılacak taşıyıcı ses dosyasındaki müzik eserinin notalarının kullanılan özelliklerinden elde edilen değerlerle sonlu alanda çarpma yapmak suretiyle şifrelenmektedir. Daha sonra, yine bu nota değerlerinden oluşturulan kurala göre, şifrelenmiş veriler, taşıyıcı ses dosyası içerisine gizlenerek ortaya şüphe çekmeyen ve şifrelenmiş veri taşıyan ses dosyaları çıkarılmaktadır. Taşıyıcı ses dosyasındaki müzik eserinden elde edilen değerler, hem şifreleme aşamasında hem de veri gizleme aşamasında anahtar niteliğinde kullanıldığından, kaynaktan hedefe yapılacak dosya aktarımından önce herhangi bir veri aktarımına ve anahtar paylaşımına ihtiyaç duyulmamakta ve güvensiz kanaldan anahtar paylaşımı yapılması sorununu ortadan kaldırmaktadır. Tasarlanan sistem, girdiler ne olursa olsun oluşacak çıktıdan aynı nota değerlerinin elde edilebileceğini ve yapılan işlemlerin matematiksel olarak tersinin yapıldığı veri ayıklama ve çözme aşamalarının ardından doğru veriye kesin olarak ulaşılacağını garantilemektedir. Tasarlanan sistemin gerçeklenmesi birbirleriyle haberleşen yazılım ve donanım birimleri tasarlanarak yapılmıştır. Hız kısıtları göz önünde bulundurularak sistemin yazılım ve donanımda çalışacak alt sistemleri belirlenmiş ve donanımda 2524 Mbps gibi bir şifreleme hızına ulaşılmıştır., Nowadays, internet like public and unsecure channels are being used to transfer data, which must stay hidden, from source to destination rapidly. For providing the security of these data, which are sometimes vital, different cryptographic techniques are being developed and used all over the world. Another approach to this situation is steganography which provides security of the data by hiding it. In this work, cryptography and steganography are being used together to raise the security level. At first, AES-256 algorithm is used for encryption and then the output of the algorithm is being encrypted by multiplying it in finite field by the values which are obtained from the interested features of musical notes in the carrier audio file which will be used in data hiding process. After that, encrypted data is embedded in the carrier audio file by obeying the rules generated from the musical notes and as a result of that, there appears an unsuspicious audio file which includes encrypted data. Because of the values obtained from the music in the carrier audio file are used both in cryptography process and steganography process as key, there is no need to transfer data and share keys before the file transfer and thanks to that the key sharing through an unsecure channel problem is disappeared. This system ensures that, values obtained from the output file remain the same as obtained from the input file and after mathematical inverse of encryption and hiding processes the result data is definitely the same as the input data of the encryption process. Implementation of the system designed is being done with designing software and hardware units that communicates each other. Considering speed constraints, implemented subsystems are selected whether they will work on hardware unit or software unit and 2524 Mbps encryption throughput is observed in the hardware unit.

Gizli kalması gereken verilerin hızlı bir şekilde verinin kaynağından hedefe ulaşması için günümüzde internet gibi herkese açık ve güvensiz kanallar kullanılmaktadır. Bu verilerin güvenliğini sağlamak kimi zaman hayati önem taşıdığından farklı şifreleme yöntemleri dünyanın dört bir yanında geliştirilmekte ve kullanılmaktadır. Bu duruma bir başka yaklaşım ise; veri güvenliğini veriyi gizleyerek sağlayan steganografik yöntemlerdir. Bu çalışmada, güvenlik seviyesini arttırmak için şifreleme ve veri gizleme bir arada kullanılmaktadır. Şifreleme için öncelikle AES-256 algoritması kullanılmakta ve algoritmanın çıktısı olan veriler, gizlenirken kullanılacak taşıyıcı ses dosyasındaki müzik eserinin notalarının kullanılan özelliklerinden elde edilen değerlerle sonlu alanda çarpma yapmak suretiyle şifrelenmektedir. Daha sonra, yine bu nota değerlerinden oluşturulan kurala göre, şifrelenmiş veriler, taşıyıcı ses dosyası içerisine gizlenerek ortaya şüphe çekmeyen ve şifrelenmiş veri taşıyan ses dosyaları çıkarılmaktadır. Taşıyıcı ses dosyasındaki müzik eserinden elde edilen değerler, hem şifreleme aşamasında hem de veri gizleme aşamasında anahtar niteliğinde kullanıldığından, kaynaktan hedefe yapılacak dosya aktarımından önce herhangi bir veri aktarımına ve anahtar paylaşımına ihtiyaç duyulmamakta ve güvensiz kanaldan anahtar paylaşımı yapılması sorununu ortadan kaldırmaktadır. Tasarlanan sistem, girdiler ne olursa olsun oluşacak çıktıdan aynı nota değerlerinin elde edilebileceğini ve yapılan işlemlerin matematiksel olarak tersinin yapıldığı veri ayıklama ve çözme aşamalarının ardından doğru veriye kesin olarak ulaşılacağını garantilemektedir. Tasarlanan sistemin gerçeklenmesi birbirleriyle haberleşen yazılım ve donanım birimleri tasarlanarak yapılmıştır. Hız kısıtları göz önünde bulundurularak sistemin yazılım ve donanımda çalışacak alt sistemleri belirlenmiş ve donanımda 2524 Mbps gibi bir şifreleme hızına ulaşılmıştır., Nowadays, internet like public and unsecure channels are being used to transfer data, which must stay hidden, from source to destination rapidly. For providing the security of these data, which are sometimes vital, different cryptographic techniques are being developed and used all over the world. Another approach to this situation is steganography which provides security of the data by hiding it. In this work, cryptography and steganography are being used together to raise the security level. At first, AES-256 algorithm is used for encryption and then the output of the algorithm is being encrypted by multiplying it in finite field by the values which are obtained from the interested features of musical notes in the carrier audio file which will be used in data hiding process. After that, encrypted data is embedded in the carrier audio file by obeying the rules generated from the musical notes and as a result of that, there appears an unsuspicious audio file which includes encrypted data. Because of the values obtained from the music in the carrier audio file are used both in cryptography process and steganography process as key, there is no need to transfer data and share keys before the file transfer and thanks to that the key sharing through an unsecure channel problem is disappeared. This system ensures that, values obtained from the output file remain the same as obtained from the input file and after mathematical inverse of encryption and hiding processes the result data is definitely the same as the input data of the encryption process. Implementation of the system designed is being done with designing software and hardware units that communicates each other. Considering speed constraints, implemented subsystems are selected whether they will work on hardware unit or software unit and 2524 Mbps encryption throughput is observed in the hardware unit.

Företaget Provsvaret vill utveckla en labbportal avsedd för företagskunder. Företaget kommer att arbeta med ett externt labb för att starta självtest som en tjänst. Detta innebär att regler och begränsningar måste beaktas vid behandling av personuppgifter. Under 2018 trädde GDPR i kraft för att stärka skyddet kring datasekretess. Detta skapade ytterligare arbete för e-handelsplattformar som behöver vidta tekniska säkerhetsåtgärder. GDPR har även definierat nya rättigheter för användarna såsom rätt till information, rätt till tillgång och rätt till radering. Denna studie riktar sig mot att undersöka de rättigheter och säkerhetsåtgärder som har angetts av GDPR. Målet kommer vara att konstruera en e-handelsplattform med efterlevnad av GDPR som utgångspunkt. Under projektets gång så har man utfört en analys där man har jämfört olika psuedonymiseringsarkitekturer och har baserat på den analysen kunnat tillämpa pseudonymisering inom labbportalen. Under implementerprocessen var det nödvändigt att ta användning av en molnleverantör för att tillhandahålla krypteringsnycklar. Efter en noggrann jämförelse har man valt att gå vidare med Google Cloud Platform (GCP) pågrund av att GCP var kost effektivt och var mer användarvänlig mot småföretag som Provsvaret. Användbarhetstesteterna har även utförts i syfte av att undersöka i vilken mån av efterlevnad som plattformen hade i förhållande till GDPR rättigheter. Som slutsats så kan man konstatera att labbportalen hade en bra efterlevnad av GDPR däremot så fanns det vissa aspekter som behövde förbättras. Information och villkoren på plattformen kan visas på ett tydligare sätt samt så kan man även förbättra på hur man hantera invändningar och radering av konto. Implementeringen av BankID har genomgått väl och i slutendan så har labbportalen de funktionalitet som eftersöktes., The company Provsvaret is looking to develop a lab portal intended for corporate customers. The company will be working with an external lab to bootstrap self-test as a service. This entails that regulations and restrictions must be taken into account when processing personal data. In 2018, the GDPR came into force to strengthen the protection of data privacy. This created additional work for e-commerce platforms that need to implement technical security measures. GDPR has also defined new rights for users such as the right to information, the right to access and the right to erasure. This study aims to examine the rights and security measures designated by the GDPR. The goal will be to construct an e-commerce platform based on compliance with the GDPR. During the project, an analysis has been performed where different pseudonymisation architectures have been compared and based on that analysis, been able to apply pseudonymisation within the lab portal. During the implementation process, it was necessary to use a cloud provider to provide encryption keys. After a careful comparison, Cloud Platform (GCP) has been chosen as the selected cloud provider due to the fact that GCP was cost effective and was more user-friendly towards small companies such as Provsvaret. The usability tests have also been performed for the purpose of examining the degree of compliance that the platform had in relation to GDPR rights. In conclusion, it can be stated that the lab portal has good compliance with GDPR, however, there are certain aspects that need to be improved. Information and conditions on the platform can be displayed in a clearer way and the lab portal can also improve on how it handles objections and deletion of accounts. The implementation of BankID has been successful and in the end the lab portal has the functionality that was sought after.

Information has become precious and essential for all fields, so it is crucial to carry out information security. The principle of information security is to protect and safeguard information with the aim that the information is not entitled to be read, modified, or deleted by anyone who does not have rights to it. The purpose of our research is to analyze how the caesar cipher and vernam cipher methods are jointly used in the cryptographic process and are expected to produce a high level of data encryption so that it can increase the security of data or messages. The research applies the combination of the caesar cipher and vernam cipher methods to encrypt text data or messages. Using the secret key value will convert the input message into an encrypted message that is difficult to crack and cannot be decrypted again. The input text and the encrypted data have no resemblance to maintain the confidentiality of the information or data contents.

Online examination system is a web-based examination system where examinations are given online. Research and comparison for different web examination system in the current individual field, proposed a set of design mode about general examination platform which apply in colleges and universities, research and analysis the key technology, and proposed improved scheme, made system being perfect. The major problems in online examination system is authentication of candidate and stop malpractices during examinations. For proper authentication, authorization process to ensure that the right candidate is appearing for the exam we will work on pixel enhancement for clear visibility. We will also work on making a system in which it not just detects and captures front camera picture but also the rear facing camera. We will work on audio enhancement to reduce the background noise of wind and any distortion in the audio making it clearer to analyse. Data encryption plays an important role in preventing unauthorized access to question banks. It also helps to avoid result manipulation and blocks access without valid credentials. It is a vital feature to ensure the security of the examination. The entire communication between server and examination client is also encrypted with a secure mode of communication. We will make sure that only the one who is conducting the exam has full access and will be alerted if someone try to do malpractice during the exam.

Cloud platform is extensively used for data intensive computing. Data intensive computing is a parallel computing that deals with large data sets. Main drawback of current cloud infrastructure is, there is noflexible data mobility which is result of centralization of resources.Restricted data mobility of cloud has made existing cloud infrastructure unsuitable for distributed applications with large datasets.Here we present Nebula-a server which democratizes data intensive computing by incorporating edge computing, and it also avoids replication and provides secure storage by means of data encryption.

Cloud platform is extensively used for data intensive computing. Data intensive computing is a parallel computing that deals with large data sets. Main drawback of current cloud infrastructure is, there is noflexible data mobility which is result of centralization of resources.Restricted data mobility of cloud has made existing cloud infrastructure unsuitable for distributed applications with large datasets.Here we present Nebula-a server which democratizes data intensive computing by incorporating edge computing, and it also avoids replication and provides secure storage by means of data encryption.

Cloud platform is extensively used for data intensive computing. Data intensive computing is a parallel computing that deals with large data sets. Main drawback of current cloud infrastructure is, there is noflexible data mobility which is result of centralization of resources.Restricted data mobility of cloud has made existing cloud infrastructure unsuitable for distributed applications with large datasets.Here we present Nebula-a server which democratizes data intensive computing by incorporating edge computing, and it also avoids replication and provides secure storage by means of data encryption.

Cloud platform is extensively used for data intensive computing. Data intensive computing is a parallel computing that deals with large data sets. Main drawback of current cloud infrastructure is, there is noflexible data mobility which is result of centralization of resources.Restricted data mobility of cloud has made existing cloud infrastructure unsuitable for distributed applications with large datasets.Here we present Nebula-a server which democratizes data intensive computing by incorporating edge computing, and it also avoids replication and provides secure storage by means of data encryption.

Cloud platform is extensively used for data intensive computing. Data intensive computing is a parallel computing that deals with large data sets. Main drawback of current cloud infrastructure is, there is noflexible data mobility which is result of centralization of resources.Restricted data mobility of cloud has made existing cloud infrastructure unsuitable for distributed applications with large datasets.Here we present Nebula-a server which democratizes data intensive computing by incorporating edge computing, and it also avoids replication and provides secure storage by means of data encryption.

Cloud platform is extensively used for data intensive computing. Data intensive computing is a parallel computing that deals with large data sets. Main drawback of current cloud infrastructure is, there is noflexible data mobility which is result of centralization of resources.Restricted data mobility of cloud has made existing cloud infrastructure unsuitable for distributed applications with large datasets.Here we present Nebula-a server which democratizes data intensive computing by incorporating edge computing, and it also avoids replication and provides secure storage by means of data encryption.

Online examination system is a web-based examination system where examinations are given online. Research and comparison for different web examination system in the current individual field, proposed a set of design mode about general examination platform which apply in colleges and universities, research and analysis the key technology, and proposed improved scheme, made system being perfect. The major problems in online examination system is authentication of candidate and stop malpractices during examinations. For proper authentication, authorization process to ensure that the right candidate is appearing for the exam we will work on pixel enhancement for clear visibility. We will also work on making a system in which it not just detects and captures front camera picture but also the rear facing camera. We will work on audio enhancement to reduce the background noise of wind and any distortion in the audio making it clearer to analyse. Data encryption plays an important role in preventing unauthorized access to question banks. It also helps to avoid result manipulation and blocks access without valid credentials. It is a vital feature to ensure the security of the examination. The entire communication between server and examination client is also encrypted with a secure mode of communication. We will make sure that only the one who is conducting the exam has full access and will be alerted if someone try to do malpractice during the exam.

Cloud platform is extensively used for data intensive computing. Data intensive computing is a parallel computing that deals with large data sets. Main drawback of current cloud infrastructure is, there is noflexible data mobility which is result of centralization of resources.Restricted data mobility of cloud has made existing cloud infrastructure unsuitable for distributed applications with large datasets.Here we present Nebula-a server which democratizes data intensive computing by incorporating edge computing, and it also avoids replication and provides secure storage by means of data encryption.

Online examination system is a web-based examination system where examinations are given online. Research and comparison for different web examination system in the current individual field, proposed a set of design mode about general examination platform which apply in colleges and universities, research and analysis the key technology, and proposed improved scheme, made system being perfect. The major problems in online examination system is authentication of candidate and stop malpractices during examinations. For proper authentication, authorization process to ensure that the right candidate is appearing for the exam we will work on pixel enhancement for clear visibility. We will also work on making a system in which it not just detects and captures front camera picture but also the rear facing camera. We will work on audio enhancement to reduce the background noise of wind and any distortion in the audio making it clearer to analyse. Data encryption plays an important role in preventing unauthorized access to question banks. It also helps to avoid result manipulation and blocks access without valid credentials. It is a vital feature to ensure the security of the examination. The entire communication between server and examination client is also encrypted with a secure mode of communication. We will make sure that only the one who is conducting the exam has full access and will be alerted if someone try to do malpractice during the exam.

Online examination system is a web-based examination system where examinations are given online. Research and comparison for different web examination system in the current individual field, proposed a set of design mode about general examination platform which apply in colleges and universities, research and analysis the key technology, and proposed improved scheme, made system being perfect. The major problems in online examination system is authentication of candidate and stop malpractices during examinations. For proper authentication, authorization process to ensure that the right candidate is appearing for the exam we will work on pixel enhancement for clear visibility. We will also work on making a system in which it not just detects and captures front camera picture but also the rear facing camera. We will work on audio enhancement to reduce the background noise of wind and any distortion in the audio making it clearer to analyse. Data encryption plays an important role in preventing unauthorized access to question banks. It also helps to avoid result manipulation and blocks access without valid credentials. It is a vital feature to ensure the security of the examination. The entire communication between server and examination client is also encrypted with a secure mode of communication. We will make sure that only the one who is conducting the exam has full access and will be alerted if someone try to do malpractice during the exam.

Additive cellular automata over a finite abelian group are a wide class of cellular automata (CA) that are able to exhibit the complex behaviors of general CA and are often exploited for designing applications in different practical contexts. We provide decidable characterizations for Additive CA of the following important properties defining complex behaviors of complex systems: injectivity, surjectivity, equicontinuity, sensitivity to the initial conditions, topological transitivity, and ergodicity. Since such properties describe the main features required by real systems, the decision algorithms from our decidability results are then important tools for designing proper applications based on Additive CA. Indeed, we describe how our results can be exploited in some emblematic applications of cryptosystems, a paradigmatic and nowadays crucial applicative domain in which Additive CA are extensively used. We deal with methods for data encryption and, namely, we propose some strong modifications to the existing schemes in order to increase their security level and make attacks much harder.

Advanced data encryption requires the use of true random number generators (TRNGs) to produce unpredictable sequences of bits. TRNG circuits with high degree of randomness and low power consumption may be fabricated by using the random telegraph noise (RTN) current signals produced by polarized metal/insulator/metal (MIM) devices as entropy source. However, the RTN signals produced by MIM devices made of traditional insulators, i.e., transition metal oxides like HfO and AlO, are not stable enough due to the formation and lateral expansion of defect clusters, resulting in undesired current fluctuations and the disappearance of the RTN effect. Here, the fabrication of highly stable TRNG circuits with low power consumption, high degree of randomness (even for a long string of 2 − 1 bits), and high throughput of 1 Mbit s by using MIM devices made of multilayer hexagonal boron nitride (h-BN) is shown. Their application is also demonstrated to produce one-time passwords, which is ideal for the internet-of-everything. The superior stability of the h-BN-based TRNG is related to the presence of few-atoms-wide defects embedded within the layered and crystalline structure of the h-BN stack, which produces a confinement effect that avoids their lateral expansion and results in stable operation.

Online examination system is a web-based examination system where examinations are given online. Research and comparison for different web examination system in the current individual field, proposed a set of design mode about general examination platform which apply in colleges and universities, research and analysis the key technology, and proposed improved scheme, made system being perfect. The major problems in online examination system is authentication of candidate and stop malpractices during examinations. For proper authentication, authorization process to ensure that the right candidate is appearing for the exam we will work on pixel enhancement for clear visibility. We will also work on making a system in which it not just detects and captures front camera picture but also the rear facing camera. We will work on audio enhancement to reduce the background noise of wind and any distortion in the audio making it clearer to analyse. Data encryption plays an important role in preventing unauthorized access to question banks. It also helps to avoid result manipulation and blocks access without valid credentials. It is a vital feature to ensure the security of the examination. The entire communication between server and examination client is also encrypted with a secure mode of communication. We will make sure that only the one who is conducting the exam has full access and will be alerted if someone try to do malpractice during the exam.

Proyecto enfocado en el estudio de la seguridad de los formatos actuales de los datos gen eticos, concretamente MPEG-G y el est andar de nido por GA4GH y la interoperabilidad entre ellos. En concreto, se expone una propuesta de uso de algunos algoritmos de criptograf a de GA4GH en MPEG-G, as como la realizaci on de una implementaci on m nima. Tambi en analiza la interoperabilidad entre las API y la posibilidad de aprovechar la privacidad de MPEG-G en el mapaje de hts-get., Projecte centrat en l'estudi de la seguretat dels formats actuals de les dades gen omiques, en concret MPEG-G i el de nit per GA4GH i en la seva interoperabilitat. En concret exposa una proposta d'utilitzaci o dels algoritmes de crypt4gh de GA4GH a MPEG-G aix com una implementaci o minimalista d'aquesta. Tamb e analitza la interoperabilitat entre les APIs i la possibilitat d'apro tat la privacitat de MPEG-G en el mapatge hts-get., Project focused on the study of the security of current formats of genomic data, speci - cally MPEG-G and the standard de ned by GA4GH and the interoperability between them. Speci cally, it exposes a proposal for the use of some GA4GH cryptography algorithms in MPEG-G, as well as a minimal implementation of it. Also the interoperability between the APIs and the possibility of taking advantage of the privacy of MPEG-G in the hts-get mapping.

Магістерська дисертація: 58 ст., 4 рис., 6 табл., 18 джерел. Актуальність проблеми: з огляду на останні конфлікти користувачів з великими ІТ-компаніями, пов’язаними з продажом особистих даних, посилення захисту даних користувачів є дуже актуальною проблемою, що лише підтверджує постійне посиленння законодавства більшості країн з цього приводу. Мета та задачі дослідження: за необхідною методологією розробки програмного забезпечення виконати огляд існуючих програмних рішень, провести аналіз існуючих програмних рішень, на основі результатів аналізу існуючих програмних рішень, спроектувати алгоритм створення симетричного ключа та шифрування даних, виконати тестування розробленого програмного продукту та розробити стартап-проект. Об’єкт дослідження: захист особистих даних користувачів. Предмет дослідження: алгоритми створення симетричних ключів шифрування та шифрування даних користувачів. Новизна одержаних результатів: отримання якісних програмних продуктів для клієнтів та серверів, призначених для створення безпечного каналу передачі зашифрованих даних користувачів., Masters dissertation: 58 pp., 4 figures, 6 tables, 18 references. The urgency of the problem: considering the recent conflicts of users with large IT companies related to the sale of personal data, enhancing the protection of user data is a very pressing problem, which only confirms the continuous strengthening of the legislation of most countries in this regard. Purpose and objectives of the research: to perform the necessary software development methodology to review the existing software solutions, to analyze the existing software solutions, based on the results of the analysis of existing software solutions, to design an algorithm for symmetric key creation and data encryption, to perform testing of the developed software product and to develop a startup project . Object of study: protection of personal data of users. Subject matter: algorithms for creating symmetric encryption keys and encrypting user data. The novelty of the results: obtaining quality software products for clients and servers designed to create a secure channel for transmitting encrypted user data.

This paper represents the approach for estimation of the lifetime of the IoT end devices. The novelty of this approach is in the taking into account not only the energy consumption for data transmission, but also for ensuring the security by using the encryption algorithms. The results of the study showed the effect of using data encryption during transmission on the device lifetime depending on the key length and the principles of the algorithm used. © 2019, Springer Nature Switzerland AG.

Загальний обсяг роботи – 117 ст., 27 ілюстрацій, 34 таблиць, 6 додатків, кількість бібліографічних найменувань – 50. Актуальність теми. Мобільні додатки стали одним з головних трендів у розвитку інформаційних технологій в останні роки. Основною перевагою мобільних додатків є те, що користувач може отримати доступ до них, перебуваючи в будь-якому місці та в будь-якій ситуації. Тому важлив у роль відіграє чи може користувач оперувати та ділитися даними зі свого пристрою. Наприклад, одним з безлічі типів додатків для мобільних пристроїв є додатки для подорожей і туризму. Під час таких подорожей вони повинні краще працювати в офлайн-режимі, то му що то не завжди у будь-якому місці та в будь-якій ситуації, у вас буде доступ до інтернету або мобільного оператора. Мета та задачі дослідження. Метою роботи є розробка мобільного додатку, який використовує звукові сигнали як спосіб обміну даними між ко ристувачами, а також й інші методи за допомогою яких можна здійснювати обмін даними, а саме: - інтернет; - QR-код. Відповідно до мети ставляться такі завдання: 1. Аналіз мов програмування для інтегрованого середовища розробки Xcode. 2. Аналіз архітектурних шаблонів д ля розробки мобільного додатку. 3. Аналіз технологій обміну даними. 4. Аналіз стандартів шифрування даних. 5. Аналіз сучасних хмарних СУБД. 6. Розробка алгоритму роботи мобільного додатку. 7. Створення мобільного додатку. Рішення поставлених завдань та досягнуті результати. В роботі розглянуто методи, за допомогою яких можливо здійснювати обін даними. Запропоновано реалізацію мобільного додатку на основі трьох методів обміну даними. Було реалізовано описаний підхід, в реалізації застосовано патерн проектування MVC для ефективної роботи мобільного додатку, обробки помилок, пов’язаних в тому числі і з комунікацією між сервером, та іншими пристроями. Було обрано алгоритм шифрування даних AES128, для забезпечення максимального захисту даних при її передачі. Реалізацію мобільного додатку було протестовано на багатьох тес, Total volume of work - 117 items, 27 illustrations, 34 tables, 6 applications, number of bibliographic titles - 50. Actuality of theme. Mobile applications have become one of the main trends in the development of information technology in recent years. The main advantage of mobile apps is that the user can access them, while in any place and in any situation. Therefore, an important role is played by the user can operate and share data from his device. For example, one of the many types of mobile apps is travel and tourism applications. During such trips, they should work better offline, because they are not always in any place and in any situation, you will have access to the Internet or mobile operator. Purpose and tasks of the research. The aim of the work is to develop a mobile application that uses audio signals as a way of exchanging data among users, as well as other methods by which data can be exchanged, namely: - internet; - QR code. According to the goals are the following tasks: 1. Analysis of programming languages for the integrated development environment Xcode. 2. Analysis of architectural templates for the development of a mobile application. 3. Analysis of data exchange technologies. 4. Analysis of data encryption standards. 5. Analysis of modern cloud DBMS. 6. Development of the algorithm of mobile application. 7. Create a mobile application. Solution of the tasks and achieved results. The paper deals with the methods by which it is possible to carry out data obing. The implementation of a mobile application based on three methods of data exchange is proposed. The described approach was implemented, MVC design pattern for the effective operation of the mobile application, handling of errors, including communication with the server, and other devices were implemented in implementation. The AES128 data encryption algorithm was chosen to provide maximum data protection when it was transmitted. The implementation of the mobile application has been test, Общий объем работы - 117 в., 27 иллюстраций, 34 таблиц, 6 приложений, количество библиографических наименований - 50. Актуальность темы. Мобильные приложения стали одним из главных трендов в развитии информационных технологий в последние годы. Основным преимуществом мобильных приложений является то, что пользователь может получить доступ к ним, находясь в любом месте и в любой ситуации. Поэтому важную роль играет ли пользователь оперировать и делиться данными с устройства. Например, одним из множества типов приложений для мобильных устройств являются приложения для путешествий и туризма. Во время таких путешествий они должны лучше работать в офлайн-режиме, потому что то не всегда в любом месте и в любой ситуации, у вас будет доступ к интернету или мобильного оператора. Цель и задачи исследования. Целью работы является разработка мобильного приложения, которое использует звуковые сигналы как способ обмена данными между пользователями, а также и другие методы с помощью которых можно осуществлять обмен данными, а именно: - интернет; - QR - код. Согласно цели ставятся следующие задачи: 1. Анализ языков программирования для интегрированной среды разработки Xcode. 2. Анализ архитектурных шаблонов для разработки мобильного приложения. 3. Анализ технологий обмена данными. 4. Анализ стандартов шифрования данных. 5. Анализ современных облачных СУБД. 6. Разработка алгоритма работы мобильного приложения. 7. Создание мобильного приложения. Решение поставленных задач и достигнутых результатах. В работе рассмотрены методы, с помощью которых можно осуществлять Обин данными. Предложена реализация мобильного приложения на основе трех методов обмена данными. Было реализовано описан подход, в реализации применен паттерн проектирования MVC для эффективной работы мобильного приложения, обработки ошибок, связанных в том числе и с коммуникацией между сервером и другими устройствами. Был избран алгоритм шифрования данных AES128, для обеспечения максимальной защиты данных при их передаче. Ре

This article presents an alternative for resolving the existing vulnerability of systems that implement masking by means of chaotic synchronization. This system avoids detection of the parameters used as the cipher key by an attacker on implementing encryption by means of synchronized chaotic-phase masks of the Rössler oscillator, for encoding and establishing synchronization among transmitterreceiver devices. In addition, it employs two ciphering keys: the first, with a recommended length of 2,048 characters, and the second, which is used as an initial value. Both keys are employed for continual modification of one of the oscillator’s parameters. This strengthens the security system and avoiding an attacker from obtaining the oscillator’s parametric values by calculating the least average synchronization error. The use of the system developed provides a cipher, which is resistant to statistical attacks. In addition, our system validates the data of the transmitter device (username, password, etc.) in order to authorize transmission., Este artículo presenta una alternativa para resolver la vulnerabilidad existente en los sistemas que implementan el enmascaramiento mediante la sincronización caótica, este sistema evita que los parámetros utilizados como clave de cifrado puedan ser detectados por un atacante al implementar el modelo matemático caótico del oscilador de Rössler para codificar y establecer la sincronización entre los dispositivos transmisor-receptor; además usa dos llaves de cifrado: la primera con una longitud recomendable de 2048 caracteres y la segunda se utiliza como un valor inicial. Ambas llaves se emplean para modificar continuamente uno de los parámetros del oscilador, esto fortalece la seguridad del sistema y evita que un atacante obtenga los valores del parámetro del oscilador calculando el error de sincronización promedio menor. El uso del sistema desarrollado proporciona un cifrado resistente a ataques estadísticos, además valida datos del dispositivo transmisor (nombre de usuario, password, etc.) para autorizar la transmisión hacia el destino.

This article presents an alternative for resolving the existing vulnerability of systems that implement masking by means of chaotic synchronization. This system avoids detection of the parameters used as the cipher key by an attacker on implementing encryption by means of synchronized chaotic-phase masks of the Rössler oscillator, for encoding and establishing synchronization among transmitter-receiver devices. In addition, it employs two ciphering keys: the first, with a recommended length of 2,048 characters, and the second, which is used as an initial value. Both keys are employed for continual modification of one of the oscillator’s parameters. This strengthens the security system and avoiding an attacker from obtaining the oscillator’s parametric values by calculating the least average synchronization error. The use of the system developed provides a cipher, which is resistant to statistical attacks. In addition, our system validates the data of the transmitter device (username, password, etc.) in order to authorize transmission., Este artículo presenta una alternativa para resolver la vulnerabilidad existente en los sistemas que implementan el enmascaramiento mediante la sincronización caótica, este sistema evita que los parámetros utilizados como clave de cifrado puedan ser detectados por un atacante al implementar el modelo matemático caótico del oscilador de Rössler para codificar y establecer la sincronización entre los dispositivos transmisor-receptor; además usa dos llaves de cifrado: la primera con una longitud recomendable de 2048 caracteres y la segunda se utiliza como un valor inicial. Ambas llaves se emplean para modificar continuamente uno de los parámetros del oscilador, esto fortalece la seguridad del sistema y evita que un atacante obtenga los valores del parámetro del oscilador calculando el error de sincronización promedio menor. El uso del sistema desarrollado proporciona un cifrado resistente a ataques estadísticos, además valida datos del dispositivo transmisor (nombre de usuario, password, etc.) para autorizar la transmisión hacia el destino.

This article presents an alternative for resolving the existing vulnerability of systems that implement masking by means of chaotic synchronization. This system avoids detection of the parameters used as the cipher key by an attacker on implementing encryption by means of synchronized chaotic-phase masks of the Rössler oscillator, for encoding and establishing synchronization among transmitter-receiver devices. In addition, it employs two ciphering keys: the first, with a recommended length of 2,048 characters, and the second, which is used as an initial value. Both keys are employed for continual modification of one of the oscillator’s parameters. This strengthens the security system and avoiding an attacker from obtaining the oscillator’s parametric values by calculating the least average synchronization error. The use of the system developed provides a cipher, which is resistant to statistical attacks. In addition, our system validates the data of the transmitter device (username, password, etc.) in order to authorize transmission., Este artículo presenta una alternativa para resolver la vulnerabilidad existente en los sistemas que implementan el enmascaramiento mediante la sincronización caótica, este sistema evita que los parámetros utilizados como clave de cifrado puedan ser detectados por un atacante al implementar el modelo matemático caótico del oscilador de Rössler para codificar y establecer la sincronización entre los dispositivos transmisor-receptor; además usa dos llaves de cifrado: la primera con una longitud recomendable de 2048 caracteres y la segunda se utiliza como un valor inicial. Ambas llaves se emplean para modificar continuamente uno de los parámetros del oscilador, esto fortalece la seguridad del sistema y evita que un atacante obtenga los valores del parámetro del oscilador calculando el error de sincronización promedio menor. El uso del sistema desarrollado proporciona un cifrado resistente a ataques estadísticos, además valida datos del dispositivo transmisor (nombre de usuario, password, etc.) para autorizar la transmisión hacia el destino.

This article presents an alternative for resolving the existing vulnerability of systems that implement masking by means of chaotic synchronization. This system avoids detection of the parameters used as the cipher key by an attacker on implementing encryption by means of synchronized chaotic-phase masks of the Rössler oscillator, for encoding and establishing synchronization among transmitterreceiver devices. In addition, it employs two ciphering keys: the first, with a recommended length of 2,048 characters, and the second, which is used as an initial value. Both keys are employed for continual modification of one of the oscillator’s parameters. This strengthens the security system and avoiding an attacker from obtaining the oscillator’s parametric values by calculating the least average synchronization error. The use of the system developed provides a cipher, which is resistant to statistical attacks. In addition, our system validates the data of the transmitter device (username, password, etc.) in order to authorize transmission., Este artículo presenta una alternativa para resolver la vulnerabilidad existente en los sistemas que implementan el enmascaramiento mediante la sincronización caótica, este sistema evita que los parámetros utilizados como clave de cifrado puedan ser detectados por un atacante al implementar el modelo matemático caótico del oscilador de Rössler para codificar y establecer la sincronización entre los dispositivos transmisor-receptor; además usa dos llaves de cifrado: la primera con una longitud recomendable de 2048 caracteres y la segunda se utiliza como un valor inicial. Ambas llaves se emplean para modificar continuamente uno de los parámetros del oscilador, esto fortalece la seguridad del sistema y evita que un atacante obtenga los valores del parámetro del oscilador calculando el error de sincronización promedio menor. El uso del sistema desarrollado proporciona un cifrado resistente a ataques estadísticos, además valida datos del dispositivo transmisor (nombre de usuario, password, etc.) para autorizar la transmisión hacia el destino.

This article presents an alternative for resolving the existing vulnerability of systems that implement masking by means of chaotic synchronization. This system avoids detection of the parameters used as the cipher key by an attacker on implementing encryption by means of synchronized chaotic-phase masks of the Rössler oscillator, for encoding and establishing synchronization among transmitter-receiver devices. In addition, it employs two ciphering keys: the first, with a recommended length of 2,048 characters, and the second, which is used as an initial value. Both keys are employed for continual modification of one of the oscillator’s parameters. This strengthens the security system and avoiding an attacker from obtaining the oscillator’s parametric values by calculating the least average synchronization error. The use of the system developed provides a cipher, which is resistant to statistical attacks. In addition, our system validates the data of the transmitter device (username, password, etc.) in order to authorize transmission., Este artículo presenta una alternativa para resolver la vulnerabilidad existente en los sistemas que implementan el enmascaramiento mediante la sincronización caótica, este sistema evita que los parámetros utilizados como clave de cifrado puedan ser detectados por un atacante al implementar el modelo matemático caótico del oscilador de Rössler para codificar y establecer la sincronización entre los dispositivos transmisor-receptor; además usa dos llaves de cifrado: la primera con una longitud recomendable de 2048 caracteres y la segunda se utiliza como un valor inicial. Ambas llaves se emplean para modificar continuamente uno de los parámetros del oscilador, esto fortalece la seguridad del sistema y evita que un atacante obtenga los valores del parámetro del oscilador calculando el error de sincronización promedio menor. El uso del sistema desarrollado proporciona un cifrado resistente a ataques estadísticos, además valida datos del dispositivo transmisor (nombre de usuario, password, etc.) para autorizar la transmisión hacia el destino.

This article presents an alternative for resolving the existing vulnerability of systems that implement masking by means of chaotic synchronization. This system avoids detection of the parameters used as the cipher key by an attacker on implementing encryption by means of synchronized chaotic-phase masks of the Rössler oscillator, for encoding and establishing synchronization among transmitter-receiver devices. In addition, it employs two ciphering keys: the first, with a recommended length of 2,048 characters, and the second, which is used as an initial value. Both keys are employed for continual modification of one of the oscillator’s parameters. This strengthens the security system and avoiding an attacker from obtaining the oscillator’s parametric values by calculating the least average synchronization error. The use of the system developed provides a cipher, which is resistant to statistical attacks. In addition, our system validates the data of the transmitter device (username, password, etc.) in order to authorize transmission., Este artículo presenta una alternativa para resolver la vulnerabilidad existente en los sistemas que implementan el enmascaramiento mediante la sincronización caótica, este sistema evita que los parámetros utilizados como clave de cifrado puedan ser detectados por un atacante al implementar el modelo matemático caótico del oscilador de Rössler para codificar y establecer la sincronización entre los dispositivos transmisor-receptor; además usa dos llaves de cifrado: la primera con una longitud recomendable de 2048 caracteres y la segunda se utiliza como un valor inicial. Ambas llaves se emplean para modificar continuamente uno de los parámetros del oscilador, esto fortalece la seguridad del sistema y evita que un atacante obtenga los valores del parámetro del oscilador calculando el error de sincronización promedio menor. El uso del sistema desarrollado proporciona un cifrado resistente a ataques estadísticos, además valida datos del dispositivo transmisor (nombre de usuario, password, etc.) para autorizar la transmisión hacia el destino.

Master subjects should ideally be very practical, to allow students to apply the knowledge they have acquired to the solving of specific problems. This paper proposes the design of a secure communications system using an SPI bus as a Master subject. The system designed uses a stream cipher to encrypt and decrypt data and allows transmission of random length messages. It also uses CRCs to check message integrity.

Master subjects should ideally be very practical, to allow students to apply the knowledge they have acquired to the solving of specific problems. This paper proposes the design of a secure communications system using an SPI bus as a Master subject. The system designed uses a stream cipher to encrypt and decrypt data and allows transmission of random length messages. It also uses CRCs to check message integrity.

Master subjects should ideally be very practical, to allow students to apply the knowledge they have acquired to the solving of specific problems. This paper proposes the design of a secure communications system using an SPI bus as a Master subject. The system designed uses a stream cipher to encrypt and decrypt data and allows transmission of random length messages. It also uses CRCs to check message integrity.

Master subjects should ideally be very practical, to allow students to apply the knowledge they have acquired to the solving of specific problems. This paper proposes the design of a secure communications system using an SPI bus as a Master subject. The system designed uses a stream cipher to encrypt and decrypt data and allows transmission of random length messages. It also uses CRCs to check message integrity.

Master subjects should ideally be very practical, to allow students to apply the knowledge they have acquired to the solving of specific problems. This paper proposes the design of a secure communications system using an SPI bus as a Master subject. The system designed uses a stream cipher to encrypt and decrypt data and allows transmission of random length messages. It also uses CRCs to check message integrity.

In early 2013, researchers in the CERT (registered trademark) Insider Threat Center contacted commercial and government cloud service providers (CSPs) about participating in research to gain a preliminary understanding of implemented administrative and technical controls that they are using to identify and manage the threats posed by insiders. These CSP participants provided frank and meaningful insight about their insider threat management programs and enterprise security practices. This report contains the observations obtained from interviewing the CSP personnel who volunteered to participate as well as an analysis of CSP management of insider threats based on the information obtained in interviews, observations of implemented insider threat controls, and risk considerations., Sponsored in part by the Department of Homeland Security (DHS) Federal Network Resilience (FNR) Division.

Implementations of the Advanced Encryption Standard (AES) have rapidly grown in various applications including telecommunications, finance and networks that require a low power consumption and low cost design. Presented in this thesis is a new 8-bit stream cipher architecture core for an application specific integrated circuit AES crypto-processor. The chip area and power are optimised along with high throughput by employing circuit-level techniques, resource sharing and low supply voltage. The proposed design includes a novel S-box/ InvS-box, MixColumn/ InvMixColumn and ShiftRow/ InvShiftRow with a novel low power Exclusive OR (XOR) gate applied to all sub systems to minimise the power consumption. It is implemented in a 130nm CMOS process and supports both encryption and decryption in Electronic Codebook Mode (EBC) using 128-bit keys with a throughput of 0.05Gbit/s (at 100MHz clock). This design utilises 3152 gate equivalents, including an on-the-fly key scheduling unit along with 4.23μW/MHz power consumption. The area of the chip is 640μm×325μm (0.208 square mm), excluding the bonding pads. Compared to other 8-bit implementations, the proposed design achieves a smaller chip size along with higher throughput and lower power dissipation. This thesis also describes a new fault detection scheme for S-box/ InvS-box that is parity prediction based to protect the key from fault attacks.

For many organizations, keeping data private and secure has also become a compliance requirement. Cloud providers offering Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) offer a “shared responsibility” model for customer applications and data, so companies that are migrating to the cloud are responsible for finding a solution. This research paper proposes a system, which combines encryption with key management to protect critical data in public, private and hybrid cloud environments.