Search

With the development of geographic information services, applications based on map data are increasing. Internet and mobile communication technologies have brought great convenience to the distribution, sharing, and acquisition of map data. Unfortunately, it also brings great challenges to protect the security and privacy of confidential map data. Although several encryption algorithms have been developed for map data, most of the existing methods are simple extensions of classical encryption algorithms for text data in cryptography, ignoring special structures and characteristics of geospatial data. Existing methods mainly take the entire map or layers as encryption units, which makes the encryption efficiency for large-scale map data low and limits the ability to perform local and incremental encryption for local areas, making it still challenging to meet the needs of map data in applications, such as autonomous driving. To solve the limitations, a local encryption approach for large-scale vector map data is proposed in this paper considering the structure characteristics of map data. Experiments on map data of different types (including points, lines, and polygons) demonstrate the effectiveness of the proposed method. With local and parallel encryption strategies, the proposed method has higher efficiency compared to available algorithms for large-scale map data. HIGHLIGHTS: A local encryption approach for vector map data is proposed, which can be applied to large-scale vector map data and support localized encryption/decryption for user-interested areas instead of the whole map data. The proposed method estimates different encryption parameters for different units which could significantly enhance the resistance to attacks and naturally supports parallel computing. With local and parallel encryption strategies, the proposed method has higher efficiency compared to available algorithms for large-scale map data. The method has great value and potential for ensuring map data security in ubiquitous GIS-based applications, such as map data sharing and dynamic updating in automatic driving and crowdsourced mapping. [ABSTRACT FROM AUTHOR]

In the 1990s, the US government recognised its citizens required cryptography for protection of digital data but also that encryption may impede law enforcement and intelligence collection. To reconcile these, President Clinton introduced the key-escrow policy, whereby the state would provide citizens with powerful encryption software whilst retaining decryption capabilities. The policy ultimately failed – the determinant reason for its discontinuation is unknown. This article posits and evidences that industry's argument that key-escrow would curtail the global growth of the US technology sector was the determinant factor in the policy's discontinuation. [ABSTRACT FROM AUTHOR]

This article examines the foundational principles and protocols that guide the development, implementation and use of encryption and their relevance and impact on technology law and policy. It first focuses on the technical aspects of encryption and explains the meanings of key terms and the different kinds and uses of this technology. It then expounds on the technical principles and protocols of encryption including information security, openness, provable security, and its adversarial nature. The article thereafter analyses the significance and import of these standards and rules on the proposed ghost protocol in encrypted messaging services and encryption law and policy more generally. It argues that technical principles such as information security, primacy of keys and resistance to attacks should be recognised and upheld in the development and adoption of encryption regulation. [ABSTRACT FROM AUTHOR]

This article addresses the pervasive issue of digital piracy in the movie industry. Despite substantial efforts to combat piracy, its impact remains significant, resulting in substantial financial losses for companies. Digital rights management (DRM) has been introduced as a countermeasure to counter this challenge. While the security of video applications, including commercial and military videos, has gained prominence in recent research, this paper focuses on enhancing the encryption algorithm and presenting encryption results. Specifically, it explores the AES 128 encryption algorithm's vulnerabilities in the MPEG-DASH media file and proposes a randomized algorithm for video file encryption. To bolster security, the randomized approach leverages three robust algorithms: AES 256, Two-Fish, and Serpent. The randomized algorithm demonstrated significantly higher resistance to brute-force attacks than AES 128 CBC, as exemplified by a test scenario with a key length of 32 and 100 media chunks. By utilizing this combination of unbroken algorithms, the paper offers an efficient solution for offline-protected media storage, ultimately strengthening the security and privacy of the MPEG-DASH DRM system and mitigating the risk of media file piracy. The randomized algorithm consistently outperformed AES 128 CBC in terms of execution time across multiple media files, with the randomized algorithm completing the encryption process in 34,610 milliseconds for Media File 1, compared to AES 128 CBC, which required 59,910 milliseconds, showcasing a notable enhancement in speed. [ABSTRACT FROM AUTHOR]

Accelerated growth in networking and semiconductor devices led to the increase of Internet-connected devices over recent years. The applications of IoT provide pervasive admittance, scalability, and distribution of data using the cloud for the storage and processing of data. All the actors involved in the grid affect the trust. Managing security and deploying it throughout the IoT environment is required to audit and protect sensitive data. Security management involves authentication to avoid unauthorized entry and encryption at transmission. Though there are standard methodologies employed in data protection in the cloud and network layers, there is a requirement for solutions with low foot-prints suitable for constrained IoT devices. While there are existing lightweight cipher designs performing well with less memory footprint, the performance in the cloud is less compared to traditional cipher techniques. So, a balanced solution with less memory footprint and resistance against various attacks in the cloud environment is required. A lightweight cipher design is proposed to enable secure communication among devices through the cloud, which is combined with Elliptic Light (ELLI) and an Authentication Function (AF) is proposed using RC4 to ensure integrity and authentication and exchange secret key. The cipher design proposed provides increased efficiency and fixes the weakness in standard lightweight algorithms. This algorithm is simple and efficient, with 60% less memory utilization and 53% less execution time than other lightweight solutions. The stability is high in linear and differential cryptanalysis and resistive against DDoS attacks. [ABSTRACT FROM AUTHOR]

Feed Forward Back Propagation Neural Network (FFBPNN) Optimized with Woodpecker Mating Algorithm is proposed in this manuscript for Dynamic Cluster-Based Secure Routing in Wireless Sensor Networks (FFBPNN-WMA-ECHC-WSN). The proposed method contains three different stages: first stage is dynamically clustered sensor network formation based on FFBPNN, second stage is Key generation for data encryption and decryption using Elliptic Curve-based Hill Cipher (ECHC), third stage is Homomorphic encryption scheme, which is used to deliver the aggregated data in-time. Woodpecker Mating Algorithm (WMA) is proposed to optimize the parameter values of FFBPNN. The proposed FFBPNN-WMA ECHC-WSN method was implemented in NS2 tool and its efficiency is evaluated under some metrics, like alive nodes, packet drop, network lifetime, delay, throughput, and energy consumption, Packet Delivery Ratio (PDR). The performance of FFBPNN-WMA-ECHC-WSN method provides lower delay 99.01%, 98.34%, 95.23% and 97.45%, and higher throughput 97.25%, 90.12%, 89.39% and 95.47% compared with existing models, such as EHCERA-SDT-WSN, DSA-ECC-PSO-SDT-WSN, IPECC-PDF-ABC-SDT-WSN and IBFA-LDCSN-BSHHO-SDT-WSN, respectively. [ABSTRACT FROM AUTHOR]

An essential security component for the Internet of Things (IoT) is device authentication. IoT devices are widely dispersed in public and open areas, making them vulnerable to attacks. To detect the security violations, an authentication with a privacy preservation model is developed in this research using devised Autoregressive Poor and Rich Optimization (APRO)-based secret key. Here, the secret key used to perform the encryption process is generated by the proposed optimization algorithm in such a way that the data encryption mechanism is carried out by considering the Box-Cox transformation. However, the authentication process is achieved between the server and the Authorization center (AC) through the generation of authentication and verification messages. The original data is retrieved back by employing the decryption process along with the usage of the retrieval key. The proposed method achieved a minimum computation time of 0.062 sec, higher encryption quality of 92.56%, and minimum memory usage of 2.86MB. [ABSTRACT FROM AUTHOR]

In this work, we have used the standard symmetric key block cipher data encryption algorithm RC5(32,16,8) for the encryption of digital greyscale images. For this, we have only considered the nonzero elements of the sparse matrix of the images which have been generated using the sparse representation technique. The security strength of the proposed technique is verified through different quality parameters, e.g. information entropy, correlation coefficients, NPCR, UACI, and NIST test. Our proposed algorithm achieved the maximum information entropy value of 7.9977 for the cameraman image and nearly zero correlation coefficient values establish the robustness of the cryptosystem. The highest NPCR and UACI values obtained in our work are 99.6916 and 33.9605, which are closer to the maximum theoretical values. The proposed technique is also compared with some of the contemporary works to validate the credibility of our proposed algorithm. [ABSTRACT FROM AUTHOR]

In recent years, transmitting medical data has been a regular process. Although strong, safe, and dependable encryption techniques are necessary for medical data, cryptography is largely a computational process. The research presents a selective encryption approach for the transfer of sensitive data. This study proposes a novel technique for selecting the optimal keys to offer more security to medical data. Initially, the medical data is encrypted using the hybrid AES–DES technique. To make an efficient encryption method, the most optimal keys are selected utilising an improved Cheetah optimisation algorithm (ICO). Finally, the keys are optimised, and the input medical data is safely kept in the cloud system according to the established model. As a result, the proposed approach utilises the Python tool to evaluate the results. The simulation results show that the proposed method outperforms others in terms of encryption time 96 s, decryption time 92 s, memory usage (16), and latency (0.006). [ABSTRACT FROM AUTHOR]

Opioid use disorder is a growing public health concern in the United States, causing economic burden and hindered by stigma. New forms of data, including location data, may improve the effectiveness of interventions for preventing and treating opioid use disorder and/or misuse, increase access to treatment and address racial and ethnic disparities. This qualitative study aimed to identify factors that contribute to users' experience with a publicly available location-tracking mobile app - and investigate their privacy and ethical concerns. The study was conducted through two 15-minute interviews within a 48-h time frame. Participants were recruited from a pool of past research participants, Facebook ads, and referrals, and had to meet certain inclusion criteria related to opioid use disorder and/or misuse. The study had a final sample of 30 participants, 15 male and 15 female. The study suggests that a simple onboarding process and convenient experience can enhance participant adherence to the study app and other similar location-based research apps. However, the study also found that participants had concerns about privacy and transparency about locational privacy when sharing their location data. To improve the app, researchers suggest incorporating user behavior earlier in the app development stage. The study also highlights the importance of addressing ethical and privacy concerns such as limiting the types of collected data, incorporating data encryption and retention strategies, giving access to research staff only, and not sharing the data with third-party companies or law enforcement agencies to increase user satisfaction. [ABSTRACT FROM AUTHOR]

Home area network (HAN) devices send the electricity consumption and other important data to the smart meter that must remain confidential from other devices. This paper proposes a novel one-dimensional hybrid chaotic map. The proposed map shows excellent chaotic properties when analyzed by bifurcation diagram, Lyapunov exponent & Shannon entropy. We further design an encryption strategy for data transfers between the smart meter and HAN devices. The proposed encryption scheme uses the existing lightweight key management in advanced metering infrastructure (LKM-AMI) architecture for data transfers, in which the encrypted data is transferred through an insecure channel and private keys are provided by trusted third party (TTP) through secure channels. The 2-way communication between HAN devices and the smart meter sends messages that are encrypted by using the proposed novel hybrid one-dimensional chaotic map. The encryption strategy mainly consists of three steps. In the first step, the seed and the control parameters are initialized. The second phase generates two intermediate keys using the proposed hybrid chaotic map. In the last phase, we encrypt the message by applying permutation followed by diffusion using intermediate keys. The proposed encryption strategy is resistant to various attacks. [ABSTRACT FROM AUTHOR]

With the rapid development of information technology, huge data information is exchanged every moment in various types of networks, which contain information such as commercial secrets and personal privacy, and data security has a great impact on people's lives. To address the issues of low efficiency and poor security in network link transmission layer database security encryption systems, a new system is studied and designed to strengthen the protection of data information from both hardware and software aspects. Then, a discrete chaotic system is introduced to ensure the stability of the dynamic grouping encryption algorithm. Finally, trajectory loop rotation is used to obtain address clusters using the discrete chaotic system, and dual address loop rotation is used to achieve the variability of the dynamic grouping algorithm. The experiment shows that for different file sizes, the encryption speed of the Dynamic Packet Encryption Optimization (DPEO) algorithm is stable between 5.84 and 5.98 mb/s. And after minor changes in the key, the NPCR of the ciphertext obtained by the DPEO algorithm exceeds 99.5%. In addition, its operation efficiency is excellent, reaching the stable entropy value in only 0. 52 s. In summary, the DPEO algorithm in the network link transport layer database security encryption system can combine high efficiency and excellent security performance. [ABSTRACT FROM AUTHOR]

This paper describes Alkaline, a size-reduced version of Kyber, which has recently been announced as a prototype NIST standard for post-quantum public-key cryptography. While not as simple as RSA, I believe that Alkaline can be used in an undergraduate classroom to effectively teach the techniques and principles behind Kyber and post-quantum cryptography in general. Classroom experiences with individual concepts used in Alkaline support this belief. In addition to cryptography, linear algebra and abstract algebra classes would be good candidates for the use of Alkaline. A few exercises suitable for use in these classes are included. [ABSTRACT FROM AUTHOR]

Learning analytics methods have proven useful in providing insights from the increasingly available digital data about students in a variety of learning environments, including serious games. However, such methods have not been applied to the specific context of educational escape rooms and therefore little is known about students' behavior while playing. The present work aims to fill the gap in the existing literature by showcasing the power of learning analytics methods to reveal and represent students' behavior when participating in a computer-supported educational escape room. Specifically, we make use of sequence mining methods to analyze the temporal and sequential aspects of the activities carried out by students during these novel educational games. We further use clustering to identify different player profiles according to the sequential unfolding of students' actions and analyze how these profiles relate to knowledge acquisition. Our results show that students' behavior differed significantly in their use of hints in the escape room and resulted in differences in their knowledge acquisition levels. [ABSTRACT FROM AUTHOR]

Cryptography field, which enables secure communication between civilians, governmental organizations, military forces, and many more, addresses security, confidentiality, and integrity of information being conveyed regardless of the medium used. Protection of priceless information resources on intranets, the Internet, and the cloud has become a vital demand of contemporary electronic security systems. In this paper, we deploy homomorphic data encryption (HDE) technique on Bipolar-valued Fuzzy Sub-Bigroups (BVFSB). Intuitionistic Fuzzy Sets were presented by Atanassov in 1986, as a modification of Fuzzy Sets, by taking into consideration the grade of membership value and non-membership value for each element in the universe. A fuzzy algebraic structure known as Bipolar-valued Fuzzy sub-bigroup of a bigroup has been established by applying the concept of bipolar-valued Fuzzy sets to bigroups. Some of the theorems related to homomorphism and anti-homomorphism, are stated and proved. [ABSTRACT FROM AUTHOR]

Because of its on-demand servicing and scalability features in cloud computing, security and confidentiality have converted to key concerns. Maintaining transaction information on third-party servers carries significant dangers so that malicious individuals trying for illegal access to information data security architecture. This research proposes a security-aware information transfer in the cloud-based on the blowfish algorithm (BFA) to address the issue. The user is verified initially with the identification and separate the imported data using pattern matching technique. Further, BFA is utilised to encrypt and save the data in cloud. This can safeguard the data and streamline the proof so that client cannot retrieve the information without identification which makes the environment secure. The suggested approach's performance is evaluated using several metrics, including encryption time, decryption time, memory utilisation, and runtime. Compared to the existing methodology, the investigational findings clearly show that the method takes the least time to data encryption. [ABSTRACT FROM AUTHOR]

Our world is making its way toward complete digitization, with more and more data going to the Internet. Thus, the security of the data has become one of our utmost responsibilities. Strong and secure cryptography and steganography techniques have become the need of the hour to defend against modern adversaries. In this article, a novel scrambled data hiding approach is proposed to secure the sensitive information used in communications. The lacuna in the existing data hiding approaches is the loss of originality in the sensitive data to be attached, leading to poor information quality. This issue is addressed in the proposed approach by encrypting the data using the triple data encryption standard (DES) algorithm. The scrambled data are hidden in the audio file using the least significant bit (LSB) embedding. Experiments were conducted, and the proposed approach secured the sensitive information significantly without the loss of information quality. Furthermore, the secured information is retrieved by only the authenticated users with high quality. [ABSTRACT FROM AUTHOR]

The out-of-band management system defined by IPMI only supports IIC bus for inter-node communication, which has low communication rate and poor flexibility for multi-node layout, and it is not suitable for cluster management applications with large data volume of multiple nodes. This article adopts Ethernet instead of IIC to realize the structure layout of multi-node distributed cluster management system. The operation and maintenance information are trans-mitted by RMCP+, but the original RMCP + is rate limited and less stable in the transmission of large data volume in multi-cluster management system due to the use of AES-CBC encryption algorithm. This article optimizes the RMCP + communication process logic to reduce the redundancy in the system cascade data about transmission encryption and decryption calculation, and proposes the method of using parallel CTR for data block encryption instead of serial CBC data block encryption, which realizes the loose coupling of database decryption in data packets, in-creases the decryption rate of data cipher text at remote clients, educes the error transmission caused by tight coupling of data blocks, and improves the communication efficiency. The experimental environment of QEMU-based multi-node management system is built to verify that the communication method proposed in this article is suitable for the operation and maintenance management of distributed multi-node complex ATCA. [ABSTRACT FROM AUTHOR]

The Internet of Things in smart environments interrelates with Mobile Ad‐hoc Network and Wireless Sensor Network, which becomes more attractive and efficiently flourishing. Moreover, Mobile Ad‐hoc Network is applied in various fields including intelligent transportation, emergency communications after disaster, and Internet of Things. The incorporation of Internet of Things and Mobile Ad‐hoc Network become a rising theory for enabling opportunistic communication in Internet of Things. The security provisioning for secure communication is still the major challenge in Mobile Ad‐hoc Network – Internet of Things. Thus, in this paper, the DEroute algorithm is developed for secure communication Internet of Things structure, where Internet of Things nodes are located in mobile ad-hoc manner. In order to avoid the route list modification, nodes' address is encrypted based on generated secret keys by Diffie–Hellman key-exchange algorithm. The fuzzy system with trust parameters, like historical, indirect and direct trust factors are considered for the identification of secure nodes. The bi-filtering process is also performed for filtering important nodes. Thus, the developed DEroute model achieved enhanced performance with respect to delay, packet delivery ratio and throughput of 0.1674 sec, 87.23% and 25.19 mbps, respectively. [ABSTRACT FROM AUTHOR]

Encrypted control systems were introduced to enhance the security of cyber-physical systems, which outsource control action computations to a third-party platform. To protect the confidentiality of the transmitted data, homomorphic encryption schemes are particularly appealing for their capability of allowing computations on encrypted data. By considering the popular ElGamal and Paillier encryption schemes, this paper shows that encrypted control systems are vulnerable to attackers leveraging the inherently small domains of the plaintext data in control systems and the randomisation process required to make the utilised ciphers semantically secure. Finally, we present some countermeasures to defend against these attacks. [ABSTRACT FROM AUTHOR]

I Crypto Wars - The Fight for Privacy in the Digital Age: A Political History of Digital Encryption i is the first scholarly history of the sixty-year political debate over perceived promises and perils of widely-available cryptography in the Anglophone west, especially the United States. Jarvis rejects the dominant approach to periodizing the crypto wars, which labels the debates of the 1990s "Crypto War 1.0" and the post-Snowden debates "Crypto War 2.0." Jarvis claims to be establishing fact and dispensing with fictions, but the only places in the text where this applied is in Jarvis' defense of the NSA and FBI against their critics. Because Jarvis framed the book so narrowly, he missed the opportunity to write a truly dynamic history of the crypto wars.[6] On the other hand, because Jarvis axiomatically assumes the existence of the NSA, he overlooks another possible beginning to the crypt wars. [Extracted from the article]

Data deduplication has become a promising technique that significantly reduces space utilization of cloud storage servers and optimizes the network bandwidth. A variety of deduplication techniques have been proposed to enhance the cloud server's storage efficiency. Most of the deduplication schemes do not address global indexing and user privacy issues. This paper elucidates a novel three-tier secure data deduplication architecture (referred to as SEEDDUP) for data storage and retrieval in the cloud. SEEDDUP provides data deduplication with proper indexing and user privacy. In this work, the optimal chunk size, for a given file size and format, is calculated using Cuckoo Search Algorithm. The chunk existence in the cloud is verified by the hash value generated via SHA3-512. To improve data deduplication speed, Merkle Hash Tree based MapReduce (MHTMR) is used for fast index lookup, which improves the performance at data storage and retrieval. In addition, data are encrypted based on its sensitivity level (low and high) using Niederreiter Public Key Cryptosystem. With this new SEEDDUP architecture, only legitimate users can request data successfully for limited times (k) and spurious data requests cannot be processed or handled in the cloud. Experimental results show that the proposed SEEDDUP can reduce latency, achieved good throughput and deduplication efficiency (chunk size variance and security measures) in data deduplication. [ABSTRACT FROM AUTHOR]

One type of wireless network, Wireless Ad hoc NETwork (WANET), is arranged in a disaster zone with the objective of acquiring patients' data and enhancing medical prerequisites. WANETs are poised for various compact nodes dispersed in the disaster zone. The nodes in WANETs are competent enough in sending the collected medical data and storing in Cloud instead of in a single server. The limited bandwidth with less concentric secured storage and retrieval of huge medical data necessitates secured and data storage in Cloud to maintain the service quality of WANETs. To address this issue, we propose an optimization-based medical data compression and encryption technique, which ensures data security and high performance data retrieval in Cloud via WANET. We propose a Walsh and Scalar Quantized Singular Value Decomposition technique to deliver the compressed medical data that maximize the lifetime of WANETs. Next, Miyaguchi Preneel Encryption Standards are utilized and applied to the compressed medical data that not only improve the security aspect but also ensure high performance data retrieval by a single key for both encryption and decryption. The utility of the proposed method is exhibited with simulation results. The results show that the proposed method efficiently secures the medical data by extending network lifetime and data retrieval. [ABSTRACT FROM AUTHOR]

Rapidly rising the quantity of Big Data is an opportunity to flout the privacy of people. When high processing capacity and massive storage are required for Big Data, distributed networks have been used. There are several people involved in these activities, the system may contribute to privacy infringements frameworks have been developed for the preservation of privacy at various levels (e.g. information age, information the executives and information preparing) as for the existing pattern of huge information. We plan to frame this paper as a literature survey of these classifications, including the Privacy Processes in Big Data and the presentation of the Associate Challenges. Homomorphic encryption is particularised aimed at solitary single action on the ciphered information. Homomorphic enciphering is restrained to an honest operation on the encoded data. The reference to encryption project fulfils many accurate trading operations on coded numerical data; therefore, it protects the written in code-sensible information even more. [ABSTRACT FROM AUTHOR]

This study proposes a simple two-period model to consider consumers' borrowing behaviour in a decentralised consensus and information distribution platform. Based on this model, we develop a bank risk mitigation framework and find that decentralised digital identity and encryption technology are the most important factors for attaining market equilibrium between decentralised consensus and information distribution. Specifically, the greater the scope of digital identity construction and the more blockchain consensus records there are, the less likely the borrower will default. Our study provides meaningful practical implications for bankers and policy regulators to help them better understand consumers' borrowing behaviour and decisions to default. [ABSTRACT FROM AUTHOR]

This article examines the disconnect between people's social conceptions of privacy and information security in relation to encryption vis-à-vis the legal protections offered by law. It describes the social conceptions and expectations of participants based in New Zealand and contrasts these with the applicable laws and legal protections concerning privacy, information security and encryption. In light of incongruence between the social and the legal, the article recommends law and policy developments to better align and connect people's social conceptions of privacy and information security with the legal protections provided by law. This includes having greater awareness of the relevance of civil and criminal procedure rights to privacy and information security in the context of encryption and providing stronger legal protections to the right against unreasonable search and seizure and the privilege against self-incrimination. [ABSTRACT FROM AUTHOR]

The cypherpunks were 1990s digital activists who challenged White House policies aiming to prevent the emergence of unregulated digital cryptography, an online privacy technology capable of frustrating government surveillance. Whilst the cypherpunk's ideology, which is predominantly the output of Timothy C. May, is well understood, less is known about the composition of the cypherpunk's community. This article builds on past studies by Rid and Beltramini by using the cypherpunk's mail list archive to profile the most active and influential cypherpunks. This study confirms the May-derived ideology is broadly, though not entirely, representative of the cypherpunk community. This article assesses the cypherpunks were a highly educated, mostly libertarian community permeated by aspects of anarchism which arose from a societal disaffiliation inherited from the counterculture. This article further argues that the cypherpunks were also influenced by the hacker ethic and dystopian science fiction. [ABSTRACT FROM AUTHOR]

This article examines the resource sharing functionality of the decryption platform of Europol. The platform supports European law enforcement agencies (LEAs) that are having difficulties accessing legally obtained encrypted evidence due to the lack of human and technical resources. The article investigates Europol's resource transmission role with sharing economy variables such as transaction cost and trust-building. The core argument of the article is that Europol's sharing platform has a strong potential to reduce the transaction cost of outsourcing the decryption services and diminish trust-related problems for national policing agencies by replacing private sector actors. However, for a more sustainable cybercrime investigation strategy, the decryption platform needs a new market-oriented model supported with robust vetting and evidence security mechanisms to encourage more private company participation. [ABSTRACT FROM AUTHOR]

This article examines the laws that apply to encryption in New Zealand. Specifically, it analyses the different types of law that constitute an encryption legal framework in the country, namely: export control, substantive cybercrime, criminal procedure, human rights, and information security and data protection. The article then utilises the encryption laws and legal framework to evaluate a proposal by the Five Eyes intelligence alliance to regulate the use of end-to-end encryption in messaging services. The article concludes that the proposal is incompatible with the country's encryption legal framework. [ABSTRACT FROM AUTHOR]

This paper describes a cryptographic protection system hardware device designed to improve data encryption and decryption performance and preserve data integrity. The cryptosystem is implemented by hardware-software method, where the encryption and decryption of data are carried out in a standalone FPGA device based on non-positional polynomial number system (NPN). For data encryption the next block of text to be encrypted is divided into sub-blocks and represented as separate binary polynomials and binary polynomials-keys are assigned to them, as well as irreducible polynomials (modules). Then, split blocks are calculated in parallel and a ciphertext is formed. For this purpose, the special algorithm where calculation of NPN parameters and check on irreducibility of polynomials (modules) and the program of generation of direct and inverse keys are developed and application functional is developed that implements operations in the ring of polynomials with coefficients GF(2) using an object-oriented approach. We have developed polynomial multipliers modulo sequential and parallel action (matrix multiplier) on the basis of which data encryption and decryption are performed. [ABSTRACT FROM AUTHOR]

This paper proposes a new modification to the AES in order to ensure a high-level security. This is accomplished by replacing the binary Exclusive OR (XOR) operation in each add-round-key stage of the AES with a new (#) operation. The (#) operation requires an additional and randomly generated control key to determine the state table (among 256 optional state tables) needed to apply the (#) operation. The 256 states tables are formed based on the addition operation in the Galois Field GF (28) to increase the randomness of the algorithm. The modified AES algorithm has been evaluated based on several security metrics. In our proposed algorithm, an attacker needs, at minimum, up to (2431)10 probabilities of keys to decrypt an encrypted message; thus, the proposed AES algorithm increases the complexity of the original AES against the differential cryptanalysis. Moreover, compared to the original AES, applying the (#) operation in our modified algorithm also improves the performance in other security metrics, such as NIST and histogram. Consequently, this replacement by using two keys in both the encryption and decryption process adds a new level of "protection and a greater degree of robustness against breaking methods. [ABSTRACT FROM AUTHOR]

Employee turnover (ET) can cause severe consequences to a company, which are hard to be replaced or rebuilt. It is thus crucial to develop an intelligent system that can accurately predict the likelihood of ET, allowing the human resource management team to take pro-active action for retention or plan for succession. However, building such a system faces challenges due to the variety of influential human factors, the lack of training data, and the large pool of candidate models to choose from. Solutions offered by existing studies only adopt essential learning strategies. To fill this methodological gap, we propose a machine learning-based analytical framework that adopts a streamlined approach to feature engineering, model training and validation, and ensemble learning towards building an accurate and robust predictive model. The proposed framework is evaluated on two representative datasets with different sizes and feature settings. Results demonstrate the superior performance of the final model produced by our framework. [ABSTRACT FROM AUTHOR]

Social media applications (apps) use sensitive/private data in their nature. Android apps continue to share data with third parties and often transmit data unencrypted, leaking data directly and inadvertently. Internet Service Providers (ISPs) can legally collect and sell this leaked, sensitive user data. End users rely on privacy policies that have largely been absent, continue to lack detailed security methods, and have had inconsistencies with app actions. Overall, we lack a detailed understanding of the state of these privacy and security issues within sensitive settings such as social media apps. We aim to expose these apps, meticulously classifying and comparing unencrypted data transmitted with privacy policy disclosure, leveraging the Platform for Privacy Preferences (P3P) Specification. We develop an analysis framework and isolated testbed environments, leveraging open-source tools to enable accurate data collection through dynamic analysis. We then peer into privacy policy revisions, advertising/analytics libraries, and business relationships held by app companies. We report detailed inconsistencies between app behaviors and privacy disclosure. Most apps in our dataset transmitted the majority of their traffic unencrypted and several leaked personally identifiable information (PII)/sensitive data, while none detailed security methods or data transmission practices. Finalizing our study, we conduct brief follow-up experiments on several apps to note substantial changes in data transmission practices. We conclude that a failure to protect sensitive user data and a tendency for vague privacy policies continue to be prevalent, but over the last few years some apps have increased encryption use, thus beginning to combat some data leakage. [ABSTRACT FROM AUTHOR]

KASUMI and SNOW-3G are encryption algorithms that are used to provide security in GSM, 3G mobile networks. Many security attacks like rectangle-attack, sandwich-attack, single-key attack, etc. breach the security of the traditional KASUMI block chiper. In order to enhance the security in the traditional KASUMI block chiper, we have proposed the modifications in traditional KASUMI by introducing Rijndaels's S-box which is present in the SNOW-3G block chiper. Also, we propose to remove the FI function completely from the traditional KASUMI block chiper and suggest the modification in the FO function. In the proposed KASUMI block cipher, two FO functions are introduced that are FO(a) and FO(b). In FO(a), a 16-bit S-box is added, where in FO(b), cyclic shift operation is added. The simulation results show the performance improvement of the proposed work over conventional work in terms of total encryption time and speed. [ABSTRACT FROM AUTHOR]

Google is the single largest driver of traffic to library Web sites and digital repositories, and librarians would do well to listen when the search giant reveals information about its practices or makes recommendations. Recently, Google announced that it would begin to favor Web sites that use the secure hypertext transfer protocol (HTTPS) in its search results rankings. HTTPS encrypts data transmission and one of Google's stated reasons for this change is to help make the Web safer and minimize data theft. Similar announcements by Google have sometimes been ignored by librarians, to the peril of the visibility and use of library products and services on the Web. [ABSTRACT FROM AUTHOR]

"The American Library Association affirms that rights of privacy are necessary for intellectual freedom and are fundamental to the ethical practice of librarianship," reads a position paper by the ALA. Protecting user privacy is a cherished ethical position held within this field. Therefore, it is worth asking whether libraries have been aggressive enough to protect this standard, given the rapid advancement of information technology, digital surveillance, cybercrime, commercial exploitation of user data, and emerging privacy threats for the individual and culture. This paper seeks to reconcile the ethical vision with the hard reality that emerging cyber threats can easily circumvent basic library efforts to protect user data. The author imagines the "black box" library, which would be the end result of radical adherence to the ethical standard. In short, the "black box" library would protect freedom of conscience for the user by adhering to extremely rigorous standards, including: Mass encryption, proxy services, legal enforcement of privacy provisions in vendor contracts, recordless inventory systems, and other strict measures. The vision is for a space where critical information flows in, but very little if any "digital exhaust" escapes it. [ABSTRACT FROM AUTHOR]

Encryption is the process of securing confidential data that bars a third party's access to the information.RSA encryption utilises the property of complexity classes wherein the problem of prime integer factorization lies inside the Non-Polynomial time (NP-Hard) class, which makes it impervious to classical computers. Since it is so hard to break even for a computer, it becomes important to do encryption for all the secure transactions. Although it lies outside the capabilities of traditional computing, the recent developments in the field of quantum computing can be utilised to break RSA Encryption. The approach involves mapping of qubits used in a quantum machine to a constraint satisfaction problem (CSP) and then using them to check for factors. This consists of the use of a Multiplicative Boolean circuit in which the qubits utilised by the machine replaces the variables. These Qubits are then mapped as per the gates involved, and the factorization problem is thus transformed into a CSP problem, through which, the factors can be easily found. Once known, these factors can be used to calculate the public and private keys effectively breaking the encryption security. We provide a novel approach to highlight the importance of developing Post-Quantum cryptography techniques for providing a secure channel of communication. [ABSTRACT FROM AUTHOR]

As an important branch of reversible data hiding, reversible data hiding in encrypted images (RDH-EI) can embed secret message into images, but also effectively protect the privacy of the images in an open environment. Most of the recently proposed RDH-EI methods are based on the public-key cryptosystem. However, the expansion rate of the public-key cryptosystem is too high to make the information transmission more difficult. In this paper, to achieve a low expansion rate, a hybrid encryption combined with Paillier cryptosystem and stream cipher is proposed. The original image is partitioned into non-overlapping blocks, which are selected as two categories of blocks and encrypted by a hybird encryption with a low expansion rate. The embedding capacity of these two types of blocks is determined by the adaptive optimization algorithm. Hidden data are embedded into images by modifying ciphertexts according to the data hiding key. In the decoding phase, the embedded data can be extracted, and the original image can be recovered with the encryption key and data hiding key. Experimental results show that the low expansion rate can be obtained with a relatively high PSNR compared with some state-of-the-art methods. [ABSTRACT FROM AUTHOR]

This article is designed to outline the lack of international rules of engagement in cyberspace, and how traditional practices and laws of war are applicable to cyberwarfare and how it is not. If there are any legal implications for cyberwarfare, there are very few. Any reasonable anticipation of reprisal after an initial cyberattack by a nation-state upon another is minimum. The problem of attributing a cyberattack to a source remains an enormous challenge for cyber-diplomacy, leading to critics who do not see cyberwarfare as a standalone danger to national security. Regardless of the critics, the Department of Defense (DoD) has established cyber operations as weaponized entities in its Law of War Manual, and there are historical examples that prove cyberwarfare can act as a dangerous weapon against critical infrastructure and exposed populations. If there continues to be a deficiency of understanding on the part of essential decisionmakers regarding the nature of cyberspace in policy, and a sustained escalation of nation-state on nation-state cyberattacks, without proper rules of engagement in this space with universal axioms of proportionality, the international community could end up in error with an unwanted conventional or nuclear war. [ABSTRACT FROM AUTHOR]

Purchasing items on the Internet with a credit card can be extremely risky. To mitigate this risk, we propose a new Multi-Layer Defense (MLD) scheme which uses two-factor authentication by instituting a random number generator that is only valid for a preset amount of time. For two-factor authentication, we use an eight-digit code that serves as a redundant private key to authenticate the purchases. This can be utilized to identify users of credit cards and establish a more secure way of purchasing items via various marketplaces on the Internet. Specifically, the MLD scheme uses electronic devices to log into the credit card accounts via an application to view a randomly generated code. This is then inputted on an Online Retailer's website to authorize the use of the credit card. This ensures that a legitimate user is attempting to make a purchase and is not fraudulent. This redundancy, if used, can mitigate the circumstance of lost or stolen credit card information. The use of our proposed MLD scheme, specifically randomly generated code, when making a credit card purchase online could drastically cut down on fraudulent credit card purchases. [ABSTRACT FROM AUTHOR]

KASUMI is an eight-round Feistel network that produces 64-bit output from 64-bit input by using 128-bit key. Three functions FL, FO and FI are involved in each round and each function has its respective keys KL, KO and KI. In this work, modifications in the existing KASUMI are proposed to reduce the encryption time. In proposed KASUMI, the single FL function is divided into two functions such as FLleft and FLright. The FLleft function is constructed with two Rijndael's 32-bit S-boxes. The FLright function is constructed with four stages where third and fourth stages are performing XOR and shift operations before final concatenation of two 16-bit data of FL function. The simulation results are provided in terms of encryption time taken versus number of iteration and encryption speed versus number of iteration to show that the proposed KASUMI block cipher design outperforms the conventional KASUMI block cipher. [ABSTRACT FROM AUTHOR]

Security in a wireless sensor network is an essential requirement to safeguard the system from misuse of the collected data. In a wireless sensor network, the sensed data is to be transmitted to a base station securely and safely. In this process, data packets may route through multiple sensor nodes and reached the base station at the end. The encryption is the basic tool to protect data from vulnerable attacks in a wireless sensor network. Among the two basic encryption classes namely symmetric key encryption and asymmetric key encryption, the prior is most suitable for wireless sensor network for its simplicity and low computation cost. In this article, we propose a quaternion based encryption system applicable to the wireless sensor network with a key distribution scheme. We use the IEEE standard half-precision number system in the arrangement of special quaternions and secret keys. The quaternion encryption mainly rotates one quaternion w.r.t. an axis with a given angle and thereby produce a new quaternion. Experimental results for the encryption and decryption process and its efficiency is discussed in this article. [ABSTRACT FROM AUTHOR]

In this paper, we introduce a deniable electronic mail authenticated encryption service. Our design meets the security requirement of the current Pretty Good Privacy and Secure/Multipurpose Internet Mail Extensions to provide message confidentiality and message authentication without the undesired non-repudiation, which can protect the individual privacy of the sender when communication occurs in open channels. Our scheme is based on the bilinear pairings, which is provably secure in the random oracle model under the bilinear Diffie-Hellman and computational Diffie-Hellman assumptions. In addition, our scheme needs a little high communication overhead. However, this extra cost is reasonable for the properties of deniable authentication, confidentiality, and ciphertext anonymity. [ABSTRACT FROM AUTHOR]

Nowadays, Internet of Things (IoT) is turning into an attractive framework to drive a substantive jump on merchandise and enterprises through physical, digital, and social spaces. This paper enhances IoT security authentication by utilizing cryptographic-based methodologies. In this study, we secure IoT sensitive data with the help of Optimal Homomorphic Encryption (OHE) with high dependability. Sensitive data from IoT dataset are classified based on Deep Learning Neural Network structure (DNN). After classification, OHE performs sensitive data in the process of encryption and decryption. During encryption, the key is authenticated and the optimal key is selected by using Step size Fire Fly (SFF) optimization algorithm. This strategy can build up the encrypted key and attains the most prominent privacy-preserving data in IoT. The outcome shows that the performance of the proposed IoT security model achieves maximum key breaking time and less computational time with high security. [ABSTRACT FROM AUTHOR]

In this work, an autonomous lightweight certificateless aggregate signature-based data aggregation scheme for internet-of-things (IoT) is proposed. In the scheme, IoT terminals only need to contact the key generation center (KGC) once. Subsequently, they can generate their pseudonyms on their own without any interaction with the KGC. An efficient revocation mechanism is provided to punish malicious terminals. The proposed scheme is anonymous, can provide conditional traceability, resist various attacks, and solves private key compromise problem. The formal security proof demonstrates that the scheme is secure against both Type I and Type II adversaries in the random oracle model based on the intractability of the Discrete Logarithm Problem. The performance evaluation shows that the proposed scheme is more efficient than the state-of-the-art schemes and fits the resource-constraint IoT environment. [ABSTRACT FROM AUTHOR]

The designed system described in this paper consists of five stages to solve one of the higher education environments using intelligent data analysis (IDA) and the Internet of things (IOTs). The main points of this system are (i) it reduces the time rate and effort wasted in taking daily attendance of students in each lecture. (ii) Increased accuracy in the administration reduces the need for human effort (i.e. the traditional way is the college university used a group of employees to enter the information manually for these systems, which increases the likelihood of errors). (iii) Increase the efficiency of teachers themselves because the lecture time now is set automatically from the moment he/she enters the lecture hall to the time he/she exits from it. (v) This integrated system is considered part of the e-government desired application in Iraq. (vi) Apply the decisions automatically against violator's students, where the name of the offending student (his/her) could pass own university system and thus prevent from entering the lecture for the period of punishment. The system is cheap and effective. Finally, the system is based on its private network consisting of 254 nodes and is secured by the encryption algorithm prepared in advance. [ABSTRACT FROM AUTHOR]