Search

To protect civilian Global Positioning System (GPS) users from spoofing, the Air Force Research Lab has developed the chips-message robust authentication (Chimera) signal enhancement for the GPS L1C signal. With Chimera, standalone receivers that only have access to the GPS signal will be able to authenticate their received measurements once every 3 min, whereas users with access to an out-of-band source will be able to perform authentication once every 1.5 or 6 s. However, moving receivers typically rely on much faster real-time GPS update rates of 1-20 Hz. In this work, we design a spoofing-resilient filter framework that provides continuous and secure state estimation between Chimera authentication times. By leveraging self-contained sensors on-board the vehicle, such as an inertial measurement unit or wheel encoder, as well as the periodic Chimera authentication, our proposed filter determines how much to rely on the received unauthenticated GPS measurements for state estimation. In this respect, our filter relies more extensively on GPS measurements in order to improve real-time navigation performance and reduce localization errors when GPS signals are authentic, while successfully mitigating spoofing-induced errors during an experienced attack. We experimentally validate our proposed spoofing-resilient filter in a simulated test environment for a ground vehicle model with access to the 3-min Chimera channel, under various simulated spoofing attack scenarios. To the best of the authors' knowledge, this is the first adaptive filter proposed for Chimera that continuously leverages real-time GPS measurements in a spoofing-resilient manner. [ABSTRACT FROM AUTHOR]

IoT security represents a highly compelling subject of research at present. The absence of a viable security solution for IoT applications could render them ineffective across various domains such as healthcare, smart homes, inventory management, smart agriculture, and more. Within the IoT architecture, security services like Confidentiality, Integrity, and Authentication play pivotal roles. In our research, we have concentrated on the Authentication service, which is fundamental for distinguishing users and devices unequivocally within a network. Authentication serves as the initial and crucial step in establishing secure communications among diverse IoT devices and users within the network. A compromised Authentication service could open the door for unauthorized users or devices to infiltrate the network, potentially leading to harmful activities like Masquerade attacks, Man-in-the-Middle (MITM) attacks, and Replay attacks. Currently, Authentication stands as a widely adopted and essential method for granting access to devices within IoT networks. Our contribution involves the development of a Multi-factor IoT Authentication Model, leveraging two key parameters: Device Context Information and Dynamic Key-based authentication. Our proposed approach begins by verifying the origin of information. If the origin is deemed valid, our model proceeds to validate the identity of the device. In the event of an intruder attempting to manipulate the device's origin from its predefined context to an alternative location, our system can swiftly detect this deviation, thereby enabling the rejection of communication requests from compromised devices. Following the verification of context information, we initiate mutual authentication between the IoT device and the server, employing the Challenge-response model. As a result of this second step, individual Session keys are generated at both the device and server sides, facilitating secure communication within a specific time window. [ABSTRACT FROM AUTHOR]

Introduction/purpose: The paper explores the implementation of two-factor authentication (2FA) in computer systems, addressing the increasing need for enhanced security. It highlights the vulnerabilities of password-based authentication and emphasizes the advantages of 2FA in mitigating digital threats. The development of the VoiceAuth application, integrating 2FA through a combination of password and voice authentication, serves as a practical illustration. Methods: The research adopts a three-tier architecture for the VoiceAuth application, encompassing a database, server-side REST API, and clientside single-page application. Speaker verification is employed for voice authentication, analyzing elements like pitch, rhythm, and vocal tract shapes.The paper also discusses possibilities for future upgrades, suggesting enhancements such as real-time voice verification and additional 2FA methods. Results: The application's implementation involves a detailed breakdown of the REST API architecture, Single Page Applications (SPAs), and the Speaker Verification service. Conclusion: The research underscores the crucial role of two-factor authentication (2FA) in bolstering the security of computer systems. The VoiceAuth application serves as a practical demonstration, showcasing the successful integration of 2FA through a combination of password and voice authentication. The modular architecture of the application allows for potential upgrades. [ABSTRACT FROM AUTHOR]

In the age of information and technology, web applications have become an important part of daily life. The communication of these web applications, where important personal and corporate information is managed, with the outside world is provided by authentication methods. Today, most applications use the traditional username-password method for authentication. This method, which is vulnerable to brute force attacks, causes serious security vulnerabilities. In this method, since most users use the same login credentials in different applications, an attack can affect many applications. Some applications also prefer to rely on third-party systems such as Google and Facebook for authentication. Due to their nature, these systems have risks such as data security problems and single point failure. For more security in the authentication area, studies have been carried out on the Two-Factor Authentication (2FA) method This method has serious disadvantages such as GSM network problems, SMS cost or centralization. To overcome these problems, blockchain is appropriate solution thanks to its distributed, transparent, secure and immutable structure. In an important and sensitive issue such as identity control, it is thought that it may be risky to present blockchain technology, which is still under development, as the only method. Considering the current situation, in this study, a proposal has been made to offer a secure blockchain-based solution as an alternative to the authentication methods that currently work for web applications. The new technologies and tools used in the proposed solution are explained with visuals. [ABSTRACT FROM AUTHOR]

This paper proposes a blockchain-based identity authentication (BA) scheme for IoT devices to solve the authentication security problem of IoT devices. The BA scheme uses hashing and digital signature algorithms to achieve integrity and nonrepudiation of authentication messages. Blockchain technology is used to achieve decentralised and distributed storage and management of authentication data. Besides, the BA scheme uses the idea of trust domains and trust credentials to establish a master-slave connection between IoT devices. The BA scheme is then compared with the existing four schemes and analysed from six perspectives to show that the BA scheme has better security. Also, the results show that the BA scheme has reasonable computational and storage overhead. Finally, the advantages of the BA scheme over traditional centralised and existing blockchain-based authentication schemes are compared and analysed. The results show that it can perfectly solve the problem of overreliance on trusted third parties in traditional authentication schemes. [ABSTRACT FROM AUTHOR]

The paper addresses issues concerning secure authentication in computer systems. We focus on multi-factor authentication methods using two or more independent mechanisms to identify a user. User-specific behavioral biometrics is widely used to increase login security. The usage of behavioral biometrics can support verification without bothering the user with a requirement of an additional interaction. Our research aimed to check whether using information about how partial passwords are typed is possible to strengthen user authentication security. The partial password is a query of a subset of characters from a full password. The use of partial passwords makes it difficult for attackers who can observe password entry to acquire sensitive information. In this paper, we use a Siamese neural network and n-shot classification using past recent logins to verify user identity based on keystroke dynamics obtained from the static text. The experimental results on real data demonstrate that keystroke dynamics authentication can be successfully used for partial password typing patterns. Our method can support the basic authentication process and increase users' confidence. [ABSTRACT FROM AUTHOR]

Traditional password authentication methods have raised many issues in the past, including insecure practices, so it comes as no surprise that the evolution of authentication should arrive in the form of password-less solutions. This research aims to explore the problems that password authentication and password policies present and aims to deploy Windows Hello for Business (WHFB) on-premises. This includes creating three virtual machines (VMs) and evaluating WHFB as a password-less solution and showing how an attacker with privileged access may retrieve the end user's domain password from the computer's memory using Mimikatz and describing the possible results. The conducted research tests are in the form of two attack methods. This was feasible by the creation of three VMs operating in the following way. The first VM will act as a domain controller (DC) and certificate authority server (CA server). The second VM will act as an Active Directory Federation Service (ADFS). The third VM will act as the end-user device. The test findings research summarized that password-less authentication is far more secure than the traditional authentication method; this is evidenced throughout the author's tests. Within the first test, it was possible to retrieve the password from an enrolled device for WHFB while it was still in the second phase of the deployment. The second test was a brute-force attack on the PIN of WHFB; since WHFB has measures to prevent such attacks, the attack was unsuccessful. However, even though the retrieval of the password was successful, there are several obstacles to achieving this outcome. It was concluded that many organizations still use password authentication as their primary authentication method for accessing devices and applications. Larger organizations such as Microsoft and Google support the adoption of password-less authentication for end-users, and the current usage of password-less authentication shared by both organizations is encouraged. This usually leads organizations to adopt this new solution for their IT infrastructure. This is because it has been used and tested by millions of people and has proven to be safe. This supports the findings of increased usage and the need for password-less authentication by today's users. [ABSTRACT FROM AUTHOR]

A two-party authenticated key exchange (AKE) protocol allows each of the two parties to share a common secret key over insecure channels, even in the presence of active adversaries who can actively control and modify the exchanged messages. To capture the malicious behaviors of the adversaries, there have been many efforts to define security models. Amongst them, the extended Canetti–Krawczyk (eCK) security model is considered one of the strongest security models and has been widely adopted. In this paper, we present a simple construction of a pairing-based eCK -secure AKE protocol in the standard model. Our protocol can be instantiated with a suitable signature scheme (i.e., an existentially unforgeable signature scheme against adaptive chosen message attacks). The underlying assumptions of our construction are the decisional bilinear Diffie–Hellman assumption and the existence of a pseudorandom function. Note that the previous eCK -secure protocol constructions either relied on random oracles for their security or used somewhat strong assumptions, such as the existence of strong-pseudorandom functions, target collision-resistant functions, etc., while our protocol construction uses fewer and more-standard assumptions in the standard model. Furthermore, preserving the same security argument, our protocol can be instantiated with any appropriate signature scheme that comes in the future with better efficiency. [ABSTRACT FROM AUTHOR]

Classical authentication schemes are in treat due to current developments in quantum computing. A new quantum authentication protocol designed based on quantum secure direct communication using single photon is proposed in the paper. It can assist verification of the legitimate user identity without revealing the pre-shared key used in the encryption of secure message through one time pad. In the existing protocol, frequent involvement of Eve during trusted identification obtains important information about the pre-shared key. A random Authentication keys and decoy states were used in checking the presence of Eve by a trusted party in two communication channels. The concept of phase kickback helps in revealing the identification the adversary involvement during authentication key verification by CNOT attack. The security of the proposed protocol analyzed was under impersonates attack, intercept measure-resend attack, and entangle measure attacks. The proposed protocol does not require quantum memory or any other entangles sources; therefore, it is feasible for the implementation of with current technology. [ABSTRACT FROM AUTHOR]

In this paper a new security technique aiming to ensure safe and reliable communications between different nodes on an automotive Controller Area Network (CAN) is presented. The proposed method relies on a robust authentication code using Blake-3 as a hash algorithm within an adapted structure that includes a monitor node. A prototype is implemented and run effectively to perform hardware simulations of real case-based security problems of automotive embedded CAN systems. As a result, data transfer can take place on a newly enhanced CAN bus according to the standard protocol without being intercepted nor tampered with by unauthorized parties thereby highlighting the effectiveness of the proposed technique. [ABSTRACT FROM AUTHOR]

Expediency and suppleness were the main reasons for customers' patronage of m-banking apps. However, data stored or transmitted in these apps are susceptible to different attacks, threats, and risks. Thus, the need for robust safety mechanisms to cope with these security and privacy challenges. The purpose of this research is to examine the different components of m-banking security that merit investigation, and the vulnerability of present authentication methods in order to propose a more robust verification technique. PRISMA preferred items reporting for Systematic Review and Meta-Analyses approach was used in this study. Six databases were utilized; IEEE-Explore, Scopus, EBSCOhost, Taylor & Francis, ScienceDirect, and Web of Science. About 1,149 articles were extracted from these databases out of which 38 articles met the review selection criteria, thus included in the review. Findings of the study highlight the efficacy of PRISMA method with regard to items reporting and identification of research gaps compared to the usual literature review. Also, the results of the study found intrusion via other apps stored on mobile devices, and device lost or theft were the main safety and privacy issues. Furthermore, the study findings discovered that the present authentication schemes used by banks are becoming weak and open to various attacks due to an increase in online fraud. Based on the review findings, an Artificial Intelligence-based user authentication and anomalies detection model was proposed which may provide direction for upcoming studies. Also, banks and other financial institutions can use the review results to improve m-banking security. [ABSTRACT FROM AUTHOR]

Currently, companies handle a lot of sensitive information daily, which may be desired by unscrupulous people in order to obtain their own benefit, harming companies and customers. The paper focuses on the development of a login solution with double authentication, making use of user credentials and reading a QR code, through complementary mobile software installed on a verified device. The work provides the reader with an overview of information security, where the use of encrypted QR codes stands out, which, unlike fingerprint reading or facial detection, is extremely accessible on most mobile devices with cameras. and on different operating systems. You can also highlight the use of REST APIs to communicate the web application with the mobile application. The app proves to be a simple and effective way to improve login security for any business. [ABSTRACT FROM AUTHOR]

The concepts of digitization and automation are becoming increasingly common nowadays. The development of web applications or the migration of different softwares to the web make the appearance of security breaches more and more frequent. This paper aims to provide a solution to secure the authentication process in order to reduce the risks of cyber-attacks. [ABSTRACT FROM AUTHOR]

In this work we explore the use of blockchain with Internet of Things (IoT) devices to provide visitor authentication and access control in a physical environment. We propose the use of a "bracelet" based on a low-cost NodeMCU IoT platform that broadcasts visitor location information and cannot be removed without alerting a management system. We present the design, implementation, and testing of our system. Our results show the feasibility of implementing a physical access control system based on blockchain technology, and performance improvements over a similar system proposed in the literature. [ABSTRACT FROM AUTHOR]

In this work, we elaborate on the concept of process authenticity, which intuitively corresponds to the validity of all process steps and their proper binding. It represents the most exciting forefront of distributed ledger technology research concerning the primary challenge of reliably connecting distributed ledger networks to the physical context it must operate. More in detail, the paper describes a novel methodological approach to ensure the authenticity of business processes through blockchain and several security mechanisms applied to the digital twins of the actual processes. We illustrate difficulties and opportunities deriving from implementing process authenticity in concrete case studies in which we were involved as software designers belonging to three critical application domains: document dematerialization, e-voting, and healthcare. [ABSTRACT FROM AUTHOR]

A cursor control system based on brain-computer interface (BCI) provides efficient computer access. These systems operate without any muscular activity from the user. Conventional BCI-based cursor control systems have several limitations. Therefore, hybrid SSVEP + P300 visual BCI (VBCI)-based cursor control is needed to overcome these limitations. This paper explores the feasibility of using noninvasive hybrid SSVEP + P300 VBCI for cursor control as a universal form of computer access. The proposed cursor control system has a graphical user interface (GUI) design that simultaneously evokes both SSVEP and P300 signals in the human cortex. The performance metrics of the proposed system are compared with conventional SSVEP VBCI and P300 VBCI-based cursor control systems. The proposed hybrid SSVEP + P300 BCI-based cursor control system achieves a maximum accuracy of 97.51% with a 27.15 bit/min information transfer rate (ITR). The results proved that the proposed system performed more efficiently than other systems. The proposed system was tested in a noisy environment and found to be suitable for real-world applications. [ABSTRACT FROM AUTHOR]

When compared to the more traditional methods of authentication, biometric systems offer a much higher level of protection for a wide range of uses (like pin, passwords etc.). Various sectors of modern society can find use for biometric systems. Among these are authentication for computers, attendance tracking for businesses, financial transactions, safeguarding private information, securing access to buildings, and ensuring the safety of travellers at airports. Identifying and verifying individuals via their unique physical and behavioural characteristics is the primary function of the biometric system. Importance of biometric systems in modern society is analysed in this paper. Single-trait biometric user recognition is currently used, but it does not offer sufficient security for critical programmes. Multimodal biometric systems are used to get around these issues. Physical and behavioural characteristics, like fingerprints and DNA, signatures and fingerprints, etc., are all part of a multimodal biometric system's arsenal for authenticating users. In addition to the hard biometric features already mentioned (skin colour, age, height, hair colour, eye colour, gender, etc.), the use of a person's soft biometric traits is becoming increasingly common. While soft biometrics can be used to boost the efficiency of biometric systems that focus on other characteristics, they are not without their own set of drawbacks, such as a lack of permanence and distinctive behaviour. User authentication, security, and performance are all boosted by the work presented in this paper using Machine learning (F-SVM -Fuzzy-Support Vector Machine) model. [ABSTRACT FROM AUTHOR]

In today's world, the use of computer networks is everywhere, and to access the home network we use the Internet. IoT networks are the new range of these networks in which we try to connect different home appliances and try to give commands from a remote place. Access to any device over an insecure network invites various types of attacks. User authentication can be performed using some password or biometric technique. However, when it comes to authenticating a device, it becomes challenging to maintain data security over a secure network such as the Internet. Many encryptions and decryption algorithms assert confidentiality, and hash code or message authentication code MAC is used for authentication. Traditional cryptographic security methods are expensive in terms of computational resources such as memory, processing capacity, and power consumption. They are incompatible with the Internet of Things devices that have limited resources. Although automatic Device-to-Device communication enables new potential applications, the limited resources of the networks' machines and devices impose various constraints. This paper proposes a home device authentication scheme when these are accessed from a remote place. An authentication device is used for the home network and controller device to control home appliances. Our scheme can prevent various attacks such as replay attacks, server spoofing, and man-in-the-middle attack. The proposed scheme maintains the confidentiality and authenticity of the user and devices in the network. At the same time, we check the system in a simulated environment, and the results show that the network's performance does not degrade much in terms of delay, throughput, and energy consumed. [ABSTRACT FROM AUTHOR]

The growing integration of mobile applications for user authentication has revolutionized user interactions with digital platforms, offering novel possibilities in user experience (UX). However, this paradigm shift poses significant security challenges. Leveraging smartphones for authentication purposes provides convenient and swift access to services, streamlining user interactions with various platforms through simple taps. Several institutions adopt static QR Codes generated from primary, unchanging user data (e.g., individual citizen national identification numbers) for physical authentication procedures like access turnstiles. However, relying on static data introduces critical security vulnerabilities as this data is susceptible to compromise. Implementing an One-Time Authentication Code (OTAC) approach appears promising in addressing these issues. Nevertheless, the absence of an integrated solution for developing a physical authentication process using OTAC leads to suboptimal API user experiences (UX APIs) and subsequent security vulnerabilities. In response to this challenge, we introduce Auth4App, a protocol set designed for identification and authentication using mobile applications. Auth4App comprises two core protocols: one dedicated to linking user credentials to mobile devices (i.e., identification), and the other for generating OTAC. We showcase the adaptability and practicality of Auth4App through three distinct case studies: a mobile-only scenario, integration of mobile devices with a turnstile, and integration of Auth4App with FIDO2. To ensure the robustness of the security protocols, Auth4App is evaluated using automated verification tools and argument proofs, solidifying the system's reliability. [ABSTRACT FROM AUTHOR]

In the current age of constrained local storage capacity, ensuring the security and privacy of user data against unauthorized third-party access has grown significantly more vital. Searchable Encryption (SE) has arisen as a promising method for preserving the confidentiality of user data while also enabling efficient search capabilities. Certificateless Searchable Encryption (CLSE) stands out among a range of SE cryptosystems by effectively addressing issues related to certification management and key escrow. Nevertheless, the majority of current CLSE approaches heavily depend on computationally intensive bilinear pairings and do not offer robust support for conjunctive keyword searches in multi-receiver scenarios. To address these limitations, we propose a Pairing-free Dynamic Multi-receiver Certificateless Authenticated Searchable Encryption (PDMCLASE) scheme. PDMCLASE focuses on three essential features: (1) Dynamic multi-receiver functionality, enabling new data receivers to access documents while revoking access for existing receivers; (2) Conjunctive subset keyword search, empowering data receivers to perform efficient conjunctive searches on subsets of keywords; and (3) Data sender authentication, ensuring the authenticity of keyword encryption by the data sender. Furthermore, PDMCLASE attains keyword privacy by leveraging elliptic curve hardness problems within the standard model. Through our performance analysis, we establish that PDMCLASE not only delivers improved functionality but also demonstrates reduced computational overhead when compared to alternative schemes. [ABSTRACT FROM AUTHOR]

Delay tolerant networks supporting heterogeneous communication are a promising network architecture solution that can meet today's communication requirements involving nodes in space, terrestrial and water networks. These networks with dynamic topology and dynamic set of participating nodes make enablement of secure authentication between nodes in this network architecture a critical requirement. In this paper, we propose a novel Quantum-Secure Authentication (QS-Auth) protocol that enables mutual-authentication in Heterogeneous Delay tolerant network environment, while achieving quantum-resistance using the combination of PUF and Post-Quantum signature. The proposed tree-based region structure enables scalability and distributes the responsibility for trust to individual region heads and eliminates high risk root nodes in other tree-based solutions. The proposed scheme can meet the high secure mutual-authentication requirement in critical networks like defence, disaster regions, satellite communications etc. We demonstrate the correctness of our proposed scheme by conducting thorough informal and formal security analysis. The performance analysis is done by the evaluation of efficiency, computation and communication cost. The results of our analysis proves that the proposed protocol meets the security criteria and is well suited for heterogeneous delay tolerant network environments. [ABSTRACT FROM AUTHOR]

The Internet provides us a lot of online services. Under the conventional single-server architectures, remote users must register separately on each visited server to obtain the required services. In contrast, with a multi-server architecture, users can freely access subscribed services from multiple servers by registering at a single registration center (R C). Currently, biometrics are widely applied in user authentication schemes to improve their security. Combining with biometric authentication techniques, we present an anonymous authentication scheme by using Chebyshev chaotic map to achieve authentication of both communicating parties in multi-server scenario. The core point of this new scheme is the use of chaotic mapping to achieve mutual authentication instead of time-consuming authentication methods, thus leading to higher efficiency. Based on the widely used Real-Or-Random(ROR) model and the Proverif tool, we perform a formal security analysis of the proposed scheme. In addition, the comparison of security attributes and performance with other related works indicates that the new scheme can withstand various attacks and better suited to multi-server application scenarios. [ABSTRACT FROM AUTHOR]

The Snowden leaks exposed the truth that skilled attackers can access users' devices and steal their private information. Although public key encryption is widely used and theoretically secure, it has hidden vulnerabilities when implemented in practice. This is especially problematic when employing communication channels among heterogeneous protocols within the Internet of Things (IoT), it becomes apparent that these channels lack adequate protection to address the diverse nature of IoT systems. This work proposes a novel Heterogeneous Online/Offline Signcryption with Cryptographic Reverse Firewalls (HOOS-CRF). The scheme enables a secure communication channel between the sender in an Identity-based cryptosystem (IBC) and the receiver in the Public Key Infrastructure (PKI) cryptosystem with CRF deployed. To reduce computational costs, we split the signcryption algorithm into two stages: online and offline. Most resource-intensive operations are performed during the offline stage, which operates without any knowledge of the message being processed. The HOOS-CRF scheme provides confidentiality, authentication, and defense against insider security attacks. Meanwhile, we prove the security of the HOOS-CRF using the random oracle model and demonstrate its high efficiency and practicality through experiments. Lastly, the scheme's relevance to IoT-driven healthcare applications is demonstrated. [ABSTRACT FROM AUTHOR]

Fingerprints, faces, and also irises are Biometrics, which are extensively utilized in several recognition applications comprising door access control, automatic teller machines, personal authentication for computers, Internet banking, along with border-crossing controls with recent augments in security necessities. The unique patterns of finger veins (FV) are utilized by Finger vein recognition (FVR) for detecting individuals at a high-level accuracy. However, on account of the existence of artifacts, irregular shading, distortions, etc., precise FV detection is a difficult task. A framework for identifying FV is created by the work to offer a precise biometric authorization utilizing Enhanced Sigmoid Reweighted based Convolutional Neural Network (ESRwCNN). The image is initially pre-processed by the framework via executing rotation, cropping, resizing, and normalization for avoiding unwilling distortions. Utilizing Trapezoid Membership Function-Based Contrast Limited Adaptive Histogram Equalization (TMF-CLAHE), the preprocessed image is followed with contrast enhancement (CE) that intensifies the image by evading irregular shading and vein posture deformation along with upgrades the accuracy rate. After that, utilizing the Local 12 direction texture pattern (L12DTP) and Canny Edge method, knowledgeable textural and edge features (EF) are extracted. For attaining the most informative features, an Adaptive Weight Mutated Whale Optimization Algorithm (AWM-WOA) technique is formed by the work that enhances the model's accuracy and decreases the computational complexity (CC). Finally, for identifying the authorized person, the chosen features are presented to ESRwCNN. The work attains a low information loss by achieving a 0.971 correlation betwixt the pre-processed image and the original image (OI), as shown by the experimental analysis. Classification accuracy (CA) of 97.05% is attained by the framework. It avoids misclassification by acquiring a 3.53% False Positive Rate (FPR) and 2.35% False Rejection Rate (FRR). It continues to be comparatively efficient analogized to the existing methods. [ABSTRACT FROM AUTHOR]

Authentication is one of the foremost pillars in the Internet of Things (IoT) security that authenticates the identity of a device or a person with the help of a unique identification number. If authentication is compromised then an intruder can gain access and launch a variety of attacks on the network. The world of IoT devices is benefiting us in many ways, but the vulnerability of becoming a victim of cybercrime is also increasing at a rapid pace. This research paper proposes an authentication‐based solution for designing a secure communication network to ensure safe access to data and stop attackers from any unauthorized access to various IoT applications using cryptography and cloud computing. The proposed work is then compared with other popular cryptosystems such as Secure Internet of Things (SIT), Data Encryption Standard (DES) and Blowfish. LEOBAT is simulated using MATLAB and proves to be a fast and efficient authentication technique. [ABSTRACT FROM AUTHOR]

In the traditional biometric identity authentication system, for the protection of important targets, the single user identity authentication scheme has the problem of excessive user authority. In order to solve such problems, this paper used the BGN semi-homomorphic encryption algorithm and Shamir secret sharing to design a threshold identity authentication scheme based on biometrics. This scheme mainly used the BGN homomorphic encryption algorithm on the bilinear pair for data protection, and used a third-party authentication center for secret division. The server authenticated the user's identity in the ciphertext state to achieve threshold identity authentication. Through the performance analysis of the scheme, the safety and efficiency of the scheme are verified. [ABSTRACT FROM AUTHOR]

The Internet of Things (IoT) is promising to transform a wide range of fields. However, the open nature of IoT makes it exposed to cybersecurity threats, among which identity spoofing is a typical example. Physical layer authentication, which identifies IoT devices based on the physical layer characteristics of signals, serves as an effective way to counteract identity spoofing. In this paper, we propose a deep learning-based framework for the open-set authentication of IoT devices. Specifically, additive angular margin softmax (AAMSoftmax) was utilized to enhance the discriminability of learned features and a modified OpenMAX classifier was employed to adaptively identify authorized devices and distinguish unauthorized ones. The experimental results for both simulated data and real ADS–B (Automatic Dependent Surveillance–Broadcast) data indicate that our framework achieved superior performance compared to current approaches, especially when the number of devices used for training is limited. [ABSTRACT FROM AUTHOR]

A vital axiom of Reformed theology is that God is who God claims to be, and that he acts to "self‐authenticate" his identity to humans through the internal witness of the Holy Spirit. But how ought theologians to represent and make sense of the multiform nature of divine self‐authentication (DSA)? And can their models account for the various kinds of evidence God utilizes in acts of DSA, or explain why doubt and deception about divine identity persists despite it? Operating at the intersection of theology and computer science, this study examines how modern authentication technologies can deepen theological reflection upon the nature, evidence, and efficacy of DSA. It proposes that computer authentication "trust systems": (1) offer a valuable schematic for representing the variegated structural patterns inherent in DSA; (2) shed critical light on the forms and functions of evidence used in DSA; and (3) provide strategies and practical measures for offsetting the continuing risk of deception about human and divine identity. [ABSTRACT FROM AUTHOR]

In order to sabotage our country's currency, criminals have introduced counterfeit notes that look like the real thing into the financial market. In the wake of the country's demonetization, a lot of fake currency is circulating. In general, it is difficult for a human being to distinguish a forged note from a genuine one, as many features of a forged note are similar to those of the original one. It's difficult to tell the difference between a real bank note and a fake one. Because of this, there must be an automated system that can be found in banks or ATMs. It is necessary to design an efficient algorithm that can predict whether a banknote is genuine or forged in order to create such an automated system, as counterfeit banknotes are extremely precise. Bank currency authentication can be detected using six supervised machine learning algorithms that were tested on a dataset from the UCI machine learning repository. On the basis of various quantitative analysis parameters such as Precision and Accuracy as well as MCC and F1-Score, we have applied Support Vector Machine (SVM), Random Forest (Random Forest), Logistic Regression (Logistic Regression), Naive Bayes, Decision Tree (K-Nearest Neighbor), and K-Nearest Neighbor (KNN). [ABSTRACT FROM AUTHOR]

Security is always a major concern when people put their money or assets online. Since a network is an open road for data, unwanted users always try to make illegal use of these networks. Many important measures like authentication, authorization and use of firewalls were used in early stages to prevent such illegal access into systems. This work is aimed to study the various techniques and algorithms of an IDS and pick out some good techniques by doing a comparative study and then try to improve and overcome the design parameters of these techniques such that the overall design and functionality of an IDS is enhanced. In our proposed empirical/theoretical model the dataset which was reduced to a set of most prominent features based on experiment on three parameters. Intrusions are defined as activities or events that violate the confidentiality, integrity and availability of a computing system. Advancements in the field of artificial intelligence has given a different face to IDSs. In our model we have used three base classifiers. Our descriptive and comparative study helped us to short list the three algorithms. We have also taken a technique from the theory of induction through decision trees which is considered to be an ensemble in itself. Hence the overall accuracy of random trees is already better. This has helped to improve the overall accuracy of the proposed system. The final proposed model turned out to be more accurate and the time taken was also reduced by a large extent. [ABSTRACT FROM AUTHOR]

A secured protocol is defined for permanent authentication through continuous user verification. The protocol determines respective timeouts based on the quality, frequency and type of biometric data transparently acquired from the user. But the existing system does not own an identity of the user interacted with the system. The main mechanism of proposed framework includes object tracking for user interrupted motions, and colour profile variation, edge detection based variation and the usage of immediate motions. For the initialization of colour based tracking, extend a Bitmap Algorithm for robotically initializing contours at the first frame. For user interaction-based contour evolution, the anonymous shape in sequence and the local basis information are joined to compare the colour, for the handling of unexpected motions; pixel block is accepted to capture the global activity which is functional to the outline in the current frame to make an initial contour in the next frame. [ABSTRACT FROM AUTHOR]

As the Information communication technology advances, it has become crucial to ensure the originality of digital content. This paper focuses on using recursive equation approach of steganography to ensure authenticity of digital content. This is achieved by embedding hash value of the digital data in the same digital file. In this paper, we have taken 24 bit BMP files to implement the concept. We have used recursive equation of any order as key to find pixel location in the BMP file to embed the 128 bit MD5 value of the BMP file before its transmission. At the receiving end the MD5 is extracted from the zero bytes of BMP file and the original bits in extra bytes are restored before computing the MD5 value of the received and restored BMP. The two MD5 values are compared. Equality of the value authenticates the originality of BMP file. [ABSTRACT FROM AUTHOR]

Nowadays, digital images have a greatly widespread and profound influence on human life, and its security protection problem is increasingly prominent. Image encryption is one of the most effective solutions for image protection but may result in secret concentration or single point of failure. Secret image sharing (SIS) with loss tolerance provides a feasible method to protect secret images in a distributed way. However, existing SIS schemes are most utilized in natural images, and the application of SIS to encrypted images which are widely used in practical scenarios is rarely discussed. Thus, this paper proposes a novel concept of SIS in the encrypted domain (SIS-ED) for the first time on the basis of synthesizing the merits of SIS and image encryption. SIS-ED integrating the encryption and SIS means applying general or user-defined encryption algorithms to encrypt the secret image in the plaintext domain, and in the encrypted domain using appropriate SIS schemes on the encrypted image to share secrets. SIS-ED can prevent secret images from being reconstructed illegally and enhance security against malicious attacks such as differential attacks, which can be widely applied in practical scenarios with high-security requirements such as authentication, blockchain, and cloud systems. In addition, we present a concrete SIS-ED scheme to instantiate the SIS-ED model. The proposed SIS-ED scheme with high security can realize lossless recovery without pixel expansion, and reduced-size shares. Theoretical analysis, experiments, and comparisons are conducted to show the effectiveness and advantages of SIS-ED. • Popularizing secret image sharing to the encrypted domain. • First propose a formal definition, as well as evaluation metrics of secret image sharing in the encrypted domain. • Instantiate secret image sharing in the encrypted domain with high security to promote wide application. [ABSTRACT FROM AUTHOR]