Earticle

최근 클라우드 서비스 이용이 확대됨에 따라 기업 및 기관들은 단일 클라우드 환경을 넘어 다중 클라우드 서비스 제공 업체를 동시에 활용하는 멀티 클라우드(Multi-Cloud) 환경을 도입하고 있다. 멀티 클라우드 환경은 성능 최적화, 비용 절감, 장 애 대응 등의 이점을 제공하지만, 클라우드 간 데이터 전송 과정에서 보안 위협이 증가하는 문제가 발생한다. 특히, 클라우드 간 데이터 무결성 보장, 기밀성 유지, 인증 및 접근 제어와 같은 보안 요구사항을 충족하지 못할 경우, 중요한 정보의 유출 및 위·변 조 위험이 커질 수 있다. 주요 보안 위협 사항에서는 잘못된 구성 및 설정 오류, 자격증명 관리 미흡, 보안 가시성 부족 등이 있으 며, 2023년 클라우드 서비스 제공업체의 설정 오류로 인해 데이터 노출이 발생했다. 본 논문에서는 멀티 클라우드 환경에서 안 전한 메시지 전송을 보장하기 위한 보안 프로토콜을 설계하고, 이를 통해 기존 보안 프로토콜의 보안 취약점을 해결하는 방안을 제시한다. 제안하는 보안 프로토콜은 강력한 암호화 기법, 클라우드 간 상호 인증 메커니즘, 안전한 키 관리 및 전송 기술을 포함 하여, 데이터 전송 과정에서의 보안성을 향상시키는 데 중점을 둔다. 그리고 멀티클라우드 환경에서 안전한 통신을 수행하기 위 해서 사용자 등록 및 인증, 데이터 접근내역 공유 등을 통해 보안성을 강화하였다. 본 논문에서는 제안된 프로토콜의 성능을 분 석하고, 기존 프로토콜과의 비교를 통해 보안성과 효율성을 평가하였다. 실험 및 분석 결과, 제안된 보안 프로토콜은 데이터 기 밀성 및 무결성을 효과적으로 보장하면서도, 기존 방식 대비 성능 오버헤드를 최소화하면서도 효과적인 보안을 제공한다는 점을 확인하였다. 본 논문는 멀티 클라우드 환경에서의 안전한 데이터 전송을 위한 실질적인 해결책을 제시하며, 향후 멀티 클라우드 보안 기술 발전에 기여할 것으로 기대된다.

With the increasing adoption of cloud services, enterprises and institutions are shifting beyond single-cloud environments to multi-cloud architectures, leveraging multiple cloud service providers simultaneously. While multi-cloud environments offer advantages such as performance optimization, cost reduction, and fault tolerance, they also introduce security risks during inter-cloud data transmission. Specifically, failure to ensure data integrity, confidentiality, authentication, and access control between cloud platforms can lead to critical information leakage, tampering, and security vulnerabilities. Major security threats include misconfigurations, improper credential management, and lack of security visibility. Notably, in 2023, a data exposure incident occurred due to a misconfiguration in a cloud service provider's settings. This paper proposes a secure messaging protocol for ensuring safe data transmission in multi-cloud environments, addressing existing security weaknesses. The proposed protocol enhances security by integrating strong encryption techniques, inter-cloud mutual authentication mechanisms, and secure key management and transmission techniques. Additionally, it reinforces security by incorporating user registration, authentication, and access history sharing for secure communication in multi-cloud environments. The paper evaluates the performance of the proposed protocol and compares it with existing security protocols in terms of security and efficiency. Experimental results demonstrate that the proposed security protocol effectively ensures data confidentiality and integrity while minimizing performance overhead compared to conventional methods. This research provides a practical solution for secure data transmission in multi-cloud environments and is expected to contribute to the advancement of multi-cloud security technologies in the future.

본 연구는 안드로이드 환경에서 널리 사용되는 두 개의 보안 메신저인 Signal과 Telegram에 대한 디지털 포렌식 분석을 진행하였다. 현재 모바일 메신저가 일상생활의 중요한 역할을 하는 만큼, 이들 앱 내부의 데이터 관리와 보안성은 매우 중요 한 이슈가 됐다. Signal과 Telegram은 그중에서도 사용자들 사이에서 높은 신뢰성을 받고 있는 보안 메신저로, 암호화 기술을 바탕으로 사용자들의 개인 정보를 안전하게 보호한다. 하지만 이러한 암호화된 데이터를 어떻게 분석할 수 있을지에 대해서는 아직까지 많은 연구가 필요하다. 본 연구에서는 이러한 문제점을 해결하기 위해 Signal과 Telegram의 메시지 암호화와 안드 로이드 디바이스 내 데이터베이스 구조 및 암호화 방식에 대하여 깊이 있는 분석을 진행하였다. Signal의 경우, 복잡한 알고리 즘으로 인해 외부에서 접근하기 어려운 암호화된 메시지를 성공적으로 복호화 하여 내용을 확인할 수 있었다. 또한 두 메신저 앱의 데이터베이스 구조를 세밀하게 분석하여 해당 정보를 수시로 활용할 수 있는 폴더 구조 및 파일 형태로 정리하는 작업 도 진행했다. 이렇게 분석한 정보를 바탕으로 보다 발전된 기술과 방법론을 적용함으로써, 앞으로 더욱 정확하고 세밀한 디지 털 포렌식 분석이 가능할 것으로 기대된다. 이 연구가 Signal과 Telegram 같은 보안 메신저에 대한 이해를 높이는 데 도움을 주며, 이로 인해 개인 정보 보호와 범죄 예방 등 여러 측면에서의 활용 가능성이 열릴 것으로 예상된다.

This study conducted a digital forensic analysis of Signal and Telegram, two secure messengers widely used in the An droid environment. As mobile messengers currently play an important role in daily life, data management and security wit hin these apps have become very important issues. Signal and Telegram, among others, are secure messengers that are hi ghly reliable among users, and they safely protect users' personal information based on encryption technology. However, much research is still needed on how to analyze these encrypted data. In order to solve these problems, in this study, an in-depth analysis was conducted on the message encryption of Signal and Telegram and the database structure and encry ption method in Android devices. In the case of Signal, we were able to successfully decrypt encrypted messages that are difficult to access from the outside due to complex algorithms and confirm the contents. In addition, the database structure of the two messenger apps was analyzed in detail and the information was organized into a folder structure and file forma t that could be used at any time. It is expected that more accurate and detailed digital forensic analysis will be possible in the future by applying more advanced technology and methodology based on the analyzed information. It is expected that this research will help increase understanding of secure messengers such as Signal and Telegram, which will open up pos sibilities for use in various aspects such as personal information protection and crime prevention.

DES는 64비트 단위로 나뉘어 진 각각의 블록이 한번의 암호화 알고리즘을 거쳐 암호화 된다. 대칭알고리즘으로서 똑같은 키와 알고리즘이 암호화와 복호화에 쓰인다. 복호화 할 때 키를 반대로 적용하는 등의 약간의 차이는 있다. 키 길이는 64비트로 표현되는데 이 중에서 실제로는 56비트만이 키로서 사용되고 나머지 8비트는 패리티 체크 비트로 사용된다. 암호화는 64비트 블록과 56비트 키를 바탕으로 만든 16개의 보조키가 총 16번의 혼돈과 확산을 거쳐 완료된다. DES 알고리즘을 선택한 이유는 암호 강도에 대한 의문이 제기되고 있기는 하지만 상업적으로 가장 널리 보급되어 이용되고 있다. 또한 기본 알고리즘을 DES 로 채택한 현장에서 앞으로도 상당한 기간 동안 이용이 계속될 것으로 예상되는 DES 알고리즘을 효과적으로 활용하는 방안이 현장에서 참고되기를 기대한다.

DES is a 64-bit binary, and each block is divided into units of time are encrypted through an encryption algorith m. The same key as the symmetric algorithm for encryption and decryption algorithms are used. Conversely, when decryption keys, and some differences may apply. The key length of 64 bits are represented by two ten thousand an d two 56-bit is actually being used as the key remaining 8 bits are used as parity check bits. The 64-bit block and 56-bit encryption key that is based on a total of 16 times 16 modifier and spread through the chaos is completed. D ES algorithm was chosen on the strength of the password is questionable because the most widely available comme rcially, but has been used. In addition to the basic DES algorithm adopted in the future in the field by a considerabl e period are expected to continue to take advantage of the DES algorithm effectively measures are expected to be in the field note

빠르게 진화하는 정보 통신 기술로 인해서 새로 생성되는 데이터는 급속히 증가하고 있다. 센서, 스마트 폰, 소셜 네트워킹 사이트, 논리적 데이터 및 이니셔티브의 데이터가 이 엄청난 정보 폭발을 발생시키고 있다. Hadoop은 방대한 양의 데이터를 처리하는 데 사용되는 프레임워크이며 기업에서 중요한 정보를 저장하고 관리하 는데 많이 사용되고 있다. 또한, Hadoop은 분산형 파일 시스템으로 기능 및 보안 업데이트가 계속 진행되고 있다. 그러나 Hadoop은 민감한 데이터의 보안에 취약하다. 본 연구에서는 클라우드 시스템에 대한 보안 문제를 조사하 였다. 특히, 현재 클라우드 환경에서 사용할 수 있는 암호화 알고리즘을 조사하고 데이터 암호화 실험을 수행하였 다. 실험에서는 Salsa20, 3-DES, AES, MARS, Blowfish 등 총 6가지 알고리즘을 비교 하였고 논문에서 제안하 는 Salsa20을 사용하는 것이 최고 22%의 성능 향상이 있는 것을 확인하였다.

Data is rising tremendously in the rapidly evolving world of information and communications technology. Data from sensors, smartphones, social networking sites, logical data, and initiatives are fueling this enormous information explosion. Hadoop is a framework used to process vast amounts of data and is widely used by companies to store and manage important information. Additionally, Hadoop is a distributed file system, and feature and security updates are continuously being made. In this paper, encryption algorithms currently available in the cloud environment were investigated and data encryption experiments were conducted. In the experiment, a total of six algorithms, including Salsa20, 3-DES, AES, MARS, and Blowfish, were compared, and it was confirmed that using Salsa20 proposed in the paper improved performance by up to 22%.

현대 사회에서 배터리는 전기자동차, 공유형 모빌리티, 모바일 기기 및 다양한 IoT 기기에 필수적인 요소로 자리 잡고 있다. 이러한 배터리의 성능, 안정성 및 수명 정보를 기록하고 관리하는 배터리 이력 시스템은 중요한 역할을 한다. 하지만 이러한 배터리 정보는 민감한 데이터로, 무단 접근이나 변조로부터 보호할 필요성이 있다. 따라서 데이터 전송 시 안전한 암호화 기술을 선택하는 것이 필수적이다. 본 논문에서는 배터리 이력 시스템에 서의 데이터 교환 시 AES, RSA, Salsa20, ChaCha20 블록 암호의 적합성을 비교하고, 각 기술의 성능과 보안성 을 분석한다.

In modern society, batteries are becoming an essential element in electric vehicles, shared mobility, mobile devices, and various IoT devices. Battery history systems that record and manage information on the performance, stability, and lifesp an of these batteries play an important role. However, such battery information is sensitive data and needs to be protecte d from unauthorized access or tampering. Therefore, it is essential to select a secure encryption technology when transmi tting data. In this paper, we compare the suitability of the AES, RSA, Salsa20, and ChaCha20 block ciphers when exchan ging data in the battery history system and analyze the performance and security of each technology.

미래 전장환경은 주로 네트워크 중심전의 이론을 기반으로 표현되고 있다. 미래의 전쟁에서는 적군보다 먼저 적을 인식하고, 빠르게 의사결정을 하여 정확하게 타격을 하는 것을 목표로 하고 있다. 이를 위해 C4ISR+PGM의 통합체계를 구축 중이다. 이러한 통합체계에서는 정보의 보안측면을 더욱 강화해야 한다. 특히, 보안성의 강화는 효율성의 저하로 이어진다. 때문에 보안성과 효율성이 고려되어야 한다. 이에 본 연구에서는 미래 전장환경에서의 정보공유 중에 데이터 를 안전하게 관리할 수 있는 준동형 암호 시스템을 제안한다. 제안기법은 암호문 상태에서 산술연산이 가능한 준동형 암호를 사용한다. 암호문 상태에서 원하는 정보로 수정하여 정보를 전달하므로, 정보전달하는 중에 유출되더라도 공격 자는 제대로 된 정보를 확인 할 수 없다.

Be expressed in network-centric warfare, mainly battlefield environment of the future. The purpose of the system for the war of the future, is to recognize the enemy before the enemy, and rapid decision-making, to hit accurately. For this reason , it is during the construction of the integrated system of C4ISR+PGM. In such an integrated system , it is necessary to further enhance the security aspects of the information. In particular, strengthening of security leads to a decrease of efficiency. Therefore, security and efficiency should be considered together. In this study, we provide a homomorphic encryption system that can be safely managed information environment on the battlefield of the future. The proposed method uses encryption technology of homomorphic that can be the arithmetic operations on encrypted state. It has changed from the state of the encryption. Therefore, the attacker can not know a decent information.

기업체에서는 정보를 암호화 후 저장하는 것을 법적으로 의무화하고 있다. 하지만, 실제로 정보를 암호화하여 저장 하면 검색 또는 수정 시 서버에서 사전에 반드시 복호화 과정을 수행해야만 한다. 그러므로 처리지연 시간이 발생하고, 효율성이 떨어진다. 이러한 작업은 서버에 부담을 주게 되므로 서버를 관리하는 업체나 관리자는 정보를 암호화하여 저 장하지 않는다. 본 논문에서는 네트워크 환경에서 정보의 수집과 빠른 의사결정을 복호화 과정 없이 암호문을 수정할 수 있는 준동형 연산을 이용하여 안전성이 보장되고 빠른 처리가 가능한 효과적인 보안 데이터 관리 시스템을 설계하 고 구현한다. 구현된 시스템은 보안성의 보장을 위해 기존의 암호화 알고리즘을 사용할 수 있다. 검색 시에는 키워드 검색 방식을 사용한다. 추가로 트랩도어를 사용함으로써 키워드가 노출되지 않고 검색 시마다 변경되어 키워드에 대한 정보가 노출되지 않는다.

General companies consider saving the information after enciphering as law. However, if the actual information is saved as enciphered, the decoding process must be conducted when the information is searched or edited in the ser ver. Therefore, process delay time occurs and is less efficient. This kind of work gives burden to the server, so the companies or managers handling the server do not save the information after enciphering. In this paper, the Networ k constructs and realizes an efficient security data management system that ensures safety and haste in operating u sing the homomorphic encryption technology, which collects information and decides quickly, and enables editing the encryption without a decoding process. To ensure the security of the embodied system, the existing encryption algo rithm can be used. Search method to use the keyword search. Additionally, by using a trapdoor, the keyword is not expose and it is changed whenever it is searched, and the formation of the keyword does not get exposed.

최근에는 전자제품 및 웨어러블 기기를 포함한 IoT 제품들이 증가 추세에 있다. 하지만, IoT 기기가 증가할수록 보안 문제가 대두되면서 유선 및 무선 보안에 대한 관심이 증가하고 있다. 현재 많이 사용하고 있는 알 고리즘으로는 AES가 있으며, 임베디드 기반에서도 사용이 가능한 경량의 암복호화 알고리즘 들이 있다. 본 논문 은 임베디드 경량 블록 암호 알고리즘인의 응용에 관심이 있으며, 평문 데이터 대신에 실시간으로 측정한 심박 데 이터에 경량의 암복호화 알고리즘을 적용하는 실험을 수행하였다. 데이터를 분석한 결과, 본 데이터와 복호화 데 이터가 100% 일치하였다. LEA 알고리즘의 경우에 1개의 심박 데이터에 대한 샘플링 갯수는 초당 100개임을 확 인하였다. 향후, 샘플링 레이트를 높일 수 있도록 고성능의 임베디드 기기에서 실험을 수행할 예정이다.

In recent years, the number of IoT products, including electronics and wearable devices, has been on the rise. However, with the increase in IoT devices comes security concerns, which has led to an increased focus on wired and wireless security. Currently, AES is a popular algorithm, and there are lightweight encryption algorithms that can be used on an embedded basis. This paper is interested in the application of embedded lightweight block cipher algorithms, and experiments were conducted to apply lightweight decryption algorithms to real-time measured heart rate data instead of plain text data. After analyzing the data, we found that the original data and the decrypted data matched 100%. For the LEA algorithm, we found that the number of samples for one heart rate data is 100 per second. In the future, we will conduct experiments on high-performance embedded devices to increase the sampling rate.

Cloud computing is one of the fastest growing internet based technology that facilitates users to utilize services by making use of large poll of resources without installation of any software. Adoption of this technology is increasing rapidly because of many advantages including reduction of cost and IT load. Despite the popularity of cloud computing, it faces many difficulties such as security that is one of the major inhibitors in the growth of cloud computing. Data confidentiality is at the top of the list of security concern for this technology. Many methods have been introduced to overcome this issue; encryption is one of them and widely used method to ensure the data confidentiality in cloud environment. In this study, an attempt is made to review the encryption techniques used for the data confidentiality. The results of review are classified on the basis of type of approach and the type of validation used to validate the approach.

In this study, we have discussed and illustrated the security issues of WiMAX technology including vulnerabilities, threats and some security solution. Both physical layer and data link layer have been considered. Jamming is a major threat in physical layer, and in data link layer we study an authentication problem and see the problem of some unencrypted messages leading to lack of confidentiality. Some of these vulnerabilities have been solved in the recent amendment of 802.16 and some still remain. Moreover WiMax is a new technology yet.

In this paper, we will merge between the usages of DNA sequences and Residue number system in encryption systems. The message which is coded will be secretly impeded inside the DNA sequence. This merge will be leaded to perform multilayer encryption with different keys - that can be used as a hash function - versatile alternatively to increase the security and more flexibility, with less complexity. As the security is one of the most important issues in communication systems, the evolvement of cryptography and cryptographic analysis are considered as the fields of ongoing research. This field is becoming very promising. Thus, a straight forward algorithm that achieves efficiency as multi-layer encryption techniques are implemented.

With the development of cloud computing, the interest on spatial database outsourcing has been sharply increasing. Therefore, researches on data encryption methods for protecting location data privacy in outsourced databases have been actively performed. However, the existing data encryption schemes do not consider data distribution when generating data clusters and they use a tree-based index for processing k-nearest neighbor queries. As a result, the performance of query processing algorithm can fluctuate depending on the tree depth. To solve these problems, we propose a density-aware data encryption scheme and a query processing algorithm for database outsourcing. Our density-aware data encryption scheme uses a grid index to generate clusters and transforms the original data information into a bitmap. To provide efficient query processing, we use an algebraic coding based hash index to reduce the data retrieval time. Finally, in performance analysis, we show that the proposed scheme provides better query processing performance and guarantees the privacy of users, compared with the existing schemes.

A day-to-day use of cryptography in our life is increasing tremendously; this is because of necessity of our multimedia documents to be protected from unauthorized person. As the days are passing the old algorithms are not remained so strong as cryptanalyst are familiar with them. Today the computers are faster and in feature its speed will increase more and more. Brute force attacks are made to break the encryption and they are growing so faster. These attacks are the main drawbacks of older algorithm. But with feature this algorithms will be replaced by new techniques that will provide better protection. In this paper we are going to proposed new encryption technique which is more faster, better immune to attacks, more complex, easy to encrypt and many more advanced security feature included. This Document displays the comparison between PSR algorithm and RSA Algorithm which are used in the encryption of plaintext into cipher text that are generally used in cryptography.

A genetic algorithm (GA) is a search algorithm for solving optimization problems due to it is robustness; it offers benefits over optimization techniques in searching n-dimensional surface. In today's information age, information transfer has increased exponentially. Hence, security, confidentiality and authentication have become important factors in multimedia communications. Encryption is an effective technique that is preserving the confidentiality of data in Internet applications. Cryptanalysis is a technique of encoding and decoding ciphertext in such way it cannot be interpreted by anyone expects sender and receiver. In this paper, GA with an improved crossover operator was used for the cryptanalysis of Simplified data encryption standard problem (S-DES). Results have shown that GA performance is better than brute force search technique in breaking S-DES key.

Cloud computing has emerged as a powerful and viable architecture to meet large-scale and complex computational needs of the organizations. It extends the IT capability by providing on-demand access to computer resources for dedicated use. Data security and privacy are the major concerns over the cloud from user perspective. Consequently, the organizations which deal with cloud computing should amicably address the key data security risks. In this paper, a generic scheme of user authentication and data confidentiality has been introduced. We introduce a tool that encrypts/decrypts the user data at application layer using public key infrastructure. The information security experts of both the sides i.e. cloud users and service providers must comprehend and address the risk and security issues in detail before actually benefiting high-end computing power offered by the cloud computing paradigm.

In this paper, it is proposed to implement the image compression, encryption and ECG data compression using by binary description of Discrete Cosine Transform (DCT), Binary Haar Transform and Discrete Hartley Transform (DHT). In this Binary Discrete Cosine Transform (Binary DCT), Binary Haar Transform and Binary Discrete Hartley Transforms (Binary DHT) are developed using the Walsh Hadamard transform (WHT). The resulting transform nearly exact the underlying transform very well, while maintaining all the advantages and properties of WHT. The Binary DCT is a well known sequency ordered Walsh Hadamard Transform (WHT), where as the Binary DHT can be considered as a new Hartley ordered WHT. Specifically, the properties of the proposed Hartley ordering are discussed and a shift copy scheme is proposed for a simple and direct generation of the Hartley ordering functions.

This paper proposes a new Text Encryption (N-TEA) Algorithm that compresses and encrypts input text before transmitting it to the receiver. The N-TEA algorithm uses a predefined static dictionary providing codewords of only 12 bits as maximum length, and occupying less than 16 Kbytes. The predefined dictionary stores characters, symbols, and few frequently used words. The dictionary is hashed, generating encrypted dictionary of large number of possibilities that is almost impossible to be discovered or broken without knowing the right hashing function. Several hashing functions could be applied for exchanging text data between parties. Although dictionary based text coding is not new, the proposed work is novel, very simple, and generic, having three main advantages over those in the literature. First, the used dictionary is for characters and symbols, instead of the complete dictionary of words and encryption is for the dictionary itself, instead of the original text. Second, no private/public keys are transmitted through communication channels, providing secured data exchange. Third, transmitted data is reduced by at least 25% of its original size at the same time the text is encrypted, transmitting compressed and encrypted data. Thus, the proposed N-TEA algorithm is adequate for real-time applications, resisting many kinds of attacks such as the Brute Force, Meet-in-the-Middle, and Birthday attacks.

In recent years, outsourcing large amount of data in cloud and how to manage the data raises many challenges with respect to privacy. The concerns of privacy can be addressed if cloud users encrypt the data deployed in the cloud. Among the various cryptographic encryption schemes, homomorphic scheme allow to perform meaningful computations on encrypted data. In this context, the research deals with homomorphic encryption scheme for maintaining privacy and security in cloud by detecting the error incurred while transferring data using RSA cryptosystem. Three types omomorphic error detection schemes proved that preserving privacy seems to be efficient using Map-Reduce Model.

Data encryption is a vital application to ensure security in open networks like internet. Image is widely used for various purposes and one of the most popular formats of data on the web. Different image encryption algorithms are proposed so far to generate encrypted image so that it is so difficult make prediction of pixels value by attackers. This paper proposes a new framework for image encryption, a layer based method combining some most efficient image encryption algorithms. It is tried to take all encryption concerns into consider, achieve highest possible level of security while cost is already acceptable. The proposed method provides different security level to blocks of varied significance in image to consume less computational resources. Various analysis and experiments such as histogram, correlation coefficient, entropy, and computational time revealed that significant promotion in security has been achieved without compromising on the computational time.