Earticle

This paper examines security vulnerabilities in current authentication methods for remote patient monitoring in Wireless Medical Sensor Networks (WMSNs), including offline password guessing and man-in-the-middle attacks. We propose a novel three-factor authentication protocol using fuzzy extractors and lightweight cryptography. Formal analysis via the Real-or-Random (ROR) model and Tamarin Prover confirms its robustness, perfect forward/backward secrecy, mutual authentication, anonymity, and untraceability. Performance comparisons demonstrate reduced overhead and enhanced security, offering a promising framework for IoMT development.

본 논문에서는 종래의 보안관리 시스템과 송수신 모듈의 단점을 개선하기 위해 유무선 복합기능의 송수신 모듈과 이를 사용한 신뢰성 높은 실시간 보안시스템을 제안한다. 제안하는 복합 송수신모듈은 RF 제어 회로와 무선 송수신 회로로 구성된다. RF제어회로는 저전력 협대역 RF 송수신 시스템으로서 마이크로프로세서의 레지스터에 저장되어 있는 특정 주파수 대역을 불러올 수 있고, 임의로 값을 쓰거나 읽어 들여 임의 주파수의 송신출력을 사용자가 제어할 수 있도록 설계한다. RF 송신 모듈의 동작을 위한 구동 알고리듬을 제시하고 설계한 복합 송수신 모듈과 동작 알고리듬을 시작품으로 구현하여 실험을 통해 유효성을 확인한다.

In this paper, a design of transceiver module for real-time wire and wireless robust integrated security system to solve the problem of conventional security system and its transceiver module is proposed. The presented robust integrated security system is designed with RF control unit and wireless transceiver module. A RF controller in transceiver module works as a low-power RF transceiver system. It is designed to use specific bandwidth stored in registers and manipulate RF power of transceiver by accessing the random values of registers. Operation algorithm for RF transceiver module is also presented. The designed transceiver module and the operation algorithm are implemented and verified by experiments.

Encrypt message with strongly secure key which is known only by sending and recipient end is a significant aspect to acquire robust security in sensor network. The secure exchange of key between sender and receiver is too much difficult task in resource constraint sensor network. To achieve secure key agreement is challenging task for sensor network environment. The key management helps to maintain confidentiality of secret information from unauthorized users. It can also check the integrity of the exchanged message to verify the authenticity. This paper discusses various constraints available in sensor network, vulnerability through the existence of various security attacks at each layer for the communication and lastly the security requirement using the key management. Here we present the public key management using Elliptic Curve Cryptography to ensure robust security in sensor network environment.

Artificial intelligence (AI) systems are increasingly becoming integral components of several industries. However, they are vulnerable to adversarial attacks. Through adversarial attacks, the behavior of AI models can be manipulated leading to severe consequences that require effective approaches. In this paper we explore how the guidelines outlined in International Organization for Standardization and the International Electrotechnical Commission (ISO/IEC) can be applied to enhance the security and resilience of AI systems against adversarial attacks. We propose a novel framework that can effectively detect and mitigate such attacks thus ensuring robust AI system deployment. Our proposed framework consists of three major sections of Risk Management, System Architecture and Design as well as Continuous Monitoring and Improvement thus aligning with ISO/IEC standards. Furthermore, our research addresses the gap between theoretical understanding and practical implementations, provides detailed strategies and real-world case studies making it a robust framework for mitigating adversarial threats and enhancing AI security.

Pervasive computing is the emerging field that needs ultra lightweight secure designs. In this paper, we have proposed a robust hybrid structure by fusion of RECTANGLE, LED and SPECK. With the help of a hybrid design, we have improved the key scheduling aspect of LED and related key attacks which were neglected in the LED cipher. In this paper, we also aimed at providing robust architecture by reducing footprint area to as less as possible. By using the S-box of RECTANGLE and the bit slicing technique, clustering of linear and differential trails are avoided which also strengthens the cipher. S-box of RECTANGLE is perfectly interfaced with LED design as their combination results in a differential path probability which is has an upper bound of 2-50 in its first round. The use of Bit slicing technique in this hybrid design results in good differential and linear properties, which provide resistance to cache and timing attacks. LED cipher which uses S-box of PRESENT results in clustering of linear and differential trails as S-box of PRESENT is specifically designed for compact hardware implementation. Column wise substitution and robust S-box design of RECTANGLE will make LED design robust and secure and enables it to provide resistance against any type of attack. SPECK which is designed by NSA has compact key scheduling and is best suited for our hybrid design, which helps in improving key scheduling of LED. In this paper, we have introduced a novel approach for robust design by amalgam of S-box of RECTANGLE & LED structure, and key scheduling by SPECK. This hybrid cipher design is secure against linear and differential cryptanalysis.

Nowadays security matter is a great challenge in web-based systems and we are using various types of HIP to defend malwares in web. But today’s conventional HIP models are able to defend bots but make a user ireful. This paper will focus on a new and simple model of CAPTCHA to defend bot-attack. This model makes a user easily to pass and also amuse them with its simplicity. Considering computational complexity, we are using a thin algorithm with some other technical tricks to make it both robust & simple.

IEEE 802.11b의 사용자 인증 취약성을 보완한 프레임워크인 IEEE 802.1x는 EAP를 통해 다양한 사용자 인증 메커니즘을 지원한다. 그러나 IEEE 802.1x 역시 인증 프로토콜의 구조적 원인에 의한 서비스 거부 공격과 AP에 대한 인증 및 암호 메커니즘의 부재로 세션 하이재킹 및 중간자 공격 등에 취약하다. 본 논문에서는 IEEE 802.1x 프레임워크의 서비스 거부, 세션 하이재킹 및 중간자 공격에 대한 취약성을 보완하여 강화된 사용자 인증 및 안전한 암호통신 서비스를 제공할 수 있는 무선랜 보안시스템을 제안한다.

IEEE 802.11e 과 IEEE 802.11n에서 data의 높은 전송률을 구현하기 위해 Block Ack와 frame agegation 과 같은 새로운 mechanism이 논의 되고 있다. 이러한 mechanism은 각각의 MPDU processing 마다 짧은 응답시간을 요구한다. 본 논문에서는 위의 새로운 MAC을 지원하는 IEEE 802.11i를 위한 효율적인 CCMP 설계를 제안한다. 제안된 설계에서는 한 AES-CCM core에서 MIC calculation 과 정보 암호화가 128bit씩 순차적으로 수행되어지는 mode toggling 접근을 채택했다. 본 설계에서는 응답시간이 44 clock cycle의 짧은 짧은 시간으로 줄었다. 또한 하나의 AES-CCM core를 사용하고 낮은 주파수에서 수용할만한 data throughput과 응답시간을 얻었기 때문에 하드웨어적인 복잡성과 전력 소모를 줄일수 있었다.

인터넷에 의한 정보의 공유 및 각종 서비스의의 제공이 점차 중가함에 따라 해킹으로 인한 피해 또한 증가하는 추세이다. 최근 많은 사람들이 운영체제로 막강한 기능을 제공하는 리눅스를 서버로 구축함에 따라 리눅스가 네트워크환경에 가장 이상적인 운영체제로 자리잡아 가고 있는 시점에서 리눅스 서버의 운영상의 보안문제가 심각하게 대두되고 있다. 그래서 본 논문에서는 최근 대표적인 해킹기법과 그에 대응하는 보안기법들을 분석해서 보다 안전한 리눅스 서버를 구축하고 운영할 수 있는 방법들을 제시하였다.

String matching is one of the key algorithms in network security and many areas could be benefit from a faster string matching algorithm. Based on the most efficient string matching algorithm in sual applications, the Boyer-Moore (BM) algorithm, a novel algorithm called RQS is proposed. RQS utilizes an improved bad character heuristic to achieve bigger shift value area and an enhanced good suffix heuristic to dramatically improve the worst case performance. The two heuristics combined with a novel determinant condition to switch between them enable RQS achieve a higher performance than BM both under normal and worst case situation. The experimental results reveal that RQS appears efficient than BM many times in worst case, and the longer the pattern, the bigger the performance improvement. The performance of RQS is 7.57~36.34% higher than BM in English text searching, 16.26~26.18% higher than BM in uniformly random text searching, and 9.77% higher than BM in the real world Snort pattern set searching.