检索结果-内蒙古大学图书馆

HARPOCRATES: An Approach Towards Efficient Encryption of data-at-rest

IEEE TRANSACTIONS ON EMERGING TOPICS IN COMPUTING 2025年第1期13卷 173-184页

作者： Ali, Md Rasid Pal, Debranjan Das, Abhijit Chowdhury, Dipanwita Roy Indian Inst Technol Kharagpur Dept Comp Sci Engn Kharagpur 721302 West Bengal India

This paper proposes a new block cipher called HARPOCRATES, which is different from traditional SPN, Feistel, or ARX designs. The new design structure that we use is called the substitution convolution network. The novelty of the approach lies in that the substitution function does not use fixed S-boxes. Instead, it uses a key-driven lookup table storing a permutation of all 8-bit values. If the lookup table is sufficiently randomly shuffled, the round sub-operations achieve good confusion and diffusion to the cipher. While designing the cipher, the security, cost, and performances are balanced, keeping the requirements of encryption of data-at-rest in mind. The round sub-operations are massively parallelizable and designed such that a single active bit may make the entire state (an $8 \times 16$8x16 binary matrix) active in one round. We analyze the security of the cipher against linear, differential, and impossible differential cryptanalysis. The cipher's resistance against many other attacks like algebraic attacks, structural attacks, and weak keys are also shown. We implemented the cipher in software and hardware;found that the software implementation of the cipher results in better throughput than many well-known ciphers. Although HARPOCRATES is appropriate for the encryption of data-at-rest, it is also well-suited in data-in-transit environments.

关键词： Ciphers Table lookup Encryption Matrices Hardware Convolution Software algorithms Block cipher cryptanalysis data-at-rest diffusion substitution convolution network lookup table

来源：评论

学校读者我要写书评

暂无评论

data-at-rest Security for Spark 4

Data-at-Rest Security for Spark

引用

4th IEEE International Conference on Big data (Big data)

作者： Shah, Syed Yousaf Paulovicks, Brent Zerfos, Petros IBM Thomas J Watson Res Ctr Yorktown Hts NY 10598 USA

ISBN: (纸本)9781467390057

Apache Spark enables fast computations and greatly accelerates analytics applications by efficiently utilizing the main memory and caching data for later use. At its core Apache Spark uses data structures called RDDs (Resilient Distributed datasets) to give a unified view to the distributed data. However, the data represented in the RDDs remain unencrypted which can result in leakage of confidential data produced or processed by applications. Apache Spark persists (unencrypted) RDDs to the disk storage under various circumstances including but not limited to caching, RDD checkpointing and data spill during the data shuffling operations, etc. This lack of security makes Apache Spark unsuitable for processing of sensitive information that should be secured at all times. Moreover, RDDs stored in the main memory are prone to main-memory attacks such as RAM-scrapping. In this paper, we propose and develop solutions to fill-up such security lapses in the current Apache Spark framework. We present three different approaches to incorporate security in the Apache Spark framework. These approaches are designed to limit the exposure of unencrypted data during data processing, caching and data spill to disk. We use combination of cryptographic splitting and encryption to secure data stored and spilled by Apache Spark, both to the disk as well as to the main memory. Our approaches provide strong security by incorporating combination of Information Dispersal Algorithm (IDA) and Shamir's Perfect Secret Sharing (PSS). Extensive experimentation show that with appropriately chosen parameters our security approaches provide high security at a performance penalty between 10%-25%.

关键词： Big data Security Cloud Computing data-at-rest Encryption Cryptography Computer security

来源：评论

学校读者我要写书评

暂无评论

Qcrypt: Leveraging Post-Quantum Cryptography for Enhanced Security of data at rest 15

Qcrypt: Leveraging Post-Quantum Cryptography for Enhanced Se...

引用

15th International Conference on Computing Communication and Networking Technologies, ICCCNT 2024

作者： Anand, Abhilash Hassabnis, Amey Military College of Telecommunication Engineering Faculty of Communication Engineering Madhya Pradesh Indore India

ISBN: (纸本)9798350370249

The cryptographic landscape is undergoing a significant transformation with the integration of Post-Quantum Cryptography (PQC) algorithms. In today's interconnected world, securing data at rest using quantum-resistant algorithms that employ highly random keys is crucial. It is also imperative to securely manage these keys throughout their lifecycle using a robust Key Management System (KMS). This study identifies the threats to current cryptographic infrastructure, explores potential solutions, and introduces an innovative approach to developing a practical encryption tool with an integrated KMS. This tool is designed to protect data using existing PQC algorithms, facilitate the transition from classical cryptographic algorithms to PQC, and be easily upgradable to incorporate any future NIST-approved algorithms. The tool was evaluated for time taken and data flow within the network on various file types and sizes. © 2024 IEEE.

关键词： AES-256 data-at-rest Grover's algorithm Key Management System PQC QRNG Quantum safe TLS

来源：评论

学校读者我要写书评

暂无评论

Digital data provenance for the power grid based on a Keyless Infrastructure Security Solution

Digital data provenance for the power grid based on a Keyles...

引用

Resilience Week (RWS)

作者： Sebastian-Cardenas, D. Gourisetti, S. Mylrea, M. Moralez, A. Day, G. Tatireddy, V Allwardt, C. Singh, R. Bishop, R. Kaur, K. Plummer, J. Raymond, G. Johnson, B. Chawla, A. Pacific Northwest Natl Lab Richland WA 99352 USA Natl Resilience Inc San Diego CA USA Apple Inc Cupertino CA 95014 USA Guardtime Tallinn Estonia VAAS Capital LLC Irvine CA USA Bittrex Seattle WA USA Code X St Petersburg FL USA Sunspec Alliance San Jose CA USA

ISBN: (纸本)9781665429054

In this work a data provenance system for grid-oriented applications is presented. The proposed Keyless Infrastructure Security Solution (KISS) provides mechanisms to store and maintain digital data fingerprints that can later be used to validate and assert data provenance using a time-based, hash tree mechanism. The developed solution has been designed to satisfy the stringent requirements of the modern power grid including execution time and storage necessities. Its applicability has been tested using a lab-scale, proof-of-concept deployment that secures an energy management system against the attack sequence observed on the 2016 Ukrainian power grid cyberattack. The results demonstrate a strong potential for enabling data provenance in a wide array of applications, including speed-sensitive applications such as those found in control room environments.

关键词： Keyless security data provenance ICS DLT blockchain cybersecurity historians data-at-rest data-in-transit

来源：评论

学校读者我要写书评

暂无评论

data Integrity Protection through Security Monitoring for Just-in-Time News Feeds 4

Data Integrity Protection through Security Monitoring for Ju...

引用

4th IEEE International Conference on Cloud Networking (CloudNet)

作者： Althobaiti, Abdulrahman Calyam, Prasad Akella, Ravi Vallabhaneni, Prabhu Univ Missouri Columbia MO 65211 USA

ISBN: (纸本)9781467395014

There has recently been a major shift in news related media consumption trends and readers are increasingly relying on just-in-time news feeds versus the traditional newspaper print medium. Cloud-networked infrastructures are being setup by the media companies to aggregate news feeds from affiliates, and to meet the elastic demands of Internet-scale users accessing news feeds. However, cyber attacks could compromise these just-in-time news feed services and hackers could particularly launch data integrity as well as denial-of-service attacks that: (a) tarnish the reputation of media companies and (b) impact the service availability for users. In this paper, we describe data integrity and availability checking techniques to protect just-in-time news feed services against cyber attacks in use cases such as: (a) "data-in-Motion" - when obtaining just-in-time news feeds (e. g., RSS feeds) from affiliates and (b) "data-at-rest" - when compiled news feeds reside within cloud-networked infrastructure for real-time premium subscriber access. Using concepts of distributed trust and anomaly detection and a realistic testbed environment in the DeterLab infrastructure, we show the impact of the different cyber attacks and propose solutions to defend against them.

关键词： cloud computing data integrity data protection electronic publishing trusted computing DeterLab infrastructure Internet-scale users RSS feeds anomaly detection cloud-networked infrastructures compiled news feeds cyber attacks data integrity protection data-at-rest data-in-motion denial-of-service attacks distributed trust elastic demands just-in-time news feed service protection news feed aggregation real-time premium subscriber access security monitoring service availability checking techniques Cloud computing Companies Feeds Media Monitoring Servers Uniform resource locators data Quality safety monitoring Cloud Computing Fodder FEEDS RSS feeds Uniform Resource Locator news anomaly detection Electronic Publishing computer information security data Security Companies Information warfare Servers

来源：评论

学校读者我要写书评

暂无评论

An Overview on data Security in Cloud Computing

An Overview on Data Security in Cloud Computing

引用

Conference on Computational Methods in Systems and Software (CoMeSySo)

作者： Kacha, Lynda Zitouni, Abdelhafid Abdelhamid Mehri Constantine 2 Univ Lire Labs Ali Mendjli 25000 Constantine Algeria

ISBN: (纸本)9783319676180

Cloud Computing refers to the use of computer resources as a service on-demand via internet. It is mainly based on data and applications outsourcing, traditionally stored on users' computers, to remote servers (datacenters) owned, administered and managed by third parts. This paper is an overview of data security issues in the cloud computing. Its objective is to highlight the principal issues related to data security that raised by cloud environment. To do this, these issues was classified into three categories: 1-data security issues raised by single cloud characteristics compared to traditional infrastructure, 2-data security issues raised by data life cycle in cloud computing (stored, used and transferred data), 3-data security issues associated to data security attributes (confidentiality, integrity and availability). For each category, the common solutions used to secure data in the cloud were emphasized.

关键词： Cloud Computing Security and privacy data-at-rest data-in-transit data-in-use

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：