Anopay: Anonymous Payment For Vehicle Parking With Updatable Credential,
2024
Singapore Management University
Anopay: Anonymous Payment For Vehicle Parking With Updatable Credential, Yang Yang, Wenyi Xue, Yonghua Zhan, Minming Huang, Yingjiu Li, Robert H. Deng
Research Collection School Of Computing and Information Systems
Many existing anonymous parking payment schemes lack high efficiency and flexibility. For instance, the calculation and communication costs involved in payment may linearly increase with the payment amount. In this paper, we propose an anonymous payment system (dubbed AnoPay) for vehicle parking, which leverages updatable attribute-based anonymous credentials and efficient zero-knowledge proof (ZKP) to achieve user anonymity and constant overhead for parking fee payment. To further improve the efficiency, we design a secure parking fee aggregation protocol based on linear homomorphic encryption to aggregate parking transactions, where the amount of each parking transaction is hidden and the privacy of the …
Exploring The Integration Of Blockchain In Iot Use Cases: Challenges And Opportunities,
2024
California State University, San Bernardino
Exploring The Integration Of Blockchain In Iot Use Cases: Challenges And Opportunities, Ivannah George
Electronic Theses, Projects, and Dissertations
Blockchain and The Internet of Things (IoT) is a significant paradigm which has gained traction in today’s digital age as two complimentary technologies. The combination of IoT's connectivity with blockchain's security creates new opportunities and solves problems associated with centralized systems. This culminating project aims to delve deeper into the integration of blockchain technology in IoT applications based on select use cases to uncover potential benefits and significant challenges of blockchain integration across different sectors. The research objectives to be addressed are: (RO1) How emerging vulnerabilities manifest in the implementation of blockchain within current IoT ecosystems. (RO2) How current opportunities …
Ensuring The Privacy Compliance Of Voice Personal Assistant Applications,
2024
Clemson University
Ensuring The Privacy Compliance Of Voice Personal Assistant Applications, Song Liao
All Dissertations
Voice Personal Assistants (VPA) such as Amazon Alexa and Google Assistant are quickly and seamlessly integrating into people’s daily lives. Meanwhile, the increased reliance on VPA services raises privacy concerns, such as the leakage of private conversations and sensitive information. Privacy policies play an important role in addressing users’ privacy concerns and developers are required to provide privacy policies to disclose their apps’ data practices. In addition, voice apps targeting users in European countries are required to comply with the GDPR (General Data Protection Regulation). However, little is known about whether these privacy policies are informative and trustworthy on emerging …
Increasing The Robustness Of Machine Learning By Adversarial Attacks,
2024
The University of Texas Rio Grande Valley
Increasing The Robustness Of Machine Learning By Adversarial Attacks, Gourab Mukhopadhyay
Theses and Dissertations
By perturbation or physical attacks any machine can be fooled into predicting something else other than the intended output. There are training data based on which the model is trained to predict unknown things. The objective was to create noises and shades of different levels on the images and do experiments for measuring accuracy and making the model classify the traffic signs. When it comes to adding shades to the pictures, pixels were modified for three different layers of the pictures. The experiment also shows that with the shadows getting deeper, the accuracies drop significantly. Here, some changes in pixels …
Survey Of Space Professionals’ Perception Of Satellite Cybersecurity From 2012 To 2022: Decision-Makers’ Thoughts On Satellite Cybersecurity Evolving,
2024
University of North Dakota
Survey Of Space Professionals’ Perception Of Satellite Cybersecurity From 2012 To 2022: Decision-Makers’ Thoughts On Satellite Cybersecurity Evolving, Rachel C. Jones
Aerospace Sciences Student Publications
Cyberattacks on space assets are often portrayed in vague terms of doubt and mystery. Several claims depict satellites being compromised or attacked, but little corroboration has been published or made publicly available. As the commercial space industry grows, increased concern with space cybersecurity will prompt commercial satellite decision-makers to analyze the often-undefined risk of cyberattacks against satellites. This article identifies and characterizes the nature of cybersecurity risks to space assets and postulates why space professionals might not prioritize cybersecurity. Additional information was captured from a decadal survey of space professionals conducted in 2012 and 2022. The results show a rise …
Collaborative Pathways To Cybersecurity Excellence: Insights From Industry And Academia In The Southeastern Us,
2024
Kennesaw State University
Collaborative Pathways To Cybersecurity Excellence: Insights From Industry And Academia In The Southeastern Us, Humayun Zafar, Carole L. Hollingsworth, Tridib Bandyopadhyay, Adriane B. Randolph
Journal of Cybersecurity Education, Research and Practice
This research article examines conversations happening between cybersecurity academics and industry leaders with a goal to improve the development of cybersecurity professionals. We specifically focus on efforts in the Southeast region of the United States. The discussion features insights from a panel consisting of an academic cybersecurity researcher, a Chief Information Officer (CIO) of a leading technology company with over 1,000 employees, and a CIO of a financial services firm, which employs over 3,000 people. The discussion sheds light on the challenges and opportunities involved in aligning cybersecurity programs with industry requirements. This article explores strategies for academia and businesses …
Using Gamification To Enhance Mastery Of Network Security Concepts,
2024
North Carolina A&T State University
Using Gamification To Enhance Mastery Of Network Security Concepts, Kevin Hilliard, Xiaohong Yuan, Kelvin Bryant, Jinsheng Xu, Jinghua Zhang
Journal of Cybersecurity Education, Research and Practice
Gamification has proven to be effective in engaging and encouraging people to work towards and achieve goals. Many students struggle to focus on schoolwork, due to a lack of interest, lack of understanding, or other factors unique to the student. Applying gamification elements to education can help engage these students in learning their course material and help them excel academically. This study examines the effectiveness of using gamification techniques to enhance the learning experience in college Computer Science courses. A video game application is utilized to review and reinforce cybersecurity concepts that students have already been taught in class. Previous …
Design Of Long-Distance Entanglement Distribution Protocols For Quantum Networks,
2024
Louisiana State University and Agricultural and Mechanical College
Design Of Long-Distance Entanglement Distribution Protocols For Quantum Networks, Stav Haldar
LSU Doctoral Dissertations
Future quantum technologies such as quantum communication, quantum sensing, and distributed quantum computation, will rely on networks of shared entanglement between spatially separated nodes. Distributing entanglement between these nodes, especially over long distances, currently remains a challenge, due to limitations resulting from the fragility of quantum systems, such as photon losses, non-ideal measurements, and quantum memories with short coherence times. In the absence of full-scale fault-tolerant quantum error correction, which can in principle overcome these limitations, we should understand the extent to which we can circumvent these limitations. In this work, we provide improved protocols and policies for entanglement distribution …
Key Cooperative Attribute-Based Encryption,
2024
University of Wollongong
Key Cooperative Attribute-Based Encryption, Luqi Huang, Willy Susilo, Guomin Yang, Fuchun Guo
Research Collection School Of Computing and Information Systems
Attribute-based encryption (ABE) is an important technology in building access control systems with precise control and scalability. In an ABE system, there exists a private key generator (PKG) that issues all private keys. The PKG has a significant drawback referred to as the huge key management burden in large-scale user systems. To overcome this limitation, we propose a more flexible system that offers users the choice to utilize decryption keys either from the PKG or from trusted users to decrypt the ciphertext, reducing the workload of the PKG. Unfortunately, users are restricted to only receiving private keys from the PKG …
Contextualizing Interpersonal Data Sharing In Smart Homes,
2024
Dartmouth College
Contextualizing Interpersonal Data Sharing In Smart Homes, Weijia He, Nathan Reitinger, Atheer Almogbil, Yi-Shyuan Chiang, Timothy J. Pierson, David Kotz
Dartmouth Scholarship
A key feature of smart home devices is monitoring the environment and recording data. These devices provide security via motion-detection video alerts, cost-savings via thermostat usage history, and peace of mind via functions like auto-locking doors or water leak detectors. At the same time, the sharing of this information in interpersonal relationships---though necessary---is currently accomplished on an all-or-nothing basis. This can easily lead to oversharing in a multi-user environment. Although prior work has studied people's perceptions of information sharing with vendors or ISPs, the sharing of household data among users who interact personally is less well understood. Interpersonal situations make …
Esem: To Harden Process Synchronization For Servers,
2024
Singapore Management University
Esem: To Harden Process Synchronization For Servers, Zhanbo Wang, Jiaxin Zhan, Xuhua Ding, Fengwei Zhang, Ning Hu
Research Collection School Of Computing and Information Systems
Process synchronization primitives lubricate server computing involving a group of processes as they ensure those processes to properly coordinate their executions for a common purpose such as provisioning a web service. A malfunctioned synchronization due to attacks causes friction among processes and leads to unexpected, and often hard-to-detect, application transaction errors. Unfortunately, synchronization primitives are not naturally protected by existing hardware-assisted isolation techniques e.g., SGX, because their process-oriented isolation conflicts with the primitive's demand for cross-process operations.This paper introduces the Enclave-Semaphore service (ESem) which shelters application semaphores and their operations against kernel-privileged attacks. ESem encapsulates all semaphores in the platform …
Secure And Flexible Wildcard Queries,
2024
Hefei University of Technology
Secure And Flexible Wildcard Queries, Qing Wang, Donghui Hu, Meng Li, Guomin Yang
Research Collection School Of Computing and Information Systems
Wildcard Keyword Searchable Encryption (WKSE) enables users to search desired encrypted files with wildcard queries. Previous schemes only enabled single-character wildcard queries or restricted multi-character wildcard queries. Even if the two types of queries are supported by several schemes, they are vulnerable to correlation attacks and composition attacks. In this paper, we propose a WKSE scheme Secure Flexible Wildcard Queries (SFWQ) that supports highly flexible wildcard queries and resists correlation and composition attacks. Specifically, we adopt the interval matching method instead of traditional position matching, so that SFWQ supports a variety of queries, including single-character wildcard queries, multi-character wildcard queries, …
Privacy-Preserving Arbitrary Geometric Range Query In Mobile Internet Of Vehicles,
2024
Xidian University
Privacy-Preserving Arbitrary Geometric Range Query In Mobile Internet Of Vehicles, Yinbin Miao, Lin Song, Xinghua Li, Hongwei Li, Kim-Kwang Raymond Choo, Robert H. Deng
Research Collection School Of Computing and Information Systems
The mobile Internet of Vehicles (IoVs) has great potential for intelligent transportation, and creates spatial data query demands to realize the value of data. Outsourcing spatial data to a cloud server eliminates the need for local computation and storage, but it leads to data security and privacy threats caused by untrusted third-parties. Existing privacy-preserving spatial range query solutions based on Homomorphic Encryption (HE) have been developed to increase security. However, in the single server model, the private key is held by the query user, which incurs high computation and communication burdens on query users due to multiple rounds of interactions. …
Verifiable Outsourced Attribute-Based Encryption Scheme For Cloud-Assisted Mobile E-Health System,
2024
Xidian University
Verifiable Outsourced Attribute-Based Encryption Scheme For Cloud-Assisted Mobile E-Health System, Yinbin Miao, Feng Li, Xinghua Li, Jianting Ning, Hongwei Li, Kim-Kwang Raymond Choo, Robert H. Deng
Research Collection School Of Computing and Information Systems
The cloud-assisted mobile electronic health (e-health) system facilitates e-health data sharing between healthcare providers and patients, but also raises the security and privacy concerns of e-health data. Although Ciphertext-Policy Attribute-Based Encryption (CP-ABE) has been a promising technique to achieve fine-grained access control over encrypted e-health data, it still incurs high encryption and decryption burdens on mobile users such as smartphones and sensors. In addition, malicious cloud servers may conduct incorrect operations due to various interest incentives (e.g., leaking sensitive information to illegal users, saving computation and storage costs). To solve the above issues, in this paper we first propose an …
Privacy-Preserved Data Trading Via Verifiable Data Disturbance,
2024
Xidian University
Privacy-Preserved Data Trading Via Verifiable Data Disturbance, Man Zhang, Xinghua Li, Yanbing Ren, Bin Luo, Yinbin Miao, Ximeng Liu, Robert H. Deng
Research Collection School Of Computing and Information Systems
To motivate data owner (DO) to trade data, the existing data trading allows DO to sell the disturbed data to the data consumer (DC), where the disturbance parameter and the data price are negotiated by them, and DO independently adds the disturbance noise to data (usually continuous type) following the negotiation result. However, DOs may violate the negotiated parameter and add more noise to data while obtaining the negotiated price, which damages DC's disturbed data availability. This deficiency is rooted in the absence of supervision and verifiability on DOs’ independent disturbances. Aiming at the above problem, we devise a privacy-preserved …
Double Issuer-Hiding Attribute-Based Credentials From Tag-Based Aggregatable Mercurial Signatures,
2024
Singapore Management University
Double Issuer-Hiding Attribute-Based Credentials From Tag-Based Aggregatable Mercurial Signatures, Rui Shi, Yang Yang, Yingjiu Li, Huamin Feng, Guozhen Shi, Hwee Hwa Pang, Robert H. Deng
Research Collection School Of Computing and Information Systems
Attribute-based anonymous credentials offer users fine-grained access control in a privacy-preserving manner. However, in such schemes obtaining a user's credentials requires knowledge of the issuer's public key, which obviously reveals the issuer's identity that must be hidden from users in certain scenarios. Moreover, verifying a user's credentials also requires the knowledge of issuer's public key, which may infer the user's private information from their choice of issuer. In this article, we introduce the notion of double issuer-hiding attribute-based credentials ( DIHAC ) to tackle these two problems. In our model, a central authority can issue public-key credentials for a group …
Evilscreen Attack: Smart Tv Hijacking Via Multi-Channel Remote Control Mimicry,
2024
Singapore Management University
Evilscreen Attack: Smart Tv Hijacking Via Multi-Channel Remote Control Mimicry, Yiwei Zhang, Siqi Ma, Tiancheng Chen, Juanru Li, Robert H. Deng, Elisa Bertino
Research Collection School Of Computing and Information Systems
Modern smart TVs often communicate with their remote controls (including the smartphone simulated ones) using multiple wireless channels (e.g., Infrared, Bluetooth, and Wi-Fi). However, this multi-channel remote control communication introduces a new attack surface. An inherent security flaw is that remote controls of most smart TVs are designed to work in a benign environment rather than an adversarial one, and thus wireless communications between a smart TV and its remote controls are not strongly protected. Attackers can leverage such a flaw to abuse the remote control communication and compromise smart TV systems. In this paper, we propose EvilScreen, a novel …
Mtdscout : Complementing The Identification Of Insecure Methods In Android Apps Via Source-To-Bytecode Signature Generation And Tree-Based Layered Search,
2024
Singapore Management University
Mtdscout : Complementing The Identification Of Insecure Methods In Android Apps Via Source-To-Bytecode Signature Generation And Tree-Based Layered Search, Zicheng Zhang, Haoyu Ma, Daoyuan Wu, Debin Gao, Xiao Yi, Yufan Chen, Yan Wu, Lingxiao Jiang
Research Collection School Of Computing and Information Systems
Modern Android apps consist of both host app code and third-party libraries. Traditional static analysis tools conduct taint analysis for API misuses on the entire app code, while third-party library (TPL) detection tools focus solely on library code. Both approaches, however, are prone to some inherent false negatives: taint analysis tools may neglect third-party libraries or face timeouts/errors in whole app-based analysis, and TPL detection tools are not designed for pinpointing specific vulnerable methods. These challenges underscore the need for enhanced identification of insecure methods in Android apps, particularly for app markets addressing open-source security incidents. In this paper, we …
Attribute-Based Fine-Grained Access Control Using Verifiable Credentials,
2024
CUNY John Jay College
Attribute-Based Fine-Grained Access Control Using Verifiable Credentials, Srinivasa Dumpa
Student Theses
In the era of digital transformation, ensuring secure and privacy-preserving access control mechanisms is of paramount importance. Traditional identity-based access control systems often fall short in providing granular control and user autonomy over digital identities. This thesis presents a novel approach to access control by leveraging the power of verifiable credentials and attribute-based access control. The proposed system introduces a decentralized and user-centric framework that enables fine-grained access control based on specific attributes encapsulated within verifiable credentials. These tamper-evident digital credentials, stored in a user's digital wallet, contain a rich set of attributes that can be selectively disclosed to grant …
A Privacy-Preserving Federated Learning Framework For Blockchain Networks,
2024
The American University in Cairo
A Privacy-Preserving Federated Learning Framework For Blockchain Networks, Youssif Abuzied, Mohamed Ghanem, Fadi Dawoud, Habiba Gamal, Eslam Soliman, Hossam Sharara, Tamer Elbatt
Faculty Journal Articles
In this paper we introduce a scalable, privacy-preserving, federated learning framework, coined FLoBC, based on the concept of distributed ledgers underlying blockchains. This is motivated by the rapid growth of data worldwide, especially decentralized data which calls for scalable, decenteralized machine learning models which is capable of preserving the privacy of the data of the participating users. Towards this objective, we first motivate and define the problem scope. We then introduce the proposed FLoBC system architecture hinging on a number of key pillars, namely parallelism, decentralization and node update synchronization. In particular, we examine a number of known node update …
