Search

This document is a summary of a special issue of the journal Sensors, titled "Emerging AI+X-Based Sensor and Networking Technologies including Selected Papers from ICGHIT 2022–2023." The special issue features selected papers from the 10th and 11th International Conferences on Green and Human Information Technology (ICGHITs), which were held in Korea and Thailand. The conferences focused on the theme of "Emerging Artificial Intelligent (AI)+X technology" and "Hyper Automation + Human AI" respectively. The selected papers cover various topics such as network security, routing protocols, signal detection, and clustering mechanisms, all incorporating AI-based methods. The issue also includes papers on topics like secure authentication, distance estimation in RFID systems, energy optimization in smart homes, blockchain technology, and radar signal detection. The authors emphasize the importance of both technology and humanity in advancing green and information technologies. [Extracted from the article]

This document is a summary of a journal article titled "Featured Papers on Network Security and Privacy." The article discusses the importance of security-by-design in networks and the need for security to be considered throughout the entire lifecycle of a network. It distinguishes between security and privacy in networks and highlights the Zero Trust approach as a means of increasing network privacy protection. The article also provides an overview of several published articles on network security and privacy, including topics such as cryptographic methods, artificial intelligence (AI) techniques, homoglyph replacement detection, privacy preservation in blockchain technology, trust models, and click fraud detection. The authors emphasize the role of AI and machine learning (ML) in improving network security and protecting network assets. They also discuss the challenges of protecting end devices and propose ML/AI algorithms for mitigating availability threats. Overall, the article highlights the importance of incorporating security and privacy measures in network design and the potential of ML/AI in enhancing network security. [Extracted from the article]

The Internet of Things (IoT), projected to exceed 30 billion active device connections globally by 2025, presents an expansive attack surface. The frequent collection and dissemination of confidential data on these devices exposes them to significant security risks, including user information theft and denial-of-service attacks. This paper introduces a smart, network-based Intrusion Detection System (IDS) designed to protect IoT networks from distributed denial-of-service attacks. Our methodology involves generating synthetic images from flow-level traffic data of the Bot-IoT and the LATAM-DDoS-IoT datasets and conducting experiments within both supervised and self-supervised learning paradigms. Self-supervised learning is identified in the state of the art as a promising solution to replace the need for massive amounts of manually labeled data, as well as providing robust generalization. Our results showcase that self-supervised learning surpassed supervised learning in terms of classification performance for certain tests. Specifically, it exceeded the F1 score of supervised learning for attack detection by 4.83% and by 14.61% in accuracy for the multiclass task of protocol classification. Drawing from extensive ablation studies presented in our research, we recommend an optimal training framework for upcoming contrastive learning experiments that emphasize visual representations in the cybersecurity realm. This training approach has enabled us to highlight the broader applicability of self-supervised learning, which, in some instances, outperformed supervised learning transferability by over 5% in precision and nearly 1% in F1 score. [ABSTRACT FROM AUTHOR]

Recently, there has been a lot of success in using the deterministic approach to provide approximate characterization of Gaussian network capacity. In this paper, we take a deterministic view and revisit the problem of wiretap channel with side information. A precise characterization of the secrecy capacity is obtained for a linear deterministic model, which naturally suggests a coding scheme which we show to achieve the secrecy capacity of the degraded Gaussian model (dubbed as “secret writing on dirty paper”) to within half a bit. [ABSTRACT FROM PUBLISHER]

This article discusses the importance of information, network, and communication security in today's high-tech society. It highlights the increasing reliance on computer communication networks and the potential risks associated with insecure networks. The article also provides a summary of three papers accepted in a special issue on "Information, Network, and Communications Security." These papers focus on topics such as blockchain, Internet of Things (IoT), and wireless communication networks. Overall, the article emphasizes the importance of reliable security strategies in reducing economic losses and enhancing social stability and national defense security. [Extracted from the article]

This paper focuses on a very pertinent issue in the field of cybersecurity, particularly concerning the increased use of public Wi-Fi and the proliferation of IoT devices. The scenario, where an attacker captures user details through a malicious access point set up through a NodeMCU, is a practical illustration of a Man-in-the-Middle (MitM) attack. These attacks are especially concerning in the context of smart homes and smart cities, where security breaches can lead to severe privacy invasions and disruptions of essential services. The NodeMCU, being a low-cost, open-source IoT platform, is accessible for creating such malicious access points. It can be programmed to mimic legitimate Wi-Fi hotspots to intercept the data of unsuspecting users. This type of attack can enable unauthorized access to sensitive information such as login credentials, personal data, and even control over connected IoT devices. This approach is user-friendly and can significantly reduce the risk of users unknowingly connecting to malicious websites. The contribution of this paper includes a demonstration and analysis of a common network and IoT attack and a novel method for detecting fraudulent URLs, particularly those used in phishing attacks. By addressing these aspects, the paper makes a significant contribution to the field of cybersecurity and helps foster a more secure and resilient network and IoT ecosystem. [ABSTRACT FROM AUTHOR]

The rise of the Internet of Things (IoT) has led to an increased risk of cyber attacks on IoT devices, including botnet attacks. Botnets are networks of compromised devices that can be controlled remotely by cybercriminals to carry out malicious activities, such as distributed denial of service (DDoS) attacks. The Mirai botnet is one of the most notorious botnets that have caused significant damage to IoT devices worldwide. To protect IoT devices from such attacks, intrusion detection systems (IDSs) are used to detect and mitigate attacks. However, the effectiveness of IDSs against botnet attacks is still a subject of debate, as botnets are becoming more sophisticated and difficult to detect. To address this issue, this research paper aims to analyse and compare the effectiveness of three widely used IDSs, namely Snort, Zeek, and Suricata, against the Mirai botnet. The study involves simulating Mirai botnet attacks in a controlled environment and evaluating the performance of each IDS in terms of detection and mitigation capabilities. The findings of this research can help organisations to select and implement effective IDSs to mitigate the impact of botnet attacks on IoT devices. By understanding the strengths and weaknesses of different IDSs, organisations can improve the security of their IoT devices and reduce the risk of cyber attacks. Overall, this research paper contributes to the existing literature on IDSs and their effectiveness against botnet attacks, highlighting the importance of selecting and implementing effective IDSs to protect IoT devices from cyber threats. [ABSTRACT FROM AUTHOR]

The intersection of Cybersecurity and AI has garnered increasing attention in recent years due to the growing importance of securing digital assets in an interconnected world. This bibliometric analysis aims to provide valuable insights into the research trends and developments within this interdisciplinary domain. Using data extracted from the Scopus database, a total of 501 papers were selected and analyzed to uncover key patterns and themes. The methodology involved conducting a comprehensive literature search using specific keywords related to Cybersecurity and AI applications. The initial search yielded 736 papers, which were subsequently filtered to include research articles, conference papers, editorial papers, and review papers, resulting in the final dataset of 501 papers. The analysis of publication trends revealed a remarkable surge in research output since 2015, indicating the escalating interest in this field. Collaboration patterns among researchers and institutions were analyzed through co-authorship networks, highlighting a well-connected research community that fosters knowledge exchange. Keyword analysis exposed common areas of application, such as network security, deep learning, and the Internet of Things, underscoring the importance of AI technologies in enhancing Cybersecurity measures. Furthermore, examination of the most cited documents showcased influential contributions that have shaped the trajectory of Cybersecurity and AI research. The study emphasizes the significance of Cybersecurity and AI applications research, considering the ever-increasing reliance on technology in various aspects of modern life. By integrating AI technologies, Cybersecurity measures can be fortified with automated threat detection, adaptive defense mechanisms, and proactive risk mitigation, thereby bolstering overall cybersecurity resilience. The findings of this bibliometric analysis have several implications for researchers and policymakers. Researchers can leverage the identified trends and gaps to explore new research directions and potential collaborations. Policymakers can utilize these insights to make informed decisions regarding resource allocation for research initiatives aimed at addressing emerging Cybersecurity challenges. This bibliometric analysis provides a comprehensive overview of the evolving landscape of Cybersecurity and AI applications research. It underscores the growing importance of this interdisciplinary field and its potential to reshape the future of cybersecurity. As technology continues to advance, the integration of AI in Cybersecurity will play a pivotal role in safeguarding digital assets and ensuring the secure functioning of critical systems in an increasingly interconnected world. [ABSTRACT FROM AUTHOR]

With the development of 5G, the number of IoT (Internet of Things) devices connected to the Internet will grow explosively. However, due to the vulnerability of the devices, attackers can launch attacks on the vulnerable IoT devices, causing great impact on the security of the network environment. Fine-grained identification of IoT devices can help network administrators set up appropriate security policies based on the functionality and heterogeneity of the devices, while enabling timely updates and upgrades for devices with security vulnerabilities or the isolation of these dangerous devices. However, most of the existing IoT device identification methods rely on a priori knowledge or expert experience in selecting features, which cannot weigh the identification performance and labor cost. In this paper, we design a fine-grained identification method for IoT devices based on causal inference, which automatically extracts key features in the protocol fields of device communication from the perspective of causality and then classifies key features using a Stacking integrated learning method to achieve high-precision and fine-grained device identification. Through experimental verification, the proposed method achieves 96.3% and 97.7% device model identification accuracy under HTTP/TCP and SSH/TCP protocol clusters. [ABSTRACT FROM AUTHOR]

With the development of science and technology and the popularization of e-commerce, the application of wireless network technology in the business field has gradually become a hot spot of academic research, which also brings us new topics and challenges. The secure payment system based on the improved TOTP algorithm proposed in this paper involves the WAP wireless secure payment theory and the application of mobile e-commerce. This paper first studies the WAP wireless network theory of mobile payment system, and proposes the WAP algorithm flow based on identity encryption. Then, the secure wireless execution environment of the WAP encryption payment algorithm is analyzed in depth. This paper discusses the security requirements of the WAP wireless network payment system. Based on the identity encryption algorithm, several practical algorithms are proposed, and a wireless network mobile payment model combining NTRU and ECC is constructed to improve the WAP algorithm. This paper proposes a WAP wireless network security payment system based on the improved TOTP algorithm, constructs its overall structure, and designs a core algorithm with strong adaptability, including the improved TOTP algorithm and risk assessment algorithm. Finally, the performance of the WAP e-commerce secure payment system is tested and analyzed. The research found that when the 256-bit key was used to encrypt the login information, the number of tests was 23,588, the number of concurrent threads was 200, the number of requests per second was 518, the average response time was 0.219 s, the average traffic was 500 KB/s, and the error rate was 2%. It can be seen from the data that the WAP wireless secure payment system operates normally with low network delay and can respond to operation requests quickly under the condition of concurrent access by multiple users, with strong overall pressure resistance. The work of this paper has a good reference value for the construction of the WAP wireless network payment system and the design and application of mobile e-commerce, which is conducive to further research. [ABSTRACT FROM AUTHOR]

Software-Defined Networking (SDN) has three key features: separation of control and forwarding, centralized control, and network programmability. While improving network management flexibility, SDN has many security issues. This paper systemizes the security threats of SDN using spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege (STRIDE) model to understand the current security status of SDN. First, we introduce the network architecture and data flow of SDN. Second, we analyze security threats of the six types given in the STRIDE model, aiming to reveal the vulnerability mechanisms and assess the attack surface. Then, we briefly describe the corresponding defense technologies. Finally, we summarize the work of this paper and discuss the trends of SDN security research. [ABSTRACT FROM AUTHOR]

Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources. User's data is stored in large database. The stored data can be accessed and modified by the clients over the Internet. The data is monitored by the Third Party Auditor (TPA) on behalf of the client. Therefore, integrity is lacked by the data stored on the servers. The data integrity is ensured by the cloud services that provide trust to the privacy of users. Aiming at the urgent problem of network data security in cloud computing operations, this paper proposed a security situation assessment system to grasp the security situation in real time. A set of cloud computing network data storage security is proposed. Through this model, the extraction of network data storage security situation elements, the design of network data storage security situation assessment scheme and the calculation method of network data storage security situation value are completed. The experimental results show the error of the predicted value obtained by the network data storage security situation assessment system. The effectiveness of the system model and the superiority of the improved algorithm is verified by the experimental results. This paper uses the cloud model to predict the cloud computing network security situation. On the other hand, the security situation value obtained by the situation assessment process can be used directly without training the original situation value. Performance improvement by the proposed technique over existing technique is seen and it is observe that the proposed technique is 23% and 34% better than the existing techniques. [ABSTRACT FROM AUTHOR]

Identifying owners of devices on the Internet can enable numerous network security applications. For example, accurate Owner Name Entity Recognition (ONER) of websites is critical to find influenced owners in light of new security threats. In this situation, as a specific task of Multimodal Named Entity Recognition (MNER), ONER is essential and helpful for network security. Currently, most existing MNER models only use texts and images, so they cannot effectively utilize the multimodal data of devices to achieve ONER accurately. Also, most of the existing MNER models separately use information in each modality and between modalities. Thus, the fusion is inconsistent, so the effect is not satisfied. Therefore, the paper proposes HDGT: A heterogeneous and Dynamic Graph Transformer, to improve the performance of ONER. The core components in HDGT to realize MNER are a dynamic graph and two-stream mechanism, which could learn the relationship between different modalities during training and the graph's structure well. The paper manually labels a multimodal dataset containing texts, images, and domains to prove the performance of HDGT. Also, the paper conducts experiments on existing and public MNER datasets. The results show that HDGT achieves 84.88% F1 scores on the recognition of owner entities, 75.21% F1 on Twitter2015, and 87.03% F1 on Twitter2017, which outperforms other existing MNER models. [ABSTRACT FROM AUTHOR]

Social robot accounts controlled by artificial intelligence or humans are active in social networks, bringing negative impacts to network security and social life. Existing social robot detection methods based on graph neural networks suffer from the problem of many social network nodes and complex relationships, which makes it difficult to accurately describe the difference between the topological relations of nodes, resulting in low detection accuracy of social robots. This paper proposes a social robot detection method with the use of an improved neural network. First, social relationship subgraphs are constructed by leveraging the user's social network to disentangle intricate social relationships effectively. Then, a linear modulated graph attention residual network model is devised to extract the node and network topology features of the social relation subgraph, thereby generating comprehensive social relation subgraph features, and the feature-wise linear modulation module of the model can better learn the differences between the nodes. Next, user text content and behavioral gene sequences are extracted to construct social behavioral features combined with the social relationship subgraph features. Finally, social robots can bemore accurately identified by combining user behavioral and relationship features. By carrying out experimental studies based on the publicly available datasets TwiBot-20 and Cresci-15, the suggested method's detection accuracies can achieve 86.73% and 97.86%, respectively. Compared with the existing mainstream approaches, the accuracy of the proposed method is 2.2% and 1.35% higher on the two datasets. The results show that the method proposed in this paper can effectively detect social robots and maintain a healthy ecological environment of social networks. [ABSTRACT FROM AUTHOR]

The integration of the Internet and communication technologies has improved our lives in numerous ways. To date, the Internet of Things has evolved the healthcare industry from healthcare 1.0 to 4.0 which is known as the MIoT. In Healthcare 4.0, data is shared among multiple stakeholders through the use of cloud computing, fog computing, and telehealth. MIoT devices and technology's interconnected, heterogeneous nature raises new concerns about access to confidential patient data, which is often done without patients' or medical staff's knowledge. This is because security and privacy concerns for MIoT devices and technology are frequently ignored or undermined by relevant stakeholders. Medical IoT security and privacy are becoming increasingly important as a result of the increasing number of security breaches targeting the MIoT in healthcare. To impartially reveal the research scenario of Security of MIoT biblioshiny and VOS viewer software are used to conduct a quantitative assessment of research papers belonging to this field for the period 2012-2021 in the Web of Science (WoS) and Scopus databases. From the results, it is seen that for the past 10 years, the sum of articles on Security of MIoT has increased. This research domain covers 35 territories. MIoT, Security, Privacy, authentication, access control are the most often used keywords in this field of research in recent years. The research flashpoints in the field primarily emphasize research directions such as the, the security and privacy concerns related to MIoT sensor data and how to get rid of them. The top five nations considering research volume are the China, India, Saudi Arabia, USA, and Korea, but a lack of collaborative work amongst these countries is seen. Finally, the paper provides future research directions on security of MIoT, such as Privacy of patient information, Lightweight Protocols for MIoT Devices, Trust management, patient data sharing and insecure networks. [ABSTRACT FROM AUTHOR]

Establishing a strong link between the paper medium and the data represented on it is an interesting alternative to defeat unauthorised copy and content modification attempts. Many applications would benefit from it, such as show tickets, contracts, banknotes or medical prescripts. In this study, the authors present a low-cost solution that establishes such a link by combining digital signatures, physically unclonable functions and fuzzy extractors. The proposed protocol provides two levels of security that can be used according to the time available for verifying the signature and the trust in the paper holder. In practice, this solution uses ultra-violet fibres that are poured into the paper mixture. Fuzzy extractors are then used to build identifiers for each sheet of paper and a digital signature is applied to the combination of these identifiers and the data to be protected from copy and modification. The authors additionally provide a careful statistical analysis of the robustness and amount of randomness reached by the extractors. The authors conclude that identifiers of 72 bits can be derived, which is assumed to be sufficient for the proposed application. However, more randomness, robustness and unclonability could be obtained at the cost of a more expensive process, keeping exactly the same methodology. [ABSTRACT FROM AUTHOR]

A botnet attack is a major cybersecurity threat that involves coordinated control of a network of infected computers, enabling large-scale distributed denial of service (DDoS) attacks, malware spreading, and other cybercrime activities. Proactive security measures and advanced threat intelligence systems are essential to detect and mitigate these assaults. This paper proposes the Harris Hawks Optimization (HHO) algorithm, which employs exploration and exploitation techniques to find optimal solutions for analyzing botnet attack pathways. The proposed approach involves HHO as a feature selector for extracting features from anomalous network traffic. The algorithm’s impact on botnet IP positioning performance is analyzed, considering different optimization modes and control center accuracy. The paper is organized into sections covering attack path establishment and analysis, system testing and verification, and a central leadership entity controls it [1]. Botnets are created based on the use of malicious software packages to infect important and sensitive devices in the network, thus making servers, computers, and Internet of Things devices vulnerable [2]. To detect these attacks and limit their impact requires many proactive security measures such as strong network security settings, regular software upgrades, etc. [3]. HHO is a powerful method that has the potential to solve many functional optimization problems and provides a suitable environment for engineering applications, as it mimics the exploration and exploitation phases during the foraging process of Harris Hawks [4]. A model based on HHO algorithm is proposed in this paper that has the ability to track and analyze bot attack paths by extracting a set of features during abnormal network traffic. The results were analyzed and their impact on the performance of robot networks was discussed, based on the use of different experimental results. After configuring the network topology and determining the attack path based on HHO, the performance of the algorithm and its effectiveness in preventing IP addresses from being spoofed are verified. The results showed convergence in being able to correct attack paths and effective performance in repelling the interference of fake IP addresses. [ABSTRACT FROM AUTHOR]

The exploration of ecological security patterns (ESPs) can help people find those areas that are in urgent need of restoration, which is an effective way to realize ecological protection. It is of utmost significance for promoting regional sustainable development to construct ESP and put forward sub-regional optimization suggestions based on the supply and demand ratio of ecosystem services (ESs). In this paper, we assessed the level of supply and demand for five ESs based on multi-source data in 2020 with the help of InVEST, ArcGIS, and IUEMS. Based on the results of supply and demand, we calculated the supply and demand ratio of ESs and extracted the ecological source areas (ESAs) on this basis. Then, we used the Linkage Mapper tool to construct the ESP based on the principle of the minimum cumulative resistance (MCR) model and circuit theory in the Chengdu–Chongqing economic circle (CCEC). Our results indicated that there were apparent spatial differences in the supply and demand of five ESs. There were 35 ESAs in the ESP network, covering an area of about 7914 km2, and most of their land use types were woodland. The CCEC was interconnected by a network of 91 ecological corridors (ECs), spanning a total length of approximately 10,701 km. From the ECs, we extracted 29 ecological pinch points (EPPs) and 16 ecological barrier points (EBPs), which each accounted for about 0.3% of the planned area of the CCEC. Finally, we divided the ecological spaces into four types and put forward the corresponding optimization suggestions. Among them, the proportion of ecological restoration area was 7.7%, which was located in Chengdu City, northwest of the study area. The findings of this paper can give some theoretical guidance and serve as a reference for making decisions in the pursuit of ecological civilization in this region. [ABSTRACT FROM AUTHOR]

The traditional electrical grid has to be digitally improved as digitalization and effective integration of renewable energy bring better efficiency, intelligence, and safety into the grid; hence, the transition from the traditional grid to a smart grid. A smart grid is a modernized and digitalized standard electrical infrastructure that has a key component known as the advanced metering infrastructure (AMI). AMI, also known as smart metering, is a key technological enabler of the smart grid that allows automatic collection and reporting of power-consumed data via two-way communication networks. However, the collected power consumption data is confidential; hence, its privacy must be maintained. Similarly, for the benefit of the smart grid to be consistently maximized, the AMI data and network security must always be intact despite the evolving threats and attacks targeted at it. This paper provides a comprehensive review of the existing vulnerabilities/attacks, security and privacy challenges associated with the smart metering data and network system, its open issues, and future direction. The major contributions of this review paper lie in the AMI vulnerabilities, AMI state-of-the-art security schemes with their pros and cons, its communication protocols analysis, and its emerging security measures. This gave enumerated recommendations for the efficiency improvement of AMI security in terms of its latency reduction while implementing efficient security measures in its future work. [ABSTRACT FROM AUTHOR]

Recently, broadband optical access networks were being deployed worldwide to deliver large bandwidth to end users. Currently, the operators have been mainly deploying time-division multiplexing (TDM) passive optical networks (PON) in their networks. As bandwidth demand continues to increase, the industry further selected several next generation optical access (NGA) options to upgrade from current TDM-PON architectures. Besides increasing bandwidth requirement, current TDM-PONs suffers from limited reach and split-ratio. To further reduce the capital and operational expenditure requirements of current TDM-PON, NGA architectures must consolidate the number of central office sites. Long-reach optical access (LROA) architectures are promising solutions that employ optical amplifiers to increase optical budget to support longer reach and higher split-ratio in the distribution network. As more end users are supported over shared physical medium in LROA, access network security is of greater importance. The first part of this article reviews important LROA architectures and their enabling technologies. Moreover, few works in current literature address security weaknesses in LROA. The second part of this article reviews these security weaknesses as well as monitoring and control techniques employed in current TDM-PONs. In addition, a novel class of quasi-passive and reconfigurable devices is presented that addresses aforementioned security weaknesses and is suitable for LROA. [ABSTRACT FROM AUTHOR]

Cybersecurity in modern vehicles has received increased attention from the research community in recent years. Intrusion Detection Systems (IDSs) are one of the techniques used to detect and mitigate cybersecurity risks. This paper proposes a novel implementation of an IDS for in-vehicle security networks based on the concept of multi-scale histograms, which capture the frequencies of message identifiers in CAN-bus in-vehicle networks. In comparison to existing approaches in the literature based on a single histogram, the proposed approach widens the informative context used by the IDS for traffic analysis by taking into consideration sequences of two and three CAN-bus messages to create multi-scale dictionaries. The histograms are created from windows of in-vehicle network traffic. A preliminary multi-scale histogram model is created using only legitimate traffic. Against this model, the IDS performs traffic analysis to create a feature space based on the correlation of the histograms. Then, the created feature space is given in input to a Convolutional Neural Network (CNN) for the identification of the windows of traffic where the attack is present. The proposed approach has been evaluated on two different public data sets achieving a very competitive performance in comparison to the literature. [ABSTRACT FROM AUTHOR]

Significant research has been carried out in the field of User Behavior Analysis, focused on understanding, modeling and predicting past, present and future behaviors of users. However, the heterogeneity of the approaches makes their comprehension very complicated. Thus, domain and Machine Learning experts have to work together to achieve their objectives. The main motivation for this work is to obtain an understanding of this field by providing a categorization of state-of-the-art works grouping them based on specific features. This paper presents a comprehensive survey of the existing literature in the areas of Cybersecurity, Networks, Safety and Health, and Service Delivery Improvement. The survey is organized based on four different topic-based features which categorize existing works: keywords, application domain, Machine Learning algorithm, and data type. This paper aims to thoroughly analyze the existing references, to promote the dissemination of state-of-the-art approaches discussing their strong and weak points, and to identify open challenges and prospective future research directions. In addition, 127 discussed papers have been scored and ranked according to relevance-based features: paper reputation, maximum author reputation, novelty, innovation and data quality. Both types of features, topic-based and relevance-based have been combined to build a similarity metric enabling a rich visualization of all considered publications. The obtained graphic representation provides a guide of recent advancements in User Behavior Analysis by topic, highlighting the most relevant ones. [ABSTRACT FROM AUTHOR]

Federated machine learning (Fed ML) is a new distributed machine learning technique using clients' local data applied to collaboratively train a global model without transmitting the datasets. Nodes, the participating devices in the ML training, only send parameter updates (e.g., weight updates in the case of neural networks), which are fused together by the server to build the global model without compromising raw data privacy. Fed ML guarantees its confidentiality by not divulging node data to third party, central servers. Privacy of data is a crucial network security aspect of Fed ML that will enable the technique for use in the context of data-sensitive Internet of Things (IoT) and mobile applications (including smart geo-location and smart grid infrastructure). However, most IoT and mobile devices are particularly energy constrained, which requires optimization of the Fed ML process for efficient training tasks and optimized power consumption. This paper, to the best of our knowledge, is the first Systematic Mapping Study (SMS) on Fed ML for energy constrained devices. First, we selected a total of 67 from 800 papers that satisfy our criteria, then provide a structured overview of the field using a set of carefully chosen research questions. Finally, we attempt to offer an analysis of the state-of-the-art Fed ML techniques and outline potential recommendations for the research community. [ABSTRACT FROM AUTHOR]

The security of Internet of Things (IoT) networks has become a integral problem in view of the exponential growth of IoT devices. Intrusion detection and prevention is an approach, used to identify, analyze, and block cyber threats to protect IoT from unauthorized access or attacks. This paper introduces an adaptive and incremental intrusion detection and prevention system based on RNNs, to the ever changing field of IoT security. IoT networks require advanced intrusion detection systems that can identify emerging threats because of their various and dynamic data sources. The complexity of IoT network data makes it difficult for traditional intrusion detection techniques to detect potential threats. Using the capabilities of RNNs, a model for creating and deploying an intrusion detection and prevention system (IDPS) is proposed in this paper. RNNs work particularly well for sequential data processing, which makes them an appropriate choice for IoT network traffic monitoring. NSL-KDD dataset is taken, pre-processed, features are extracted, and RNN-based model is built as a part of the proposed work. The experimental findings illustrate how effective the suggested approach is at identifying and blocking intrusions in Internet of Things networks. This paper not only demonstrates the effectiveness of RNNs in enhancing IoT network security but also opens avenues for further exploration in this burgeoning field. It presents a scalable, adaptive intrusion detection and prevention solution, responding to the evolving landscape of IoT security. As IoT networks continue to expand, the research enriches the discourse on developing resilient security strategies to combat emerging threats in scalable computing environments. [ABSTRACT FROM AUTHOR]

As blockchain technology advances, cross-chain interoperability has become a crucial requirement for achieving seamless interaction among multiple chains. To solve this problem, this paper proposes a scholarly approach to the development of a cross-chain-secure transmission technique, incorporating the Trusted Platform Module (TPM) and the SM algorithm, which is based on trusted roots. This research paper elaborates on the design and implementation of the cross-chain-secure transmission technique based on TPM and the SM algorithm, emphasizing the academic rigor necessary for addressing the security requirements of cross-chain interactions. The research shows that compared with the previous method, the throughput of production capacity is not significantly different from that before and after adding the network delay, and the success rate of preventing attacks is increased by 46.9% by simulating related attacks. After multiple rounds of experiments, the effectiveness and feasibility of this technology in protecting cross-chain communication data are verified. [ABSTRACT FROM AUTHOR]

Anomaly detection for network traffic aims to analyze the characteristics of network traffic in order to discover unknown attacks. Currently, existing detection methods have achieved promising results against high-intensity attacks that aim to interrupt the operation of the target system. In reality, attack behaviors that are commonly exhibited are highly concealed and disruptive. In addition, the attack scales are flexible and variable. In this paper, we construct a multiscale network intrusion behavior dataset, which includes three attack scales and two multiscale attack patterns based on probability distribution. Specifically, we propose a stacked ensemble learning-based detection model for anomalous traffic (or SEDAT for short) to defend against highly concealed multiscale attacks. The model employs a random forest (RF)-based method to select features and introduces multiple base learning autoencoders (AEs) to enhance the representation of multiscale attack behaviors. In addressing the challenge of a single model's inability to capture the regularities of multiscale attack behaviors, SEDAT is capable of adapting to the complex multiscale characteristics in network traffic, enabling the prediction of network access behavior. Comparative experiments demonstrate that SEDAT exhibits superior detection capabilities in multiscale network attacks. In particular, SEDAT achieves an improvement of at least 5% accuracy over baseline methods for detecting multiscale attacks. [ABSTRACT FROM AUTHOR]

Honeypots are computer systems that deceive cyber attackers into believing they are ordinary computer systems designed for invasion, when in fact they are primarily designed to collect data about attack methods, resulting in better protection and defense against malicious actors. As a result, developing reliability metrics for measuring the performance, strength, and effectiveness of honeypot deception is advantageous. Despite extensive and mature research on honeynet system, reliability modeling, analysis and performance prediction and evaluation, based on copula techniques for accurately testing, estimating and optimizing the overall performance of honeynet systems remain lacking. To start, a copula approach for analyzing and optimizing the performance of honeynet systems was proposed. Any honeynet system’s performance can be classified based on its availability, dependability and profit generated. As a result, the current paper sought to investigate the performance of a multi-state honeynet system in terms of availability, dependability and expected profit. This paper examines two types of repairs. Type I repairs are known as general repairs and they are used to recover from a partial or non-lethal failure to a perfect state, whereas Type II repairs are known as copula repairs they are used to recover from a complete or lethal failure to a perfect state. For the sake of generality, the supplementary variable technique and Laplace transforms were used to develop the performance models that are essential to this research, such as availability, reliability, mean time to failure (MTTF), sensitivity and profit function. The models’ numerical validation was fully carried out. The results are shown in tables and figures, enabling us to draw the conclusion that Type II repair is a superior repair policy. Type II repair, according to the findings, can more accurately portray system structure and states while still allowing for efficient assessment. [ABSTRACT FROM AUTHOR]

Wireless network attacks are some of the most common network security threats dealt with daily. Their ease of execution and effectiveness make them commonplace within most public networks. The goal of this paper is to develop a tool which provides defenses against these attacks, one which can also generate the attacks to test its own effectiveness in defending against them. The research involved the design, testing, and implementation of attacks/defenses tool, which benefits from a user-friendly user interface that simplifies the testing process. The attacks were generated using existing tools, linked to one central interface. The defense methodology was scriptbased and created entirely from scratch. It was also linked to a single interface which continuously monitors logs to detect and prevent attacks in an efficient timely manner. The results showed that the proposed defenses to the studied wireless attacks were effective at mitigation, or outright prevention. They were also more lightweight than existing solutions, making them more appealing for less powerful hardware. [ABSTRACT FROM AUTHOR]

This paper predicts the network security posture of an ICS, focusing on the reliability of Industrial Control Systems (ICSs). Evidence reasoning (ER) and belief rule base (BRB) techniques are employed to establish an ICS network security posture prediction model, ensuring the secure operation and prediction of the ICS. This model first integrates various information from the ICS to determine its network security posture value. Subsequently, through ER iteration, information fusion occurs and serves as an input for the BRB prediction model, which necessitates initial parameter setting by relevant experts. External factors may influence the experts' predictions; therefore, this paper proposes the Projection Equalization Optimization (P-EO) algorithm. This optimization algorithm updates the initial parameters to enhance the prediction of the ICS network security posture through the model. Finally, industrial datasets are used as experimental data to improve the credibility of the prediction experiments and validate the model's predictive performance in the ICS. Compared with other methods, this paper's prediction model demonstrates a superior prediction accuracy. By further comparing with other algorithms, this paper has a certain advantage when using less historical data to make predictions. [ABSTRACT FROM AUTHOR]

The rapid development of 5G networks and the anticipation of 6G technologies have ushered in an era of highly customizable network environments facilitated by the innovative concept of network slicing. This technology allows the creation of multiple virtual networks on the same physical infrastructure, each optimized for specific service requirements. Despite its numerous benefits, network slicing introduces significant security vulnerabilities that must be addressed to prevent exploitation by increasingly sophisticated cyber threats. This review explores the application of cutting-edge technologies—Artificial Intelligence (AI), specifically Machine Learning (ML), Software-Defined Networking (SDN), and Network Functions Virtualization (NFV)—in crafting advanced security solutions tailored for network slicing. AI's predictive threat detection and automated response capabilities are analysed, highlighting its role in maintaining service integrity and resilience. Meanwhile, SDN and NFV are scrutinized for their ability to enforce flexible security policies and manage network functionalities dynamically, thereby enhancing the adaptability of security measures to meet evolving network demands. Thoroughly examining the current literature and industry practices, this paper identifies critical research gaps in security frameworks and proposes innovative solutions. We advocate for a holistic security strategy integrating ML, SDN, and NFV to enhance data confidentiality, integrity, and availability across network slices. The paper concludes with future research directions to develop robust, scalable, and efficient security frameworks capable of supporting the safe deployment of network slicing in next-generation networks. [ABSTRACT FROM AUTHOR]

As a research hot topic in the field of network security, the implementation of machine learning, such as federated learning, involves information interactions among a large number of distributed network devices. If we regard these distributed network devices and connection relationships as a complex network, we can identify the influential nodes to find the crucial points for optimizing the imbalance of the reliability of devices in federated learning system. This paper will analyze the advantages and disadvantages of existing algorithms for identifying influential nodes in complex networks, and propose a method from the perspective of information dissemination for finding influential nodes based on Kullback–Leibler divergence model within the neighborhood (KLN). Firstly, the KLN algorithm removes a node to simulate the scenario of node failure in the information dissemination process. Secondly, KLN evaluates the loss of information entropy within the neighborhood after node removal by establishing the KL divergence model. Finally, it assesses the damage influence of the removed node by integrating the network attributes and KL divergence model, thus achieving the evaluation of node importance. To validate the performance of KLN, this paper conducts an analysis and comparison of its results with those of 11 other algorithms on 10 networks, using SIR model as a reference. Additionally, a case study was undertaken on a real epidemic propagation network, leading to the proposal of management and control strategies for daily protection based on the influential nodes. The experimental results indicate that KLN effectively evaluates the importance of the removed node using KL model within the neighborhood, and demonstrate better accuracy and applicability across networks of different scales. [ABSTRACT FROM AUTHOR]

From the point of view of signal camouflage, this paper proposes an active network defense system. Then, the optimal camouflage target selection scheme is proposed. Its goal is to solve the problems existing in the information construction of Chinese military equipment support. This method establishes a multistage game model based on weapon support information network attack and defense. The attack and defense benefits are quantitatively calculated based on the cost of signal concealment. The solution to the refined Bayesian balance problem is given. Then, a multistage optimization algorithm for camouflage signal selection is proposed. Finally, experimental research proves the proposed algorithm to be reasonable and practical. [ABSTRACT FROM AUTHOR]

This paper uses data mining technology to dynamically monitor tobacco Industrial Enterprise' information systems. This paper builds an Internet security situation awareness system under a big data environment. The weight clustering method is used to classify users' network behavior. The spacing of weights is optimized to ensure the maximum difference in classification. Then, NAWL-ILSTM technology establishes a security situational awareness model for the Internet environment. In this project, the extended and short-memory Nadam optimal algorithm (NAWL) is used to realize data deep learning. Finally, the tobacco industry network security situation assessment method is designed to complete the dynamic monitoring of tobacco industry network security based on data mining. Simulation results show that the proposed method can effectively improve the safety evaluation performance of the system and reduce evaluation errors. [ABSTRACT FROM AUTHOR]

Fair exchange protocols play a critical role in enabling two distrustful entities to conduct electronic data exchanges in a fair and secure manner. These protocols are widely used in electronic payment systems and electronic contract signing, ensuring the reliability and security of network transactions. In order to address the limitations of current research methods and enhance the analytical capabilities for fair exchange protocols, this paper proposes a formal model for analyzing such protocols. The proposed model begins with a thorough analysis of fair exchange protocols, followed by the formal definition of fairness. This definition accurately captures the inherent requirements of fair exchange protocols. Building upon event logic, the model incorporates the time factor into predicates and introduces knowledge set axioms. This enhancement empowers the improved logic to effectively describe the state and knowledge of protocol participants at different time points, facilitating reasoning about their acquired knowledge. To maximize the intruder's capabilities, channel errors are translated into the behaviors of the intruder. The participants are further categorized into honest participants and malicious participants, enabling a comprehensive evaluation of the intruder's potential impact. By employing a typical fair exchange protocol as an illustrative example, this paper demonstrates the detailed steps of utilizing the proposed model for protocol analysis. The entire process of protocol execution under attack scenarios is presented, shedding light on the underlying reasons for the attacks and proposing corresponding countermeasures. The developed model enhances the ability to reason about and evaluate the security properties of fair exchange protocols, thereby contributing to the advancement of secure network transactions. [ABSTRACT FROM AUTHOR]

Artificial intelligence-generated content (AIGC) technology has had disruptive results in AI, representing a new trend in research and application and promoting a new era of AI. The potential benefits of this technology are both profound and diverse. However, the benefits of generative tools are accompanied by a series of significant challenges, the most critical of which is that it may cause AI information pollution on social media and mislead the public. Traditional network security models have shown their limitations in dealing with today's complex network threats, so ensuring that generated content published on social media accurately reflects the true intentions of content creators has become particularly important. This paper proposes a security framework called "secToken". The framework adopts multi-level security and privacy protection measures. It combines deep learning and network security technology to ensure users' data integrity and confidentiality while ensuring credibility of the published content. In addition, the framework introduces the concept of zero trust security, integrates OAuth2.0 ideas, and provides advanced identity authentication, fine-grained access control, continuous identity verification, and other functions, to comprehensively guarantee the published content's reliability on social media. This paper considers the main issues of generative content management in social media and offers some feasible solutions. Applying the security framework proposed in this paper, the credibility of generated content published on social media can be effectively ensured and can help detect and audit published content on social media. At the operational level, when extracting key information summaries from user-generated multimodal artificial intelligence-generated content and binding them to user identity information as a new token to identify user uniqueness, it can effectively associate user identity information with the current network status and the generated content to be published on the platform. This method significantly enhances system security and effectively prevents information pollution caused by generative artificial intelligence on social media platforms. This innovative method provides a powerful solution for addressing social and ethical challenges and network security issues. [ABSTRACT FROM AUTHOR]

The intersection of cybersecurity and opportunistic networks has ushered in a new era of innovation in the realm of wireless communications. In an increasingly interconnected world, where seamless data exchange is pivotal for both individual users and organizations, the need for efficient, reliable, and sustainable networking solutions has never been more pressing. Opportunistic networks, characterized by intermittent connectivity and dynamic network conditions, present unique challenges that necessitate innovative approaches for optimal performance and sustainability. This paper introduces a groundbreaking paradigm that integrates the principles of cybersecurity with opportunistic networks. At its core, this study presents a novel routing protocol meticulously designed to significantly outperform existing solutions concerning key metrics such as delivery probability, overhead ratio, and communication delay. Leveraging cybersecurity's inherent strengths, our protocol not only fortifies the network's security posture but also provides a foundation for enhancing efficiency and sustainability in opportunistic networks. The overarching goal of this paper is to address the inherent limitations of conventional opportunistic network protocols. By proposing an innovative routing protocol, we aim to optimize data delivery, minimize overhead, and reduce communication latency. These objectives are crucial for ensuring seamless and timely information exchange, especially in scenarios where traditional networking infrastructures fall short. By large-scale simulations, the new model proves its effectiveness in the different scenarios, especially in terms of message delivery probability, while ensuring reasonable overhead and latency. [ABSTRACT FROM AUTHOR]

In an era characterized by unparalleled levels of data exchange and communication, ensuring the security of network transmissions emerges as a paramount concern. This paper undertakes a comprehensive exploration aimed at bolstering network security through the integration of Chaotic Maps with the robust ChaCha20 encryption algorithm. This pioneering approach seeks to introduce an additional stratum of intricacy and unpredictability to data encryption processes, thereby augmenting the confidentiality and integrity of information in transit. The investigation delves deeply into the theoretical underpinnings, practical implementation intricacies, thorough security analysis, and diverse real-world applications of this enhanced encryption framework. By offering a multifaceted examination, this study provides invaluable insights and guidance not only for network professionals but also for researchers operating within this dynamic field. Through its rigorous examination and innovative proposals, this paper contributes significantly to the ongoing discourse surrounding network security enhancement strategies. [ABSTRACT FROM AUTHOR]

Fine-grained function-level encrypted traffic classification is an essential approach to maintaining network security. Machine learning and deep learning have become mainstream methods to analyze traffic, and labeled dataset construction is the basis. Android occupies a huge share of the mobile operating system market. Instant Messaging (IM) applications are important tools for people communication. But such applications have complex functions which frequently switched, so it is difficult to obtain function-level labels. The existing function-level public datasets in Android are rare and noisy, leading to research stagnation. Most labeled samples are collected with WLAN devices, which cannot exclude the operating system background traffic. At the same time, other datasets need to obtain root permission or use scripts to simulate user behavior. These collecting methods either destroy the security of the mobile device or ignore the real operation features of users with coarse-grained. Previous work (Chen et al. in Appl Sci 12(22):11731, 2022) proposed a one-stop automated encrypted traffic labeled sample collection, construction, and correlation system, A3C, running at the application-level in Android. This paper analyzes the display characteristics of IM and proposes a function-level low-overhead labeled encrypted traffic datasets construction method for Android, F3L. The supplementary method to A3C monitors UI controls and layouts of the Android system in the foreground. It selects the feature fields of attributes of them for different in-app functions to build an in-app function label matching library for target applications and in-app functions. The deviation of timestamp between function invocation and label identification completion is calibrated to cut traffic samples and map them to corresponding labels. Experiments show that the method can match the correct label within 3 s after the user operation. [ABSTRACT FROM AUTHOR]

A novel approach is presented in this paper to address the limitations of virtual machine technology, active kernel technology, heuristic killing technology, and behaviour killing technology in computer network virus defence. The proposed method provides data mining technology, specifically Object-Oriented Analysis (OOA) mining, to detect deformed and unknown viruses by analyzing the sequence of Win API calls in PE files. Experimental results showcase the Data Mining-based Antivirus (DMAV) system's superiority over existing virus scanning software in multiple aspects: higher accuracy in deformed virus detection, enhanced active defence capabilities against unknown viruses (with a recognition rate of 92%), improved efficiency, and a reduced false alarm rate for non-virus file detection. Furthermore, the paper introduces an OOA rule generator to optimize feature extraction, enhancing the system's intelligence and robustness. This research provides a promising solution to support virus detection accuracy, active defence mechanisms, and overall efficiency while minimizing false positives in virus scanning, thus contributing significantly to the advancement of computer network security. [ABSTRACT FROM AUTHOR]

This paper introduces a robust network admission control (NAC) solution tailored specifically for 6LoWPAN Wireless Sensor Networks (WSN), aiming to enhance the overall security infrastructure. By implementing stringent measures, this solution not only safeguards legitimate nodes but also fortifies the network against potential security threats originating from unauthorized nodes attempting to communicate with both legitimate nodes and the Internet. The solution enhances security through innovative features for administrative nodes, including node presence detection and robust authentication. It incorporates data filtering to swiftly identify and discard unauthorized frames, strengthening network resilience. Established protocols like Neighbor Discovery and DSDV facilitate seamless integration. This strategic utilization minimizes the reliance on additional control messages, thereby optimizing the network's efficiency and resource utilization. The solution utilizes cryptographic methods, particularly the XOR algorithm, to enhance data security in wireless sensor networks. This algorithm ensures authenticity, integrity, and freshness of transmitted data frames, providing robust protection against manipulation and bolstering network security. The proposed network admission control solution addresses security risks in 6LoWPAN WSN and integrates advanced features for a strong and efficient overall security infrastructure in wireless sensor networks. [ABSTRACT FROM AUTHOR]

Intrusion detection involves identifying unauthorized network activity and recognizing whether the data constitute an abnormal network transmission. Recent research has focused on using semi-supervised learning mechanisms to identify abnormal network traffic to deal with labeled and unlabeled data in the industry. However, real-time training and classifying network traffic pose challenges, as they can lead to the degradation of the overall dataset and difficulties preventing attacks. Additionally, existing semisupervised learning research might need to analyze the experimental results comprehensively. This paper proposes XA-GANomaly, a novel technique for explainable adaptive semi-supervised learning using GANomaly, an image anomalous detection model that dynamically trains small subsets to these issues. First, this research introduces a deep neural network (DNN)-based GANomaly for semi-supervised learning. Second, this paper presents the proposed adaptive algorithm for the DNN-based GANomaly, which is validated with four subsets of the adaptive dataset. Finally, this study demonstrates a monitoring system that incorporates three explainable techniques—Shapley additive explanations, reconstruction error visualization, and t-distributed stochastic neighbor embedding—to respond effectively to attacks on traffic data at each feature engineering stage, semi-supervised learning, and adaptive learning. Compared to other single-class classification techniques, the proposed DNN-based GANomaly achieves higher scores for Network Security Laboratory-Knowledge Discovery in Databases and UNSW-NB15 datasets at 13% and 8% of F1 scores and 4.17% and 11.51% for accuracy, respectively. Furthermore, experiments of the proposed adaptive learning reveal mostly improved results over the initial values. An analysis and monitoring system based on the combination of the three explainable methodologies is also described. Thus, the proposed method has the potential advantages to be applied in practical industry, and future research will explore handling unbalanced real-time datasets in various scenarios. [ABSTRACT FROM AUTHOR]

With the rapid development of Internet technology, the issues of network asset detection and vulnerability warning have become hot topics of concern in the industry. However, most existing detection tools operate in a single-node mode and cannot parallelly process large-scale tasks, which cannot meet the current needs of the industry. To address the above issues, this paper proposes a distributed network asset detection and vulnerability warning platform (Dis-NDVW) based on distributed systems and multiple detection tools. Specifically, this paper proposes a distributed message subscription and publication system based on Zookeeper and Kafka, which endows Dis-NDVW with the ability to parallelly process large-scale tasks. Meanwhile, Dis-NDVW combines the RangeAssignor, RoundRobinAssignor, and StickyAssignor algorithms to achieve load balancing of task nodes in a distributed detection cluster. In terms of a large-scale task processing strategy, this paper proposes a task partitioning method based on First-In-First-Out (FIFO) queue. This method realizes the parallel operation of task producers and task consumers by dividing pending tasks into different queues according to task types. To ensure the data reliability of the task cluster, Dis-NDVW provides a redundant storage strategy for master-slave partition replicas. In terms of distributed storage, Dis-NDVW utilizes a distributed elastic storage service based on ElasticSearch to achieve distributed storage and efficient retrieval of big data. Experimental verification shows that Dis-NDVW can better meet the basic requirements of ultra-large-scale detection tasks. [ABSTRACT FROM AUTHOR]

This paper analyzes priority-based distributed access control in vehicular networks. Characterizing the spatial correlation between vehicles, users, and roads, this paper uses Cox point processes to model vehicles and users, respectively. Then, this paper proposes that each vehicle transmits if it has the highest priority among all of its neighbors. Using the stochastic geometry framework, this paper derives the probability that a typical vehicle is retained to transmit. Then, this paper derives a second-order moment measure of the retained point process to evaluate the signal-to-interference (SIR) distribution of a typical user. The derived SIR distribution is compared to the system-level simulation of the SIR distribution of a typical user. [ABSTRACT FROM AUTHOR]

The comprehensive concept of SDN (Software Defined Networking) has introduced the extensive change to the traditional networks with the integration of the network by decoupling the forwarding hardware (data plane) from the control logic of the network (control plane).Software Defined Networking (SDN) is a new way of technology that is helping to overcome the limitations of traditional networks. With the help of this emerging technology paradigm has created a great future, an expectation to overcome the need for reliable, secure, flexible and well management of next generation networks. The basic idea behind it is the separation of control plane from data plane. SDN has made the Networks more programmable. SDN is a three layered architecture. OpenFlow Protocol is the most common protocol used for providing the interface called as Southbound APIs between control layer and physical layer. On the other hand interface provided in between application layer and control layer is called as Northbound APIs. All the intelligence is lying in control layer. Controller acts as a brain of the network which is configuring and managing the flow of network through network devices present in physical layer. This paper illustrates the introduction about Traditional networks, Software Defined Networking its architecture, interfaces popular controllers, mininet emulation tool used in SDN, its topologies and security threats in SDN. [ABSTRACT FROM AUTHOR]

With the rapid development of wireless communication technology, positioning technology, and modern smart devices, Internet of Vehicles (IoVs) smart vehicles have brought great convenience to human production and life. Meanwhile, privacy and security issues are becoming extremely serious, with serious consequences if sensitive data such as vehicle location and trip patterns are leaked. This paper focuses on the demands for vehicular network security, especially privacy protection and existing privacy-protection techniques, including common cryptography methods and cryptography-based advanced technologies. At the same time, this paper also analyzes the advantages and challenges of these technologies in protecting privacy and network security in the Internet of Vehicles, such as the challenges of computational resource requirements and security efficiency in the implementation process, as well as the complexity of realizing effective privacy protection in the interactions among different entities. Finally, this paper envisions the development of privacy-preserving application scenarios and the prospects for crypotography-based privacy-preserving technologies. [ABSTRACT FROM AUTHOR]