Search

In this work, we have used the standard symmetric key block cipher data encryption algorithm RC5(32,16,8) for the encryption of digital greyscale images. For this, we have only considered the nonzero elements of the sparse matrix of the images which have been generated using the sparse representation technique. The security strength of the proposed technique is verified through different quality parameters, e.g. information entropy, correlation coefficients, NPCR, UACI, and NIST test. Our proposed algorithm achieved the maximum information entropy value of 7.9977 for the cameraman image and nearly zero correlation coefficient values establish the robustness of the cryptosystem. The highest NPCR and UACI values obtained in our work are 99.6916 and 33.9605, which are closer to the maximum theoretical values. The proposed technique is also compared with some of the contemporary works to validate the credibility of our proposed algorithm. [ABSTRACT FROM AUTHOR]

An essential security component for the Internet of Things (IoT) is device authentication. IoT devices are widely dispersed in public and open areas, making them vulnerable to attacks. To detect the security violations, an authentication with a privacy preservation model is developed in this research using devised Autoregressive Poor and Rich Optimization (APRO)-based secret key. Here, the secret key used to perform the encryption process is generated by the proposed optimization algorithm in such a way that the data encryption mechanism is carried out by considering the Box-Cox transformation. However, the authentication process is achieved between the server and the Authorization center (AC) through the generation of authentication and verification messages. The original data is retrieved back by employing the decryption process along with the usage of the retrieval key. The proposed method achieved a minimum computation time of 0.062 sec, higher encryption quality of 92.56%, and minimum memory usage of 2.86MB. [ABSTRACT FROM AUTHOR]

Home area network (HAN) devices send the electricity consumption and other important data to the smart meter that must remain confidential from other devices. This paper proposes a novel one-dimensional hybrid chaotic map. The proposed map shows excellent chaotic properties when analyzed by bifurcation diagram, Lyapunov exponent & Shannon entropy. We further design an encryption strategy for data transfers between the smart meter and HAN devices. The proposed encryption scheme uses the existing lightweight key management in advanced metering infrastructure (LKM-AMI) architecture for data transfers, in which the encrypted data is transferred through an insecure channel and private keys are provided by trusted third party (TTP) through secure channels. The 2-way communication between HAN devices and the smart meter sends messages that are encrypted by using the proposed novel hybrid one-dimensional chaotic map. The encryption strategy mainly consists of three steps. In the first step, the seed and the control parameters are initialized. The second phase generates two intermediate keys using the proposed hybrid chaotic map. In the last phase, we encrypt the message by applying permutation followed by diffusion using intermediate keys. The proposed encryption strategy is resistant to various attacks. [ABSTRACT FROM AUTHOR]

Opioid use disorder is a growing public health concern in the United States, causing economic burden and hindered by stigma. New forms of data, including location data, may improve the effectiveness of interventions for preventing and treating opioid use disorder and/or misuse, increase access to treatment and address racial and ethnic disparities. This qualitative study aimed to identify factors that contribute to users' experience with a publicly available location-tracking mobile app - and investigate their privacy and ethical concerns. The study was conducted through two 15-minute interviews within a 48-h time frame. Participants were recruited from a pool of past research participants, Facebook ads, and referrals, and had to meet certain inclusion criteria related to opioid use disorder and/or misuse. The study had a final sample of 30 participants, 15 male and 15 female. The study suggests that a simple onboarding process and convenient experience can enhance participant adherence to the study app and other similar location-based research apps. However, the study also found that participants had concerns about privacy and transparency about locational privacy when sharing their location data. To improve the app, researchers suggest incorporating user behavior earlier in the app development stage. The study also highlights the importance of addressing ethical and privacy concerns such as limiting the types of collected data, incorporating data encryption and retention strategies, giving access to research staff only, and not sharing the data with third-party companies or law enforcement agencies to increase user satisfaction. [ABSTRACT FROM AUTHOR]

This paper describes Alkaline, a size-reduced version of Kyber, which has recently been announced as a prototype NIST standard for post-quantum public-key cryptography. While not as simple as RSA, I believe that Alkaline can be used in an undergraduate classroom to effectively teach the techniques and principles behind Kyber and post-quantum cryptography in general. Classroom experiences with individual concepts used in Alkaline support this belief. In addition to cryptography, linear algebra and abstract algebra classes would be good candidates for the use of Alkaline. A few exercises suitable for use in these classes are included. [ABSTRACT FROM AUTHOR]

Learning analytics methods have proven useful in providing insights from the increasingly available digital data about students in a variety of learning environments, including serious games. However, such methods have not been applied to the specific context of educational escape rooms and therefore little is known about students' behavior while playing. The present work aims to fill the gap in the existing literature by showcasing the power of learning analytics methods to reveal and represent students' behavior when participating in a computer-supported educational escape room. Specifically, we make use of sequence mining methods to analyze the temporal and sequential aspects of the activities carried out by students during these novel educational games. We further use clustering to identify different player profiles according to the sequential unfolding of students' actions and analyze how these profiles relate to knowledge acquisition. Our results show that students' behavior differed significantly in their use of hints in the escape room and resulted in differences in their knowledge acquisition levels. [ABSTRACT FROM AUTHOR]

Our world is making its way toward complete digitization, with more and more data going to the Internet. Thus, the security of the data has become one of our utmost responsibilities. Strong and secure cryptography and steganography techniques have become the need of the hour to defend against modern adversaries. In this article, a novel scrambled data hiding approach is proposed to secure the sensitive information used in communications. The lacuna in the existing data hiding approaches is the loss of originality in the sensitive data to be attached, leading to poor information quality. This issue is addressed in the proposed approach by encrypting the data using the triple data encryption standard (DES) algorithm. The scrambled data are hidden in the audio file using the least significant bit (LSB) embedding. Experiments were conducted, and the proposed approach secured the sensitive information significantly without the loss of information quality. Furthermore, the secured information is retrieved by only the authenticated users with high quality. [ABSTRACT FROM AUTHOR]

The Internet of Things in smart environments interrelates with Mobile Ad‐hoc Network and Wireless Sensor Network, which becomes more attractive and efficiently flourishing. Moreover, Mobile Ad‐hoc Network is applied in various fields including intelligent transportation, emergency communications after disaster, and Internet of Things. The incorporation of Internet of Things and Mobile Ad‐hoc Network become a rising theory for enabling opportunistic communication in Internet of Things. The security provisioning for secure communication is still the major challenge in Mobile Ad‐hoc Network – Internet of Things. Thus, in this paper, the DEroute algorithm is developed for secure communication Internet of Things structure, where Internet of Things nodes are located in mobile ad-hoc manner. In order to avoid the route list modification, nodes' address is encrypted based on generated secret keys by Diffie–Hellman key-exchange algorithm. The fuzzy system with trust parameters, like historical, indirect and direct trust factors are considered for the identification of secure nodes. The bi-filtering process is also performed for filtering important nodes. Thus, the developed DEroute model achieved enhanced performance with respect to delay, packet delivery ratio and throughput of 0.1674 sec, 87.23% and 25.19 mbps, respectively. [ABSTRACT FROM AUTHOR]

The out-of-band management system defined by IPMI only supports IIC bus for inter-node communication, which has low communication rate and poor flexibility for multi-node layout, and it is not suitable for cluster management applications with large data volume of multiple nodes. This article adopts Ethernet instead of IIC to realize the structure layout of multi-node distributed cluster management system. The operation and maintenance information are trans-mitted by RMCP+, but the original RMCP + is rate limited and less stable in the transmission of large data volume in multi-cluster management system due to the use of AES-CBC encryption algorithm. This article optimizes the RMCP + communication process logic to reduce the redundancy in the system cascade data about transmission encryption and decryption calculation, and proposes the method of using parallel CTR for data block encryption instead of serial CBC data block encryption, which realizes the loose coupling of database decryption in data packets, in-creases the decryption rate of data cipher text at remote clients, educes the error transmission caused by tight coupling of data blocks, and improves the communication efficiency. The experimental environment of QEMU-based multi-node management system is built to verify that the communication method proposed in this article is suitable for the operation and maintenance management of distributed multi-node complex ATCA. [ABSTRACT FROM AUTHOR]

Encrypted control systems were introduced to enhance the security of cyber-physical systems, which outsource control action computations to a third-party platform. To protect the confidentiality of the transmitted data, homomorphic encryption schemes are particularly appealing for their capability of allowing computations on encrypted data. By considering the popular ElGamal and Paillier encryption schemes, this paper shows that encrypted control systems are vulnerable to attackers leveraging the inherently small domains of the plaintext data in control systems and the randomisation process required to make the utilised ciphers semantically secure. Finally, we present some countermeasures to defend against these attacks. [ABSTRACT FROM AUTHOR]

I Crypto Wars - The Fight for Privacy in the Digital Age: A Political History of Digital Encryption i is the first scholarly history of the sixty-year political debate over perceived promises and perils of widely-available cryptography in the Anglophone west, especially the United States. Jarvis rejects the dominant approach to periodizing the crypto wars, which labels the debates of the 1990s "Crypto War 1.0" and the post-Snowden debates "Crypto War 2.0." Jarvis claims to be establishing fact and dispensing with fictions, but the only places in the text where this applied is in Jarvis' defense of the NSA and FBI against their critics. Because Jarvis framed the book so narrowly, he missed the opportunity to write a truly dynamic history of the crypto wars.[6] On the other hand, because Jarvis axiomatically assumes the existence of the NSA, he overlooks another possible beginning to the crypt wars. [Extracted from the article]

Data deduplication has become a promising technique that significantly reduces space utilization of cloud storage servers and optimizes the network bandwidth. A variety of deduplication techniques have been proposed to enhance the cloud server's storage efficiency. Most of the deduplication schemes do not address global indexing and user privacy issues. This paper elucidates a novel three-tier secure data deduplication architecture (referred to as SEEDDUP) for data storage and retrieval in the cloud. SEEDDUP provides data deduplication with proper indexing and user privacy. In this work, the optimal chunk size, for a given file size and format, is calculated using Cuckoo Search Algorithm. The chunk existence in the cloud is verified by the hash value generated via SHA3-512. To improve data deduplication speed, Merkle Hash Tree based MapReduce (MHTMR) is used for fast index lookup, which improves the performance at data storage and retrieval. In addition, data are encrypted based on its sensitivity level (low and high) using Niederreiter Public Key Cryptosystem. With this new SEEDDUP architecture, only legitimate users can request data successfully for limited times (k) and spurious data requests cannot be processed or handled in the cloud. Experimental results show that the proposed SEEDDUP can reduce latency, achieved good throughput and deduplication efficiency (chunk size variance and security measures) in data deduplication. [ABSTRACT FROM AUTHOR]

One type of wireless network, Wireless Ad hoc NETwork (WANET), is arranged in a disaster zone with the objective of acquiring patients' data and enhancing medical prerequisites. WANETs are poised for various compact nodes dispersed in the disaster zone. The nodes in WANETs are competent enough in sending the collected medical data and storing in Cloud instead of in a single server. The limited bandwidth with less concentric secured storage and retrieval of huge medical data necessitates secured and data storage in Cloud to maintain the service quality of WANETs. To address this issue, we propose an optimization-based medical data compression and encryption technique, which ensures data security and high performance data retrieval in Cloud via WANET. We propose a Walsh and Scalar Quantized Singular Value Decomposition technique to deliver the compressed medical data that maximize the lifetime of WANETs. Next, Miyaguchi Preneel Encryption Standards are utilized and applied to the compressed medical data that not only improve the security aspect but also ensure high performance data retrieval by a single key for both encryption and decryption. The utility of the proposed method is exhibited with simulation results. The results show that the proposed method efficiently secures the medical data by extending network lifetime and data retrieval. [ABSTRACT FROM AUTHOR]

This article examines the disconnect between people's social conceptions of privacy and information security in relation to encryption vis-à-vis the legal protections offered by law. It describes the social conceptions and expectations of participants based in New Zealand and contrasts these with the applicable laws and legal protections concerning privacy, information security and encryption. In light of incongruence between the social and the legal, the article recommends law and policy developments to better align and connect people's social conceptions of privacy and information security with the legal protections provided by law. This includes having greater awareness of the relevance of civil and criminal procedure rights to privacy and information security in the context of encryption and providing stronger legal protections to the right against unreasonable search and seizure and the privilege against self-incrimination. [ABSTRACT FROM AUTHOR]

The cypherpunks were 1990s digital activists who challenged White House policies aiming to prevent the emergence of unregulated digital cryptography, an online privacy technology capable of frustrating government surveillance. Whilst the cypherpunk's ideology, which is predominantly the output of Timothy C. May, is well understood, less is known about the composition of the cypherpunk's community. This article builds on past studies by Rid and Beltramini by using the cypherpunk's mail list archive to profile the most active and influential cypherpunks. This study confirms the May-derived ideology is broadly, though not entirely, representative of the cypherpunk community. This article assesses the cypherpunks were a highly educated, mostly libertarian community permeated by aspects of anarchism which arose from a societal disaffiliation inherited from the counterculture. This article further argues that the cypherpunks were also influenced by the hacker ethic and dystopian science fiction. [ABSTRACT FROM AUTHOR]

This article examines the laws that apply to encryption in New Zealand. Specifically, it analyses the different types of law that constitute an encryption legal framework in the country, namely: export control, substantive cybercrime, criminal procedure, human rights, and information security and data protection. The article then utilises the encryption laws and legal framework to evaluate a proposal by the Five Eyes intelligence alliance to regulate the use of end-to-end encryption in messaging services. The article concludes that the proposal is incompatible with the country's encryption legal framework. [ABSTRACT FROM AUTHOR]

This article examines the resource sharing functionality of the decryption platform of Europol. The platform supports European law enforcement agencies (LEAs) that are having difficulties accessing legally obtained encrypted evidence due to the lack of human and technical resources. The article investigates Europol's resource transmission role with sharing economy variables such as transaction cost and trust-building. The core argument of the article is that Europol's sharing platform has a strong potential to reduce the transaction cost of outsourcing the decryption services and diminish trust-related problems for national policing agencies by replacing private sector actors. However, for a more sustainable cybercrime investigation strategy, the decryption platform needs a new market-oriented model supported with robust vetting and evidence security mechanisms to encourage more private company participation. [ABSTRACT FROM AUTHOR]

"The American Library Association affirms that rights of privacy are necessary for intellectual freedom and are fundamental to the ethical practice of librarianship," reads a position paper by the ALA. Protecting user privacy is a cherished ethical position held within this field. Therefore, it is worth asking whether libraries have been aggressive enough to protect this standard, given the rapid advancement of information technology, digital surveillance, cybercrime, commercial exploitation of user data, and emerging privacy threats for the individual and culture. This paper seeks to reconcile the ethical vision with the hard reality that emerging cyber threats can easily circumvent basic library efforts to protect user data. The author imagines the "black box" library, which would be the end result of radical adherence to the ethical standard. In short, the "black box" library would protect freedom of conscience for the user by adhering to extremely rigorous standards, including: Mass encryption, proxy services, legal enforcement of privacy provisions in vendor contracts, recordless inventory systems, and other strict measures. The vision is for a space where critical information flows in, but very little if any "digital exhaust" escapes it. [ABSTRACT FROM AUTHOR]

This paper describes a cryptographic protection system hardware device designed to improve data encryption and decryption performance and preserve data integrity. The cryptosystem is implemented by hardware-software method, where the encryption and decryption of data are carried out in a standalone FPGA device based on non-positional polynomial number system (NPN). For data encryption the next block of text to be encrypted is divided into sub-blocks and represented as separate binary polynomials and binary polynomials-keys are assigned to them, as well as irreducible polynomials (modules). Then, split blocks are calculated in parallel and a ciphertext is formed. For this purpose, the special algorithm where calculation of NPN parameters and check on irreducibility of polynomials (modules) and the program of generation of direct and inverse keys are developed and application functional is developed that implements operations in the ring of polynomials with coefficients GF(2) using an object-oriented approach. We have developed polynomial multipliers modulo sequential and parallel action (matrix multiplier) on the basis of which data encryption and decryption are performed. [ABSTRACT FROM AUTHOR]

This paper proposes a new modification to the AES in order to ensure a high-level security. This is accomplished by replacing the binary Exclusive OR (XOR) operation in each add-round-key stage of the AES with a new (#) operation. The (#) operation requires an additional and randomly generated control key to determine the state table (among 256 optional state tables) needed to apply the (#) operation. The 256 states tables are formed based on the addition operation in the Galois Field GF (28) to increase the randomness of the algorithm. The modified AES algorithm has been evaluated based on several security metrics. In our proposed algorithm, an attacker needs, at minimum, up to (2431)10 probabilities of keys to decrypt an encrypted message; thus, the proposed AES algorithm increases the complexity of the original AES against the differential cryptanalysis. Moreover, compared to the original AES, applying the (#) operation in our modified algorithm also improves the performance in other security metrics, such as NIST and histogram. Consequently, this replacement by using two keys in both the encryption and decryption process adds a new level of "protection and a greater degree of robustness against breaking methods. [ABSTRACT FROM AUTHOR]

Encryption is the process of securing confidential data that bars a third party's access to the information.RSA encryption utilises the property of complexity classes wherein the problem of prime integer factorization lies inside the Non-Polynomial time (NP-Hard) class, which makes it impervious to classical computers. Since it is so hard to break even for a computer, it becomes important to do encryption for all the secure transactions. Although it lies outside the capabilities of traditional computing, the recent developments in the field of quantum computing can be utilised to break RSA Encryption. The approach involves mapping of qubits used in a quantum machine to a constraint satisfaction problem (CSP) and then using them to check for factors. This consists of the use of a Multiplicative Boolean circuit in which the qubits utilised by the machine replaces the variables. These Qubits are then mapped as per the gates involved, and the factorization problem is thus transformed into a CSP problem, through which, the factors can be easily found. Once known, these factors can be used to calculate the public and private keys effectively breaking the encryption security. We provide a novel approach to highlight the importance of developing Post-Quantum cryptography techniques for providing a secure channel of communication. [ABSTRACT FROM AUTHOR]

Google is the single largest driver of traffic to library Web sites and digital repositories, and librarians would do well to listen when the search giant reveals information about its practices or makes recommendations. Recently, Google announced that it would begin to favor Web sites that use the secure hypertext transfer protocol (HTTPS) in its search results rankings. HTTPS encrypts data transmission and one of Google's stated reasons for this change is to help make the Web safer and minimize data theft. Similar announcements by Google have sometimes been ignored by librarians, to the peril of the visibility and use of library products and services on the Web. [ABSTRACT FROM AUTHOR]

As an important branch of reversible data hiding, reversible data hiding in encrypted images (RDH-EI) can embed secret message into images, but also effectively protect the privacy of the images in an open environment. Most of the recently proposed RDH-EI methods are based on the public-key cryptosystem. However, the expansion rate of the public-key cryptosystem is too high to make the information transmission more difficult. In this paper, to achieve a low expansion rate, a hybrid encryption combined with Paillier cryptosystem and stream cipher is proposed. The original image is partitioned into non-overlapping blocks, which are selected as two categories of blocks and encrypted by a hybird encryption with a low expansion rate. The embedding capacity of these two types of blocks is determined by the adaptive optimization algorithm. Hidden data are embedded into images by modifying ciphertexts according to the data hiding key. In the decoding phase, the embedded data can be extracted, and the original image can be recovered with the encryption key and data hiding key. Experimental results show that the low expansion rate can be obtained with a relatively high PSNR compared with some state-of-the-art methods. [ABSTRACT FROM AUTHOR]

The article titled "Encryption Method for Blockchain based Data for Safe Transmission Using Fuzzy Algorithm" has been retracted by the Editor, Institution, and Publisher of the IETE Journal of Research. Concerns were raised about the peer review and decision-making processes for the special issue in which the article was published. After an investigation, it was confirmed that the articles in the special issue were not reviewed appropriately. As a result, all articles in the special issue have been retracted. The journal is committed to correcting the scientific record and will cooperate with any institutional investigations. The retracted articles will remain online but will be digitally watermarked as "Retracted." [Extracted from the article]

We, the Editor, Institution and Publisher of the journal IETE Journal of Research, have retracted the following article, which is part of the Special Issue titled "Federated Learning for Blockchain Systems and Industrial Internet of Things": Ruihong Zhang & Zhihua Hu (2022) Encryption Method for Blockchain based Data for Safe Transmission Using Fuzzy Algorithm, IETE Journal of Research, DOI: . Following publication, concerns were raised about the peer review and decision-making processes for this special issue. After an investigation by the Taylor & Francis Publishing Ethics & Integrity team, in full cooperation with the Editor-in-Chief and the Institution, it was confirmed that the articles included in this special issue were not reviewed appropriately, in line with the Journal's peer review standards and policy. As the stringency of the peer review process is core to the integrity of the publication process, the Editor and Publisher have decided to retract all of the articles within the above-named Special Issue. The journal has not confirmed if the authors were aware of this compromised peer review process. The journal is committed to correcting the scientific record and will fully cooperate with any institutional investigations into this matter. The authors have been informed of this decision. We have been informed in our decision-making by our editorial policies and the COPE guidelines. The retracted articles will remain online to maintain the scholarly record, but they will be digitally watermarked on each page as "Retracted". [ABSTRACT FROM AUTHOR]

Security in a wireless sensor network is an essential requirement to safeguard the system from misuse of the collected data. In a wireless sensor network, the sensed data is to be transmitted to a base station securely and safely. In this process, data packets may route through multiple sensor nodes and reached the base station at the end. The encryption is the basic tool to protect data from vulnerable attacks in a wireless sensor network. Among the two basic encryption classes namely symmetric key encryption and asymmetric key encryption, the prior is most suitable for wireless sensor network for its simplicity and low computation cost. In this article, we propose a quaternion based encryption system applicable to the wireless sensor network with a key distribution scheme. We use the IEEE standard half-precision number system in the arrangement of special quaternions and secret keys. The quaternion encryption mainly rotates one quaternion w.r.t. an axis with a given angle and thereby produce a new quaternion. Experimental results for the encryption and decryption process and its efficiency is discussed in this article. [ABSTRACT FROM AUTHOR]

One of the most preferred encryption techniques for data sharing in cloud environment is Ciphertext-Policy Attribute Based Encryption (CP-ABE). An efficient File Hierarchy CP-ABE (FH-CP-ABE) scheme using an integrated access structure was proposed by Wang and colleagues. Their working construction was based on symmetric pairing. In this article, we propose an efficient Asymmetric File Hierarchy Ciphertext-Policy Attribute Based Encryption (AFH-CP-ABE) which is based on an asymmetric pairing construction using denominator elimination and twist mapping. We apply this optimized Tate pairing in the proposed AFH-CP-ABE to find out its computational costs for encryption and decryption using gmp 6.0.0 library and then compared with existing schemes. [ABSTRACT FROM AUTHOR]

A model of an automated system for secure cross-border information exchange is considered. This automated system presents as a complex of the following modules which ensure the information security: data encryption, an electronic digital signature (EDS), access control to the stored information based on two-factor authentication, resolution of possible conflict situations. In this paper, models of two modules for an automated system are described: the electronic digital signature and access control to information based on two-factor authentication. The mathematical model of the formation and verification of the digital signature is described in detail. The phased software implementation of this model with the analysis of the results is described. The two-factor authentication algorithm based on the authenticator program and a mobile phone is considered. A secret string generator based on the method of exhaustive search was carried out. A generator of trigonometric functions is described, which is used to calculate a one-time password. The phased software implementation of this model is given. The analyzed results of the algorithm are presented. [ABSTRACT FROM AUTHOR]

While drug dealing organized as drop-off delivery services is not a new phenomenon, research indicates that it is on the rise. The European Monitoring Centre for Drugs and Drug Addiction recently described how the European cocaine market is undergoing a process of '[u]bernisation', where more sellers promote additional services beyond the product itself, such as 'fast delivery anywhere at any time'. Based on the assumption that developments in retail-level drug distribution are fuelled by supply-side as well as demand-side processes, this paper reports key findings from a qualitative study in Denmark exploring user motivations for purchasing drugs from drop-off delivery dealers. [ABSTRACT FROM AUTHOR]

An introduction is presented in which editor discusses various articles within the issue on topics including digital male same sex dating world in the shadow of the Online Harms Bill; concept of encryption and role of Artificial Intelligence in Online Dispute Resolution.

Employees' violation of information security policies is a major threat to an organisation. Some violations such as using an easy-to-guess password or storing confidential data on personal unencrypted flash drives usually do not cause immediate harm; instead, these actions create security flaws that can be attacked in the future and cause delayed consequences. We call such behaviour consequence-delayed information security violation (CDISV). The ignorance or denial of the possible delayed consequences is the main reason employees engage in such insecure behaviour. Due to the delay between the action and the consequence, a long-term mindset could play an important role in employees' current decision-making. Specifically, in this study, we propose that long-term orientation is an influential factor in decreasing CDISV. The long-term orientation includes three dimensions: continuity, futurity, and perseverance. In addition, based on the stewardship theory and the needs theory, we further propose that value identification and the fulfilment of higher-order needs (trusted relationship and growth) are important drivers for employees to have a long-term orientation. We collected survey data using the 170 responses we received from a global company's employees. The empirical results support our arguments. Our findings provide implications to organisations to encourage employees' information security behaviours. [ABSTRACT FROM AUTHOR]

Assured deletion of outsourced data in cloud storage is one of the most important issues in cloud storage. The use of encryption is a promising approach to address this issue. In this paper, we propose a design to achieve assured deletion in cloud storage built upon identity based cryptography (IBE). Compared with other designs known in the literature, foremost among them being FADE, the proposed design comes with a lightweight key management infrastructure. Furthermore, it offers other key management benefits inherent in identity-based cryptography such as key delegation and revocation. To demonstrate the practicality of the proposed design, we implement a fully featured prototype and evaluate its performance. Results analysis shows that the overhead time cost of the proposed design does not exceed 3 percent of the plaintext design. This rate decreases significantly for files with larger sizes, which makes it a relevant choice for use in real applications. [ABSTRACT FROM AUTHOR]

This paper presents a new scheme for encryption of single-channel colour images. The scheme uses amplitude- and phase-truncation approach to introduce non-linearity for enhanced security. Further, the colour image encryption is performed in the fractional Hartley domain, which is relatively less investigated. The encryption starts with an affine transform of each channel of the input colour image. Thereafter, one of the channels is considered as the input amplitude image while the other two are used as phase masks, one in the spatial and the other in the frequency domain. A detailed analysis of the scheme's sensitivity to various encryption parameters has been carried out. In addition, security analysis of the scheme against attacks establishes the scheme's robustness. The combined use of the affine transform and phase-truncation approach for colour image encryption in the fractional Hartley domain is attempted for the first time in this study. It is shown that the proposed scheme resists the special attack. [ABSTRACT FROM AUTHOR]

Cloud computing allows the users to store their data in its storage and use them whenever they need. While the data of user is traveling outside its physical infrastructure through Internet, it needs to use a very strong encryption to protect them against the hackers who attempt to steal or alter the data. Thus, the data security in transmission is so important. Most of the users send the data to cloud, but all the data do not have a high sensitivity. In this paper, K nearest neighbors algorithm is used to decide whether the data is normal sensitive or high sensitive, and then according to the level of sensitivity we proposed a framework to do data encryption. In order to ensure user authentication, we used one time password to authenticate the user, and for the data which belong to normal sensitivity level we have applied AES (advanced encryption standard)-192 algorithm. Finally, for the data which belong to high sensitivity level, AES-256 algorithm has been applied, and RSA (Rivest-Shamir-Adleman) algorithm is used to encrypt the key of AES 256, then we use hash-based massage authentication code to be attached in the end of message to ensure integrity and authenticity of message. [ABSTRACT FROM AUTHOR]

This article examines how effectively Britain secured its diplomatic communications against hostile decryption during the early Cold War. It shows that between 1945 and 1970 the Foreign Office and the Commonwealth Relations Office introduced and operated four advanced cipher machines, Typex, Rockex, Noreen and Alvis, which produced very strong ciphers. However, Britain did suffer physical compromises of Rockex through Soviet espionage and an attack on the British embassy in Beijing. Rockex was also vulnerable to technical surveillance of its acoustic and Tempest emissions, and the Soviets exploited this to read the encrypted communications of the British embassy in Moscow. [ABSTRACT FROM AUTHOR]

Over the last decades the advent of digital documentation has provided research communities with valuable resources of information for clinical research. To utilize the potential of information about patients, their health care, and its outcome that is already available in different registers, the possibility to cross-reference information from different registers is inevitably required. When performing linkage, we are currently forced to disclose information of participating subjects either to the administration of the other register(s) or to the researcher. Considering the increased concern of issues around personal integrity, this is a limitation that affects the ethical implications of proposed research and that might in the end affect the willingness of subjects to participate in registers. For this reason we propose a different methodology for performing cross-referencing, one that effectively prevents information leakage between the different organizations participating in linking the data. We believe that it is possible to use commonly adopted technologies within the area of data security and encryption to perform linkage without disclosing any sensitive information between different participants. In this paper we demonstrate how common techniques of encryption could be implemented to achieve that and furthermore significantly simplify discovery and feasibility surveying ahead of studies. [ABSTRACT FROM AUTHOR]

A Spanish strip cipher, known as the "PILAR key", has been reconstructed from a set of encrypted telegrams sent by the General Directorate of Security in Madrid, Spain, to the civil government in Málaga, Spain, in 1940 after the Spanish Civil War. The reconstruction of this unrecorded key is based on the application of a cyclic rotation model to the strip cipher behavior, allowing one to recover the homophone table and the mobile strip. In this way, the messages are correctly deciphered and the PILAR key is now part of the large list of known Spanish strip ciphers. [ABSTRACT FROM AUTHOR]

Although most surveillance studies scholars assume privacy is antithetical to surveillance, critics have recently warned that privacy-based criticisms may facilitate surveillance. That being said, we do not yet have data that show whether privacy claims were used in the past to legitimate government surveillance. This paper addresses that gap by analyzing claims made over one of the U.S.’s most controversial surveillance issues: government control over encryption technologies. A review of Congressional hearings and statements on the Congressional Record (n = 112) reveals that from 1993 to 1999, public debates were dominated by a market liberalization discourse in which participants supported loosening encryption controls as a way to protect privacy from criminal intrusions in market transactions. Also playing a role was a strong skepticism toward government power and a preference for markets as managers of crime prevention. Challenged by these critiques, lawmakers withdrew regulatory proposals and spent the following decade working quietly with private firms to ensure law enforcement surveillance capability. These findings show the expansion of privacy for consumers and entrepreneurs has in fact been used to achieve the contraction of privacy from law enforcement and intelligence agencies. [ABSTRACT FROM AUTHOR]

The disdain against our institutions seeps across all sectors. From business to government, charitable bodies to media, Fake news, which that master manipulator Orson Welles reminds us, is as old as the Garden of Eden, is emblematic of the age: the corruption of knowledge. If, as Mao Zedong once claimed, power grows out of the barrel of a gun, the capacity to control and manipulate information is the weapon of choice in a changing world order. From meddling in the US presidential election to Brexit and beyond, the capacity to mount credible campaigns have been compromised by communication channels that both amplify and distort. This article explores how finance and its reporting has changed in the interim and suggests we still face an existential crisis. [ABSTRACT FROM AUTHOR]

A new public authenticated encryption scheme based on chaotic maps and factoring problems is proposed. The chaos-based cryptosystem offers an encryption scheme with several advantages including secure transfer, high speed encryption, and reasonable computational overheads. Cryptographic factoring and chaotic system are employed to enhance the security of our convertible authenticated encryption scheme. The encryption, signature generation, signature verification, and message recovery are discussed in details. Several security attacks are proposed to illustrate the system shield through chaotic maps and factoring problems. The performance analysis of the proposed scheme show a much improved performance over existing techniques. [ABSTRACT FROM AUTHOR]

Recently, joint transform correlator (JTC) has been widely applied to image encryption and authentication. This paper presents a novel secret sharing scheme with two users based on JTC. Two users must be present during the decryption that the system has high security and reliability. In the scheme, two users use their fingerprints to encrypt plaintext, and they can decrypt only if both of them provide the fingerprints which are successfully authenticated. The linear relationship between the plaintext and ciphertext is broken using the compressive sensing, which can resist existing attacks on JTC. The results of the theoretical analysis and numerical simulation confirm the validity of the system. [ABSTRACT FROM AUTHOR]

T-310 is an important Cold War cipher (Schmeh 2006). It was the principal encryption algorithm used to protect various state communication lines in Eastern Germany throughout the 1980s. The cipher seems to be quite robust, and until now no researcher has proposed an attack on T-310. This article studies decryption oracle and slide attacks on T-310. [ABSTRACT FROM AUTHOR]

In this article, the authors propose a new version of the McEliece cryptosystem based on the Smith form of convolutional codes. They use the Smith form to hide a part of the code in the public matrix, and they leave the other part secret. The secret part will then be used for decryption. They hide this part by multiplying it on the left by a random matrix, and they add a random matrix which has a few conditions. Their scheme has a small public key size compared to the original McEliece scheme and resists the unique decoding attack against convolutional structure presented at the conference PQCrypto 2013 by Landais and Tillich. Further, the exhaustive search attack is infeasible on their system. [ABSTRACT FROM AUTHOR]

In May 2017 (for the third time), crypto history enthusiasts met for the European Historical Ciphers Colloquium (Euro HCC). It took place in Smolenice, Slovakia. Interesting talks were given, among other things about the Enigma, First World War ciphers, spy ciphers, and cryptanalysis of historical encryption methods. Next year’s edition will take place in Uppsala, Sweden, with the conference being renamed as “HistoCrypt.” The 2018 Call for Papers is open. [ABSTRACT FROM AUTHOR]

This article presents an overview of the concepts of and motivation for the OCB block cipher mode of operation. OCB is well suited for IoT, wireless, and other constrained devices where processing time and energy consumption are design issues. The article describes two versions of the OCB algorithm (OCB1 and OCB3) that have been widely accepted. [ABSTRACT FROM AUTHOR]

The recent legal dispute in San Bernardino pitting the Apple Corporation against the Federal Bureau of Investigation (FBI) concerned whether Apple was legally obliged to help law enforcement access the contents of a deceased terrorist's iPhone. The metonym of the “warrant” played an important role in public disputation regarding the relationship between the FBI's investigation and Apple's encryption technology. Representing a complex temporal sequence that includes the licensing of a search, a search, and a rendering of intelligible data, the metonym warrant enabled anti-encryption arguments that avoided overtly advocating decryption or public key use. The warrant metonym enabled this argumentative tactic by drawing more attention to the term's licensing feature, as it embedded the assumption that the search should be effective. Our analysis of this argumentation demonstrates how metonyms are inference-generating tools capable of instantiating normative frameworks that establish the argumentative framework for a dispute. [ABSTRACT FROM AUTHOR]

The increasing popularity and constant evolution of mobile technologies have resulted in an increased focus in mobile device and app security and forensics research. Banking apps appear to be an understudied topic, despite their popularity with consumers. In this paper, seven Android m-banking apps in Thailand are analysed. Based on the findings of our study, we describe the forensic artefacts that could be forensically recovered from the apps, and the findings of security assessment of the apps. For example, we found that several of the apps do not implement root device detection, do not encrypt user data, or it is possible to modify the apps and install repackaged apps. [ABSTRACT FROM AUTHOR]

Different attack and defence techniques have been evolved over time as actions and reactions between black-hat and white-hat communities. Encryption, polymorphism, metamorphism and obfuscation are among the techniques used by the attackers to bypass security controls. On the other hand, pattern matching, algorithmic scanning, emulation and heuristic are used by the defence team. The Antivirus (AV) is a vital security control that is used against a variety of threats. The AV mainly scans data against its database of virus signatures. Basically, it claims a virus if a match is found. This paper seeks to find the minimal possible changes that can be made on the virus so that it will appear normal when scanned by the AV. Brute-force search through all possible changes can be a computationally expensive task. Alternatively, this paper tries to apply a Genetic Algorithm in solving such a problem. Our proposed algorithm is tested on seven different malware instances. The results show that in all the tested malware instances only a small change in each instance was good enough to bypass the AV. [ABSTRACT FROM PUBLISHER]

In this paper, a hybrid approach based on cryptography and steganography is proposed for the security of medical image over an open communication channel. In this approach, medical image information is embedded using discrete cosine transform (DCT)-singular value decomposition (SVD)-based embedding process. The medical image is encrypted using CS encryption before embedding into the standard image. This encrypted medical image is inserted into the singular values of DCT coefficients of the standard image to get the stego image. The experimental results show that the encrypted medical image is successfully extracted from the stego image under various image processing attacks at recovering side. The result analysis also shows improved imperceptibility of the stego image with a peak signal-to-noise ratio value above 60 dB for all types of medical images under consideration. Furthermore, the computation time of proposed approach is less than that of existing approaches. [ABSTRACT FROM AUTHOR]