Search

LED is an ultra-lightweight block cipher targeting resource-constrained devices. The current hardware architectures of this cipher utilize large logic area, operate in low frequencies and have low throughput. To improve the trade-offs between area utilization and performance, an iterative round-based architecture of LED block cipher is implemented in this paper. LED algorithm is available in 64-bit and 128-bit key sizes. In this paper, the focus is on the 64-bit key with 64-bit block size. This algorithm is implemented on various Field Programmable Gate Array (FPGA) devices. The design is verified on several Altera and Xilinx devices using Altera Quartus II, ModelSim and Xilinx ISE simulators. Both low-cost and high-end FPGA devices were targeted. Tradeoffs between area and performance were considered, with the optimization for performance. The throughput and maximum operating frequency are benchmarked with the existing literature and better performance is achieved. The results show large improvements in maximum operating frequency and throughput as well as reduction in area utilization compared to recent designs of round-based LED block cipher.

Robot communication is an essential element in robot operation. There are several protocols that serve robot communication applications, but the protocols used are not optimized for mobile and battery-operated robots. To operate in such condition, an optimized protocol for such environment must be used. This paper will evaluate Constrained Application Protocol (CoAP) and MQ Telemetry Transport for Sensor Nodes (MQTT-SN) which are designed for such devices. Result from experiment shows that MQTT-SN performs 30% faster than CoAP when transmitting the same payload.

Internet of Things (IoT) will change how we interact with our physical world. It will enable total sensing and controlling of most of the things around us. However, the practical acceptance of IoT from the market determine by the level of confidence perceived by the user. This is why IoT security is the main issues or concern of real IoT deployment. IoT security need light encryption engine that makes the encryption process very fast and efficient. Here we simulate the implementation of lightweight block cipher on VHDL that can be further realized on real hardware in the form of ASIC or FPGA chips. The results are compared from three points of views, security, physical size on hardware. Achieving the balance between these 3 areas is the key success of efficient cryptography implementation for IoT systems.

This study discusses a method to secure Message Queuing Telemetry Transport-Sensor network (MQTT-SN). MQTT-SN is a popular data communication protocol used in developing IoT applications and can be secured by augmenting it with a security scheme. In this work, several lightweight encryption schemes to be used in tandem with MQTT-SN were tested and analysed. The best algorithm is identified based on the speed of encryption and overall power consumption when implemented in IoT environment. It was found that L-BLOCK is the overall performer in securing MQTT-SN and should be highly considered when developing IoT applications.

Revolution of Fourth Generation, 4G Network communication in the recent technology that introduce the Long Term Evolution (LTE) technology enable users to get the high speed data up to 100 MHz. The issue of the security in cyber-world was become a threat to the users worldwide. The LTE security concept will be discussed in this paper and also review some papers from other researchers. Initial results of the research using IPsec with tunnel are exposed to show the ability of security features in the internetworking to overcome any threat.

Embedded systems of today are being designed to be highly reliable, to respond to real-time system demands, to have functional flexibility and most importantly to run on low power sources. These ubiquitous systems are nowadays being employed to handle highly sensitive data including global positioning, health, banking and personal data. Based on these trends, the demands on their security mechanism have increased, not only because of newly emerging threats that embedded systems face but also due to the power resource constraints that compels the revisiting of the security approach. Lightweight cryptosystems becomes a feasible option and in this work we implement two lightweight algorithms namely PRESENT and Clefia, together with their counterpart well-known symmetric encryption algorithms AES and 3DES, on a dual core ARM-based system-on-chip (SoC) platform. We observe the dynamics of implementing the algorithms on such a device and study its performance. The implementation was carried out by means of standalone bare metal software implementation that executes directly on the dual core ARM CPU. The result is presented and compared to normal PC-based Linux implementation.

Recently, the HTTP based Botnet threat has become a serious challenge for security experts as Bots can be distributed quickly and stealthily. With the HTTP protocol, Bots hide their communication flows within the normal HTTP flows making them more stealthy and difficult to detect. Furthermore, since the HTTP service is being widely used by the Internet applications, it is not easy to block this service as a precautionary measure and other techniques are required to detect and deter the Bot menace. The HTTP Bots periodically connect to particular web pages or URLs to get commands and updates from the Botmaster. In fact, this identifiable periodic connection pattern has been used in several studies as a feature to detect HTTP Botnets. In this paper, we review the current studies on detection of periodic communications in HTTP Botnets as well as the shortcomings of these methods. Consequently, we propose three metrics to be used in identifying the types of communication patterns according to their periodicity. Test results show that in addition to detecting HTTP Botnet communication patterns with 80% accuracy, the proposed method is able to efficiently classify communication patterns into several periodicity categories.

This paper describes about a framework for secure assignment of virtual application from server to client. The server is a gateway to many applications, which the client can utilize it by requesting the server through the client’s interface. The communication of this system is based on trust, where the Trusted Platform Module plays main role in communication part of this framework. Client machine applies virtualization technology, which is used to run the virtual application downloaded from the server.

Microkernels have been developed to minimize the size of software that needs to run in privileged CPU mode. It provides a minimal set of general hardware abstractions and able to implement an operating system with a high level of reliability and security. In L4 microkernel, the creation of address spaces, thread and inter process communication as fundamental abstraction is important in the development and running of any process. One way to create a process application is by using Dresden real-time operating system (DROPS) as a collection of packages on L4 environment. L4 exist with various versions and implementations and L4/Fiasco is mentioned to be the most stable version currently available. This paper describes the implementation of a simple encryption called AES256 on L4. It details the process and flow of setting up the environment, developing the application as well as executing the successfully compiled binaries.

The Netflow version 9 is the latest Netflow version introduced by CISCO for the network monitoring and analysis purposes. Then come IPFIX that defined by IETF to overcome problem in Netflow version 9 and to enhance a few aspect of network flow capturing and filtering. It cooperated with PSAMP (packet sampling) standard for intelligent packet sampling for flow monitoring. This research paper will introduce enhanced Netflow version 9 (e-Netflow v9) that use nProbe GPL tool. The enhanced Netflow version 9 uses existing Netflow v9 parameters with RTP and SIP plug-ins. We will introduce the overall structure of this Netflow, the experiment to compare the results and performance and the finally analysis parts to study the reliability of this e-Netflow v9.

The flow based network technology is more preferable among network researchers due to its simplicity in management and monitoring. The flow-based network promises the network administrators a lot of service on top of it. The main part of all network service application that run on top of the flow based system is the mediation part, the part that capture, hold and store the traffic information from the network flow. This paper present overall architecture of the proposed system for IP billing mediation.

Mobile computing emerged in the market for the past few years to provide solution for various platforms that range from smart phone, tablet, laptop, desktop computer, server to virtual computing systems such as cloud computing. The design approach and development of solutions for mobile computing continues to evolve in fulfilling the needs of diverse applications that run on various platforms. Recently, a new framework was introduced to provide a unified approach to resolve Security, Trust and Privacy (STP) enhancement on these platforms. This new framework emerged to enable a better way of dealing with security, trust and privacy conflicting aspects in pervasive environment such as mobile computing. This framework will be useful for system architects, engineers, designers and developers that are still struggling to create a secure, trustworthy, and privacy preserved environment to create confidence amongst users to do business transactions and collaborations especially in a more challenging environment such as cloud computing. In this paper, we discuss and propose new Secure System Architecture for strengthening surveillance activities in Wide Area using a combination of Trusted Computing (TC) via mutual attestation process to ensure integrity of components of the system, and Surveillance System. We further propose using Intel AMT chip that will generate a heartbeat pulse and transmit the signal through network interface to detect any possible physical intrusion. A failure to provide this pulse within a given time frame will trigger an action by the trusted security system for further analysis such as thievery detection.

This paper describes sum of absolute differences (SAD) algorithm to calculate optical flow function. This algorithm is used for optical flow estimation between two frames of colored photo image. The algorithm is combined with parallel processing, modern general purpose Compute Unified Device Architecture (CUDA) Graphic Processing Unit (GPU) to reduce significantly the time consumption of computation of using traditional Central Processing Unit (CPU). This algorithm is tested on real world colored photo image sequences. The performance in term of time consumption of algorithm using parallel processing (using GPU) is then compared to serial processing (using CPU).