{"title":"Post-quantum cryptographic algorithm identification using machine learning","authors":"B. S. Rocha, J. A. Xexéo, Renato Hidaka Torres","doi":"10.17648/jisc.v9i1.81","DOIUrl":"https://doi.org/10.17648/jisc.v9i1.81","url":null,"abstract":"This research presents a study on the identification of post-quantum cryptography algorithms through machine learning techniques. Plain text files were encoded by four post-quantum algorithms, participating in NIST's post-quantum cryptography standardization contest, in ECB mode. The resulting cryptograms were submitted to the NIST Statistical Test Suite to enable the creation of metadata files. These files provide information for six data mining algorithms to identify the cryptographic algorithm used for encryption. Identification performance was evaluated in samples of different sizes. The successful identification of each machine learning algorithm is higher than a probabilistic bid, with hit rates ranging between 73 and 100%.","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-12-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122582894","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Nicolas Airoza Telles de Menezes, Flávio Luis de Mello
{"title":"Flow Feature-Based Network Traffic Classification Using Machine Learning","authors":"Nicolas Airoza Telles de Menezes, Flávio Luis de Mello","doi":"10.17648/jisc.v8i1.79","DOIUrl":"https://doi.org/10.17648/jisc.v8i1.79","url":null,"abstract":"Reliable network traffic classification is essential to management and security tasks. Therefore, it is beneficial to analyze and improve existing techniques. Some of the most traditional methodologies for traffic classification are based on port number and packet payload, each of which presents an increasing set of problems. Port number-based classification techniques suffer from the misuse of port numbers and tunneling. This is primarily due to their reliance on the proper use of IANA (Internet Assigned Numbers Authority) assigned numbers. On the other hand, packet payload-based classification has difficulty dealing with encrypted data and legal restrictions to accessing user data. Flow feature-based classification canovercome these challenges by creating profiles based on the traffic patterns of applications. Furthermore, machine learning techniques have shown to be a good match for traffic classification. Thus, the goal of this paper is to explore the combination of these fields and to develop a set of machine learning models capable of classifying network traffic based on flow features. This was achieved by using a ready to use dataset to train two supervised and one unsupervised clustering model.The results for the supervised classifiers were considered comparable to similar studies, while the performance of the clustering model was found to be not satisfactory.","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"38 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-12-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125554593","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
E. T. Ueda, Marcelo Moro Da Silva, Anderson Aparecido Alves da Silva, N. Junior, Fábio Dacêncio Pereira, Alessandro Santiago dos Santos, A. Guelfi, S. Kofuji
{"title":"A Proposed Blockchain-Based Voting System with User Authentication through Biometrics","authors":"E. T. Ueda, Marcelo Moro Da Silva, Anderson Aparecido Alves da Silva, N. Junior, Fábio Dacêncio Pereira, Alessandro Santiago dos Santos, A. Guelfi, S. Kofuji","doi":"10.17648/jisc.v8i1.78","DOIUrl":"https://doi.org/10.17648/jisc.v8i1.78","url":null,"abstract":"Transparency and security in an electoral process are fundamental to the legitimacy of the results and the confidence of voters. Thus, it is necessary to assess opportunities to improve traditional voting systems. Among the main problems is the lack of transparency, due to the impossibility of a voter checking their vote and the lack of access to the source from which the results are obtained. Another problem is mobility, due to the impossibility of performing remote voting, as traditional voting systems continue to require the physical presence of the voter in an electoral zone. Thus, the objective of this work is to propose a voting system that is functional, transparent, safe, and accessible to everyone. Voters can vote through a mobile application with biometric authentication using fingerprint and password access. In our proposal, votes are registered in an Ethereum Blockchain through a Smart Contract, allowing the voter to check their vote. The results are expected to collaborate with the evolution of studies necessary to improve traditional voting systems, especially in fundamental aspects such as security, transparency, and mobility.","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"60 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-09-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121743980","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
E. T. Ueda, Marco Tulio Manso Vieira, A. Guelfi, Anderson Aparecido Alves da Silva, Marcelo Teixeira de Azevedo, Lincoln Marcellos, S. Kofuji
{"title":"Enhancement of DNSSec: Including Confidentiality to Name Resolution","authors":"E. T. Ueda, Marco Tulio Manso Vieira, A. Guelfi, Anderson Aparecido Alves da Silva, Marcelo Teixeira de Azevedo, Lincoln Marcellos, S. Kofuji","doi":"10.17648/jisc.v7i1.77","DOIUrl":"https://doi.org/10.17648/jisc.v7i1.77","url":null,"abstract":"DNS is one of the pillars of the Internet, understanding of functioning, performance and efficiency is paramount in building a name-resilient infrastructure that is responsive and resilient. The purpose of this work is to demonstrate that although DNSSEC provides integrity and reliability to the protocol, the question of ensuring that the DNS service that responded to the request is a valid DNS service, queries are still performed in plaintext, thus enabling monitoring and consequently access to all queries and metadata inherent to them by an attacker, that is, there is no confidentiality. We will demonstrate using protocols that are in development such as DNSCrypt, DNS over TLS and DNS over HTTPS, the feasibility of using encryption between the DNS client and the recursive server, thus guaranteeing DNS queries with a slightly longer latency, but within acceptable limits for practical use by a user.","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"209 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-08-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116155480","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"FlexAEAD v1.1 -A Lightweight AEAD Cipher with Integrated Authentication","authors":"Eduardo Marsola do Nascimento, J. A. Xexéo","doi":"10.17648/jisc.v6i1.74","DOIUrl":"https://doi.org/10.17648/jisc.v6i1.74","url":null,"abstract":"This paperdescribes a symmetrical block cipher family – FlexAEAD v1.1. This is an updated version of the work presented as round 1 candidate on the contest for NIST lightweight crypto standardization process. It was engineered to be lightweight, consuming less computational resources than other ciphers and to work with different block and key sizes. Other important characteristic is to integrate the authentication on its basic algorithm. This approach is helps to reduce the resource needs. The algorithm capacity to resist against linear and different cryptanalysis attacks was evaluated. The FlexAEAD also supports the authentication of the Associated Data (AD). The version 1.1 makes the algorithm resistant to iterated differential attacks. It also resolves a padding attack on the AD that allowed messages to have the same tag if the last AD block was filled with zeros.","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"203 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-11-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134097599","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Stories Behind a Minuscule Chinese Chip","authors":"Pedro A. D. Rezende","doi":"10.17648/JISC.V6I1.73","DOIUrl":"https://doi.org/10.17648/JISC.V6I1.73","url":null,"abstract":"We begin by examining the context of a political media campaign launched in October of 2018 in the scope of the North Atlantic Treaty Organization military alliance, aimed at disseminating among IT managers, with backing from general public opinion, perceptions of new risks in the use of electronic microchips fabricated by Chinese companies, for use in sensitive computational platforms. We then contrast theses actions, which occur at the intersection of psychological and informational cyber fronts of the contemporary form of warfare (hybrid, 4th generation), with a similar type of risks inherent to the model for informatization of the federalized electoral process in Brazil, chosen more than twenty years ago and since frozen. Such contrast signals the presence of some form of geopolitical and/or ideological filtering, active in the mapping and evaluation of risks through scientific, legal and lay narratives on cibersecurity, regarding either embedded systems for military use, such as in weapons’ controls, or for civilian purposes, such as in electronic voting systems.","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"322 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-03-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116232541","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A Fuzzy Model for Knowledge Base IoT Information Security Evaluation","authors":"Flávio Luis de Mello","doi":"10.17648/JISC.V5I1.66","DOIUrl":"https://doi.org/10.17648/JISC.V5I1.66","url":null,"abstract":"Internet of Things (IoT) accelerating growth exposes many unsecured issues related to the design and the usage of network integrated devices. This paper presents a fuzzy evaluation method, based on both IOT hardware/software developers’ and users’ knowledge, creating an novel model to aid correctness actions over security procedures, in order to increase the IOT safeness usage. This method combines both the developer’s and user’s perspectives, creating an integrated adaptive evaluation attached to the Information Technology security standards and best practices guidelines. The proposed evaluation method is divided by categories, each one composed of security control clauses and their corresponding action recommendation. The user perspective of such evaluation method was applied into a service company, and the developer perspective was defined by an IoT device manufacturer. The obtained results have shown that the evaluation method enhances both the manufacturer security awareness and the IOT users experience in the improvement of security IoT issues.","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-01-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129991830","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"BYOD with Security","authors":"Ulysses Moreira Neves, Flávio Luis de Mello","doi":"10.17648/JISC.V5I1.70","DOIUrl":"https://doi.org/10.17648/JISC.V5I1.70","url":null,"abstract":"The concern of companies to keep sensitive data protected from improper access and information leaking has grown a lot. The constant cases of industrial espionage and information leakage regarding companies are an evidence of the need to apply strict information security policies, improve data protection and allow an auditing track. With the evolution of technology, the usage of personal mobile devices increased in organizations (BYOD - Bring Your Own Device), which allows the employees to use their own mobile devices at work. This paper addresses the current challenges faced by IT companies and teams in protecting access to this kind of information, and what strategies are used to mitigate, to track leaks, and reduce the misuse of documents in the organization. Considering the scenario evaluated, a framework with good Information Security practices based on the ISO 27002:2005 and the practical controls of the Center of Internet Security (CIS) is proposed, associating good practices with the needs of BYOD’s culture. The framework suggested in this paper reinforces the necessity for a standardization of the rules of information security in the process of adoption of BYOD’s culture, following the life cycle of the user with his personal mobile device in the company. ","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"77 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-01-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128326420","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Click Fraud Detection and Prevention System for Ad Networks","authors":"Paulo Henrique Soares de Almeida, J. Gondim","doi":"10.17648/JISC.V5I1.71","DOIUrl":"https://doi.org/10.17648/JISC.V5I1.71","url":null,"abstract":"Click fraud detection consists of identifying the intention behind received clicks, given only technical data and context information. Reviewing concepts involved in click fraud practices and related work, a system that detects and prevents this type of fraud is proposed and implemented. The system is based and implemented on an ad network, one of the 3 main agents in the online ad environment, and for its validation, 3 servers were used, representing the publisher, the ad network with the system implemented and the announcer, and a bot that attempts to commit a click fraud.","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"3 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-01-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121065792","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
M. Coutinho, T. C. S. Neto, R. D. O. Albuquerque, Rafael Timóteo de Sousa Júnior
{"title":"Cryptanalysis of Kowada-Machado key exchange protocol","authors":"M. Coutinho, T. C. S. Neto, R. D. O. Albuquerque, Rafael Timóteo de Sousa Júnior","doi":"10.17648/ENIGMA.V4I1.64","DOIUrl":"https://doi.org/10.17648/ENIGMA.V4I1.64","url":null,"abstract":"A non-interactive key exchange (NIKE) protocol allows N parties who know each other’s public key to agree on a symmetric shared key without requiring any interaction. A classic example of such protocol for N = 2 is the Diffie-Hellman key exchange. Recently, some techniques were proposed to obtain a NIKE protocol for N parties, however, it is still considered an open problem since the security of these protocols must be confirmed. In a recent work, Kowada and Machado [1] proposed a protocol that solves the NIKE problem for N parties. However, this work found security problems in the proposed solution and implemented an efficient attack to their protocol demonstrating that their key-exchange scheme is insecure.","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"32 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-07-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116600777","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}