2019 International Conference on Cyber Security and Internet of Things (ICSIoT)最新文献

ID-Based Outsourced Plaintext Checkable Encryption in Healthcare Database 医疗保健数据库中基于id的外包明文可校验加密

2019 International Conference on Cyber Security and Internet of Things (ICSIoT) Pub Date : 2019-05-01 DOI: 10.1109/ICSIoT47925.2019.00016

S. Alornyo, Evans Aidoo, Kingsford Kissi Mireku, Benjamin Kwofie, Xiong Hu, M. Asante

引用次数: 3

Cyber Threat Intelligence for Improving Cyber Supply Chain Security 提高网络供应链安全的网络威胁情报

2019 International Conference on Cyber Security and Internet of Things (ICSIoT) Pub Date : 2019-05-01 DOI: 10.1109/ICSIoT47925.2019.00012

Abel Yeboah-Ofori, Shareeful Islam, E. Yeboah-Boateng

{"title":"Cyber Threat Intelligence for Improving Cyber Supply Chain Security","authors":"Abel Yeboah-Ofori, Shareeful Islam, E. Yeboah-Boateng","doi":"10.1109/ICSIoT47925.2019.00012","DOIUrl":"https://doi.org/10.1109/ICSIoT47925.2019.00012","url":null,"abstract":"Cyber supply chain (CSC) systems provide operational efficiency and business continuity due to the integrated nature of various network system nodes. Such integration has made the overall system vulnerable to various cyber attacks and malware propagation is one of the common attacks for CSC. Cyber threat intelligence (CTI) provides an organization the capability to identify, gather, analyze threats and the associated risks so that CSC organization can forecast the existing and future threat trends and manage the cybersecurity risk in a proactive manner. A threat actor may attack the system and propagate a malware. The purpose is to manipulate, alter, or change delivery mechanisms. It is imperative to integrate CTI into the existing cybersecurity practice to detect and understand the threat actor's intents and motive. In our previous paper, we used threat analysis gathering to provide us an understanding of the adversaries' capabilities, actions, and intents. This paper contributes to improving the cybersecurity of CSC by using CTI. In particular, we extend our previous work which identifies and analysis CSC attacks and adopts CTI approach to understand the attack trends so that appropriate control can determine proactively. We use the malware a smart grid case study as CSC context to demonstrate our approach. The result demonstrations how CTI approach is applied to assist in preventing cyberattacks and to disseminate threat information sharing.","PeriodicalId":226799,"journal":{"name":"2019 International Conference on Cyber Security and Internet of Things (ICSIoT)","volume":"124 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128470725","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

IoT Node-Node Secure Communication Using RIPEMD-128 and DES 使用RIPEMD-128和DES的物联网节点安全通信

2019 International Conference on Cyber Security and Internet of Things (ICSIoT) Pub Date : 2019-05-01 DOI: 10.1109/ICSIoT47925.2019.00018

Kester Quist-Aphetsi, B. Asare, Laurent Nana

{"title":"IoT Node-Node Secure Communication Using RIPEMD-128 and DES","authors":"Kester Quist-Aphetsi, B. Asare, Laurent Nana","doi":"10.1109/ICSIoT47925.2019.00018","DOIUrl":"https://doi.org/10.1109/ICSIoT47925.2019.00018","url":null,"abstract":"Internet of things (IoT) is believed to be the greatest thing that came along with the birth of the internet 4.0. IoT security is a growing concern that have received a lot of research interest in recent times. IoT security covers these four critical areas: Device or hardware, Communications, Cloud, and Life cycle management. At each level of these security protocols are breaches that continue to threaten the continuous adoption and use of this pervasive technology that homes, organizations and Governments use towards collecting, analysing and decision making in most cases. The concept of Internet of Things-IoT describes the environment where devices connect with each other to communicate, collect, store sensor data to the cloud. The sensor data is then processed and analyzed towards describing valuable information. IoT solutions support domestic, industrial, and Governmental installations for the monitoring of environmental data, health monitoring, control and management of household appliances, weather recording and forecasting, and the like. Loosely speaking, Internet of Things - IoT concerns itself with the interconnectedness of embedded devices and the internet for the purpose of collecting, recording, analyzing and sharing of sensor data using sensors, actuators, and Radio frequency Identifiers - RFID. The Race Integrity Primitive Evaluation Message Digest (RIPEMD 128) and Data Encryption Standards (DES) were used to achieve the ultimate goal of providing improved security for end-end encryption for secured communications within IoT systems. The authors proposed a combined approach with the use of a cryptographic algorithm and a hash function to increase security for IoT node-node communications.","PeriodicalId":226799,"journal":{"name":"2019 International Conference on Cyber Security and Internet of Things (ICSIoT)","volume":"159 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128891756","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Factors Influencing Information Security Policy Compliance Behavior 影响信息安全策略遵从行为的因素

2019 International Conference on Cyber Security and Internet of Things (ICSIoT) Pub Date : 2019-05-01 DOI: 10.1109/ICSIoT47925.2019.00015

John Agyekum Addae, Grace Simpson, George Oppong Appiagyei Ampong

引用次数: 2

Validating of Digital Forensic Images Using SHA-256 使用SHA-256的数字取证图像验证

2019 International Conference on Cyber Security and Internet of Things (ICSIoT) Pub Date : 2019-05-01 DOI: 10.1109/ICSIoT47925.2019.00028

Kester Quist-Aphetsi, Isaac Baffour Senkyire

引用次数: 1

Mobile Money Wallet Security against Insider Attack Using ID-Based Cryptographic Primitive with Equality Test 基于id密码原语的手机钱包防内部攻击安全性及等式检验

2019 International Conference on Cyber Security and Internet of Things (ICSIoT) Pub Date : 2019-05-01 DOI: 10.1109/ICSIoT47925.2019.00021

S. Alornyo, Kingsford Kissi Mireku, Abraham Tonny-Hagan, Xiong Hu

引用次数: 4

Malware Attack Predictive Analytics in a Cyber Supply Chain Context Using Machine Learning 基于机器学习的网络供应链恶意软件攻击预测分析

2019 International Conference on Cyber Security and Internet of Things (ICSIoT) Pub Date : 2019-05-01 DOI: 10.1109/ICSIoT47925.2019.00019

Abel Yeboah-Ofori, C. Boachie

{"title":"Malware Attack Predictive Analytics in a Cyber Supply Chain Context Using Machine Learning","authors":"Abel Yeboah-Ofori, C. Boachie","doi":"10.1109/ICSIoT47925.2019.00019","DOIUrl":"https://doi.org/10.1109/ICSIoT47925.2019.00019","url":null,"abstract":"Due to the invincibility nature of cyber attacks onthe cyber supply chain (CSC), and the cascading effects ofmalware infections, we use machine learning to predictattacks. As organizations have become more reliant on CSCsystems for business continuity, so are the increase invulnerabilities and the threat landscapes. Some traditionalapproach to detecting and defending malware attack haslargely been antimalware or antivirus software such asspam filters, firewall, and IDS/IPS. These tools largelysucceed, however, as threat actors get more intelligent, theyare able to circumvent and affect nodes on systems whichthen propagates. In our previous work, we characterizedthreat actor activities, including presumed intent andhistorically observed behaviour, for the purpose ofascertaining the current threats that could be exploited. Inthis paper, we use ML techniques to learn dataset andpredict which CSC nodes have detection or no detection. The purpose is to predict which modes are venerable tocyberattacks and for predicting future trends. Todemonstrate the applicability of our approach, we used adataset from Microsoft Malware Prediction website. Further, an ensemble is used to link Logistic Regression, and Decision Tree and SVM algorithms in Majority Votingand run on the training data and then use 10-fold crossvalidation to test the parameter estimation, accurate resultsand predictions. The results show that ML algorithms inDecision Trees methods can be used in cyber supply chainpredict analytics to detect and predict future cyber attacktrends.","PeriodicalId":226799,"journal":{"name":"2019 International Conference on Cyber Security and Internet of Things (ICSIoT)","volume":"40 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123915575","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 11

A Hybrid Data Logging System Using Cryptographic Hash Blocks Based on SHA-256 and MD5 for Water Treatment Plant and Distribution Line 一种基于SHA-256和MD5加密哈希块的混合数据记录系统

2019 International Conference on Cyber Security and Internet of Things (ICSIoT) Pub Date : 2019-05-01 DOI: 10.1109/ICSIoT47925.2019.00009

Kester Quist-Aphetsi, Henry Blankson

引用次数: 4

Relativism Digital Forensics Investigations Model: A Case for the Emerging Economies 相对主义数字取证调查模式:以新兴经济体为例

2019 International Conference on Cyber Security and Internet of Things (ICSIoT) Pub Date : 2019-05-01 DOI: 10.1109/ICSIoT47925.2019.00023

Abel Yeboah-Ofori, E. Yeboah-Boateng, Herbert Gustav Yankson

{"title":"Relativism Digital Forensics Investigations Model: A Case for the Emerging Economies","authors":"Abel Yeboah-Ofori, E. Yeboah-Boateng, Herbert Gustav Yankson","doi":"10.1109/ICSIoT47925.2019.00023","DOIUrl":"https://doi.org/10.1109/ICSIoT47925.2019.00023","url":null,"abstract":"Digital forensic investigations (DFI) is a process of investigating computers and its associated media to determine whether it has been used to commit a crime or gain unauthorized access. cyberattacks and cybercrimes can be committed globally but reported locally. However, DFI processes vary relative to a particular jurisdiction. Relativism is the perception of universal norms of what is right and wrong or legal and illegal. Although cybercrimes are illegal, what constitutes illegal is relative to a jurisdiction. Cyber espionage attacks may be considered legal or illegal based on economic advantage for someone or as target for attack based on motive and intent. Further, following legal procedures in evidence gathering at a digital crime scene is critical for prosecution. However, there are challenges in gathering evidence using the existing DFI models on all attacks. UNODC, report on the globalization of cybercrimes highlighted the challenges of cybercrime and ranked some emerging economies among the first 10 offending nations globally. There are existing models that are specific to certain jurisdictions and assist the judiciary, law enforcement agencies, and forensic experts. Consequently, presenting digital forensic evidence in court has proved to be challenging, due to a lack of procedures and DFI models specific to emerging economies. In this paper, we identify the phase that is relevant and could facilitate DFI processes from emerging economies' perspective. Further, we review some existing models to determine their relative procedures. This paper does not negate existing models, rather derives a relative model from existing models. We propose a model that will improve the DFI process from the result of the evaluation with inference from international standards.","PeriodicalId":226799,"journal":{"name":"2019 International Conference on Cyber Security and Internet of Things (ICSIoT)","volume":"245 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132649301","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Decentralized Distributed Blockchain Ledger for Financial Transaction Backup Data 分布式区块链账本，用于金融交易备份数据

2019 International Conference on Cyber Security and Internet of Things (ICSIoT) Pub Date : 2019-05-01 DOI: 10.1109/ICSIoT47925.2019.00013

Michael Christopher Xenya, Kester Quist-Aphetsi

引用次数: 5