A Novel Approach to Secure Files Using Color Code Authentication

Cet article decrit, du point de vue d'un clinicien generaliste, une solution pour l'implementation de dossiers concernant les patients en toute securite, ainsi que les strategies mises en place pour cette implementation. Cet article souligne donc l'importance de la securite pour la confidentialite de ces dossiers, mais aussi la difficulte de mettre en place un systeme de protection de l'information sur

The rapid digitalization of healthcare systems has led to an unprecedented accumulation of sensitive patient data across various platforms, exposing the industry to growing risks of data breaches, unauthorized access, and integrity compromise. Ensuring the security, privacy, and trustworthiness of healthcare data is paramount to maintaining patient confidentiality and enhancing clinical decision-making. This study proposes a conceptual framework that synergistically integrates Blockchain technology and Artificial Intelligence (AI) to enhance healthcare data security. The framework is designed to address key challenges such as data integrity, access control, real-time threat detection, and secure interoperability across healthcare stakeholders. Blockchain, with its decentralized and immutable ledger capabilities, provides a robust foundation for tamper-proof data storage and transparent audit trails. Smart contracts are employed to automate access controls and ensure compliance with regulatory requirements. AI, on the other hand, plays a critical role in intelligent threat detection and anomaly monitoring. By leveraging machine learning algorithms, the framework can identify suspicious patterns, detect insider threats, and predict potential breaches in real time. The proposed architecture comprises four core components: Secure data ingestion, blockchain-based data storage, AI-powered analytics, and a privacy-preserving access management layer. The framework also incorporates role-based authentication and homomorphic encryption techniques to enhance data privacy while supporting authorized data sharing. Case scenarios such as electronic health record (EHR) exchange and remote patient monitoring are used to demonstrate the practicality and scalability of the model. This integrated approach not only ensures the confidentiality, integrity, and availability of healthcare data but also fosters trust among patients, providers, and regulatory bodies. The framework aligns with global healthcare data standards and complies with regulations such as HIPAA and GDPR. Future directions include the deployment of federated learning models to further decentralize AI training while maintaining data privacy across institutions.

Security of Computer Networks

The rapid advancement of data in web-based communication has created one of the biggest issues concerning the security of data carried over the internet from unauthorized access. To improve data security, modern cryptosystems use substitution-boxes. Nowadays, data privacy has become a key concern for consumers who transfer sensitive data from one place to another. To address these problems, many companies rely on cryptographic techniques to secure data from illegal activities and assaults. Among these cryptographic approaches, AES is a well-known algorithm that transforms plain text into cipher text by employing substitution box (S-box). The S-box disguises the relationship between cipher text and the key to guard against cipher attacks. The security of a cipher using an S-box depends on the cryptographic strength of the respective S-box. Therefore, various researchers have employed different techniques to construct high order non-linear S-box. This paper provides a novel approach for evolving S-boxes using coset graphs for the action of the alternating group over the finite field and the symmetric group . The motivation for this work is to study the symmetric group and coset graphs. The authors have performed various analyses against conventional security criteria such as nonlinearity, differential uniformity, linear probability, the bit independence criterion, and the strict avalanche criterion to determine its high cryptographic strength. To evaluate its image application performance, the proposed S-box is also used to encrypt digital images. The performance and comparison analyses show that the suggested S-box can secure data against cyber-attacks.

In today’s digitally empowered world, confidential data protection is a bit difficult especially when the user lacks knowledge about the importance of data sanitization before discarding, selling, or donating devices with memory (storage). To protect data, generally, users encrypt files and folders, hard drives, password protect flash drives and encrypt SD card on their smartphone to avoid unauthorized access to their confidential data. But almost all of these devices are discarded, sold, or donated without proper data sanitization at the end of their life cycle. Deleted data can be easily recovered from any storage media whether it’s a USB thumb drive, HDD, SSD, SD card, etc. Interestingly, data from a formatted, encrypted, and broken or crushed storage media can also be recovered using data recovery software and services. Therefore, to protect and safeguard your confidential data from an unauthorized access, you must erase the files/folders and wipe the empty spaces (unused space) on your hard drive volume as the empty spaces might contain previously deleted sensitive and private data that can be easily recovered. This paper investigates international standards and methods of guaranteed data deletion that exist in different countries, a comparative characteristic of data deletion software. Also in this study, the method of guaranteed data deletion that has been improved due to the developed pseudorandom sequence generator develops algorithms and software for this method and conducts experimental researches of developed solutions to verify their effectiveness. The developed software module STM Shredder refers to information security particularly in Big Data concept. The results of experiments show its ability to expand the capabilities of information processing and storage systems for large files (faster by 30%).

In this paper we present PasS (Privacy as a Service); a set of security protocols for ensuring the privacy and legal compliance of customer data in cloud computing architectures. PasS allows for the secure storage and processing of users’ confidential data by leveraging the tamper-proof capabilities of cryptographic coprocessors. Using tamper-proof facilities provides a secure execution domain in the computing cloud that is physically and logically protected from unauthorized access. PasS central design goal is to maximize users’ control in managing the various aspects related to the privacy of sensitive data. This is achieved by implementing user-configurable software protection and data privacy mechanisms. Moreover, PasS provides a privacy feedback process which informs users of the different privacy operations applied on their data and makes them aware of any potential risks that may jeopardize the confidentiality of their sensitive information. To the best of our knowledge, PasS is the first practical cloud computing privacy solution that utilizes previous research on cryptographic coprocessors to solve the problem of securely processing sensitive data in cloud computing infrastructures.

Cybersecurity vulnerabilities of cardiac implantable electronic devices: Communication strategies for clinicians—Proceedings of the Heart Rhythm Society's Leadership Summit

Cyber security is critical in protecting people who use the internet through various electronic devices in their daily lives. Some causes have occurred worldwide, causing people to experience issues when connecting their devices and systems to the internet. Hackers pose a significant threat to extremely sensitive data such as biotechnology and military assets; cyber security plays a critical role in securing such data. Misuse of the internet has become a current issue in many areas of life, particularly in social media, universities, and government organizations. The Internet is extremely beneficial to students in educational institutions and employees in various organizations. People can obtain information from the internet by using an internet source. They must, however, be protected when using the internet and secure against unauthorized access. In this paper, we discussed various aspects of network security and cyber security in the modern era. We also attempted to cover threats in organizational intranets.

In the cancerology domain, we were brought to make periodic mammography images to monitor tumor patients. Oracle Database Management system (DBMS) is a solution to manage these images with patient's data recorder. Knowing the large size of medical images of mammograms, the Oracle DBMS saves these images outside the Oracle database using external LOBs. The link between these images and Oracle is done through the BFILE. At this level, two problems are raised: the first problem is that access to these images can become impossible because the link is likely to be broken. The second problem is security, the fact that the images are saved outside the Oracle database, they do not benefit from its powerful security. The protection of the integrity and confidentiality of data and patient images are a necessity defended by laws and they must be preserved against any unauthorized access, alteration or destruction. In this paper, we propose the method of reversible watermarking technique based on the difference expansion to resolve these two problems and explore its use in search and retrieval strategy of images.

In the modern world, the security of the digital image is vital due to the frequent communication of digital products over the open network. Accelerated advancement of digital data exchange, the importance of information security in the transmission of data, and its storage has emerged. Multiple uses of the images in the security agencies and the industries and the security of the confidential image data from unauthorized access are emergent and vital. In this paper, Bose Chaudhary Hocquenghem (BCH) codes over the Galois field are used for image encryption. The BCH codes over the Galois field construct MDS (maximum distance separable) matrices and secret keys for image encryption techniques. The encrypted image is calculated, by contrast, correlation, energy, homogeneity, and entropy. Histogram analysis of the encrypted image is also assured in this paper. The proposed image encryption scheme's security analysis results are improved compared to the original AES algorithm. Further, security agencies can utilize this work for their confidential image data.

OBJECTIVE. There are few articles in the literature describing the security and safety aspects of networked medical equipment in radiology departments. Most radiologists are unaware of the security issues. We review the security of the networked medical equipment of a typical radiology department. MATERIALS AND METHODS. All networked medical equipment in a radiology department was scanned for vulnerabilities with a port scanner and a network vulnerability scanner, and the vulnerabilities were classified using the Common Vulnerability Scoring System. A network sniffer was used to capture and analyze traffic on the radiology network for exposure of confidential patient data. We reviewed the use of antivirus software and firewalls on the networked medical equipment. USB ports and CD and DVD drives in the networked medical equipment were tested to see whether they allowed unauthorized access. Implementation of the virtual private network (VPN) that vendors use to access the radiology network was reviewed. RESULTS. Most of the networked medical equipment in our radiology department used vulnerable software with open ports and services. Of the 144 items scanned, 64 (44%) had at least one critical vulnerability, and 119 (83%) had at least one high-risk vulnerability. Most equipment did not encrypt traffic and allowed capture of confidential patient data. Of the 144 items scanned, two (1%) used antivirus software and three (2%) had a firewall enabled. The USB ports were not secure on 49 of the 58 (84%) items with USB ports, and the CD or DVD drive was not secure on 17 of the 31 (55%) items with a CD or DVD drive. One of three vendors had an insecure implementation of VPN access. CONCLUSION. Radiologists and the medical industry need to urgently review and rectify the security issues in existing networked medical equipment. We hope that the results of our study and this article also raise awareness among radiologists about the security issues of networked medical equipment.

Security is the most challenging aspects in the internet and network application. These days the applications like Internet and networks are growing very fast, thereby the importance and the value of the exchanged data over the internet or other media types are increasing. While transmitting any confidential information across network, some unauthorized user tend to steal or corrupt the data. To prevent this interruption, security of data is needed. As data security is needed for protecting data from unauthorized users and destructive forces, some security techniques are used. Encryption is one such technique which is used to protect the database from unauthorized accesses and unwanted actions of external clients. It is used to secure the confidential information from unauthorized user by converting the data in to that format that is only understandable by the authorized receiver that knows the respective decryption to obtain the original data or information. In this paper, our focus will be on Database Security, as databases are considered as the storehouses of data. Generally, data of an organization or a company is stored in databases and is very crucial to the organization. Today, most of the organizations allow their clients to use their services (online banking, online shopping etc) by accessing their databases. This leads to a requirement of high level security to deal with information attackers. An information attacker tries to illegally acquire or modify the highly confidential data of the organization. An innovative approach for database security using Hill Cipher encryption & decryption method is proposed. This cryptography based approach provides an additional level of security to the database systems. Important data or information crucial to the organization should be secured from illegal theft and attacks. This encryption scheme completely is based on key matrix that a organization decides before encryption and decryption. In this proposed scheme a common key is used to encrypt the data items. Keywords: Database, Data security, Encryption, Decryption, Hill Chiper Algorithm.

Hospital Information System (HIS) is a comprehensive, integrated information system designed to manage the administrative, clinical and support aspects of a hospital. It provides numerous advantages in patient care and hospital management. With the advancement in technology and cost effective solutions, HIS adoption among the hospitals has increased substantially in recent years. Various project management tools are available which helpful in effective planning and project monitoring. In spite of effective planning and implementation in phase manner, the concern remains regarding the challenges faced during implementation and usage of HIS. These challenges includes Technical Challenges like Security of Data, Unauthorized access, confidential information, integration of Medical Softwares to avoid duplicate entry and Administrative Challenges like involvement of stakeholders, user acceptance, lack of ownership etc. This can be subdued either by utilization of data entry operators or through offline and duplicate entries, but such implementation does not achieve the purpose of HIS. Apart from good project management, there are various other factors such as involvement of users, effective trainings, awareness program, secure and role based application, compliance to industry standards for easily integration with other applications etc., which increase success factor of implementation. This paper presents the challenges faced in implementation of HIS in super specialty hospital, Postgraduate Institute of Medical Education and Research, Chandigarh (PGIMER) and strategies adapted to overcome them.

Protecting enterprise’s confidential data and infrastructure against adversaries and unauthorized accesses has been always challenging. This gets even more critical when it comes to smartphones due to their mobile nature which enables them to have access to a wide range of sensitive information that can be misused. The crucial questions here are: How the employees can make sure the smartphone apps that they use are trustworthy? How can the enterprises check and validate the trustworthiness of apps being used within the enterprise network? What about the security and privacy aspects? Are the confidential information such as passwords, important documents, etc. are treated safely? Are the employees’ installed apps monitoring/spying the enterprise environment? To answer these questions, we propose Enterprise Smartphone Apps Risk Assessment (ESARA) as a novel framework to support and enable enterprises to analyze and quantify the potential privacy and security risks associated with their employees’ installed apps. Given an app, ESARA first conducts various analyses to characterize its vulnerabilities. Afterwards, it examines the app’s behavior and overall privacy and security perceptions associated with it by applying natural language processing and machine learning techniques. The experimental results using app behavior and perception analyses indicate that: (1) ESARA is able to examine apps’ behavior for potential invasive activities; and (2) the analyzed privacy and security perceptions by ESARA usually reveal interesting information corresponding to apps’ behavior achieved with high accuracy.

Objectives Traditional methods for solving the problem of protecting the information resource of electronic document management systems based on protective basic functions (identification, authentication and verification of users, etc.) of available tools and information security subsystems have a significant drawback - inefficiency when an attacker masters the password of regular users. In order to eliminate it, it is necessary to develop new methods related to managing the weakly vulnerable process of delimiting user access not only to confidential information, but also to the software of the electronic document management system.Method One way to solve this problem is to use the modified “soft administration” method, which consists in automatically generating lists of allowed source files in the authorization matrix by reducing the lists and comparing file integrity functions with a reference list for an existing software package. This allows you to automate the process of developing access control rules and provide management of the weakly vulnerable process of access control to software tools of the electronic document management system.Result A verbal model is developed for automated control of a weakly vulnerable process of differentiating access to software tools of an electronic document management system, and a system of performance indicators for the functioning of a promising subsystem for protecting confidential information characterizing it as a control object is proposed.Conclusion The presented verbal model provides for the possibility of distributed control, in which the security administrator directly controls the specified process using a remote software tool. The formation (change) of the authority establishment matrix for managing a weakly vulnerable process of access control using a promising subsystem for protecting confidential information and the development of a system of indicators to comprehensively evaluate the effectiveness of its functioning is one of the most important tasks of protecting information from unauthorized access, guaranteeing the implementation of a security policy throughout the entire operation period secure electronic document management system.