Clustering algorithm for parallelizing software systems in multiprocessors environment

Security of Computer Networks

The wide spread of using handheld devices offers an opportunity for mobile devices to be used as a universal payment method. However, some issues impede the widespread acceptance of mobile payment; for example: privacy protection, limited capability of mobile devices, and limited bandwidth of wireless networks. In ecommerce payment, Secure Socket Layer (SSL) protocol has been used to establish a secure channel between customers and merchants to secure the payment and the order information. SSL has some disadvantages regarding customer privacy that the customer payment information is revealed to the merchant. Secure Electronic Transaction (SET) has resolved SSL protocol disadvantages by dividing order message into: 1) order information which is revealed to merchant M, 2) payment information which is revealed to Payment Gateway (PG). Both SSL and SET assume the existence of Public Key Infrastructure (PKI) where extensive computations are carried out. In mobile payment, the same protocols of ecommerce payment are used but their application is limited due to heavy computations over wireless and GSM networks. A Modified Secure Electronic Transaction (MSET) protocol is proposed to minimize the extensive computations of SET protocol through replacing time consuming public key encryption and decryption algorithms by symmetric key cryptography.

A number of features which make Java an attractive language for application development include object-orientation, support for networking, multi-threading and in-built support for security. Here we explore the Java cryptographic classes which make it possible to generate keys and both, create and verify digests and signatures. In addition, shared key and public key encryption are supported. This enables one to implement pure-Java solutions for payment protocols such as SET[1] (Secure Electronic Transaction), Millicent[2], e-checks[3] and NetBill[4]. Alternatively, E-commerce implementations based on SSL (Secure Socket Layer) are facilitated by the SSL API's. We present snippets of code for tasks such as key generation, digest/signature creation and encryption. Since these tasks are also the building blocks for a secure E-commerce payment system, we also include performance numbers that could help implementors project the load on potential bottlenecks such as payment gateways.

Security of electronic transaction over insecure communication channel is a challenging task that includes many critical areas as secure communication channel, strong data encryption technique and trusted third party to maintain the electronic database. The conventional methods of encryption in Secure Electronic Transaction can only maintain the data security. The confidential information of customer could be accessed by the unauthorized user for malicious purpose. Therefore, it is necessary to apply effective encryption methods to enhance data security as well as authentication of data communication. The multiple encryption technique provides sufficient security for electronic transactions over wireless network. In this research paper, the needs of multiple encryption technique in Secure Electronic Transaction are proposed to enhance the security of confidential data. This technique increases the data security in such a manner that unauthorized user can not access any part of information over wireless network as internet.

As security practitioners, there is a tendency to neglect performance issues. The Secure Electronic Transaction (SET) protocol is proposed as the transactional electronic commerce protocol of choice, yet it has been criticised for its complexity and denseness. This paper reports on a performance analysis of SET conducted through the development of a queueing model. The purpose of modelling SET was to predict its performance and determine which stages in the protocol are likely bottlenecks and points for optimisation when doing SET implementations. Results reveal that existing infrastructures will generally suffice for SET, financial network authorization delay directly affects performance and that transaction times are strongly dependent on the merchant and gateway processing time.KeywordsPerformanceSETElectronic commerce

Transport Layer Security (TLS) protocol aims to provide confidentiality and integrity of data across untrusted networks. TLS supports several encryption options, including the RC4 stream cipher. Recent years, there is a growing interest for the crypto researchers do cryptanalysis on RC4 algorithm, they provide a comprehensive view on the RC4 cryptanalysis. This paper presents a new method based on big data processing technique to analyze the security of RC4. We drive the powerful cluster to execute the analyzing program, which invokes the RC4 algorithm for producing the stream cipher derived from the inputted random key generated by locality-insensitive hash function with actually predictable number. With the manufactured stream cipher, the program inspects the statistical feature about the byte value distribution at each position and such feature among byte pairs. During the implementation, we parallelized our program such that it exploits the computational resources of the distributed computing system by using our own modified Mapreduce structure, then we can get the distribution derived from a huge amount of key.

Communication is the important part in any type of network for making it possible to transfer data from one node to another. Communication needs quality and security for better performance and for acceptance of users and client companies. Data integrity is quite an issue in security and to maintain that integrity we tend to improve as to provide the better encryption processes for security. In our proposed work, an innovative and practical authentication system using Diffie-Hellman and AMA (Anonymous Micro payments Authentication) are designed for micropayments in mobile data network. Through AMA the customer and the merchant can authenticate each other indirectly, at the same time the merchant doesn't know the customer's real identity. A customer can get fast micropayments not only from his local domain but also from a remote domain without increasing any burden on his mobile phone/smartcard. Diffie-Hellman Encryption Algorithm adds more security to the proposed work. Keywords: AMA, Authentication, Diffie-Helman, Provate key, Public key I. INTRODUCTION The entire field of network security is vast and in an evolutionary stage. The range of study encompasses a brief history dating back to internet's beginnings and the current development in network security. In order to understand the research being performed today, background knowledge of the internet, its vulnerabilities, attack methods through the internet, and security technology is important and therefore they are reviewed. Micropayments refer to low value financial transaction ranging from several pennies to a few dollars. At present, a large portion of electronic commerce occurring in the mobile data network belong to the category of micropayments, such as ringing tone download, news subscription, etc. Although the amount of each single transaction in micropayments is small, the number of users and transactions is large. A small percentage loss due to insecure transaction on fraud will be enlarged to a big sum. Thus, an important issue of micropayments is security. Many achievements on micropayment and its security are gained by researchers and cryptographers (3). All these can be classified into script-based, hashchain-based and macropayment-based categories. Millicent (4)(5), a scriptbased micropayment, introduces a kind of currency- scrip, which is digital money that is issued by a single vendor. It uses no public-key cryptography and is optimized for repeated micropayments to the same vendor. Its distributed approach allows a micropayment to be validated and double spending prevented without the overhead of contacting the broker online during purchase. Diffie-Hellman in SSL: Secure Sockets Layer (SSL) is a cryptographic protocol developed by Netscape in 1995. SSL V3.0 has since become the predominant method and defacto standard for securing information flow between web users and web servers. Diffie-Hellman in SSH: Secure Shell (SSH) is a protocol and program used to encrypt traffic between two computers. This is most commonly done as a secure replacement for tools like telnet, ftp and the Berkeley r commands (rlogin, rsh, etc,)

This review chapter provides an in-depth exploration of various aspects of data security, ranging from foundational principles to advanced techniques. It sheds light on the importance of maintaining confidentiality, integrity, and availability of data and presents a comprehensive overview of technologies and methodologies that can be employed to achieve robust data security. In today's digital age, ensuring the security and protection of data has become paramount. This research chapter explores various topics related to data security, including confidentiality, integrity, and availability. It also delves into the role of blockchain technology, zero-trust architecture, secure coding practices, legal and ethical considerations, homomorphic encryption, secure multi-party computation, hash functions and digital signatures, secure communication protocols, cryptocurrency and blockchain security, as well as cryptanalysis and side-channel attacks.It highlights various techniques and technologies that can be employed to protect data confidentiality, including encryption and access control mechanisms. Blockchain technology has emerged as a groundbreaking solution for enhancing data security. Zero-trust architecture challenges traditional security models by adopting a holistic and dynamic approach to data protection. Secure coding practices and DevSecOps play a vital role in developing secure software applications. The chapter investigates the importance of integrating security measures throughout the software development lifecycle. It emphasizes the adoption of secure coding practices and the implementation of DevSecOps methodologies to build resilient and secure software systems. Legal and ethical considerations are crucial when addressing data security. Homomorphic encryption and secure multi-party computation are advanced cryptographic techniques that allow data to be processed securely while encrypted. The chapter examines the principles and applications of these techniques, highlighting their significance in scenarios where privacy is paramount. Hash functions and digital signatures form the backbone of data authentication and integrity. The chapter discusses the properties and applications of hash functions and digital signatures in verifying the integrity and authenticity of data. Secure communication protocols are essential for protecting data during transmission. The chapter explores various secure communication protocols, such as Transport Layer Security (TLS), and examines their role in ensuring data confidentiality, integrity, and authenticity. Cryptocurrency and blockchain security focus on the secure storage and transfer of digital assets. The research chapter investigates the security considerations specific to cryptocurrencies and explores how block chain technology can mitigate vulnerabilities and ensure the trustworthiness of transactions. Cryptanalysis and side-channel attacks are threats to cryptographic systems. The chapter discusses these attack techniques, highlighting their potential risks and the measures that can be taken to counter them.

Payment transactions in the SET (Secure Electronic Transaction) protocol are described. Requirements for SET are discussed and formally represented in a version of NPATRL (the NRL Protocol Analyzer Temporal Requirements Language). NPATRL is language for expressing generic requirements, heretofore applied to key distribution or key agreement protocols. Transaction vectors and other new constructs added to NPATRL for reasoning about SET payment transactions are described along with properties of their representation.KeywordsCryptographic ProtocolAction SymbolPurchase AmountInitialization MessagePayment TransactionThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Secure Electronic Transaction (SET) addresses the security problem of e-commerce. It, however, fails to provide interoperability and pre-sale and post-sale services to Consumers. Open Trading Protocol (OTP) can resolve these problems for SET. Provided SET is suitable to integrate with OTP, an ideal solution for e-commerce will be found.

Electronic commerce refers to trading of services or products over electronic systems such as the Internet and other computer networks. Internet banking, electronic data interchange, and inventory management systems are some examples of popular electronic commerce applications. In such applications, Secure Socket Layer (SSL) would be used to provide authentication between the respective parties. Secure Socket Layer is designed to provide two security goals, i.e. to secure the connection and to ensure the integrity of data between two parties while communicating with each other. However, one of the recent attacks, called SSL stripping has raised security concerns for web applications using SSL. There are a number of existing protocols that can be used to mitigate this problem. Unfortunately, these protocols have some limitations. In this paper, a new authentication protocol is proposed to mitigate this attack. The proposed protocol uses the trusted platform module and is able to overcome the limitations faced by other existing protocols.

We investigate the performance of algorithms for sparse tensor-sparse tensor multiplication (SpGETT). This operation, also called sparse tensor contraction, is a higher order analogue of the sparse matrix-sparse matrix multiplication (SpGEMM) operation. Therefore, SpGETT can be performed by first converting the input tensors into matrices, then invoking high performance variants of SpGEMM, and finally reconverting the resultant matrix into a tensor. Alternatively, one can carry out the scalar operations underlying SpGETT in the realm of tensors without matrix formulation. We discuss the building blocks in both approaches and formulate a hashing-based method to avoid costly search or redirection operations. We present performance results with the current state-of-the-art SpGEMM-based approaches, existing SpGETT approaches, and a carefully implemented SpGETT approach with a new fine-tuned hashing method, proposed in this paper. We evaluate the methods on real world tensors by contracting a tensor with itself along varying dimensions. Our proposed hashing-based method for SpGETT consistently outperforms the state-of-the-art method, achieving a 25% reduction in sequential execution time on average and a 21% reduction in parallel execution time on average across a variety of input instances.

The Message Queuing Telemetry Transport (MQTT) protocol is one of the most extended protocols on the Internet of Things (IoT). However, this protocol does not implement a strong security scheme by default, which does not allow a secure authentication mechanism between participants in the communication. Furthermore, we cannot trust the confidentiality and integrity of data. Lightweight IoT devices send more and more sensible data in areas of Smart Building, Smart City, Smart House, Smart Car, Connected Car, Health Care, Smart Retail, Industrial IoT (IIoT), etc. This makes the security challenges in the protocols used in the IoT particularly important. The standard of MQTT protocol strongly recommends implement it over Transport Layer Security (TLS) instead of plain TCP. Nonetheless, this option is not possible in most lightweight devices that make up the IoT ecosystem. Quite often, the constrained resources of IoT devices prevent the use of secure asymmetric cryptography algorithms implemented by themselves. In this article, we propose making a security schema in MQTT protocol using Cryptographic Smart Cards, for both challenges, the authentication schema and the trusted data confidentiality and data integrity. We carry out this security schema without modifying the standard protocol messages. And finally, we present a time results experiment using an example implementation model with JavaCard library.

The Secure Electronic Transaction (SET) protocol is a protocol designed to conduct safe business over Internet. We present formal verification of the Payment Authorization in SET by using ENDL (extension of non-monotonic logic) [1]. The analysis uncovers some subtle defects that may incur malicious attacks. To overcome these vulnerabilities, some feasible countermeasures are proposed accordingly.KeywordsAuthentication ProtocolSecurity ProtocolReplay AttackMalicious AttackDual SignatureThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

In this paper, we define a language for specifying security protocols concisely and unambiguously. We use this language to formally specify the protocol for payment transactions in Secure Electronic Transaction (SET), which has been developed by Visa and MasterCard.In our language, a protocol is specified as a collection of processes. Each process expresses the role of a participant. In the role-based specification, the components that a participant sees in a message can be stated explicitly. This is important in specifying protocols like that for the SET payment transactions because in such protocols some message components are encrypted and invisible to some participants.We simplify the SET payment transaction protocol into the exchanges of six messages. Because our future goal is to formally analyze the security properties that Meadows and Syverson discussed, we make the simplified protocol contain the parameters used in their security properties. And we also refrain from excessive simplification. For example, we use dual signature in the payment request message as it is specified in the SET specification books, while most of the other works do not use it. Our specification can serve as a starting point for a formal analysis of the protocol.KeywordsFormal methodssecurity protocolselectronic commerce