Enterprise Java Security: Frameworks, Authentication, and Threat Modeling

Due to the rapid growth in sensor technology and embedded technology, wireless body area network WBANs plays a vital role in monitoring the human body system and the surrounding environment. It supports many healthcare applications on the one hand and are very much help full in pandemic scenarios. It has become the most innovative health care area, which is intriguing to many researchers because of its vast future prospective and potential. Data collected by different wireless sensors or nodes is very personal, critical, and important because of human life involvement. WBANs can minimize human to human contact, which helps stop the spread of severe infectious diseases. The biggest concern is the maintenance of privacy and accuracy of data is still a hot area of research due to nature of attacks, which are changing day by day and increasing, as well as for the sake of better performance. A suitable security mechanism is a way to address above issues, for achieving data security, it is expedient to propose a mechanism. It is essential to update the patient’s regular data. WBANs help to deliver truthful reports related to the patient’s health regularly and individually. This paper proposes an algorithm that shows a better result than the existing algorithm in their previous works. This work is all about proposing a mechanism which needs comparatively less resource. Only authentic entities can interact with the server, which has become obligatory for both sides, keeping data safe. Several authentication schemes have been proposed or discussed by different researchers. This paper has proposed a Secure and Efficient WBANs Authentication Mechanism (SEAM). This security framework will take care of the authentication and the security of transmitted data.

Java is still mostly used in business applications as it allows a variety of systems from banking to massive e-commerce platforms. The heavy usage calls for strict security policies. Common targets for cyberattacks are enterprise Java projects, hence security from the start must be emphasized by developers and security teams.This paper investigates a complete Java application security approach covering important subjects such safe coding techniques, reducing common vulnerabilities found in the OWASP Top 10, using security frameworks, and guaranteeing API security.Following safe coding guidelines helps developers reduce data exposure concerns, injection vulnerabilities, and authentication flaws. Integrated security systems such as Spring Security and Jakarta EE provide complete protections including encryption, authentication, and authorization. Modern apps depend on APIs with strict security mechanisms including suitable authentication techniques, rate restrictions, encryption to prevent illegal access and data leaks. The applicability of these ideas in the protecting Java microservices within a financial application is shown by this case study. This actual scenario shows how a tiered security system—which consists of the strong authentication, safe communication channels & the continuous monitoring—may guard private client information & the financial activities. Organizations may significantly lower risks and guarantee industry legal compliance by using a proactive attitude to security. Aiming to enhance the security framework of their Java applications, developers, security analysts, and decision-makers will find a sensible approach in this paper.

This document describes two authentication mechanisms created by Sun Microsystems that are commonly used in conjunction with the ONC Remote Procedure Call (ONC RPC Version 2) protocol. WARNING The DH authentication as defined in Section 2 in this document refers to the authentication mechanism with flavor AUTH_DH currently implemented in ONC RPC. It uses the underlying Diffie-Hellman algorithm for key exchange. The DH authentication defined in this document is flawed due to the selection of a small prime for the BASE field (Section 2.5). To avoid the flaw a new DH authentication mechanism could be defined with a larger prime. However, the new DH authentication would not be interoperable with the existing DH authentication. As illustrated in [10], a large number of attacks are possible on ONC RPC system services that use non-secure authentication mechanisms. Other secure authentication mechanisms need to be developed for ONC RPC. RFC 2203 describes the RPCSEC_GSS ONC RPC security flavor, a secure authentication mechanism that enables RPC protocols to use Generic Security Expires: November 17, 1999 Informational [Page 1]^L INTERNET-DRAFT Authentication Mechanisms for ONC RPC 18-May-99 Service Application Program Interface (RFC 2078) to provide security services, integrity and privacy, that are independent of the underlying security mechanisms. Expires: November 17, 1999 Informational [Page 2]^L INTERNET-DRAFT Authentication Mechanisms for ONC RPC 18-May-99 CONTENTS

The technological development of artificial intelligence, Internet of Vehicles, big data, edge computing, intelligent manufacturing, 5G and other technologies will bring great prospects to the popularization of the Internet of Things. In the future, we will see more and more IoT systems of different sizes. It is particularly important to ensure the control of IoT system message transmission, ensure system security, and monitor IoT systems. The Internet of Things protocol and its system node authentication mechanism have great research value. This paper analyzes the MQTT protocol and its security authentication mechanism, and designs and implements an identity authentication mechanism based on historical information nodes. The proposed authentication mechanism can effectively prevent forgery attacks, counterfeit attacks, replay attacks, and Sybil attacks.

The increasing reliance on web applications across domains such as e-commerce, banking, healthcare, and enterprise systems has significantly amplified the importance of secure and reliable authentication mechanisms. Traditional password-based authentication methods are increasingly vulnerable to modern cyber threats, including phishing, brute force attacks, and credential stuffing, thereby necessitating the adoption of more advanced and robust authentication strategies. This study presents a comprehensive comparative analysis of modern authentication mechanisms in web applications, including Multi-Factor Authentication (MFA), OAuth 2.0, JSON Web Tokens (JWT), Single Sign-On (SSO), and biometric-based authentication systems. The research evaluates these mechanisms based on critical parameters such as security strength, usability, scalability, performance, and implementation complexity. It further examines architectural models, token-based frameworks, and federated identity systems that support secure user authentication in distributed environments. Additionally, the study reviews common vulnerabilities, threat mitigation techniques, and real-world deployment scenarios to assess the effectiveness of each approach. The findings highlight a growing shift toward hybrid authentication models that integrate multiple techniques to achieve enhanced security and user experience. However, challenges remain in balancing security with usability, ensuring interoperability across platforms, and maintaining privacy in decentralized systems. The paper concludes by identifying future research directions focused on passwordless authentication, zero-trust security models, and adaptive authentication systems for next-generation web applications.Keywords : Authentication mechanisms, Web application security, Multi-Factor Authentication (MFA), OAuth 2.0, JSON Web Tokens (JWT), Single Sign-On (SSO), Biometric authentication, Passwordless authentication, Zero Trust security, Cybersecurity

Wireless Sensor Networks are being widely used in many real time applications that require continuous monitoring and maintenance of surroundings and their environment. Communication is a vital operation in WSN and most of the times the data is confidential. Hence, security of data is a major concern in WSN and it has been observed that a secure authentication mechanism will ensure confidentiality and integrity of data in WSN. Many authentication mechanisms have been designed but most of them require the sensor nodes to have much computational resources, involves much communication and storage overheads and are quite complex. In this paper, we propose a simple, secure, dynamic, scalable, efficient and lightweight protocol for mutual authentication of nodes in WSN. The protocol is based on tokens, each sensor node acquires a token from base station (BS) and later on without any involvement of BS sensor nodes mutually authenticate each other using acquired tokens. The proposed protocol was modeled in scyther for verification and no potential attacks were detected.

Broadcast Communication is crucial in VANET communication, to send and receive safety messages within network. Securing these beacon message is a challenge, since they are very prone to clone and Sybil attacks. Many works have been proposed to address this problem but they failed to address how to detect and protect these messages from clone attacks and also limited to static networks with limited data sizes. To achieve this a secure authentication and attack detection mechanism can be designed. In this paper we propose a secure broadcast message authentication and attack detection mechanism with Identity – Based Signatures. Experimental results proved that it can be used in both V2V and V2RSU c communications. Our scheme shown best performance compared to existing schemes in terms of packet delivery ration, detection rate and detection time.

Information security is one of the most important attributes of distributed systems that often operate on unreliable networks. Enabling security features during the development of a distributed system requires the careful analysis of potential attacks or threats in different contexts, a process often referred to as «threat modeling». Information protection should be comprehensive, but it is also necessary to take into account the possibility of the emergence of threats specific to a certain information system. Many public and private organizations are still trying to implement system models and the threats directed at them on their own. The main reason for this is the lack of useful and high-quality methodologies that can help developers design system models. This review explores a variety of the literature on confidentiality- and integrity-aware system design methodologies, as well as threat classification methods, and identifies key issues that may be referenced by organizations to make design system processes easier. In particular, this article takes a look at the extent to which existing methodologies cover objects of protection and methods of classifying threats, as well as whether there are such models of systems in which the object itself and the threats directed at it are described. This includes whether the compiled models exhibit symmetry or asymmetry. This literature research shows that methodologies appear to be heterogeneous and versatile, since existing methodologies often only focus on one object of protection (a system). Based on the given analysis, it can be concluded that the existing methodologies only relate superficially to the description of system models and threats, and it is necessary to develop a more complete abstract model of the protected object and threats aimed at it in order to make this model suitable for any organization and protect it against most threats.

The metaverse is a new virtual world that has the potential to significantly impact our interactions with digital content and with each other. It is a shared virtual environment where users can seamlessly and with immersive experiences create, interact, and enjoy digital assets. Nevertheless, the metaverse also poses fundamental challenges, particularly about security and privacy concerns, that require careful consideration. One of the most daunting aspects of securing the metaverse is authentication. Several solutions have been proposed, including deployment of blockchain technology and smart contracts, to address these authentication challenges. While these methods provide a secure and tamper-proof authentication mechanism, they fail to meet certain critical security and privacy requirements like interoperability and decentralization. This research proposes an enhanced privacy-preserving authentication scheme based on blockchain, elliptic curve cryptography, biohashing, and a physical unclonable function that guards against various attacks. The proposed scheme does not rely on a single central authority and consists of various phases, including user and avatar authentication, password change, and avatar generation phases. The proposed scheme underwent security assessment using the Burrows Abadi Needham (BAN) logic, ProVerif tool, and Scyther tool. The results demonstrate that it provides a better level of security against a wide range of attack vectors. The proposed scheme offers a swift and efficient authentication mechanism that adheres to the requirements of the metaverse environment, such as interoperability, decentralization, and privacy protection, and requires less computation cost as compared to state-of-the-art schemes.

Handwritten signature verification is a critical aspect of personal authentication in numerous sectors, including banking, legal, and access control systems. This paper provides a comprehensive investigation into writer-dependent signature verification techniques, spanning from traditional approaches such as Histogram of Oriented Gradients (HOG) and Scale-Invariant Feature Transform (SIFT) to cutting-edge deep learning architectures like Siamese and triplet networks. Through extensive experimentation and meticulous analysis conducted on benchmark datasets, we rigorously compare and evaluate the efficacy of these approaches. Our study reveals intriguing insights into the performance characteristics of different methodologies, shedding light on their strengths, weaknesses, and areas for improvement. Notably, we observe that while traditional feature-based methods excel in capturing discriminative information from signature images, deep learning architectures offer enhanced flexibility and adaptability, particularly in scenarios with large and diverse datasets. By combining the strengths of both paradigms, we demonstrate the potential for building robust and reliable signature verification systems capable of handling real-world challenges and variations. We highlight the importance of carefully curated datasets and well-designed network architectures in achieving optimal results, thereby providing valuable guidelines for practitioners and researchers in the field. In conclusion, this study contributes significant insights to the advancement of handwritten signature verification systems, emphasizing the importance of leveraging both traditional methodologies and modern deep learning techniques for building secure and dependable authentication mechanisms. By addressing key challenges and exploring novel approaches, our research aims to foster innovation and enhance the security measures associated with handwritten signature authentication in diverse applications. Keywords—Handwritten signature verification, Writer-dependent approach, Feature-based methods, Deep learning, Siamese networks, Triplet networks, Benchmark datasets, Performance evaluation, Authentication mechanisms, Security measures.

The distinguishing feature of a metasystem is middleware that facilitates viewing a collection of large, distributed, heterogeneous resources as a single virtual machine, where each user of the metasystem is identified by a unique metasystem-level identity.The physical resources of the metasystem can exist in multiple administrative domains, each with different local security requirements and authentication mechanisms (e.g., Kerberos, publickey).The problem this paper addresses is how to map the metasystems-level identity to an appropriate account on each local physical machine for the purposes of process creation, such that the access control and authentication policies of each local machine are not violated.This mapping must ensure the integrity of the local machines, must ensure the integrity of the metasystem user's data, and must not unnecessarily burden either the metasystem users, the metasystem system administrator, or the local machine system administrators.Specific examples are drawn from experiences gained during the deployment of the Legion metasystem.For example, Legion configurations for local sites with different access control mechanisms such as standard UNIX mechanisms and Kerberos are compared.Through analysis of these configurations, the inherent security trade-offs in each design are derived.These results have practical importance to current and future metasystem users and to sites considering any future inclusion of local resources in a global virtual computer.

Blog services become popular in recently years. Web users can post their articles through the services. On the other hand, the users do not have full control of the articles after posted while the services are built with client/server model. Therefore, we propose to use peer-to-peer (P2P) technology to establish blog services. However, the anonymous feature disables the P2P technology to conduct user identification. The OpenID provides secure and unified authentication mechanism to improve the anonymity. In addition, the OpenID has the single sign on procedure to reduce redundant, multiple accounts and passwords. The paper presents a blog service platform which integrates the P2P networks and the OpenID authentication mechanism together. Therefore, user scan establish their own blogs easily with full control. The platform can be utilized for other Internet applications as well.

The security threats to the personal information of Internet users raise the need for improved security measures and authentication mechanisms of username and password so that intruders can be discouraged. Another problem faced by modern-day Internet users is that they are required to maintain a long list of passwords for their web accounts maybe 15-20 accounts. Therefore, this raises the need to introduce a better and more reliable authentication mechanism which is not dependent on a series of characters, but rather on a technology that is unique and only possessed by the individual. However, there are some secure services that revolve around the distributed sharing of data, and do not provide any log-in facilities for any website or web account with high level of security, accessibility and usability. This paper presents an answer to all these problems in a single solution, named FingerID, by focusing the theoretical background of the subject and an in-depth review of the literature available on various aspects of security provisions used in the industry for distributed systems. During the course, the objective is to identify clear criteria which would enable robust comparison between FingerID and various similar applications available in the market.

Communication between connected objects in the Internet of Things (IoT) often requires secure and reliable authentication mechanisms to verify identities of entities and prevent unauthorized access to sensitive data and resources. Unlike other domains, IoT offers several advantages and opportunities, such as the ability to collect real-time data through numerous sensors. These data contains valuable information about the environment and other objects that, if used, can significantly enhance authentication processes. In this paper, we propose a novel idea to building opportunistic sensor-based authentication factors by leveraging existing IoT sensors in a system of systems approach. The objective is to highlight the promising prospects of opportunistic authentication factors in enhancing IoT security. We claim that sensors can be utilized to create additional authentication factors, thereby reinforcing existing object-to-object authentication mechanisms. By integrating these opportunistic sensor-based authentication factors into multi-factor authentication schemes, IoT security can be substantially improved. We demonstrate the feasibility and effectivenness of our idea through illustrative experiments in a parking entry scenario, involving both mobile robots and cars, achieving high identification accuracy. We highlight the potential of this novel method to improve IoT security and suggest future research directions for formalizing and comparing our approach with existing techniques.

A key challenge for mobile network operators in 6G is to bring together and orchestrate a variety of new emerging players of today's mobile eco-systems in order to provide economically viable and seamless mobile connectivity in the form of a multi-stakeholder service. With each new player, be it a cloud, edge, or hardware provider, the need for interfaces with secure authentication and authorization mechanisms increases, as does the complexity and operational costs of the public key infrastructures required for the identity and key management. While today's centralized public key infrastructures have proven to be technically feasible in confined and trusted spaces, they do not provide the required security for access control once centralized identity providers must be avoided because of limited cross-domain interoperability, national data protection legislation, or geopolitical-strategic reasons. Recent decentralized identity management concepts, such as the W3C recommendation of decentralized identifiers, provide a secure, tamper-proof, and cross-domain identity management alternative for future multi-stakeholder 6G networks without relying on centralized identity providers or certification authorities. This article introduces the concept of decentralized identifiers together with the principles of self-sovereign identity, and discusses opportunities and potential benefits of their application and usage for cross-domain and privacy-preserving identity and key management in 6G networks.