Sims: a text-based information system using symmetric and asymmetric algorithm

The majority of imaging techniques use symmetric and asymmetric cryptography algorithms to encrypt digital media. Most of the research works contributed in the literature focus primarily on the Advanced Encryption Standard (AES) algorithm for encryption and decryption. This paper propose an analysis for performing image encryption and decryption by hybridization of Elliptic Curve Cryptography (ECC) with Hill Cipher (HC), ECC with Advanced Encryption Standard (AES) and ElGamal with Double Playfair Cipher (DPC). This analysis is based on the following parameters: (i) Encryption and decryption time, (ii) entropy of encrypted image, (iii) loss in intensity of the decrypted image, (iv) Peak Signal to Noise Ratio (PSNR), (v) Number of Pixels Change Rate (NPCR), and (vi) Unified Average Changing Intensity (UACI). The hybrid process involves the speed and ease of implementation from symmetric algorithms, as well as improved security from asymmetric algorithms. ECC and ElGamal cryptosystems provide asymmetric key cryptography, while HC, AES, and DPC are symmetric key algorithms. ECC with AES are perfect for remote or private communications with smaller image sizes based on the amount of time needed for encryption and decryption. The metric measurement with test cases finds that ECC and HC have a good overall solution for image encryption.

HOW MUCH ICT SECURITY HAS IMPROVED DURING THE LAST DECADE

Now a day information security becomes complex and more important problem. Encryption/decryption can be an important tool to help in improving information security. In this paper work, I developed techniques for securing data to avoid hacking as well as providing the user with some additional features such as key for integrity and validation of user. In this technique one can secure any type of files using Fibonacci series. The proposed encryption/decryption algorithm is loss-less, key-dependent. The performance of the popular symmetric key algorithms including DES, 3DES, AES, Blowfish, are compared with Fibonacci Series encryption/decryption by encrypting input files of varying contents and sizes. The present Fibonacci encryption/decryption algorithm is implemented in C sharp language, and tested on two different Intel processors and compared its performance. The results reveal that Fibonacci encryption/decryption is the fastest among symmetric algorithms.

Introduction. Widespread use of unmanned aerial vehicles in the civilian and military spheres requires the development of new algorithms for identification friend or foe of targets, as used in the Armed Forces of Ukraine (AFU) devices of the "Parol" system are designed to service approximately 110 objects military equipment. AFU automation systems allow the use of additional sources of information about various objects from civil or special data transmission networks, which can be the basis for building a networked multi-level system of state recognition. Predictions of the development of quantum computers foresee the possibility of breaking modern algorithms for information security in polynomial time in the next 5-10 years, which requires the development and implementation of new encryption algorithms and revision of modern parameters. The purpose of the article is to develop a new algorithm for state recognition of objects, which can be scaled to process the required number of manned and unmanned aerial vehicles. Potential threats to classical cryptographic protection algorithms for data networks, which will result in the execution of algorithms such as Grover and Shore on quantum computers, were also discussed. Results. The article proposes a new multilevel algorithm of state recognition based on modern cryptographic methods of information protection, which allows to perform reliable automated identification of objects, scale systems using data on potential targets from other sources through secure special networks. Grover's search algorithm does not give a strong increase in key search performance for symmetric encryption algorithms, so there is no need to increase the key lengths for this type of information security algorithms. Post-quantum asymmetric encryption algorithms require additional study and comprehensive testing of information security or increasing the key lengths of cryptographic algorithms, which corresponds to the number of qubits, i.e. more than twice. The most promising is the family of asymmetric post-quantum cryptographic algorithms based on supersingular isogenic elliptic curves. Conclusions. The developed algorithm of identification friend or foe of objects is more secure compared to existing algorithms and is focused on the use of modern on-board computers and programmable radio modems. Shore's algorithm and the like will be a significant threat to modern asymmetric cryptography algorithms when the number of qubits of quantum computers exceeds the number of bits in public keys more than twice. Keywords: identification friend or foe, symmetric encryption, asymmetric cryptography, quantum computer, post-quantum cryptography.

Subject. In the modern information society, ensuring information security is one of the key tasks of organizations, especially in the context of growing cybersecurity threats. Every year, companies face increasingly complex and diverse threats that can cause significant damage to both the financial resources and reputation of the organization. In this context, ensuring information security becomes an important strategic task for enterprises in various fields of activity. Information security plays a critical role in protecting information confidentiality, ensuring the integrity and availability of information, as well as the security of information systems and networks. Goal. The main goal of the research in this work is a comprehensive study of the technology for ensuring the protection of information, preventing unauthorized actions with it, in particular, its use, disclosure, distortion, modification, research and destruction, as well as the correct strategy for information protection of data from external and internal threats. Method or methodology. The research is based on general scientific methodology, which involves the use of a systematic approach and general scientific methods of cognition. The results of the work. In the course of the study, the authors of the article tried to resolve the problem of the interdependence of information security and the strategy for information protection of data from external and internal threats by structuring the subject area of information security policy, which made it possible to set priorities in solving the problems of ensuring the required level of security of information resources and supporting infrastructure in the context of the development of digital technologies. When analyzing problems related to information security, the authors note the importance of mechanisms for generating new solutions that allow, at a minimum, to adequately respond to threats to information security or to anticipate new threats and be able to resist them. Conclusions. The study found that information security plays a critical role in the modern world, ensuring data protection, privacy and sustainability of business processes. In an environment of constantly changing and evolving threats, maintaining a reliable information security system becomes an integral part of the success of organizations and personal security. This is an important step towards creating an information security management system at the enterprise, with the help of which constant and effective monitoring of the effectiveness of security measures is carried out, timely correction of actions taken and revision of existing provisions to ensure maximum security.

Security aspects in wireless sensor networks is getting more and more attention in the recent years. Wireless sensor networks are being considered for critical applications where the security issues are a priority. The limited capacities of wireless sensor nodes and the complex algorithms of the security protocols make the subject challenging. Security algorithms are divided into two main families: symmetric and asymmetric algorithms. In this paper we evaluate different symmetric and asymmetric security algorithms in terms of time and energy consumption on one hand and memory usage on another hand.

We note that the effective and active struggle of European countries with information terrorism takes place within the framework of the European Union, all its member-countries, as well as neighboring countries and applicants for accession. Therefore, it should be stressed that the EU is pursuing itself a very active policy in the field of information security. At the moment, it brings together highly developed countries that have a tremendous impact on international relations by establishing norms and standards of conduct of states in the political, economic, social, informational and other spheres. The main objective of the EU is to strengthen the European Commission’s dialogue with international organizations and partners on the issue of network security and, in particular, on the growing dependence on electronic networks. Political priorities in the field of information security, defined by the governing bodies of the European Union, are being implemented at the national level by both state authorities and nongovernmental organizations. Analyzing all the above, it can be concluded that within the framework of the EU, information security is considered, first of all, as a state of information networks and systems that provides an adequate level of protection of the integrity, availability, authenticity and confidentiality of information and the appropriate level of counteraction to external negative influences. Priorities of EU policy in the field of information security are the creation and implementation of programs and various technical means of protection of information and communication technologies; development of normative legal acts that establish a list of crimes in the IT sphere and criminal liability; ensuring a high level of public awareness of the risks, threats and ways of protecting their information systems / networks from undesirable effects.

In today's rapidly evolving digital landscape, cybersecurity and information security are crucial for safeguarding critical assets across organizations and individuals. Cybersecurity focuses on protecting internet-connected systems, including hardware, software, and data, from cyber-attacks. In contrast, information security ensures the confidentiality, integrity, and availability of information, regardless of its digital or physical form. Although these terms are sometimes used interchangeably, they represent distinct concepts and methodologies, addressing specific threats and risks within the digital ecosystem. This review examines the differences and overlaps between cybersecurity and information security, highlighting their intersection in creating comprehensive protection strategies. While cybersecurity addresses external threats such as malware, phishing, and hacking, information security focuses on policies and procedures to prevent breaches—whether accidental or intentional. Recent trends, regulatory requirements, and the increasing complexity of cyber threats underscore the importance of adopting robust security measures. This article also explores the impact of cyber-attacks, including financial losses, reputational damage, and legal consequences stemming from noncompliance with data protection regulations. Additionally, the role of emerging technologies, such as artificial intelligence, machine learning, and blockchain, in enhancing the security landscape is discussed. The conclusion emphasizes the importance of a unified approach integrating cybersecurity and information security to mitigate risks effectively and ensure the long-term protection of sensitive data.

Traditionally, information security has been approached in terms of how to achieve the confidentiality, integrity, and availability of information. In this paper, we seek to ontologically examine information security by using Gilles Deleuze and Félix Guattari’s philosophical concepts of machine, coupling, interruption, and territory. Through these concepts, we conceptualize information security as an order-seeking, connection-based, territorial security machine that attempts to subject and harness other actors – from technical devices and physical barriers to employees and various combinations of these actors – to carry out the security machine’s protective tasks. The goal of the security machine is to block or interrupt the chaotic forces of the outside and, thus, to maintain the fragile order of information. However, the process of interrupting the outside requires interruption of the inside as well: users and organizations are interrupted daily by the security machine and its practices. Yet this aspect of information security has remained largely unexamined. We argue that the question of what information security does to its subjects – what its effects are – in the protected system should be examined more thoroughly.

The violation of principles such as confidentiality, integrity and availability of information, basic attributes of Information Security (IS), can affect business continuity and productivity and development organizations. Thus, the information security should be a subject of great relevance for organizations of Aeronautics Command (COMAER). In this sense, this study aimed to assess the compliance level of Information Security of the Second Center for Integrated Air Defense and Air Traffic Control (CINDACTA II) in relation to COMAER and Federal Public Administration publications, as well as the degree of CINDACTA II adherence for NBR 27002:2013 recommendations. The research was characterized as applied and descriptive about the objective. It was adopted the hypothetical-deductive method by means the documentary research and survey techniques. As to the problem approach was qualitative and quantitative. The study was carried out with five managers responsible for information security and 57 IT users in the CINDACTA II. We concluded that the CINDACTA II Information Security management is at a level that meets the requirements of NBR 27002:2013, as well as the publications of COMAER and Federal Public Administration. We observed similarities in IS practices between military and civil organizations, allowing us to infer that cultural issues, values and beliefs of the organizational environment influence information security.

Objectives: To find which cryptographic algorithm would produce fine result. Methods: This survey mainly focuses to an analysis of symmetric cryptographic algorithms DES, 3DES, AES, RC4 in the basis of encryption/decryption time, memory and throughput. Here .net platform has been used to simulate the results to find the best algorithm for text file transmission. Findings: Simulation tests are conducted for text files in different file sizes. These text files are given as input to each specified algorithms and calculated the results. The tests have taken seven different sizes of text files. How the above algorithms affect system resources while encryption and decryption process are explained in this project. The key focus of the project is to find the performance of the algorithms. Applications/Improvements: If the algorithm shows lowest performance in throughput/ memory/encryption time, new algorithm has to be developed to give better performance with all of these metrics.

Abstract”Information is an essential element for organizations today. Confidentiality, integrity, and availability of information have a vital role in supporting organizational performance. Therefore, it is necessary to take information security measures so that the use of information can run effectively, efficiently, and integrated. The more valuable the information, the more security standards are needed to protect it. Among other things, the purpose of computer security is to protect information. The higher the security standards provided, the higher the protection of the privacy of that information. Protecting company employees' privacy is one factor that must be considered in the implementation of information systems. PT Telkomsel is one of the companies that experienced a data breach. This report will discuss nine hypotheses to determine the factors that affect Information System Security Behavior for employees of PT Telkomsel. Thus, validity, reliability, and hypothesis tests were carried out using the SmartPLS 3 software. The results showed a significant influence between the Security Education and Training variables on Information Security Awareness, Employee Accountability, and Employee Relationships. Index Terms”Information System Security Behavior, Security Education & Training, Information Security Awareness, Employee Relationships, Employee Accountability, Organizational Culture, National Culture

Information security on cloud computing requires goodplanning and understanding of the risks, threats and vulnerabilities ofdata or information that is managed in a cloud computing environment.Measurement of information security in cloud computing is no differentto conventional information technology, which uses an approach basedon confidentiality, integrity and availability of information. Whereas thestandard used on information security such as NIST, CSA and COBITare often used to assess information security analysis of the cloudcomputing service providers. This research will review the informationsecurity strategy at Biznet Networks as a provider of cloud computingservices.

Information technology has changed organisational processes significantly. However, information security is still a controversial issue among experts in this domain. Information security breaches lead to loss of reputation, competitive advantages, intellectual properties, productivity, and revenue and in the worst scenario leads to bankruptcy. In this regard, awareness plays a vital role to mitigate information security threats. This study aims to present different threats that effect confidentiality, integrity and availability of information, pertaining to administrative employees, in an integrated and informative design, based on a review of literature. In addition, a possible interactive visual library is proposed, through a proof of concept that contributes to administrative employees' information security awareness. The results shed some light on this information security awareness issue, and provides the means for further academic study.

One of the main elements of the integrated information security system is the subsystem of access’s control to information resources. Recently, more attention is attracted by biometrics as one of the newest information technologies that use the unique characteristics of object identification and verification. Therefore, the question of the protection of information resources from unauthorized administrative actions and access by unauthorized persons or programs to computer data is important.Relevant is the preservation of confidentiality of information processed or stored in computer systems. External influences generally oppose using a variety of software and hardware protection methods. The content of the methods of the protective transformations is that the information stored in the system and is transmitted by communication channels, is turns into a cryptogram — a closed (encrypted) text or graphic image documents. The basis for the encryption is based on two elements: a cryptographic algorithm and key. The security of generic algorithms is determined by the key length. In asymmetric algorithms, the encryption and decryption can be performed with different keys. Such algorithms require significantly more computation time, but do not create problems during key distribution. The most promi-sing data protection systems today are considered an asymmetric system with a public key. The last deca-de a great attention of scientists in the field of information security pay biometric. A biometric system can operate in modes of verification and identification. All of these approaches protect the information easy enough to implement in the time-logic environment, making all the settings required for message transform on the time-logic functions.The possibility of cyclic encoding and the rules for constructing key asymmetric crypto algorithm on the basis of the identification time-logic functions, which contain all the important characteristics of transmitted messages, is analyzed. Available for the formal description of this encoding and the rules of construction keys used in the representation of time-logic functions in the form of polynomials.