Authentication Schemes for Session Passwords using Color and Images

Authentication Schemes for Session Passwords using Color and Images

M SREELATHA1, M SHASHI2, M ANIRUDH1,MD SULTAN AHAMER1, V MANOJ KUMAR1

1Department of Computer Science and Engineering, R.V.R. & J.C. College of Engineering, Guntur, A.P.

2Department of Computer Science and System Engineering, Andhra University College of Engineering, Visakhapatnam, A.P

Abstract: 

Textual passwords are the most common method used for authentication. But textual passwords are vulnerable to eves dropping, dictionary attacks, social engineering and shoulder surfing. Graphical passwords are introduced as alternative techniques to textual passwords. Most of the graphical schemes are vulnerable to shoulder surfing. To address this problem, text can be combined with images or colors to generate session passwords for authentication. Session passwords can be used only once and every time a new password is generated. In this paper, two techniques are proposed to generate session passwords using text and colors which are resistant to shoulder surfing. These methods are suitable for Personal Digital Assistants.

Index Terms: 

Authentication, session passwords, shoulder surfing

Original Source Link : http://airccse.org/journal/nsa/0511ijnsa08.pdf

http://airccse.org/journal/jnsa11_current.html

MAINTAINING UNIFORM DENSITY AND MINIMIZING THE CHANCE OF ERROR IN A LARGE SCALE WSN

MAINTAINING UNIFORM DENSITY AND MINIMIZING THE CHANCE OF ERROR IN A LARGE SCALE WSN

Asis Kumar Tripathy1,Shradhananda Beura2,Muralidhar Behera3 and Gunanidhi Pradhan4

1,2,3Department of Computer Science and Engineering, NM Institute of Engineering and Technology, Bhubaneswar,Odisha,India

4Govt. college of Engineering, Kalahandi, Odisha,India

ABSTRACT

In a real application area, the WSN is not a homogeneous network where the nodes are maintained in respective coordinate position relatively same to each other. But rather homogeneous it should be heterogeneous, where the relative positional difference for different nodes are different. In this paper a better scheme is being proposed which will take care of the life time and density of a WSN. Sun et. al. proposed uniform density in WSN by assuming the network as a homogeneous network ,but in this paper without taking a homogeneous network the same problem is being solved by using the Gaussian probability density function. And also the chance of error in receiving the message from the WSN to the base station is minimized by using priori probability algorithm.

KEYWORDS

WSN, Network density, life time, priori probability

Original Source Link : http://airccse.org/journal/nsa/0511ijnsa07.pdf

http://airccse.org/journal/jnsa11_current.html

DATA SECURITY USING PRIVATE KEY ENCRYPTION SYSTEM BASED ON ARITHMETIC CODING

DATA SECURITY USING PRIVATE KEY ENCRYPTION SYSTEM BASED ON ARITHMETIC CODING

Ajit Singh1 and Rimple Gilhotra2

1Department of Computer Science & Engineering and Information Technology

2BPS Mahila Vishwavidyalaya, Khanpur Kalan, Sonepat-131305 Haryana (India).

ABSTRACT

Problem faced by today’s communicators is not only security but also the speed of communication and size of content.In the present paper, a scheme has been proposed which uses the concept of compression and data encryption. In first phase the focus has been made on data compression and cryptography. In the next phase we have emphasized on compression cryptosystem. Finally, proposed technique has been discussed which used the concept of data compression and encryption. In this first data is compressed to reduce the size of the data and increase the data transfer rate. Thereafter compress data is encrypted to provide security. Hence our proposed technique is effective that can reduce data size, increase data transfer rate and provide the security during communication.

KEYWORDS

Arithmetic coding, cryptography, floating point number, one time pad, compression-crypto

Original Source Link : http://airccse.org/journal/nsa/0511ijnsa05.pdf

http://airccse.org/journal/jnsa11_current.html

CREDENTIAL BASED MEDIATOR ARCHITECTURE FOR ACCESS CONTROL AND DATA INTEGRATION IN MULTIPLE DATA SOURCES ENVIRONMENT

CREDENTIAL BASED MEDIATOR ARCHITECTURE FOR ACCESS CONTROL AND DATA INTEGRATION IN MULTIPLE DATA SOURCES ENVIRONMENT

Dr. Nirmal Dagdee1, Ruchi Vijaywargiya2

Department of Computer Science and Engineering, S. D. Bansal College Of Technology, Indore, India

ABSTRACT

In multiple data sources environment where open access is to be provided to the users not known to the system, the credential based access control has emerged as a suitable approach for achieving security on shared data [22,23,28,29,31]. Mediation techniques have been developed for data integration that provide a single unified view of the multiple data sources to the user[1,2,3,4,5,6,7,18]. For enforcing common access policy across the available data sources and enabling controlled access on data at local levels, appropriate multilevel access control policy is also required. In this paper, we propose a credential based mediator architecture to achieve multilevel access control and data integration in open access environment. To realize the multilevel access policy a credential transfer protocol has been proposed to accomplish the transfer of credentials and extracting attribute values associated with them.

KEYWORDS

Credential, mediator, access control, data integration

Original Source Link  : http://airccse.org/journal/nsa/0511ijnsa04.pdf

http://airccse.org/journal/jnsa11_current.html

ON DESIGN OF PUF-BASED RANDOM NUMBER GENERATORS

ON DESIGN OF PUF-BASED RANDOM NUMBER GENERATORS

Mehdi Ayat1, Reza Ebrahimi Atani2, Sattar Mirzakuchaki1

1Department of Electrical Engineering, Iran University of Science and Technology,Tehran, Iran

2Department of Computer Engineering, The University of Guilan, P.O. Box 3756, Rasht, Iran

ABSTRACT

In this paper we propose a new architecture Physical Random Functions (or Physical Unclonable Functions, PUFs) to create a candidate hardware random number generator. So far several random number generators based on ring oscillators were introduced but all of them have either security or stability problems. This paper presents a novel architecture which has solved both of these problems. This idea have a higher data complexity and also nonlinearity which secures the circuit against modeling attacks. The final architecture has also lower hardware complexity which make it suitable for lightweight random number generators.

KEYWORDS

Physical Unclonable Functions, Physical Cryptography, Random Number Generator

Original Source Link : http://airccse.org/journal/nsa/0511ijnsa03.pdf

http://airccse.org/journal/jnsa11_current.html

A TIERED BLOCKCHAIN FRAMEWORK FOR VEHICULAR FORENSICS

A TIERED BLOCKCHAIN FRAMEWORK FOR VEHICULAR FORENSICS

Marcel C. Ugwu1, Izunna U. Okpala2 Collins I. Oham3, and Cosmas I.Nwakanma3

1Seamfix Nigeria Limited, Lagos, Nigeria

2Department of Communication Arts,National Institute for Nigerian Languages, Aba, Abia, Nigeria

3Department of Information Management Technology,Federal University of Technology, Owerri. Nigeria

ABSTRACT

In this paper, we present a tiered vehicular forensics framework based on permission BlockChain. We integrate all entities involved in the forensics process and record their interactions in the BlockChain to generate comprehensive evidence for settling disputes and appropriating blame. We incorporate a watchdog entity in our tiered framework to prevent collusive tendencies of potentiality liable entities and to prevent exploitation of evidence. Also, we incorporate a state mechanism to prove the state of a smart vehicle when an accident occurs. Furthermore, we conduct a security analysis to demonstrate the resilience of our framework against identified attacks and describe security mechanisms used to achieve key requirements for vehicular forensics. Finally, we comparatively evaluate our framework against existing proposals.

KEYWORDS

BlockChain, Smart Vehicles, Dispute settlement, Vehicular forensics

Original Source Link : http://aircconline.com/ijnsa/V10N5/10518ijnsa03.pdf

http://airccse.org/journal/jnsa18_current.html

THE EFFECT OF INFORMATION TECHNOLOGY USING ENTERPRISE SECURITY RISK MANAGEMENT

THE EFFECT OF INFORMATION TECHNOLOGY USING ENTERPRISE SECURITY RISK MANAGEMENT

Michael O. Adekanye1 and Shawon S. M. Rahman, Ph.D.

1Address: P.O Box 9201, Trenton NJ 08650, USA

2Associate Professor, Dept. of Computer Science & Engineering, University of HawaiiHilo,200 W. Kawili Street, Hilo, HI 96720, USA

ABSTRACT

The philosophy of Enterprise Security Risk Management (ESRM) drives a risk-based approach to managing any security risks, physical or logical and holistically applies to every security process. There are globally established risk principles that are common among any developed risk management standard. This model associates the relationship of risk principles to the practice of managing security risks. The ESRM processes, when successfully and consistently adapted to a security program, will define what a progressive security program looks like, drive strategic through initiatives, build the business understanding of security’s role to develop a budgeting strategy, and initiate board-level, risk-based reporting. The management security leader's role in ESRM is to manage risks and unthinkable harm to enterprise assets and stockholder in partnership with the business leaders whose assets are exposed to those risks management. ESRM is part of educating business leaders on the realistic of impacts. These identified risks, presenting any potential strategies to mitigate those impacts, and enacting the option chosen by the business in line with acceptable levels of business risk tolerance. The present data should be used to showcase how our service helps identify, evaluate, and mitigate risks at face value that would be detrimental to a company’s long-term prosperity. We need to show how using our security risk management will ultimately benefit the company's work by improving policies and procedures and reducing other expenses through the use of risk principles management.

KEYWORDS

Enterprises Security Risk Management, ESRM, Maturation of a Profession, Unfettered Rules, Risk Mitigation, Risk Mechanism, Enterprise Risk Management, Risk Principles Management, Manage Security Programs

Original source link : http://aircconline.com/ijnsa/V10N5/10518ijnsa02.pdf

http://airccse.org/journal/jnsa18_current.html