• A hyperchaotic system is used to shuffle image at block-level and bit-level. • Row-level dynamic and random DNA encoding of every color plane of image. • Hardness of Elliptic curve discrete logarithmic problem. • A novel digital signature, Mutual authentication and key exchange scheme. • Low computational complexity and robustness to various types of security attacks. This paper takes a holistic approach to propose a comprehensive framework for color image encryption with some novel features. The framework is designed around a secure encryption and decryption scheme leveraging dynamic DNA encoding, hyperchaotic system and elliptic curve cryptography. The novel features being mutually authenticated key generation and exchange based on split share and digital signature for image authentication. A color image is encoded into a DNA sequence using randomly selected row-level encoding rules. A novel 4D-Hyperchaotic system is used to generate pseudo-random sequences to permutate image information at bit-level and block-level. The multidimensional Hyperchaotic system increases non-periodicity, ergodicity, and unpredictability than a simple chaotic system. An elliptic curve-based substitution system is employed to achieve computationally efficient encryption and authentication. Different subkeys have been employed to increase the key space and embed confusion and diffusion into the proposed scheme. Results and analysis show that the proposed framework is computationally efficient and robust to different types of attacks and cryptanalysis carried over the images 

Color Image Encryption and Authentication Using Dynamic DNA Encoding and Hyper Chaotic System

A lightweight three factor authentication framework for IoT based critical applications

Unmanned aerial vehicles/drones are considered an essential ingredient of traffic motoring systems in smart cities. Interconnected drones, also called the Internet of Drones (IoD), gather critical data from the environmental area of interest and transmit the data to a server located at the control room for further processing. This transmission occurs via wireless communication channels, which are exposed to various security risks. Besides this, an External User (EU) occasionally demands access to real-time information stored at a specific drone rather than retrieving data from the server, which requires an efficient Authenticated Session Key Establishment (ASKE) approach to ensure a reliable communication in IoD environment. In this article, we present a Privacy-Protecting ASKE scheme for IoD (PASKE-IoD). PASKE-IoD utilizes Authenticated Encryption (AE) primitive “ASCON,” and hash function “ASCON-hash,” to accomplish the ASKE phase. PASKE-IoD checks the EU’s authenticity before allowing him to access the IoD environment resources. Moreover, PASKE-IoD enables EUs and drones to communicate securely after establishing a session key. Meticulous informal security analysis and security verification are carried out using Scyther to demonstrate that PASKE-IoD is immune to numerous covert security attacks. In addition, Burrows-Abadi-Needham logic is utilized to corroborate the logical exactitude of PASKE-IoD. A comparative analysis is presented to illustrate that PASKE-IoD is efficient and renders more security features than the eminent ASKE scheme.

/pdf/paske-iod-privacy-protecting-authenticated-key-establishment-1dkkwfbwj9.pdf

PASKE-IoD: Privacy-Protecting Authenticated Key Establishment for Internet of Drones

To solve the problem regarding the lack of a lightweight and secure authentication and key agreement protocol in the Constrained Application Protocol of the Internet of Things environment, we explore the security flaws and applicability problems in the current related research. Then, we propose a new lightweight authentication and key agreement protocol based on the CoAP framework. The scheme adopts shared secret and elliptic curve public key technology, which ensures the anonymity of the communicators and provides strong security and anti-attack capacity. In terms of security analysis, the Dolev–Yao Adversary model and a security model checking analysis method based on CPN Tools are improved, in order to verify the correctness and security of the proposed scheme. Compared with other schemes, regarding communication overhead, computational cost, and security, the proposed scheme provides a robust and comprehensive security guarantee, although it is not the lightest.

/pdf/lightweight-anonymous-authentication-and-key-agreement-cegcuikx.pdf

Lightweight Anonymous Authentication and Key Agreement Protocol Based on CoAP of Internet of Things

Security is a challenging issue for M2M/IoT applications due to the deployment, decentralization and heterogeneity of M2M and IoT devices. Typical security solutions may not be suitable for M2M/IoT systems regarding the difficulties encountered for their implementation on resource-constrained devices. In this paper, we discuss the architectures deployed for M2M communications and the security challenges, as well as the vulnerabilities and solutions to counter possible attacks. We present a lightweight design based on a private blockchain to secure wireless M2M communications at the device domain level. Blockchain integration provides secure storage of data while preserving integrity traceability and availability. Besides, the evaluation and experimentations under NS3 simulator of the proposed scheme show that the authentication mechanism is lightweight, and presents better performances comparatively to other protocols in terms of key parameters as communication and computational overheads, average delay and energy consumption.

/pdf/lightweight-blockchain-based-scheme-to-secure-wireless-m2m-37qjqjwg.pdf

Lightweight Blockchain-Based Scheme to Secure Wireless M2M Area Networks

The paradigm of Internet of Things alludes to the ever- growing network of physical devices that is embedded with sensors, actuators, software and networking so that the devices can exchange information with centralized systems, connected devices or servers based on various communication infrastructures. The IoT data is transmitted over the internet to the cloud after collecting it from different sensors and nodes. While the number of devices connected to the internet is rising every day, several IoT vulnerabilities have come to the forefront. Therefore, security and privacy for resource-constrained IoT devices is a foremost important issue to resolve. The architecture of IoT mainly operates on a three-layer system consisting of a perception layer, an internet layer, and an application layer. The main aim of IoT security is to maintain confidentiality, integrity, data privacy, provide the user security along with the acceptable quality of service. This paper will analyze the security issues and possible attacks related to each layer of IoT architecture separately. Vulnerabilities of Message Queue Telemetry Transport, the application layer protocol has also been analyzed.

A Systematized Security and Communication Protocols Stack Review for Internet of Things

This paper proposes a novel method for secure image encryption and authentication based upon fuzzy extractor driven Elliptic Curve key exchange scheme. Use of fuzzy extractor facilitates both parties to authenticate each other without disclosing their original biometric information. The image encryption is achieved using a shared key in two steps. In the first step, we use a novel Cosine Transform based Chaos System to generate a pseudo- random chaos sequence over a dynamic range. In the second step, this chaos sequence along with Elliptic curve-based encryption is used in code block cipher mode to get the cipher image. To authenticate the encrypted image, an easily computable and verifiable digital signature scheme based on fuzzy extractor and Elliptic curve cryptography has been proposed. The proposed encryption is computationally efficient as it does not need an exclusive encoding of plain image pixels to Elliptic curve points. Results and analysis show that our scheme is resilient to different kinds of security attacks particularly differential attacks. The proposed scheme results in a random cipher image with high entropy and very low inter-pixel correlation at a low computational cost and encryption time.

Fuzzy extractor and chaos enhanced elliptic curve cryptography for image encryption and authentication

The emergence of Elliptic curve cryptography as a preferred cryptographic scheme using minimal computational resources is quite discernible. Its extension to the domain of image encryption using various mapping techniques has been analyzed in this paper. The efficiency of an encryption scheme based on ECC shall depend upon the appropriateness of mapping technique used to map pixels onto the Elliptic curve. Parameters like cost efficiency, Completeness, inversibility, and bandwidth used must be taken into consideration before designing any such mapping technique.

Mapping Images Over Elliptic Curve For Encryption



With the advancements of ubiquitous computing, wireless sensor networks, and machine-to-machine communication, the Internet of Things (IoT) has become a constantly growing concept. The IoT is a new paradigm that interconnects all smart physical devices to provide smart services to users. It effectively delivers user-required services by utilising internet connectivity, sensors, and various technologies and protocols for the analysis and collection of data. IoT is predicted to permeate practically every facet of daily life, from smart cities to health care, smart agriculture, logistics and retail, and even smart living and smart ecosystems. Since IoT systems are comprised of heterogeneous hardware and networking technologies, integrating them to the software/application level to extract information from massive amounts of data is a difficult task.



In this survey, the definitions, elements, working, architecture, fundamental technologies, key challenges, and potential applications of IoT are systematically reviewed. Initially, the various definitions and elements of IoT are introduced, followed by an explanation of how an IoT works. Additionally, an outline of IoT in the context of the architecture is presented. The primary enabling technologies that will drive IoT research in the near future are examined in this paper. Furthermore, the major key challenges that the research community must address, as well as potential solutions, are investigated. Finally, the paper concludes with some potential IoT applications to demonstrate the concept's feasibility in real-world scenarios.



The goal of this survey is to assist future researchers in identifying IoT-specific challenges and selecting appropriate technology based on application requirements.


Manasha Saqib

Papers

A lightweight three factor authentication framework for IoT based critical applications

A Systematized Security and Communication Protocols Stack Review for Internet of Things

Fuzzy extractor and chaos enhanced elliptic curve cryptography for image encryption and authentication

Mapping Images Over Elliptic Curve For Encryption

A Concise Review on Internet of Things: Architecture, Enabling Technologies, Challenges, and Applications