The advent of three-dimensional (3D) printing has found a unique and prominent role in Industry 4.0 and is rapidly gaining popularity in the manufacturing industry. 3D printing offers many advantages over conventional manufacturing methods, making it an attractive alternative that is more cost-effective and efficient than conventional manufacturing methods. With the Internet of Things (IoT) at the heart of this new movement, control over manufacturing methods now enters the cyber domain, offering endless possibilities in manufacturing automation and optimization. However, as disruptive and innovative as this may seem, there is grave concern about the cyber-security risks involved. These security aspects are often overlooked, particularly by promising new start-ups and parties that are not too familiar with the risks involved in not having proper cyber-security measures in place. This paper explores some of the cyber-security risks involved in the bridge between industrial manufacturing and Industry 4.0, as well as the associated countermeasures already deployed or currently under development. These aspects are then contextualized in terms of Industry 4.0 in order to serve as a basis for and assist with future development in this field.

A review of industry 4.0 manufacturing process security risks

Beginning around 1996, numerous graphical password schemes have been proposed, motivated by improving password usability and security, two key factors in password scheme evaluation. In this paper, we focus on the security aspects of existing graphical password schemes, which not only gives a simple introduction of attack methods but also intends to provide an in-depth analysis with specific schemes. The paper first categorizes existing graphical password schemes into four kinds according to the authentication style and provides a comprehensive introduction and analysis for each scheme, highlighting security aspects. Then we review the known attack methods, categorize them into two kinds, and summarize the security reported in some user studies of those schemes. Finally, some suggestions are given for future research.

A Survey on the Use of Graphical Passwords in Security

A method and system for user authentication uses photos, pictures, images, pictures of words, logos, graphics, icons, or pictures of colors (graphical elements) as password elements (graphical password) to gain access to a secure platform, section of a platform, specific content, website, computer, mobile device or other electronic device (secure content). The Method and system provide the creation, use in authentication and maintenance of the graphical password. Graphical password creation is initiated through user selection and platform storage of a subset of one or more platform provided or user provided graphical elements (secret graphical elements). The graphical elements are photos, pictures or images that are memorable to the user and are from within one or more relevant categories, e.g. colors, playing cards, animals. A graphical user interface (GUI) having virtual dials, wheels, reels or keypads to display images is used to implement the login/authentication process.

Electronic authentication using pictures and images

A method, apparatus and computer program product provide an indication to a first user as to the content presented to another user by the head mounted display of the other user. In the context of a method, information is received relating to content presented to a second user by a head mounted display of the second user. Based upon the information, the method also includes causing, with a processor, an indication to be presented to a first user identifying the content presented to the second user by the head mounted display of the second user.

Method and apparatus for providing an indication regarding content presented to another user

A system and method is provided for implementing platform security on a consumer electronic device having an open development platform. The device is of the type which includes an abstraction layer operable between device hardware and application software. A secured software agent is provided for embedding within the abstraction layer forming the operating system. The secured software agent is configured to limit access to the abstraction layer by either blocking loadable kernel modules from loading, blocking writing to the system call table or blocking requests to attach debug utilities to certified applications or kernel components.

Method and system for preventing and detecting security threats

This paper introduces a geometry-preserving protection paradigm that heavily distorts 3D objects while preserving some intrinsic geometrical property (e.g. the bounding box or the convex hull), thereby avoiding a global corruption of the whole 3D scene. Backward compatibility is guaranteed de facto : legacy non-compliant rendering engines can display 3D scenes containing protected objects, but only compliant renderers with the necessary credentials can display deprotected objects. We propose a couple of permutation-based encryption algorithms embracing this geometry-preserving strategy and then detail some challenges related to them. For instance, we discuss the sideeffects of such protection mechanisms on other baseline 3D primitives, e.g. the rendering time, as well as the difficulty of assessing the security of such algorithms.

Geometry-preserving Encryption for 3D Meshes

The access control exercised by the Java Card firewall can be bypassed by the use of shareable objects. To help detecting unwanted access to objects, we propose a static analysis that calculates a safe approximation of the possible flow of objects between Java Card applets. The analysis deals with a subset of the Java Card byte-code focusing on aspects of the Java Card firewall, method invocation, field access, variable access, shareable objects and contexts. The technical vehicle for achieving this task is a new kind of constraints: quantified conditional constraints, that permits us to model precisely the effects of the Java Card firewall by only producing a constraint if the corresponding operation is authorized by the firewall.

Secure object flow analysis for java card

This paper presents an operational semantics for a subset of Java Card bytecode, focussing on aspects of the Java Card firewall, method invocation, field access, variable access, shareable objects and contexts. The goal is to provide a precise description of the Java Card firewall using standard tools from operational semantics. Such a description is necessary for formally arguing the correctness of tools for validating the security of Java Card applications.

/pdf/an-operational-semantics-of-the-java-card-firewall-1p7kuatmnk.pdf

An Operational Semantics of the Java Card Firewall

A device and a method for graphical passwords. A device displays an initial image comprising a plurality of graphical elements, each graphical element having at least two variants; receives user input to select a variant of a number of the graphical elements, thereby generating a modified image; and generates the secret value from at least the selected variants of the graphical elements. The graphical elements are advantageously seamlessly integrated in the images, thereby making the system resistant to shoulder surfing attacks.

Method and a device for generating a secret value

This paper relates to a novel graphical system named “Click-a-Secret” that allows entering a secret through interactions with an image. Seamless modifications of the image will create a new image and derive corresponding secret. In this article, we will focus on access control related applications. However, other usages are possible in various cryptographic systems (e.g.: secret key to encrypt data, etc.). It is well known that humans use long-term memory for storing pictures therefore leading to better recall of images compared to text. This leads to improved memorization of graphical passwords.

Marc Eluard

Papers

Geometry-preserving Encryption for 3D Meshes

Secure object flow analysis for java card

An Operational Semantics of the Java Card Firewall

Method and a device for generating a secret value

Action-based graphical password: “Click-a-Secret”