The infusion of information communication technology (ICT) into health services is emerging as an active area of research. It has several advantages but perhaps the most important one is providing medical benefits to one and all irrespective of geographic boundaries in a cost effective manner, providing global expertise and holistic services, in a time bound manner. This paper provides a systematic review of technological growth in eHealth services. The present study reviews and analyzes the role of four important technologies, namely, satellite, internet, mobile, and cloud for providing health services.

/pdf/the-technological-growth-in-ehealth-services-2v5wzuuzpw.pdf

The Technological Growth in eHealth Services.

The Internet of Things (IoT) brings a set of unique and complex challenges to the field of digital forensics. To take advantage of the volume and variety of data captured by and stored in ubiquitous IoT services, forensic investigators need to draw upon evidence-acquisition methods and techniques from all areas of digital forensics and possibly create new IoT-specific investigation processes. Although a number of conceptual process models have been developed to address the unique characteristics of the IoT, many challenges remain unresolved.

Internet of Things Forensics: The Need, Process Models, and Open Issues

Internet of things (IoT) is internetworking of various physical devices to provide a range of services and applications. IoT is a rapidly growing field, on an account of this; the security measurements for IoT should be at first concern. In the modern day world, the most emerging cyber-attack threat for IoT is ransomware attack. Ransomware is a kind of malware with the aim of rendering a victim's computer unusable or inaccessible, and then asking the user to pay a ransom to revert the destruction. In this paper we are evaluating ransomware attacks statistics for the past 2 years and the present year to estimate growth rate of the most emerging ransomware families from the last 3 years to evaluate most threatening ransomware attacks for IoT. Growth rate results shows that the number of attacks for Cryptowall and locky ransomware are notably increasing therefore, these ransomware families are potential threat to IoT. Moreover, we present a Cryptowall ransomware attack detection model based on the communication and behavioral study of Cryptowall for IoT environment. The proposed model observes incoming TCP/IP traffic through web proxy server then extracts TCP/IP header and uses command and control (C&C) server black listing to detect ransomware attacks.

IoT based ransomware growth rate evaluation and detection using command and control blacklisting

Abstract Chaos-based cryptosystems have been an active area of research in recent years. Although these algorithms are not standardized like AES, DES, RSA, etc., chaos-based cryptosystems like Chebyshev polynomials can provide additional security when used with standard public key cryptosystems like RSA and El-gamal. Standard encryption algorithms such as AES have always been the primary choice, but when it comes to image or video encryption, many researchers recommend chaos-based encryption techniques due to their computational efficiency. This paper presents a survey on the most up-to-date chaos-based image encryption techniques and classifies them into spatial, temporal and spatiotemporal domains for better understanding. The significant improvements in the field of image encryption are discussed. In addition, comparative analysis is performed to validate the evaluation matrices for quantifying the encryption algorithms’ security and performance in recent papers. 

/pdf/survey-on-image-encryption-techniques-using-chaotic-maps-in-3aktmd4h.pdf

Survey on image encryption techniques using chaotic maps in spatial, transform and spatiotemporal domains

The necessity to improve security in a multi-cloud environment has become very urgent in recent years. Although in this topic, many methods using the message authentication code had been realized but, the results of these methods are unsatisfactory and heavy to apply, which, is why the security problem remains unresolved in this environment. This article proposes a new model that provides authentication and data integrity in a distributed and interoperable environment. For that in this paper, the authors first analyze some security models used in a large and distributed environment, and then, we introduce a new model to solve security issues in this environment. Our approach consists of three steps, the first step, was to propose a private virtual network to secure the data in transit. Secondly, we used an authentication method based on data encryption, to protect the identity of the user and his data, and finally, we realize an algorithm to know the integrity of data distributed on the various clouds of the system. The model achieves both identity authentication and the ability to inter-operate between processes running on different cloud’s provider. A data integrity algorithm will be demonstrated. The results of this proposed model can efficiently and safely construct a reliable and stable system in the cross-cloud environment.

/pdf/ensuring-user-authentication-and-data-integrity-in-multi-56f7hsdkfz.pdf

Ensuring user authentication and data integrity in multi-cloud environment

Distributed Denial of Service (DDoS) is a type of attack in the application layer initiated from the various hosts to a single web server. The aim of this attack is to consume all the resources of the targeted system by exploiting the vulnerability. We proposed a mathematical model called Recurrence Quantification Analysis (RQA) for detecting the DDoS attacks by computing entropy and determinism of selected packet attributes. To detect the anomalies and check the performance we considered the live traffic traces from the network and various RQA parameters like entropy, laminarity and determinism were used to determine the uncertainty or randomness in the dataset.

A Recurrence Quantification Analytical Approach to Detect DDoS Attacks

Office in Cloud: Approach to Authentication and Authorization

Some of the common works like, upload and retrieval of data, buying and selling things, earning and donating or transaction of money etc., are the most common works performed in daily life through internet. For every user who is accessing the internet regularly, their highest priority is to make sure that there data is secured. Users are willing to pay huge amount of money to the service provider for maintaining the security. But the intention of malicious users is to access and misuse others data. For that they are using zombie bots. Always Bots are not the only malicious, legitimate authorized user can also impersonate to access the data illegally. This makes the job tougher to discriminate between the bots and boots. For providing security form that threats, here we are proposing a novel RSJ Approach by User Authentication. RSJ approach is a secure way for providing the security to the user form both bots and malicious users.

RSJ Approach for User Authentication

DDoS attack in internet and Voice-over-IP network can be detected using IP traceback mechanism. VoIP is the technology to transport voice communication over IP network. Such as internet which is capable of making telephone calls over packet switching network. It exploits advance voice compression technique and bandwidth sharing in packet switching network. VoIP works on IP backbone hence it also vulnerable to all types of attacks and internet is susceptible with.

Among these, DDoS plays a vital role and has major impact on its performance. The goal of IP traceback is to trace the path of an IP packet to its origin. DDoS is a distributed collaborative large scale dos attack which attack on a wide range of subtle. It’s very easy to implement and difficult to prevent and trace.

The goal of distributed denial of service attack is to deny legitimate users access to a particular resource. This is done by exploitation system weakness or adding computational system overload or by misusing a protocol. Proper network configuration made DoS attack difficult to accomplish. This paper presents a survey on the existing mechanisms and an analysis on their merits and demerits.

Novel Survey on Detection of DDoS Attack Using Traceback Technique in VoIP Networks

There has been a high increase in air traffic for the past ten years and to attract more customers many in-flight facilities are introduced by the carriers. These include Video-OnDemand, use of Personal Digital Assistants (PDA) etc. To provide these facilities the VoIP technology is used more often. But maintaining VoIP infrastructure along with the Aircraft Data Network equipment’s will be more cumbersome for the carriers, along with the added infrastructure cost. Thus an improvised architecture has been proposed which helps carriers provide these facilities to the customers in a cost effective and reliable manner. Most of the aircraft communications to the ground rely on satellite for providing these services to the customers. The proposed method uses satellite communication along with cloud based VoIP to provide an efficient quality of service to the passengers. The ground stations used for satellite communication would be connected to a high speed Storage Area Network, to which the cloud network on which the VoIP application is running is also connected. So that whenever a passenger on the flight sends a message/data to the VoIP application first it would be send to the ground stations via the satellite which is then accessed through the SAN server, thus in turn providing faster, reliable and efficient communication to the customers.

http://www.sersc.org/journals/IJGDC/vol7_no6/2.pdf

R. Thandeeswaran

Papers

A Recurrence Quantification Analytical Approach to Detect DDoS Attacks

Office in Cloud: Approach to Authentication and Authorization

RSJ Approach for User Authentication

Novel Survey on Detection of DDoS Attack Using Traceback Technique in VoIP Networks

Cloud based VoIP Application in Aircraft Data Networks