Security of Low Computing Power Devices: A Survey of Requirements, Challenges & Possible Solutions
---
paper_title: Network security basics

paper_content:

Writing a basic article on network security is something like writing a brief introduction to flying a commercial airliner. Much must be omitted, and an optimistic goal is to enable the reader to appreciate the skills required. The first question to address is what we mean by "network security." Several possible fields of endeavor come to mind within this broad topic, and each is worthy of a lengthy article. To begin, virtually all the security policy issues apply to network as well as general computer security considerations. In fact, viewed from this perspective, network security is a subset of computer security. The art and science of cryptography and its role in providing confidentiality, integrity, and authentication represents another distinct focus even though it's an integral feature of network security policy. The topic also includes design and configuration issues for both network-perimeter and computer system security. The practical networking aspects of security include computer intrusion detection, traffic analysis, and network monitoring. This article focuses on these aspects because they principally entail a networking perspective.
---
paper_title: OPERATIONAL AND SECURITY REQUIREMENTS FOR RFID SYSTEM

paper_content:

In many fields such as wireless communication, circuit and electromagnetic areas, RFID (Radio Frequency Identification) is one of the most challenging devices in recent year because of it’s potential and ongoing applications of such as supply chains, livestock/inventory tracking, toll management, airline baggage management, access control and so on. This paper descibes briefly the various Operational and security requirements for RFID systems. It focus especially system scalability, anonymity and anti-cloning
---
paper_title: Security in RFID Networks and Communications

paper_content:

Radio frequency identification (RFID) networks are an emerging type of network that is posed to play an important role in the Internet-of-Things (IoT). One of the most critical issues facing RFID networks is that of security. Unlike conventional networks, RFID networks are characterized by the use of computationally weak RFID tags. These tags come with even more stringent resource constraints than the sensors used in sensor networks. In this chapter, we study the security aspects of RFID networks and communications. We begin by introducing the main security threats, followed by a discussion of various security mechanisms used to protect RFID networks. We conclude by studying the security mechanism of an actual large scale RFID deployment.
---
paper_title: Security Requirements for RFID Computing Systems

paper_content:

Many security and privacy protocols for RFID systems have been proposed [8, 13, 19, 20]. In most cases these protocols are evaluated in terms of security based on some model. Often the model was introduced by the creator of the protocol, in some cases borrowing parameters from the protocol for model parameters. Moreover, the models that are discussed may represent only one aspect of the necessary security services that are needed in an RFID system. Here we describe several of the security requirements that are needed in an RFID system. Further, we model these requirements. These models incorporate security requirements that include privacy of tag data, privacy of ownership, and availability of tag identity. We also construct less restrictive versions of many of these models to reflect the security needed for some less security-intensive RFID applications. Finally, we compare our model to Juels’ models [13], Avoine’s models [4] and Ohkubo et al.’s models [20].
---
paper_title: Analysis of Security Threats, Requirements, Technologies and Standards in Wireless Sensor Networks

paper_content:

As sensor networks are more and more being implemented in real world settings, it is necessary to analyze how the different requirements of these real-world applications can influence the security mechanisms. This paper offers both an overview and an analysis of the relationship between the different security threats, requirements, applications, and security technologies. Besides, it also overviews some of the existing sensor network standards, analyzing their security mechanisms.
---
paper_title: Security Analysis in Wireless Sensor Networks

paper_content:

In recent years, wireless sensor network (WSN) is employed in many application areas such as monitoring, tracking, and controlling. For many applications of WSN, security is an important requirement. However, security solutions in WSN differ from traditional networks due to resource limitation and computational constraints. This paper analyzes security solutions: TinySec, IEEE 802.15.4, SPINS, MiniSEC, LSec, LLSP, LISA, and LISP in WSN. The paper also presents characteristics, security requirements, attacks, encryption algorithms, and operation modes. This paper is considered to be useful for security designers in WSNs.
---
paper_title: Security for Contactless Smart Cards Using Cryptography

paper_content:

Contactless Smartcards are typically used in fields of electronic ticketing, transport and access control. More recently, they have been for electronic payment transactions. This apparent reluctance to the use of contactless smartcards in fields that involve money transactions as well as many other fields and applications is because contactless technology is erroneously believed to be less secure than contact technology. Research has shown that contactless smartcards are not fundamentally less secure than contact cards. However certain security threats are inherently facilitated by contactless smart cards and contactless technology. The various security issues in contactless technology are Eavesdropping, Denial of Service, Covert Transactions, and Man-in-the-Middle.
---
paper_title: Smart cards: Requirements, properties, and applications

paper_content:

Smart cards play an increasing role as 'active' security devices. Due to its microcomputer and programmable memory, a smart card can cater for the specific needs of the environment it is used in. Smart cards allow the secure handling and storage of sensitive data such as user privileges and cryptographic keys as well as the execution of cryptographic algorithms. They are secure tokens by means of which a user can be identified and authenticate a computer system or communication network and vice versa. This paper provides a comprehensive introduction into the features of chip cards, the principals of their operating system, their life-cycle and the standards governing them. It also includes a brief discussion of major applications and an outlook on the future development.
---
paper_title: Security in Wireless Sensor Networks: Issues and Challenges

paper_content:

Wireless sensor network (WSN) is an emerging technology that shows great promise for various futuristic applications both for mass public and military. The sensing technology combined with processing power and wireless communication makes it lucrative for being exploited in abundance in future. The inclusion of wireless communication technology also incurs various types of security threats. The intent of this paper is to investigate the security related issues and challenges in wireless sensor networks. We identify the security threats, review proposed security mechanisms for wireless sensor networks. We also discuss the holistic view of security for ensuring layered and robust security in wireless sensor networks.
---
paper_title: Power analysis attack: A vulnerability to smart card security

paper_content:

A major breakthrough in side channel attacks came up when analysis of power consumption by a cryptographic device led to discovery of the secret key. This analysis technique popularly known as Power Analysis Attack is now one of the most volatile and successful side channel attacks. This technique uses the power consumed by a cryptographic system as the main parameter to identify the cryptographic algorithms as well as the secret key used. The power traces of the system are statistically analyzed and the correlation between these traces and the cryptographic technique is explored to break the security. This attack has been successfully carried out on various cryptographic algorithms like DES, AES, RSA and ECC which are implemented on cryptographic devices such smart cards, FPGA, DSP, ASIC etc. In this paper we present a review on the power analysis attack and its techniques. Also, a brief detail on some of the power analysis attacks on smart card and FPGA have been presented. Couple of methods to improve such attacks has also been mentioned.
---
paper_title: Security issues in Wireless Sensor Networks: Current research and challenges

paper_content:

“Wireless Sensor Networks (WSNs) are currently using in various application areas like as military, health care, ecological, medical, process management, environmental, industrial, agriculture etc. In this article we discussed about the security issues in WSNs. First of all we constraints on the obstacles in WSNs, requirement for security and different attacks at various levels with their solutions in WSNs. In the WSNs the security issues manage by these categories: cryptography techniques, a key management schemes, secure routing protocols, secure data aggregation and intrusion detection. Along with this we also compare the various routing protocols and security mechanism at high level and low level management in WSNs”. At last we also discussed the open research issues and challenges in WSNs.
---
paper_title: Security applications challenges of RFID technology and possible countermeasures

paper_content:

Radio Frequency IDentification (RFID) is a technique for speedy and proficient identification system, it has been around for more than 50 years and was initially developed for improving warfare machinery. RFID technology bridges two technologies in the area of Information and Communication Technologies (ICT), namely Product Code (PC) technology and Wireless technology. This broad-based rapidly expanding technology impacts business, environment and society. The operating principle of an RFID system is as follows. The reader starts a communication process by radiating an electromagnetic wave. This wave will be intercepted by the antenna of the RFID tag, placed on the item to be identified. An induced current will be created at the tag and will activate the integrated circuit, enabling it to send back a wave to the reader. The reader redirects information to the host where it will be processed. RFID is used for wide range of applications in almost every field (Health, education, industry, security, management …). In this review paper, we will focus on agricultural and environmental applications.
---
paper_title: Handbook of Information and Communication Security

paper_content:

The Handbook of Information and Communication Security covers some of the latest advances in fundamentals, cryptography, intrusion detection, access control, networking (including extensive sections on optics and wireless systems), software, forensics, and legal issues. The editors intention, with respect to the presentation and sequencing of the chapters, was to create a reasonably natural flow between the various sub-topics. This handbook will be useful to researchers and graduate students in academia, as well as being an invaluable resource for university instructors who are searching for new material to cover in their security courses. In addition, the topics in this volume are highly relevant to the real world practice of information security, which should make this book a valuable resource for working IT professionals. This handbook will be a valuable resource for a diverse audience for many years to come.
---
paper_title: Cryptographic hash functions: theory and practice

paper_content:

Cryptographic hash functions are an essential building block for security applications. Until 2005, the amount of theoretical research and cryptanalysis invested in this topic was rather limited. From the hundred designs published before 2005, about 80% was cryptanalyzed; this includes widely used hash functions such as MD4 and MD5. Moreover, serious shortcomings have been identified in the theoretical foundations of existing designs. In response to this hash function crisis, a large number of papers has been published with theoretical results and novel designs. In November 2007, NIST announced the start of the SHA-3 competition, with as goal to select a new hash function family by 2012. About half of the 64 submissions were broken within months. This talk will present an outline of the state of the art of hash functions half-way the competition and attempts to identify open research issues.
---
paper_title: SPONGENT: a lightweight hash function

paper_content:

This paper proposes spongent - a family of lightweight hash functions with hash sizes of 88 (for preimage resistance only), 128, 160, 224, and 256 bits based on a sponge construction instantiated with a present-type permutation, following the hermetic sponge strategy. Its smallest implementations in ASIC require 738, 1060, 1329, 1728, and 1950 GE, respectively. To our best knowledge, at all security levels attained, it is the hash function with the smallest footprint in hardware published so far, the parameter being highly technology dependent. spongent offers a lot of flexibility in terms of serialization degree and speed. We explore some of its numerous implementation trade-offs. ::: ::: We furthermore present a security analysis of spongent. Basing the design on a present-type primitive provides confidence in its security with respect to the most important attacks. Several dedicated attack approaches are also investigated.
---
paper_title: Elliptic curve cryptography based mutual authentication protocol for low computational capacity RFID systems - performance analysis by simulations

paper_content:

RFID technology can be found in the most fields of our daily life, e.g. personal identification, supply-chain management, access control etc. For the sake of small computational capacity of RFID Tags, at first, only mathematical and logical operations and lightweight authentication methods could be used. However, thanks to the evolution of RFID technology, nowadays PKI infrastructure is also usable in this environment. In this paper we present our elliptic curve cryptography based mutual authentication protocol which proofs against the well-known attacks. We give a brief comparison with other EC based protocols in the point of view of security. Moreover, we show that our protocol is better than the others in case of performance, too. In order to measure the performance characteristics of our proposed ECC based authentication protocol and to make a comparison with others we implemented these algorithms in OMNeT++.
---
paper_title: An Improved Remote User Authentication Scheme Using Elliptic Curve Cryptography

paper_content:

Internet of Things has drastically expanded the global network for information exchange, because thousands of communication devices are becoming part of the global network. Besides the numerous benefits of global network expansion, secure communication and authentication among the comprising elements of the global network is also posing great challenges. Recently, Huang et al. proposed a key agreement scheme in order to facilitate user authenticity using elliptic curve cryptography. Huang et al. further emphasized the scheme is secure. Nevertheless, comprehensive analysis in this paper, demonstrates that Huang et al. scheme has correctness issues and is prone to impersonation/forgery attack. Then an improved scheme is presented to tenacity the said glitches existent in Huang et al.'s scheme. The security analysis of proposed scheme is substantiated in random oracle model. Furthermore, a simulation of proposed scheme is carried out by automated formal tool ProVerif. The performance and security assessments show that the scheme presented in this paper withstand impersonation attack and offers adequate security while reducing significant computation cost as compared with Huang et al.'s scheme. Hence, due to better performance and security, the proposed scheme is the appropriate one for security sensitive and resource constrained environments.
---
paper_title: Secure and Efficient User Authentication Scheme Based on Password and Smart Card for Multiserver Environment

paper_content:

The rapid development of information and network technologies motivates the emergence of various new computing paradigms, such as distributed computing, cloud computing, and edge computing. This also enables more and more network enterprises to provide multiple different services simultaneously. To ensure these services can only be accessed conveniently by authorized users, many password and smart card based authentication schemes for multiserver architecture have been proposed. Recently, Truong et al. introduced an identity based user authentication scheme on elliptic curve cryptography in multiserver environment and claimed that their scheme is secure against popular attacks. However, in this paper, we point out that their scheme suffers from offline password guessing and impersonation attack and fails to achieve security requirements of this kind of authentication scheme. Moreover, we put forward a new scheme to conquer security pitfalls in the above scheme. Security analysis indicates that the proposed scheme can be free from well-known attacks. Performance discussion demonstrates that our scheme has advantages in terms of both security property and computation efficiency and thus is more desirable for practical applications in multiserver environment.
---
paper_title: Provably Secure Dynamic ID-Based Anonymous Two-Factor Authenticated Key Exchange Protocol With Extended Security Model

paper_content:

Authenticated key exchange (AKE) protocol allows a user and a server to authenticate each other and generate a session key for the subsequent communications. With the rapid development of low-power and highly-efficient networks, such as pervasive and mobile computing network in recent years, many efficient AKE protocols have been proposed to achieve user privacy and authentication in the communications. Besides secure session key establishment, those AKE protocols offer some other useful functionalities, such as two-factor user authentication and mutual authentication. However, most of them have one or more weaknesses, such as vulnerability against lost-smart-card attack, offline dictionary attack, de-synchronization attack, or the lack of forward secrecy, and user anonymity or untraceability. Furthermore, an AKE scheme under the public key infrastructure may not be suitable for light-weight computational devices, and the security model of AKE does not capture user anonymity and resist lost-smart-card attack. In this paper, we propose a novel dynamic ID-based anonymous two-factor AKE protocol, which addresses all the above issues. Our protocol also supports smart card revocation and password update without centralized storage. Further, we extend the security model of AKE to support user anonymity and resist lost-smart-card attack, and the proposed scheme is provably secure in extended security model. The low-computational and bandwidth cost indicates that our protocol can be deployed for pervasive computing applications and mobile communications in practice.
---
paper_title: Provable Identity Based User Authentication Scheme on ECC in Multi-server Environment

paper_content:

With non-stop development of e-commerce and different internet-based applications’ demands, service providers include many physical servers scattering all over the world. If some users would like to use various services, they have to repeatedly register. Therefore, they must remember all these information such as, user-names or passwords. To solve this problem, many authentication schemes in multi-server environment are proposed. Furthermore, to prevent the adversary from keeping track of another user when he or she logins, many schemes apply dynamic identity, but they have some limitations with popular kinds of attacks such as, replay attack, impersonation attack, or man-in-the-middle attack... In 2014, Yeh (Department of Information Management, National Dong Hwa University) proposed multi-server scheme using Rivest–Shamir–Adleman (RSA). However, we discover this scheme cannot achieve two basic properties, mutual authentication and session-key agreement. In this paper, we concretely demonstrate that discovery and propose a different provable version using elliptic curve cryptosystem in multi-server environment which overcomes the limitation of Yeh’s scheme and satisfies security and efficiency.
---
paper_title: Robust Smart Card Authentication Scheme for Multi-server Architecture

paper_content:

In a traditional single server smart card authentication scheme, one server is responsible for providing services to all the registered remote users. Though if a user wishes to access network services from different servers, he or she has to register with these servers separately. To handle this issue, multi-server authentication scheme has been proposed. However, almost all these schemes available in the literature are exposed to one or the other potential attack. This paper proposes robust multi-server authentication scheme using smart cards. It eliminates the use of verification table and permits the registered remote users to access multiple servers without separate registration. Moreover, users can choose and change the password securely without any assistance from the server or registration center, supports mutual authentication and session key agreement between user and the server. Furthermore, the proposed scheme withstands present potential network attacks. Besides, our scheme is validated by using BAN logic. Comparative analysis of existing schemes with our proposed scheme is also presented in terms of various security features provided and computational complexity.
---
paper_title: A Provably Secure Multi-server Based Authentication Scheme

paper_content:

With the rapid growth of electronic commerce and demand on variants of Internet based applications, the system providing resources and business services often consists of many servers around the world. So far, a variety of authentication schemes have been published to achieve remote user authentication on multi-server communication environment. Recently, Pippal et al. proposed a multi-server based authentication protocol to pursue the system security and computation efficiency. Nevertheless, based on our analysis, the proposed scheme is insecure against user impersonation attack, server counterfeit attack, and man-in-the-middle attack. In this study, we first demonstrate how these malicious attacks can be invoked by an adversary. Then, a security enhanced authentication protocol is developed to eliminate all identified weaknesses. Meanwhile, the proposed protocol can achieve the same order of computation complexity as Pippal et al.'s protocol does.
---
paper_title: Digital Signcryption or How to Achieve Cost(Signature

paper_content:

Secure and authenticated message delivery/storage is one of the major aims of computer and communication security research. The current standard method to achieve this aim is (digital) signature followed by encryption. In this paper, we address a question on the cost of secure and authenticated message delivery/storage, namely, whether it is possible to transport/store messages of varying length in a secure and authenticated way with an expense less than that required by signature followed by encryption. This question seems to have never been addressed in the literature since the invention of public key cryptography. We then present a positive answer to the question. In particular, we discover a new cryptographic primitive termed as signcryption which simultaneously fulfills both the functions of digital signature and public key encryption in a logically single step, and with a cost significantly lower than that required by signature followed by encryption. For typical security parameters for high level security applications (size of public moduli = 1536 bits), signcryption costs 50% (31%, respectively) less in computation time and 85% (91%, respectively) less in message expansion than does signature followed by encryption based on the discrete logarithm problem (factorization problem, respectively).
---
paper_title: Secure and Efficient User Authentication Scheme Based on Password and Smart Card for Multiserver Environment

paper_content:

The rapid development of information and network technologies motivates the emergence of various new computing paradigms, such as distributed computing, cloud computing, and edge computing. This also enables more and more network enterprises to provide multiple different services simultaneously. To ensure these services can only be accessed conveniently by authorized users, many password and smart card based authentication schemes for multiserver architecture have been proposed. Recently, Truong et al. introduced an identity based user authentication scheme on elliptic curve cryptography in multiserver environment and claimed that their scheme is secure against popular attacks. However, in this paper, we point out that their scheme suffers from offline password guessing and impersonation attack and fails to achieve security requirements of this kind of authentication scheme. Moreover, we put forward a new scheme to conquer security pitfalls in the above scheme. Security analysis indicates that the proposed scheme can be free from well-known attacks. Performance discussion demonstrates that our scheme has advantages in terms of both security property and computation efficiency and thus is more desirable for practical applications in multiserver environment.
---
paper_title: Provable Identity Based User Authentication Scheme on ECC in Multi-server Environment

paper_content:

With non-stop development of e-commerce and different internet-based applications’ demands, service providers include many physical servers scattering all over the world. If some users would like to use various services, they have to repeatedly register. Therefore, they must remember all these information such as, user-names or passwords. To solve this problem, many authentication schemes in multi-server environment are proposed. Furthermore, to prevent the adversary from keeping track of another user when he or she logins, many schemes apply dynamic identity, but they have some limitations with popular kinds of attacks such as, replay attack, impersonation attack, or man-in-the-middle attack... In 2014, Yeh (Department of Information Management, National Dong Hwa University) proposed multi-server scheme using Rivest–Shamir–Adleman (RSA). However, we discover this scheme cannot achieve two basic properties, mutual authentication and session-key agreement. In this paper, we concretely demonstrate that discovery and propose a different provable version using elliptic curve cryptosystem in multi-server environment which overcomes the limitation of Yeh’s scheme and satisfies security and efficiency.
---
paper_title: You Can Clone But You Cannot Hide: A Survey of Clone Prevention and Detection for RFID

paper_content:

Radio-frequency identification (RFID) is one of the driving technologies for Internet of Things. The architecture-succinctness and cost-effectiveness of RFID tags promise their proliferation as well as allure security and privacy breaches. The cloning attack using clone tags to impersonate genuine tags can lead to unimaginable threats because RFID applications equate tag genuineness to the authenticity of tagged objects. Proposed countermeasures, however, keep showing limitations in effectiveness, efficiency, security, privacy, or applicability as new RFID applications emerge. The countermeasures therefore require constant review and improvement to stay at the leading edge. In this paper, we conduct the first comprehensive and systematic survey of RFID clone prevention and detection solutions. We systematically classify existing RFID cloning countermeasures over the period 2003–2016, sketch the main idea and highlight the strengths and weaknesses of each solution type, and summarize the similarity and difference among solution types. We find that RFID cloning countermeasures turn to be much more complex to design than they were thought in the literature. Prevention solutions can hardly thwart RFID cloning completely. Detection solutions may have specific application requirements to take effect. Many open issues further complicate the design of RFID cloning countermeasures. We hope that our survey can provide academic researchers and industrial engineers with useful references to combat RFID cloning and therefore to secure RFID ecosystem.
---
paper_title: Scrutinising well-known countermeasures against clone node attack in mobile wireless sensor networks

paper_content:

Wireless Sensor Networks WSNs are often deployed in unattended environments where an adversary can easily physically capture and compromise sensor nodes. She then creates replicas of the compromised nodes instigating further attacks by spreading these replicas over the network, incurring serious damages to the network, so these replicas should be detected as early as possible. Most of the previous research efforts on detecting replica node attacks adopt static network models which are not suitable for mobile WSNs. In mobile WSN, sensor nodes are freely and randomly roaming all the time and they do not have any fixed neighbour to communicate with because these mobile nodes meet with one another occasionally and in an unpredictable manner. In this paper, we have surveyed all the existing solutions proposed so far for the detection of replica or clone nodes in mobile WSN by comparing them comprehensively and pointing out their drawbacks and shortcomings.
---
paper_title: Modified Original Smart Cards and Smart Card Clone Countermeasures

paper_content:

Conditional Access Systems are used in Pay-Tv Sys- tems to ensure conditional access to broadcasted data and charge subscribers a subscription fee. Smart cards are end- user security devices to store subscribers entitlements, re- quired to access data. On the other hand, pirates clone or modify smart cards to gain access to broadcasted data with- out paying any fees. This paper presents new countermea- sures, based on fingerprints, to avoid smart cards cloning or modifying in Conditional Access Systems for digital Tv broadcasting.
---
paper_title: Security vulnerabilities and countermeasures against jamming attacks in Wireless Sensor Networks: A survey

paper_content:

Wireless sensor network is a collection of several nodes in a network capable of sharing information in wireless medium. Due to the presence of wireless medium it is highly vulnerable to network attacks. WSN has many applications ranging from monitoring of environment to highly restricted military and surveillance where security is a major requirement. The most common and dangerous attack which can be proved harmful for WSN is jamming attack. In jamming an adversary can limit the capabilities of WSN communication by interfering with RF signals using certain jamming devices. Securing a WSN is one of the major concerns of network safety. In this paper, we have discussed various jamming techniques and types of jammers. We have also listed some countermeasures of jamming which, if used, depending on the application can significantly reduce the chances and effects of jamming. Some limitations and challenges of WSN are also explained. Starting from the introduction about the WSN, our work will cover all the pros and cons of the jammers and countermeasures which can help an interested researcher to gain some knowledge about the topic.
---
paper_title: On Eavesdropping Attacks in Wireless Networks

paper_content:

Eavesdropping attacks have become one of major threats in wireless networks since it is the prerequisite of other malicious attacks. Most of current studies concentrate on designing anti-eavesdropping schemes. There are few studies on quantitatively evaluating the eavesdropping attacks conducted by the malicious nodes. However, it is important to investigate the eavesdropping attacks since we can design cost-effective antieavesdropping schemes if we know the eavesdropping behaviors. For example, we can offer a better protection on the confidential communications if we know which location is more vulnerable to eavesdropping attacks. In this paper, we propose a general analytical framework to quantify the eavesdropping probability in wireless networks with consideration of various factors, such as node density and impacts of channel conditions. We validate the accuracy of our proposed model by conducting extensive simulations. Besides, we show that our general model can also be used to underwater acoustic networks.
---
paper_title: An Ultra-Lightweight Authentication Scheme for Heterogeneous Wireless Sensor Networks in the Context of Internet of Things

paper_content:

The evolution of Internet of Things (IoT) is changing traditional perceptions of the current Internet towards a vision of smart objects interacting with each other. Wireless Sensor Networks play an important role and support different applications domains in the IoT environment. However, security issues are the major obstacle for their deployment. Among these issues, authentication of the different interconnected entities. In this paper, we are interested to the case of the interconnection of a sensor node with a remote user. We propose a new lightweight authentication scheme adapted to the resource constrained environment. This scheme allows both of the sensor and the remote user to authenticate each other in order to secure the communication. Our scheme uses nonces, exclusive-or operations, and Keyed-Hash message authentication to check the integrity of the different exchanges. The proposed method stands out in that it provides authentication with less energy consumption, and it terminates with a session key agreement between the sensor node and the remote user. To assess our scheme, we carry out a performance and security analysis. The obtained results show that our scheme saves energy, and provides a resistance against different types of attacks.
---
paper_title: DoS attacks and countermeasures on network devices

paper_content:

Denial of service (DoS) attacks have been one of the major network security problems over the last decades. DoS attacks can usually be mounted on hardware devices such as routers and firewalls to send spoofing messages to the target network. Thus, methods for defeating such DoS attacks are highly related to the vulnerabilities in the hardware devices. In this paper, we investigate the potential attacks specific to the hardware infrastructure of the network and also categorize the countermeasures against DoS attacks that can be implemented on hardware devices. Moreover, we analyze the advantages of the emerging silicon physical unclonable functions and discuss the potential of integrating them into authentication methods in order to defend against DoS attacks.
---
paper_title: Power Analysis Attacks and Countermeasures

paper_content:

This article focuses on power analysis attacks because they have received by far the most attention in recent years. They are powerful and can be executed relatively easily. This article provides an introduction to these attacks and discusses countermeasures against them. In particular, we focus on countermeasures that can be implemented at the cell level. This article presents an overview of power analysis attacks, which are based on the measurement of the power consumed by cryptographic ICs, and countermeasures against them.
---
paper_title: Differential Power Analysis: Attacks and Resisting Techniques

paper_content:

Differential Power Analysis (DPA) is a statistical approach to analyze the power consumption of a cryptographic system to break its security infrastructure. It has challenged the vulnerability of most of the cryptographic techniques like DES, AES, RSA etc. With DPA, attackers passively collect the power traces of the system and then make a comparative analysis with some hypothetical power traces. The analysis result having high value reveals the secret key used. This kind of attack has been explored by many researchers and has proposed techniques to make such attacks highly efficient. In this paper we present a detail on DPA along with the models and types for such attack. We also present some of the recent attack techniques as well as countermeasures on DPA.
---
paper_title: Side channel attacks and their mitigation techniques

paper_content:

Side channel cryptanalysis is one of the most volatile fields of research in security prospects. It has proved that cryptanalysis is no more confined to its dependence on plain text or cipher text. Indeed side channel attack uses the physical characteristics of the cryptographic device to find the cryptographic algorithm used and also the secret key. It is one of the most efficient techniques and has successfully broken almost all the cryptographic algorithms today. In this paper we aim to present a review on the various side channel attacks possible. Also, the techniques proposed to mitigate such an attack have been stated.
---
paper_title: Hybrid Cryptosystem Using Tiny Encryption Algorithm and LUC Algorithm

paper_content:

Security becomes a very important issue in data transmission and there are so many methods to make files more secure. One of that method is cryptography. Cryptography is a method to secure file by writing the hidden code to cover the original file. Therefore, if the people do not involve in cryptography, they cannot decrypt the hidden code to read the original file. There are many methods are used in cryptography, one of that method is hybrid cryptosystem. A hybrid cryptosystem is a method that uses a symmetric algorithm to secure the file and use an asymmetric algorithm to secure the symmetric algorithm key. In this research, TEA algorithm is used as symmetric algorithm and LUC algorithm is used as an asymmetric algorithm. The system is tested by encrypting and decrypting the file by using TEA algorithm and using LUC algorithm to encrypt and decrypt the TEA key. The result of this research is by using TEA Algorithm to encrypt the file, the cipher text form is the character from ASCII (American Standard for Information Interchange) table in the form of hexadecimal numbers and the cipher text size increase by sixteen bytes as the plaintext length is increased by eight characters.
---
paper_title: An Efficient Hybrid Cryptographic Algorithm, Consuming Less Time for Exchanging Information in Wireless Sensor Networks

paper_content:

Set of autonomous nodes attached together and to a base station, working in a particular system is called wireless sensor network. Due to its wireless and dynamic nature, wireless sensor networks (WSNs) are easily attacked in comparison to wired networks. Now days, WSNs are not only used as routers but also working as communication end points as well as considered responsible for security of exchanging information. For fulfilling the security requirements in WSNs, scheme cryptography is widely used in which signed messages are being transferred from node to node. Cryptography is mainly classified in symmetric and asymmetric schemes. Public and private keys are used for encryption and decryption process in asymmetric key cryptography while single key is used in symmetric cryptography. Asymmetric cryptography provides high level of security and authenticity on cost of consumption of high amount of memory, power and bandwidth. On the other hand, symmetric key cryptography is considerably efficient and less resource consuming but providing less security level. Efficiency of network is considered is assumed major issue in exchanging of information in WSNs. In this paper, keeping efficiency of network in consideration, such hybrid algorithm has been suggested which satisfies the required security levels on high efficiency level. The proposed hybrid algorithm proves scalable and its performance is quite faster than single asymmetric cryptography and more secure than symmetric algorithms.
---
paper_title: An Efficient Hybrid Encryption Technique Based on DES and RSA for Textual Data

paper_content:

The data security in almost every field is a challenging concern all around the globe. The application area may be as wide in the area of banking, internet, network and mobile data etc. The main focus of this paper is to secure the text data and provide a comparison with different parameters. DES and RSA are being used for comparison. A hybrid approach has been proposed in this paper based on the combination of DES and RSA algorithm. The comparison is done on the basis of size, length, number of keys and the time of encryption and decryption. The overall results suggest the hybrid encryption approach for the encryption and decryption process.
---
paper_title: Digital Signcryption or How to Achieve Cost(Signature

paper_content:

Secure and authenticated message delivery/storage is one of the major aims of computer and communication security research. The current standard method to achieve this aim is (digital) signature followed by encryption. In this paper, we address a question on the cost of secure and authenticated message delivery/storage, namely, whether it is possible to transport/store messages of varying length in a secure and authenticated way with an expense less than that required by signature followed by encryption. This question seems to have never been addressed in the literature since the invention of public key cryptography. We then present a positive answer to the question. In particular, we discover a new cryptographic primitive termed as signcryption which simultaneously fulfills both the functions of digital signature and public key encryption in a logically single step, and with a cost significantly lower than that required by signature followed by encryption. For typical security parameters for high level security applications (size of public moduli = 1536 bits), signcryption costs 50% (31%, respectively) less in computation time and 85% (91%, respectively) less in message expansion than does signature followed by encryption based on the discrete logarithm problem (factorization problem, respectively).
---
paper_title: An Efficient Signcryption Scheme based on the Elliptic Curve Discrete Logarithm Problem

paper_content:

Elliptic Curve Cryptosystems (ECC) have recently received significant attention by researchers due to their performance. Here, an efficient signcryption scheme based on elliptic curve will be proposed, which can effectively combine the functionalities of digital signature and encryption. Since the security of the proposed method is based on the difficulty of solving discrete logarithm over an elliptic curve. The purposes of this paper are to demonstrate how to specify signcryption scheme on elliptic curves over finite field, and to examine the efficiency of such scheme. The results analysis are explained.
---
paper_title: Provably Secure Dynamic ID-Based Anonymous Two-Factor Authenticated Key Exchange Protocol With Extended Security Model

paper_content:

Authenticated key exchange (AKE) protocol allows a user and a server to authenticate each other and generate a session key for the subsequent communications. With the rapid development of low-power and highly-efficient networks, such as pervasive and mobile computing network in recent years, many efficient AKE protocols have been proposed to achieve user privacy and authentication in the communications. Besides secure session key establishment, those AKE protocols offer some other useful functionalities, such as two-factor user authentication and mutual authentication. However, most of them have one or more weaknesses, such as vulnerability against lost-smart-card attack, offline dictionary attack, de-synchronization attack, or the lack of forward secrecy, and user anonymity or untraceability. Furthermore, an AKE scheme under the public key infrastructure may not be suitable for light-weight computational devices, and the security model of AKE does not capture user anonymity and resist lost-smart-card attack. In this paper, we propose a novel dynamic ID-based anonymous two-factor AKE protocol, which addresses all the above issues. Our protocol also supports smart card revocation and password update without centralized storage. Further, we extend the security model of AKE to support user anonymity and resist lost-smart-card attack, and the proposed scheme is provably secure in extended security model. The low-computational and bandwidth cost indicates that our protocol can be deployed for pervasive computing applications and mobile communications in practice.
---
paper_title: A secure and efficient authenticated encryption for electronic payment systems using elliptic curve cryptography

paper_content:

The use of e-payment system for electronic trade is on its way to make daily life more easy and convenient. Contrarily, there are a number of security issues to be addressed, user anonymity and fair exchange have become important concerns along with authentication, confidentiality, integrity and non-repudiation. In a number of existing e-payment schemes, the customer pays for the product before acquiring it. Furthermore, many such schemes require very high computation and communication costs. To address such issues recently Yang et al. proposed an authenticated encryption scheme and an e-payment scheme based on their authenticated encryption. They excluded the need of digital signatures for authentication. Further they claimed their schemes to resist replay, man-in-middle, impersonation and identity theft attack while providing confidentiality, authenticity, integrity and privacy protection. However our analysis exposed that Yang et al.'s both authenticated encryption scheme and e-payment system are vulnerable to impersonation attack. An adversary just having knowledge of public parameters can easily masquerade as a legal user. Furthermore, we proposed improved authenticated encryption and e-payment schemes to overcome weaknesses of Yang et al.'s schemes. We prove the security of our schemes using automated tool ProVerif. The improved schemes are more robust and more lightweight than Yang et al.'s schemes which is evident from security and performance analysis.
---

Title: Security of Low Computing Power Devices: A Survey of Requirements, Challenges & Possible Solutions

Section 1: Introduction
Description 1: Provide an overview of the rapid increase in the use of heterogeneous computing devices, their security needs, and the importance of analyzing the computational power to design appropriate security solutions.

Section 2: Notion of computing power
Description 2: Explain the computing power of various devices, highlighting the specifications of low computing power devices (LCPDs) and how they impact the design of security schemes.

Section 3: Constraints for LCPD
Description 3: Discuss the three main constraints of LCPDs: less computing capacity, limited power, and unreliable communication.

Section 4: Advantages and disadvantages of different LCPDs
Description 4: Present a comparative overview of various LCPDs, their application areas, advantages, disadvantages, and common types including sensor nodes, RFID tags, and smart cards.

Section 5: Security requirements of LCPDs
Description 5: Detail the essential security features needed for LCPDs including confidentiality, integrity, authentication, availability, forward secrecy, and non-repudiation.

Section 6: Challenges in the security of LCPDs
Description 6: Elaborate on the major challenges faced regarding security of LCPDs, focusing on threats and attacks as well as the choice of cryptographic mechanisms.

Section 7: Threats and attacks
Description 7: Detail different types of threats and attacks on LCPDs and how these impact their security.

Section 8: Choice of cryptographic mechanism
Description 8: Discuss potential cryptographic mechanisms for securing LCPDs including symmetric key cryptography, elliptic curve cryptography, lightweight hash functions, and the limitations of RSA-based schemes.

Section 9: Recent low cost security solutions for LCPDs
Description 9: Survey recent low-cost security protocols specifically designed for wireless sensors, RFID tags, and smart cards, comparing their computational time, communication cost, and storage cost.

Section 10: Possible security solutions for LCPDs
Description 10: Propose general and specific countermeasures against attacks on LCPDs and discuss potential cryptographic schemes, such as hybrid security mechanisms and signcryption.

Section 11: Conclusion and future scope
Description 11: Summarize the key points regarding the security of LCPDs, the challenges faced, and the scope for future research in designing efficient lightweight security solutions.