Information Security Methods—Modern Research Directions

Abstract

In Tomsk University of Control Systems and Radioelectronics (TUSUR) one of the main areas of research is information security. The work is carried out by a scientific group under the guidance of Professor Shelupanov. One of the directions is the development of a comprehensive approach to assessing the security of the information systems. This direction includes the construction of an information security threats model and a protection system model, which allow to compile a complete list of threats and methods of protection against them. The main directions of information security tools development are dynamic methods of biometrics, methods for generating prime numbers for data encryption, steganography, methods and means of data protection in Internet of Things (IoT) systems. The article presents the main results of research in the listed areas of information security. The resultant properties in symmetric cryptography are based on the properties of the power of the generating functions. The authors have obtained symmetric principles for the development of primality testing algorithms, as discussed in the Appendix.Symmetry 2018, 10, x FOR PEER REVIEW 3 of 33 Ported to AMR system devices, IPsec ensures mutual authentication of network devices using the IKEv2 protocol. Optionally, the network can be configured based on the EAP-PSK protocol. During configuration, the devices receive network addresses and authentication keys, at which point the execution of EAP-PSK is stopped and data is transferred via IPsec. Another option is to use pre-installed certificates on the devices. In this case, the initial configuration is done manually, but the network does not require EAP-PSK to be used.Data integrity control and encryption during transmission are provided by ESP, which is the protocol used in IPsec at the transport level. This protocol ensures the security of both the data transmitted and packet headers at the network level.This approach makes it possible to ensure reliable authentication of the AMR system devices and the security of the data to be transmitted and opens a wide range of options for the configuration of network operation; however, it cannot be used in networks with heterogeneous communication channels. The EAP-PSK-based approach offers less flexibility but is suitable for networks with heterogeneous communication channels. For an AMR system, a list of threats was proposed based on the developed methodology. Threats to the confidentiality of the system are threats related to the collection of information about the system. This can be a list of devices, software versions, authentication data, access control policies, network addresses, interaction protocols, etc. Threats to the integrity of the automated system for commercial accounting are: substitution of an object, substitution of a communication channel, deletion of an object, destruction of a communication channel, addition of an unauthorized object, creation of an unauthorized communication channel; change of communication channel or object settings...

A Modulo Function-Based Robust Asymmetric Variable Data Hiding Using DCT

“…They proposed utilizing a prediction technique and judgment process to efficiently choose the embeddable blocks in data hiding, extraction, and recovery stages. At the end of image compression, the processed image was used for watermarking and steganography [11,12].…”

Symmetry Oriented Covert Acoustic Communication by Mimicking Humpback Whale Song

“…The communication frame consists of the DCT watermarked mimicked signal. 3 The frequency spectrum of a real humpback whale song is shown in Figure 2. The song has a wide range of frequencies; however, the main energy lies in the low frequency region around 150 Hz.…”

“…The communication frame consists of the DCT watermarked mimicked signal. 3 The synchronization header consists of a humpback whale song segment with a checksum of bits. We added a checksum as it will verify the mimicked signal for the receiver.…”

“…Transmitting data covertly in the underwater medium is termed as covert underwater acoustic communication (CUAC). The information needs to be kept secret from any eavesdroppers [3], but can be decoded by the intended receiver. A variety of ways have been investigated for CUAC, which includes low SNR communication, encryption, and disguising as sea marine mammals [4,5].…”

Model of Threats to Computer Network Software

“…An urgent task is to develop an effective methodology for compiling a list of threats to information security, the use of which will minimize the impact of the professional level and subjective opinion of an expert. This study is part of the development of a comprehensive approach to assessing the security of the information systems conducted in Tomsk University of Control Systems and Radioelectronics [9]. This paper addresses the issue of identifying security threats to computer network software.…”