Preserving data security in distributed fog computing

Abstract

In this paper, a novel cryptographic solution is proposed to secure data in fog computing. The solution combines the AES-GMAC operation mode with information dispersal over GF(2 w) to provide data confidentiality, integrity, and availability along with source authentication. The value of w is flexible (8, 16, 32 or 64) and it could be configured according to the fog device features. Moreover, the proposed cryptographic solution is based on the dynamic key-dependent approach, which allows for a good compromise between the security level and computational complexity. In the proposed solution, the collected data at one fog node is encrypted, authenticated and dispersed in a pseudorandom manner to its n neighbor fog nodes. For data recovery, any k of the n fragments along with the corresponding dynamic key are required to retrieve the original data. This complicates the attacker's task who needs to compromise at least k fog nodes to disclose the encrypted data. Additionally, attackers should seek the dynamic key, which is different for each input data. On the other hand, redundant fragments protect the stored data against up to (n − k) fog nodes' failure or unavailability. The security and performance analysis tests show that the proposed security scheme exhibits a high level of efficiency and robustness.

Robotics cyber security: vulnerabilities, attacks, countermeasures, and recommendations

“…This can be attained by using the one round cipher approach, where cipher requires only one round and with a minimum number of operations [359][360][361][362][363]. We think that modern cryptographic algorithms should use the dynamic cryptographic primitives approach to reach a good balance between security and performance level [364]. New research work should be presented towards reaching the best balance between performance, security and real implementations [365].…”

TRESC: Towards redesigning existing symmetric ciphers

“…The attackers would try to recover the secret key given that the static ciphers use fixed cryptographic primitives [14]. Thus, dynamic lightweight cipher schemes are required to strike the balance between security and performance [15], [16], [17], [18], [19], [20].…”

Towards a secure ITS: Overview, challenges and solutions

“…• Availability: Exchanged information should be processed and made available [88,89,90]. These kinds of attacks are very dangerous for real-time applications since a small delay can make the message useless.…”