Frontiers in Cyber Security : 5th International Conference, FCS 2022, Kumasi, Ghana, December 13–15, 2022, Proceedings

material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed. The use of general descriptive names, registered names, trademarks, service marks, etc. in this publication does not imply, even in the absence of a specific statement, that such names are exempt from the relevant protective laws and regulations and therefore free for general use. The publisher, the authors, and the editors are safe to assume that the advice and information in this book are believed to be true and accurate at the date of publication. Neither the publisher nor the authors or the editors give a warranty, expressed or implied, with respect to the material contained herein or for any errors or omissions that may have been made. The publisher remains neutral with regard to jurisdictional claims in published maps and institutional affiliations. Preface Organization Contents IoT Security A Secure and Efficient Heterogeneous Signcryption Scheme for IIoT 1 Introduction 1.1 Related Work 1.2 Motivation and Contribution 1.3 Organization 2 Preliminaries 2.1 Bilinear Pairings 3 CI-HSC 3.1 Syntax 3.2 Security Notions 3.3 Our Scheme 4 Security and Performance 4.1 Security 4.2 Performance 5 Conclusion References A Federated Learning Based Privacy-Preserving Data Sharing Scheme for Internet of Vehicles 1 Introduction 2 Related Work 3 Preliminaries 3.1 System Model 3.2 Cryptography Block 3.3 Federated Learning 4 The Proposed Scheme 4.1 Initialization 4.2 Gradient Encryption 4.3 Region Verification 4.4 Aggregation and Update 5 Analysis 5.1 Correctness and Privacy 5.2 Performance 6 Conclusion References LightGBM-RF: A Hybrid Model for Anomaly Detection in Smart Building 1 Introduction 1.1 Background 1.2 Motivation and Contribution 2 Related Work 3 Methods 3.1 Dataset Acquisition 3.2 Data Preprocessing 3.3 Data Segmentation 3.4 Model Training 3.5 Evaluation Metrics 4 Experimental Results 4.1 Experimental Settings 4.2 Performance Metrics 4.3 Confusion Matrix 4.4 Performance Comparison with Other Studies 5 Conclusion and Future Work References Enabling Hidden Frequency Keyword-Based Auditing on Distributed Architectures for a Smart Government 1 Introduction 2 Related Work 3 Preliminaries 3.1 System Model 3.2 Threat Model 3.3 Design Goals 4 The Proposed Scheme 5 Security Analysis 6 Performance Evaluation 6.1 Auditing Distribution 6.2 Computation Overhead 6.3 Storage Overhead 7 Conclusion and Future Work References A Lightweight Certificateless Searchable Public Key Encryption Scheme for Medical Internet of Things 1 Introduction 2 Related Works 3 Preliminaries 3.1 Eliptic Curve Diffie-Hellman Problem 3.2 System Model 4 The Proposed CPEKS Scheme 5 Security Analysis 5.1 Security Model 5.2 Security Proof 6 Performance Analysis 6.1 Security Property 6.2 Computation Cost 6.3 Communication Cost 7 Conclusion References Artificial Intelligence and Cyber Security Cross-site Scripting Threat Intelligence Detection Based on Deep Learning 1 Introduction 2 Related Work 3 Methodology 3.1 Overview 3.2 Feature Integration 3.3 Deep Learning Algorithm 4 Experiment 4.1 Environment 4.2 Dataset 4.3 Experiment and Analysis 5 Conclusion References Power Analysis Attack Based on Lightweight Convolutional Neural Network 1 Introduction 2 Background Knowledge 2.1 Convolutional Neural Network 2.2 Side Channel Attack Principle 2.3 CNNbest 2.4 Evaluation Indicators 3 Methodology 3.1 Convolutional Block Attention Mechanism 3.2 Dropout 4 Experiment 4.1 Experimental Platform and Data Set 4.2 Feature Extraction Network Integrated into CBAM 4.3 Add Dropout to the Model 5 Conclusion References Enhancing Port Scans Attack Detection Using Principal Component Analysis and Machine Learning Algorithms 1 Introduction 2 Background and Related Works 2.1 Detecting Port Scan Attempts with Comparative Analysis of Deep Learning and Support Vector Machine Algorithms 2.2 Detection of Slow Port Scans in Flow-Based Network Traffic 2.3 Artificial Intelligence Managed Network Defense System Against Port Scanning Outbreaks 2.4 Machine Learning-Driven Intrusion Detection for Contiki-NG-Based IoT Networks Exposed to NSL-KDD Dataset 2.5 Port-Scanning Attack Detection Using Supervised Machine Learning Classifiers 2.6 Detecting Port Scan Attacks Using Logistic Regression 2.7 An End-To-End Framework for Machine Learning-Based Network Intrusion Detection System 2.8 Research Gap 3 Materials and Methods 3.1 Dataset and Pre-processing 3.2 Feature Extraction with Principal Component Analysis 3.3 Machine Learning Algorithms for Port Scan Detection 4 Results and Discussion 4.1 Experiments 4.2 Performance Analysis 5 Conclusion and Future Works References SVFLS: A Secure and Verifiable Federated Learning Training Scheme 1 Introduction 2 Related Works 2.1 Homomorphic Encryption 2.2 Differential Privacy 2.3 Secure Multi-party Computation 2.4 Verifiability 3 Problem Statement 3.1 System Overview 3.2 Threat Model and Design Goal 4 Preliminaries 4.1 Federated Learning 4.2 Threshold Paillier Encryption 4.3 Bilinear Aggregate Signature 5 Proposed Scheme 5.1 Initialization 5.2 Gradient Encryption and Signature 5.3 Secure Aggregation 5.4 Decryption 5.5 Verification and Update 6 Security Analysis 6.1 Data Privacy 6.2 Verification 7 Performance Evaluation 7.1 Experimental Environment and Settings 7.2 Computation Overhead 7.3 Communication Overhead 7.4 Comparison with Existing Schemes 8 Conclusion References A Pragmatic Label-Specific Backdoor Attack 1 Introduction 2 Related Work 2.1 Image Classification 2.2 Data Poisoning Attack 2.3 Backdoor Attack 3 Method 3.1 Threat Model 3.2 Proposed Attack 4 Experiment 4.1 Experiment Settings 4.2 Main Results 5 Conclusion References Threat Landscape Across Multiple Cloud Service Providers Using Honeypots as an Attack Source 1 Introduction 1.1 Motivation and Contribution 1.2 Related Works 1.3 Organization 2 Background 2.1 Low-Interaction Honeypots 2.2 Medium-Interaction Honeypots 2.3 High-Interaction Honeypots 2.4 Intrusion Detection Honeypots 2.5 Technique and Proliferation Research Honeypots 2.6 Resource Exhaustion Honeypots 3 System Description 3.1 System Components 3.2 System Provisioning 4 Results and Discussion 4.1 Time for First Failed Login Attempt 4.2 Passwords Used in Attacks with Corresponding Devices 4.3 Usernames Used in Attacks with Corresponding Devices 4.4 Attack Distribution by Cloud Service Provider - London (England) 4.5 Attack Distribution by Cloud Service Provider - Singapore (Republic of Singapore) 4.6 Attack Distribution by Cloud Service Provider - Sydney (Australia) 4.7 Attack Distribution by Cloud Service Provider - Tokyo (Japan) 4.8 Top ASN Source Attacks 4.9 Top Country Source Attacks 4.10 Source OS Attack Distribution 4.11 Adbhoney Inputs 4.12 Cowrie Inputs 5 Conclusion References Blockchain Technology and Application AP-HBSG: Authentication Protocol for Heterogeneous Blockchain-Based Smart Grid Environment 1 Introduction 1.1 Motivation 1.2 Contribution 1.3 Organization of the Paper 2 Related Work 2.1 Blockchain Overview 2.2 Traditional AMI Communication Settings and Proposed Blockchain-Based Settings 3 Preliminaries 3.1 Elliptic Curve Cryptography 3.2 Hard Assumptions 3.3 Notations 3.4 Syntax 3.5 System Model 3.6 Security Model 3.7 Design Goal 4 Proposed Protocol 4.1 Heterogeneous Certificateless Authentication Scheme 4.2 Authentication Scheme from Collector Node to Other Blockchain Nodes 4.3 Consensus Mechanism in Blockchain Nodes 5 Analysis of the Proposed Protocol 5.1 Security Analysis 6 Performance Analysis 7 Conclusion References Blockchain-Based Patient-to-Patient Health Data Sharing 1 Introduction 2 Related Works 3 Preliminaries 3.1 Blockchain 3.2 Smart Contracts 3.3 Bilinear Maps 4 System Overview and Design 4.1 Multi-receiver Identity-Based Signcryption(mIBSC) 4.2 Interaction 4.3 Smart Contracts 5 Discussion and Evaluation 5.1 Limitations 6 Conclusions References Efficient and Automatic Pseudonym Management Scheme for VANET with Blockchain 1 Introduction 2 System Framework 2.1 System Model 2.2 Attack Model 2.3 Design Goals 3 Efficient and Automatic Pseudonym Management Scheme 3.1 System Setup Phase 3.2 Registration Phase 3.3 Authentication Phase 3.4 Pseudonyms Generation Phase 3.5 Pseudonyms Update Phase 3.6 Pseudonyms Revocation Phase 4 Security Analysis 5 Performance Evaluation 5.1 Implementation and Gas Cost 5.2 Storage Overhead 5.3 Computation Overhead 6 Conclusions References Ethereum Contract Honeypot Risk Analysis 1 Introduction 2 Preparation 2.1 Smart Contract 2.2 Solidity 2.3 Contract Honeypot 3 Related Research 4 Contract Honeypots 5 Analysis 5.1 Data Used in the Analysis 5.2 Contract Honeypot Damage 5.3 Analysis of Contract Honeypot Features 5.4 Detection of New Contract Honeypots 5.5 Regular Contracts 6 Discussion 6.1 Contract Honeypots Tracking 6.2 Difference Between the Presence and Absence of Damage 6.3 Damage of Legitimate Users 7 Conclusion References A Gas Cost Analytical Approach Based on Certificateless Key Encapsulation Protocol for Medicalized Blockchains 1 Introduction 2 Summary of Existing Research 3 Preliminaries 3.1 Elliptic Curve Cryptography 3.2 Complexity Assumptions 3.3 Generic Model of a Certificateless Key Encapsulation (CL-KEM) Method 3.4 Adversarial Model 4 Proposed Protocol 4.1 Protocol Construction 5 Security Proofs and Analysis 6 Performance Evaluation 6.1 Computational Overhead Analysis 6.2 Analysis of Gas Cost Complexity 7 Conclusion References Cryptography A Universal Lightweight Privacy-Preserving Multifunctional Data Handling Scheme 1 Introduction 2 Problem Modeling 2.1 System Model 2.2 Security Model 2.3 Design Goal 2.4 Our Contributions 3 Related Works 4 Preliminaries 4.1 Paillier Cryptosystem 4.2 ElGamal Encryption 5 Our Proposed Scheme 5.1 System Initialization 5.2 Data Encrypted 5.3 Data Disturbed 5.4 Data Handled 5.5 Data Noise Removed 6 Security Analysis 7 Performance Analysis and Comparison 7.1 Efficiency Comparison on Variance Computation 7.2 Efficiency Comparison on Maximum/Minimum Computation 8 Conclusion References New Trapdoor and Preimage Sampling on NTRU Lattice 1 Introduction 1.1 Our Contributions 1.2 Technical Overview 1.3 Related Works 2 Preliminaries 2.1 Linear Algebra 2.2 Lattices and Gaussians 2.3 Polynomial Ring 2.4 G-Lattices 3 Trapdoor Based on NTRU Lattice 3.1 Trapdoor Inversion 3.2 Security Proof 4 Instantiation 4.1 Concrete Parameters 4.2 Conclusion References Secure EHR Sharing Scheme Based on Limited Sanitizable Signature 1 Introduction 2 System Model and Security Goals 2.1 System Model 2.2 Security Goals 3 The Proposed Scheme 3.1 Notation 3.2 Overview 3.3 Detail 4 Security Analysis 5 Performance Analysis 6 Conclusion References A Rotating Multi-secret Color Visual Cryptography Scheme Based on Meaningful Shares 1 Introduction 2 Introduction of Halftone Technology 3 The Proposed Scheme 3.1 The Rotating Visual Cryptography Scheme with Meaningful Shares for Gray-Scale Image 3.2 The Rotating Visual Cryptography Scheme with Meaningful Shares for Color Image 4 Experiments and Analysis 4.1 Experiment for Gray-Scale Images 4.2 Experiment for Color Images 4.3 Security Analysis 4.4 Application Scenario Analysis 5 Conclusions References Updatable ElGamal Encryption Scheme with Forward and Backward Security for Cloud Storage 1 Introduction 1.1 Related Works 1.2 Our Motivation and Contributions 2 Preliminaries 2.1 Notations 2.2 Basic Primitives 3 Updatable Public-Key Encryption and Enhanced Security Models 3.1 Formal Definition 3.2 Enhanced Security Models 4 Construction of Updatable Public-Key Encryption 4.1 Scheme Description 4.2 Correctness and Directionality 5 Security Analysis 5.1 Confidentiality 5.2 Forward and Backward Security 6 Conclusions A Security Proof of Theorem 1 B Security Proof of Theorem 2 References Database Security A Comparative Analysis of Security Features and Concerns in NoSQL Databases 1 Introduction 2 Overview 2.1 Cassandra 2.2 MongoDB 2.3 Redis 2.4 Neo4j 3 Security Features in Cassandra, MongoDB, Redis and Neo4j 3.1 Cassandra Security Features 3.2 MongoDB Security Features 3.3 Redis Security Features 3.4 Neo4j Security Features 4 Comparative Findings and Discussions 4.1 Security Assessment Key 4.2 Criteria for Assessing Security 5 Conclusion, Recommendations and Future Works References Improving Online Restore Performance of Backup Storage via Historical File Access Pattern 1 Introduction 2 Background and Problem 3 Restore Approaches 3.1 Frequency-Based Approach 3.2 Graph-Based Approach 4 Simulation 4.1 Datasets 4.2 Simulation Results 5 Related Work 6 Conclusion References Securely and Efficiently Nearest Neighbor Query Scheme Based on Additive Secret Sharing 1 Introduction 2 Preliminary 2.1 Additive Secret Sharing 2.2 k-d Tree 3 System Architecture and Design Goal 3.1 System Architecture 3.2 Security Model 3.3 Design Goals 4 Basic Secure Computation Protocols 4.1 Secure Squared Euclidean Distance 4.2 Secure Comparison 4.3 Secure Vector Sorting 5 Secure Nearest Neighbor Search 5.1 Data Outsourcing 5.2 Secure Create Tree 5.3 Query Vector Upload 5.4 Local Nearest Neighbor Search 5.5 Secure Nearest Neighbor Search 6 Security Analysis 7 Evaluation and Performance Analysis 7.1 Algorithm Performance Evaluation 7.2 Scheme Performance Evaluation 8 Conclusion References Quantum Cryptography Quantum Information Splitting Scheme of Arbitrary Three-Qubit State by Using a Four-Qubit Cluster State and a Bell State 1 Introduction 2 Specific Schemes 3 Experimental Verification 4 Safety Analysis 4.1 External Attack 4.2 Internal Attack 5 Comparison and Analysis 6 Conclusion References Network Security A Manipulated Overlapped Voltage Attack Detection Mechanism for Voltage-Based Vehicle Intrusion Detection System 1 Introduction 2 Related Works 3 Preliminaries 3.1 Some Defects of Voltage-Based IDS 3.2 Attack Strategy of the DUET 4 Scheme and Construction 4.1 Overlapped Signal Detection and Filtering 4.2 Fingerprint Feature Extraction and Identification 5 Experiment 6 Summary References Author Index This book constitutes the refereed proceedings of the 5th International Conference on Frontiers in Cyber Security, FCS 2022, held in Kumasi, Ghana, during December 13–15, 2022. The 26 full papers were included in this book were carefully reviewed and selected from 65 submissions. They were organized in topical sections as follows: ioT Security; artificial intelligence and cyber security; blockchain technology and application; cryptography; database security; quantum cryptography; and network security.