Frontiers in Cyber Security: 6th International Conference, FCS 2023, Chengdu, China, August 21–23, 2023, Revised Selected Papers (Communications in Computer and Information Science)

This volume constitutes the refereed proceedings of the 6th International Conference on Frontiers in Cyber Security, FCS 2023, held in Chengdu, China, in August 2023. The 44 full papers included in this book were carefully reviewed and selected from 89 submissions. They were organized in topical sections as follows: Blockchain and Distributed Systems; Network Security and Privacy Protection; Cryptography and Encryption Techniques; Machine Learning and Security; and Internet of Things and System Security. Preface Organization Contents Blockchain and Distributed Systems Secure Cross-Chain Transaction for Medical Data Sharing in Blockchain-Based Internet of Medical Things 1 Introduction 2 Multi-chain Fusion Model 2.1 Cross-Chain Technology 2.2 Relay Chain 2.3 Multi-chain Description 2.4 Multi-chain Fusion Mechanism 3 Cross-Chain Transactions Process 3.1 Cross-Chain Transactions 3.2 Cross-Chain Identity Authentication 3.3 Cross-Chain Consensus 3.4 Cross-Chain Gateway 3.5 Cross-Chain Interaction Protocol Standard 3.6 Security Analysis 3.7 Performance Analysis 4 Conclusion References A Blockchain-Based Proxy Re-Encryption Scheme with Cryptographic Reverse Firewall for IoV 1 Introduction 1.1 Related Work 1.2 Motivation and Contribution 1.3 Organization 2 Preliminaries 2.1 Bilinear Pairing 2.2 Blockchain and Smart Contract 2.3 Cryptographic Reverse Firewall (CRF) 3 Our Scheme 3.1 BIBPR-CRF 4 Analysis of the Scheme 5 Performance 6 Conclusion References SCCT-DARS: Secure and Compliant Cryptocurrency Transactions in a Decentralized Anonymous Regulated System 1 Introduction 1.1 Motivation and Contributions 1.2 Paper Organization 2 Related Work 3 Preliminaries 3.1 Network Model 3.2 Security Standards 3.3 Cryptography Materials 4 Proposed SCCT-DARS System 4.1 The Technical Perspective 5 Security Assessment 6 Performance Analysis 6.1 Communication Cost Analysis 6.2 Computation Cost Analysis 6.3 Privacy and Security Analysis 7 Conclusion and Future Work References ODSC: A Unique Chameleon Hash-Based Application Framework for Blockchain Smart Contracts 1 Introduction 2 Related Work 3 Preliminaries 3.1 Chameleon Hash Based on Elliptic Curve 4 Framework Design 4.1 Contract Creation and Data Initialization 4.2 Read Attribute and Connect P2P Network 4.3 Manipulate Data and Call Contract 4.4 Monitor Event and Synchronize Data 5 Security Analysis 5.1 Replay Attack 5.2 Data Security 6 Experiments 6.1 Experimental Environment 6.2 Function Test 6.3 Performance Test 7 Conclusions References Cross-Chain Identity Authentication for BIoMT with Multi-chain Fusion Mode 1 Introduction 2 Multi-chain Fusion Model 3 Cross-Chain Identity Authentication Protocol 3.1 User Identity Anonymization 3.2 Anonymous Identity Authentication 4 Security Analysis 4.1 User Identity Leakage 4.2 Medical Data Leakage 4.3 Cross-Chain Transaction Consistency 5 Performance Analysis 5.1 Cross-Chain Transaction Performance 5.2 Identity Authentication Efficiency 6 Conclusion References Blockchain-Based Signature Scheme with Cryptographic Reverse Firewalls for IoV 1 Introduction 1.1 Motivation and Contribution 1.2 Organization 2 Related Work 2.1 Blockchain 3 Preliminaries 3.1 Bilinear Groups 3.2 Identity-Based Signature 3.3 Cryptographic Reverse Firewall 3.4 Difficult Problem 4 Our Proposed BIBS-CRF Scheme 4.1 Details of Our Scheme 4.2 Security Analysis 5 Performance Analysis 5.1 Theoretical Analysis 5.2 Experimental Analysis 6 Conclusion References Network Security and Privacy Protection A Hierarchical Asynchronous Federated Learning Privacy-Preserving Framework for IoVs 1 Introduction 2 Related Work 3 Preliminaries 3.1 System Model 3.2 Threat Models 3.3 Security and Privacy Requirements 3.4 Federated Learning 4 The Proposed Scheme 4.1 Initialization Phase 4.2 Vehicle Registration 4.3 Bottom Layer Federate Learning Phase 4.4 Top Layer Federate Learning Phase 5 Security Analysis 6 Experimental Results and Analysis 6.1 Parameter Setting 6.2 Results and Analysis 7 Conclusion References A Secure Mutual Authentication Scheme for Wireless Communication 1 Introduction 2 Related Works 3 Preliminaries 3.1 Bilinear Pairing 3.2 Collusion Attack Algorithm with k Traitors (k-CAA) Problem 3.3 q-Strong Diffie-Hellman (q-SDH) Problem 3.4 Computational Diffie-Hellman (CDH) Problem 3.5 System Architecture 3.6 Security Model 4 Our Scheme 4.1 Setup 4.2 Registration 4.3 Authentication 4.4 Correctness 5 Security Analysis 5.1 Mutual Authentication (MA) 5.2 Key Agreement 5.3 Session Key Security (SKS) 5.4 Perfect Forward Secrecy (PFS) 5.5 Identity Privacy 5.6 Resistance Against Attacks 6 Comparison 7 Conclusion References A Multi-tab Webpage Fingerprinting Method Based on Multi-head Self-attention 1 Introduction 2 Related Work 3 Proposed Methodology 3.1 Sequence Embedding 3.2 Block Division 3.3 Multi-tab WF 4 Experimental Results and Analysis 4.1 Dataset 4.2 Performance Metrics 4.3 Closed-World Experiments and Analysis 4.4 Open-World Experiments and Analysis 4.5 Ablation Experiments and Analysis 5 Conclusion and Future Works References Improving Accuracy of Interactive Queries in Personalized Differential Privacy 1 Introduction 1.1 Related Works 1.2 Our Motivation and Contributions 2 Preliminaries 2.1 System Model 2.2 Differential Privacy 2.3 Personalized Sampling Laplace Mechanism 2.4 Personalized Differential Privacy 3 The Proposed Scheme Construction 3.1 Privacy Budget Allocation 3.2 The Combined Mechanism 3.3 Privacy Analysis 4 Simulation Experiments 5 Conclusion A Security Proof of Theorem 5 B Utility Analysis References VPSearch+: Achieving Verifiability for Privacy-Preserving Multi-keyword Search Without Client Storage Overhead 1 Introduction 2 Related Work 3 Preliminaries 3.1 Symmetric-Key Hidden Vector Encryption 3.2 Verifiable Search Scheme 4 Problem Formulation 4.1 System Model 4.2 Security Requirements 5 Proposed Scheme 5.1 Overview of Our Scheme 5.2 VPSearch+: Verifiable Privacy-Preserving Multi-keyword Search Based on Symmetric-Key HVE 6 Security Analysis 6.1 Verifiablity 6.2 Confidentiality of Data 6.3 Privacy Protection of Index and Trapdoor 6.4 Unlinkability of Trapdoors 7 Performance Evaluation 7.1 Dataset 7.2 Computation Overhead 7.3 Storage Overhead 8 Conclusion References Security-Enhanced Function Privacy Attribute-Based Encryption 1 Introduction 2 Related Work 3 Preliminaries 4 System Definition and Security Model 4.1 Formal Definition 4.2 Security Model 5 Why ABE Can Not Support Function Privacy 6 Construction of the Function Privacy ABE 6.1 Fuzzy Identity-Based Encryption Supporting Function Privacy 6.2 Proof of Security 6.3 Proof of Function Privacy 7 Comparison 8 Conclusion References Certificateless Ring Signcryption Scheme with Conditional Privacy Protection in Smart Grid 1 Introduction 2 Related Works 3 Preliminaries 3.1 Hardness Assumption 3.2 Formal Definition 3.3 System Model 3.4 Threat Model 3.5 Security Performance 4 CPPA Scheme in SG 5 Safety Analysis 5.1 Correctness 5.2 Confidentiality 5.3 Unforgeability 5.4 Anonymity 5.5 Traceability 5.6 Replay Attack Resistance 6 Activity Analysis 6.1 Computational Cost Analysis 6.2 Computational Cost Analysis 7 Conclusion References Byzantine-Robust Privacy-Preserving Federated Learning Based on DT-PKC 1 Introduction 2 Related Work 3 Preliminaries 3.1 Improved Krum Algorithm 3.2 Modified DT-PKC Scheme 4 Problem Setup 4.1 System Model 4.2 Design Goals 5 The Proposed Scheme 5.1 Overview 5.2 Details of SKFL 6 Security Analysis 7 Experiment and Result Analysis 7.1 Experimental Setting 7.2 Experimental Result 8 Conclusion References Updatable and Dynamic Searchable Symmetric Encryption Scheme with Forward and Backward Privacy 1 Introduction 1.1 Related Works 1.2 Our Motivation and Contributions 2 Preliminaries 2.1 Notations 2.2 Basic Primitives 3 Formal Updatable and Dynamic Searchable Symmetric Encryption 3.1 System Framework 3.2 Syntax 3.3 Security Models 4 Construction of Updatable and Dynamic Searchable Symmetric Encryption 4.1 U&D-SSE with Token Inference 4.2 U&D-SSE with Token-Free Inference 5 Security Analysis 6 Conclusions A Leakage Sets B The Adaptive Security of U&D-SSE C Security Proof References Efficient and Secure Count Queries on Encrypted Genomic Data 1 Introduction 2 Related Work 3 Preliminaries 3.1 Data Representation 3.2 Count Query 3.3 Bloom Filter 3.4 System Design Overview 4 Cryptographic Background 4.1 Homomorphic Encryption 4.2 Data Comparison Protocol 5 Our Proposed Scheme 5.1 Data Collection and Integration Phase 5.2 Data Encryption and Transmission Phase 5.3 User Registration Phase 5.4 Encrypted Query Phase 6 Security Analysis 7 Experimental Results References Automatic Construction of Knowledge Graph for Personal Sensitive Data 1 Introduction 2 Related Work 2.1 Supervised and Semi-supervised Approaches 2.2 Rule-Based and Pattern-Based Approaches 2.3 Pre-trained Language Models 2.4 Knowledge-Driven Top-Down, Data-Driven Bottom-Up 3 Methodology 3.1 Unsupervised Entity and Relation Extraction 3.2 Context-Aware Graph Fusion Mechanism 4 Experiments and Evaluation 4.1 Datasets 4.2 Experimental Settings 4.3 Experimental Process 4.4 Results and Discussion 4.5 Ablation Study 5 Conclusion and Future Work References Cryptography and Encryption Techniques Heterogeneous Aggregate Signature for Unmanned Aerial Vehicles 1 Introduction 2 Related Works 3 Preliminaries 3.1 System Architecture 3.2 Bilinear Pairing 3.3 Computational Diffie-Hellman (CDH) Problem 4 The Proposed Scheme 4.1 Concrete Construction 4.2 Security Proofs 5 Comparison 6 Security Analysis 7 Conclusion References Secure Arbitrated Quantum Signature Scheme with Bell State 1 Introduction 2 Preliminaries 2.1 Classical Bits and Operations 2.2 Quantum States and Operations 2.3 Encoding and Decoding Process with Bell State 2.4 Detectable Eavesdropping Communication 3 Our AQS Scheme 3.1 Initialization Procedure 3.2 Signing Procedure 3.3 Verification Procedure 4 Security Analysis 4.1 The Security of the Secret Keys 4.2 Unforgeability of Our AQS Scheme 4.3 The Intercept-measure-resend Resistance of Our AQS 5 Conclusion References AFHPS: An Authorized Function Homomorphic Proxy Signature Scheme with Sampling Batch Verification 1 Introduction 2 Related Works 2.1 Homomorphic Signature 2.2 Proxy Signature 2.3 Functional Signature 3 Preliminaries 3.1 Bilinear Groups and Hardness Assumption 3.2 Notions 3.3 Homomorphic Signature 3.4 KPW Proxy Signature 4 System Model and Security Model 4.1 Formal Definition 4.2 System Model 4.3 Security Model 5 Construction 5.1 Specific Algorithm 5.2 Correct Analysis 5.3 Security Proof 6 Applications Discussion 7 Conclusion References ASEV: Anonymous and Scored-Based E-Voting Protocol on Blockchain 1 Introduction 2 Preliminaries 2.1 Score-Based Voting 2.2 One-Time Ring Signature 3 System Model and Security Requirement 3.1 System Model 3.2 Security Requirements 4 Concrete Construction 4.1 Registering Phase 4.2 Voting Phase 4.3 Counting Phase 5 Security Analysis 5.1 Maximal Ballot Secrecy 5.2 Anonymity 5.3 Eligibility 5.4 Resistance Against Multi-voting 5.5 Self-tallying 5.6 Robustness 5.7 Dispute-Freeness 6 Implementation Analysis 6.1 Theoretical Analysis 6.2 Experiment Analysis 7 Conclusion References A New Self-dual BKZ Algorithm Based on Lattice Sieving 1 Introduction 2 Preliminaries 2.1 Notations 2.2 Lattice and Related Definitions 2.3 Lattice Reduction 3 Self-dual BKZ and Pump 3.1 Self-dual BKZ 3.2 The General Sieve Kernel and Pump 3.3 Self-dual BKZ Based on Pump 4 Experiments 4.1 Compare with Self-dual BKZ in FPLLL 4.2 Compare to Pump-and-Jump BKZ 5 Conclusion and Future Work References A Certificateless Designated Verifier Sanitizable Signature 1 Introduction 2 System Model and Security Goals 2.1 System Model 2.2 Security Goals 3 The Proposed Scheme 3.1 Overview 3.2 Detail 3.3 Security Analysis 4 Performance Analysis 4.1 Theory Comparison 4.2 Experiment Comparison 5 Conclusion References An Inner Product Function Encryption Scheme for Secure Distance Calculation 1 Introduction 1.1 Related Works 1.2 Contributions 1.3 Organization 2 Preliminaries 2.1 Nations 2.2 Bilinear Mapping 2.3 External Diffie-Hellman (XDH) 2.4 Euclidean Distance Metric 2.5 Inner Product Functional Encryption (IPFE) 3 Our Scheme 3.1 Definition 3.2 Construction 3.3 Proof of Security 4 Discussion and Application 4.1 Contact Tracing 4.2 Chat Recommendation 5 Conclusion References Efficient Non-interactive Zero-Knowledge Proof for Graph 3-Coloring Problem 1 Introduction 1.1 Contribution 1.2 Related Work 1.3 Organization 2 Preliminaries 2.1 Notations 2.2 The Fujisaki-Okamoto Commitment Scheme 2.3 Knowledge of Discrete Logarithm in a Cyclic Group with a Secret Order (KDLCGSO) 2.4 Committed Integer Lies in a Specific Interval (RG) 3 Definition of NIZK Proof for 3-GCP 4 Our Construction for the NIZK Proof of 3-GCP 4.1 Construction 1 4.2 Construction 2 5 Conclusion References Cloud-Aided Scalable Revocable IBE with Ciphertext Update from Lattices in the Random Oracle Model 1 Introduction 2 Definition and Security Model 2.1 Cloud-Aided Scalable Revocable IBE with Ciphertext Update 2.2 Lattices 3 Our Lattice-Based CA-RIBE-CU Scheme in ROM 3.1 Description of the Scheme 3.2 Analysis 4 Conclusion References Heterogeneous Signcryption Scheme with Equality Test for Internet of Vehicles 1 Introduction 1.1 Motivation and Contribution 1.2 Related Work 1.3 Organization 2 Preliminaries 2.1 Bilinear Pairings 2.2 Difficult Problems 3 A CP-HSCET Scheme 3.1 The Proposed Scheme 3.2 Consistency 4 Security 5 Performance 6 Conclusion References An Improved Updatable Signature Scheme with Weakened Token 1 Introduction 1.1 Related Works 1.2 Our Motivation and Contributions 2 Preliminaries 2.1 Notations 2.2 Basic Primitives 2.3 Diffie-Hellman Key Exchange Protocol 2.4 Cini et al.'s Updatable Signature 3 Updatable Signature with Weakened Token and Enhanced Security Model 3.1 Formal Definition 3.2 Enhanced Security Model 4 Construction of the Improved Updatable Signature Scheme with Weakened Token 4.1 Scheme Description 4.2 Correctness and Directionality 5 Unforgeability 6 Conclusions A Security proof of Theorem 1 References A Pairing-Based Certificateless Authenticated Searchable Encryption with MTI Guarantees 1 Introduction 1.1 Contributions 1.2 Paper Organization 2 Our Scheme 3 Security Analysis 3.1 Keyword Guessing Attack Guarantees 3.2 Security Model 4 Performance Analysis 4.1 Security Guarantees 4.2 Computation and Communication Costs 5 Application 6 Conclusion References Machine Learning and Security Anomaly Detection Method for Integrated Encrypted Malicious Traffic Based on RFCNN-GRU 1 Introduction 2 Related Works 3 Encrypted Traffic Characteristics 4 Anomaly Detection Method of Encrypted Traffic Based on RFCNN-GRU Model 4.1 Encrypted Malicious Traffic Balance Dataset Construction 4.2 CNN-GRU Model 4.3 CNN-GRU Model Ensemble Random Forest Optimization 5 Experiment and Result Analysis 5.1 Experimental Configuration 5.2 Benchmark Model 5.3 Evaluation Criteria 5.4 Experimental Results and Analysis 6 Conclusions and Future Work References TimeGAN: A Novel Solution to Imbalanced Encrypted Traffic Datasets 1 Introduction 2 Related Works 3 Background Knowledge 3.1 WGAN 3.2 Dilated Convolutional Network 4 Model 4.1 Feature Construction 4.2 Our Model 5 Experiment and Analysis 5.1 Evaluation Metrics 5.2 Experiment Results and Analysis 6 Conclusion References Secure Steganography Scheme Based on Steganography Generative Adversarial Network 1 Introduction 2 Solutions 2.1 SteGAN 2.2 Design of Noise Layer 2.3 Introduction of Spectral Normalization 2.4 RS-GAN Model Structure 3 Training of Models 4 Experimental Results and Analysis 4.1 Steganography Capacity 4.2 Imperceptibility 4.3 Decoding Accuracy 4.4 Steganography Security 5 Conclusion References SR-GNN: Spectral Residuals with Graph Neural Networks for Anomaly Detection in ADS-B Data 1 Introduction 2 Background 2.1 ADS-B Protocol Overview 2.2 Main Risks of the ADS-B 2.3 Adversarial Model 3 Related Work 3.1 Encryption Protection Schemes 3.2 Anomaly Detection 4 Methodology 4.1 Problem Formulation 4.2 Model Architecture 4.3 Graph Attention Networks 4.4 Training Model 4.5 Threshold Calculation and Exception Score 5 Experimental Setup 5.1 Data Collectiom 5.2 Data Preprocessing 5.3 Experimental Method 5.4 Experimental Evaluation 6 Conclusion and Future Work References Learned Pseudo-Random Number Generator Based on Generative Adversarial Networks 1 Introduction 2 Preliminaries 2.1 Generative Adversarial Networks 2.2 Deep Learning Framework PaddlePaddle 3 Related Works 4 Proposed Method 4.1 Generator Model Design 4.2 Discriminator Model Design 4.3 Train Design of Our PRNG Based on GAN 5 Evaluation Study 5.1 Experiment Settings 5.2 NIST Tests 6 Conclusion References An Intrusion Detection System Using Vision Transformer for Representation Learning 1 Introduction 2 Related Work 3 Methodology 3.1 Traffic Granularity 3.2 Flattening Network Patches 3.3 Transformer Encoder 4 Experiment 4.1 Datasets 4.2 Experiment Setup 4.3 Evaluation Metrics 4.4 Results and Discussion 5 Conclusion References PaBiL-Net: Parallel Bidirectional LSTM Network for Mobile Encrypted Traffic Classification 1 Introduction 2 Related Work 2.1 Traditional Methods 2.2 Traditional Machine Learning 2.3 Deep Learning 3 Methodology 3.1 Feature Selection 3.2 Embedding Layer 3.3 Bidirectional LSTM 3.4 Classification Layer 4 Evaluation 4.1 Datasets 4.2 Experiment Settings and Hyperparameters 4.3 Baseline Methods 4.4 Metrics 4.5 Experiment Results 5 Ablation Study 5.1 Feature Selection Strategy 5.2 The Necessity of Embedding Layers 6 Conclusions References A General Source Code Vulnerability Detection Method via Ensemble of Graph Neural Networks 1 Introduction 2 Preliminaries 2.1 Problem Definition 2.2 Preprocess of Code Data 3 Proposed Model 3.1 Build Graph of the Source Code 3.2 Combined Novel Graph Neural Network Structure 3.3 Mix of Pooling Layer 3.4 Output Unit 3.5 Design of Training Loss 4 Experiments and Analysis 4.1 Experimental Settings 4.2 Detection Performance of Our Model 4.3 Ablation Study 4.4 Hyperparameter Analysis 5 Conclusion References Federated Long-Tailed Learning by Retraining the Biased Classifier with Prototypes 1 Introduction 2 Related Work 3 Methodology 3.1 Formulation 3.2 Our Method 4 Experiments 4.1 Datasets and Architectures 4.2 Experiment Settings 4.3 Main Results 4.4 Analysis 5 Conclusion References Internet of Things and System Security Ensuring SLA Compliance of Edge Enabled Cloud Service for IoT Application: A Dynamic QoS-Aware Scheme 1 Introduction 2 Related Work 3 The Proposed SLA Compliance Verification Model 3.1 Problem Formulation 3.2 Fluctuation Interval Construction 3.3 QoS Consistency Calculation 3.4 Dynamic Weight Assignment 3.5 SLA Compliance Verification 4 Simulation Experiment and Results Analysis 4.1 Experimental Setup 4.2 Effectiveness Analysis 5 Conclusion References A Regenerating Code Based Data Restoration Scheme in Active RFID System 1 Introduction 2 Related Work 3 Regenerative Code Architecture in RFID Systems 4 The Proposed Scheme 5 Experimental Verification 6 Conclusion References Lightweight Privacy-Preserving Medical Diagnostic Scheme for Internet of Things Healthcare 1 Introduction 1.1 Our Contribution 2 Related Work 3 Preliminaries and Notations 3.1 Bloom Filter 3.2 Oblivious Transfer 4 LPMDS 4.1 The System Model 4.2 The Proposed Scheme 4.3 System Initialization 4.4 Query Phase 5 Analysis 5.1 Security Analysis 5.2 Performance Analysis 5.3 Computation Analysis 5.4 Communication Analysis 6 Conclusion References Windows Fuzzing Framework Based on Dynamic Tracing and Process Cloning 1 Introduction 2 Background and Motivation 2.1 Research on the Construction of Interface Frameworks 2.2 Research on Fuzz Testing Method for Windows System 3 Design and Implementation 3.1 Overview 3.2 Automated Fuzz Harness Construction 3.3 Stable and Efficient Windows Fork-Server 4 Evaluation 4.1 Experimental Design 4.2 Experimental Results Analysis 5 Conclusion References Meta-HFMD: A Hierarchical Feature Fusion Malware Detection Framework via Multi-task Meta-learning 1 Introduction 2 Related Work 2.1 Malware Detection 2.2 Meta Learning 3 Multi-task Malware Detection 3.1 Problem Definition 3.2 Meta-HFMD Framework 4 Experiment 4.1 Dataset 4.2 Implementation Details 4.3 Results and Discussions 5 Conclusion References Privacy-Preserving Cloud-Edge Collaborative K-Means Clustering Model in IoT 1 Introduction 2 Related Work 2.1 Privacy-Preserving K-Means Problems 2.2 Privacy-Preserving Edge-Cloud for IoT Problems 2.3 Multi-key Outsourcing Problems 3 System and Security Model 3.1 System Model 3.2 Security Model 4 Our Proposed Design 4.1 Overview 4.2 Initialization Phase 4.3 Secure Model Training Phase 5 System Analysis 6 Experiments 6.1 Simulation Settings 6.2 Performance Evaluation 7 Conclusion References Author Index