Innovative Security Solutions for Information Technology and Communications: 12th International Conference, SecITC 2019, Bucharest, Romania, November ... Selected Papers (Security and Cryptology)

This book constitutes the thoroughly refereed post-conference proceedings of the 12th International Conference on Security for Information Technology and Communications, SecITC 2019, held in Bucharest, Romania, in November 2019. The 14 revised full papers presented together with 4 invited talks were carefully reviewed and selected from 34 submissions. The papers present a wide range from cryptographic algorithms, to digital forensic and cyber security. -- Provided by publisher Foreword Preface Organization Short Papers Trends and Future Challenges for Security and Privacy of Autonomous and Mobile Critical Communicating Systems Post-quantum Cryptography in Bitdefender Privacy... Please! (Extended Abstract) Contents Authenticated Key Distribution: When the Coupon Collector is Your Enemy 1 Introduction 2 The Protocol 2.1 Basic Scheme (r=1 and u=1) 2.2 General Case: r1 and u1 3 Adversarial Advantage 3.1 Expected Number of Collected Keys 3.2 Probabilities 3.3 Optimising u 3.4 Expected Number of Corrupted Users to Full Breach – the Coupon Collector Problem 4 Security Analysis 4.1 Passive Attacker 4.2 Man-in-the-Middle and Authentication Attacks 4.3 Adaptive Corruption 4.4 The Central Authority 4.5 Post-quantum Security 5 Conclusion and Further Development A Preliminaries B Proofs from Sect.3 B.1 Proof of Lemma1 B.2 Proof of Lemma2 B.3 Proof of Lemma3 C Parameter Choice and Efficiency Analysis C.1 Low-Threat Scenario C.2 Full Breach C.3 Expected Number of Corrupted Users to Fully Breach the System References The Ups and Downs of Technology in Society 1 Introduction 2 How Did Technologies Change Society 3 ART 4 Dating Apps 5 Consumption 6 The Interference of Culture Intechnological Development 7 The Individual’s Transformation 8 Examples of Social Impact 9 Ideological Segregation in the Digital Environment 10 The Positives of Technology 11 Conclusion References Efficient Microcontroller Implementation of BIKE 1 Introduction 1.1 Related Work 1.2 Contribution 2 Preliminaries 2.1 BIKE - Bit Flipping Key Encapsulation 2.2 Decoding Using Bit Flipping Algorithms 3 Portable Implementation 3.1 Replacing NTL Modules 3.2 Replacing OpenSSL Modules 4 Cortex-M4 Implementation 4.1 Bit Flipping in the BIKE Reference Implementation 4.2 Memory Requirements for Decoding 4.3 Decoding on Embedded Platforms 4.4 Microcontroller Optimizations 4.5 Hardening the Implementation Against Timing Attacks 5 Results and Comparison 5.1 Performance and Memory Evaluation 6 Conclusion A Decoding Algorithms References Secure Deterministic Automata Evaluation: Completeness and Efficient 2-party Protocols 1 Introduction 2 Definitions and Background 2.1 Automata Evaluation and Information Retrieval 2.2 Secure Computation of Arbitrary and Specific Functions 3 From AE to IR 3.1 A Privacy-Preserving Reduction 3.2 A Secure 2-party Protocol 4 From Secure IR to Secure AE 5 Extensions and Applications 5.1 Completeness of sMAeval Protocols 5.2 Communication-Efficient sAeval Protocols for Large Automata 5.3 Time-Efficient sAeval Protocols for Small Automata References Detecting Malicious Websites by Query Templates 1 Introduction 2 Background 2.1 URL Components 2.2 Google Safe Browsing 3 Related Work 4 Dataset 5 Proposed Method 5.1 Malicious URL Extraction Phase 5.2 Template Generation Phase 5.3 Template Filtering Phase 5.4 Detection Phase 6 Experimental Evaluation 6.1 Experimental Procedure 6.2 Experimental Results 7 Discussion 7.1 Validity of Query Templates 7.2 Causes of Errors 7.3 Query Template Efficiency 7.4 Query Template Trends 7.5 Limitation on Query Template Generation 8 Conclusion References A Deep Learning Attack Countermeasure with Intentional Noise for a PUF-Based Authentication Scheme 1 Introduction 1.1 Background 1.2 Contribution 2 Related Work 3 Proposed PUF-Based Authentication Scheme 3.1 Supposed PUF-Based Authentication System 3.2 Details of the Authentication Procedure with Intentional Noise 3.3 Attack Scenario 4 Evaluation and Results 4.1 Evaluation Setup 4.2 Evaluation of the Effectiveness of the Intentional Noise 4.3 Evaluation with the Improved Hyperparameters 4.4 Discussion 5 Conclusion and Future Work References Implementing Cryptography Pairings over Ordinary Pairing-Friendly Curves of Type y2 = x5 +a x 1 Introduction 2 Preliminaries 2.1 Hyperelliptic Curves 2.2 Pairings 3 Pairing-Friendly Curves of Type y2 = x5 +a x 3.1 Curve Choice 3.2 Counting Points 3.3 Pairing-Friendly Curves of the Cocks-Pinch Method 4 Group Structure of Hyperelliptic Curve 4.1 General Group Element 4.2 Jacobian Subgroup Operations 5 Our Work 6 Final Exponentiation 7 Implementation Results 8 Conclusions References Towards Practical Deploymentpg of Post-quantum Cryptographypg on Constrained Platformspg and Hardware-Accelerated Platforms 1 Introduction 1.1 Related Work 1.2 Contribution 2 Application Pros and Cons of Post Quantum Cryptography Schemes 3 Post Quantum Cryptography on Constrained Devices 3.1 Current Implementations of PQC on Constrained Platforms 3.2 Experimental Results on Constrained Platforms 4 Post Quantum Cryptography on Hardware-Accelerated Platforms 4.1 Current Implementations of PQC on FPGA 4.2 Deployment Issues and Setup of PQC Implementations on FPGA UltraScale+ 4.3 Experimental Results on Virtex FPGA Platform 5 Conclusion A Post Quantum Cryptography Size Requirements References White-Box Traitor-Tracing from Tardos Probabilistic Codes 1 Introduction 2 Tardos Code 3 Broadcast Encryption Scheme with a Tracing Procedure 3.1 Broadcasting Encrypted Information 3.2 Description of the Key Generator 3.3 User-Specific Key Generator 3.4 Broadcast Information Generation and Decryption Procedure 3.5 The Tracing Procedure 4 Collusion Resistance A.1 Lemma1 A.2 Proposition1 A.3 Proposition2 A.4 Theorem1 References Generic Construction of Anonymous Deniable Predicate Authentication Scheme with Revocability 1 Introduction 1.1 Our Contribution 1.2 Organization of This Paper 2 Preliminaries 2.1 Terminologies 2.2 Revocable Attribute-Based Encryption Scheme ch13YamadaAEHT17,ch13YamadaAEHT18 2.3 Commitment Scheme ch13BrassardCC88,ch13Goldreich2001 3 Syntax and Security Definitions of Anonymous Deniable Predicate Authentication Scheme with Revocability 3.1 Syntax 3.2 Security Definitions 4 Generic Construction of Anonymous Deniable Predicate Authentication Scheme with Revocability 4.1 Construction 4.2 Security 5 Discussion on Instantiations 6 Conclusion References Physical Cryptography 1 Introduction 2 Yao's Millionaires' Problem 2.1 ``Elevator'' Solution 2.2 ``Race Track'' Solution 2.3 ``Communicating Vessels'' Solution 2.4 ``Rope'' Solution 2.5 ``Laboratory Scale'' Solution 3 Comparing Information Without Revealing It 3.1 Message for Bob 3.2 Password 3.3 Cups 4 Public Key Encryption 4.1 ``Capacitors'' Solution 5 Conclusions A Recreational Cryptographic Problems B Physical Public Key Encryption References Logic Locking of Boolean Circuits: Provable Hardware-Based Obfuscation from a Tamper-Proof Memory 1 Introduction 2 Models and Definitions 3 A Pseudo-random Oracle Construction 4 A Provable General-Purpose Construction 5 Conclusions A Pseudo-random Generators and Functions B Universal Circuits C Proof that (KeyGen1, LockGen1) Satisfies Theorem 1 D Proof that (KeyGen2, LockGen2) Satisfies Theorem 2 References Speeding up OMD Instantiations in Hardware 1 Introduction 2 Preliminaries 2.1 Offset Merkle DamgåRd 2.2 The Hash Functions SHA-512 and BLAKE2b 3 A New OMD Instantiation. Security Aspects 3.1 Security Analysis 4 Speeding-Up OMD in Hardware. Implementation Trade-Offs 4.1 The Architecture of a Real World Authenticated Encryption System 4.2 Results Comparison 5 Conclusions and Future Work A OMD Pseudocode B The sha-512 and blake2b Compression Functions B.1 Preliminaries B.2 The sha-512 Compression Function B.3 The blake2b Compression Function C Explicit Performance Metrics References Reputation-Based Security Framework for Internet of Things Abstract 1 Introduction 2 Related Work 3 Proposed Architecture Design 3.1 IoT Device Layer 3.2 Gateway Layer 3.3 Cloud Layer 4 Implementation and Analysis 5 Conclusions Acknowledgments References Learned Lessons from Implementing an Android Client for the Cloud Signature Consortium API 1 Introduction 2 Remote Electronic Signatures 2.1 Legislation on Qualified Electronic Signatures 2.2 Standards Regarding Remote Electronic Signatures 2.3 The Advantages of Remote Electronic Signatures 2.4 SCA Security Requirements 3 Cloud Signature Consortium API 4 Proposed Digital Signature Application 4.1 Architecture 4.2 Android Activities 4.3 Key Elements of the Implementation 5 Conclusions and Future Work References Integrating Adversary Models and Intrusion Detection Systems for In-vehicle Networks in CANoe 1 Introduction and Related Work 2 Data Collection and Experimental Setup 2.1 Data Extraction from OBD 2.2 CANoe Environment 3 Adversary Models 3.1 Types of Attacks 3.2 Application Interface 4 Intrusion Detection Algorithms 4.1 Statistics and Machine Learning Toolbox 4.2 k-NN Algorithm 5 Experimental Results 5.1 Metrics for Evaluating the Performance of the IDS 5.2 Results on Detection Accuracy 6 Conclusion References Author Index