journal article·2024Open access

An Innovative Approach Using TKN-Cryptology for Identifying the Replay Assault

Syeda Wajiha Zahra, Muhammad Nadeem, Ali Arshad, Saman Riaz, Muhammad Abu Bakr, Ashit Kumar Dutta, Zaid Alzaid, Badr Almutairi, Sultan Almotairi

Computers, Materials & Continua· Volume 78· Issue 1

Abstract

Various organizations store data online rather than on physical servers. As the number of user’s data stored in cloud servers increases, the attack rate to access data from cloud servers also increases. Different researchers worked on different algorithms to protect cloud data from replay attacks. None of the papers used a technique that simultaneously detects a full-message and partial-message replay attack. This study presents the development of a TKN (Text, Key and Name) cryptographic algorithm aimed at protecting data from replay attacks. The program employs distinct ways to encrypt plain text [P], a user-defined Key [K], and a Secret Code [N]. The novelty of the TKN cryptographic algorithm is that the bit value of each text is linked to another value with the help of the proposed algorithm, and the length of the cipher text obtained is twice the length of the original text. In the scenario that an attacker executes a replay attack on the cloud server, engages in cryptanalysis, or manipulates any data, it will result in automated modification of all associated values inside the backend. This mechanism has the benefit of enhancing the detectability of replay attacks. Nevertheless, the attacker cannot access data not included in any of the papers, regardless of how effective the attack strategy is. At the end of paper, the proposed algorithm’s novelty will be compared with different algorithms, and it will be discussed how far the proposed algorithm is better than all other algorithms.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Advanced Malware Detection Techniques · Internet Traffic Analysis and Secure E-voting

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (23)

Show source-provided references
1. Energy efficiency in cloud computing data centers: A survey on software technologies10.1007/s10586-022-03713-0 ↗
2. Phishing website detection based on effective machine learning approach
3. A proposal on phishing URL classification for web security10.5120/ijca2019919282 ↗
4. Network intrusion detection for IoT security based on learning techniques10.1109/COMST.2019.2896380 ↗
5. A survey of defense mechanisms against distributed denial of service (DDOS) flooding attacks10.1109/SURV.2013.031413.00127 ↗
6. Semi-supervised K-means DDoS detection method using hybrid feature selection algorithm10.1109/ACCESS.2019.2917532 ↗
7. A security model for the enhancement of data privacy in cloud computing
8. Combined techniques for detecting email spam using negative selection and particle swarm optimization
9. Under the radar: The danger of stealthy DDoS attacks10.1016/S1353-4858(19)30025-X ↗
10. Attacking the trust machine: Developing an information systems research agenda for blockchain cybersecurity10.1016/j.ijinfomgt.2022.102470 ↗
11. A session hijacking attack against a deviceassisted physicallayer key agreement10.1109/TII.2019.2923662 ↗
12. Security against impersonation attacks in distributed systems10.1109/TCNS.2018.2838519 ↗
13. Cyber security event detection using machine learning technique
14. Spam email detection using deep support vector machine, support vector machine and artificial neural network
15. Toward a deep learning-based intrusion detection system for IoT against botnet attacks10.11591/ijai.v10.i1.pp110-120 ↗
16. Spam-detection with comparative analysis and spamming words extractions
17. A searchable encryption scheme with biometric authentication and authorization for cloud environments10.3390/cryptography6010008 ↗
18. Revisiting cloud security threats: Replay attack
19. Cloud computing security challenges
20. Security analysis and fault detection against stealthy replay attacks10.1080/00207179.2020.1862917 ↗
21. Implementation of replay attack in controller area network bus using universal verification methodology
22. Intercept the cloud network from brute force and DDoS attacks via intrusion detection and prevention system10.1109/ACCESS.2021.3126535 ↗
23. Client-side cryptography based security for cloud computing system