Elliptic Curve Cryptosystem: Neal Koblitz and Victor S. Miller

In this report I will be describing the ways in which networks can be attacked, also be giving real life example of each of the below.

These attacks can be extremely damaging to one’s intellectual properties (information, money, etc) as well as a concern for personal safety. The key to stopping or minimizing these attacks is to learn what these attacks are and how they are executed to really create an effective plan to stop unnecessary losses.

New ways of attacking systems are being discovered all the time, what was considered secure degrades over time.

The centralize server which store user data gather from different source is not secure .so for securing data we apply ECC ( Elliptical Curve Cryptography) algorithm. The data which is send or receive from server is encrypted form. It is very difficult to hack user data as ECC algorithm use discrete logarithm.

RSA is a division of EMC Corporation that offers security products to businesses and government agencies. RSA’s flagship product is SecurID, a combination of two-factor authentication tokens (hardware and software) and the associated server software used in their implementation. This product aims to deliver secure remote access, including access to critical infrastructure. In 2009, it was estimated RSA had “about 40 million tokens and 250 million mobile software versions deployed in over 25,000 organizations”, including banks, government, manufacturing, and pharmaceutical companies (Rashid, 2011). In this paper we will examine the 2011 breach of RSA involving the SecurID product, the incident response and recovery, mitigation strategies,

As Paris tremble for fear from terrorist attacks that have killed 129 people, fierce blame for the massacre is falling on American whistleblower Edward Snowden and the spread of strong encryption catalyzed by his actions. The lastest deadly terror attack is leading the crypto-war as a contemporarily crucial issue. The crypto-war refers to a decades-long political battle over the legality and popularity of encryption around world. Since Snowden exposed the vast surveillance and spying done by Western governments, people have become to demand more strong encryption to shield their Internet activities from prying eyes, so encryption has been become popular rapidly. Now everyone uses encryption from e-commerce websites to terrorists. The key

Abstract— Wireless Sensor Networks (WSN) introduce a new way to interact with the physical environment. The security in WSNs became an attractive area of research. WSNs are susceptible to a wide range of malicious attacks. At present ECC is considered for secure communications, which is having good potential for WSN security due to its smaller key size and its high strength of security. Unfortunately, the execution time of ECC is more which is not suitable for more number of applications. A number of other security mechanisms have been proposed for sensor networks to provide data confidentiality, namely Advanced Encryption Standard (AES) and Data Encryption Standard (DES). In this paper, we propose an algorithm, which is compared and analyzed with the existing ECC and AES to provide better security with authenticated sensor nodes. The authentication is done with a secret code. The proposed algorithm will ensure the secure communication with authenticated devices. The analysis results shows that the scheme works better than the common existent schemes with better utilization of available memory.

Cybersecurity is meant to protect computers, networks and data from unauthorized access, vulnerabilities and attacks. Companies around the world have experienced many cyber-attacks in the last decade. Most companies were targeted in hopes of obtaining confidential information. Some companies were breached to find information that would allow the attackers to target their customers. One such attack happened to the security company RSA when their SecurID tokens were compromised. This paper will examine how RSA SecurID token technology works, how the RSA company network was breached, what information was stolen, and the impacts that resulted from the initial attack.

In this work, we shall focus on providing temporal privacy which is very curtail to providing source and sink location privacy. There are generally two ways to locate a sensor using passive attacks: traffic analysis [1] and packet tracing [2, 3]. The traffic analysis can determine location by analyzing the traffic. Packet tracing can be used to find the source

This lecture was given by Dr. David Mirza Ahmad one of chief mentors of Subgraph, which is a open-source security start-up based out in Montreal. The talk was based on Kerchoff’s principle which states “the security of any cryptographic system does not rest in its secrecy; it must be able to fall into the enemy’s hand without inconvenience” [1]. The kerchoff’s principle underlines the fact that free software should be having reasonably good security. This fact is well understood by the world of cryptography because cryptography is a black-box where you never know what is happening inside it.

This attack allows a malicious virtual machine (VM) to extract a private ElGamal decryption key from a co-resident virtual machine running Gnu Privacy Guard, which implements the OpenPGP email encryption standard. A recent study which describes the Side channel attack has shown that an attacker can place a malicious Virtual Machine on the same infrastructure as that of the victim and then extract confidential information from the victim Virtual Machine. The whole process is very elaborate and has been achieved only in a lab environment till now.

Data encryption is the key role in current and future technologies. Many public key cryptography algorithms were presented depending on a specific mathematical problem. It is desired to communicate data with high security over insecure network. Due to sensor technology biometrics has lead to rising concerns about the network security, privacy, trust issues and accuracy. Hence, securing biometric template in public network is great challenge. Because once it is compromised or stolen it cannot be revoked. In order to provide remote biometric authentication these systems incorporated with cryptography and primarily focused on template security, revocability, privacy, accuracy. The system is secure in the sense that the biometric are going to

An example of a field where embedded systems find use is in the world of e-commerce. Non-cash payments (cards, checks, ACH, electronic transactions etc.) for the year 2012 is listed at $122.8 billion in the United States alone and, the number of such transactions has seen an increase in annual rate of 4.4 percent (2009-2012) and at a rate of 4.7 percent between 2003 and 2012 based on the Federal Reserve Payment Study [1]. In this same report, it is noted that there were 31.1 million unauthorized transactions (third-party fraud) which amounted to an estimated $6.1 billion in monetary value. These figures provide an estimate as to the extent of damage possible today in the world of commerce. There are real livelihoods at stake and providing Network Security in the context of online transactions can address some the vulnerabilities seen in the system. Recent attacks that have targeted various financial and commercial institutions in the United States alone, point to the urgent need to implement security solutions universally across all platforms that use embedded systems. This has to be implemented in a systematic manner and should include the active

Since SSL was introduced in 1990s, security professionals and malicious attackers have exploited a lot of security flaws resides in the SSL and TLS protocols. And because that users could choose different cryptosystems, different cipher algorithms, and other variances for their SSL or TLS implementation, there are so many types of attacks toward SSL and TLS targeted at different algorithms. In this paper, I will focus on introducing several attacks through flaws in RC4, RSA, and Diffie-Hellman.

Unlike traditional WLANs, the physical security of nodes in a wireless sensor network cannot necessarily be assured. This is an important consideration to take into account when designing security for the sensor network. Another beneficial feature of the sensor network is the inexpensiveness of the individual nodes. Individual sensors are designed to be cheap, inexpensive, and easily replaceable. This presents a security challenge where it is needed to provide enough security on sensor network in an economical manner. Lastly, because sensors are inexpensive, small, and consume very little power, their computational ability is extreme limited which makes cryptography application difficult.