Emerging Information Security and Applications: Third International Conference, EISA 2022, Wuhan, China, October 29–30, 2022, Proceedings

Description

This volume constitutes selected papers presented at the Third International Symposium on Emerging Information Security and Applications, EISA 2022, held in Wuhan, China, in October 2022. Due to COVID-19, EISA 2022 was held fully online. The 13 full papers presented in this volume were thoroughly reviewed and selected from the 35 submissions. They present a discussion on the emerging techniques, theories and applications to enhance information and application security in practice.  Preface Organization Contents Asymmetric Secure Multi-party Signing Protocol for the Identity-Based Signature Scheme in the IEEE P1363 Standard for Public Key Cryptography 1 Introduction 1.1 Our Contributions 1.2 Paper Organization 2 Related Work 3 Preliminaries 3.1 Bilinear Pairing 3.2 IEEE Standard for Identity-Based Signature 3.3 Number-Theoretic Assumptions 3.4 Additively Homomorphic Encryption 3.5 The Share Conversion Protocol FM2A 3.6 The Non-interactive Zero-Knowledge Functionality 4 Our Scheme 4.1 Network Model 4.2 Setup Phase 4.3 Key Distribution Phase 4.4 Signature Generation Phase 4.5 Correctness 5 Security Analysis 6 Performance Analysis 7 Conclusion References A Multi-task Mobile Crowdsensing Scheme with Conditional Privacy Preserving for Vehicle Networks 1 Introduction 2 Related Works 3 Preliminaries 3.1 Homomorphic Encryption 3.2 The BCP Encryption Scheme 4 Models and Definitions 4.1 System Model 4.2 Security Model 4.3 Security Requirements 5 The Proposed Scheme 5.1 Overview of the Proposed Scheme 5.2 Technical Details of the Proposed Scheme 6 Security and Efficiency Analysis 6.1 Security Analyses 6.2 Efficiency Analyses 7 Conclusion References Towards Low-Latency Big Data Infrastructure at Sangfor 1 Introduction 2 Abstractions 3 System Design 3.1 Apache Kafka for Message Queue 3.2 Apache Flink for Stream Processing 3.3 Put Apache Kylin, Clickhouse and Presto Together for OLAP 3.4 Apache Iceberg for Data Lake 3.5 One-Stack Rule Them All 4 Use Cases 4.1 Security Application: Security Operation Center 4.2 IoT Application: Smart Factory 5 Lessons Learned 5.1 No Single System Can Rule All 5.2 Ease of Deployment and Monitoring 5.3 Ease of Development and Debugging 6 Related Work 7 Conclusion References Differential Cryptanalysis of Lightweight Block Ciphers SLIM and LCB 1 Introduction 1.1 Contributions 2 Preliminaries 2.1 Notations and Abbreviations 2.2 Specifications of SLIM 2.3 Specifications of LCB 3 Cryptanalysis of SLIM 3.1 SLIM Differentials 3.2 Key Recovery Attack on SLIM Reduced to 13 Rounds 3.3 Key Recovery Attack on SLIM Reduced to 14 Rounds 4 Cryptanalysis of LCB 4.1 Improving LCB 5 Conclusion References Parallel Validity Analysis of the Boomerang Attack Model 1 Introduction 2 Preliminaries 2.1 Differential Analysis 2.2 The Boomerang Attack's Quartet Structure 2.3 KATAN Block Cipher 2.4 GPU and OpenCL 3 Validity Verification and Parallel Implementation Scheme Design of Boomerang Attack Model 3.1 Differential Analysis for KATAN32 3.2 Design of Validity Verification Scheme for Boomerang Attack Model 4 Experimental Results 4.1 Experimental Setup 4.2 Analysis of the Experimental Results of the Validity Verification of the Boomerang Attack Model 4.3 Comparison of CPU and GPU Algorithm Results 5 Conclusion References A Survey on Discrete Gaussian Samplers in Lattice Based Cryptography 1 Introduction 2 Preliminaries 2.1 Notion 2.2 Discrete Gaussian Distribution 2.3 Smoothing Parameter 3 Measures 3.1 Statistical Distance 3.2 Kullback-Leibler Divergence 3.3 Rényi Divergence 3.4 Max-Log Distance 4 Samplers 4.1 Rejection Sampler 4.2 Inversion Sampler 4.3 Hybrid Sampler 5 Conclusion References Hierarchical Identity Based Inner Product Functional Encryption for Privacy Preserving Statistical Analysis Without q-type Assumption 1 Introduction 2 Preliminaries 2.1 Notation 2.2 Hierarchical Identity-Based Inner Product Functional Encryption 2.3 Asymmetric Bilinear Map and Hardness Assumption 3 Construction of HID-IPFE 4 Security Analysis 5 Conclusion References AutoRoC-DBSCAN: Automatic Tuning of DBSCAN to Detect Malicious DNS Tunnels 1 Introduction 2 Domain Name System Tunnels 2.1 DNS Tunneling Techniques 2.2 DNS Tunneling Tools 3 Automated Tuning of DBSCAN 3.1 Our High-Level DNS Tunnel Detection Approach 3.2 Density-Based Spatial Clustering of Applications with Noise 3.3 AutoRoc-DBSCAN 4 Performance Evaluation 4.1 A New DNS Tunneling Dataset 4.2 Preparation 4.3 Results 5 Related Work 5.1 Methods for Automatically Tuning DBSCAN 5.2 DNS Based C&C Communication Detection 6 Conclusion References HBMD-FL: Heterogeneous Federated Learning Algorithm Based on Blockchain and Model Distillation 1 Introduction 2 Related Work 2.1 Federated Learning 2.2 Model Distillation 2.3 Blockchain 3 Preliminary 3.1 Federated Learning 3.2 Model Distillation 3.3 Blockchain 4 HBMD-FL 4.1 Overview of HBMD-FL 4.2 Workflow of HBMD-FL 5 Experiment 5.1 Experiment Setup 5.2 Results 5.3 Evaluation on the Incentive Mechanism 6 Conclusion References Secure and Efficient Certificateless Authentication Key Agreement Protocol in VANET 1 Introduction 2 Security Analysis of Authentication Key Agreement Protocol for VANET Proposed by Zhang et al. [17] 3 Improved Authentication Key Agreement Protocol for VANET 3.1 System Parameter Settings 3.2 Registration and Authorization Algorithm Between TRA and OBUi 3.3 Authentication Key Agreement Algorithm Between OBUi and CSj 4 Security Analysis of the Improved Scheme 5 Comparison of Safety and Efficiency 6 Conclusion References An Efficient Federated Convolutional Neural Network Scheme with Differential Privacy 1 Introduction 2 Background 2.1 Federated Learning 2.2 Reconstruction Attack 2.3 Differential Privacy 3 Compensatory Reconstruction Attack 4 Federated Convolutional Neural Network Scheme with Differential Privacy 4.1 Fully Connected Layer - Differential Privacy Stochastic Gradient Descent Algorithm 4.2 Critical Gradients - Differential Privacy Stochastic Gradient Descent Algorithm 5 Experiments 5.1 Experiment Setup 5.2 Experiment Result 6 Conclusions and Future Work References D2CDIM:DID-Based Decentralized Cross-Domain Identity Management with Privacy-Preservation and Sybil-Resistance 1 Introduction 2 Preliminaries 2.1 Decentralized Identifier Standard 2.2 Counting Bloom Filter (CBF) 2.3 Zero-Knowledge Proof 2.4 Dynamic Accumulator 2.5 Anonymous Credential 3 System Models 3.1 Threat Model 3.2 Design Goals 4 System Overview 4.1 Identity Registration 4.2 Cross-Domain Authentication 4.3 Identity Revocation and Identity Update 5 Our Protocol Design 5.1 Identity Registration 5.2 Cross-Domain Authentication 6 System Analysis 6.1 Security Analysis 6.2 Performance Analysis 7 Related Work 7.1 Centralized Schemes 7.2 Distributed Schemes 8 Conclusion References Link Aware Aggregation Query with Privacy-Preserving Capability in Wireless Sensor Networks 1 Introduction 2 Related Works 3 Preliminaries 3.1 IWQE Protocol 3.2 SMART Protocol 4 RPSAQ 4.1 Basic Idea 4.2 How to Set the Grid Size and the Query Node 4.3 Method of Handing Voids 4.4 Privacy Analysis 5 Analysis of Experimental Results 5.1 Energy Consumption 5.2 Number of Packets 5.3 Query Result Quality 6 Conclusion References Author Index