Towards an augmented authenticator in the Cloud

Pitropakis, Nikolaos; Yfantopoulos, Nikolaos; Geneiatakis, Dimitris; Lambrinoudakis, Costas

Abstract

Many times in the past, critical infrastructures like e-health and e-government services have become a target of cyber-attacks resulting to manipulation of sensitive information. Meanwhile, there are several approaches applying security and privacy protection measures on cloud-based databases. Simultaneously, many steganographic algorithms have been proposed for achieving security on Cloud Infrastructures. This paper proposes a practical method for applying steganography in an one-time authenticator tool for Cloud-based databases in a healthcare scenario. The proposed method takes into account the architecture of the database server in the cloud and employs an authenticator tool that encrypts the database encryption key and embeds it into the stego-cover. We have tested our approach on a cloud-based database in order to evaluate the overhead introduced and facilitate a threat scenario for testing the security level. Results have revealed that the use of various text and WAV files did not introduce significant overhead. Depending on the file size the introduced delay was between 1 to 3 seconds.

Citation

Pitropakis, N., Yfantopoulos, N., Geneiatakis, D., & Lambrinoudakis, C. (2014, December). Towards an augmented authenticator in the Cloud. Presented at 2014 IEEE International Symposium on Signal Processing and Information Technology (ISSPIT), Noida, India

• Presentation Conference Type: Conference Paper (published)
• Conference Name: 2014 IEEE International Symposium on Signal Processing and Information Technology (ISSPIT)
• Start Date: Dec 15, 2014
• End Date: Dec 17, 2014
• Acceptance Date: Nov 1, 2014
• Online Publication Date: Oct 26, 2015
• Publication Date: Oct 26, 2015
• Deposit Date: Sep 21, 2018
• Publisher: Institute of Electrical and Electronics Engineers
• Book Title: 2014 IEEE International Symposium on Signal Processing and Information Technology (ISSPIT)
• ISBN: 9781479918126
• DOI: https://doi.org/10.1109/isspit.2014.7300603
• Keywords: Cloud Computing , Electronic Healthcare Record (EHR) , Steganography , Security , Privacy
• Public URL: http://researchrepository.napier.ac.uk/Output/1304059