مجله علمی  رایانش نرم و فناوری اطلاعات

مجله علمی رایانش نرم و فناوری اطلاعات

ایمن‌‌سازی تبادل پیامک بر مبنای تبادل داده خصوصی کاربران در شبکه‌های اجتماعی

نوع مقاله : مقاله پژوهشی فارسی

نویسندگان
1 گروه مهندسی کامپیوتر، واحد خرم‌آباد، دانشگاه آزاد اسلامی، خرم‌آباد، ایران.
2 دانشکده مهندسی کامپیوتر، موسسه آموزش عالی الکترونیکی ایرانیان، تهران، ایران.
چکیده
امروزه پیامک‌ها نقش کاربردی وسیعی در زندگی مدرن کاربران ایفا می‌کنند. احراز هویت، گزارش‌ها، و ارتباطات شخصی نمونه‌هایی از کاربردهای وسیع این رسانه هستند. در زمان ارسال پیامک سیگنال‌های آن بدون هرگونه تمهیدات امنیتی در فضا انتشار می‌یابند و درنتیجه محتویات پیام‌ها بدون نیاز به تجهیزات پیچیده براحتی قابل تصاحب است. روشهای نوین، تامین امنیت را از سخت افزار به نرم افزار و بخصوص برنامه‌های تلفن‌های هوشمند منتقل کرده‌اند. در این تحقیق، یک روش ایمن‌سازی پیشنهاد شده که با استفاده از چهار عامل مختلف، دو کلید منحصر به فرد و پویا را برای رمزنگاری و رمزگشایی پیامک‌ها تولید می‌کند. ارزیابی نتایج نشان می‌دهد که مدل ارائه شده از کلیدهای ایمن استفاده کرده، در برابر طیف وسیعی از حملات مقاوم است، هزینه ایجاد نشست‌های ایمن به شکل چشم‌گیری کاهش یافته، و درصد بسیار بالایی از کاربران از ایمنی و سادگی عملکرد آن رضایت کامل دارند.
کلیدواژه‌ها

[1] M. W. Khan, “SMS Security in Mobile Devices: a Survey” International Journal of Advanced Networking and Applications, Vol. 5, No. 2, pp.1873-1882, 2013.
[2] S. Bojjagani and V. N. Sastry, “SSMBP: A Secure SMS-based Mobile Banking Protocol with Formal Verification”. In International Conference on Wireless and Mobile Computing, Networking and Communications, pp. 252-259, 2015.
[3] S. Yazdanpanah, and S. Shojae Chaeikar, “IKM-based security usability enhancement model,” IRACST-International Journal of Computer Science and Information Technology & Security (IJCSITS), 4, 2012.
[4] N. Saxena and N. S. Chaudhari, “EasySMS: A Protocol for End-to-end Secure Transmission of SMS” IEEE Trans. Inf. Forensic Secur, Vol. 9, No. 7, pp. 1157-1168, 2014.
[5] T. Khodadadi, M. Zamani, S. S. Chaeikar, Y. Javadianasl, M. Talebkhah, and M. Alizadeh, “Exploring the Benefits and Drawbacks of Machine Learning in Cybersecurity to Strengthen Cybersecurity Defences”. In 2023 IEEE 30th Annual Software Technology Conference (STC), 2023.
[6] J. Alwen and J. Blocki, “Towards Practical Attacks on Argon2i and Balloon Hashing”. In International Conference on Security and Privacy, pp. 142-157, 2017.
[7] J. Lee and Y. Oh, “A Study on Providing the Reliable and Secure SMS Authentication Service”. In International Conference on Ubiquitous Intelligence and Computing, pp. 620-624, 2014.
[8] N. B. Anuar and L. N. Kuen, and O. Zakaria and A. Gani, and A. W. Wahab, “GSM Mobile SMS/MMS Using Public Key Infrastructure: m-PKI” WSEAS Transactions on Computers, Vol 7, No. 8, pp. 1219-1229, 2008.
[9] S. Yazdanpanah, S. Shojae Chaeikar, and A. Jolfaei, “Monitoring the security of audio biomedical signals communications in wearable IoT healthcare,” Digital Communications and Networks, 9 (2), pp.393-399, 2023.
[10] M. Raza and M. Iqbal and M. Sharif and W. Haider, “A Survey of Password Attacks and Comparative Analysis on Methods for Secure Authentication” World Applied Sciences Journal, Vol. 19, No. 4, pp. 1439-1244, 2012.
[11] S. Shojae Chaeikar, A. Jolfaei, and N. Mohammad, “AI-enabled cryptographic key management model for secure communications in the internet of vehicles,” IEEE Transactions on Intelligent Transportation Systems, 24(4), pp.4589-4598, 2022.
[12] S. Shojae Chaeikar, A. Ahmadi, S. Karamizadeh, and N. Shoja Chaeikar, “SIKM–a smart cryptographic key management framework,” Open Computer Science, 12(1), pp.17-26, 2022.
[13] S. Honarbakhsh, M. Masrom, M. Zamani, S. Shojae Chaeikar, and R. Honarbakhsh, “A Trust Based Clustering Model for Dynamic Monitoring in Ad hoc Network,” In International Conference on Computer and Computational Intelligence (ICCCI 2010), 2010.
[14] M. A. Hossain and S. Jahan and M. M. Hussain and M. R. Amin and S. S. Newaz, “A Proposal for Enhancing the Security System of Short Message Service in GSM”. In International Conference on Anti-counterfeiting, Security and Identification, pp. 235-240, 2008.
[15] IPCS Group, “IPCryptSim SMS Encryption”, http://www.ipcslive.com/pdf/IPCSSMS.pdf, 2018.
[16] H. Rongyu and Z. Guolei and C. Chaowen and X. Hui and Q. Xi and Q. Zheng, “A PK-SIM Card Based End-to-end Security Framework for SMS” Computer Standards & Interfaces, Vol. 31, No. 4, pp. 629-641, 2009.
[17] M. Toorani and A. Beheshti, ”SSMS-A Secure SMS Messaging Protocol for the M-payment Systems”. In International Conference on Computers and Communications, pp. 700-705, 2008.
[18] M. Hassinen and K. Hyppönen and K. Haataja, “An Open, PKI-based Mobile Payment System” Emerging Trends in Information and Communication Security, Vol. 1, No. 1, pp. 86-100, 2006.
[19] U. Chirico, “How to Protect Your Privacy in SMS Communication”, http://www.ugochirico.com/post/2010/08/26/How-to-protect-your-privacy-in-SMS-communication, 2018.
[20] M. Hassinen, “SafeSMS-end-to-end Encryption for SMS”. In International Conference on Telecommunications, pp. 359-365, 2005.
[21] D. Lisonek and M. Drahanský, “SMS Encryption for Mobile Communication”. In International Conference on Security Technology, pp. 198-201, 2008.
[22] M. Hassinen and S. Markovski, “Secure SMS Messaging Using Quasigroup Encryption and Java SMS API”, http://www.cs.uku.fi/~mhassine/VOH/Luennot/MIDLET/Presentation.pdf, 2018.
[23] F. Bélanger and L. Carter, “Trust and Risk in E-government Adoption” The Journal of Strategic Information Systems, Vol. 17, No. 2, pp. 165-176, 2008.
[24] J. L. Lo and J. Bishop and J. H. Eloff, “SMSSec: an End-to-end Protocol for Secure SMS” Computers & Security, Vol. 27, No. 5, pp. 154-167, 2008.
[25] A. Grillo and A. Lentini and G. Me, G. F. Italiano, “Transaction Oriented Text Messaging with Trusted-SMS”. In International Conference Computer Security Applications, pp.485-494, 2008.
[26] M. Agoyi and D. Seral, “SMS Security: an Asymmetric Encryption Approach”. In International Conference on Wireless and Mobile Communications, pp. 448-452, 2010.
[27] C. Narendiran and S. A. Rabara and N. Rajendran, “Performance Evaluation on End-to-end Security Architecture for Mobile Banking System”. International Conference on Wireless Days. pp. 1-5, 2008.
[28] B. Ahamed Bazeer, and M. Krishnamoorthy, "SMS encryption and decryption using modified vigenere cipher algorithm" Journal of the Operations Research Society of China, pp 1-14, 2020.
[29] M. Q. U. A. Zam Zam, H. Ashraf, and N. Z. Jhanjhi, "An Improved SMS Security Technique to Avoid Plaintext and Dictionary Attacks" Preprints, 2024.
[30] A. Oberle and P. Larbig and R. Marx and F. G. Weber and D. Scheuermann and D. Fages and F. Thomas, “Preventing Pass-the-Hash and Similar Impersonation Attacks in Enterprise Infrastructures”. In International Conference on Advanced Information Networking and Applications, pp. 800-807, 2016.
[31] S. S. Chaeikar and A. B. Manaf and M. Zamani, “Cryptography and Security in Computing” InTech, 2012.
[32] A. Mirghadri and M. Yosefipour and B. Khadem and M. Sajadieh, "Two New Methods for Designing 192-bit Block Ciphers Based on Switching Structure and Recursive Diffusion Layers" Advanced Defence Sci. & Tech, Vol. 10, No. , pp. 251-259, 2016.
[33] L. Dong and Y. Wang and W. Wu J. Zou, “Known-key Distinguishers on 15-round 4-branch Type-2 Generalised Feistel Networks with Single Substitution–permutation Functions and Near-collision Attacks on Its Hashing Modes” IET Information Security, Vol. 9, No. 5, pp. 277-283, 2015.
[34] M. Kashif, “Secure SMS Communication Using Encryption Gateway and Digital Signature”. In International Conference on Computational Science and Engineering, pp. 1430-1434, 2014.
[35] M. Alizadeh and S. Baharun and M. Zamani and T. Khodadadi and M. Darvishi and S. Gholizadeh and H. Ahmadi, “Anonymity and Untraceability Assessment of Authentication Protocols in Proxy Mobile IPv6” Jurnal Teknologi. Pp. 31-34, 2015.
[36] A. K. Lenstra and E. R. Verheul, “Selecting Cryptographic Key Sizes” Journal of Cryptology, Vol. 14, No. 4, pp. 255-293, 2001.
[37] A. Faz-Hernández and J. López and E. Ochoa-Jiménez and F. Rodríguez-Henríquez, “A Faster Software Implementation of the Supersingular Isogeny Diffie-hellman Key Exchange Protocol” IEEE Trans.  Comput., 2017.