The Experts below are selected from a list of 1104 Experts worldwide ranked by ideXlab platform

T. Williams - One of the best experts on this subject based on the ideXlab platform.

  • ACSAC - Using Fortezza for transparent File Encryption
    Proceedings 12th Annual Computer Security Applications Conference, 1996
    Co-Authors: J. Epstein, T. Williams
    Abstract:

    SISTex's Assure(R) Basic product provides security features including access controls and transparent File Encryption (using the Data Encryption Standard) in a DOS/Windows environment. To meet the needs of certain customers, we converted the DES based File Encryption to use NSA's Fortezza card, which uses the Skipjack algorithm. Despite our expectations, Fortezza was not a clean replacement for DES. The paper discusses some of the thorny technical problems encountered during product development.

  • Using Fortezza for transparent File Encryption
    Proceedings 12th Annual Computer Security Applications Conference, 1996
    Co-Authors: J. Epstein, T. Williams
    Abstract:

    SISTex's Assure(R) Basic product provides security features including access controls and transparent File Encryption (using the Data Encryption Standard) in a DOS/Windows environment. To meet the needs of certain customers, we converted the DES based File Encryption to use NSA's Fortezza card, which uses the Skipjack algorithm. Despite our expectations, Fortezza was not a clean replacement for DES. The paper discusses some of the thorny technical problems encountered during product development.

Yanxia Wang - One of the best experts on this subject based on the ideXlab platform.

  • SPAC - A File Encryption Algorithm Based on Dynamic Block Out of order Matrix Mapping
    2018 International Conference on Security Pattern Analysis and Cybernetics (SPAC), 2018
    Co-Authors: Tan Dong, Yanxia Wang
    Abstract:

    In order to solve the security of content transfer during File transfer and fast Encryption of large Files. This paper proposes a method to quickly encrypt large Files and protect the contents of File information, also prevent Files from being intercepted and decrypted before use. The algorithm of File Encryption based on dynamic block out of order matrix mapping. First, dynamically block the Files according to a certain ratio, extract the raw data and key information of each block, then store the out of order data into a two-dimensional table of matrix after calculation and processing. Second, use Base64 encoding on this matrix mapping table. Then the matrix mapping table is to be a unique decryption key of this File. After that, the data in the spare block of the File is filled with the MD5 data, the MD5 data is generated by UUID and block with the same size as the number of dynamic block. The new encrypted File whose length is equal to the original File. Because it is dynamic block and random extracted data, so it is fast and efficient. The experimental results and security analysis show that the algorithm has a good Encryption structure and high security, which can effectively resist various attack behaviors. Most of the Files that with different types can be used, and the speed to encrypt and decrypt large Files is greatly improved compared with the traditional Encryption and decryption methods, the speed and efficiency far exceed the traditional File Encryption and decryption algorithms, such as AES, DES, 3DES and so on.

  • A File Encryption Algorithm Based on Dynamic Block Out of order Matrix Mapping
    2018 International Conference on Security Pattern Analysis and Cybernetics (SPAC), 2018
    Co-Authors: Tan Dong, Yanxia Wang
    Abstract:

    In order to solve the security of content transfer during File transfer and fast Encryption of large Files. This paper proposes a method to quickly encrypt large Files and protect the contents of File information, also prevent Files from being intercepted and decrypted before use. The algorithm of File Encryption based on dynamic block out of order matrix mapping. First, dynamically block the Files according to a certain ratio, extract the raw data and key information of each block, then store the out of order data into a two-dimensional table of matrix after calculation and processing. Second, use Base64 encoding on this matrix mapping table. Then the matrix mapping table is to be a unique decryption key of this File. After that, the data in the spare block of the File is filled with the MD5 data, the MD5 data is generated by UUID and block with the same size as the number of dynamic block. The new encrypted File whose length is equal to the original File. Because it is dynamic block and random extracted data, so it is fast and efficient. The experimental results and security analysis show that the algorithm has a good Encryption structure and high security, which can effectively resist various attack behaviors. Most of the Files that with different types can be used, and the speed to encrypt and decrypt large Files is greatly improved compared with the traditional Encryption and decryption methods, the speed and efficiency far exceed the traditional File Encryption and decryption algorithms, such as AES, DES, 3DES and so on.

Yi-li Huang - One of the best experts on this subject based on the ideXlab platform.

  • NBiS - A Group File Encryption Method using Dynamic System Environment Key
    2014 17th International Conference on Network-Based Information Systems, 2014
    Co-Authors: Kun-lin Tsai, Yi-li Huang
    Abstract:

    File Encryption is an effective way for an enterprise to prevent its data from being lost. However, the data may still be deliberately or inadvertently leaked out by the insiders or customers. When the sensitive data are leaked, it often results in huge monetary damages and credit loss. In this paper, we propose a novel group File Encryption/decryption method, named the Group File Encryption Method using Dynamic System Environment Key (GEMS for short), which provides users with auto crypt, authentication, authorization, and auditing security schemes by utilizing a group key and a system environment key. In the GEMS, the important parameters are hidden and stored in different devices to avoid them from being cracked easily. Besides, it can resist known-key and eavesdropping attacks to achieve a very high security level, which is practically useful in securing an enterprise's and a government's private data.

  • A Group File Encryption Method using Dynamic System Environment Key
    2014 17th International Conference on Network-Based Information Systems, 2014
    Co-Authors: Kun-lin Tsai, Yi-li Huang
    Abstract:

    File Encryption is an effective way for an enterprise to prevent its data from being lost. However, the data may still be deliberately or inadvertently leaked out by the insiders or customers. When the sensitive data are leaked, it often results in huge monetary damages and credit loss. In this paper, we propose a novel group File Encryption/decryption method, named the Group File Encryption Method using Dynamic System Environment Key (GEMS for short), which provides users with auto crypt, authentication, authorization, and auditing security schemes by utilizing a group key and a system environment key. In the GEMS, the important parameters are hidden and stored in different devices to avoid them from being cracked easily. Besides, it can resist known-key and eavesdropping attacks to achieve a very high security level, which is practically useful in securing an enterprise's and a government's private data.

Liheng Zheng - One of the best experts on this subject based on the ideXlab platform.

  • CIS - A Transparent File Encryption Scheme Based on FUSE
    2016 12th International Conference on Computational Intelligence and Security (CIS), 2016
    Co-Authors: Xiang He, Yihong Long, Liheng Zheng
    Abstract:

    Transparent File Encryption is an important means to protect File data security. However, for the traditional File Encryption system based on File filter driver, constant cache cleaning is required to ensure the correctness of the data in the cache, which greatly reduces the efficiency of File operations. In the paper, a transparent File Encryption system based on FUSE (File System in User Space) is proposed to overcome the shortcomings of the traditional transparent File Encryption systems. To avoid cleaning the system File cache frequently, File redirection is adopted to transfer File operations to FUSE, which processes the File operations initiated by the trusted processes and non-trusted processes differently, with respect to cache. This system can not only be used for local File protection, but can also be applied to secure the Files on cloud storages.

  • A Transparent File Encryption Scheme Based on FUSE
    2016 12th International Conference on Computational Intelligence and Security (CIS), 2016
    Co-Authors: Xiang He, Yihong Long, Liheng Zheng
    Abstract:

    Transparent File Encryption is an important means to protect File data security. However, for the traditional File Encryption system based on File filter driver, constant cache cleaning is required to ensure the correctness of the data in the cache, which greatly reduces the efficiency of File operations. In the paper, a transparent File Encryption system based on FUSE (File System in User Space) is proposed to overcome the shortcomings of the traditional transparent File Encryption systems. To avoid cleaning the system File cache frequently, File redirection is adopted to transfer File operations to FUSE, which processes the File operations initiated by the trusted processes and non-trusted processes differently, with respect to cache. This system can not only be used for local File protection, but can also be applied to secure the Files on cloud storages.

Zhengan Huang - One of the best experts on this subject based on the ideXlab platform.

  • a remotely keyed File Encryption scheme under mobile cloud computing
    Journal of Network and Computer Applications, 2018
    Co-Authors: Li Yang, Zhengan Huang
    Abstract:

    Abstract The storage and computing capacity limitations of a mobile terminal pare down the File sharing ability between mobile terminals and public clouds. Moreover, the security of public clouds increases perceived risks. Private clouds represent a very effective platform and can be regarded as a trusted third party for improving the level of security when a user uses a File from public clouds. Thus, we propose a new scheme called FREDP (File Remotely keyed Encryption and Data Protection). This scheme involves three-party interaction among a mobile terminal, private clouds and public clouds. The private clouds share the ciphertext File to the public clouds until the mobile terminal and the trusted third party, the private clouds, finish the Encryption of the plaintext File using a remotely keyed Encryption algorithm. To ensure security when a mobile terminal uses data, the private clouds as the third party regularly verify the integrity of the data in the public clouds. Finally, the mobile terminal and private clouds decrypt the ciphertext File to allow the user of the mobile terminal to use the data. In addition, we analyze the security of FREDP using BAN. The FREDP satisfies the security standard. In addition, we conduct an experiment to measure the scheme's performance. The results show that FREDP achieves good performance.