No abstract

This paper proposes a scheme to provide Security to Dynamic Multicast VoIP systems efficiently. Security is usually provided by encrypting the media packets sent from a user to other users with the help of a shared key called the Session Encryption Key (SEK). The most time consuming process in a dynamic multicast VoIP environment is the Group Key Management. Whenever there is a change in the group membership, the key needs to be updated and the updated key has to be sent to all active members in the group. Hence, by decreasing the number of update messages required for an updated key, the performance of the system can be improved considerably, thus making the scheme more efficient. The proposed Secure Multicast Key Management Scheme combines the advantages of Logical-key tree structure and Chinese Remainder Theorem (CRT) to achieve an effective scheme. This paper compares the efficiency of the proposed scheme with the existing schemes and the comparison shows that the proposed scheme performs better than the existing schemes in terms of reduction in key update messages.

No abstract

A phishing attack is one of the severe threats to the smartphone users. As per the recent lookout report, mobile phishing attack is increasing 85% year to year and going to become a significant threat to the smartphone users. This social engineering attack attempts to get the user’s password by disguising as trusted service provider. Most of the smartphone users are using the Internet services outside of the traditional firewall. Cloud-based documents are one of the primary targets of this phishing attack in mobile cloud computing. Also, most smartphone users are using the cloud storage in their device. To secure against this password attack in a mobile cloud environment, we propose a new authentication scheme to provide novel security to the mobile cloud services. This scheme will verify the user and service provider without transmitting the password using the Zero-knowledge proof based authentication protocol. Moreover, the proposed scheme will provide mutual authentication between the communication entities. The effectiveness of proposed scheme would be verified using protocol verification tool called Scyther.

No abstract