Analysis of cryptographic authentication and manipulation detection methods for big data

DOI: 10.31673/2409-7292.2024.010011

Abstract

The emergence of Big Data has made it possible to obtain more information about the customer and competitive base, as well as about market trends. Therefore, the desire of criminals to gain unauthorized access to this data also increases in direct proportion. However, not enough attention is paid to security issues of Big Data systems and their creation does not take into account the information security component. The purpose of the article is to develop approaches to the cyber protection of Big Data, which are stored and transmitted by telecommunication communication channels when responding to a request, namely their integrity and authentication. The main problems when working with Big Data are analyzed. Based on the results of the analysis of Big Data protection problems, a cryptographic transformation of data indexes when they are stored in the database and when transmitted in the form of hash codes is proposed to increase the efficiency of search by user requests. The expediency of using crypto-code constructions on elliptic curves of various types of modifications to form a pseudo-random substrate in order to increase the crypto-resistance of transmitted messages is proven. When forming hash codes, it is advisable to use modified elliptical codes, and under stricter conditions, the level of cryptographic resistance of authentication codes can be increased due to hybrid crypto-code constructions. A pseudo-random substrate can be represented by varieties that must equally ensure the necessary transformations and preservation of universality properties by the UMAC algorithm.

Keywords: Big Data, crypto-code constructions, hybrid crypto-code constructions, elliptic curves, pseudo-random layer, damaged codes.

References
1. Hordienko, N. Protect big data and minimize the risk of information loss, 2022, URL: https://www.ukrlogos.in.ua /10.11232-2663-4139.04.32.html.
2. Iluk, А. Risks associated with the protection of personal data in context Big Data. 2017, vol. 42 (592). URL: https://yur-gazeta.com /publications/practice /inshe/riziki-povyazani -iz-zahistom-personalnih-danih-v-konteksti-big-data.html.
3. NIST Special Publication 1500-1. NIST Big Data Interoperability Framework, 2020, URL: https://bigdatawg.nist.gov/_upload files/NIST.SP.1500-1.pdf.
4. Big Data Taxonomy, Cloud Security Alliance, 2021, URL: https:// downloads. cloudsecurityalliance. org/initiatives/bdwg /Big_Data_Taxonomy.pdf.
5. Big Data Security and Privacy Handbook: 100 Best Practices in Big Data Security and Privacy. Cloud Security Alliance, URL: https://downloads. cloudsecurityalliance.org/ assets/research/big-data/BigData_Security_ and_Privacy_Handbook. pdf.
6. Havrylova, A. A., Korol, O. H., Milevskyi, S. V., Bakirova, L. R. Mathematical model of authentication of a transmitted message based on a McEliece scheme on shorted and extended modified elliptic codes using UMAC modified algorithm, Кібербезпека: освіта, наука, техніка, 2019, No 1(5), pp. 40 – 51.
7. Yevseiev, S., Havrylova, A., Korol, O., Dmitriiev, O., Nesmiian, O. [and etc.]. Research of collision properties of the modified UMAC algorithm on crypto-code constructions, EUREKA: Physics and Engineering, Talli, Osauhing "Scientific Route", 2022, Number 1 (38), pp. 34 – 43.
8. Korol, O., Havrylova, A. Mathematical models of hybrid crypto-code constructions in the UMAC algorithm Przetwarzanie, transmisja i bezpieczenstwo informacji, Bielsko-Biala, Wydawnictwo naukowe Akademii Techniczno-Humanistycznej w Bielsku-Bialej, 2020, Vol. 12, pp. 125 – 134.
9. Yevseiev, S., Havrylova, A. Improved UMAC algorithm with crypto-code McEliece’s scheme, Modern Problems Of Computer Science And IT-Education : collective monograph / [editorial board K. Melnyk, O. Shmatko], Vienna, Premier Publishing s.r.o., 2020, pp. 79 – 92.
10. Korol, O., Havrylova, A., Yevseiev, S. Practical UMAC algorithms based on crypto code designs, Przetwarzanie, transmisja I bezpieczenstwo informacji, Bielsko-Biala, Wydawnictwo naukowe Akademii Techniczno-Humanistycznej w Bielsku-Bialej, 2019, Tom 2, pp. 221-232.
11. Evseev, S., Kotz, H., Korol, O. Analysis of the legal framework for the information security management system of the nsmep, Eastern-European Journal of Enterprise Technologies, 2015, 5(3), pp. 48–59.
12. Evseev, S., Abdullayev, V. Monitoring algorithm of two-factor authentication method based on passwindow system. Eastern-European Journal of Enterprise Technologies, 2015, 2(2), pp. 9–16.
13. Yevseiev, S., Tsyhanenko, O., Ivanchenko, S., Milov, O., Shmatko, O. Practical implementation of the Niederreiter modified crypto-code system on truncated elliptic codes, Eastern-European Journal of Enterprise Technologies, 2018, 6(4-96), pp. 24–31.
14. Yevseiev, S., Kots, H., Liekariev, Y. Developing of multi-factor authentication method based on Niederreiter Mc-Еliece modified crypto-code system. Eastern-European Journal of Enterprise Technologies, 2016, 6(4), pp. 11–23.
15. Yevseiev, S., Korol, O., Kots, H. Construction of hybrid security systems based on the cryptocode structures and flawed codes, Eastern-European Journal of Enterprise Technologies, 2017, 4(9-88), pp. 4–21.
16. Milov, O., Yevseiev, S., Ivanchenko, Y., Tiurin, V., Yarovyi, A. Development of the model of the antagonistic agents behavior under a cyber conflict. Eastern-European Journal of Enterprise Technologies, 2019, 4(9-100), pp. 6–10.
17. Rukhin, J. Soto. A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications. NIST Special Publication 800-22, 2000.
18. Yevseiev, S., Ponomarenko, V., Laptiev, O., Milov, O. Synergy of building cybersecurity systems: monograph, Kharkiv: PC Technology Center, 2021, 188 p.
19. Yevseiev, S., Tsyhaneko, O., Gavrilova, A., Guzhva, V., Milov, O., Moskalenko, V., Opirskyy, I., Roma, O., Tomashevsky, B., Shmatko, O. Development of Niederreiter hybrid crypto-code structure on flawed codes, Eastern-European Journal of Enterprise Technologies, 2019, № 1/9 (97), pp. 27 –38.
20. Gavrilova, A., Volkov, I., Kozhedub, Yu., Korolev, R., Lezik, O., Medvediev, V., Milov, O., Tomashevsky, B., Trystan, A., Chekunova, O. Development of a modified UMAC Algorithm based on crypto-code constructions, Eastern-European Journal of Enterprise Technologies, 2020, № 4/9 (106), pp. 45 –63.
21. Havrylova, A., Tkachov, A., Shmatko, A. Development of a pseudo-random substrate for the UMAC algorithm on crypto-code constructions, Information Protection and information systems security 2021, november 11–12, 2021, Lviv, Ukraine: Materials of the VІII Intern. sci.-tech. conf., Lviv: Education of the Lviv Polytechnic, 2021, pp. 49 - 50. URL: https://drive.google.com/drive/folders/18xwh1 x6hp2ggE14Znhf4Cknl1164FRyi?usp=sharing.
22. Yevseiev, S., Milevskyi, S., Bortnik, L., Voropay, A., Bondarenko, K., and Pohasii, S.,“Socio-Cyber-Physical Systems Security Concept”, 2022 International Congress on Human-Computer Interaction, Optimization and Robotic Applications (HORA), 09-11 June 2022, Ankara, Turkey DOI: 10.1109/HORA55278.2022.9799957.
23. Laptiev, O., Tkachev, V., Maystrov, O., Krasikov, O., Open’ko, P., Khoroshko, V., Parkhuts, L. The method of spectral analysis of the determination of random digital signals. International Journal of Communication Networks and Information Security (IJCNIS). Vol 13, No 2, August 2021 Р.271-277. ISSN: 2073-607X (Online). DOI : 10.54039/ijcnis.v13i2.5008 https://www.ijcnis.org/index.php/ijcnis/article/view/5008 .
24. Kyrychok, R., Laptiev, O., Lisnevsky, R., Kozlovsky, V., Klobukov, V. Development of a method for checking vulnerabilities of a corporate network using bernstein transformations. Eastern-European journal of enterprise technologies. Vol.1№9 (115), 2022 Р. 93–101. ISSN (print)1729 - 3774. ISSN (on-line) 1729-4061. DOI: 10.15587/1729-4061.2022.253530.
25. Petrivskyi, V., Shevchenko, V., Yevseiev, S., Milov, O., Laptiev, O., Bychkov, O., Fedoriienko, V., Tkachenko, M., Kurchenko, O., Opirsky, I. Development of a modification of the method for constructing energy-efficient sensor networks using static and dynamic sensors. Eastern-European journal of enterprise technologies. Vol.1№9 (115), 2022 рр. 15–23. ISSN (print) 1729 - 3774. ISSN (on-line) 1729-4061. DOI: 10.15587/1729-4061.2022.252988.