Reviewerly/exHarmony huggingface dataset:
cPSIR: Circuit-Based Private Stateful Information Retrieval for Private Media Consumption

Private information retrieval (PIR) is a fundamental cryptographic primitive to protect client privacy. Preprocessing techniques are extensively employed for PIR schemes to minimize online computation. A single-server PIR with preprocessing, namely PSIR, has sublinear computation complexity and prevents collusion attacks in multi-server schemes. Unfortunately, functional limitations exists in state-of-the-art PSIR schemes for real-world applications, such as private media consumption. Our work cPSIR extends the recent PSIR framework to provide two application features of private media consumption: keyword search and variable-sized file retrieval, for the identifier and payload of database entries, respectively. In cPSIR, a binary search tree structure is utilised to implement mapping from keyword to index and incremental database update. And a logic circuit is designed to characterize file retrieval procedure with current homomorphic schemes BFV and TFHE, considering various database properties. The BFV-based solution outperforms on the computation of a given circuit, without bootstrapping, and has small ciphertext expansion. And the TFHE-based solution is more flexible due to the design of logic gates, while has great potential to improve in bootstrapping with hardware backends. We finally apply cPSIR to private audio consumption with low startup delay (less than 1 s) and high playback rate (320 kbps).
POSTER: PriAuct: Privacy Preserving Auction Mechanism

Most of the emerging services and workflows use infrastructure across multiple organizations. This work proposes a privacy-preserving auction mechanism to facilitate cost efficiencies while minimizing the exposure of operational aspects like QoS parameters. It leverages homomorphic encryption using bilinear pairing, to improve bids privacy. Only the winning bid is publicly disclosed. The mechanism provides public auditability and collusion resistance. Measurements of performance overheads, through simulation in various scenarios, are discussed. Basic security proof is also provided.
WiP: Towards Zero Trust Authentication in Critical Industrial Infrastructures with PRISM

With the increasing threat of cyber attacks on critical infrastructures, the need for robust security measures has become more pressing. In response, decentralized secure computation has gained traction as an effective approach to minimizing the risks associated with such threats. We introduce this computation into the decentralized registration and authentication applications, and present the PRISM scheme. To ensure the security of the registration phase, the threshold secret sharing (TSS) technique is used to protect the credential against single-point failures. The threshold oblivious pseudorandom function (TOPRF) technique further enhance the security of PRISM scheme in the password-based authentication phase, by allowing the user to reconstruct the authentication messages from any subset of t parties and pass the verification. This study is a work in progress, and we are currently analyzing the detailed scheme and its security to better understand the practicality of our PRISM scheme. The theoretical security analysis demonstrates that our PRISM scheme achieves the properties of privacy preservation, unpredictability, and obliviousness. Experimental evaluation of the performance and practicability of our scheme will be presented in the full version.
Preventing Content Cloning in NFT Collections

The concept of Non-Fungible Token (NFT) has found many applications with great impact. One of the most appealing uses of NFTs is the possibility of creating and managing an NFT collection where each token regulates the ownership of a digital asset and new tokens can be minted according to some rules. In this work, we investigate the natural question of whether a digital asset could be duplicated inside a collection of NFTs. Interestingly, while intuitively uniqueness should be enforced by the use of NFTs, we observe that the existence of clones is possible according to the mainstream approaches of Ethereum (i.e., ERC-721 contracts) and Algorand (i.e., ASAs). Moreover, we have scrutinized famous NFT collections that have been built on such decentralized platforms and our findings show that, unfortunately, the uniqueness of a digital asset in a collection (e.g., the guarantee that at most one NFT is generated for the ownership of a specific digital painting) is at risk if the minter (i.e., a single point of failure) is at some point corrupted. Next, we propose a natural and simple functionality $$\mathcal {F}_{CollNFT}$$ abstracting the management of NFT collections that, by design, does not allow clones in a collection. While in general, ERC-721 and ASAs do not securely realize $$\mathcal {F}_{CollNFT}$$ , we discuss the design of an NFT collection that is compliant with the ERC-721 standard and at the same time realizes $$\mathcal {F}_{CollNFT}$$ , therefore, guaranteeing by design that even a malicious minter can not introduce clones in the collection.
POSTER: Integrating Quantum Key Distribution into Hybrid Quantum-Classical Networks

In this work, we outline our recent developments of building experimental Quantum Key Distribution (QKD) network. The main focus is on the integration of QKD technologies into classical communication networks and assessing and exploiting the possibilities of how quantum technologies can complement existing cryptographic solutions. In particular: 1) we outline the conceptual architecture of the hybrid network developed by gradually adding individual QKD links to it; 2) describe a new protocol for delivering QKD-generated keys as a service; 3) describe the requirements for key management and user authentication in such hybrid networks and how these can be solved with the available technologies. The developed protocol establishing QKD-keyed TLS connection uses Post Quantum Cryptography (PQC) algorithms for the secure delivery of QKD keys. It demonstrates how the strengths of QKD and PQC technologies can complement one another.
Hide and Seek: Using Occlusion Techniques for Side-Channel Leakage Attribution in CNNs

Deep learning-based side-channel analysis has gained popularity due to its relaxed feature engineering effort in contrast to classical profiled side-channel analysis approaches. This however comes at the cost of a reduced explainability of attack results. In this work we propose occlusion techniques for neural network attribution that allow the identification of points-of-interest related to side-channel leakage used by the networks to defeat masking countermeasures. We evaluate results for both ASCAD databases and are able to identify occlusion parameters that are suitable in the side-channel context. We reason that due to side-channel measurement characteristics multiple adjacent samples have to be occluded at once, which has not been considered in related work. In addition, with our higher-order occlusion we are able to identify leakage combinations that are exploited by a network in order to mount a higher-order attack. Using our methods we are able to show that networks actually utilize varying leakage characteristics observable for different key bytes of the ASCAD databases. This work shows that occlusion is a viable addition to established gradient-based attribution methods.
Validation of Augmented Reality Prototype for Aspects of Cultural Learning for BIPA Students

The purpose of this study is to summarise the findings from the validation of an augmented reality prototype for BIPA learning’s cultural components. An R&D design was used for this research. The section on product validation, which is an important step in the research and development process, will be the main focus in this instance, though. To determine the calibre of the prototype or product under development, validation is important. An examination of BIPA level 1’s cultural components and AR content is done as part of the validation process. From the devices created during design until the augmented reality software product is attained, validation of the initial product is done in an integrated way. This validation prototype was carried out by two experts, namely technology experts and BIPA learning experts using content validity evaluation (technology content and BIPA materials). The results of the validation data will be processed using SPSS. Based on expert validation, it shows that the Augmented Reality prototype is considered valid, practical, and can be used in learning BIPA Cultural Aspects at Level 1.
Generic Constructions of Server-Aided Revocable ABE with Verifiable Transformation

Attribute-based encryption (ABE) is a promising approach in cloud computing services to enable scalable access control on encrypted data. Server-aided revocable attribute-based encryption (SR-ABE) was proposed to realize user revocation and optimize the workloads of data users in ABE. In this paper, we revisit the notion of SR-ABE and present a generic construction of verifiable SR-ABE, which can not only transform a revocable attribute-based encryption (RABE) scheme into an SR-ABE scheme but also provide verifiability to check whether the server behaves as expected. We additionally give an instantiation of verifiable SR-ABE by applying the generic construction on a concrete revocable ABE scheme, and evaluate the performance of the instantiation in terms of functionality, storage overhead, computational cost, and security.
Exploring Cyber Security Challenges of Multi-cloud Environments in the Public Sector

As the Public sector has begun to mature in the adoption of Cloud technology, the sector itself faces challenges in bringing together the disparate use of several different public cloud offerings across their individual organisations and reconciling the security challenges of people and technology to meet compliance and effectiveness. The aim of this research is to provide an overview of some of the challenges of cyber security across culture and technology in multi-cloud environments. Through a review of current research, industry papers and government frameworks this paper provides a comparative analysis that has been developed resulting in key areas for future research. This review found that in the people domain, the lack of availability of subject matter expertise to implement security education is a factor for the success of security in organisations as well as security awareness training and informed situational awareness. For Technology, it was highlighted that data accountability and integrity is a significant challenge in multi-cloud with limitations being restricted to the tier 1 Cloud Service Providers and a need for consistent benchmarking or framework across private industry and public sector alike. The results of this have assisted with articulating emphasised areas for improvement and further research for cyber security culture frameworks and benchmarking for confidentiality, integrity, and availability of public cloud.
Analysis and Design of Information System E-Check Sheet

Abstract Quality control is a system designed to maintain the intended level of product or service quality. PT. XYZ used the check sheet to help the quality control management process is currently still manual, and in the future, the company wants to replace the manual process with a digital check sheet. The design is carried out using the System Development Life Cycle (SDLC) method with prototyping model until the design stage. The analysis is carried out on ongoing business processes. The analysis results are contained in an information system design in the form of an E-Check Sheet which can be used as a future solution. E-Check Sheet is expected to facilitate the distribution of check sheets, a standard formatting, eliminate inconsistencies in filling out check sheets, and carry out checks and approvals.
The Illicit Use of Cryptocurrency on the Darknet by Cyber Criminals to Evade Authorities

Due to the anonymity of cryptocurrencies combined with enhanced privacy, criminals have been able to migrate their markets to the darknet. Thus, cryptocurrencies have altered the power balance between criminals, law enforcement, and regulators. Due to a lack of technical knowledge and resources, it is challenging for law enforcement to find, arrest, and effectively prosecute a darknet market vendor who trades from the other side of the world by anonymizing hops in multiple jurisdictions. Regulators are struggling to govern and develop guidelines meant to regulate cryptocurrency. To avoid being tracked by law enforcement, criminals turn to more private cryptocurrencies like Monero and Zcash. These cryptocurrencies use total anonymity and untraceable transactions, making them ideal darknet currencies. In the research of journal articles, various limitations such as investigators cannot access any off-chain transaction data, are identified and highlighted. Furthermore, criminals have identified many channels that can hide them from law enforcement and regulators. It is difficult to stop cryptocurrencies, and criminals will continue to improve their technology in order to adapt to the evolving privacy-enhanced cryptocurrencies. Taking full advantage of their anonymity and obfuscation features and being smart about choosing and using exchanges to clean up their dirty coins. This review adds to current knowledge by bringing together all stages of cryptocurrency crime to better understand the role of privacy-enhanced cryptocurrencies in illicit activities.
Hexapod Robot with Indoor Path Planning Using ROS Navigation Stack on a Static Map

The design of this robotic system is intended to develop a six-legged robot to navigate in an indoor environment relying on the LIDAR sensor using ROS (ROS Navigation Stack) platform. So that the results of this research can be developed to carry out more complicated space exploration missions. The design of the robot system is carried out with various adjustments to the two main system parts, namely the robot mobility system which is supported by the Inverse Kinematics algorithm from Phoenix Code, and the navigation capabilities supported by the wheeled robot navigation system programs integrated in the ROS. This research analysis focuses on the accuracy of the robot in navigating, namely the accuracy of the coordinates of the actual navigation results compared to the coordinates of the navigation target set and the accuracy of the robot performing rotational movement. Overall, the robot manages to complete the navigation mission in 2 min 27 s in the KRSRI 2021 arena with 10 successes out of 10 tries. The navigation accuracy of the system has a value of 76.08% on the x-axis and 75.54% on the y-axis based on the target coordinate inputted to the system. The robot uses a maximum linear velocity speed of 0.12 m/s and 0.44 rad/s that works for well with the kinematics algorithm and the frame for navigating in the arena.
Analysis of Request for Quotation (RFQ) with Rejected Status Use K-Modes and Ward’s Clustering Methods. A Case Study of B2B E-Commerce Indotrading.Com

In the current situation, PT. Innovation Success Sentosa with its B2B e-commerce platform, Indotrading.com, has a critical problem with the RFQ transaction process. Nearly 25% of all RFQs are rejected which results in the transaction being terminated, thereby losing potential profits. The purpose of this study is to find out, analyze and classify the characteristics of all rejected RFQs to find ways to overcome them. The analysis was carried out using the concept of data mining, using 3 algorithms, namely k-modes, average-linkage and ward’s clustering, which were applied to 7029 data objects in the rejected RFQ, during the period October to December 2021. To validate the result, we use the silhouette coefficient index. The clustering method that has the most optimal results, based on accuracy and consistency is the Hierarchical Ward's clustering method, with a value closest to 1, which is 0.664. Therefore, to solving the rejected RFQ, Ward’s algorithm is used as a reference. The clustering results show that the dominant RFQ was rejected, caused by sellers, with the reason ‘Stock not available now’ and dominant in the product categories ‘Electrical and Electronic supplies’ and ‘Construction and Property supplies’.
Assessing Organisational Incident Response Readiness in Cloud Environments

Organisations across the world are adopting cloud-based technologies due to several benefits including efficiency, agility, and cost effectiveness. These same organisations are also facing an increasing number of cyber threats from threat actors across the globe. The difficulty faced by these organisations is ensuring their cloud-based technology environments are sufficiently protected prior to an incident, and that incident responders can rapidly identify, preserve, acquire, and analyse that data to support digital forensic investigations. As a result, organisations find themselves unable to effectively respond to cyber security incidents in cloud environments leading to loss of data, ineffective processes, and increases the risk of inadmissibility of evidence in court proceedings. An organisation’s incident response readiness is often limited by their inability to assess their response maturity due to a lack of incident response maturity frameworks. This review aims to provide an overview of commonly used frameworks within existing incident response and digital forensics processes by reviewing existing industry standard frameworks, assessing their efficacy, and identifying room for improvement by suggesting an incident response readiness assessment and maturity model. This model could be considered by organisations aiming to identify deficiencies within current processes, procedures, or considerations, and improve upon them to roadmap cloud cyber resilience.
Malang Historical Monument in HIMO Application with Augmented Reality Technology

History is a legacy found in every country, including Indonesia. In Indonesia, various kinds of historical heritage have values of the struggle of the Indonesian people. But unfortunately, the young generation today does not know and understand the historical values in Indonesia. If this is not handled immediately, the Indonesian people will not appreciate the hard work of the struggles of previous Indonesian heroes. One of the historical relics in Indonesia is the Hero Monument which is located in Malang City. But unfortunately, many young people are not familiar with this monument. For this reason, by using current technological developments, a 3D application is made that allows the younger generation to see and experience the Hero Monument in Malang City virtually. In this way, each young generation is limited to Malang City and from the provinces to the whole of Indonesia can recognize and understand the historical values that exist. Unity, Vuforia, and Blender technologies are used to develop applications. In addition, this application also ensures that it makes it easy for every user to use it to scan and display the monument virtually. With this application, it is hoped that the younger generation will be increasingly interested in understanding and understanding the historical values that exist in Indonesia. “A great nation is a nation that respects the services of its heroes” this is our guideline in developing the Himo application.
Block Chain Technology and Internet of Thing Model on Land Transportation to Reduce Traffic Jam in Big Cities

Traffic congestion in big cities is a difficult problem to solve. The large volume of vehicles that pass the same road at the same time is a major problem in addition to other problems that add to the complexity of congestion in big cities. Block chain technology is a technology that offers transactions with high transparency where every node connected in the block chain network can monitor each other for all transactions that occur. In the context of the research being built, every vehicle that passes a certain road will become a node in the block chain network so that each node will know the path of other nodes and can look for alternative roads to avoid traffic jams. The aim of this research is to build a block chain adoption model for land transportation to reduce congestion. This study use uses observation and literature review to identify problems and find alternative solutions. The result of this research is the adoption of Internet of Thing and block chain technology to reduce traffic congestion in big cities.
Bee AR Teacher Framework: Build Augmented Reality Independently in Education

COVID-19 pandemic makes home-based learning a common thing and has been implemented all over the world. Learning through Augmented Reality (AR) technology can help students understand learning materials in a more creative way than the traditional way. AR can make learning fun, memorable, and interactive. Developing AR software is a hard task, usually made by order (custom made), requires a technical person to develop it, and costs a lot of money. This tends to be a problem and the implementation of AR in the world especially in education field becomes quite challenging. To solve this problem, researchers propose a Bee AR Teacher framework to let developer create the AR system. Bee AR Teacher provides the contribution in AR framework, and it consists of three components: technologies, operations, and human resources. If developer can develop the AR system successfully, teachers may use the system and can independently build AR solutions that can support teaching and learning activities without the need for technical knowledge. One of the special features of AR solution is the teachers can share or navigate material from their devices and students can see the material (virtual object) directly on their smartphones and can interactively manipulate it with their fingers.
A General Overview of The Internet of Things and Its Future Applications

With the great acceleration in the world of digital technology and communications, the globe has turned into a virtual world connected, A new term has appeared, namely the Internet of Things, which refers to a kind of network to connects anything to the Internet based on the protocols prescribed Sensors conduct information exchange and communication to realize intelligent identification, Positioning, Tracking, Monitoring, and management. In this paper, we briefly discussed what the Internet of Things is, its applications, characteristics, and structure.