论文标题

Demis:一种选择性加密的视觉监视数据的威胁模型

DEMIS: A Threat Model for Selectively Encrypted Visual Surveillance Data

论文作者

Aribilola, Ifeoluwapo, Asghar, Mamoona Naveed, Lee, Brian

论文摘要

由于许多设备中集成相机的便利性,近年来对个体/对象的监视变得越来越可能。由于这些设备捕获的人们的重要时刻或活动,这使攻击者通过利用这些设备的弱点发动攻击成为一项巨大的资产。不同的研究提出了捕获的视觉数据的幼稚/选择性加密以确保安全,但是尽管加密,攻击者仍然可以访问或操纵此类数据。本文提出了一种新颖的威胁模型,Demis有助于分析针对此类加密视频的威胁。本文还研究了可用于威胁和减少攻击的攻击向量。对于实验,首先,通过使用图像分割技术和CHACHA20密码在测试视频的利益区域(ROI)上应用选择性加密来生成数据集。其次,在实验中模拟了不同类型的攻击,例如逆,小写,大写,随机插入和锻造性攻击,以显示攻击的影响,风险矩阵以及这些攻击的严重性。我们开发的数据集,具有原始的,选择性的加密和攻击视频,可在Git-Repository(https://github.com/ifeoluwapoo/video-datasets)上提供,可用于未来的研究人员。

The monitoring of individuals/objects has become increasingly possible in recent years due to the convenience of integrated cameras in many devices. Due to the important moments or activities of people captured by these devices, it has made it a great asset for attackers to launch attacks against by exploiting the weaknesses in these devices. Different studies proposed naïve/selective encryption of the captured visual data for safety but despite the encryption, an attacker can still access or manipulate such data. This paper proposed a novel threat model, DEMIS which helps analyse the threats against such encrypted videos. The paper also examines the attack vectors that can be used for threats and the mitigation that will reduce or prevent the attack. For experiments, firstly the data set is generated by applying selective encryption on the Regions-of-interests (ROI) of the tested videos using the image segmentation technique and Chacha20 cipher. Secondly, different types of attacks, such as inverse, lowercase, uppercase, random insertion, and malleability attacks were simulated in experiments to show the effects of the attacks, the risk matrix, and the severity of these attacks. Our developed data set with the original, selective encrypted, and attacked videos are available on git-repository(https://github.com/Ifeoluwapoo/video-datasets) for future researchers.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源