Research on Storage Privacy via Black Box and Sanitizable Signature

IJSTE - International Journal of Science Technology & Engineering | Volume 3 | Issue 11 | May 2017 ISSN (online): 2349-784X

Research on Storage Privacy Via Black-Box and Sanitizable Signature Ruchika P Dungarani Student Department of Computer Engineering G.M.F.E, Himmatnagar

Ketan Patel Assistant Professor Department of Computer Engineering G.M.F.E, Himmatnagar

Rakesh Shah Assistant Professor Department of Computer Engineering G.M.F.E, Himmatnagar

Abstract Information security, also known as InfoSec, which is the application of protecting information from invalid access, use, declaration, confusion, changes, examination, or demolition. It is a general term that can be used anyhow the form the data may take (e.g. electronic, physical) Information security process is set of techniques to managing the processes and tools necessary to stop, notice, document and counter threats to digital and non-digital information.[28] Storage Privacy make resources available to authorized users only and unavailable to others. [14] Easily available to authorized people, institution and agencies.

To compromise the system difficult for a potential hacker. The network must be well founded and solid under a wide variety of surroundings conditions and volumes of usage. Without knowledge of internal working we give input and get output that system or device is known as BLACK-BOX. Implementation of black-box is “Fussy”. The designated portion of document is changed by sanitizer after agreement by signer. The sanitizer is valid if designated portion is only changed.[7] Sanitizable signature is used to sanitize(Modify) the portion of data which we do not want to share or we want to protect from others. The modification of sensitive information is performed by the sanitizer and this was not known by the signer or verifier. Today’s generation is become a digital. Every person using the mobile phones for any important Document Transformation also use the mobile or computer even for money transaction we use online banking for these all we strongly need storage privacy. We get better privacy

by SSS (Sanitizable signature) and black-box. In sanitizable Signature Authorized person can modify the authorized portion of Signature.

Keywords: Storage privacy, Black-box, Sanitizable signature, NetBeans ________________________________________________________________________________________________________ I.

INTRODUCTION

Storage privacy is basic need for security because today’s generation is become digital .Every person use internet for money transaction and other important document transformation. Sanitizable signature is used to modify the sensitive information of document by sanitizer and this was not known by the original signer.[5] Lot of information is shared through internet using different means now a day. From that information some information are sensitive and we cannot compromise with its security. Different techniques and algorithms we use to secure our data.[3] Sanitizable signature is important techniques which help to decide that information provider and provided information both are genuine. Black-box is very important concept for provide better security to storage. We also use sanitizable signature and redactable signature for storage privacy.[2] Redactable signature allow anyone to remove blocks from Document, without invalidating the signature. When we don’t want to share particular portion of document we just dark out that portion the same thing was done by using redactable signature.[6] Sanitizable signature is used to modify the sensitive information of document by sanitizer and this was not known by the original signer. In this paper for storage privacy we are going to use combine algorithm of redactable signature and sanitizable signature. In this algorithm we have to follow seven different steps like key generation, signature, sanitization, redactation, judge and verify. We have to use seven different algorithms for creating this algorithm. We are applying this algorithm in black-box for tighten security.

II. STORAGE PRIVACY “Authorized users and trusted networks can only use the available resources unauthorized person cannot use the resources” is the basic concept of storage privacy. We have to protect information against online threats such as Viruses, Worms, Trojans, and other malicious code. Effectiveness of storage security methodology can determine from two criteria.[10] 1) Implementing system cost should be a small fraction of value of protected data.[14]

All rights reserved by www.ijste.org

196

Research on Storage Privacy Via Black-Box and Sanitizable Signature (IJSTE/ Volume 3 / Issue 11 / 039)

2) It should cost a potential hacker more, in term of money and/or time, to compromise the system than the protected data is worth[14]

Fig. 2.1: Storage Privacy

III. BLACK-BOX In black-box We get output of given input without knowing its internal working. Implementation of code in black -box is “Blind�.[8] Ex:- human brain

Fig. 3.1: BLACK-BOX

IV. SANITIZABLE SIGNATURE Data sanitization is the process of change or modifies the data. In cryptosystem we use this concept for security purpose. We use sanitizable signature which allow a person to modify the original portion of the data without knowing to the original signer .[7] Who made these changes are known as sanitizer. The sanitizer can produce a valid signature if it modify the designated portion no other parts of message..[7] sanitizer have authority to modify the portion of signature.

Following problem can solve using sanitizable signature: We want a properly signed document by any authorized signer, without harming the original data behind, we need some portion of that signed document hidden or masked to protect some important information. Sanitizing process can be done without original signer to sign again. .[7] This concept is very useful in case signer is not available at a moment..[2]

All rights reserved by www.ijste.org

197

Research on Storage Privacy Via Black-Box and Sanitizable Signature (IJSTE/ Volume 3 / Issue 11 / 039)

Properties of sanitizable signature     

Unforgeability:- Says that no one except for the honest signer and sanitizer can create valid signature [3] Immutability:- sanitizer cannot change message parts which have not marked as modifiable by signer. [3] Privacy:- Secure sanitized message parts from outsider to recover that.

Transparency:- Clear the indistinguishaibility of signature created by sanitizer or signer. [3] Accountability:- By this the signer can prove that a particular signature is his not by the sanitizer.

The functions of genetic operators are as follows:-

Key Generation There are two key generation algorithms, one for the signer and one for the sanitizer. Both create a pair of keys, a private key and the public key.

Signing The Sign algorithm takes m = (m[1]; : : : ;m[`]),the signer's secret key sksig, the sanitizer's public key pksan, as well as a description adm of the admissibly modifiable blocks, where adm contains the number of blocks in m, as well the indices of the modifiable blocks. It outputs the message m and a signature Sign(1_; m; sksig; pksan; adm) Sanitizing Algorithm Sanit takes a message m = (m[1]; : : : ;m[`]), m[i] , the public key pksig of the signer and the secret key sksan o f the sanitizer. It modifies the message m according to the modification instruction mod, which contains pairs (i;m[i]0) for those blocks that shall be modified. Sanit calculates a new signature _0 for the modified message m0 mod (m). Then Sanit outputs m0 Sanit(1_; m;mod; _; pksig; sksan) Verification The Verify algorithm outputs a decision verifying the validity of a signature for a message m = (m[1]; : : : ;m[`]),m[i] with respect to the public keys.

V. MOTIVATION OF WORK The main motivation of this project is the space for research in this area is still vast. Emerged with the deliberate amount of work still in progress and signing data becomes the standard solution to allow integrity checks, e.g., for data stored on third-party storage servers in the cloud . Current provably secure. Solutions mostly focus on one out of two specific types of malleable signature schemes, i.e., either on RSSs or SSSs. [2]. At first sight, both approaches aim for the same goal, i.e., changing signed data. And we get better result by combining these algorithms.

VI. SCOPE Scope of this research work is,  Technique for storage privacy makes stored data very securely.  Combine approach of RSS and SSS give strong privacy to system.  Using black box we get tighten security.  Generate the set of multiple non-dominated solution- As Optimal High level prediction rules.

VII. LIMITATION OF EXISTING SYSTEM    

Use black-box in analysis of sanitizing.

In existing shabaz-groz algorithm we can further tuned in order to achieve an even larger performance.

In existing system black-box and Sanitizable signature are used. But black-box and Sanitizable signature are not used together.

They are tried to combine black-box and Sanitizable signature

All rights reserved by www.ijste.org

198

Research on Storage Privacy Via Black-Box and Sanitizable Signature (IJSTE/ Volume 3 / Issue 11 / 039)

VIII. PROPOSED FLOW CHART:

IX. INTRODUCTION TO PROPOSED ALGORITHM Propose algorithm generate new system for storage privacy. We use black-box and Sanitizable signature for storage privacy. • We use black-box for analysis of sanitization to give better privacy.

Notation:        

pKsig sKsig pKsan sKsag Kgensig Kgensan M’ Mod

Public Key For Signer Private Key For Signer Public Key For Sanitizer Private Key For Sanitizer Key Generation Algorithm For Signer Key Generation Algorithm For Sanitizer Modified Message Sig’ Modified Signature Contains Pairs For Those Blocks That Shall Be Modified.

All rights reserved by www.ijste.org

199

Research on Storage Privacy Via Black-Box and Sanitizable Signature (IJSTE/ Volume 3 / Issue 11 / 039)

Algorithm

X. PROPOSED METHODOLOGY NetBeans:  

We are going to use NetBeans platform for implementing the proposed algorithm.

NetBeans started as a student project in Czechoslovakia, in 1996. NetBeans is a software development platform written in Java. NetBeans primarily developed for java but also support other languages like PHP, C/C++ etc.

Latest Version:



NetBeans IDE 8.2 was released on October 3, 2016.

Last Version:

       

Net Beans IDE 6.5, released in November 2008 Net Beans IDE 6.9, released in June 2010 NetBeans IDE 7.0 was released in April 2011 NetBeans IDE 7.0.1 was released in August 1, 2011 NetBeans IDE 7.3 was released in February 2013 NetBeans IDE 7.4 was released on October 15, 2013.

NetBeans IDE 8.0 was released on March 18, 2014.

NetBeans IDE 8.1 was released on November 4, 2015.

XI. CONCLUSION

When we take Long input And Complex input then Execution time is also increased. When we apply changes in algorithm its known as black-box Because Black-box means apply or allow some changes in original data.

XII. FUTURE WORK We apply Sanitization Process on Proposed Algorithm. . We need to judge sanitized data to check the signature is made by sanitizer or signer. We need to verify that only the portion which needs to be changed and permitted to be changed, is changed and the That change was made by Sanitizer Only.

REFERENCES Papers: [1]

“Blackbox: 2014

Distributed

Peer-to-Peer File

Storage and

Backup” Payut Pantawongdecha,Isabella Tromba,Chelsea Voss,Gary Wang May 14,

All rights reserved by www.ijste.org

200

Research on Storage Privacy Via Black-Box and Sanitizable Signature (IJSTE/ Volume 3 / Issue 11 / 039) [2] [3] [4] [5] [6] [7]

[8] [9] [10] [11] [12] [13]

“Rethinking Privacy for Extended Sanitizable Xu, Anjia Yang, Jianying Zhou, and Duncan S. Wong [3] “A General Framework for Redactable Signatures and New Constructions” David Derler1z, Henrich C. P,ohls2;z;x, Kai Samelin3k, Daniel Slamanig1z “Efficient and Perfectly Unlinkable Sanitizable Signatures without Group Signatures” Christina Brzuska, Henrich ohls, Kai Samelin “Active Learning of Nondeterministic Finite State Machines” Warawoot Pacharoen, Toshiaki Aoki, Pattarasinee Bhattarakosol,and Athasit Surarerks “An Analysis of Black-Box Web Application Security Scanners against Stored SQL Injection” Nidal Khoury, Pavol Zavarsky, Dale Lindskog, Ron Ruhl “Sanitizable Signatures”Giuseppe Ateniese, Daniel H. Chou, Breno de Medeiros,and Gene Tsudik “Black Box Backup System”Iyad Aldasouqi & Arafat Awajan International Daniel Slamanig International Conference, CANS 2016, Milan, Italy, November 14-16, 2016. Proceedings, Sara Foresti and Giuseppe Persiano Eds., Springer Journal of Computer Science and Security (IJCSS), Volume (5) : Issue (3) : 2011 368 “A General Framework for Redactable Signatures and New Constructions” David Derler z, Henrich ohls, Kai Samelin, Daniel Slamanig “Research Design: Qualitative, Quantitative and Mixed Methods Approaches”, J. W. Cresswell, 2nd. Ed. California: Sage Publications, Inc. 2002.

“Secure Privacy Preserving Public Auditing for Cloud storage” International Journal of Innovative Research in Science, Engineering SpringerVerlag 1998.

“Using Invariant Detection Mechanism in Black Box Inference” Muzammil Shahbaz and Roland Groz “Cyber security, Innovation And The Internet Economy”The Department Of Commerce Internet Policy Task Force “Lightweight Delegatable Proofs of Storage” Jia Fortran” Carla Guillen, Leibniz Supercomputing Centre 19th March 2015.

Links [14] “BlackBox”,2014,Wikipedia,15July2016, <https://en.wikipedia.org/wiki/Black_box > [15] “8 Best Cloud Storage Providers For Corporate Privacy”, May 5, 2014, Hongkiat, viewed 20 Aug 2016 http://www.hongkiat.com /blog/8-best-cloudstorage-providers-for-corporate - data-privacy/ [16] “Eclipse”,2016,eclipse,viewed 9 October 2016 < https://eclipse.org/>[28]“Cryptography”, Wikipedia, viewed 22 July 2016 https://en.wikipedia.org/ wiki/ Key_(cryptography)

All rights reserved by www.ijste.org

201