An official website of the United States government
We study the problem of encrypting and authenticating quantum data in the presence of adversaries making adaptive chosen plaintext and chosen ciphertext queries. Classically, security games use string copying and comparison to detect adversarial cheating in such scenarios. Quantumly, this approach would violate no-cloning. We develop new techniques to overcome this problem: we use entanglement to detect cheating, and rely on recent results for characterizing quantum encryption schemes. We give definitions for (i) ciphertext unforgeability, (ii) indistinguishability under adaptive chosen-ciphertext attack, and (iii) authenticated encryption. The restriction of each definition to the classical setting is at least as strong as the corresponding classical notion: (i) implies INT-CTXT , (ii) implies IND-CCA2 , and (iii) implies AE . All of our new notions also imply QIND-CPA privacy. Combining one-time authentication and classical pseudorandomness, we construct symmetric-key quantum encryption schemes for each of these new security notions, and provide several separation examples. Along the way, we also give a new definition of one-time quantum authentication which, unlike all previous approaches, authenticates ciphertexts rather than plaintexts.
more »
« less
Rule-Based Hybrid Adaptive Encryption Model for Autonomous Flight to Secure UAS Data Streams in Real-Time
Given the increasing reliance on UAS in sensitive applications, ensuring the confidentiality, integrity, and availability of their data streams is paramount. Traditional encryption methods often fail to balance performance and security under real-time constraints. This paper addresses this gap by proposing a hybrid adaptive encryption framework that integrates rule-based (RL) logic and machine learning (ML) to dynamically adjust encryption protocols based on data sensitivity, bandwidth, and CPU load. The experimental results demonstrate improved responsiveness and security under varied conditions using real-time simulations. The effectiveness of the system is benchmarked through execution time analysis, classification accuracy, and adaptive decision precision, highlighting its potential for secure and efficient UAS communications.
more »
« less
- Award ID(s):
- 2142514
- PAR ID:
- 10636646
- Publisher / Repository:
- IEEE
- Date Published:
- ISBN:
- 979-8-3503-9292-0
- Page Range / eLocation ID:
- 333 to 340
- Subject(s) / Keyword(s):
- adaptive encryption, data streams, cryptography, threat intelligence, autonomous systems, system resources, environmental factors
- Format(s):
- Medium: X
- Location:
- Tampa, FL, USA
- Sponsoring Org:
- National Science Foundation
More Like this
-
-
Scientific data streaming enables the real-time transfer, processing, and analysis of high-throughput experimental data, providing low- latency insights that are essential for adaptive experiment control. We present SciStream-as-a-Service (StreamHub), a secure, high- performance, and scalable framework that integrates Globus Com- pute with SciStream to deliver continuous memory-to-memory data transfer, in-transit processing, and robust zero-trust security while orchestrating the entire streaming setup across distributed facilities with only approximately 4.3 s overhead. We describe StreamHub’s design, core components, and deployment model, and evaluate its performance under diverse configurations. Our results demonstrate that StreamHub can be deployed without privileged access, ensures end-to-end encryption and authentication across institutions, and achieves near line-rate throughput with under 2% overhead com- pared to unencrypted transfers, making it a practical solution for real-time scientific discovery and experiment steering.more » « less
-
Cloud-based control is prevalent in many modern control applications. Such applications require security for the sake of data secrecy and system safety. The presented research proposes an encrypted adaptive control framework that can be secured for cloud computing with encryption and without issues caused by encryption overflow and large execution delays. This objective is accomplished by implementing a somewhat homomorphic encryption (SHE) scheme on a modified model reference adaptive controller with accompanying encryption parameter tuning rules. Additionally, this paper proposes a virtual false data injection attack (FDIA) trap based on the SHE scheme. The trap guarantees a probability of attack detection by the adjustment of encryption parameters, thus protecting the system from malicious third parties. The formulated algorithm is then simulated, verifying that after tuning encryption parameters, the encrypted controller produces desired plant outputs while guaranteeing detection or compensation of FDIAs. With the utilization of this novel control framework, adaptively controlled systems will maintain data confidentiality and integrity against malicious adversaries.more » « less
-
The security of Unmanned Aerial System (UAS) networks is becoming crucial as their number and application in several fields are increasing every day. For navigation and positioning, the Global Navigation System (GPS) is essential as it provides an accurate location for the UAS. However, since the civilian GPS signals are open and unencrypted, attackers target them in different ways such as spoofing attacks. To address this security concern, we propose a comparison of several tree-based machine learning models, namely Random Forest, Gradient Boost, XGBoost, and LightGBM, to detect GPS spoofing attacks. In this work, the dataset was built of real GPS signals that were collected using a Software Defined Radio unit and different types of simulated GPS spoofing attacks. The results show that XGBoost has the best accuracy (95.52%) and fastest detection time (2ms), which makes this model appropriate for UAS applications.more » « less
-
We give an attribute-based encryption system for Turing Machines that is provably secure assuming only the existence of identity-based encryption (IBE) for large identity spaces. Currently, IBE is known to be realizable from most mainstream number theoretic assumptions that imply public key cryptography including factoring, the search Diffie-Hellman assumption, and the Learning with Errors assumption. Our core construction provides security against an attacker that makes a single key query for a machine before declaring a challenge string that is associated with the challenge ciphertext. We build our construction by leveraging a Garbled RAM construction of Gentry, Halevi, Raykova, and Wichs; however, to prove security we need to introduce a new notion of security called iterated simulation security. We then show how to transform our core construction into one that is secure for an a-priori bounded number of key queries that can occur either before or after the challenge ciphertext. We do this by first showing how one can use a special type of non-committing encryption to transform a system that is secure only if a single key is chosen before the challenge ciphertext is declared into one where the single key can be requested either before or after the challenge ciphertext. We give a simple construction of this non-committing encryption from public key encryption in the Random Oracle Model. Next, one can apply standard combinatorial techniques to lift from single-key adaptive security to -key adaptive security.more » « less
- Free Publicly Accessible Full Text
-
Accepted Manuscript
- Conference Paper:
- https://doi.org/10.1109/ICSC65596.2025.11140563
