This research aims to establish a secure system for key exchange by using post-quantum cryptography (PQC) schemes in the classic channel of quantum key distribution (QKD). Modern cryptography faces significant threats from quantum computers, which can solve classical problems rapidly. PQC schemes address critical security challenges in QKD, particularly in authentication and encryption, to ensure the reliable communication across quantum and classical channels. The other objective of this study is to balance security and communication speed among various PQC algorithms in different security levels, specifically CRYSTALS-Kyber, CRYSTALS-Dilithium, and Falcon, which are finalists in the National Institute of Standards and Technology (NIST) Post-Quantum Cryptography Standardization project. The quantum channel of QKD is simulated with Qiskit, which is a comprehensive and well-supported tool in the field of quantum computing. By providing a detailed analysis of the performance of these three algorithms with Rivest–Shamir–Adleman (RSA), the results will guide companies and organizations in selecting an optimal combination for their QKD systems to achieve a reliable balance between efficiency and security. Our findings demonstrate that the implemented PQC schemes effectively address security challenges posed by quantum computers, while keeping the the performance similar to RSA.
Penetration testers have increasingly adopted multiple penetration testing scanners to ensure the robustness of web applications. However, a notable limitation of many scanning techniques is their susceptibility to producing false positives. This paper presents a novel framework designed to automate the operation of multiple Web Application Vulnerability Scanners (WAVS) within a single platform. The framework generates a combined vulnerabilities report using two algorithms: an automation algorithm and a novel combination algorithm that produces comprehensive lists of detected vulnerabilities. The framework leverages the capabilities of two web vulnerability scanners, Arachni and OWASP ZAP. The study begins with an extensive review of the existing scientific literature, focusing on open-source WAVS and exploring the OWASP 2021 guidelines. Following this, the framework development phase addresses the challenge of varying results obtained from different WAVS. This framework’s core objective is to combine the results of multiple WAVS into a consolidated vulnerability report, ultimately improving detection rates and overall security. The study demonstrates that the combined outcomes produced by the proposed framework exhibit greater accuracy compared to individual scanning results obtained from Arachni and OWASP ZAP. In summary, the study reveals that the Union List outperforms individual scanners, particularly regarding recall and F-measure. Consequently, adopting multiple vulnerability scanners is recommended as an effective strategy to bolster vulnerability detection in web applications.
Network packet sniffing is one of the techniques that is widely used in the network and cyber security fields. However, sniffing can also be used as a malicious technique that allows threat actors to intercept and capture data flow to collect various information within the victim network. Where the wireless network environment can be vulnerable to sniffing vulnerabilities attacks due to the broadcasting function of Wi-Fi network. Wi-Fi access point devices can often be compromised, and critical information is leaked through sniffing attacks. Moreover, since sniffing is usually one of passive attacks, it is very challenging to detect sniffing activity in the network completely. The primary aim of this research is to contribute to enhancing the security of Internet of Things (IoT) home Wi-Fi systems. This is achieved by applying ensemble machine learning technology with sniffing detection methods using a Network Monitoring System (NMS) to effectively identify and mitigate potential sniffing behaviour within the IoT home Wi-Fi environment. Ultimately, this research will prove whether it is possible to precisely detect abnormal sniffing in a smart home Wi-Fi environment using machine learning techniques.
Idle speed control is a crucial aspect of energy-efficient and sustainable engine performance, and various methods have been developed to address this problem. This study investigates the performance of two idle speed-controlling approaches based on conventional proportional-integral-derivative (PID) and fuzzy logic controllers. A four-cylinder engine has been modelled using the Record Wave package based on the Honda Civic engine specifications. The engine performance characteristics have been used to design the PID controller for various parameters and the fuzzy logic controller with three different membership functions with the objective of regulating the idle speed at 800 RPM while considering disturbances. The study finds that both the PID and fuzzy logic controllers effectively achieve the control objective. However, the fuzzy logic controller outperforms the PID controller in terms of a transient response, providing a smoother and more stable idle speed control with less overshoot and settling time. The study also highlights that the choice of control method is dependent on the specific application and system requirements, with PID controllers being suitable for simpler systems and fuzzy logic controllers being more appropriate for complex or uncertain systems.