Digital video surveillance systems are now common in the security infrastructure of modern times, but proprietary file systems provided by large manufacturers are a major challenge to the work of the forensic investigator. This paper proposes a forensic recovery methodology of Hikvision and Dahua surveillance systems by utilizing three major innovations: (1) adaptive temporal sequencing, which dynamically changes gap detection thresholds; (2) dual-signature validation with header–footer matching of DHFS frames; and (3) automatic manufacturer identification. The strategy puts into practice direct binary analysis of proprietary file systems, frame-based parsing and automatic video reconstruction. Testing on 27 surveillance hard drives showed a recovery rate of 91.8, a temporal accuracy of 96.7% and a false positive rate of 2.4%—the lowest of the tools tested with statistically significant improvements over commercial tools (p < 0.01). Better results with fragmented streams (87.2 vs. 82.4% with commercial tools) meet key forensic needs of determining valid evidence chronology. The open methodology offers the necessary algorithmic transparency to be court-admissible, and the automated MP4 conversion with metadata left intact makes the integration of forensic workflow possible. The study provides a scientifically validated approach to proprietary surveillance formats, which evidences technical innovativeness and practical usefulness to digital forensics investigations.
9 March 2019 in Scalable Computing: Practice and Experience
Software Defined Networking (SDN) is being extensively adopted by researchers and enterprise networks due to its feature of decoupling data and control planes from network device which enables them to implement new networking ideas. Communication between data and control planes faces various security issues where many users in data plane approach controller device in control plane to gain networking policies. In this paper, we proposed an efficient Zero-knowledge proof based identification scheme for securing SDN controller during data and control plane communication. This scheme ensures that only users who prove their knowledge about secrecy without revealing actual secret or any other information about it can communicate with controller. The computation cost was calculated to validate efficiency of the proposed work and compared with scheme that works in the basis of Kerberos authentication protocol.
Scalability is one of the Software Defined Network features that makes it more efficient than the traditional network. Due to this feature, a huge number of hosts connect to the network and require network rules and policies from the network controller. The huge number of connected hosts makes the network vulnerable to unauthorized access, which may cause network damage. In this paper, a secure hosts login technique is proposed to assure the authenticity of the hosts that need to access the network and use its resources. The proposed technique uses the key agreement protocol to allow the hosts and controller to establish secure communication. Then the procedure moves to the registration phase and login phase, which are responsible for creating and verifying the hosts' credentials while claiming network access. The secrecy and authenticity of the proposed technique was simulated, verified, and proved using AVISPA tool. The result of the simulation also proved the immunity of the proposed technique against MITM and replay attacks.