Intellectual property theft is a major concern for manufacturing cybersecurity. For example, cybercriminals may attempt to reverse engineer products by scanning and recreating them. Because 3D-printing files are digital, they are also of interest to cybercrime because they can be copied and shared (sold). Once the files are available, they cannot be protected again. Consequently, 3D-printing is used as a common industrial tool that also needs to be protected to reduce the likelihood of IP-addresses and data loss. One of the cyber defence methods for 3D-printing is authentication and security protocols. Therefore, the purpose of this paper is to conduct a study of ways to improve the crypto-resistance of message authentication codes through which the operation of a 3D-printer is accessed. According to the results of the calculations it was found out that in conditions of post-quantum cryptography taking into account the use of crypto-code constructions based on classical elliptic codes as hash-codes, the necessary level of their cryptostability is not provided. As a result, it is recommended to form hash-codes by means of applying modification (shortening/lengthening) to already known elliptic codes, and under more severe conditions the level of crypto-resistance of authentication codes can be increased by using hybrid crypto-code constructions on damaged codes. Transmission of requests is proposed to be performed using an enhanced SSL/TLS protocol by using a modified UMAC-CCC algorithm. The proposed method in practice will eliminate possible vulnerabilities and provide the necessary level of security for access to the 3D-printing device.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Development of an Advanced SSL/TLS Protocol for Transferring Requests to a 3D-Printer

  • Alla Havrylova,
  • Vladyslav Khvostenko,
  • Stanislav Milevskyi

摘要

Intellectual property theft is a major concern for manufacturing cybersecurity. For example, cybercriminals may attempt to reverse engineer products by scanning and recreating them. Because 3D-printing files are digital, they are also of interest to cybercrime because they can be copied and shared (sold). Once the files are available, they cannot be protected again. Consequently, 3D-printing is used as a common industrial tool that also needs to be protected to reduce the likelihood of IP-addresses and data loss. One of the cyber defence methods for 3D-printing is authentication and security protocols. Therefore, the purpose of this paper is to conduct a study of ways to improve the crypto-resistance of message authentication codes through which the operation of a 3D-printer is accessed. According to the results of the calculations it was found out that in conditions of post-quantum cryptography taking into account the use of crypto-code constructions based on classical elliptic codes as hash-codes, the necessary level of their cryptostability is not provided. As a result, it is recommended to form hash-codes by means of applying modification (shortening/lengthening) to already known elliptic codes, and under more severe conditions the level of crypto-resistance of authentication codes can be increased by using hybrid crypto-code constructions on damaged codes. Transmission of requests is proposed to be performed using an enhanced SSL/TLS protocol by using a modified UMAC-CCC algorithm. The proposed method in practice will eliminate possible vulnerabilities and provide the necessary level of security for access to the 3D-printing device.