Existing privacy-preserving multi-keyword retrieval schemes often suffer from reduced retrieval efficiency, lack robust verification mechanisms in dynamic environments, and are prone to symmetric key leakage issues. To address these shortcomings, we propose a dynamic and secure multi-keyword search scheme with a two-factor verification mechanism, named Mimi. Specifically, Mimi first constructs a dynamic verification tree structure to accelerate the verification of the correctness of returned results. Second, it builds an encrypted searchable index that supports sub-linear search time complexity. Third, Mimi incorporates a secure symmetric key exchange protocol to protect the confidentiality of the symmetric key. Furthermore, Mimi supports multi-user search operations without increasing the index construction costs and accommodates dynamic updates to both user roles and data. Through comprehensive security analysis, we demonstrate that Mimi ensures the security of the encrypted searchable inverted index and maintains query indistinguishability for users. Empirical evaluations show that the Mimi scheme is efficient and effective.

Existing CNN inference frameworks based on FHE often suffer from reduced efficiency and accuracy due to the polynomial approximation of activation functions, and they lack effective mechanisms to prevent sensitive information leakage during the final classification stage. To address these limitations, we propose FSAT, a fast and secure inference framework enhanced with adversarial training. Specifically, FSAT employs a private CNN model architecture, where linear layers are computed through an optimized homomorphic ciphertext convolution operation, while non-linear layer operations are efficiently realized using a secure searchable index and an encrypted look-up table, which replace polynomial activation approximations and significantly improve inference accuracy and latency performance. To further mitigate information leakage, we introduce a dual-constraint adversarial training scheme that makes it substantially more difficult for an adversary to infer sensitive attributes of the input data. Experimental results demonstrate that FSAT achieves high inference accuracy and efficiency while substantially reducing the risk of sensitive data leakage.

The increasing privacy concerns associated with cloud-assisted image retrieval have captured the attention of researchers. However, a significant number of current research endeavors encounter limitations, including suboptimal accuracy, inefficient retrieval, and a lack of effective result verification mechanisms. To address these limitations, we propose an adaptive verifiable privacy-preserving medical image retrieval (AVPMIR) scheme in the outsourced cloud. Specifically, we utilize the convolutional neural network (CNN) ResNet50 model to extract the feature of each medical image within the dataset of the medical institution, aiming to enhance retrieval accuracy. To enhance retrieval efficiency, we build an encryption searchable index based on a mini-batch$k$-means clustering algorithm. Furthermore, we present an index merging method in which multi-data owners build a different index tree according to different standards. To check the correctness of the returned results from the cloud server, we construct an adaptive verification framework for the obtained results based on chameleon hash and BLS signature. To provide strong security for the medical image datasets, we design an improved logistic chaotic mapping algorithm. The security analysis demonstrates that AVPMIR can defend various threat models. The experiment analysis further indicates that the AVPMIR can improve retrieval efficiency and demonstrate its practicability.

Penetration testing, a crucial industrial practice for securing networked systems and infrastructures, has traditionally depended on the extensive expertise of human professionals. Addressing the scarcity of human experts, the development of automated penetration testing tools emerges as a promising avenue. Against the backdrop of rapid advancements in artificial intelligence technologies, reinforcement learning has demonstrated considerable potential for realizing automated penetration testing. However, existing research predominantly concentrates on reinforcement learning-based automated penetration testing tools within static scenarios, with limited exploration in dynamic network environments. This paper addresses a noteworthy challenge in developing autonomous agents for real-world applications, particularly focusing on scenarios marked by environmental changes. Such alterations necessitate autonomous agents to continuously monitor environmental characteristics, and adapt, and adjust learned actions to ensure the system’s effective operation. Consequently, the paper proposes an automated reinforcement learning-based penetration testing scheme tailored for dynamic network scenarios, named DynPen. DynPen captures observed changes in the scenario, aiding the penetration testing agent in decision-making based on historical experiences. Simulation results demonstrate the proposed scheme’s efficacy in significantly expediting the convergence speed of the penetration testing agent using reinforcement learning algorithms. Furthermore, the scheme successfully maintains the learning agility and adaptability of the agent in dynamic network scenarios.

With the widespread use of cloud storage technology by individuals and organizations, data providers usually send their data to cloud for storage to reduce memory pressure, and allow the users to retrieve these data, which has become the trend of rapid data retrieval. To guarantee the data confidentiality, several research works have been developed on encrypted cloud data for ranked multi-keyword retrieval. Nevertheless, most of these schemes are disabled since they cannot resist keyword guessing attacks. Moreover, the ranked top-$K$search results obtained by the subscriber from the encrypted cloud data are inaccurate. To overcome these drawbacks, we design a novel and efficient privacy-preserving ranked multi-keyword retrieval scheme (named as PRMKR) in this paper. With PRMKR, the data and the inverted indexes which belong to the data provider can be securely transferred to the cloud server. In addition, a registered subscriber can request accurate retrieval services without compromising his/her trapdoor information to the cloud server. Specifically, we design an encryption searchable plugin-in server and lower dimensional inverted indexesvector for data owners, which can further guarantee data confidentiality of the data owner and improve search efficiency, respectively. Our rigorous security proof demonstrates that PRMKR can withstand keyword guessing attacks. Finally, experimental evaluations confirm that PRMKR has decent computational and communication efficiency.

With the development of wireless communications and the pervasiveness of location-aware mobile electronic devices, location-based services (LBS) which can provide a convenient lifestyle for people have attracted considerable interest recently. However, there still exists the privacy disclosure problem of LBS today. To solve this problem, in this article, we present a novel privacy-preserving LBS search scheme in outsourced cloud. In the proposed LBS search scheme, the LBS providers data are first outsourced to the cloud server in an encrypted method. Then, a registered user constructs a query model to obtain accurate LBS query results without divulging his/her location information and query attribute to the LBS provider and the cloud server. Specifically, based on the designed matrix encryption technology, the LBS search scheme can achieve privacy preservation of users query and confidentiality of LBS data in the outsourced cloud server. Through security analysis, we show that our scheme can resist various known security threats. The experimental results further show that our LBS search scheme greatly reduces the communication overhead and provides convenient search experience to the users.