Zero trust (ZT) is a new concept involving the provisioning of enterprise/organization resources to the subjects without relying on any implicit trust. Unlike the perimeter-based architecture in which any subject behind the wall (i.e., inside the predefined perimeter) is considered trusted, zero trust architecture (ZTA) processes any request and provides a resource to the subject without relying on implicit trust. In this paper, based on NIST Special Publication SP800-207, the concept of ZT and ZTA is introduced. Also, challenges, steps, and things to consider when migrating from the legacy architecture to ZTA are presented and discussed.

Today, smart devices and services have become a part of our daily life. These devices and services offer a richer user experience with a much higher quality of services than before. Many of them utilize sensing functions via cloud architecture to perform remote device controls and monitoring. Generally, the security of the communication between these devices and the service provider (e.g., cloud server) is achieved by using the TLS protocol via PKI standard. In this study, we investigate the risk associating with the use of public certificate authorities (CAs) in a PKI-based IoT system. An experiment is conducted to demonstrate existing vulnerabilities in real IoT devices available in the market. Next, the use of a private CA in the cloud-centric IoT architecture is proposed to achieve better control over the certificate issuing process and the validity period of the certificate. Lastly, the security analysis pointing out the strengths and drawbacks of the proposed method is discussed in detail.

In the present day, the credibility of digital media is in doubt. With emerging of easy-to-use media altering software, the realistic forged media can be easily created. In the court of law, however, every single piece of digital evidence is needed to be verified. Without experts in this field, performing the basic investigation to determine the integrity of a target digital evidence is extremely hard or close to impossible. In this paper, we present a new technique for detection copy-move forgery (CMF) in the digital image using SURF key-point detection together with GLCM-based feature descriptors. Using the proposed mechanism, CMF can be efficiently detected. The experiments show detection results in which CMF area are clearly marked and shown. The proposed method not only provide support to experts or skilled practitioners but can also be used to apply with classification method (e.g. SVM) to help non-experts with automatic detection systems which need less or no human interaction.

Digital media has played a critical role in today information system. With emerging of easy-to-use media manipulating tools which can be found anywhere on the internet, a user can now alter the content of their digital media (e.g. digital image, audio or video) in order to achieve his/her personal goal without leaving no traces detectable by human's basic perceptions. Hence, the authenticity of the digital media can no longer be guaranteed. This leads to the serious problem regarding digital crime investigation. In this paper, an overview on forgery attacks and techniques used to fight against these attacks are present and discussed.

Recently, location based services (LBS) have become more important in today technology advancements. Privacy issue in LBS is one of the most important concerns. In this paper, we have proposed an anonymity preserving framework which can provide a user with more privacy in both authenticating and querying processes. In our framework, an authentication protocol has been proposed, in order to strengthen a privacy, a technique called "Timed Fuzzy Logic" is used. In querying processes of location based services, the use of the Anonymizer, a trusted third party, to provide users anonymous querying and requesting processes is presented. Moreover, when concerning on privacy in user's context, k-anonymity cloaking has been employed for the purpose of preventing user's current location from tracking.