Zero trust (ZT) is a new concept involving the provisioning of enterprise/organization resources to the subjects without relying on any implicit trust. Unlike the perimeter-based architecture in which any subject behind the wall (i.e., inside the predefined perimeter) is considered trusted, zero trust architecture (ZTA) processes any request and provides a resource to the subject without relying on implicit trust. In this paper, based on NIST Special Publication SP800-207, the concept of ZT and ZTA is introduced. Also, challenges, steps, and things to consider when migrating from the legacy architecture to ZTA are presented and discussed.

Today, smart devices and services have become a part of our daily life. These devices and services offer a richer user experience with a much higher quality of services than before. Many of them utilize sensing functions via cloud architecture to perform remote device controls and monitoring. Generally, the security of the communication between these devices and the service provider (e.g., cloud server) is achieved by using the TLS protocol via PKI standard. In this study, we investigate the risk associating with the use of public certificate authorities (CAs) in a PKI-based IoT system. An experiment is conducted to demonstrate existing vulnerabilities in real IoT devices available in the market. Next, the use of a private CA in the cloud-centric IoT architecture is proposed to achieve better control over the certificate issuing process and the validity period of the certificate. Lastly, the security analysis pointing out the strengths and drawbacks of the proposed method is discussed in detail.

Presents the introductory welcome message from the conference proceedings. May include the conference officers' congratulations to all involved with the conference event and publication of the proceedings record.

In the present day, the credibility of digital media is in doubt. With emerging of easy-to-use media altering software, the realistic forged media can be easily created. In the court of law, however, every single piece of digital evidence is needed to be verified. Without experts in this field, performing the basic investigation to determine the integrity of a target digital evidence is extremely hard or close to impossible. In this paper, we present a new technique for detection copy-move forgery (CMF) in the digital image using SURF key-point detection together with GLCM-based feature descriptors. Using the proposed mechanism, CMF can be efficiently detected. The experiments show detection results in which CMF area are clearly marked and shown. The proposed method not only provide support to experts or skilled practitioners but can also be used to apply with classification method (e.g. SVM) to help non-experts with automatic detection systems which need less or no human interaction.

Digital media has played a critical role in today information system. With emerging of easy-to-use media manipulating tools which can be found anywhere on the internet, a user can now alter the content of their digital media (e.g. digital image, audio or video) in order to achieve his/her personal goal without leaving no traces detectable by human's basic perceptions. Hence, the authenticity of the digital media can no longer be guaranteed. This leads to the serious problem regarding digital crime investigation. In this paper, an overview on forgery attacks and techniques used to fight against these attacks are present and discussed.

Abstract As a new frontier for fighting against cyber crime and cyber terrorism, digital forensics has experienced a rapid development in the last decade. Many countries have created new laws and legal procedures, developed new technologies, and enhanced education and research in this emerging field. Japan is no exception. In this paper, we first provide a nutshell of the Japanese political structures, legal systems, and law enforcement practice, and then present an overview of updated and new laws, awareness programs, and the research activities in digital forensics. Our views on the current issues and future work are also discussed. We believe that the result of our study will provide an opportunity for the world to see what has been done and what we are doing in this field in Japan. Meanwhile, it also provides a foundation to advance the digital forensics research and development in Japan as well as in the world. Copyright © 2010 John Wiley & Sons, Ltd.

A privacy-secure content trading system based on semi-blind fingerprinting is presented. Semi-blind fingerprinting provides privacy-secure content trading as secure as blind fingerprinting at feasible processing cost with sufficient robustness. This system assures a fair trading for both a content provider and a purchaser which is effective for a market where a number of small or not so reliable content providers deal with purchasers. We have been aiming at providing a useful tool for the market by overcoming the following defects. In the basic models of conventional fingerprinting, the user's security could be guaranteed only under the premise that a content provider was perfectly trustworthy. Such premise makes a system unpractical. To overcome this defect, various scheme of blind fingerprinting have been proposed in which cryptography technique is used in order to protect user's privacy. However, these are not practical due to heavy computation cost and insufficient robustness of watermark against manipulations. The semi-blind fingerprinting fulfills the need for both feasibility and robustness by altering encryption with image decomposition that blinds up an image to be unrecognizable. Image decomposition and a customized embedding algorithm are implemented to a web-based system, whose perceptual condition of decomposed images and robustness of watermark is evaluated.

Many national studies on computer forensics have been reported in the United Kingdom, the United States, and Australia, except Japan. As one of the economic powers in the world and the only Asian country represented in the G8, Japan has been playing a critical role in Asia as well as in the world in fighting against the cyber crime and cyber terrorism. In this paper, we attempted to analyze the current development of computer forensics in Japan by reviewing its political structures, legal systems, law enforcement infrastructures, and academic development in computer forensics. The result of our study will foster the mutual understanding and promote the cooperation and collaboration between Japan and the world on fighting against the cyber crimes and the cyber terrorisms.

Abstract In the last few years, live pay‐TV systemviathe Internet has come to be established with the development of broadband network. To develop such a system, a mechanism for content protection is required. In this paper, a new architecture integrating fingerprint with cryptosystem is proposed to protect digital contents (image and video) from unauthorized viewing and illegal redistribution. Then, a scheme integrating anti‐collusion code and Home Page public‐key cryptosystem (PKC) is described. Such a scheme is shown feasible and realistic for implementing with respect to computation/transmission cost. Copyright © 2008 John Wiley & Sons, Ltd.

This report describes a pay broadcasting system for the Internet. This system would enable tens of thousands of people to access an identical video stream simultaneously. In this proposed system, contents are broadcast to all terminals using IP multicast. Contents are encrypted so that legitimate users can decode them with a private key and session keys. As a key management scheme, the Tracing Traitor scheme is adopted because it offers advantages in scalability. The system can also embed digital watermarks, which act as a psychological deterrent to illegal copying and distribution of copyrighted contents. Finally, implementation of an application system is described and efficient broadcasting of contents with this system is demonstrated.