Applied Cryptography for Cyber Security and Defense: Information Encryption and Cyphering Hamid R. Nemati University of North Carolina at Greensboro, USA Li Yang University of Tennessee, USA InformatIon scIence reference Hershey • New York Director of Editorial Content: Kristin Klinger Director of Book Publications: Julia Mosemann Acquisitions Editor: Lindsay Johnston Development Editor: Christine Bufton Publishing Assistant: Milan Vracarich Jr. Typesetter: Casey Conapitski Production Editor: Jamie Snavely Cover Design: Lisa Tosheff Published in the United States of America by Information Science Reference (an imprint of IGI Global) 701 E. Chocolate Avenue Hershey PA 17033 Tel: 717-533-8845 Fax: 717-533-8661 E-mail: [email protected] Web site: http://www.igi-global.com Copyright © 2011 by IGI Global. All rights reserved. No part of this publication may be reproduced, stored or distributed in any form or by any means, electronic or mechanical, including photocopying, without written permission from the publisher. Product or company names used in this set are for identification purposes only. Inclusion of the names of the products or com- panies does not indicate a claim of ownership by IGI Global of the trademark or registered trademark. Library of Congress Cataloging-in-Publication Data Applied cryptography for cyber security and defense : information encryption and cyphering / Hamid R. Nemati and Li Yang, editors. p. cm. Includes bibliographical references and index. Summary: "This book is written for professionals who want to improve their understanding about how to bridge the gap between cryptographic theory and real-world cryptographic applications and how to adapt cryptography solutions to emerging areas that have special requirements"--Provided by publisher. ISBN 978-1-61520-783-1 (hardcover) -- ISBN 978-1-61520-784-8 (ebook) 1. Telecommunication--Security measures. 2. Data encryption (Computer science) 3. Cryptography. I. Nemati, Hamid R., 1958- II. Yang, Li, 1974 Oct. 29- TK5102.94. A67 2010 005.8'2--dc22 British Cataloguing in Publication Data A Cataloguing in Publication record for this book is available from the British Library. All work contributed to this book is new, previously-unpublished material. The views expressed in this book are those of the authors, but not necessarily of the publisher. Dedication This book is dedicated to my wonderful son Daniel as he is about to embark on a new and exciting chapter of his life and to the love of my life, my beautiful wife Mary for being there to celebrate it with me. Hamid R. Nemati I dedicate this book to my dearest mother Xiuqing, father Wenjun, my husband Hong, and my precious daughter Helen-Tianyang who always support me in every endeavor. They are the reason I’m here at all, and made me who I am today. Li Yang List of Reviewers Moses Acquaah, The University of North Carolina at Greensboro, USA Xinliang Zheng, Frostburg State University, USA B. Dawn Medlin, Appalachian State University, USA Alessandro Acquisti, Carnegie Mellon University, USA Pierre Balthazard, Arizona State University, USA Christopher Barko, Laboratory Corporation of America, USA Dieter Bartmann, University of Regensburg, Germany Joseph Cazier, Appalachian State University, USA Elizabeth Chang, Curtin University of Technology, Australia John Eatman, The University of North Carolina at Greensboro, USA Simone Fischer-Hübner, Karlstad University, Sweden Keith Frikken, Purdue University, USA Philippe Golle, Palo Alto Research Center, USA Rüdiger Grimm, University Koblenz-Landau, Germany Harry Hochheiser, Towson University, USA Earp Julie, North Carolina State University, USA Chang Koh, University of North Texas, USA Mary Jane Lenard, Meredith College, USA Gregorio Martinez, University of Murcia, Spain Dawn Medlin, Appalachian State University, USA Mihir Parikh, University of Central Florida, USA Norman Pendegraft, The University of Idaho, USA Carol Pollard, Appalachian State University, USA Ellen Rose, Massey University, New Zealand Alain Mohsen Sadeghi, eTechSecurity Pro, USA Kathy Schwaig, Kennesaw State University, USA Victoria Skoularidou, Athens University of Economics and Business, USA William Tullar, The University of North Carolina at Greensboro, USA Sameer Verma, San Francisco State University, USA Liisa von Hellens, Griffith University, Australia Table of Contents Preface .................................................................................................................................................xv Section 1 Cryptography in Networking and Cyber Space Chapter 1 Network Security .................................................................................................................................... 1 Ramakrishna Thurimella, University of Denver, USA Leemon C. Baird III, United States Air Force Academy, USA Chapter 2 Cryptography-Based Authentication for Protecting Cyber Systems .................................................... 32 Xunhua Wang, James Madison University, USA Hua Lin, University of Virginia, USA Section 2 Cryptography in E-Mail and Web Services Chapter 3 E-Mail, Web Service and Cryptography ...............................................................................................52 Wasim A. Al-Hamdani, Kentucky State University, USA Chapter 4 Cryptography in E-Mail and Web Services .......................................................................................... 79 Wasim A. Al-Hamdani, Kentucky State University, USA Chapter 5 Applied Cryptography in E-Mail Services and Web Services ............................................................130 Lei Chen, Sam Houston State University, USA Wen-Chen Hu, University of North Dakota, USA Ming Yang, Jacksonville State University, USA Lei Zhang, Frostburg State University, USA Section 3 Cryptography in Wireless Communication Chapter 6 Applied Cryptography in Wireless Sensor Networks .........................................................................146 Dulal C. Kar, Texas A&M University-Corpus Christi, USA Hung Ngo, Texas A&M University-Corpus Christi, USA Clifton J. Mulkey, Texas A&M University-Corpus Christi, USA Chapter 7 Applied Cryptography in Infrastructure-Free Wireless Networks ......................................................168 Lei Zhang, Frostburg State University, USA Chih-Cheng Chang, Rutgers University, USA Danfeng Yao, Rutgers University, USA Section 4 Cryptography in Electronic Commerce Chapter 8 Applied Cryptography in Electronic Commerce ................................................................................ 180 Sławomir Grzonkowski, National University of Ireland, Ireland Brian D. Ensor, National University of Ireland, Ireland Bill McDaniel, National University of Ireland, Ireland Chapter 9 An Electronic Contract Signing Protocol Using Fingerprint Biometrics ........................................... 201 Harkeerat Bedi, University of Tennessee at Chattanooga, USA Li Yang, University of Tennessee at Chattanooga, USA Joseph M. Kizza, University of Tennessee at Chattanooga, USA Section 5 Cryptography in Emerging Areas Chapter 10 Secure and Private Service Discovery in Pervasive Computing Environments .................................229 Feng Zhu, University of Alabama in Huntsville, USA Wei Zhu, Intergraph Co, USA Chapter 11 Multimedia Information Security: Cryptography and Steganography ............................................... 244 Ming Yang, Jacksonville State University, USA Monica Trifas, Jacksonville State University, USA Nikolaos Bourbakis, Wright State University, USA Lei Chen, Sam Houston State University, USA Chapter 12 Secure Electronic Voting with Cryptography ..................................................................................... 271 Xunhua Wang, James Madison University, USA Ralph Grove, James Madison University, USA M. Hossain Heydari, James Madison University, USA Chapter 13 Biometric Security in the E-World ......................................................................................................289 Kunal Sharma, DOEACC Centre, India A.J. Singh, H.P. University, India Compilation of References .............................................................................................................. 338 About the Contributors ...................................................................................................................367 Index ...................................................................................................................................................373 Detailed Table of Contents Preface .................................................................................................................................................xv Section 1 Cryptography in Networking and Cyber Space Chapter 1 Network Security .................................................................................................................................... 1 Ramakrishna Thurimella, University of Denver, USA Leemon C. Baird III, United States Air Force Academy, USA Three pillars of security—confidentiality, integrity, and availability—are examined in the context of networks. Each is explained with known practical attacks and possible defenses against them, demon- strating that strong mathematical techniques are necessary but not sufficient to build practical systems that are secure. This chapter illustrates how adversaries commonly side-step cryptographic protections. In addition, we contend that effective key management techniques, along with privacy concerns must be