{"id":"https://openalex.org/W4407832005","doi":"https://doi.org/10.1109/tifs.2025.3544485","title":"HSM-Based Architecture to Detect Insider Attacks on Server-Side Data","display_name":"HSM-Based Architecture to Detect Insider Attacks on Server-Side Data","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4407832005","doi":"https://doi.org/10.1109/tifs.2025.3544485"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3544485","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3544485","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092639069","display_name":"Marc Dib","orcid":"https://orcid.org/0009-0009-4235-2155"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Marc Dib","raw_affiliation_strings":["Department of Computer and Software Engineering, Polytechnique Montréal, Mobile Computing and Networking Research Laboratory (LARIM), Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0009-0009-4235-2155","affiliations":[{"raw_affiliation_string":"Department of Computer and Software Engineering, Polytechnique Montréal, Mobile Computing and Networking Research Laboratory (LARIM), Montreal, QC, Canada","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089387879","display_name":"Samuel Pierre","orcid":"https://orcid.org/0000-0002-4788-3774"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Samuel Pierre","raw_affiliation_strings":["Department of Computer and Software Engineering, Polytechnique Montréal, Mobile Computing and Networking Research Laboratory (LARIM), Montreal, QC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Software Engineering, Polytechnique Montréal, Mobile Computing and Networking Research Laboratory (LARIM), Montreal, QC, Canada","institution_ids":["https://openalex.org/I45683168"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I45683168"],"apc_list":null,"apc_paid":null,"fwci":0.9389,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.72665586,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"20","issue":null,"first_page":"2538","last_page":"2549"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.829055905342102},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.7136830687522888},{"id":"https://openalex.org/keywords/client-side","display_name":"Client-side","score":0.6140123009681702},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.5756648778915405},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.5665240287780762},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5543866157531738},{"id":"https://openalex.org/keywords/server-side","display_name":"Server-side","score":0.532258927822113},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.5254066586494446},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.45557892322540283},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.4491793215274811},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.42317283153533936},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3583548069000244}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.829055905342102},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.7136830687522888},{"id":"https://openalex.org/C202477664","wikidata":"https://www.wikidata.org/wiki/Q1352449","display_name":"Client-side","level":2,"score":0.6140123009681702},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.5756648778915405},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.5665240287780762},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5543866157531738},{"id":"https://openalex.org/C14414571","wikidata":"https://www.wikidata.org/wiki/Q519081","display_name":"Server-side","level":2,"score":0.532258927822113},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.5254066586494446},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.45557892322540283},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.4491793215274811},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.42317283153533936},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3583548069000244},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2025.3544485","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3544485","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:publications.polymtl.ca:62959","is_oa":false,"landing_page_url":"https://publications.polymtl.ca/62959/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Article de revue"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W589901350","https://openalex.org/W958993015","https://openalex.org/W1573849558","https://openalex.org/W1575746526","https://openalex.org/W1684942806","https://openalex.org/W1998857362","https://openalex.org/W2015840019","https://openalex.org/W2061210554","https://openalex.org/W2170334586","https://openalex.org/W2241836009","https://openalex.org/W2342494908","https://openalex.org/W2618452333","https://openalex.org/W2767161384","https://openalex.org/W2963053811","https://openalex.org/W3003390319","https://openalex.org/W3006171966","https://openalex.org/W3036173011","https://openalex.org/W3049336670","https://openalex.org/W3127666184","https://openalex.org/W3130625521","https://openalex.org/W4214520883","https://openalex.org/W4230007762","https://openalex.org/W4230218059","https://openalex.org/W4312733562","https://openalex.org/W4312952557","https://openalex.org/W4385819805","https://openalex.org/W6635918014","https://openalex.org/W6683979201","https://openalex.org/W6712237015","https://openalex.org/W6748960622","https://openalex.org/W6769845502","https://openalex.org/W6773991041"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2792608345","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W4302890120","https://openalex.org/W1979999931"],"abstract_inverted_index":{"In":[0],"this":[1],"paper,":[2],"we":[3],"propose":[4],"an":[5,57],"HSM-based":[6,58],"architecture":[7,17,42],"to":[8,45],"detect":[9,46],"insider":[10],"attacks":[11],"on":[12,52,100],"server-side":[13,53],"data.":[14],"Our":[15],"proposed":[16],"combines":[18],"four":[19],"cryptography-based":[20],"defense":[21],"mechanisms:":[22],"Nonce-Based":[23],"Process":[24],"Authentication":[25],"(NBPA),":[26],"Hash-Based":[27,31,36],"Field":[28,32],"Integrity":[29],"(HBFI),":[30],"Availability":[33,38],"(HBFA),":[34],"and":[35,80],"Row":[37],"(HBRA).":[39],"This":[40],"novel":[41],"is":[43,68],"designed":[44],"a":[47,117],"predefined":[48],"comprehensive":[49],"attack":[50,111],"model":[51],"data":[54],"tailored":[55],"for":[56,72,75,78,82,116],"architecture.":[59],"The":[60],"implementation":[61],"results":[62],"show":[63],"that":[64,91],"the":[65,83,89,101,104,110],"throughput":[66],"decrease":[67],"mostly":[69],"manageable":[70],"(14%":[71],"NBPA,":[73],"30-50%":[74],"HBFI,":[76],"25%":[77],"HBFA,":[79],"43.74%":[81],"combination":[84],"of":[85,119],"all":[86],"mechanisms),":[87],"with":[88],"indication":[90],"some":[92],"mechanisms":[93],"are":[94],"more":[95],"or":[96],"less":[97],"appropriate":[98],"depending":[99],"situation.":[102],"Moreover,":[103],"HBRA":[105],"mechanism":[106],"performed":[107],"well":[108],"regarding":[109],"detection":[112],"time":[113],"(5":[114],"minutes":[115],"database":[118],"1000":[120],"entries).":[121]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2025-12-23T23:11:35.936235","created_date":"2025-10-10T00:00:00"}