Category: CSE Seminar Topics

• Intruders can easily make attacks by focusing on the firewalls they consider firewalls as the focal points for making some malicious activity. If once the intruder is able to break through the firewall then he can access the network of any corporate organization without having any restrictions.
• Sometimes even the authorized users may face some problems using these firewalls because they may be interrupted in accessing the services provided by their organization. For example, if the users are away from the work place or if they are working from home then they are restricted to access the corporate network.
• Firewalls also fail to protect the corporate networks from the back door attacks. Firewalls cannot interrupt the users entering or exiting through the back doors, and this is caused when the service interruptions are more enough. The users can enter into the corporate networks by the entrances like exporting and importing of floppy discs, by modems. There is a necessity for the security policies to cover all these factors also.
• As all the connections in the network pass through the firewall system and so firewalls behave as bottlenecks for the throughput.
• The intruder activities like smuggling cannot be interrupted by the firewall systems. Therefore the network cannot be protected by the firewalls. Firewalls can also export and import some material that is banned for example, material attached to the mails and the other games and programmes. If the users had download softwarefrom the outer official statement boards then there is a chance of smuggling in terms of some virus which can be considered as very important. Firewalls cannot avoid the viruses that are passed from the attachments of the e-mails for example the Melissa and love bug are the viruses that are smuggled through emails without any notice of the recipient. Particularly in this type of situations better security policies are required. This type of issues can be addressed using some software packages that are specially designed for identifying the viruses that are passed from the attachments of e-mails and they are scanned before they are downloaded. These software packages can remove the viruses that cause damage for the networks and systems.
• Firewalls cannot protect the attacks caused by the inside attackers and this considered as the main disadvantage of firewalls. It’s a fact that most of the crimes in corporate companies are caused by the internal users of the company in this case firewalls are used to provide a little security but not a high level security. The internal users can send the sensitive information of the organization to other attackers using the email approach or bye copying those files into some floppy discs and then export them to intruders. So more concentration should be paid on firewalls in order to develop them in such a way that they can address all these disadvantages.

There are many advantages for firewalls and they are discussed as below:

• In order to insecure the services inherently, the incoming requests are stopped using the firewalls, for example, the services like RPC and rlogin such as the NFS can be denied by the firewalls.
• The access of various services can be controlled by the firewalls and these services includes bar callers from assured IP addresses, both the outgoing and incoming service operations are filtered for example FTP writes are stopped, the information can be secured by permitting the users accessing the assured directories and systems.
• Than securing all the hosts on the corporate network the firewalls are considered as most cost effective because only one firewall or few firewalls are allocated for concentrating the network.
• When compared with the security provided to all the hosts the firewalls are self-secured because the software on the host is very complex and therefore there are more chances for appearing of security loopholes. But in case of the firewalls they don’t run the application software that are too complex and even the operating system they use is also simplified and there for can secure the no of hosts also.

Abstract

Computer and network security has a wide range of applications and most of the applications need ample security and access to the network should be restricted from intruders and anomalies. Firewalls can be considered as the best choice this process and in general the firewalls provide some access restrictions to the incoming and outgoing traffic across a network. In this research, I have reviewed the importance of firewalls and the level of technical aspects across its implementation along with the disadvantages. Different types of firewalls are reviewed in this context and presented in the analysis part.

Firewalls

                        In order to interconnect the internet and some private network an internet gateway is required and that internet gateway must be very secure and the firewall is nothing but a secure Internet gateway. A firewall is made up of several components and they are discussed below in detail:

a)    The first among the components is the “Internet Access Security Policy” of an organization. This means that when the organization is connecting to the internet what was the expected level of security at high level. Without depending on the equipment that are used the security policy must have a life time because it is not based on the techniques and the technology that is implemented (Government of the Hong Kong, 2009). According to this statement, an instance for this type of security policy is a corporate network of an organization is not accessed by the external users that means they are not permitted use that network if not they have anauthorized authentication. If an organization require transferring its corporate information through the internet and if that information is not available in the public domain then the information is transferred in a confidential approach. And all the other external services will be banned and only the corporate users are permitted to send e-mails across the internet.

b)    The other component in making the firewalls is mapping of the security policy on the procedures and technical designs, these procedures and technical designs on which the security policy is mapped must be followed and implemented while connecting to the internet. During this process the configuration of the system will be changed and the information will be added as a fresh technology and so on. Theusage of one-time passwords can be taken as example for the technical design considering the authentication of an organizational network. Generally the technical designs depends on one security policy among the two polices. The two policies are allowing any service except it is denied expressly or deny any service except it is permitted expressly. The second one is the most secure among the two security policies.

c)    The third one is firewall system which is a combination of both software and hardware that means the both the software and hardware components can make the firewall. Generally a firewall system is made up of an “IP packet filtering router” and a host computer sometimes it is also called as application gateway or a bastion host which will run authentication software and application filtering.

                          All the above components are very important and necessary for making a firewall. A firewall is said to be not configured properly if there is no Internet access security policy. There is no value for the policy if that is not configured properly and also if is not enforced with worthy procedures. 

ATM Security via Facial Recognition:

We can use face recognition technology in ATMs (automatic teller machines) centers instead of pin numbers. This technology is already implemented in Pakistani government.

But not only the uses it can have some problems also. It is easy to manipulate the ATM cards due to some problems. With this technology or by using this technology some issues occurred.

Conclusion

Thus, how the Biometrics is a playing a very important role in the today’s daily life. It has become very common in our daily life now. As I mentioned, Biometrics is very important technology especially in the role of Security. It really helps a lot in the issues of Security with is advanced features and applications . Its getting more and more advanced technology day to day. Not only in securing the data, it also helps in various other fields. We will hope that we will have much more advanced features and applications of the Biometrics in the near future.

Face Recognition: 

Presently, face recognition is measured to be moderately imprecise due to the existence of a collection of inconsistency (from 1.39% to more than 13% EER). Like aging, or basically related to outer environmental situations (facial expressions, illumination, poses, textured background), occurs to people over time suitable to various changes. The concert varies greatly due to this method’s depending on the perspective of applications (static images or videos, by means of or exclusive of uniform conditions, or invariable lightning situations) and on the recording conditions.

Face recognition is not proficient enough at this instant to pact with all-encompassing credentials; but it can be helpful in the environment of substantiation or incomplete entrée organize with constraining possession circumstances (through conscription the back-ground must be uniform and the user must look the camera at a rigid space).  

ACCURACY RATE OF BIOMETRICS:

The circumstance of biometrics, three levels of information combination schemes has been recommended: feature of original level, decision level and matching score level. The principle of biometrics is to examine whether the incorporation of face and palm print biometrics can accomplish superior presentation that may not be achievable using a particular biometric display.

Both Independent Component Analysis (ICA) and Principal Component Analysis (PCA) are measured in this attribute vector synthesis perspective. The outcome of the individual palm print and face is compared with outcome of the shared biometrics. It is established that the performance is extensively enhanced in both cases, particularly in the case of   feature fusion usingICAobtaining hopeful outcome with a “99.17%” recognition accuracy rate via a test set sized of forty people.

 Several additional methods extend the feature drawing out procedure which is based on the PCA have been developed to enlarge its accuracy and diminish its computational cost.  It will acquire the improvement of incomplete variations of the face images.

A method called Two-Dimensional PCA (IMPCA or 2DPCA) that uses a 2-dimensional matrix demonstration for faces instead of traditional 1-dimensional design used by PCA. The face depiction is much lesser than the single necessary for the traditional PCA. So this method works

By means of little dimensional data leading to a more statistical representative covariance matrix.

Gottmukkal and Asari developed the Modular Principal Component Analysis (MPCA) with current improvements. The face images are separated into slighter regions and the PCA approach is applied for apiece of these sub-images in this method.

Face recognition which is based on PCA Technologies are not especially correct when the facial expression and the clarification disagree significantly. Modular PCA and IMPCA are latest techniques that aim to unite the most excellent aspects with these job strategies. So this latest approach is called Modular Image Principal Component Analysis (MIMPCA, for dumpy).

The image demonstration vector obtained by the IMPCA performance is statically advance representative than the imaginative PCA-based techniques.

Principal Component Analysis (PCA) based methods for face have achieved an excellent presentation to distinguish and to characterize the anterior individual faces. On the other hand, its accuracy is enormously affected by face image variations like: head pose, explanation and facial expression. The 2D image metrics should be altered into a 1D vector in PCA-based face recognition techniques.

In this manner, this approach considers the complete image matrix to calculate the basis vector of the latest attribute spaces.  Using the traditional PCA by taking into consideration of an image matrix of size m × n the covariance matrix will be of size m× m as an alternative of m. n × m. n obtained using the traditional PCA. Then, the covariance matrix can be obtained by                                             

Where Ā is the typical image of all the preparation samples and Aj represents the j-th image of the training database. As discussed previously about the MPCA technique which was projected by Gottumukkal and Asari, this approach works as follows: the whole image is separated into lesser regions and the feature extraction is computed for every individual of these regions. So, the restricted ledge will be more representative to the region it covers, see figure 2. Because some variations on the face images do not achieve the complete information of the faces. This method takes benefit of the unchanged regions of the face to advance its accuracy rate. 

Expert image analysis: 

Manual analysis of facial biometric facial appearance (frequently termed facial mapping) is principally an aspect of transgression investigation. The face must be of resembling three-dimensional alignment as the head can shift in a figure of directions. Experts in this pasture have been given that rumors to endow with recognition support, primarily in criminal cases, since 1997.

This facial biometrics employs a process of –

• One-to-one matching:  – Arrangement to recommend the contribution of a exact personage whereby further forms of substantiation must be confirmed all the way through a method of checking suspicious or allegations. 

Facial mapping techniques: 

Even though there are several publications concerning facial image comparisons, numerous methodologies engaged for image comparisons are strained from peer-reviewed and established practices contained by other disciplines, Examples of morphological classifications, three-dimensional analysis, and geometric analysis are specified in the writing and transmit frankly to forensic image comparisons for the relay in a straight line to forensic image comparisons for the purposes of classification.

Face Recognition using biometrics:

Statistical analysis of physical characteristics can be defined by biometrics. For the intention of recognition and authorization the word biometrics refers to the capacity or quantity and comparison of physiological human characteristics and quantifiable physical can be done exclusively within the access control and also in security. Biometrics is motionless relatively new; from an access organize standpoint, and however the use of biometrics is graining position. Because this pattern-recognition system overcomes issues related with approved persons having to hold cards or keys. “Enrollment” is a procedure that is used in biometric systems to confine the proscribed data. When the subject’s biometric allusion data has been composed, it is then stored as a digital outline. Submitted biometric samples are compared with the pattern for the reason of denying admission or conceding, but not stored images or the enrollment samples.

Four practical issues must be measured earlier to selecting the biometric technology for exercise in an information center are: 

• Failure to enroll
• Type 1 error, or false reject
• Type 2 error, or false accept
• Crossover error rate (CER)

Even though the individual criteria that discriminate some biometric factors such as “fingerprint” and retinal minutiae are decades mature, the advances in machinery allowing them to expand into realistic for the entrance power purposes are still comparatively latest.

                                 To access the power systems for information centers or IT conveniences in a dumpy list of the biometric technology is on hand which includes the following: 

• “Facial recognition” dealings only one of its kinds attributes of the appearance, counting exterior skin texture such as geometry, or it can use thermal imaging to record the foremost veins and arteries beneath the skin.
• “Fingerprint recognition” analyzes the patterns that establishes on the tips of the fingers. For more 100years they make use of of the fingerprint patterns as exceptional identifiers about the world. Spawn mature methods to defect or bypass identification, mature methods of identification and authentication are also used to eradicate the potential deduction of the finger of an authorized enrollee and using it to gain the access; various manufacturers are used now to determine pulse and temperature as the part of authentication process.
• “Hand-scan geometry” compares a variety of hand measurements, together with the length, width, thickness and surface area of the hand. This technology is used primarily for access control around for many years. However, it also has been incorporated in many times and also in attendance systems. In many commercially presented units temperature sensors have been added to this technology.
• “Other biometric technology” includes several new biometric signatures that can be used to be in command of admission to a secure site or room, such as handwriting technology, DNA, signature, voice recognition, keystroke dynamics and signature dynamics. 

                      Face biometrics is regarded as a smaller amount invasive than additional methods such as fingerprint analysis, iris scans, palm morphologies, which commonly necessitate co-operation from the theme and a responsiveness of the course of action being undertaken.