Diplomová práce

Geo-spatial data security in distributed environment

Rajesh Kumar
Anotace

Geografický informační systém (GIS) se objevil jako silná technologie, která umožňuje integraci a fúzi geo-prostorově-časových dat z různých zdrojů a podporuje modelování, analýzu a vizualizaci takových dat, které jsou mnohem více než kapacity ručních metod. S pokrokem v oblasti GIS se stala významnou oblastí výzkumu potřeba geo-prostorového zabezpečení dat. Tato práce pojednává o třech hlavních problémech …více

Abstract

Geographical information system (GIS) has emerged as a powerful technology, which allows integration and fusion of geo-spatio-temporal data from different sources and supports modeling, analysis and visualization of such data much beyond the capacities of manual methods. With the advancements in the field of GIS, the need for geospatial data security has become a prominent research area. This thesis …více

Zadání práce
Security of Geographical Information Systems (GISs) received only limited attention so far. At present, many GIS solutions do not offer any data protection, authenticity and role based data access. A GIS user can be easily mislead by the attacker providing altered data. A GIS user may use provided data against usage policy by falsely claiming ownership to the GIS data. Last but not least, such policy may require different resolutions to be available to different users. This work will explore feasibility of bringing security in GIS information distribution system by exploring the following:
1. Presently, data/image that is delivered to user agencies has no mechanism of non-repudiation in case of conflicting claims between data provider and user agency. It may happen that a critical mission carried out based on an inaccurate data provided by source agency fails. In such a scenario, it is necessary to have mechanism for non-repudiation to avoid conflicting claims by both the agencies. To solve this problem the student shall study and suggest suitable mechanism(s) based on existing cryptographic hash and signature.
2. It may happen that user agency may use data provided in a way that violates the usage policy of the provider. In that scenario provider agency would need to establish that the data used by user agency was actually provided by them. To do that, the provider agency would need to embed a watermark in its data and in case of conflict it can establish ownership of data by recovering the watermark from the image. To make the mechanism robust against malicious alterations, the watermark insertion and detection would be based on secret key known only to the provider. The student will propose a suitable solution in this area.
3. In military and security agencies, data provided is based on 'need to know' basis. Therefore, a resolution access control mechanism is proposed where each user can access different resolution for different user categories from the same image file. This is necessary as having multiple images for multiple user roles would increase the storage and communication costs. The solution of the student must enable users to access three levels of resolution based on a simple transformation, single key and transformation or two keys and transformation of the same image file. The mechanism will be robust in the sense that knowledge of the secret keys will be necessary for recovering the high-resolution details. The mechanism will also be correct in the sense that the higher resolution will be based on actual high-resolution data present in original image and not be based on enhancement techniques using image model priors.

Note: The usage of these mechanisms by actual GIS applications is outside the scope of the proposed thesis.
Práce zkontrolována:
14. 12. 2018 07:55, prof. RNDr. Václav Matyáš, M.Sc., Ph.D., učo 344
Plný text práce
3,2 MB / soubor PDF
Jazyk práce
angličtina angličtina
Termín obhajoby
31. 1. 2019
Práce nebyla obhájena

Vedoucí

prof. RNDr. Václav Matyáš, M.Sc., Ph.D., učo 344
KPSK FI MU

Oponent

doc. RNDr. Petr Švenda, Ph.D., učo 4085
KPSK FI MU

Konzultant

Subrata Rakshit, Ph.D.

  • Přidání souboru

    Soubor nebo složku lze nahrát pomocí tlačítka Přidat.
  • Další operace se soubory

    Podrobnosti lze zjistit označením příslušného řádku.
  • Pohled pro experty

    Pro častou práci je možné zvolit režim Více možností.
  • Vyhledávání souborů

    Vyhledávaný výraz můžete zadat přímo do adresního řádku.
  • Rychlý přístup k souborům

    Pomocí funkce Nedávné je možné se rychle vrátit k právě prohlíženým souborům. Oblíbené soubory je také možné označit Hvězdičkou.