Implementation of Honey Encryption to Improve Resilience against Brute Force Attacks in Cloud-based Microservices Communication

Gabriel Nathanael Purba, Bagus Gede Krishna Yudistira, Kadek Yota Ernanda Aryanto

Sari


Arsitektur microservices berbasis cloud meningkatkan skalabilitas dan fleksibilitas sistem namun memperbesar risiko keamanan komunikasi antar layanan. Penelitian ini menerapkan Honey Encryption pada API Gateway di infrastruktur Amazon EC2, mengombinasikan Distribution Transforming Encoder dengan AES-CBC 256-bit untuk menjaga kerahasiaan dan integritas data. Hasil validasi menunjukkan bahwa dekripsi dengan kunci benar memulihkan data asli, sedangkan kunci salah menghasilkan decoy message yang plausible dan bervariasi per field, secara efektif menghambat upaya brute force. Evaluasi performa menegaskan bahwa waktu proses enkripsi dan dekripsi berbanding lurus dengan beban data namun tetap berada dalam batas latensi yang dapat diterima. Simulasi serangan memperlihatkan keunggulan decoy message dalam menyamarkan pesan asli, meningkatkan keamanan komunikasi data antar microservices.

Teks Lengkap:

PDF

Referensi


L. De Lauretis, “From monolithic architecture to microservices architecture,†2019, pp. 93–96.

G. Liu, “Microservices: architecture, container, and challenges,†2020, pp. 629–635.

R. Sood dan H. Kaur, “A literature review on RSA, DES and AES encryption algorithms,†2023, pp. 57–63.

R. Saini dan R. Behl, “An introduction to AWS EC2 (elastic compute cloud),†2020, pp. 99–102.

S. K. A, Paramartha, A. A. G. Y, dan Wijaya, “Implementasi google drive cloud storage pada sistem repositori AL-Daring,†SINTECH Journal , vol. 3, Art. no. 1, 2020.

K. S. M. Wikrama, “DDoS attack using GoldenEye, DAVOSET, and PyLoris tools,†CoreIT , vol. 9, Art. no. 2, 2023.

T. Yarygina dan B. A. H, “Overcoming security challenges in microservice architectures,†2018, pp. 11–20.

J. M. A, “Perbandingan DDoS attack menggunakan tools LOIC, HOIC dan HULK dalam melakukan penyerangan pada suatu website,†JINTEKS (Jurnal Informatika Teknologi dan Sains) , vol. 4, Art. no. 4, 2022.

M. H. A. Jacinto dan M. F. H, “Enhanced security implementation of hybrid image steganography technique using low-contrast LSB and AES-CBC cryptography,†International Journal of Advanced Computer Science and Applications , vol. 13, Art. no. 8, 2022.

R. Lindholm, “Honey Encryption: implementation challenges and solutions,†2019.

O. A. E, A. Jantan, dan A. O. I, “A comprehensive review of honey encryption scheme,†Indonesian Journal of Electrical Engineering and Computer Science , vol. 13, Art. no. 2, 2019.

K. V. R, “Honey encryption based hybrid cryptographic Algorithm:A fusion ensuring enhanced security,†2020, pp. 490–494.

T. Win dan Moe, “Protecting private data using improved honey encryption and honeywords generation algorithm,†Advances in Science, Technology and Engineering Systems Journal , vol. 3, Art. no. 5, 2018.

A. A. M. Gharbi dan N. A. S, “Honey encryption security techniques: A review paper,†Al-Rafidain Journal of Computer Sciences and Mathematics (RJCM) , vol. 16, Art. no. 1, 2022.

S. Jain, “Honey2Fish - An enhanced hybrid encryption method for password and messages,†2022.

R. Sahu dan A. M. S, “Securing messages from brute force attack by combined approach of honey encryption and blowfish,†International Research Journal of Engineering and Technology (IRJET) , vol. 4, Art. no. 9, 2017.

I. M. P. Utama, “Perbandingan tools vulnerability scanning pada pengujian sebuah website,†Jurnal Informatik , vol. 18, Art. no. 3, 2022.

C. Tan, X. Deng, dan L. Zhang, “Identification of block ciphers under CBC mode,†Procedia Computer Science , vol. 131, pp. 65–71, 2018.

H. M. E, “Comparative study of several operation modes of AES algorithm for encryption ECG biomedical signal,†International Journal of Electrical and Computer Engineering (IJECE) , vol. 9, Art. no. 6, 2019.

S. K. A dan Saskara, G. A. J, “Kriptografi simetris RC4 pada transaksi online booking engine system,†Jurnal Pendidikan Teknologi dan Kejuruan , vol. 17, Art. no. 2, 2020.

I. M. P. Utama, “Analisis perbandingan kinerja tool website directory brute force dengan target website DVWA,†Jurnal Informatik , vol. 18, Art. no. 3, 2022.

K. Ravindranadh, “Data migration in cloud computing using honey encryption,†International Journal of Engineering & Technology , vol. 7, Art. no. 2.8, 2018.

N. Mehta dan N. M. V, “An approach of security on cloud computing using honey encryption technique,†International Journal of Current Science , vol. 14, Art. no. 2, 2024.

Saskara, G. A. J, Indrawan, I. P. O, dan P. P. M, “Keamanan jaringan komputer nirkabel dengan captive portal dan WPA/WPA2 di politeknik ganesha guru,†Jurnal Pendidikan Teknologi dan Kejuruan , vol. 16, Art. no. 2, 2019.

K. V. R. Choudhary, V. P. K, dan P. Rai, “A walkthrough of amazon elastic compute cloud (amazon EC2): A review,†International Journal for Research in Applied Science and Engineering Technology , vol. 9, Art. no. 11, 2021.

E. Mok, A. Samsudin, dan F. T. S, “Implementing the honey encryption for securing public cloud data storage,†2017.

J. Veijanen, “Implementation of security best practices on AWS Cloud,†2020.




DOI: http://dx.doi.org/10.30811/jaise.v5i3.7211

Refbacks

  • Saat ini tidak ada refbacks.


Indexing :

Creative Commons License
Journal of Artificial Intelligence and Software Engineering (JAISE) licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.