Enhancing Medical Data Security in Private Cloud: An MAR-Based Encryption Approach

Abstract:

This study addresses common vulnerabilities in file, folder, and email exchanges within private cloud (PriCld) environments, focusing on threats like password guessing, man-in-the-middle attacks (MaMiAtk), and exploitation by automated scanners. To counter these issues, we propose a log-based analysis approach to enhance resilience against attacks such as MaMiAtk, Denial of Service (DoS), and unauthorized password access attempts. Additionally, encrypted communication channels are implemented to further mitigate the risk of interception in unencrypted connections. The proposed approach aims to strengthen private cloud security and ensure reliable, secure data exchanges.

• Periodical: Engineering Headway (Volume 35)
• Pages: 254-260
• DOI: https://doi.org/10.4028/p-fC2qxH
• Online since: February 2026
• Authors: Fuqdan Al-Ibraheemi, Hussein Ali Hussein Al Naffakh, Ahmed Dheyaa Radhi, Baqer A. Hakim, Bourair Al-Attard
• Keywords: Denial of Service (DoS Attack), Man-in-the-Middle (MaMiAtk), Medical Record Analysis (MAR), Private Cloud (PriCld)

References

[1] A.S. Abdulbaqi, A.A. Abdulhameed and A.J. Obaid, Cardiopathy symptoms diagnosis based on a secure real-time ECG signal transmission, Int. J. Nonlinear Anal. and Appl. 12(2) (2021) 1353–1370.

[2] A.S. Abdulbaqi and R.H. Mahdi, Biometrics detection and recognition based-on geometrical features extraction, In 2018 Int. Conf. Adv. Sustainable Engin. Appl. IEEE, (2018) 59–63.

DOI: 10.1109/icasea.2018.8370956

[3] A.S. Abdulbaqi, A.J. Obaid and A.H. Mohammed, ECG signals recruitment to implement a new technique for medical image encryption, J. Discrete Math. Sci. Crypt. (2021) 1–11.

DOI: 10.1080/09720529.2021.1884378

[4] J.M. Beaver, C.T. Symons, R.E. Gillen, A learning system for discriminating variants of malicious network traffic, 8th Annual Cyber Security and Information Intelligence Research Workshop, (2012) p.1–4.

DOI: 10.1145/2459976.2460003

[5] D.S.A. Elminaam, H.M.K. Abdual and M.M. Hadhoud, Evaluating the performance of symmetric encryption algorithms, Int. J. Network Secur. 10(3) (2010) 216–222.

[6] N. Gura, A. Patel, A. Wander, H. Eberle and S.C. Shantz, Comparing elliptic curve cryptography and RSA on 8-bit CPUs, M. Joye and J.J. Quisquater (eds), Cryptographic Hardware and Embedded Systems - CHES 2004, 3156 (2004) 119–132.

DOI: 10.1007/978-3-540-28632-5_9

[7] A. Khalique, K. Singh and S. Sood, A password-authenticated key agreement scheme based on ECC using smart cards, Int. J. Comput. Appl. 2(3) (2010) 26–30.

DOI: 10.5120/647-903

[8] G. Lakshmi, M. Ghonge and A.J. Obaid, Cloud Based IoT Smart Healthcare System for Remote Patient Moni- toring, EAI Endorsed Transactions on Pervasive Health and Technology, 2021.

DOI: 10.4108/eai.15-7-2021.170296

[9] P. Mell and T. Grance, The NIST Definition of Cloud Computing, Computer Security Division, Inf. Tech. Lab. Nat. Inst. Stand. Tech. 800(145) (2011).

[10] J. Owens and J. Matthews, A study of passwords and methods used in brute-force SSH attacks, USENIX Workshop on Large Scale Exploits and Emergent Threats (LEET), 2008.

[11] R.L. Rivest, A. Shamir and L. Adleman, A method for obtaining digital signatures and public-key cryptosystems, Commun. ACM Magazine 21(2) (1978) 120–126.

DOI: 10.1145/359340.359342

[12] S.P. Singh and R. Maini, Comparison of data encryption algorithms, Int. J. Comput. Sci. Commun. 2(1) (2011) 125–127.

[13] M. Strebe, Network Security Foundations: Technology Fundamentals for IT Success, Wiley, 2004.