Jul 2026· International Journal for Research in Applied Science and Engineering Technology· Vol 14, pp. 1041-1064· 0 citations
TL;DR
An AI-driven, context-aware Just-In-Time (JIT) cryptographic framework that combines machine learning-based risk assessment with adaptive encryption selection, demonstrating an efficient, scalable, and regulation-compliant approach for adaptive PII protection in modern cloud-edge environments.
Abstract
The rapid growth of cloud and edge computing has increased the challenge of protecting Personally Identifiable
Information (PII) during runtime, where conventional encryption leaves data exposed while in use. Existing approaches rely on
static encryption, fixed access policies, or resource-intensive security mechanisms, limiting adaptability to dynamic threats and
compliance requirements. This paper proposes an AI-driven, context-aware Just-In-Time (JIT) cryptographic framework that
combines machine learning-based risk assessment with adaptive encryption selection. Four classifiers (Random Forest,
XGBoost, SVM, and Neural Network), trained on CICIDS2017, CICIoT2023, and UNSW-NB15 datasets, generate real-time risk
scores based on user behavior, data sensitivity, and execution context. Based on risk levels, the framework dynamically applies
QKD-enhanced AES-256-GCM, AES-256-GCM with RSA-4096, ChaCha20-Poly1305, or tokenization/masking, while zero-trust
access control ensures secure data governance. Evaluation on 1,000 synthetic PII records across nine deployment environments
achieved up to 98.74% classification accuracy, 11.3 ms average JIT encryption latency (6.5 ms at the edge), 92.5/100 security
score, and 100% regulatory compliance, outperforming static encryption frameworks with 30% higher security and lower
latency. The results demonstrate an efficient, scalable, and regulation-compliant approach for adaptive PII protection in modern
cloud-edge environments.
The framework proposed in this paper operationalizes the qualitative risk assessment guidelines from NIST SP 800-30 and SP 800-63 into a quantitative, automated encryption selection mechanism for web applications, evaluated under the hardware platforms, concurrency levels and traffic assumptions described in this study...
Flavius G. Stașac, Cornelia A. Győrödi, Robert Ş. Győrödi· Applied Sciences· 0 citations
A non-invasive PQC proxy, requiring no device, firmware, or vendor-cloud changes, performing ML-KEM-768 encapsulation and ML-DSA-65 authentication (NIST FIPS 203/204) with AES-256-GCM session keys via HKDF, implemented with Open Quantum Safe liboqs on a Raspberry Pi 4B gateway.
Mahedee Zaman Moon, Kaysarul Anas Apurba, Mahamudul Hasan et al.· 0 citations
The proposed three-layer framework is the first to combine word-level alphanumeric obfuscation, matrix scrambling and XOR masking into a single seed/key pipeline evaluated jointly on security, latency and storage cost, rather than treating obfuscation and encryption as separate design problems.
B. Fathimamary, J. Rexy, R. Geetha· Indian Journal of Science an...· 0 citations
A performance–security balanced framework that specifies an adaptive key exchange protocol based on X25519 with HKDF-SHA256, an authenticated encryption using ChaCha20-Poly1305 or AES-GCM with strict nonce/counter management, and hardware acceleration on ARM Cortex-M4 and FPGA modules to reduce computation and energy o...
Shalini B, Jayaganesh J· International journal of com...· 0 citations
Single Sign-On (SSO) is now a common way to log in to cloud platforms, enterprise systems, mobile apps, and shared digital services, but traditional deployments remain vulnerable to credential leakage, phishing, token theft, replay attacks, and identity-provider compromise. Recent research has turned to threshold crypt...
Shashank Angadi· 2026 International Conferenc...· 0 citations
Dynamic adaptive session-based advanced encryption standard (DASE) is an adaptive modification of the advanced encryption standard (AES) that allows the number of rounds to be adjusted to the security needs and timing constraints of each session. Conventional AES deployments run a fixed number of rounds regardless of d...
Jerico S. Baladhay, M. Gamido· Bulletin of Electrical Engin...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.