Computer networking and communications Books

Book SynopsisExamines the design and use of Intrusion Detection Systems (IDS) to secure Supervisory Control and Data Acquisition (SCADA) systems Cyber-attacks on SCADA systems?the control system architecture that uses computers, networked data communications, and graphical user interfaces for high-level process supervisory management?can lead to costly financial consequences or even result in loss of life. Minimizing potential risks and responding to malicious actions requires innovative approaches for monitoring SCADA systems and protecting them from targeted attacks. SCADA Security: Machine Learning Concepts for Intrusion Detection and Prevention is designed to help security and networking professionals develop and deploy accurate and effective Intrusion Detection Systems (IDS) for SCADA systems that leverage autonomous machine learning. Providing expert insights, practical advice, and up-to-date coverage of developments in SCADA security, this authoritative guide presents Table of ContentsForeword ix Preface xi Acronyms xv 1. Introduction 1 2. Background 15 3. SCADA-Based Security Testbed 25 4. Efficient k-Nearest Neighbour Approach Based on Various-Widths Clustering 63 5. SCADA Data-Driven Anomaly Detection 87 6. A Global Anomaly Threshold to Unsupervised Detection 119 7. Threshold Password-Authenticated Secret Sharing Protocols 151 8. Conclusion 179 References 185 Index 195

Read more less

Book SynopsisCovers critical infrastructure protection, providing a rigorous treatment of risk, resilience, complex adaptive systems, and sector dependence Wide in scope, this classroom-tested book is the only one to emphasize a scientific approach to protecting the key infrastructures components of a nation. It analyzes the complex network of entities that make up a nation''s infrastructure, and identifies vulnerabilities and risks in various sectors by combining network science, complexity theory, risk analysis, and modeling and simulation. This approach reduces the complex problem of protecting water supplies, energy pipelines, telecommunication stations, power grid, and Internet and Web networks to a much simpler problem of protecting a few critical nodes. The new third edition of Critical Infrastructure Protection in Homeland Security: Defending a Networked Nation incorporates a broader selection of ideas and sectors than the previous book. Divided into three secTable of ContentsForeword By Sen. Mark Warner xv Foreword By Prof. Andrew Odlyzko xxi Preface xxxiii How to Use this Book xxxvii About the Companion Website xxxix 1 Origins of Critical Infrastructure Protection 1 1.1 Recognition 3 1.2 Natural Disaster Recovery 4 1.3 Definitional Phase 5 1.4 Public–Private Cooperation 8 1.5 Federalism: Whole of Government 8 1.6 Rise of the Framework 10 1.7 Implementing a Risk Strategy 12 1.7.1 Risk‐Informed Decision‐Making 13 1.7.2 Resilience‐Informed Decision‐Making 14 1.7.3 Prevention or Response? 15 1.8 Analysis 16 1.8.1 The Public–Private Partnership (PPP) Conundrum 17 1.8.2 The Information Sharing Conundrum 17 1.8.3 Climate Change Conundrum 17 1.8.4 The Funding Conundrum 17 1.8.5 Spend 80% on 20% of the Country 18 1.9 Exercises 18 1.10 Discussions 19 References 20 2 Risk Strategies 21 2.1 Expected Utility Theory 23 2.1.1 Threat–Asset Pairs 24 2.2 PRA and Fault Trees 24 2.2.1 An Example: Your Car 26 2.3 MRBA and Resource Allocation 26 2.3.1 Another Example: Redundant Power 27 2.4 Cyber Kill Chains are Fault Trees 28 2.5 PRA in the Supply Chain 29 2.6 Protection Versus Response 30 2.7 Threat is an Output 32 2.8 Bayesian Belief Networks 33 2.8.1 A Bayesian Network for Threat 33 2.8.2 Predictive Analytics 34 2.9 Risk of a Natural Disaster 35 2.9.1 Exceedence 35 2.9.2 EP vs. PML Risk 35 2.10 Earthquakes 36 2.11 Black Swans and Risk 36 2.12 Black Swan Floods 37 2.13 Are Natural Disasters Getting Worse? 38 2.14 Black Swan Al Qaeda Attacks 38 2.15 Black Swan Pandemic 39 2.16 Risk and Resilience 41 2.17 Exercises 42 2.18 Discussions 43 References 43 3 Theories of Catastrophe 44 3.1 Normal Accident Theory (NAT) 45 3.2 Blocks and Springs 46 3.3 Bak’s Punctuated Equilibrium Theory 48 3.4 Tragedy of the Commons (TOC) 51 3.4.1 The State Space Diagram 52 3.5 The US Electric Power Grid 52 3.6 Paradox of Enrichment (POE) 55 3.6.1 The Great Recessions 56 3.6.2 Too Much Money 56 3.7 Competitive Exclusion Principle (CEP) 57 3.7.1 Gause’s Law 58 3.7.2 The Self‐Organizing Internet 58 3.7.3 A Monoculture 59 3.8 Paradox of Redundancy (POR) 59 3.9 Resilience of Complex Infrastructure Systems 60 3.9.1 Expected Utility and Risk 60 3.9.2 Countering SOC 60 3.9.3 The TOC Test 61 3.9.4 POE and Nonlinearity 61 3.9.5 CEP and Loss of Redundancy 61 3.9.6 POR and Percolation 62 3.10 Emergence 62 3.10.1 Opposing Forces in Emergent CIKR 62 3.11 Exercises 63 3.12 Discussions 64 References 64 4 Complex CIKR Systems 66 4.1 CIKR as Networks 69 4.1.1 Emergence 72 4.1.2 Classes of CIKR Networks 74 4.1.3 Self‐Organized Networks 75 4.2 Cascading CIKR Systems 76 4.2.1 The Fundamental Resilience Line 80 4.2.2 Critical Factors and Cascades 81 4.2.3 Targeted Attacks 82 4.3 Network Flow Risk and Resilience 85 4.3.1 Braess’s Paradox 86 4.3.2 Flow Network Resilience 87 4.4 Paradox of Redundancy 88 4.4.1 Link Percolation and Robustness 88 4.4.2 Node Percolation and Robustness 89 4.4.3 Blocking Nodes 89 4.5 Network Risk 91 4.5.1 Crude Oil and Keystone XL 92 4.5.2 MBRA Network Resource Allocation 92 4.6 The Fragility Framework 96 4.6.1 The Hodges Fragility Framework 96 4.6.2 The Hodges Fault Tree 97 4.7 Exercises 98 4.8 Discussions 99 References 100 5 Communications 101 5.1 Early Years 102 5.2 Regulatory Structure 105 5.3 The Architecture of the Communications Sector 106 5.3.1 Physical Infrastructure 107 5.3.2 Wireless Networks 108 5.3.3 Extraterrestrial Communication 108 5.3.4 Land Earth Stations 109 5.3.5 Cellular Networks 110 5.3.6 Generations 110 5.3.7 Wi‐Fi Technology 111 5.4 Risk and Resilience Analysis 111 5.4.1 Importance of Carrier Hotels 113 5.4.2 Network Analysis 114 5.4.3 Flow Analysis 116 5.4.4 Robustness 116 5.4.5 The Submarine Cable Network 117 5.4.6 HPM Attacks 117 5.5 Cellular Network Threats 118 5.5.1 Cyber Threats 119 5.5.2 HPM‐Like Threats 120 5.5.3 Physical Threats 120 5.6 Analysis 120 5.7 Exercises 121 5.8 Discussions 122 References 122 6 Internet 123 6.1 The Internet Monoculture 125 6.1.1 The Original Sin 127 6.1.2 How TCP/IP Works 128 6.1.3 More Original Sin 130 6.2 Analyzing The Autonomous System Network 130 6.2.1 The AS500 Network 130 6.2.2 Countermeasures 132 6.3 The RFC Process 133 6.3.1 Emergence of Email 133 6.3.2 Emergence of TCP/IP 133 6.4 The Internet of Things (IOT) 134 6.4.1 Data Scraping 135 6.4.2 IoT Devices 135 6.4.3 More IoT Exploits 136 6.5 Commercialization 137 6.6 The World Wide Web 137 6.7 Internet Governance 138 6.7.1 IAB and IETF 138 6.7.2 ICANN Wars 140 6.7.3 ISOC 141 6.7.4 W3C 141 6.8 Internationalization 142 6.9 Regulation and Balkanization 142 6.10 Exercises 143 6.11 Discussions 144 7 Cyber Threats 145 7.1 Threat Surface 146 7.1.1 Script Kiddies 148 7.1.2 Black‐Hats 149 7.1.3 Weaponized Exploits 149 7.1.4 Ransomware and the NSA 150 7.2 Basic Vulnerabilities 151 7.2.1 The First Exploit 152 7.2.2 TCP/IP Flaws 153 7.2.3 Open Ports 154 7.2.4 Buffer Overflow Exploits 155 7.2.5 DDoS Attacks 155 7.2.6 Email Exploits 156 7.2.7 Flawed Application and System Software 157 7.2.8 Trojans, Worms, Viruses, and Keyloggers 158 7.2.9 Hacking the DNS 159 7.3 Botnets 159 7.3.1 Hardware Flaws 160 7.4 Cyber Risk Analysis 161 7.5 Cyber Infrastructure Risk 161 7.5.1 Blocking Node Analysis 163 7.5.2 Machine Learning Approach 165 7.5.3 Kill Chain Approach 165 7.6 Analysis 166 7.7 Exercises 166 7.8 Discussions 168 References 168 8 Information Technology (IT) 169 8.1 Principles of IT Security 171 8.2 Enterprise Systems 171 8.2.1 Loss of Service 172 8.2.2 Loss of Data 172 8.2.3 Loss of Security 172 8.3 Cyber Defense 173 8.3.1 Authenticate Users 173 8.3.2 Trusted Path 174 8.3.3 Inside the DMZ 175 8.4 Basics of Encryption 176 8.4.1 DES 177 8.4.2 3DES 177 8.4.3 AES 177 8.5 Asymmetric Encryption 177 8.5.1 Public Key Encryption 179 8.5.2 RSA Illustrated 180 8.5.3 Shor’s Algorithm 180 8.6 PKI 181 8.6.1 Definition of PKI 182 8.6.2 Certificates 182 8.6.3 Blockchain 183 8.6.4 FIDO and WebAuth 184 8.6.5 Mathematics of Passwords 184 8.7 Countermeasures 185 8.8 Exercises 187 8.9 Discussions 188 References 188 9 Hacking Social Networks 189 9.1 Web 2.0 and the Social Network 190 9.2 Social Networks Amplify Memes 193 9.3 Topology Matters 194 9.4 Computational Propaganda 194 9.5 The ECHO Chamber 197 9.6 Big Data Analytics 198 9.6.1 Algorithmic Bias 199 9.6.2 The Depths of Deep Learning 200 9.6.3 Data Brokers 200 9.7 GDPR 201 9.8 Social Network Resilience 202 9.9 The Regulated Web 203 9.9.1 The Century of Regulation 203 9.10 Exercises 204 9.11 Discussions 205 References 206 10 Supervisory Control and Data Acquisition 207 10.1 What is SCADA? 208 10.2 SCADA Versus Enterprise Computing Differences 209 10.3 Common Threats 210 10.4 Who is in Charge? 211 10.5 SCADA Everywhere 212 10.6 SCADA Risk Analysis 213 10.7 NIST‐CSF 216 10.8 SFPUC SCADA Redundancy 216 10.8.1 Redundancy as a Resiliency Mechanism 218 10.8.2 Risk Reduction and Resource Allocation 220 10.9 Industrial Control of Power Plants 221 10.9.1 Maximum PML 221 10.9.2 Recovery 221 10.9.3 Node Resilience 222 10.10 Analysis 225 10.11 Exercises 227 10.12 Discussions 228 11 Water and Water Treatment 229 11.1 From Germs to Terrorists 230 11.1.1 Safe Drinking Water Act 231 11.1.2 The WaterISAC 231 11.2 Foundations: SDWA of 1974 232 11.3 The Bioterrorism Act of 2002 232 11.3.1 Is Water for Drinking? 233 11.3.2 Climate Change and Rot: The New Threats 234 11.4 The Architecture of Water Systems 235 11.4.1 The Law of The River 235 11.5 The Hetch Hetchy Network 235 11.5.1 Bottleneck Analysis 236 11.6 Risk Analysis 238 11.6.1 Multidimensional Analysis 238 11.6.2 Blocking Nodes 239 11.7 Hetch Hetchy Investment Strategies 239 11.7.1 The Rational Actor Attacker 240 11.8 Hetch Hetchy Threat Analysis 242 11.8.1 Chem/Bio Threats 242 11.8.2 Earthquake Threats 244 11.8.3 Allocation to Harden Threat–Asset Pairs 244 11.9 Analysis 245 11.10 Exercises 246 11.11 Discussions 247 References 248 12 Energy 249 12.1 Energy Fundamentals 251 12.2 Regulatory Structure of the Energy Sector 252 12.2.1 Evolution of Energy Regulation 252 12.2.2 Other Regulations 253 12.2.3 The Energy ISAC 254 12.3 Interdependent Coal 254 12.3.1 Interdependency with Transportation 254 12.4 The Rise of Oil and the Automobile 255 12.4.1 Oil 255 12.4.2 Natural Gas 256 12.5 Energy Supply Chains 256 12.5.1 PADDs 257 12.5.2 Refineries 258 12.5.3 Transmission 258 12.5.4 Transport4 259 12.5.5 Storage 259 12.5.6 Natural Gas Supply Chains 259 12.5.7 SCADA 259 12.6 The Critical Gulf of Mexico Cluster 259 12.6.1 Refineries 260 12.6.2 Transmission Pipelines 260 12.6.3 Storage 262 12.7 Threat Analysis of the Gulf of Mexico Supply Chain 265 12.8 Network Analysis of the Gulf of Mexico Supply Chain 266 12.9 The Keystonexl Pipeline Controversy 267 12.10 The Natural Gas Supply Chain 268 12.11 Analysis 270 12.12 Exercises 270 12.13 Discussions 271 References 272 13 Electric Power 273 13.1 The Grid 274 13.2 From Death Rays to Vertical Integration 275 13.2.1 Early Regulation 276 13.2.2 Deregulation and EPACT 1992 278 13.2.3 Energy Sector ISAC 278 13.3 Out of Orders 888 and 889 Comes Chaos 279 13.3.1 Economics Versus Physics 280 13.3.2 Betweenness Increases SOC 281 13.4 The North American Grid 281 13.4.1 ACE and Kirchhoff’s Law 283 13.5 Anatomy of a Blackout 283 13.5.1 What Happened on August 14 285 13.6 Threat Analysis 286 13.6.1 Attack Scenario 1: Disruption of Fuel Supply to Power Plants 286 13.6.2 Attack Scenario 2: Destruction of Major Transformers 287 13.6.3 Attack Scenario 3: Disruption of SCADA Communications 287 13.6.4 Attack Scenario 4: Creation of a Cascading Transmission Failure 287 13.7 Risk Analysis 288 13.8 Analysis of WECC96 288 13.9 Analysis 291 13.10 Exercises 292 13.11 Discussions 294 References 294 14 Healthcare and Public Health 295 14.1 The Sector Plan 296 14.2 Roemer’s Model 297 14.2.1 Components of Roemer’s Model 298 14.3 The Complexity of Public Health 299 14.4 Risk Analysis of HPH Sector 300 14.5 Bioterrorism 300 14.5.1 Classification of Biological Agents 301 14.6 Epidemiology 303 14.6.1 The Kermack–McKendrick Model 303 14.6.2 SARS 304 14.7 Predicting Pandemics 304 14.7.1 The Levy Flight Theory of Pandemics 306 14.8 Bio‐Surveillance 307 14.8.1 HealthMap 307 14.8.2 Big Data 307 14.8.3 GeoSentinel 308 14.9 Network Pandemics 309 14.10 The World Travel Network 310 14.11 Exercises 312 14.12 Discussions 313 References 313 15 Transportation 314 15.1 Transportation Under Transformation 316 15.2 The Road to Prosperity 319 15.2.1 Economic Impact 319 15.2.2 The National Highway System (NHS) 319 15.2.3 The Interstate Highway Network Is Resilient 320 15.2.4 The NHS Is Safer 320 15.3 Rail 320 15.3.1 Birth of Regulation 322 15.3.2 Freight Trains 323 15.3.3 Passenger Rail 324 15.3.4 Commuter Rail Resiliency 324 15.4 Air 325 15.4.1 Resilience of the Hub‐and‐Spoke Network 326 15.4.2 Security of Commercial Air Travel 328 15.4.3 How Safe and Secure Is Flying in the United States? 329 15.5 Airport Games 330 15.5.1 GUARDS 330 15.5.2 Bayesian Belief Networks 331 15.6 Exercises 331 15.7 Discussions 332 References 332 16 Supply Chains 334 16.1 The World Is Flat, But Tilted 335 16.1.1 Supply‐Side Supply 336 16.1.2 The Father of Containerization 337 16.1.3 The Perils of Efficient Supply Chains 337 16.2 The World Trade Web 340 16.2.1 Economic Contagions 342 16.3 Risk Assessment 344 16.3.1 MSRAM 344 16.3.2 PROTECT 345 16.4 Analysis 346 16.5 Exercises 347 16.6 Discussions 347 References 348 17 Banking and Finance 349 17.1 The Financial System 351 17.1.1 Federal Reserve vs. US Treasury 352 17.1.2 Operating the System 353 17.1.3 Balancing the Balance Sheet 353 17.1.4 Paradox of Enrichment 354 17.2 Financial Networks 355 17.2.1 FedWire 355 17.2.2 TARGET 356 17.2.3 SWIFT 356 17.2.4 Credit Card Networks 356 17.2.5 3‐D Secure Payment 357 17.3 Virtual Currency 358 17.3.1 Intermediary PayPal 358 17.3.2 ApplePay 358 17.3.3 Cryptocurrency 359 17.4 Hacking The Financial Network 361 17.5 Hot Money 363 17.5.1 The Dutch Disease 364 17.6 The End of Stimulus? 364 17.7 Fractal Markets 365 17.7.1 Efficient Market Hypothesis (EMH) 366 17.7.2 Fractal Market Hypothesis (FMH) 366 17.7.3 Predicting Collapse 367 17.8 Exercises 369 17.9 Discussions 370 References 370 18 Strategies for a Networked Nation 371 18.1 Whole of Government 372 18.2 Risk and Resilience 373 18.3 Complex and Emergent CIKR 373 18.4 Communications and the Internet 374 18.5 Information Technology (IT) 375 18.6 Surveillance Capitalism 375 18.7 Industrial Control Systems 376 18.8 Energy and Power 376 18.9 Global Pandemics 377 18.10 Transportation and Supply Chains 377 18.11 Banking and Finance 378 18.12 Discussions 378 Appendix A: Math: Probability Primer 379 A.1 A Priori Probability 379 A.2 A Pori Probability 381 A.3 Random Networks 382 A.4 Conditional Probability 383 A.5 Bayesian Networks 384 A.6 Bayesian Reasoning 385 References 387 Further Reading 388 Appendix B: Math: Risk and Resilience 389 B.1 Expected Utility Theory 390 B.1.1 Fault Trees 390 B.1.2 Fault Tree Minimization 391 B.1.3 XOR Fault Tree Allocation Algorithm 392 B.2 Bayesian Estimation 392 B.2.1 Bayesian Networks 392 B.3 Exceedence and PML Risk 394 B.3.1 Modeling EP 394 B.3.2 Estimating EP From Data 395 B.3.3 How to Process Time‐Series Data 396 B.4 Network Risk 397 B.5 Model‐Based Risk Analysis (MBRA) 398 B.5.1 Network Resource Allocation 401 B.5.2 Simulation 402 B.5.3 Cascade Risk 402 B.5.4 Flow Risk 402 References 403 Appendix C: Math: Spectral Radius 404 C.1 Network as Matrix 404 C.2 Matrix Diagonalization 404 C.3 Relationship to Risk and Resilience 406 C.3.1 Equation 1 406 C.3.2 Equation 2 407 Reference 407 Appendix D: Math: Tragedy of the Commons 408 D.1 Lotka–Volterra Model 408 D.2 Hopf–Holling Model 408 Appendix E: Math: The DES and RSA Algorithm 410 E.1 DES Encryption 410 E.2 RSA Encryption 410 Appendix F: Glossary 412 Index 414

Read more less

Book SynopsisThe purpose of this book is first to study MATLAB programming concepts, then the basic concepts of modeling and simulation analysis, particularly focus on digital communication simulation. The book will cover the topics practically to describe network routing simulation using MATLAB tool. It will cover the dimensions'' like Wireless network and WSN simulation using MATLAB, then depict the modeling and simulation of vehicles power network in detail along with considering different case studies. Key features of the book include: Discusses different basics and advanced methodology with their fundamental concepts of exploration and exploitation in NETWORK SIMULATION. Elaborates practice questions and simulations in MATLAB Student-friendly and Concise Useful for UG and PG level research scholar Aimed at Practical approach for network simulation with more programs with step by step comments. Based on the Latest technoTable of ContentsList of Figures xi List of Tables xv Foreword xvii Preface xix Acknowledgments xxi Acronyms xxiii 1 Introduction to Modeling, Simulations and Analysis 1 1.1 MATLAB Modeling and Simulation 2 1.2 Computer Networks Performance Modeling and Simulation 4 1.2.1 Computer-Based Models 4 1.2.2 Computer Network Simulation 5 1.3 Discrete-Event Simulation for MATLAB 6 1.3.1 Terminology and Components of Discrete-Event Simulation 7 1.3.2 The Principle of Discrete-Event Simulation 8 1.3.3 ESTA Algorithm 9 1.3.4 ANALYSIS: Determination of Time to Attain Steady State Condition for MATLAB 11 1.4 Simulation Software Selection for MATLAB 11 1.5 Simulation Tools Based on High Performance 12 1.5.1 Network Model 13 1.5.2 Network Simulators 15 1.6 Conclusion 22 References 23 2 Introduction to MATLAB Programming 25 2.1 Introduction 26 2.2 Basic Features 27 2.2.1 Features of MATLAB 27 2.2.2 Uses of MATLAB 27 2.3 Notation, Syntax, and Operations 27 2.3.1 Practical Examples for MATLAB 27 2.3.2 Use of Semicolon (;) in MATLAB 28 2.3.3 Adding Comments 29 2.3.4 Commonly Utilized Operators and Special Characters 29 2.3.5 Unique Variables and Constants 30 2.3.6 Sparing Process 30 2.3.7 MATLAB Decisions 30 2.3.8 MATLAB Loops 31 2.4 Import and Export Operations 32 2.4.1 Import Data in MATLAB 32 2.4.2 Export Data in MATLAB 38 2.5 Elements 40 2.5.1 Commands 40 2.5.2 MATLAB Basics 41 2.5.3 Creating Matrices 42 2.5.4 Framework Operations 42 2.5.5 Using M-Files 44 2.6 Plotting 47 2.6.1 Including Various Types of Graphs 48 2.6.2 Creation of a Multiple Number of Functions in a Similar Graph 49 2.6.3 Creating a Graph According to Various Colors 50 2.7 Uncommon Function 51 2.8 Executable Files Generation 52 2.9 Calling and Accumulating Executable Documents 54 2.10 Calling Objects from External Programs 55 2.11 JAVA Classes 56 2.12 The Guide 56 2.12.1 Open a New User Interface 57 2.12.2 Guide Window Size Setting 58 2.12.3 Design the User Interface 58 2.12.4 Adjust the Components 59 2.12.5 Mark the Push Buttons 60 2.12.6 Menu Items-Rundown Pop-Up 61 2.12.7 Static Test Alteration Procedure in MATLAB 61 2.12.8 Spare the Layout 62 2.12.9 Behavior of the App 63 2.12.10 Produce Data to Plot in MATLAB 63 2.12.11 Pop-Up Menu Characteristics 65 2.12.12 Behavior of Push Button 66 2.13 Effective Programming through MATLAB 67 2.13.1 Condition 68 2.13.2 Practice Programs 68 2.13.3 Specific Functions in MATLAB 69 2.14 Clones Process Using MATLAB 69 2.14.1 GNU Octave 69 2.14.2 Scilab 70 2.14.3 Sage 70 2.15 Parallel MATLAB System 71 2.15.1 Run a Batch Job 71 2.15.2 Run a Batch Parallel Loop 72 2.15.3 Current Folder Browser - Run Script as Batch Job 73 2.16 Conclusion 74 References 75 3 Digital Communication System Simulation Using MATLAB 77 3.1 Introduction to Digital Communication 78 3.1.1 Data Transmission 78 3.1.2 Example 79 3.1.3 The Conversion of Analog and Digital Signals 80 3.1.4 Information, Bandwidth, and Noise 82 3.2 Simulation of Rayleigh Fading Model 83 3.2.1 Rayleigh Fading Basics 83 3.2.2 Rayleigh Fading 84 3.3 BPSK Modulation and Demodulation 86 3.3.1 BPSK Modulation 86 3.3.2 BPSK Demodulation 87 3.4 QPSK Modulation and Demodulation 89 3.4.1 QPSK Transmitter 90 3.4.2 QPSK Receiver 93 3.4.3 Performance Simulation over AWGN 93 3.5 Image Error Rate vs Signal-to-Noise Ratio 94 3.5.1 M-QAM Modulation 94 3.5.2 Baseband Rectangular M-QAM Modulator 95 3.6 Recreation of OFDM Framework 99 3.6.1 Figuring (Es /n0) or (Eb /n0) for OFDM Framework 101 3.6.2 Impact of Cyclic Prefix on Es /n 101 3.6.3 Effect of Unused Subcarriers on Es/N 102 3.6.4 Arrangement of Subcarriers 103 3.6.5 MATLAB Sample Code 103 3.7 Conclusion 108 References 109 4 Statistical Analysis of Network Data Using MATLAB 111 4.1 Introduction to Association Networks 112 4.2 Time Series, Stationary, Time Series Decomposition, De-trending 114 4.2.1 Time Series Analysis 114 4.2.2 Stationarity 115 4.2.3 Time Series Decomposition 117 4.2.4 De-trending 118 4.3 Autocorrelation, Test for Independence, Linear Autoregressive Models 124 4.3.1 Autocorrelation 124 4.3.2 ACF and IACF Parameters 126 4.3.3 Test of Independence 128 4.3.4 Linear Autoregressive Models 135 4.3.5 Linear Prediction and Autoregressive Modeling 137 4.4 Mutual Information and Test for Independence 139 4.4.1 Testing the Significance of the Null Hypothesis I(X; Y) = 0 139 4.4.2 Producing the Mutual Information Distribution from Surrogates 141 4.5 Spurious Cross-Correlation, Vector Autoregressive Models and Dynamic Regression Models 143 4.5.1 Cross Correlation 143 4.5.2 Vector Autoregression (VAR) Models 146 4.5.3 Coupled Dynamical Systems 149 4.6 Conclusion 150 References 150 5 Network Routing Simulation Using MATLAB 155 5.1 Evaluation of Granger Causality Measures on Known Systems 156 5.1.1 A Historical Viewpoint 158 5.1.2 Application to Recreated Information 164 5.1.3 Application to FMRI BOLD Information from a Visuospatial Consideration Undertaking 170 5.2 Demand Modeling and Performance Measurement 173 5.2.1 Objectives 173 5.2.2 Approach to Model Development 174 5.2.3 Development of Models 175 5.2.4 Outline of Findings from Phase Two: Model Validation 176 5.3 Universal Algorithms and Sequential Algorithms 178 5.3.1 Genetic Algorithm for Improvement Utilizing MATLAB 178 5.3.2 Masses Diversity-Measure-Run, Prosperity Scaling 182 5.4 Acoustic-Centric and Radio-Centric Algorithms 190 5.5 AODV Routing Protocol 194 5.5.1 Keeping Up Sequence Numbers 196 5.5.2 Association Breaks 196 5.5.3 Neighborhood Repairs 197 5.5.4 Security Considerations 197 5.6 Conclusion 203 References 204 6 Wireless Network Simulation Using MATLAB 209 6.1 Radio Propagation for Shadowing Methods 210 6.1.1 Radio Propagation Modeling 210 6.1.2 Partition Dependence 210 6.1.3 Small-Scale Blurring 210 6.1.4 Free-Space Propagation 211 6.1.5 Ray Tracing 212 6.1.6 Indoor Propagation 220 6.1.7 Classic Empirical Models 221 6.1.8 COST 231-Hata Model 221 6.1.9 COST 231-Walfish-Ikegami Model 222 6.1.10 Erceg Model 224 6.1.11 Multiple Slope Models 225 6.2 Mobility: Arbitrary Waypoint Demonstrates 234 6.2.1 Random Waypoint Model 234 6.2.2 Regular Problems with Random Waypoint Model 235 6.2.3 Irregular Waypoint on the Border (RWPB) 235 6.2.4 Markovian Waypoint Model 235 6.3 PHY: SNR-Based Bundle Catches, Communication, Dynamic Transmission Rate and Power 235 6.3.1 Mac: Ieee 802.11 236 6.3.2 IEEE 802.11 RTS/CTS Exchange 237 6.4 NET: Ad Hoc Routing 238 6.4.1 Dynamic Destination Sequenced Distance Vector 240 6.4.2 Wireless Routing Protocol 243 6.4.3 Global State Routing 243 6.4.4 Fisheye State Routing 244 6.4.5 Hierarchical State Routing 244 6.4.6 Zone-Based Hierarchical Link State Routing Protocol 245 6.4.7 Clusterhead Gateway Switch Routing Protocol 246 6.4.8 Cluster-Based Routing Protocols 247 6.4.9 Ad Hoc On-Demand Distance Vector Routing 248 6.4.10 Dynamic Source Routing Protocol 249 6.4.11 Temporally Ordered Routing Algorithm 250 6.4.12 Associativity-based Routing 252 6.4.13 Signal Stability Routing 253 6.5 APP: Overlay Routing Protocols 254 6.5.1 System/Application Designs, Optimizations, and Implementations on Overlay Networks 254 6.5.2 Routing Overlays for VoIP 255 6.5.3 Measurement, Modeling, and Improvement of BitTorrent Overlays 256 6.6 Conclusion 259 References 260 7 Mobility Modeling for Vehicular Communication Networks Using MATLAB 267 7.1 Vehicle Network Toolbox 268 7.1.1 Transmit and Receive CAN Messages 268 7.1.2 Examine Received Messages 271 7.1.3 CAN Message Reception Callback Function 272 7.2 Network Management (NM) 274 7.2.1 Plan Your Network Installation 274 7.2.2 Planning Your Network Installation 275 7.2.3 Setting Up a Remote Client Access Configuration 275 7.2.4 Setting Up Local Client Access Configuration 275 7.3 Interaction Layer 277 7.3.1 Directing Protocols in MANET 278 7.3.2 Specially Appointed On-Demand Distance Vector 278 7.3.3 Dynamic Source Routing (DSR) 278 7.3.4 Diagram of Mobility Model 279 7.3.5 Results and Analysis 280 7.3.6 Association Variation Results 282 7.4 Transport Protocols 285 7.4.1 TCP Transport Protocol 285 7.4.2 User Datagram Protocol, or UDP 286 7.4.3 Reliable Data Protocol, or RDP 286 7.4.4 Transmission Control Protocol, or TCP 286 7.5 Conclusion 287 References 288 8 Case Studies and Sample Codes 291 8.1 Case Determination and Structure 292 8.1.1 Exhibiting Analysis 293 8.1.2 Case Example 293 8.1.3 The Best Strategy 293 8.1.4 Impediment of the Technique 293 8.1.5 Sorts of Contextual Investigations 294 8.1.6 Relevant Examinations in Business 294 8.1.7 Summing Up from Logical Investigations 294 8.1.8 History 295 8.1.9 Related Vocations 295 8.2 Case Study 1: Gas Online 296 8.2.1 Load Data into Project 296 8.2.2 Construct Boundary Models 296 8.3 Case Study 2 302 8.3.1 Case 1: Create a Credit Scorecard Dissent 302 8.3.2 Case 2: Binning Information 304 8.4 Case Study 3: Random Waypoint Mobility Model 306 8.5 Case Study 4: Node localization in Wireless Sensor Network 312 8.6 Case Study 5: LEACH Routing Protocol for a WSN 325 8.7 Conclusion 334 References 334

Read more less

Book SynopsisA clear and concise resource on Windows networking, perfect for IT beginners Did you know that nearly 85% of IT support roles require a good understanding of networking concepts? If you are looking to advance your IT career, you will need a foundational understanding of Windows networking. Network Fundamentals covers everything you need to know about network infrastructures, hardware, protocols, and services. You will learn everything you need to gain the highly in-demand Networking Fundamentals MTA Certification. This entry-level credential could be your first step into a rewarding, stable and lucrative IT career. This new Sybex guide covers the basics of networking starting from the ground level, so no previous IT knowledge is required. Each chapter features approachable discussion of the latest networking technologies and concepts, closing with a quiz so you can test your knowledge before moving to the next section. Even if you are brand new to computers, Network Fundamentals wilTable of ContentsIntroduction xv Lesson 1 Understanding Local Area Networking 1 Examining Local Area Networks, Devices, and Data Transfer 3 Defining the LAN 3 Identifying Types of LANs 20 Getting to Know Perimeter Networks 23 Identifying Network Topologies and Standards 25 Identifying Network Topologies 25 Defining Ethernet Standards 29 Identifying the Differences Between Client/Server and Peer-to-Peer 32 Skill Summary 36 Knowledge Assessment 38 Multiple Choice 38 Fill in the Blank 40 Business Case Scenarios 41 Scenario 1-1: Planning and Documenting a Basic LAN 41 Scenario 1-2: Selecting the Correct Networking Model 41 Scenario 1-3: Selecting Network Adapters for Your LAN Computers 41 Scenario 1-4: Configuring the Correct Subnet Mask 41 Solutions to Business Case Scenarios 42 Lesson 2 Defining Networks with the OSI Model 43 Understanding OSI Basics 45 Defining the OSI Model Layers 46 Defining the Communications Subnetwork 48 Define the Physical Layer 49 Define the Data Link Layer 51 Understanding Layer 2 Switching 52 Understanding Layer 3 Switching 56 Understanding Characteristics of Switches 56 Defining the Upper OSI Layers 58 Defining the Transport Layer 59 Defining the Session Layer 62 Defining the Presentation Layer 63 Defining the Application Layer 64 Reviewing the OSI Layers 65 Defining the TCP/IP Model 67 Skill Summary 68 Knowledge Assessment 69 Multiple Choice 69 Fill in the Blank 71 Business Case Scenarios 71 Scenario 2-1: Installing the Appropriate Switch 71 Scenario 2-2: Defining the IP Address and Ports Used by Destination Servers 72 Scenario 2-3: Ensuring a Newly Created Email Account’s Logon is Encrypted 72 Scenario 2-4: Creating a Permanent ARP Table Entry 72 Lesson 3 Understanding Wired and Wireless Networks 75 Recognizing Wired Networks and Media Types 77 Identifying and Working with Twisted-Pair Cables 77 Identifying and Working with Fiber-Optic Cable 86 Understanding Wireless Networks 89 Identifying Wireless Devices 89 Identifying Wireless Networking Standards 91 Skill Summary 97 Knowledge Assessment 98 Multiple Choice 98 Fill in the Blank 100 Business Case Scenarios 100 Scenario 3-1: Selecting Channels for a WLAN 100 Scenario 3-2: Running Cable Drops Properly 100 Scenario 3-3: Selecting Network Adapters for Your WLAN Computers 101 Scenario 3-4: Securing a WLAN 101 Lesson 4 Understanding Internet Protocol 103 Working with IPV4 105 Categorizing IPv4 Addresses 105 Default Gateways and DNS Servers 114 Defining Advanced IPv4 Concepts 117 Working with IPV6 129 Understanding IPv6 130 Configuring IPv6 133 Skill Summary 140 Knowledge Assessment 142 Multiple Choice 142 Fill in the Blank 144 Business Case Scenarios 145 Scenario 4-1: Defining a Private Class C IP Network 145 Scenario 4-2: Specifying the Correct Device 145 Scenario 4-3: Implementing the Correct Class Network 145 Scenario 4-4: Implementing the Correct Subnet Mask 145 Lesson 5 Implementing TCP/IP in the Command Line 147 Using Basic TCP/IP Commands 149 Working with the Command Prompt Window 149 Using ipconfig and ping 152 Working with Advanced TCP/IP Commands 162 Using netstat and nbtstat 162 Using tracert and pathping 167 Using nslookup 170 Using ftp and telnet 171 Using Windows PowerShell 173 Using net 180 Skill Summary 188 Knowledge Assessment 189 Multiple Choice 189 Fill in the Blank 192 Business Case Scenarios 195 Scenario 5-1: Connecting to an FTP Server 195 Scenario 5-2: Troubleshooting TCP/IP Results 195 Scenario 5-3: Documenting a Basic Wide Area Network 196 Scenario 5-4: Using Advanced Ping 196 Lesson 6 Working with Networking Services 199 Setting Up Common Networking Services 201 Working with the Dynamic Host Configuration Protocol (DHCP) 202 Introducing Remote Administration 208 Enable Remote Desktop 210 Access Remote Desktop 210 Defining More Networking Services 213 Defining RRAS 213 Defining IPsec 217 Defining Name Resolution Techniques 218 Defining DNS 218 Defining WINS 222 Skill Summary 223 Knowledge Assessment 225 Multiple Choice 225 Fill in the Blank 227 Business Case Scenarios 227 Scenario 6-1: Selecting the Appropriate Services 227 Scenario 6-2: Selecting the Appropriate Services 228 Scenario 6-3: Setting Up a DHCP Server 228 Scenario 6-4: Setting Up a New DHCP and Migrating Old Computers 228 Scenario 6-5: Managing Remote Connections 228 Lesson 7 Understanding Wide Area Networks 231 Understanding Routing 233 Identifying Static and Dynamic Routing 233 Understanding Quality of Service (QOS) 237 Defining Common WAN Technologies and Connections 239 Defining Packet Switching 239 Defining T-Carriers 249 Defining Other WAN Technologies and Internet Connectivity 250 Skill Summary 252 Knowledge Assessment 254 Multiple Choice 254 Fill in the Blank 256 Business Case Scenarios 256 Scenario 7-1: Selecting the Appropriate Service and Protocol 256 Scenario 7-2: Selecting the Appropriate WAN Technology 256 Scenario 7-3: Recommending the Right Service 257 Scenario 7-4: Setting Up Routes to Other Networks 257 Lesson 8 Defining Network Infrastructures and Network Security 259 Understanding Networks Outside the LAN 261 Defining the Internet 261 Defining Intranets and Extranets 262 Configuring VPN Connections and Authentication 264 Selecting Types of VPN Protocols 265 Selecting Authentication for VPN Connections 267 Creating a VPN Connection Using the Create a VPN Connection Wizard 268 Creating a VPN Connection Using Windows 10 Settings 270 Using Connection Manager (CM) and the Connection Manager Administration Kit (CMAK) 272 Understanding Security Devices and Zones 273 Defining Firewalls and Other Perimeter Security Devices 273 Redefining the DMZ 277 Putting It All Together 278 Skill Summary 281 Knowledge Assessment 282 Multiple Choice 282 Fill in the Blank 284 Business Case Scenarios 285 Scenario 8-1: Setting Up a DMZ 285 Scenario 8-2: Selecting the Appropriate Solution 285 Scenario 8-3: Setting Up a PPTP Server 285 Scenario 8-4: Creating a WAN with VPN 286 Appendix Answer Key 289 Lesson 1: Understanding Local Area Networking 290 Answers to Knowledge Assessment 290 Answers to Business Case Scenarios 291 Lesson 2: Defining Networks with the OSI Model 292 Answers to Knowledge Assessment 292 Answers to Business Case Scenarios 293 Lesson 3: Understanding Wired and Wireless Networks 293 Answers to Knowledge Assessment 293 Answers to Business Case Scenarios 294 Lesson 4: Understanding Internet Protocol 295 Answers to Knowledge Assessment 295 Answers to Business Case Scenarios 296 Lesson 5: Implementing TCP/IP in the Command Line 297 Answers to Knowledge Assessment 297 Answers to Business Case Scenarios 298 Lesson 6: Working with Networking Services 298 Answers to Knowledge Assessment 298 Answers to Business Case Scenarios 299 Lesson 7: Understanding Wide Area Networks 301 Answers to Knowledge Assessment 301 Answers to Business Case Scenarios 302 Lesson 8: Defining Network Infrastructure and Network Security 302 Answers to Knowledge Assessment 302 Answers to Business Case Scenarios 303 Index 305

Read more less

Book SynopsisLeading Cisco authority Todd Lammle helps you gain insights into the new core Cisco network technologies Understanding Cisco Networking Technologies is an important resource for those preparing for the new Cisco Certified Network Associate (CCNA) certification exam as well as IT professionals looking to understand Cisco's latest networking products, services, and technologies. Written by bestselling author and internationally recognized Cisco expert Todd Lammle, this in-depth guide provides the fundamental knowledge required to implement and administer a broad range of modern networking and IT infrastructure. Cisco is the worldwide leader in network technologies80% of the routers on the Internet are Cisco. This authoritative book provides you with a solid foundation in Cisco networking, enabling you to apply your technical knowledge to real-world tasks. Clear and accurate chapters cover topics including routers, switches, controllers and other network comTable of ContentsIntroduction xvii Chapter 1 Internetworking 1 Internetworking Basics 2 Internetworking Models 10 The Layered Approach 11 Advantages of Reference Models 12 The OSI Reference Model 12 The Application Layer 14 The Presentation Layer 15 The Session Layer 16 The Transport Layer 16 The Network Layer 21 The Data Link Layer 23 The Physical Layer 26 Summary 29 Chapter 2 Ethernet Networking and Data Encapsulation 31 Ethernet Networks in Review 32 Collision Domain 32 Broadcast Domain 34 CSMA/CD 35 Half- and Full-Duplex Ethernet 36 Ethernet at the Data Link Layer 38 Ethernet at the Physical Layer 45 Ethernet Cabling 48 Straight-Through Cable 49 Crossover Cable 49 Rolled Cable 51 Fiber Optic 53 Data Encapsulation 55 The Cisco Three-Layer Hierarchical Model 59 The Core Layer 60 The Distribution Layer 60 The Access Layer 61 Summary 61 Chapter 3 Introduction to TCP/IP 63 Introducing TCP/IP 64 A Brief History of TCP/IP 64 TCP/IP and the DoD Model 65 The Process/Application Layer Protocols 66 The Host-to-Host or Transport Layer Protocols 76 The Internet Layer Protocols 85 IP Addressing 93 IP Terminology 94 The Hierarchical IP Addressing Scheme 94 Private IP Addresses (RFC 1918) 99 IPv4 Address Types 101 Layer 2 Broadcasts 101 Layer 3 Broadcasts 102 Unicast Address 102 Multicast Address 103 Summary 104 Chapter 4 Easy Subnetting 105 Subnetting Basics 106 How to Create Subnets 107 Subnet Masks 108 Classless Inter-Domain Routing (CIDR) 109 IP Subnet-Zero 111 Subnetting Class C Addresses 112 Subnetting Class B Addresses 123 Summary 131 Chapter 5 Troubleshooting IP Addressing 133 Cisco’s Way of Troubleshooting IP 134 Determining IP Address Problems 137 Summary 141 Chapter 6 Cisco’s Internetworking Operating System (IOS) 143 The IOS User Interface 144 Cisco IOS 144 Connecting to a Cisco IOS Device 145 Bringing Up a Switch 147 Command-Line Interface (CLI) 147 Entering the CLI 148 Overview of Router Modes 148 CLI Prompts 149 Editing and Help Features 151 Administrative Configurations 156 Hostnames 157 Banners 157 Setting Passwords 159 Encrypting Your Passwords 165 Descriptions 166 Router and Switch Interfaces 169 Bringing Up an Interface 172 Viewing, Saving, and Erasing Configurations 177 Deleting the Configuration and Reloading the Device 179 Verifying Your Configuration 179 Summary 192 Chapter 7 Managing a Cisco Internetwork 193 The Internal Components of a Cisco Router and Switch 194 The Router and Switch Boot Sequence 195 Backing Up and Restoring the Cisco Configuration 196 Backing Up the Cisco Configuration 197 Restoring the Cisco Configuration 199 Erasing the Configuration 199 Configuring DHCP 200 DHCP Relay 202 Verifying DHCP on Cisco IOS 202 Using Telnet 203 Telnetting into Multiple Devices Simultaneously 205 Checking Telnet Connections 205 Checking Telnet Users 206 Closing Telnet Sessions 206 Resolving Hostnames 206 Building a Host Table 207 Using DNS to Resolve Names 208 Checking Network Connectivity and Troubleshooting 210 Using the ping Command 210 Using the traceroute Command 211 Debugging 212 Using the show processes Command 215 Summary 215 Chapter 8 Managing Cisco Devices 217 Managing the Configuration Register 218 Understanding the Configuration Register Bits 218 Checking the Current Configuration Register Value 220 Boot System Commands 221 Recovering Passwords 222 Backing Up and Restoring the Cisco IOS 224 Verifying Flash Memory 226 Backing Up the Cisco IOS 227 Restoring or Upgrading the Cisco Router IOS 227 Using the Cisco IOS File System (Cisco IFS) 230 Licensing 235 Right-To-Use Licenses (Evaluation Licenses) 237 Backing Up and Uninstalling the License 240 Summary 241 Chapter 9 IP Routing 243 Routing Basics 245 The IP Routing Process 247 The Cisco Router Internal Process 253 Testing Your IP Routing Understanding 254 Configuring IP Routing 258 Corp Configuration 259 SF Configuration 261 LA Configuration 265 Configuring IP Routing in Our Network 267 Static Routing 268 Default Routing 273 Dynamic Routing 276 Routing Protocol Basics 276 Routing Information Protocol (RIP) 278 Configuring RIP Routing 279 Holding Down RIP Propagations 282 Summary 284 Chapter 10 Wide Area Networks 287 Introduction to Wide Area Networks 288 WAN Topology Options 289 Defining WAN Terms 291 WAN Connection Bandwidth 292 WAN Connection Types 293 WAN Support 294 Cabling the Serial Wide Area Network 297 Serial Transmission 297 Data Terminal Equipment and Data Communication Equipment 298 High-Level Data-Link Control (HDLC) Protocol 299 Point-to-Point Protocol (PPP) 301 Link Control Protocol (LCP) Configuration Options 303 PPP Session Establishment 303 PPP Authentication Methods 304 Configuring PPP on Cisco Routers 304 Configuring PPP Authentication 305 Verifying and Troubleshooting Serial Links 305 Multilink PPP (MLP) 311 PPP Client (PPPoE) 314 Configuring a PPPoE client 315 Summary 316 Glossary 317 Index 365

Read more less

Book SynopsisCisco expert Todd Lammle prepares you for the NEW Cisco CCNA certification exam! Cisco, the world leader in network technologies, has released the new Cisco Certified Network Associate (CCNA) exam. This consolidated certification exam tests a candidate's ability to implement and administer a wide range of modern IT networking technologies. The CCNA Certification Study Guide: Volume 2 Exam 200-301 covers every exam objective, including network components, IP connectivity and routing, network security, virtual networking, and much more. Clear and accurate chapters provide you with real-world examples, hands-on activities, in-depth explanations, and numerous review questions to ensure that you're fully prepared on exam day. Written by the leading expert on Cisco technologies and certifications, this comprehensive exam guide includes access to the acclaimed Sybex online learning systeman interactive environment featuring practice exams, electronic flashcards,Table of ContentsIntroduction xxv Assessment Test xl Chapter 1 Network Fundamentals 1 Network Components 2 Next-Generation Firewalls and IPS 6 Network Topology Architectures 10 Physical Interfaces and Cables 17 Ethernet Cabling 19 Summary 24 Exam Essentials 24 Review Questions 26 Chapter 2 TCP/IP 29 Introducing TCP/IP 30 TCP/IP and the DoD Model 31 IP Addressing 60 IPv4 Address Types 67 Summary 71 Exam Essentials 71 Review Questions 73 Chapter 3 Easy Subnetting 75 Subnetting Basics 76 Summary 102 Exam Essentials 102 Review Questions 103 Chapter 4 Troubleshooting IP Addressing 105 Cisco’s Way of Troubleshooting IP 106 Summary 114 Exam Essentials 114 Review Questions 115 Chapter 5 IP Routing 117 Routing Basics 119 The IP Routing Process 121 Configuring IP Routing 132 Configuring IP Routing in Our Network 141 Dynamic Routing 150 Routing Information Protocol (RIP) 152 Summary 159 Exam Essentials 159 Review Questions 161 Chapter 6 Open Shortest Path First (OSPF) 163 Open Shortest Path First (OSPF) Basics 164 Configuring OSPF 171 OSPF and Loopback Interfaces 179 Verifying OSPF Configuration 182 Summary 188 Exam Essentials 188 Review Questions 189 Chapter 7 Layer 2 Switching 193 Switching Services 194 Configuring Catalyst Switches 204 Summary 215 Exam Essentials 215 Review Questions 216 Chapter 8 VLANs and Inter-VLAN Routing 219 VLAN Basics 220 Identifying VLANs 224 Routing Between VLANs 229 Configuring VLANs 231 Summary 247 Exam Essentials 247 Review Questions 248 Chapter 9 Enhanced Switched Technologies 251 Spanning Tree Protocol (STP) 252 Types of Spanning-Tree Protocols 259 Modifying and Verifying the Bridge ID 267 Spanning-Tree Failure Consequences 273 PortFast and BPDU Guard 275 EtherChannel 278 Summary 284 Exam Essentials 284 Review Questions 285 Chapter 10 Access Lists 289 Perimeter, Firewall, and Internal Routers 290 Introduction to Access Lists 291 Standard Access Lists 295 Extended Access Lists 303 Monitoring Access Lists 313 Summary 316 Exam Essentials 316 Review Questions 317 Chapter 11 Network Address Translation (NAT) 319 When Do We Use NAT? 320 Types of Network Address Translation 322 NAT Names 322 How NAT Works 323 Testing and Troubleshooting NAT 328 Summary 333 Exam Essentials 333 Review Questions 334 Chapter 12 IP Services 337 Exploring Connected Devices Using CDP and LLDP 338 Network Time Protocol (NTP) 347 SNMP 348 Syslog 352 Secure Shell (SSH) 357 Summary 358 Exam Essentials 358 Review Questions 360 Chapter 13 Security 363 Network Security Threats 365 Three Primary Network Attacks 365 Network Attacks 366 Security Program Elements 374 Layer 2 Security Features 378 Authentication Methods 381 Managing User Accounts 386 Security Password Policy Elements 389 User-Authentication Methods 398 Setting Passwords 400 Summary 407 Exam Essentials 407 Review Questions 408 Chapter 14 First Hop Redundancy Protocol (HSRP) 411 Client Redundancy Issues 412 Introducing First Hop Redundancy Protocol (FHRP) 414 Hot Standby Router Protocol (HSRP) 416 Summary 429 Exam Essentials 429 Review Questions 430 Chapter 15 Virtual Private Networks (VPNs) 433 Virtual Private Networks 434 GRE Tunnels 441 Summary 447 Exam Essentials 447 Review Questions 448 Chapter 16 Quality of Service (QoS) 451 Quality of Service 452 Trust Boundary 454 QoS Mechanisms 455 Summary 461 Exam Essentials 461 Review Questions 462 Chapter 17 Internet Protocol Version 6 (IPv6) 465 Why Do We Need IPv6? 467 The Benefits and Uses of IPv6 467 IPv6 Addressing and Expressions 469 How IPv6 Works in an Internetwork 473 IPv6 Routing Protocols 483 Configuring IPv6 on Our Internetwork 484 Configuring Routing on Our Internetwork 487 Summary 490 Exam Essentials 490 Review Questions 492 Chapter 18 Troubleshooting IP, IPv6, and VLANs 495 Endpoints 496 Servers 497 IP Config 498 Troubleshooting IP Network Connectivity 507 Troubleshooting IPv6 Network Connectivity 522 Troubleshooting VLAN Connectivity 531 Summary 544 Exam Essentials 545 Review Questions 546 Chapter 19 Wireless Technologies 549 Wireless Networks 551 Basic Wireless Devices 553 Wireless Principles 556 Nonoverlapping Wi-Fi channels 565 Radio Frequency (RF) 569 Wireless Security 581 Summary 588 Exam Essentials 588 Review Question 590 Chapter 20 Configuring Wireless Technologies 595 WLAN Deployment Models 596 Setting Up a Wireless LAN Controller (WLC) 602 Joining Access Points (APs) 607 Wireless LAN Controllers (WLC) 610 WLC Port Types 611 WLC Interface Types 614 AP Modes 629 AP and WLC Management Access Connections 633 Summary 655 Exam Essentials 655 Review Questions 657 Chapter 21 Virtualization, Automation, and Programmability 661 Virtual Machine Fundamentals 662 Virtualization Components 665 Virtualization Features 666 Virtualization Types 668 Virtualization Solutions 669 Automation Components 670 Summary 684 Exam Essentials 684 Review Questions 685 Chapter 22 SDN Controllers 689 Traditional Network Monitoring Systems (NMS) 690 Traditional Network Configuration Managers (NCM) 699 Traditional Networking 702 Introduction to SDN 706 Separating the Control Plane 709 Controller-Based Architectures 710 SDN Network Components 712 DNA Center Overview 718 Summary 736 Exam Essentials 737 Review Questions 738 Chapter 23 Configuration Management 743 Team Silos 744 DevOps 748 Infrastructure as Code (IaC) 748 Ansible 750 Ansible Tower/AWX 763 Puppet 764 Chef 772 Summary 781 Exam Essentials 782 Review Questions 783 Appendix Answer to Review Questions 787 Chapter 1: Network Fundamentals 788 Chapter 2: TCP/IP 788 Chapter 3: Easy Subnetting 789 Chapter 4: Troubleshooting IP Addressing 790 Chapter 5: IP Routing 791 Chapter 6: Open Shortest Path First (OSPF) 792 Chapter 7: Layer 2 Switching 792 Chapter 8: VLANs and Inter-VLAN Routing 794 Chapter 9: Enhanced Switched Technologies 795 Chapter 10: Access Lists 796 Chapter 11: Network Address Translation (NAT) 797 Chapter 12: IP Services 797 Chapter 13: Security 798 Chapter 14: First Hop Redundancy Protocol (HSRP) 799 Chapter 15: Virtual Private Networks (VPNs) 800 Chapter 16: Quality of Service (QoS) 801 Chapter 17: Internet Protocol Version 6 (IPv6) 802 Chapter 18: Troubleshooting IP, IPv6, and VLANs 803 Chapter 19: Wireless Technologies 803 Chapter 20: Configuring Wireless Technologies 805 Chapter 21: Virtualization, Automation, and Programmability 806 Chapter 22: SDN Controllers 806 Chapter 23: Configuration Management 808 Index 809

Read more less

Book Synopsis

Read more less

Book SynopsisGet the most out of Microsoft Teams with this comprehensive and insightful resource Mastering Microsoft Teams: Creating a Hub for Successful Teamwork in Office 365shows readers howto communicate intelligently and effectively within Microsoft's powerful Office 365.This book covers all the topics required for a full and comprehensive understanding of collaborating within the Microsoft suite of software, including: Architecture Implementing Teams Teams and Channels Chats, Calls and Meetings Extending Teams with Custom Apps Conferencing Security and Compliance Best Practices for Organizational Success Written for IT administrators, managers, supervisors,and team members who participate or want to participate in a Microsoft Teams environment,Mastering Microsoft Teamsintroduces readers to the architecture and structure of the software before showing, in a straightforward and simpTable of ContentsIntroduction xv Chapter 1 Getting to Know Microsoft Teams 1 Overview of Microsoft Teams 1 Key Benefits of Microsoft Teams 2 Teams for Work 3 Teams for Home 10 Teams for Education 11 Microsoft Teams Collaboration and Acknowledgment 17 Environmental Readiness and User Adoption 18 Teams Adoption 18 Teams Architecture 21 Teams and Microsoft 365 21 The Bottom Line 22 Chapter 2 Teams, Channels, Chats, and Apps 25 Overview of Teams, Channels, Chats, and Apps 25 Teams and Channels 25 Chats 33 Teams Apps 37 Best Practices 40 Team Membership and Roles 41 Creating and Managing Teams 42 Org-wide Teams 43 Team Settings 45 Best Practices 56 Working with Channels 59 Creating Channels 59 Channel Moderation 59 Sending Messages in a Channel 60 Sending Announcements in a Channel 60 Cross-Post a Channel Conversation 63 Best Practices 63 Teams Templates 66 User Presence in Microsoft Teams 70 Status Duration Setting 70 The Bottom Line 72 Chapter 3 Meetings and Conferencing 73 Overview of Meetings and Conferencing 73 Meetings and Conferencing Prerequisites 74 Meetings in Teams 74 Private Meetings vs. Channel Meetings 74 Scheduling a Meeting 78 Joining a Meeting 83 Using Video in Microsoft Teams 87 Recording a Meeting 91 Meeting Notes 93 Meeting Etiquette and Tips 94 Calls in Teams 95 Turn a Chat into a Call 95 Adding Additional People to Call Started from Chat 96 See Your Call History 97 Recommendations and Tips 98 Live Events 98 Event Group Roles 98 Live Event Permissions 100 Scheduling 101 Production 101 Streaming Platform 102 Enterprise Content Delivery Network 103 Attendee Experience 103 Live Event Usage Report 103 Webinars 103 Breakout Rooms 104 Audio Conferencing 105 What Is Audio Conferencing? 105 Conferencing Bridges and Phone Numbers 105 The Bottom Line 105 Chapter 4 Extending Teams with Apps 107 Teams App Platform 107 Core Workloads and Extensible Platform 107 Types of Apps in Microsoft Teams 108 Understanding Apps in Teams 109 Teams App Capabilities 109 Apps Scope 117 Personal Apps 117 Microsoft Apps 117 Third-Party Apps 118 Extending with Custom Apps 121 Teams App Templates 121 Power Platform (Low/No Code) 133 Microsoft Teams App Development Platform 146 The Bottom Line 147 Chapter 5 Administering Teams 149 Teams Administrator Roles 149 Teams Admin Center 150 Teams Menu 150 Teams Policies 154 Update Policies 157 Teams Templates 157 Template Policies 159 Meetings Menu 160 Conference Bridges 161 Meeting Policies 161 Meeting Settings 166 Live Events 168 Messaging Policies Menu 169 Users Menu 171 Guest Access and External Access 171 Teams Settings 172 Teams Apps Menu 176 Manage Apps 176 Permission Policies 177 Setup Policies 180 Customize Store 181 Analytics & Reports Menu 187 The Bottom Line 188 Chapter 6 Security, Compliance, and Governance 191 Security 191 Identity Models and Authentication 191 Multi-Factor Authentication 192 Safe Links 192 Compliance and Governance 195 Information Retention 196 Information Barriers 197 Retention Policies 198 Retention Policies for Microsoft Teams 199 Communication Compliance 200 Communication Compliance in Microsoft Teams 201 Policy-Based Recording for Calls and Meetings 204 Sensitivity Labels 205 Data Loss Prevention 212 Privacy and Microsoft Teams 218 Data Location in Microsoft Teams 218 The Bottom Line 219 Appendix A Accessing Teams 221 Microsoft Teams App 221 Browser Client 221 Desktop Client 225 Mobile Client 230 Appendix B The Bottom Line 235 Chapter 1: Getting to Know Microsoft Teams 235 Chapter 2: Teams, Channels, Chats, and Apps 236 Chapter 3: Meetings and Conferencing 237 Chapter 4: Extending Teams with Apps 239 Chapter 5: Administering Teams 239 Chapter 6: Security, Compliance, and Governance 240 Index 241

Read more less

Book SynopsisGAME THEORY AND MACHINE LEARNING FOR CYBER SECURITY Move beyond the foundations of machine learning and game theory in cyber security to the latest research in this cutting-edge field In Game Theory and Machine Learning for Cyber Security, a team of expert security researchers delivers a collection of central research contributions from both machine learning and game theory applicable to cybersecurity. The distinguished editors have included resources that address open research questions in game theory and machine learning applied to cyber security systems and examine the strengths and limitations of current game theoretic models for cyber security. Readers will explore the vulnerabilities of traditional machine learning algorithms and how they can be mitigated in an adversarial machine learning approach. The book offers a comprehensive suite of solutions to a broad range of technical issues in applying game theory and machine learning to solve cyber security challenges. Beginning with an introduction to foundational concepts in game theory, machine learning, cyber security, and cyber deception, the editors provide readers with resources that discuss the latest in hypergames, behavioral game theory, adversarial machine learning, generative adversarial networks, and multi-agent reinforcement learning. Readers will also enjoy: A thorough introduction to game theory for cyber deception, including scalable algorithms for identifying stealthy attackers in a game theoretic framework, honeypot allocation over attack graphs, and behavioral games for cyber deceptionAn exploration of game theory for cyber security, including actionable game-theoretic adversarial intervention detection against advanced persistent threatsPractical discussions of adversarial machine learning for cyber security, including adversarial machine learning in 5G security and machine learning-driven fault injection in cyber-physical systemsIn-depth examinations of generative models for cyber security Perfect for researchers, students, and experts in the fields of computer science and engineering, Game Theory and Machine Learning for Cyber Security is also an indispensable resource for industry professionals, military personnel, researchers, faculty, and students with an interest in cyber security.Table of ContentsEditor biographies Contributors Foreword Preface Chapter 1: Introduction Christopher D. Kiekintveld, Charles A. Kamhoua, Fei Fang, Quanyan Zhu Part 1: Game Theory for Cyber Deception Chapter 2: Introduction to Game Theory Fei Fang, Shutian Liu, Anjon Basak, Quanyan Zhu, Christopher Kiekintveld, Charles A. Kamhoua Chapter 3: Scalable Algorithms for Identifying Stealthy Attackers in a Game Theoretic Framework Using Deception Anjon Basak, Charles Kamhoua, Sridhar Venkatesan, Marcus Gutierrez, Ahmed H. Anwar, Christopher Kiekintveld Chapter 4: Honeypot Allocation Game over Attack Graphs for Cyber Deception Ahmed H. Anwar, Charles Kamhoua, Nandi Leslie, Christopher Kiekintveld Chapter 5: Evaluating Adaptive Deception Strategies for Cyber Defense with Human Experimentation Palvi Aggarwal, Marcus Gutierrez, Christopher Kiekintveld, Branislav Bosansky, Cleotilde Gonzalez Chapter 6: A Theory of Hypergames on Graphs for Synthesizing Dynamic Cyber Defense with Deception Jie Fu, Abhishek N. Kulkarni Part 2: Game Theory for Cyber Security Chapter 7: Minimax Detection (MAD) for Computer Security: A Dynamic Program Characterization Muhammed O. Sayin, Dinuka Sahabandu, Muhammad Aneeq uz Zaman, Radha Poovendran, Tamer Başar Chapter 8: Sensor Manipulation Games in Cyber Security João P. Hespanha Chapter 9: Adversarial Gaussian Process Regression in Sensor Networks Yi Li, Xenofon Koutsoukos, Yevgeniy Vorobeychik Chapter 10: Moving Target Defense Games for Cyber Security: Theory and Applications Abdelrahman Eldosouky, Shamik Sengupta Chapter 11: Continuous Authentication Security Games Serkan Saritas, Ezzeldin Shereen, Henrik Sandberg, Gyorgy Dan Chapter 12: Cyber Autonomy in Software Security: Techniques and Tactics Tiffany Bao, Yan Shoshitaishvili Part 3: Adversarial Machine Learning for Cyber Security Chapter 13: A Game Theoretic Perspective on Adversarial Machine Learning and Related Cybersecurity Applications Yan Zhou, Murat Kantarcioglu, Bowei Xi Chapter 14: Adversarial Machine Learning in 5G Communications Security Yalin Sagduyu, Tugba Erpek, Yi Shi Chapter 15: Machine Learning in the Hands of a Malicious Adversary: A Near Future If Not Reality Keywhan Chung, Xiao Li, Peicheng Tang, Zeran Zhu, Zbigniew T. Kalbarczyk, Thenkurussi Kesavadas, Ravishankar K. Iyer Chapter 16: Trinity: Trust, Resilience and Interpretability of Machine Learning Models Susmit Jha, Anirban Roy, Brian Jalaian, Gunjan Verma Part 4: Generative Models for Cyber Security Chapter 17: Evading Machine Learning based Network Intrusion Detection Systems with GANs Bolor-Erdene Zolbayar, Ryan Sheatsley, Patrick McDaniel, Mike Weisman Chapter 18: Concealment Charm (ConcealGAN): Automatic Generation of Steganographic Text using Generative Models to Bypass Censorship Nurpeiis Baimukan, Quanyan Zhu Part 5: Reinforcement Learning for Cyber Security Chapter 19: Manipulating Reinforcement Learning: Stealthy Attacks on Cost Signals Yunhan Huang, Quanyan Zhu Chapter 20: Resource-Aware Intrusion Response based on Deep Reinforcement Learning for Software-Defined Internet-of-Battle-Things Seunghyun Yoon, Jin-Hee Cho, Gaurav Dixit, Ing-Ray Chen Part 6: Other Machine Learning approach to Cyber Security Chapter 21: Smart Internet Probing: Scanning Using Adaptive Machine Learning Armin Sarabi, Kun Jin, Mingyan Liu Chapter 22: Semi-automated Parameterization of a Probabilistic Model using Logistic Regression - A Tutorial Stefan Rass, Sandra König, Stefan Schauer Chapter 23: Resilient Distributed Adaptive Cyber-Defense using Blockchain George Cybenko, Roger A. Hallman Chapter 24: Summary and Future Work Quanyan Zhu, Fei Fang

Read more less

Book SynopsisTable of ContentsEditor Biographies xiii List of Contributors xv Foreword Henning Schulzrinne xix Foreword Peter Stuckmann xxi Foreword Akihiro Nakao xxiii Acronyms xxv 1 Toward 6G – Collecting the Research Visions 1 Emmanuel Bertin, Thomas Magedanz, and Noel Crespi 1.1 Time to Start Shaping 6G 1 1.2 Early Directions for Shaping 6G 2 1.2.1 Future Services 2 1.2.2 Moving from 5G to 6G 2 1.2.3 Renewed Value Chain and Collaborations 3 1.3 Book Outline and Main Topics 4 1.3.1 Use Cases and Requirements for 6G 4 1.3.2 Standardization Processes for 6G 4 1.3.3 Energy Consumption and Social Acceptance 4 1.3.4 New Technologies for Radio Access 5 1.3.5 New Technologies for Network Infrastructure 5 1.3.6 New Perspectives for Network Architectures 6 1.3.7 New Technologies for Network Management and Operation 7 1.3.8 Post-Shannon Perspectives 8 2 6G Drivers for B2B Market: E2E Services and Use Cases 9 Marco Giordani, Michele Polese, Andres Laya, Emmanuel Bertin, and Michele Zorzi 2.1 Introduction 9 2.2 Relevance of the B2B market for 6G 10 2.3 Use Cases for the B2B Market 11 2.3.1 Industry and Manufacturing 11 2.3.2 Teleportation 13 2.3.3 Digital Twin 15 2.3.4 Smart Transportation 15 2.3.5 Public Safety 16 2.3.6 Health and Well-being 17 2.3.7 Smart-X IoT 19 2.3.8 Financial World 20 2.4 Conclusions 22 3 6G: The Path Toward Standardization 23 Guy Redmill and Emmanuel Bertin 3.1 Introduction 23 3.2 Standardization: A Long-Term View 24 3.3 IMTs Have Driven Multiple Approaches to Previous Mobile Generations 25 3.4 Stakeholder Ecosystem Fragmentation and Explosion 26 3.5 Shifting Sands: Will Politics Influence Future Standardization Activities? 28 3.6 Standards, the Supply Chain, and the Emergence of Open Models 30 3.7 New Operating Models 32 3.8 Research – What Is the Industry Saying? 33 3.9 Can We Define and Deliver a New Generation of Standards by 2030? 34 3.10 Conclusion 34 4 Greening 6G: New Horizons 39 Zhisheng Niu, Sheng Zhou, and Noel Crespi 4.1 Introduction 39 4.2 Energy Spreadsheet of 6G Network and Its Energy Model 40 4.2.1 Radio Access Network Energy Consumption Model 40 4.2.2 Edge Computing and Learning: Energy Consumption Models and Their Impacts 41 4.2.2.1 Energy Consumption Models in Edge Computing 41 4.2.2.2 Energy Consumption Models in Edge Learning 41 4.3 Greening 6G Radio Access Networks 42 4.3.1 Energy-Efficient Network Planning 42 4.3.1.1 BS Deployment Densification with Directional Transmissions 42 4.3.1.2 Network with Reconfigurable Intelligent Surfaces (RISs) 43 4.3.2 Energy-Efficient Radio Resource Management 44 4.3.2.1 Model-free 44 4.3.2.2 Less Computation Complexity 44 4.3.3 Energy-Efficient Service Provisioning with NFV and SFC 46 4.3.3.1 VNF Consolidation 47 4.3.3.2 Exploiting Renewable Energy 47 4.4 Greening Artificial Intelligence (AI) in 6G Network 47 4.4.1 Energy-Efficient Edge Training 48 4.4.2 Distributed Edge Co-inference and the Energy Trade-off 49 4.5 Conclusions 50 5 “Your 6G or Your Life”: How Can Another G Be Sustainable? 55 Isabelle Dabadie, Marc Vautier, and Emmanuel Bertin 5.1 Introduction 55 5.2 A World in Crisis 56 5.2.1 Ecological Crisis 56 5.2.2 Energy Crises 57 5.2.3 Technological Innovation and Rebound Effect: A Dead End? 57 5.3 A Dilemma for Service Operators 59 5.3.1 Incentives to Reduce Consumption: Shooting Ourselves in the Foot? 59 5.3.2 Incentives to Reduce Overconsumption: Practical Solutions 60 5.3.3 Opportunities. . . and Risks 61 5.4 A Necessary Paradigm Shift 62 5.4.1 The Status Quo Is Risky, Too 62 5.4.2 Creating Value with 6G in the New Paradigm 63 5.4.3 Empowering Consumers to Achieve the “2T CO2/Year/Person” Objective 64 5.5 Summary and Prospects 64 5.5.1 Two Drivers, Three Levels of Action 64 5.5.2 Which Regulation for Future Use of Technologies? 65 5.5.3 Hopes and Prospects for a Sustainable 6G 65 6 Catching the 6G Wave by Using Metamaterials: A Reconfigurable Intelligent Surface Paradigm 69 Marco Di Renzo and Alexis I. Aravanis 6.1 Smart Radio Environments Empowered by Reconfigurable Intelligent Surfaces 69 6.1.1 Reconfigurable Intelligent Surfaces 70 6.2 Types of RISs, Advantages, and Limitations 72 6.2.1 Advantages and Limitations 74 6.3 Experimental Activities 78 6.3.1 Large Arrays of Inexpensive Antennas 78 6.3.1.1 RFocus 78 6.3.1.2 The ScatterMIMO Prototype 79 6.3.2 Metasurface Approaches 80 6.4 RIS Research Areas and Challenges in the 6G Ecosystem 82 7 Potential of THz Broadband Systems for Joint Communication, Radar, and Sensing Applications in 6G 89 Robert Müller and Markus Landmann 8 Non-Terrestrial Networks in 6G 101 Thomas Heyn, Alexander Hofmann, Sahana Raghunandan, and Leszek Raschkowski 8.1 Introduction 101 8.2 Non-Terrestrial Networks in 5G 101 8.3 Innovations in Telecom Satellites 103 8.4 Extended Non-Terrestrial Networks in 6G 105 8.4.1 Motivation 105 8.4.2 Heterogeneous and Dynamic Networks in 6G 107 8.5 Research Challenges Toward 6G-NTN 107 8.5.1 Heterogeneous Non-Terrestrial 6G Networks 109 8.5.2 Required RAN Architecture in 6G to Support NTN 109 8.5.3 Coexistence and Spectrum Sharing 110 8.5.3.1 Regulatory Aspects 111 8.5.3.2 Techniques for Coexistence 111 8.5.4 Energy-Efficient Waveforms 112 8.5.5 Scalable RF Carrier Bandwidth 113 8.6 Conclusion 114 9 Rethinking the IP Framework 117 David Zhe Luo and Noel Crespi 9.1 Introduction 117 9.2 Emerging Applications and Network Requirements 118 9.3 State of the Art 120 9.4 Next-Generation Internet Protocol Framework: Features and Capabilities 122 9.4.1 High-Precision and Deterministic Services 122 9.4.2 Semantic and Flexible Addressing 124 9.4.3 ManyNets Support 125 9.4.4 Intrinsic Security and Privacy 126 9.4.5 High Throughput 126 9.4.6 User-Defined Network Operations 127 9.5 Flexible Addressing System Example 127 9.6 Conclusion 129 10 Computing in the Network: The Core-Edge Continuum in 6G Network 133 Marie-José Montpetit and Noel Crespi 10.1 Introduction 133 10.2 A Few Stops on the Road to Programmable Networks 134 10.2.1 Active Networks 134 10.2.2 Information-centric Networking 135 10.2.3 Compute-first Networking 135 10.2.4 Software-defined Networking 136 10.3 Beyond Softwarization and Clouderization: The Computerization of Networks 137 10.3.1 A New End-to-End Paradigm 137 10.3.2 Computing in the Network Basic Concepts 138 10.3.3 Related Impacts 140 10.3.3.1 The Need for Resource Discovery 140 10.3.3.2 Power Savings for Eco-conscious Networking 141 10.3.3.3 Transport is Still Needed! 141 10.3.3.4 How About Security? 141 10.4 Computing Everywhere: The Core-Edge Continuum 143 10.4.1 A Common Data Layer 143 10.4.2 The New Programmable Data Plane 145 10.4.3 Novel Architectures Using Computing in the Network 147 10.4.3.1 The Newest and Boldest: Quantum Networking 148 10.4.3.2 Creating the Tactile and the Automated Internet: FlexNGIA 148 10.5 Making it Real: Use Cases 149 10.5.1 Computing in the Data Center 150 10.5.1.1 Data and Flow Aggregation 150 10.5.1.2 Key-value Storage and In-network Caching 151 10.5.1.3 Consensus 151 10.5.2 Next-generation IoT and Intelligence Everywhere 152 10.5.2.1 The Internet of Intelligent Things 152 10.5.2.2 Industrial Automation: From Factories to Farms 153 10.5.3 Computing Support for Networked Multimedia 154 10.5.3.1 Video Analytics 154 10.5.3.2 Extended Reality and Multimedia 154 10.5.4 Melding AI and Computing for Measuring and Managing the Network 155 10.5.4.1 Telemetry 155 10.5.4.2 AI/ML for Network Management 156 10.5.5 Network Coding 157 10.6 Conclusion: 6G, the Network, and Computing 158 11 An Approach to Automated Multi-domain Service Production for Future 6G Networks 167 Mohamed Boucadair, Christian Jacquenet, and Emmanuel Bertin 11.1 Introduction 167 11.1.1 Background 167 11.1.2 The Need for Multi-domain 6G Networks 168 11.1.3 Challenges of Multi-domain Service Production and Operation 169 11.2 Framework and Assumptions 170 11.2.1 Terminology 170 11.2.2 Assumptions 171 11.2.2.1 SDN-enabled Domains 171 11.2.2.2 On-service Orchestrators 172 11.2.2.3 Any Kind of Multi-domain Service, Whatever the Vertical 172 11.2.3 Roles 173 11.2.4 Possible Multi-domain Service Delivery Frameworks 174 11.2.4.1 A Set of Bilateral Agreements 174 11.2.4.2 A Set of Bilateral Agreements by Means of a Marketplace 174 11.2.4.3 A Set of Bilateral Agreements by Means of a Broker 175 11.3 Automating the Delivery of Multi-domain Services 175 11.3.1 General Considerations 175 11.3.2 Discovering Partnering Domains and Communicating with Partnering SDN Controllers 176 11.3.3 Multi-domain Service Subscription Framework 178 11.3.4 Multi-domain Service Delivery Procedure 179 11.4 An Example: Dynamic Enforcement of Differentiated, Multi-domainService Traffic Forwarding Policies by Means of Service Function Chaining 181 11.4.1 SFC Control Plane 181 11.4.2 Consistency of Operation 182 11.4.3 Design Considerations 182 11.5 Research Challenges 183 11.5.1 Security of Operations 184 11.5.2 Consistency of Decisions 184 11.5.3 Consistency of Data 184 11.5.4 Performance and Scalability 185 11.6 Conclusion 185 12 6G Access and Edge Computing – ICDT Deep Convergence 187 Chih-Lin I, Jinri Huang, and Noel Crespi 12.1 Introduction 187 12.2 True ICT Convergence: RAN Evolution to 5G 187 12.2.1 C-RAN: Centralized, Cooperative, Cloud, and Clean 190 12.2.1.1 NGFI: From Backhaul to xHaul 191 12.2.1.2 From Cloud to Fog 194 12.2.2 A Turbocharged Edge: MEC 195 12.2.3 Virtualization and Cloud Computing 197 12.3 Deep ICDT Convergence Toward 6G 198 12.3.1 Open and Smart: Two Major Trends Since 5G 198 12.3.1.1 RAN Intelligence – Enabled with Wireless Big Data 199 12.3.1.2 OpenRAN 202 12.3.1.3 Scope of RAN Intelligence Use Cases 205 12.3.2 An OpenRAN Architecture with Native AI: RAN Intelligent Controller (RIC) 208 12.3.2.1 NRT-RIC Functions 209 12.3.2.2 nRT-RIC Functions 211 12.3.3 Key Challenges and Potential Solutions 212 12.3.3.1 Customized Data Collection and Control 212 12.3.3.2 Radio Resource Management and Air Interface Protocol Processing Decoupling 213 12.3.3.3 Open API for xApp 214 12.4 Ecosystem Progress from 5G to 6G 214 12.4.1 O-RAN Alliance 214 12.4.2 Telecom Infrastructure Project 215 12.4.3 GSMA Open Networking Initiative 216 12.4.4 Open-source Communities 216 12.5 Conclusion 217 13 “One Layer to Rule Them All”: Data Layer-oriented 6G Networks 221 Marius Corici and Thomas Magedanz 13.1 Perspective 221 13.2 Motivation 222 13.3 Requirements 223 13.4 Benefits/Opportunities 225 13.5 Data Layer High-level Functionality 227 13.6 Instead of Conclusions 231 14 Long-term Perspectives: Machine Learning for Future Wireless Networks 235 Sławomir Stańczak, Alexander Keller, Renato L.G. Cavalcante, Nikolaus Binder, and Soma Velayutham 14.1 Introduction 235 14.2 Why Machine Learning in Communication? 236 14.2.1 Machine Learning in a Nutshell 237 14.2.1.1 Kernel-based Learning with Projections 237 14.2.1.2 Deep Learning 238 14.2.1.3 Reinforcement Learning 241 14.2.2 Choosing the Right Tool for the Job 242 14.3 Machine Learning in Future Wireless Networks 243 14.3.1 Robust Traffic Prediction for Energy-saving Optimization 244 14.3.2 Fingerprinting-based Localization 244 14.3.3 Joint Power and Beam Optimization 245 14.3.4 Collaborative Compressive Classification 245 14.3.5 Designing Neural Architectures for Sparse Estimation 247 14.3.6 Online Loss Map Reconstruction 248 14.3.7 Learning Non-Orthogonal Multiple Access and Beamforming 248 14.3.8 Simulating Radiative Transfer 250 14.4 The Soul of 6G will be Machine Learning 251 14.5 Conclusion 252 15 Managing the Unmanageable: How to Control Open and Distributed 6G Networks 255 Imen Grida Ben Yahia, Zwi Altman, Joanna Balcerzak, Yosra Ben Slimen, and Emmanuel Bertin 15.1 Introduction 255 15.2 Managing Open and Distributed Radio Access Networks 256 15.2.1 Radio Access Network 256 15.2.2 Innovation in the Standardization Arena 258 15.2.2.1 RAN 258 15.3 Core Network and End-to- End Network Management 260 15.3.1 Network Architecture and Management 260 15.3.2 Changes in Architecture and Network Management from Standardization Perspective 262 15.3.3 Quality of Service and Experience 263 15.3.4 Standardization Effort in Data Analytics 264 15.4 Trends in Machine Learning Suitable to Network Data and 6G 265 15.4.1 Federated Learning 265 15.4.2 Auto-Labeling Techniques and Network Actuations 266 15.5 Conclusions 268 16 6G and the Post-Shannon Theory 271 Juan A. Cabrera, Holger Boche, Christian Deppe, Rafael F. Schaefer, Christian Scheunert, and Frank H. P. Fitzek 16.1 Introduction 271 16.2 Message Identification for Post-Shannon Communication 273 16.2.1 Explicit Construction of RI Codes 277 16.2.2 Secrecy for Free 279 16.2.3 Message Identification Without Randomness 280 16.3 Resources Considered Useless Become Relevant 281 16.3.1 Common Randomness for Nonsecure Communication 281 16.3.2 Feedback in Identification and the Additivity of Bundled Channels 282 16.4 Physical Layer Service Integration 283 16.4.1 Motivation and Requirements 283 16.4.2 Detectability of Denial-of-Service Attacks 284 16.4.3 Further Limits for Computer-Aided Approaches 288 16.5 Other Implementations of Post-Shannon Communication 288 16.5.1 Post-Shannon in Multi-Code CDMA 288 16.5.2 Waveform Coding in MIMO Systems 289 16.6 Conclusions: A Call to Academia and Standardization Bodies 290 Index 295

Read more less

Book SynopsisWIRELESS COMMUNICATION SECURITY Presenting the concepts and advances of wireless communication security, this volume, written and edited by a global team of experts, also goes into the practical applications for the engineer, student, and other industry professionals. Covering a broad range of topics in wireless communication security and its solutions, this outstanding new volume is of great interest to engineers, scientists, and students from a variety of backgrounds and interests. Focusing on providing the theory of wireless communication within the framework of its practical applications, the contributors take on a wealth of topics, integrating seemingly diverse areas under one cover. Wireless Communication Security has been divided into five units. The first unit presents the different protocols and standards for developing a real-time wireless communication security. The second unit presents different widely accepted networks, which are the core of wireless communication secuTable of ContentsPreface xiii 1 M2M in 5G Cellular Networks: Challenges, Proposed Solutions, and Future Directions 1 Kiran Ahuja and Indu Bala 1.1 Introduction 2 1.2 Literature Survey 5 1.3 Survey Challenges and Proposed Solutions of M2M 7 1.3.1 PARCH Overload Problem 8 1.3.2 Inefficient Radio Resource Utilization and Allocation 10 1.3.3 M2M Random Access Challenges 12 1.3.4 Clustering Techniques 13 1.3.5 QoS Provisioning for M2M Communications 15 1.3.6 Less Cost and Low Power Device Requirements 16 1.3.7 Security and Privacy 17 1.4 Conclusion 18 References 19 2 MAC Layer Protocol for Wireless Security 23 Sushmita Kumari and Manisha Bharti 2.1 Introduction 23 2.2 MAC Layer 24 2.2.1 Centralized Control 24 2.2.2 Deterministic Access 24 2.2.3 Non-Deterministic Access 24 2.3 Functions of the MAC Layer 25 2.4 MAC Layer Protocol 25 2.4.1 Random Access Protocol 26 2.4.2 Controlled Access Protocols 29 2.4.3 Channelization 31 2.5 MAC Address 31 2.6 Conclusion and Future Scope 33 References 33 3 Enhanced Image Security Through Hybrid Approach: Protect Your Copyright Over Digital Images 35 Shaifali M. Arora and Poonam Kadian 3.1 Introduction 36 3.2 Literature Review 38 3.3 Design Issues 40 3.3.1 Robustness Against Various Attack Conditions 40 3.3.2 Distortion and Visual Quality 41 3.3.3 Working Domain 42 3.3.4 Human Visual System (HVS) 43 3.3.5 The Trade-Off between Robustness and Imperceptibility 43 3.3.6 Computational Cost 43 3.4 A Secure Grayscale Image Watermarking Based on DWT-SVD 43 3.5 Experimental Results 45 3.6 Conclusion 52 References 52 4 Quantum Computing 59 Manisha Bharti and Tanvika Garg 4.1 Introduction 59 4.2 A Brief History of Quantum Computing 60 4.3 Postulate of Quantum Mechanics 61 4.4 Polarization and Entanglement 61 4.5 Applications and Advancements 63 4.5.1 Cryptography, Teleportation and Communication Networks 63 4.5.2 Quantum Computing and Memories 63 4.5.3 Satellite Communication Based on Quantum Computing 64 4.5.4 Machine Learning & Artificial Intelligence 65 4.6 Optical Quantum Computing 65 4.7 Experimental Realisation of Quantum Computer 66 4.7.1 Hetero-Polymers 66 4.7.2 Ion Traps 67 4.7.3 Quantum Electrodynamics Cavity 67 4.7.4 Quantum Dots 67 4.8 Challenges of Quantum Computing 67 4.9 Conclusion and Future Scope 68 References 68 5 Feature Engineering for Flow-Based IDS 69 Rahul B. Adhao and Vinod K. Pachghare 5.1 Introduction 70 5.1.1 Intrusion Detection System 71 5.1.2 IDS Classification 71 5.2 IP Flows 72 5.2.1 The Architecture of Flow-Based IDS 73 5.2.2 Wireless IDS Designed Using Flow-Based Approach 73 5.2.3 Comparison of Flow- and Packet-Based IDS 74 5.3 Feature Engineering 75 5.3.1 Curse of Dimensionality 76 5.3.2 Feature Selection 78 5.3.3 Feature Categorization 78 5.4 Classification of Feature Selection Technique 78 5.4.1 The Wrapper, Filter, and Embedded Feature Selection 78 5.4.2 Correlation, Consistency, and PCA-Based Feature Selection 80 5.4.3 Similarity, Information Theoretical, Sparse Learning, and Statistical-Based Feature Selection 80 5.4.4 Univariate and Multivariate Feature Selection 81 5.5 Tools and Library for Feature Selection 82 5.6 Literature Review on Feature Selection in Flow-Based IDS 82 5.7 Challenges and Future Scope 86 5.8 Conclusions 87 Acknowledgement 87 References 88 6 Environmental Aware Thermal (EAT) Routing Protocol for Wireless Sensor Networks 91 B. Banuselvasaraswathy and Vimalathithan Rathinasabapathy 6.1 Introduction 92 6.1.1 Single Path Routing Protocol 93 6.1.2 Multipath Routing Protocol 94 6.1.3 Environmental Influence on WSN 96 6.2 Motivation Behind the Work 97 6.3 Novelty of This Work 98 6.4 Related Works 99 6.5 Proposed Environmental Aware Thermal (EAT) Routing Protocol 102 6.5.1 Sensor Node Environmental Modeling and Analysis 104 6.5.2 Single Node Environmental Influence Modeling 105 6.5.3 Multiple Node Modeling 106 6.5.4 Sensor Node Surrounding Temperature Field 106 6.5.5 Sensor Node Remaining Energy Calculation 107 6.5.6 Delay Modeling 107 6.6 Simulation Parameters 108 6.7 Results and Discussion 109 6.7.1 Temperature Influence on Network 109 6.7.2 Power Consumption 109 6.7.3 Lifetime Analysis 110 6.7.4 Delay Analysis 111 6.8 Conclusion 112 References 112 7 A Comprehensive Study of Intrusion Detection and Prevention Systems 115 Bhoopesh Singh Bhati, Dikshita, Nitesh Singh Bhati and Garvit Chugh 7.1 Introduction 116 7.1.1 Intrusion and Detection 116 7.1.2 Some Basic Definitions 116 7.1.3 Intrusion Detection and Prevention System 117 7.1.4 Need for IDPS: More Than Ever 118 7.1.5 Introduction to Alarms 118 7.1.6 Components of an IDPS 119 7.2 Configuring IDPS 120 7.2.1 Network Architecture of IDPS 120 7.2.2 A Glance at Common Types 121 7.2.2.1 Network-Based IDS 123 7.2.2.2 Host-Based IDS 124 7.2.3 Intrusion Detection Techniques 125 7.2.3.1 Conventional Techniques 125 7.2.3.2 Machine Learning-Based and Hybrid Techniques 128 7.2.4 Three Considerations 131 7.2.4.1 Location of Sensors 131 7.2.4.2 Security Capabilities 131 7.2.4.3 Management Capabilities 133 7.2.5 Administrators’ Functions 134 7.2.5.1 Deployment 134 7.2.5.2 Testing 134 7.2.5.3 Security Consideration of IDPS 135 7.2.5.4 Regular Backups and Monitoring 135 7.2.6 Types of Events Detected 135 7.2.7 Role of State in Network Security 136 7.3 Literature Review 137 7.4 Conclusion 138 References 139 8 Hardware Devices Integration With IoT 143 Sushant Kumar and Saurabh Mukherjee 8.1 Introduction 143 8.2 Literature Review 144 8.3 Component Description 146 8.3.1 Arduino Board UNO 146 8.3.2 Raspberry Pi 147 8.4 Case Studies 148 8.4.1 Ultrasonic Sensor 148 8.4.2 Temperature and Humidity Sensor 150 8.4.3 Weather Monitoring System Using Raspberry Pi 151 8.5 Drawbacks of Arduino and Raspberry Pi 153 8.6 Challenges in IoT 154 8.6.1 Design Challenges 154 8.6.2 Security Challenges 155 8.6.3 Development Challenges 155 8.7 Conclusion 155 8.8 Annexures 156 References 157 Additional Resources 158 9 Depth Analysis On DoS & DDoS Attacks 159 Gaurav Nayak, Anjana Mishra, Uditman Samal and Brojo Kishore Mishra 9.1 Introduction 160 9.1.1 Objective and Motivation 161 9.1.2 Symptoms and Manifestations 163 9.2 Literature Survey 163 9.3 Timeline of DoS and DDoS Attacks 164 9.4 Evolution of Denial of Service (DoS) & Distributed Denial of Service (DDoS) 165 9.5 DDoS Attacks: A Taxonomic Classification 166 9.5.1 Classification Based on Degree of Automation 166 9.5.2 Classification Based on Exploited Vulnerability 167 9.5.3 Classification Based on Rate Dynamics of Attacks 168 9.5.4 Classification Based on Impact 168 9.6 Transmission Control Protocol 169 9.6.1 TCP Three-Way Handshake 169 9.7 User Datagram Protocol 170 9.7.1 UDP Header 170 9.8 Types of DDoS Attacks 170 9.8.1 TCP SYN Flooding Attack 171 9.8.2 UDP Flooding Attack 172 9.8.3 Smurf Attack 172 9.8.4 Ping of Death Attack 173 9.8.5 HTTP Flooding Attack 174 9.9 Impact of DoS/DDoS on Various Areas 175 9.9.1 DoS/DDoS Attacks on VoIP Networks Using SIP 175 9.9.2 DoS/DDoS Attacks on VANET 175 9.9.3 DoS/DDoS Attacks on Smart Grid System 176 9.9.4 DoS/DDoS Attacks in IoT-Based Devices 176 9.10 Countermeasures to DDoS Attack 177 9.10.1 Prevent Being Agent/Secondary Target 177 9.10.2 Detect and Neutralize Attacker 178 9.10.3 Potential Threats Detection/Prevention 178 9.10.4 DDoS Attacks and How to Avoid Them 178 9.10.5 Deflect Attack 178 9.10.6 Post-Attack Forensics 179 9.11 Conclusion 179 9.12 Future Scope 180 References 180 10 SQL Injection Attack on Database System 183 Mohit Kumar 10.1 Introduction 183 10.1.1 Types of Vulnerabilities 184 10.1.2 Types of SQL Injection Attack 185 10.1.3 Impact of SQL Injection Attack 186 10.2 Objective and Motivation 186 10.3 Process of SQL Injection Attack 188 10.4 Related Work 188 10.5 Literature Review 189 10.6 Implementation of the SQL Injection Attack 192 10.6.1 Access the Database Using the 1=1 SQL Injection Statement 192 10.6.2 Access the Database Using the ““=’’’’ SQL Injection Statement 193 10.6.3 Access and Upgrade the Database by Using Batch SQL Injection Statement 194 10.7 Detection of SQL Injection Attack 196 10.8 Prevention/Mitigation from SQL Injection Attack 196 10.9 Conclusion 197 References 197 11 Machine Learning Techniques for Face Authentication System for Security Purposes 199 Vibhuti Jain, Madhavendra Singh and Jagannath Jayanti 11.1 Introduction 200 11.2 Face Recognition System (FRS) in Security 201 11.3 Theory 202 11.3.1 Neural Networks 202 11.3.2 Convolutional Neural Network (CNN) 204 11.3.3 K-Nearest Neighbors (KNN) 207 11.3.4 Support Vector Machine (SVM) 208 11.3.5 Logistic Regression (LR) 209 11.3.6 Naive Bayes (NB) 210 11.3.7 Decision Tree (DT) 211 11.4 Experimental Methodology 212 11.4.1 Dataset 212 11.4.2 Convolutional Neural Network (CNN) 212 11.4.3 Other Machine Learning Techniques 215 11.5 Results 218 11.6 Conclusion 220 References 220 12 Estimation of Computation Time for Software-Defined Networking-Based Data Traffic Offloading System in Heterogeneous Network 223 Shashila S. Abayagunawardhana, Malka N. Halgamuge and Charitha Subhashi Jayasekara 12.1 Introduction 224 12.1.1 Motivation 225 12.1.2 Objective 228 12.1.3 The Main Contributions of This Chapter 228 12.2 Analysis of SDN-TOS Mechanism 229 12.2.1 Key Components of SDN-TOS 229 12.2.2 LTE/Wi-Fi in a Heterogeneous Network (HetNet) 229 12.2.3 Centralized SDN Controller 229 12.2.4 Key Design Considerations of SDN-TOS 230 12.2.4.1 The System Architecture 230 12.2.4.2 Mininet Wi-Fi Emulated Networks 230 12.2.4.3 Software-Defined Networking Controller 231 12.3 Materials and Methods 232 12.3.1 Estimating Time Consumption for Mininet Wi-Fi Emulator 232 12.3.1.1 Total Time Consumption for Offloading the Data Traffic by Service Provider 233 12.3.1.2 Total Time Consumption of Mininet Wi-Fi Emulator (Time Consumption for Both LTE and Wi-Fi Network) 236 12.3.2 Estimating Time Consumption for SDN Controller 237 12.3.2.1 Total Response Time for Sub-Controller 237 12.3.2.2 Total Response Time for The Total Process of Centralized SDN Controller 238 12.3.3 Estimating Total Time Consumption for SDN-Based Traffic Offloading System (sdn-tos) 239 12.4 Simulation Results 240 12.4.1 Effect of Computational Data Traffic θI on Total Response Time (TA)/Service Provider A and CSP Approach 242 12.4.2 Effect of Computational Data Traffic θI on Total Response Time (TA) for Different Service Providers/Service Provider A and Service Provider B 243 12.5 Discussion 244 12.6 Conclusion 246 References 247 About the Editors 253 Index 255

Read more less

Book SynopsisCORPORATE CYBERSECURITY An insider's guide showing companies how to spot and remedy vulnerabilities in their security programs A bug bounty program is offered by organizations for people to receive recognition and compensation for reporting bugs, especially those pertaining to security exploits and vulnerabilities. Corporate Cybersecurity gives cyber and application security engineers (who may have little or no experience with a bounty program) a hands-on guide for creating or managing an effective bug bounty program. Written by a cyber security expert, the book is filled with the information, guidelines, and tools that engineers can adopt to sharpen their skills and become knowledgeable in researching, configuring, and managing bug bounty programs. This book addresses the technical aspect of tooling and managing a bug bounty program and discusses common issues that engineers may run into on a daily basis. The author includes information on the often-overlTable of ContentsForeword xiii Acknowledgments xv Part 1 Bug Bounty Overview 1 1 The Evolution of Bug Bounty Programs 3 1.1 Making History 3 1.2 Conservative Blockers 4 1.3 Increased Threat Actor Activity 4 1.4 Security Researcher Scams 5 1.5 Applications Are a Small Consideration 5 1.6 Enormous Budgetary Requirements 5 1.7 Other Security Tooling as a Priority 6 1.8 Vulnerability Disclosure Programs vs Bug Bounty Programs 6 1.8.1 Vulnerability Disclosure Programs 6 1.8.2 Bug Bounty Programs 7 1.9 Program Managers 7 1.10 The Law 7 1.11 Redefining Security Research 8 1.12 Taking Action 8 1.12.1 Get to Know Security Researchers 9 1.12.2 Fair and Just Resolution 9 1.12.3 Managing Disclosure 9 1.12.4 Corrections 9 1.12.5 Specific Community Involvement 9 Part 2 Evaluating Programs 11 2 Assessing Current Vulnerability Management Processes 13 2.1 Who Runs a Bug Bounty Program? 13 2.2 Determining Security Posture 13 2.3 Management 14 2.3.1 Software Engineering Teams 14 2.3.2 Security Departments (Security Operations, Fraud Prevention, Governance/Risk/Compliance, Edge Controls, Vulnerability Management, Endpoint Detection, and Response) 14 2.3.3 Infrastructure Teams 14 2.3.4 Legal Department 14 2.3.5 Communications Team 14 2.4 Important Questions 15 2.5 Software Engineering 15 2.5.1 Which Processes Are in Place for Secure Coding? Do the Software Engineers Understand the Importance of Mitigating the Risks Associated with Vulnerable Code? 15 2.5.2 How Effective Are Current Communication Processes? Will Vulnerabilities Be Quickly Resolved If Brought to Their Attention? 15 2.5.3 Is the Breadth of Our Enterprise’s Web and Mobile Applications Immense? Which Processes Are Engineers Using for Development in the Software Development Lifecycle? 16 2.6 Security Departments 16 2.6.1 How Does Security Operations Manage Incidents? Will Employee Assistance Be Provided from the Security Operations Team If a Threat Actor Manages to Exploit an Application Vulnerability? Which Tools Do They Have in Place? 16 2.6.2 What Does the Fraud Prevention Team Do to Prevent Malicious Activities? How Many Occurrences Do They See of Issues such as Account Takeover, and Could They Potentially Create Application Vulnerabilities? 16 2.6.3 Are There Any Compliance Practices in Place and, If So, How Do They Affect the Vulnerability Management Process? What Does the Application Security Team Have to Do to Assist in Enterprise Compliance? 17 2.6.4 What Edge Tooling is in Place to Prevent Attacks? Are Any of the Enterprise Applications at Risk of Being Exploited due to an IoT (Internet of Things) Device? 17 2.6.5 How Often Does Our Vulnerability Management Team Push for Updates? How Does the Vulnerability Management Team Ensure Servers in which Enterprise Applications Reside Are Secure? 17 2.7 Infrastructure Teams 17 2.7.1 What Are Infrastructure Teams Doing to Ensure Best Security Practices Are Enabled? How Long Will It Take the Infrastructure Team to Resolve a Serious Issue When a Server-side Web Application is Exploited, or During a Subdomain Takeover Vulnerability? 17 2.7.2 Is There Effective Communication between Infrastructure, Vulnerability Management, Security Operations, and Endpoint Detection and Response? 18 2.8 Legal Department 18 2.8.1 How Well Refined is the Relationship between the Application Security Team and the Legal Department? 18 2.8.2 What Criteria Are/Will Be Set Out for the Escalation of Issues? 18 2.8.3 Does the Legal Department Understand the Necessity of Bug Bounty Program Management? 18 2.9 Communications Team 18 2.9.1 Has the Communications Team Dealt with Security Researchers Before? is the Importance Understood? 18 2.9.2 Was the Communications Team Informed of Bug Bounty Program Expectations? 19 2.10 Engineers 19 2.11 Program Readiness 19 3 Evaluating Program Operations 21 3.1 One Size Does Not Fit All 21 3.2 Realistic Program Scenarios 21 3.3 Ad Hoc Program 22 3.4 Note 24 3.5 Applied Knowledge 24 3.5.1 Applied Knowledge #1 24 3.5.1.1 Private Programs 25 3.5.2 Applied Knowledge #2 25 3.5.2.1 Public Programs 25 3.5.3 Applied Knowledge #3 26 3.5.3.1 Hybrid Models 26 3.6 Crowdsourced Platforms 27 3.7 Platform Pricing and Services 28 3.8 Managed Services 28 3.9 Opting Out of Managed Services 29 3.10 On-demand Penetration Tests 29 Part 3 Program Setup 31 4 Defining Program Scope and Bounties 33 4.1 What is a Bounty? 33 4.2 Understanding Scope 33 4.3 How to Create Scope 34 4.3.1 Models 34 4.4 Understanding Wildcards 34 4.4.1 Subdomain 35 4.4.2 Domain 35 4.4.3 Specific Domain Path or Specific Subdomain Path 35 4.5 Determining Asset Allocation 36 4.6 Asset Risk 37 4.7 Understanding Out of Scope 37 4.8 Vulnerability Types 38 4.8.1 Denial of Service (DOS) or Distributed Denial of Service (DDoS) Attacks 38 4.8.2 Social Engineering Attacks 38 4.8.3 Brute Force or Rate Limiting 38 4.8.4 Account and Email Enumeration 38 4.8.5 Self-XSS 39 4.8.6 Clickjacking 39 4.8.7 Miscellaneous 39 4.9 When is an Asset Really Out of Scope? 39 4.10 The House Wins – Or Does It? 40 4.11 Fair Judgment on Bounties 42 4.12 Post-mortem 43 4.13 Awareness and Reputational Damage 43 4.14 Putting It All Together 44 4.15 Bug Bounty Payments 44 4.15.1 Determining Payments 45 4.15.2 Bonus Payments 46 4.15.3 Nonmonetary Rewards 46 5 Understanding Safe Harbor and Service Level Agreements 49 5.1 What is “Safe Harbor”? 49 5.1.1 The Reality of Safe Harbor 49 5.1.2 Fear and Reluctance 49 5.1.3 Writing Safe Harbor Agreements 50 5.1.4 Example Safe Harbor Agreement 50 5.2 Retaliation against a Rogue Researcher (Cybercriminal or Threat/Bad Actor) 51 5.3 Service Level Agreements (SLAs) 52 5.3.1 Resolution Times 53 5.3.2 Triage Times 53 6 Program Configuration 55 6.1 Understanding Options 55 6.2 Bugcrowd 55 6.2.1 Creating the Program 55 6.2.2 Program Overview 61 6.2.2.1 The Program Dashboard 61 6.2.2.2 The Crowd Control Navbar 63 Summary 63 Submissions 63 Researchers 64 Rewards 65 Insights Dashboard 65 Reports 66 6.2.3 Advanced Program Configuration and Modification 66 6.2.3.1 Program Brief 66 6.2.3.2 Scope and Rewards 67 6.2.3.3 Integrations 72 6.2.3.4 Announcements 73 6.2.3.5 Manage Team 74 6.2.3.6 Submissions 75 6.2.4 Profile Settings 76 6.2.4.1 The Profile and Account 78 6.2.4.2 Security 78 6.2.4.3 Notification Settings 79 6.2.4.4 API Credentials 80 6.2.5 Enterprise “Profile” Settings 81 6.2.5.1 Management and Configuration 81 6.2.5.2 Organization Details 81 6.2.5.3 Team Members 81 6.2.5.4 Targets 81 6.2.5.5 Authentication 81 6.2.5.6 Domains 82 6.2.5.7 Accounting 83 6.3 HackerOne 84 6.3.1 Program Settings 85 6.3.1.1 General 85 6.3.1.2 Information 86 6.3.1.3 Product Edition 86 6.3.1.4 Authentication 87 6.3.1.5 Verified Domains 88 6.3.1.6 Credential Management 89 6.3.1.7 Group Management 89 6.3.1.8 User Management 90 6.3.1.9 Audit Log 91 6.3.2 Billing 92 6.3.2.1 Overview 92 6.3.2.2 Credit Card 92 6.3.2.3 Prepayment 92 6.3.3 Program 93 6.3.3.1 Policy 93 6.3.3.2 Scope 93 6.3.3.3 Submit Report Form 95 6.3.3.4 Response Targets 96 6.3.3.5 Metrics Display 97 6.3.3.6 Email Notifications 97 6.3.3.7 Inbox Views 98 6.3.3.8 Disclosure 98 6.3.3.9 Custom Fields 98 6.3.3.10 Invitations 99 6.3.3.11 Submission 100 6.3.3.12 Message Hackers 101 6.3.3.13 Email Forwarding 102 6.3.3.14 Embedded Submission Form 102 6.3.3.15 Bounties 103 6.3.3.16 Swag 103 6.3.3.17 Common Responses 104 6.3.3.18 Triggers 106 6.3.3.19 Integrations 107 6.3.3.20 API 107 6.3.3.21 Hackbot 107 6.3.3.22 Export Reports 108 6.3.3.23 Profile Settings 108 6.3.4 Inbox 108 6.3.4.1 Report Details 109 6.3.4.2 Timeline 109 6.4 Summary 110 Part 4 Vulnerability Reports and Disclosure 111 7 Triage and Bug Management 113 7.1 Understanding Triage 113 7.1.1 Validation 113 7.1.2 Lessons Learned 115 7.1.3 Vulnerability Mishaps 115 7.1.4 Managed Services 115 7.1.5 Self-service 116 7.2 Bug Management 116 7.2.1 Vulnerability Priority 116 7.2.2 Vulnerability Examples 117 7.2.2.1 Reflected XSS on a login portal 117 Report and Triage 117 Validation 117 7.2.2.2 Open redirect vulnerability 117 Report and Triage 117 Validation 118 7.2.2.3 Leaked internal Structured Query Language (SQL) server credentials 118 Report and Triage 118 Validation 118 7.3 Answers 118 7.3.1 Vulnerability Rating-test Summary 119 7.3.1.1 Reflected XSS in a login portal 118 7.3.1.2 Open redirect vulnerability 118 7.3.1.3 Leaked internal SQL server credentials 118 7.3.2 Complexity vs Rating 119 7.3.3 Projected Ratings 120 7.3.4 Ticketing and Internal SLA 120 7.3.4.1 Creating Tickets 120 8 Vulnerability Disclosure Information 123 8.1 Understanding Public Disclosure 123 8.1.1 Making the Decision 123 8.1.1.1 Private Programs 123 The Bottom Line 124 8.1.1.2 Public Programs 125 The Bottom Line 126 8.2 CVE Responsibility 126 8.2.1 What are CVEs? 126 8.2.2 Program Manager Responsibilities 126 8.2.3 Hardware CVEs 126 8.2.4 Software and Product CVEs 128 8.2.5 Third-party CVEs 128 8.3 Submission Options 130 8.3.1 In-house Submissions 130 8.3.2 Program Managed Submissions and Hands-off Submissions 130 8.3.2.1 Program Managed Submissions 130 8.3.2.2 Hands-off Submissions 131 Part 5 Internal and External Communication 133 9 Development and Application Security Collaboration 135 9.1 Key Role Differences 135 9.1.1 Application Security Engineer 135 9.1.2 Development 135 9.2 Facing a Ticking Clock 136 9.3 Meaningful Vulnerability Reporting 136 9.4 Communicating Expectations 137 9.5 Pushback, Escalations, and Exceptions 138 9.5.1 Internal steps 138 9.5.2 External steps 139 9.5.2 Escalations 139 9.5.3 Summary 140 9.6 Continuous Accountability 141 9.6.1 Tracking 141 9.6.2 Missed Deadlines 141 10 Hacker and Program Interaction Essentials 143 10.1 Understanding the Hacker 143 10.1.1 Money, Ethics, or Both? 143 10.1.2 Case Study Analysis 145 10.2 Invalidating False Positives 145 10.2.1 Intake Process and Breaking the News 145 10.2.2 Dealing with a Toxic Hacker 147 10.3 Managed Program Considerations 147 10.4 In-house Programs 148 10.5 Blackmail or Possible Threat Actor 151 10.6 Public Threats or Disclosure 151 10.7 Program Warning Messages 153 10.8 Threat Actor or Security Researcher? 153 10.9 Messaging Researchers 155 10.9.1 Security Researcher Interviews 155 10.9.2 Bug Bounty Program Manager Interviews 159 10.10 Summary 164 Part 6 Assessments and Expansions 165 11 Internal Assessments 167 11.1 Introduction to Internal Assessments 167 11.2 Proactive Vs Reactive Testing 167 11.3 Passive Assessments 168 11.3.1 Shodan 168 11.3.1.1 Using Shodan 168 11.3.2 Amass/crt.sh 171 11.3.2.1 Amass 172 11.3.2.2 crt.sh 173 11.4 Active Assessments 173 11.4.1 nmapAutomator.sh 173 11.4.2 Sn1per 175 11.4.3 Owasp Zap 175 11.4.4 Dalfox 177 11.4.5 Dirsearch 179 11.5 Passive/Active Summary 180 11.6 Additional Considerations: Professional Testing and Third-Party Risk 180 12 Expanding Scope 181 12.1 Communicating with the Team 181 12.2 Costs of Expansion 182 12.3 When to Expand Scope 182 12.4 Alternatives to Scope Expansion 183 12.5 Managing Expansion 183 13 Public Release 185 13.1 Understanding the Public Program 185 13.2 The “Right” Time 185 13.3 Recommended Release 186 13.3.1 Requirements 186 13.4 Rolling Backwards 186 13.5 Summary 187 Index 189

Read more less

Book SynopsisCYBERSECURITY IN INTELLIGENT NETWORKING SYSTEMS Help protect your network system with this important reference work on cybersecurity Cybersecurity and privacy are critical to modern network systems. As various malicious threats have been launched that target critical online servicessuch as e-commerce, e-health, social networks, and other major cyber applicationsit has become more critical to protect important information from being accessed. Data-driven network intelligence is a crucial development in protecting the security of modern network systems and ensuring information privacy. Cybersecurity in Intelligent Networking Systems provides a background introduction to data-driven cybersecurity, privacy preservation, and adversarial machine learning. It offers a comprehensive introduction to exploring technologies, applications, and issues in data-driven cyber infrastructure. It describes a proposed novel, data-driven network intelligence system that helps provide robust and trustworthy safeguards with edge-enabled cyber infrastructure, edge-enabled artificial intelligence (AI) engines, and threat intelligence. Focusing on encryption-based security protocol, this book also highlights the capability of a network intelligence system in helping target and identify unauthorized access, malicious interactions, and the destruction of critical information and communication technology. Cybersecurity in Intelligent Networking Systems readers will also find: Fundamentals in AI for cybersecurity, including artificial intelligence, machine learning, and security threats Latest technologies in data-driven privacy preservation, including differential privacy, federated learning, and homomorphic encryption Key areas in adversarial machine learning, from both offense and defense perspectives Descriptions of network anomalies and cyber threats Background information on data-driven network intelligence for cybersecurity Robust and secure edge intelligence for network anomaly detection against cyber intrusions Detailed descriptions of the design of privacy-preserving security protocols Cybersecurity in Intelligent Networking Systems is an essential reference for all professional computer engineers and researchers in cybersecurity and artificial intelligence, as well as graduate students in these fields.Table of ContentsContents Preface xiii Acknowledgments xvii Acronyms xix 1 Cybersecurity in the Era of Artificial Intelligence 1 1.1 Artificial Intelligence for Cybersecurity . 2 1.1.1 Artificial Intelligence 2 1.1.2 Machine Learning 4 1.1.3 Data-Driven Workflow for Cybersecurity . 6 1.2 Key Areas and Challenges 7 1.2.1 Anomaly Detection . 8 1.2.2 Trustworthy Artificial Intelligence . 10 1.2.3 Privacy Preservation . 10 1.3 Toolbox to Build Secure and Intelligent Systems . 11 1.3.1 Machine Learning and Deep Learning . 12 1.3.2 Privacy-Preserving Machine Learning . 14 1.3.3 Adversarial Machine Learning . 15 1.4 Data Repositories for Cybersecurity Research . 16 1.4.1 NSL-KDD . 17 1.4.2 UNSW-NB15 . 17 v 1.4.3 EMBER 18 1.5 Summary 18 2 Cyber Threats and Gateway Defense 19 2.1 Cyber Threats . 19 2.1.1 Cyber Intrusions . 20 2.1.2 Distributed Denial of Services Attack . 22 2.1.3 Malware and Shellcode . 23 2.2 Gateway Defense Approaches 23 2.2.1 Network Access Control 24 2.2.2 Anomaly Isolation 24 2.2.3 Collaborative Learning . 24 2.2.4 Secure Local Data Learning 25 2.3 Emerging Data-Driven Methods for Gateway Defense 26 2.3.1 Semi-Supervised Learning for Intrusion Detection 26 2.3.2 Transfer Learning for Intrusion Detection 27 2.3.3 Federated Learning for Privacy Preservation . 28 2.3.4 Reinforcement Learning for Penetration Test 29 2.4 Case Study: Reinforcement Learning for Automated Post-Breach Penetration Test . 30 2.4.1 Literature Review 30 2.4.2 Research Idea 31 2.4.3 Training Agent using Deep Q-Learning 32 2.5 Summary 34 vi 3 Edge Computing and Secure Edge Intelligence 35 3.1 Edge Computing . 35 3.2 Key Advances in Edge Computing . 38 3.2.1 Security 38 3.2.2 Reliability . 41 3.2.3 Survivability . 42 3.3 Secure Edge Intelligence . 43 3.3.1 Background and Motivation 44 3.3.2 Design of Detection Module 45 3.3.3 Challenges against Poisoning Attacks . 48 3.4 Summary 49 4 Edge Intelligence for Intrusion Detection 51 4.1 Edge Cyberinfrastructure . 51 4.2 Edge AI Engine 53 4.2.1 Feature Engineering . 53 4.2.2 Model Learning . 54 4.2.3 Model Update 56 4.2.4 Predictive Analytics . 56 4.3 Threat Intelligence 57 4.4 Preliminary Study . 57 4.4.1 Dataset 57 4.4.2 Environment Setup . 59 4.4.3 Performance Evaluation . 59 vii 4.5 Summary 63 5 Robust Intrusion Detection 65 5.1 Preliminaries 65 5.1.1 Median Absolute Deviation . 65 5.1.2 Mahalanobis Distance 66 5.2 Robust Intrusion Detection . 67 5.2.1 Problem Formulation 67 5.2.2 Step 1: Robust Data Preprocessing 68 5.2.3 Step 2: Bagging for Labeled Anomalies 69 5.2.4 Step 3: One-Class SVM for Unlabeled Samples . 70 5.2.5 Step 4: Final Classifier . 74 5.3 Experiment and Evaluation . 76 5.3.1 Experiment Setup 76 5.3.2 Performance Evaluation . 81 5.4 Summary 92 6 Efficient Preprocessing Scheme for Anomaly Detection 93 6.1 Efficient Anomaly Detection . 93 6.1.1 Related Work . 95 6.1.2 Principal Component Analysis . 97 6.2 Efficient Preprocessing Scheme for Anomaly Detection . 98 6.2.1 Robust Preprocessing Scheme . 99 6.2.2 Real-Time Processing 103 viii 6.2.3 Discussions 103 6.3 Case Study . 104 6.3.1 Description of the Raw Data 105 6.3.2 Experiment 106 6.3.3 Results 108 6.4 Summary 109 7 Privacy Preservation in the Era of Big Data 111 7.1 Privacy Preservation Approaches 111 7.1.1 Anonymization 111 7.1.2 Differential Privacy . 112 7.1.3 Federated Learning . 114 7.1.4 Homomorphic Encryption 116 7.1.5 Secure Multi-Party Computation . 117 7.1.6 Discussions 118 7.2 Privacy-Preserving Anomaly Detection . 120 7.2.1 Literature Review 121 7.2.2 Preliminaries . 123 7.2.3 System Model and Security Model 124 7.3 Objectives and Workflow . 126 7.3.1 Objectives . 126 7.3.2 Workflow . 128 7.4 Predicate Encryption based Anomaly Detection . 129 7.4.1 Procedures 129 ix 7.4.2 Development of Predicate . 131 7.4.3 Deployment of Anomaly Detection 132 7.5 Case Study and Evaluation . 134 7.5.1 Overhead . 134 7.5.2 Detection . 136 7.6 Summary 137 8 Adversarial Examples: Challenges and Solutions 139 8.1 Adversarial Examples . 139 8.1.1 Problem Formulation in Machine Learning 140 8.1.2 Creation of Adversarial Examples . 141 8.1.3 Targeted and Non-Targeted Attacks . 141 8.1.4 Black-Box and White-Box Attacks 142 8.1.5 Defenses against Adversarial Examples 142 8.2 Adversarial Attacks in Security Applications 143 8.2.1 Malware 143 8.2.2 Cyber Intrusions . 143 8.3 Case Study: Improving Adversarial Attacks Against Malware Detectors 144 8.3.1 Background 144 8.3.2 Adversarial Attacks on Malware Detectors 145 8.3.3 MalConv Architecture 147 8.3.4 Research Idea 148 8.4 Case Study: A Metric for Machine Learning Vulnerability to Adversarial Examples . 149 8.4.1 Background 149 8.4.2 Research Idea 150 8.5 Case Study: Protecting Smart Speakers from Adversarial Voice Commands . 153 8.5.1 Background 153 8.5.2 Challenges 154 8.5.3 Directions and Tasks 155 8.6 Summary 157 xi

Read more less

Book Synopsis5G WIRELESS NETWORK An expert presentation of 5G security, privacy, and network performance In 5G Wireless Network Security and Privacy, a team of veteran engineers delivers a robust and accessible discussion of 5G security solutions, including physical layer security, authentication, and mobility management. In the book, the authors expertly cover the requirements of 5G wireless network security and privacy, with explorations of existing solutions and vulnerabilities from security architecture and mechanism perspectives. Readers will learn how to enhance the security and network performance of 5G wireless networks in contexts like vehicle-to-vehicle and vehicle-to-infrastructure communications, industrial automation, health services, smart cities, and smart homes. They will develop a comprehensive understanding of 5G wireless network security as they move through the book's 11 insightful chapters, developing in-depth knowledge on the current state of 5G security and coming developmenTable of ContentsAbout the Authors ix Preface xi Acknowledgments xiii Introduction xv 1 Introduction to 5G Wireless Systems 1 1.1 Motivations and Objectives of 5G Wireless Networks 1 1.2 Security Drives and Requirements 2 1.3 5GWireless Network Architecture 4 1.3.1 Overview of the 5G Wireless Network Architecture 4 1.3.2 Comparison Between the Legacy Cellular Network and the 5GWireless Network 5 1.4 Conclusion 6 2 Security from Legacy Wireless Systems to 5G Networks 7 2.1 Network Security for Legacy Systems 7 2.2 Security Attacks and Security Services in 5G Wireless Networks 9 2.2.1 Security Attacks 9 2.2.2 Security Services 11 2.2.2.1 Authentication 12 2.2.2.2 Confidentiality 12 2.2.2.3 Availability 13 2.2.2.4 Integrity 14 2.3 The Evolution of Wireless Security Architectures from 3G to 5G 14 2.3.1 3G Security Architecture 14 2.3.2 4G Security Architecture 15 2.3.3 5GWireless Security Architecture 16 2.3.3.1 Overview of the Proposed 5G Wireless Security Architecture 16 2.3.3.2 Security Domains 17 2.4 Summary 18 3 Security Services and Mechanisms in 5G Wireless Systems 19 3.1 Cryptographic Approaches and Physical Layer Security 19 3.2 Authentication 22 3.3 Availability 27 3.4 Data Confidentiality 29 3.5 Key Management 33 3.6 Privacy 35 3.7 Conclusion 36 4 An Efficient Security Solution Based on Physical Layer Security in 5G Wireless Networks 37 4.1 Enhancing 5G Security Through Artificial Noise and Interference Utilization 37 4.2 A HetNet System Model and Security Analysis 38 4.2.1 System Model and Threat Model 38 4.2.2 Security Analysis 40 4.3 Problem Formulation and Analysis 42 4.3.1 Maximum Secrecy Rate 43 4.3.2 The Proposed Algorithm 43 4.4 Numerical and Simulation Results 46 4.5 Conclusion 49 5 Flexible and Efficient Security Schemes for IoT Applications in 5G Wireless Systems 51 5.1 IoT Application Models and Current Security Challenges 51 5.2 A General System Model for IoT Applications Over 5G 52 5.2.1 System Architecture 52 5.2.2 Trust Models 54 5.2.3 Threat Models and Design Objectives 55 5.3 The 5G Authentication and Secure Data Transmission Scheme 56 5.3.1 Overview of the 5G Authentication and Secure Data Transmission Scheme 56 5.3.2 The Detailed Scheme 57 5.3.2.1 Phase 1 -- System Initialization 57 5.3.2.2 Phase 2 -- Authentication and Initial Session Key Agreement 58 5.3.2.3 Phase 3 -- Data Transmission 58 5.3.2.4 Phase 4 -- Data Receiving 59 5.3.2.5 Phase 5 -- T2 IoT Devices Authentication and Initial Session Key Agreement 59 5.4 Security Analysis 60 5.4.1 Protocol Verification 61 5.4.2 Security Objectives 61 5.4.2.1 Mutual Authentication 61 5.4.2.2 Initial Session Key Agreement 62 5.4.2.3 Data Confidentiality and Integrity 62 5.4.2.4 Contextual Privacy 62 5.4.2.5 Forward Security 62 5.4.2.6 End-to-End Security 63 5.4.2.7 Key Escrow Resilience 63 5.5 Performance Evaluation 63 5.5.1 Security Services 63 5.5.2 Computational Overhead 63 5.5.3 Communication Overhead 66 5.6 Conclusion 67 6 Secure and Efficient Mobility Management in 5G Wireless Networks 71 6.1 Handover Issues and Requirements Over 5G Wireless Networks 71 6.2 A 5G CN Model and HetNet System Model 72 6.3 5G Handover Scenarios and Procedures 75 6.3.1 Handover Scenarios 75 6.3.2 Handover Procedures 76 6.4 A New Authentication Protocol for 5G Networks 79 6.4.1 Assumptions 80 6.4.2 Pre-Authentication 80 6.4.3 Full Authentication 81 6.4.4 Fast Authentication 83 6.4.4.1 Handover Between APs 83 6.4.4.2 Handover Between BSs 84 6.5 Security Analysis of the New 5G Authentication Protocols 84 6.6 Performance Evaluations 85 6.6.1 Communication Overhead 86 6.6.2 Computation Overhead 86 6.7 Conclusion 87 7 Open Issues and Future Research Directions for Security and Privacy in 5G Networks 89 7.1 New Trust Models 89 7.2 New Security Attack Models 90 7.3 Privacy Protection 90 7.4 Unified Security Management 91 References 93 Index 103

Read more less

Book SynopsisCYBERSECURITY AND LOCAL GOVERNMENT Learn to secure your local government's networks with this one-of-a-kind resource In Cybersecurity and Local Government, a distinguished team of researchers delivers an insightful exploration of cybersecurity at the level of local government. The book makes a compelling argument that every local government official, elected or otherwise, must be reasonably knowledgeable about cybersecurity concepts and provide appropriate support for it within their governments. It also lays out a straightforward roadmap to achieving those objectives, from an overview of cybersecurity definitions to descriptions of the most common security challenges faced by local governments. The accomplished authors specifically address the recent surge in ransomware attacks and how they might affect local governments, along with advice as to how to avoid and respond to these threats. They also discuss the cybersecurity law, cybersecurity policies that local government should adopt, the future of cybersecurity, challenges posed by Internet of Things, and much more. Throughout, the authors provide relevant field examples, case studies of actual local governments, and examples of policies to guide readers in their own application of the concepts discussed within. Cybersecurity and Local Government also offers: A thorough introduction to cybersecurity generally, including definitions of key cybersecurity terms and a high-level overview of the subject for non-technologists. A comprehensive exploration of critical information for local elected and top appointed officials, including the typical frequencies and types of cyberattacks. Practical discussions of the current state of local government cybersecurity, with a review of relevant literature from 2000 to 2021. In-depth examinations of operational cybersecurity policies, procedures and practices, with recommended best practices. Perfect for local elected and top appointed officials and staff as well as local citizens, Cybersecurity and Local Government will also earn a place in the libraries of those studying or working in local government with an interest in cybersecurity.Table of ContentsPreface ix About the Authors xi 1 Why Local Government Cybersecurity? 1 2 What is Cybersecurity? 17 3 Cybersecurity 101 for Local Governments 27 4 What the Literature Says About Local Government Cybersecurity 47 5 Cyberattacks: Targetting Local Government 67 6 Managing Local Government Cybersecurity 85 7 Cybersecurity Policies for Local Government 113 8 People: The Root of The Problem 143 9 The NIST Cybersecurity Framework Demystified 151 10 Cybersecurity Law and Regulation for Local Government 167 11 Important Questions to Ask 187 12 The Future of Local Government Cybersecurity 201 13 Summary and Recommendations 227 Index 235

Read more less

Book SynopsisTable of ContentsForeword xxxi Introduction xxxiii Part I Threat Hunting Frameworks 1 Chapter 1 Introduction to Threat Hunting 3 The Rise of Cybercrime 4 What Is Threat Hunting? 6 The Key Cyberthreats and Threat Actors 7 Phishing 7 Ransomware 8 Nation State 10 The Necessity of Threat Hunting 14 Does the Organization’s Size Matter? 17 Threat Modeling 19 Threat-Hunting Maturity Model 23 Organization Maturity and Readiness 23 Level 0: INITIAL 24 Level 1: MINIMAL 25 Level 2: PROCEDURAL 25 Level 3: INNOVATIVE 25 Level 4: LEADING 25 Human Elements of Threat Hunting 26 How Do You Make the Board of Directors Cyber-Smart? 27 Threat-Hunting Team Structure 30 External Model 30 Dedicated Internal Hunting Team Model 30 Combined/Hybrid Team Model 30 Periodic Hunt Teams Model 30 Urgent Need for Human-Led Threat Hunting 31 The Threat Hunter’s Role 31 Summary 33 Chapter 2 Modern Approach to Multi-Cloud Threat Hunting 35 Multi-Cloud Threat Hunting 35 Multi-Tenant Cloud Environment 38 Threat Hunting in Multi-Cloud and Multi-Tenant Environments 39 Building Blocks for the Security Operations Center 41 Scope and Type of SOC 43 Services, Not Just Monitoring 43 SOC Model 43 Define a Process for Identifying and Managing Threats 44 Tools and Technologies to Empower SOC 44 People (Specialized Teams) 45 Cyberthreat Detection, Threat Modeling, and the Need for Proactive Threat Hunting Within SOC 46 Cyberthreat Detection 46 Threat-Hunting Goals and Objectives 49 Threat Modeling and SOC 50 The Need for a Proactive Hunting Team Within SOC 50 Assume Breach and Be Proactive 51 Invest in People 51 Develop an Informed Hypothesis 52 Cyber Resiliency and Organizational Culture 53 Skillsets Required for Threat Hunting 54 Security Analysis 55 Data Analysis 56 Programming Languages 56 Analytical Mindset 56 Soft Skills 56 Outsourcing 56 Threat-Hunting Process and Procedures 57 Metrics for Assessing the Effectiveness of Threat Hunting 58 Foundational Metrics 58 Operational Metrics 59 Threat-Hunting Program Effectiveness 61 Summary 62 Chapter 3 Exploration of MITRE Key Attack Vectors 63 Understanding MITRE ATT&CK 63 What Is MITRE ATT&CK Used For? 64 How Is MITRE ATT&CK Used and Who Uses It? 65 How Is Testing Done According to MITRE? 65 Tactics 67 Techniques 67 Threat Hunting Using Five Common Tactics 69 Privilege Escalation 71 Case Study 72 Credential Access 73 Case Study 74 Lateral Movement 75 Case Study 75 Command and Control 77 Case Study 77 Exfiltration 79 Case Study 79 Other Methodologies and Key Threat-Hunting Tools to Combat Attack Vectors 80 Zero Trust 80 Threat Intelligence and Zero Trust 83 Build Cloud-Based Defense-in-Depth 84 Analysis Tools 86 Microsoft Tools 86 Connect To All Your Data 87 Workbooks 88 Analytics 88 Security Automation and Orchestration 90 Investigation 91 Hunting 92 Community 92 AWS Tools 93 Analyzing Logs Directly 93 SIEMs in the Cloud 94 Summary 95 Resources 96 Part II Hunting in Microsoft Azure 99 Chapter 4 Microsoft Azure Cloud Threat Prevention Framework 101 Introduction to Microsoft Security 102 Understanding the Shared Responsibility Model 102 Microsoft Services for Cloud Security Posture Management and Logging/Monitoring 105 Overview of Azure Security Center and Azure Defender 105 Overview of Microsoft Azure Sentinel 108 Using Microsoft Secure and Protect Features 112 Identity & Access Management 113 Infrastructure & Network 114 Data & Application 115 Customer Access 115 Using Azure Web Application Firewall to Protect a Website Against an “Initial Access” TTP 116 Using Microsoft Defender for Office 365 to Protect Against an “Initial Access” TTP 118 Using Microsoft Defender Endpoint to Protect Against an “Initial Access” TTP 121 Using Azure Conditional Access to Protect Against an “Initial Access” TTP 123 Microsoft Detect Services 127 Detecting “Privilege Escalation” TTPs 128 Using Azure Security Center and Azure Sentinel to Detect Threats Against a “Privilege Escalation” TTP 128 Detecting Credential Access 131 Using Azure Identity Protection to Detect Threats Against a “Credential Access” TTP 132 Steps to Configure and Enable Risk Polices (Sign-in Risk and User Risk) 134 Using Azure Security Center and Azure Sentinel to Detect Threats Against a “Credential Access” TTP 137 Detecting Lateral Movement 139 Using Just-in-Time in ASC to Protect and Detect Threats Against a “Lateral Movement” TTP 139 Using Azure Security Center and Azure Sentinel to Detect Threats Against a “Lateral Movement” TTP 144 Detecting Command and Control 145 Using Azure Security Center and Azure Sentinel to Detect Threats Against a “Command and Control” TTP 146 Detecting Data Exfiltration 147 Using Azure Information Protection to Detect Threats Against a “Data Exfiltration” TTP 148 Discovering Sensitive Content Using AIP 149 Using Azure Security Center and Azure Sentinel to Detect Threats Against a “Data Exfiltration” TTP 153 Detecting Threats and Proactively Hunting with Microsoft 365 Defender 154 Microsoft Investigate, Response, and Recover Features 155 Automating Investigation and Remediation with Microsoft Defender for Endpoint 157 Using Microsoft Threat Expert Support for Remediation and Investigation 159 Targeted Attack Notification 159 Experts on Demand 161 Automating Security Response with MCAS and Microsoft Flow 166 Step 1: Generate Your API Token in Cloud App Security 167 Step 2: Create Your Trigger in Microsoft Flow 167 Step 3: Create the Teams Message Action in Microsoft Flow 168 Step 4: Generate an Email in Microsoft Flow 168 Connecting the Flow in Cloud App Security 169 Performing an Automated Response Using Azure Security Center 170 Using Machine Learning and Artificial Intelligence in Threat Response 172 Overview of Fusion Detections 173 Overview of Azure Machine Learning 174 Summary 182 Chapter 5 Microsoft Cybersecurity Reference Architecture and Capability Map 183 Introduction 183 Microsoft Security Architecture versus the NIST Cybersecurity Framework (CSF) 184 Microsoft Security Architecture 185 The Identify Function 186 The Protect Function 187 The Detect Function 188 The Respond Function 189 The Recover Function 189 Using the Microsoft Reference Architecture 190 Microsoft Threat Intelligence 190 Service Trust Portal 192 Security Development Lifecycle (SDL) 193 Protecting the Hybrid Cloud Infrastructure 194 Azure Marketplace 194 Private Link 195 Azure Arc 196 Azure Lighthouse 197 Azure Firewall 198 Azure Web Application Firewall (WAF) 200 Azure DDOS Protection 200 Azure Key Vault 201 Azure Bastion 202 Azure Site Recovery 204 Azure Security Center (ASC) 205 Microsoft Azure Secure Score 205 Protecting Endpoints and Clients 206 Microsoft Endpoint Manager (MEM) Configuration Manager 207 Microsoft Intune 208 Protecting Identities and Access 209 Azure AD Conditional Access 210 Passwordless for End-to-End Secure Identity 211 Azure Active Directory (aka Azure AD) 211 Azure MFA 211 Azure Active Directory Identity Protection 212 Azure Active Directory Privilege Identity Management (PIM) 213 Microsoft Defender for Identity 214 Azure AD B2B and B2C 215 Azure AD Identity Governance 215 Protecting SaaS Apps 216 Protecting Data and Information 219 Azure Purview 220 Microsoft Information Protection (MIP) 221 Azure Information Protection Unified Labeling Scanner (File Scanner) 222 The Advanced eDiscovery Solution in Microsoft 365 223 Compliance Manager 224 Protecting IoT and Operation Technology 225 Security Concerns with IoT 226 Understanding That IoT Cybersecurity Starts with a Threat Model 227 Microsoft Investment in IoT Technology 229 Azure Sphere 229 Azure Defender 229 Azure Defender for IoT 230 Threat Modeling for the Azure IoT Reference Architecture 230 Azure Defender for IoT Architecture (Agentless Solutions) 233 Azure Defender for IoT Architecture (Agent-based solutions) 234 Understanding the Security Operations Solutions 235 Understanding the People Security Solutions 236 Attack Simulator 237 Insider Risk Management (IRM) 237 Communication Compliance 239 Summary 240 Part III Hunting in AWS 241 Chapter 6 AWS Cloud Threat Prevention Framework 243 Introduction to AWS Well-Architected Framework 244 The Five Pillars of the Well-Architected Framework 245 Operational Excellence 246 Security 246 Reliability 246 Performance Efficiency 246 Cost Optimization 246 The Shared Responsibility Model 246 AWS Services for Monitoring, Logging, and Alerting 248 AWS CloudTrail 249 Amazon CloudWatch Logs 251 Amazon VPC Flow Logs 252 Amazon GuardDuty 253 AWS Security Hub 254 AWS Protect Features 256 How Do You Prevent Initial Access? 256 How Do You Protect APIs from SQL Injection Attacks Using API Gateway and AWS WAF? 256 Prerequisites 257 Create an API 257 Create and Configure an AWS WAF 259 AWS Detection Features 263 How Do You Detect Privilege Escalation? 263 How Do You Detect the Abuse of Valid Account to Obtain High-Level Permissions? 264 Prerequisites 264 Configure GuardDuty to Detect Privilege Escalation 265 Reviewing the Findings 266 How Do You Detect Credential Access? 269 How Do You Detect Unsecured Credentials? 269 Prerequisites 270 Reviewing the Findings 274 How Do You Detect Lateral Movement? 276 How Do You Detect the Use of Stolen Alternate Authentication Material? 277 Prerequisites 277 How Do You Detect Potential Unauthorized Access to Your AWS Resources? 277 Reviewing the Findings 278 How Do You Detect Command and Control? 280 How Do You Detect the Communications to a Command and Control Server Using the Domain Name System (DNS)? 281 Prerequisites 281 How Do You Detect EC2 Instance Communication with a Command and Control (C&C) Server Using DNS 281 Reviewing the Findings 282 How Do You Detect Data Exfiltration? 284 Prerequisites 285 How Do You Detect the Exfiltration Using an Anomalous API Request? 285 Reviewing the Findings 286 How Do You Handle Response and Recover? 289 Foundation of Incident Response 289 How Do You Create an Automated Response? 290 Automating Incident Responses 290 Options for Automating Responses 291 Cost Comparisons in Scanning Methods 293 Event-Driven Responses 294 How Do You Automatically Respond to Unintended Disabling of CloudTrail Logging? 295 Prerequisites 296 Creating a Trail in CloudTrail 296 Creating an SNS Topic to Send Emails 299 Creating Rules in Amazon EventBridge 302 How Do You Orchestrate and Recover? 305 Decision Trees 305 Use Alternative Accounts 305 View or Copy Data 306 Sharing Amazon EBS Snapshots 306 Sharing Amazon CloudWatch Logs 306 Use Immutable Storage 307 Launch Resources Near the Event 307 Isolate Resources 308 Launch Forensic Workstations 309 Instance Types and Locations 309 How Do You Automatically Recover from Unintended Disabling of CloudTrail Logging? 310 Prerequisites 311 Aggregate and View Security Status in AWS Security Hub 311 Reviewing the Findings 312 Create Lambda Function to Orchestrate and Recover 314 How Are Machine Learning and Artificial Intelligence Used? 317 Summary 318 References 319 Chapter 7 AWS Reference Architecture 321 AWS Security Framework Overview 322 The Identify Function Overview 323 The Protect Function Overview 324 The Detect Function Overview 325 The Respond Function Overview 325 The Recover Function Overview 325 AWS Reference Architecture 326 The Identify Function 326 Security Hub 328 AWS Config 329 AWS Organizations 330 AWS Control Tower 331 AWS Trusted Advisor 332 AWS Well-Architected Tool 333 AWS Service Catalog 334 AWS Systems Manager 335 AWS Identity and Access Management (IAM) 337 AWS Single Sign-On (SSO) 338 AWS Shield 340 AWS Web Application Firewall (WAF) 340 AWS Firewall Manager 342 AWS Cloud HSM 343 AWS Secrets Manager 345 AWS Key Management Service (KMS) 345 AWS Certificate Manager 346 AWS IoT Device Defender 347 Amazon Virtual Private Cloud 347 AWS PrivateLink 349 AWS Direct Connect 349 AWS Transit Gateway 350 AWS Resource Access Manager 351 The Detect and Respond Functions 353 GuardDuty 354 Amazon Detective 356 Amazon Macie 357 Amazon Inspector 358 Amazon CloudTrail 359 Amazon CloudWatch 360 Amazon Lambda 361 AWS Step Functions 362 Amazon Route 53 363 AWS Personal Health Dashboard 364 The Recover Functions 365 Amazon Glacier 366 AWS CloudFormation 366 CloudEndure Disaster Recovery 367 AWS OpsWorks 368 Summary 369 Part IV The Future 371 Chapter 8 Threat Hunting in Other Cloud Providers 373 The Google Cloud Platform 374 Google Cloud Platform Security Architecture alignment to NIST 376 The Identify Function 376 The Protect Function 378 The Detect Function 380 The Respond Function 382 The Recover Function 383 The IBM Cloud 385 Oracle Cloud Infrastructure Security 386 Oracle SaaS Cloud Security Threat Intelligence 387 The Alibaba Cloud 388 Summary 389 References 389 Chapter 9 The Future of Threat Hunting 391 Artificial Intelligence and Machine Learning 393 How ML Reduces False Positives 395 How Machine Intelligence Applies to Malware Detection 395 How Machine Intelligence Applies to Risk Scoring in a Network 396 Advances in Quantum Computing 396 Quantum Computing Challenges 398 Preparing for the Quantum Future 399 Advances in IoT and Their Impact 399 Growing IoT Cybersecurity Risks 401 Preparing for IoT Challenges 403 Operational Technology (OT) 405 Importance of OT Security 406 Blockchain 406 The Future of Cybersecurity with Blockchain 407 Threat Hunting as a Service 407 The Evolution of the Threat-Hunting Tool 408 Potential Regulatory Guidance 408 Summary 409 References 409 Part V Appendices 411 Appendix A MITRE ATT&CK Tactics 413 Appendix B Privilege Escalation 415 Appendix C Credential Access 421 Appendix D Lateral Movement 431 Appendix E Command and Control 435 Appendix F Data Exfiltration 443 Appendix G MITRE Cloud Matrix 447 Initial Access 447 Drive-by Compromise 447 Exploiting a Public-Facing Application 450 Phishing 450 Using Trusted Relationships 451 Using Valid Accounts 452 Persistence 452 Manipulating Accounts 452 Creating Accounts 453 Implanting a Container Image 454 Office Application Startup 454 Using Valid Accounts 455 Privilege Escalation 456 Modifying the Domain Policy 456 Using Valid Accounts 457 Defense Evasion 457 Modifying Domain Policy 457 Impairing Defenses 458 Modifying the Cloud Compute Infrastructure 459 Using Unused/Unsupported Cloud Regions 459 Using Alternate Authentication Material 460 Using Valid Accounts 461 Credential Access 461 Using Brute Force Methods 461 Forging Web Credentials 462 Stealing an Application Access Token 462 Stealing Web Session Cookies 463 Using Unsecured Credentials 464 Discovery 464 Manipulating Account Discovery 464 Manipulating Cloud Infrastructure Discovery 465 Using a Cloud Service Dashboard 466 Using Cloud Service Discovery 466 Scanning Network Services 467 Discovering Permission Groups 467 Discovering Software 468 Discovering System Information 468 Discovering System Network Connections 469 Lateral Movement 469 Internal Spear Phishing 469 Using Alternate Authentication Material 470 Collection 471 Collecting Data from a Cloud Storage Object 471 Collecting Data from Information Repositories 471 Collecting Staged Data 472 Collecting Email 473 Data Exfiltration 474 Detecting Exfiltration 474 Impact 475 Defacement 475 Endpoint Denial of Service 475 Resource Hijacking 477 Appendix H Glossary 479 Index 489

Read more less

Book SynopsisTable of ContentsForeword xvi Introduction xviii Section 1 Cybersecurity Third-Party Risk Chapter 1 What is the Risk? 1 The SolarWinds Supply-Chain Attack 4 The VGCA Supply-Chain Attack 6 The Zyxel Backdoor Attack 9 Other Supply-Chain Attacks 10 Problem Scope 12 Compliance Does Not Equal Security 15 Third-Party Breach Examples 17 Third-Party Risk Management 24 Cybersecurity and Third-Party Risk 27 Cybersecurity Third-Party Risk as a Force Multiplier 32 Conclusion 33 Chapter 2 Cybersecurity Basics 35 Cybersecurity Basics for Third-Party Risk 38 Cybersecurity Frameworks 46 Due Care and Due Diligence 53 Cybercrime and Cybersecurity 56 Types of Cyberattacks 59 Analysis of a Breach 63 The Third-Party Breach Timeline: Target 66 Inside Look: Home Depot Breach 68 Conclusion 72 Chapter 3 What the COVID-19 Pandemic Did to Cybersecurity and Third-Party Risk 75 The Pandemic Shutdown 77 Timeline of the Pandemic Impact on Cybersecurity 80 Post-Pandemic Changes and Trends 84 Regulated Industries 98 An Inside Look: P&N Bank 100 SolarWinds Attack Update 102 Conclusion 104 Chapter 4 Third-Party Risk Management 107 Third-Party Risk Management Frameworks 113 ISO 27036:2013+ 114 NIST 800-SP 116 NIST 800-161 Revision 1: Upcoming Revision 125 NISTIR 8272 Impact Analysis Tool for Interdependent Cyber Supply-Chain Risks 125 The Cybersecurity and Third-Party Risk Program Management 127 Kristina Conglomerate (KC) Enterprises 128 KC Enterprises’ Cyber Third-Party Risk Program 131 Inside Look: Marriott 140 Conclusion 141 Chapter 5 Onboarding Due Diligence 143 Intake 145 Data Privacy 146 Cybersecurity 147 Amount of Data 149 Country Risk and Locations 149 Connectivity 150 Data Transfer 150 Data Location 151 Service-Level Agreement or Recovery Time Objective 151 Fourth Parties 152 Software Security 152 KC Enterprises Intake/Inherent Risk Cybersecurity Questionnaire 153 Cybersecurity in Request for Proposals 154 Data Location 155 Development 155 Identity and Access Management 156 Encryption 156 Intrusion Detection/Prevention System 157 Antivirus and Malware 157 Data Segregation 158 Data Loss Prevention 158 Notification 158 Security Audits 159 Cybersecurity Third-Party Intake 160 Data Security Intake Due Diligence 161 Next Steps 167 Ways to Become More Efficient 173 Systems and Organization Controls Reports 174 Chargebacks 177 Go-Live Production Reviews 179 Connectivity Cyber Reviews 179 Inside Look: Ticketmaster and Fourth Parties 182 Conclusion 183 Chapter 6 Ongoing Due Diligence 185 Low-Risk Vendor Ongoing Due Diligence 189 Moderate-Risk Vendor Ongoing Due Diligence 193 High-Risk Vendor Ongoing Due Diligence 196 “Too Big to Care” 197 A Note on Phishing 200 Intake and Ongoing Cybersecurity Personnel 203 Ransomware: A History and Future 203 Asset Management 205 Vulnerability and Patch Management 206 802.1x or Network Access Control (NAC) 206 Inside Look: GE Breach 207 Conclusion 208 Chapter 7 On-site Due Diligence 211 On-site Security Assessment 213 Scheduling Phase 214 Investigation Phase 215 Assessment Phase 217 On-site Questionnaire 221 Reporting Phase 227 Remediation Phase 227 Virtual On-site Assessments 229 On-site Cybersecurity Personnel 231 On-site Due Diligence and the Intake Process 233 Vendors Are Partners 234 Consortiums and Due Diligence 235 Conclusion 237 Chapter 8 Continuous Monitoring 239 What is Continuous Monitoring? 241 Vendor Security-Rating Tools 241 Inside Look: Health Share of Oregon’s Breach 251 Enhanced Continuous Monitoring 252 Software Vulnerabilities/Patching Cadence 253 Fourth-Party Risk 253 Data Location 254 Connectivity Security 254 Production Deployment 255 Continuous Monitoring Cybersecurity Personnel 258 Third-Party Breaches and the Incident Process 258 Third-Party Incident Management 259 Inside Look: Uber’s Delayed Data Breach Reporting 264 Inside Look: Nuance Breach 265 Conclusion 266 Chapter 9 Offboarding 267 Access to Systems, Data, and Facilities 270 Physical Access 274 Return of Equipment 275 Contract Deliverables and Ongoing Security 275 Update the Vendor Profile 276 Log Retention 276 Inside Look: Morgan Stanley Decommissioning Process Misses 277 Inside Look: Data Sanitization 279 Conclusion 283 Section 2 Next Steps Chapter 10 Securing the Cloud 285 Why is the Cloud So Risky? 287 Introduction to NIST Service Models 288 Vendor Cloud Security Reviews 289 The Shared Responsibility Model 290 Inside Look: Cloud Controls Matrix by the Cloud Security Alliance 295 Security Advisor Reports as Patterns 298 Inside Look: The Capital One Breach 312 Conclusion 313 Chapter 11 Cybersecurity and Legal Protections 315 Legal Terms and Protections 317 Cybersecurity Terms and Conditions 321 Offshore Terms and Conditions 324 Hosted/Cloud Terms and Conditions 327 Privacy Terms and Conditions 331 Inside Look: Heritage Valley Health vs. Nuance 334 Conclusion 335 Chapter 12 Software Due Diligence 337 The Secure Software Development Lifecycle 340 Lessons from SolarWinds and Critical Software 342 Inside Look: Juniper 344 On-Premises Software 346 Cloud Software 348 Open Web Application Security Project Explained 350 OWASP Top 10 350 OWASP Web Security Testing Guide 352 Open Source Software 353 Software Composition Analysis 355 Inside Look: Heartbleed 355 Mobile Software 357 Testing Mobile Applications 358 Code Storage 360 Conclusion 362 Chapter 13 Network Due Diligence 365 Third-Party Connections 368 Personnel Physical Security 368 Hardware Security 370 Software Security 371 Out-of-Band Security 372 Cloud Connections 374 Vendor Connectivity Lifecycle Management 375 Zero Trust for Third Parties 379 Internet of Things and Third Parties 385 Trusted Platform Module and Secure Boot 388 Inside Look: The Target Breach (2013) 390 Conclusion 391 Chapter 14 Offshore Third-Party Cybersecurity Risk 393 Onboarding Offshore Vendors 397 Ongoing Due Diligence for Offshore Vendors 399 Physical Security 399 Offboarding Due Diligence for Offshore Vendors 402 Inside Look: A Reminder on Country Risk 404 Country Risk 405 KC’s Country Risk 406 Conclusion 409 Chapter 15 Transform to Predictive 411 The Data 414 Vendor Records 415 Due Diligence Records 416 Contract Language 416 Risk Acceptances 417 Continuous Monitoring 417 Enhanced Continuous Monitoring 417 How Data is Stored 418 Level Set 418 A Mature to Predictive Approach 420 The Predictive Approach at KC Enterprises 420 Use Case #1: Early Intervention 423 Use Case #2: Red Vendors 425 Use Case #3: Reporting 426 Conclusion 427 Chapter 16 Conclusion 429 Advanced Persistent Threats Are the New Danger 431 Cybersecurity Third-Party Risk 435 Index 445

Read more less

Book SynopsisPrepare for success on the challenging CASP+ CAS-004 exam Inthe newly updated Second Edition ofCASP+ CompTIA Advanced Security Practitioner Practice Tests Exam CAS-004,accomplished cybersecurityexpertNadean Tannerdeliversan extensive collection of CASP+preparation materials, including hundreds of domain-by-domain test questions and two additional practice exams. Prepare for the new CAS-004 exam, as well asa new career in advanced cybersecurity, with Sybex's proven approach tocertification success.You'll get ready for the exam, to impressyour next interviewer, and excel at your first cybersecurity job. This book includes: Comprehensive coverage of allexam CAS-004 objectivedomains, including security architecture, operations, engineering, cryptography, and governance, risk, and complianceIn-depthpreparation for test success with 1000 practice exam questionsAccess to the Sybex interactive learning environment and online test bank Perfect for anyone studying for the CASP+ Exam CAS-004,CASP+ CompTIA Advanced Security Practitioner Practice Tests Exam CAS-004is also an ideal resource for anyone with IT security experience who seeks to brush up on their skillset or seek a valuable new CASP+ certification.Table of ContentsIntroduction xix Chapter 1 Security Architecture 1 Chapter 2 Security Operations 61 Chapter 3 Security Engineering and Cryptography 123 Chapter 4 Governance, Risk, and Compliance 175 Chapter 5 Practice Test 1 207 Chapter 6 Practice Test 2 227 Appendix Answers to Review Questions 247 Chapter 1: Security Architecture 248 Chapter 2: Security Operations 278 Chapter 3: Security Engineering and Cryptography 308 Chapter 4: Governance, Risk, and Compliance 333 Chapter 5: Practice Test 1 346 Chapter 6: Practice Test 2 353 Index 363

Read more less

Book SynopsisCybersecurity Risk Management In Cybersecurity Risk Management: Mastering the Fundamentals Using the NIST Cybersecurity Framework, veteran technology analyst Cynthia Brumfield, with contributions from cybersecurity expert Brian Haugli, delivers a straightforward and up-to-date exploration of the fundamentals of cybersecurity risk planning and management. The book offers readers easy-to-understand overviews of cybersecurity risk management principles, user, and network infrastructure planning, as well as the tools and techniques for detecting cyberattacks. The book also provides a roadmap to the development of a continuity of operations plan in the event of a cyberattack. With incisive insights into the Framework for Improving Cybersecurity of Critical Infrastructure produced by the United States National Institute of Standards and Technology (NIST), Cybersecurity Risk Management presents the gold standard in practical guidance for the implementation of risk mTable of ContentsAcademic Foreword xiii Acknowledgments xv Preface – Overview of the NIST Framework xvii Background on the Framework xviii Framework Based on Risk Management xix The Framework Core xix Framework Implementation Tiers xxi Framework Profile xxii Other Aspects of the Framework Document xxiii Recent Developments At Nist xxiii Chapter 1 Cybersecurity Risk Planning and Management 1 Introduction 2 I. What Is Cybersecurity Risk Management? 2 A. Risk Management Is a Process 3 II. Asset Management 4 A. Inventory Every Physical Device and System You Have and Keep the Inventory Updated 5 B. Inventory Every Software Platform and Application You Use and Keep the Inventory Updated 9 C. Prioritize Every Device, Software Platform, and Application Based on Importance 10 D. Establish Personnel Security Requirements Including Third-Party Stakeholders 11 III. Governance 13 A. Make Sure You Educate Management about Risks 13 IV. Risk Assessment and Management 15 A. Know Where You’re Vulnerable 15 B. Identify the Threats You Face, Both Internally and Externally 16 C. Focus on the Vulnerabilities and Threats That Are Most Likely AND Pose the Highest Risk to Assets 17 D. Develop Plans for Dealing with the Highest Risks 18 Summary 20 Chapter Quiz 20 Essential Reading on Cybersecurity Risk Management 22 Chapter 2 User and Network Infrastructure Planning and Management 23 I. Introduction 24 II. Infrastructure Planning and Management Is All about Protection, Where the Rubber Meets the Road 24 A. Identity Management, Authentication, and Access Control 25 1. Always Be Aware of Who Has Access to Which System, for Which Period of Time, and from Where the Access Is Granted 27 2. Establish, Maintain, and Audit an Active Control List and Process for Who Can Physically Gain Access to Systems 28 3. Establish Policies, Procedures, and Controls for Who Has Remote Access to Systems 28 4. Make Sure That Users Have the Least Authority Possible to Perform Their Jobs and Ensure That at Least Two Individuals Are Responsible for a Task 29 5. Implement Network Security Controls on All Internal Communications, Denying Communications among Various Segments Where Necessary 31 A Word about Firewalls 31 6. Associate Activities with a Real Person or a Single Specific Entity 32 7. Use Single- or Multi-Factor Authentication Based on the Risk Involved in the Interaction 33 III. Awareness and Training 34 A. Make Sure That Privileged Users and Security Personnel Understand Their Roles and Responsibilities 35 IV. Data Security 35 A. Protect the Integrity of Active and Archived Databases 35 B. Protect the Confidentiality and Integrity of Corporate Data Once It Leaves Internal Networks 36 C. Assure That Information Can Only Be Accessed by Those Authorized to Do So and Protect Hardware and Storage Media 37 D. Keep Your Development and Testing Environments Separate from Your Production Environment 38 E. Implement Checking Mechanisms to Verify Hardware Integrity 39 V. Information Protection Processes and Procedures 39 A. Create a Baseline of IT and OT Systems 40 B. Manage System Configuration Changes in a Careful, Methodical Way 41 A Word about Patch Management 42 C. Perform Frequent Backups and Test Your Backup Systems Often 43 D. Create a Plan That Focuses on Ensuring That Assets and Personnel Will Be Able to Continue to Function in the Event of a Crippling Attack or Disaster 43 VI. Mainte nance 44 A. Perform Maintenance and Repair of Assets and Log Activities Promptly 45 B. Develop Criteria for Authorizing, Monitoring, and Controlling All Maintenance and Diagnostic Activities for Third Parties 45 VII. Protective Technology 46 A. Restrict the Use of Certain Types of Media On Your Systems 46 B. Wherever Possible, Limit Functionality to a Single Function Per Device (Least Functionality) 47 C. Implement Mechanisms to Achieve Resilience on Shared Infrastructure 48 Summary 49 Chapter Quiz 50 Essential Reading on Network Management 51 Chapter 3 Tools and Techniques for Detecting Cyber Incidents 53 Introduction 54 What Is an Incident? 55 I. Detect 56 A. Anomalies and Events 56 1. Establish Baseline Data for Normal, Regular Traffic Activity and Standard Configuration for Network Devices 57 2. Monitor Systems with Intrusion Detection Systems and Establish a Way of Sending and Receiving Notifications of Detected Events; Establish a Means of Verifying, Assessing, and Tracking the Source of Anomalies 58 A Word about Antivirus Software 60 3. Deploy One or More Centralized Log File Monitors and Configure Logging Devices throughout the Organization to Send Data Back to the Centralized Log Monitor 61 4. Determine the Impact of Events Both Before and After they Occur 61 5. Develop a Threshold for How Many Times an Event Can Occur Before You Take Action 62 B. Continuous Monitoring 62 1. Develop Strategies for Detecting Breaches as Soon as Possible, Emphasizing Continuous Surveillance of Systems through Network Monitoring 63 2. Ensure That Appropriate Access to the Physical Environment Is Monitored, Most Likely through Electronic Monitoring or Alarm Systems 64 3. Monitor Employee Behavior in Terms of Both Physical and Electronic Access to Detect Unauthorized Access 65 4. Develop a System for Ensuring That Software Is Free of Malicious Code through Software Code Inspection and Vulnerability Assessments 65 5. Monitor Mobile Code Applications (e.g., Java Applets) for Malicious Activity by Authenticating the Codes’ Origins, Verifying their Integrity, and Limiting the Actions they Can Perform 66 6. Evaluate a Provider’s Internal and External Controls’ Adequacy and Ensure they Develop and Adhere to Appropriate Policies, Procedures, and Standards; Consider the Results of Internal and External Audits 66 7. Monitor Employee Activity for Security Purposes and Assess When Unauthorized Access Occurs 67 8. Use Vulnerability Scanning Tools to Find Your Organization’s Weaknesses 68 C. Detection Processes 68 1. Establish a Clear Delineation between Network and Security Detection, with the Networking Group and the Security Group Having Distinct and Different Responsibilities 69 2. Create a Formal Detection Oversight and Control Management Function; Define Leadership for a Security Review, Operational Roles, and a Formal Organizational Plan; Train Reviewers to Perform Their Duties Correctly and Implement the Review Process 70 3. Test Detection Processes Either Manually or in an Automated Fashion in Conformance with the Organization’s Risk Assessment 71 4. Inform Relevant Personnel Who Must Use Data or Network Security Information about What Is Happening and Otherwise Facilitate Organizational Communication 71 5. Document the Process for Event Detection to Improve the Organization’s Detection Systems 72 Summary 72 Chapter Quiz 73 Essential Reading for Tools and Techniques for Detecting a Cyberattack 74 Chapter 4 Developing a Continuity of Operations Plan 75 Introduction 77 A. One Size Does Not Fit All 77 I. Response 77 A. Develop an Executable Response Plan 79 B. Understand the Importance of Communications in Incident Response 80 C. Prepare for Corporate-Wide Involvement During Some Cybersecurity Attacks 81 II. Analysis 82 A. Examine Your Intrusion Detection System in Analyzing an Incident 82 B. Understand the Impact of the Event 83 C. Gather and Preserve Evidence 84 D. Prioritize the Treatment of the Incident Consistent with Your Response Plan 84 E. Establish Processes for Handling Vulnerability Disclosures 85 III. Mitigation 86 A. Take Steps to Contain the Incident 86 B. Decrease the Threat Level by Eliminating or Intercepting the Adversary as Soon as the Incident Occurs 87 C. Mitigate Vulnerabilities or Designate Them as Accepted Risk 88 IV. Recover 88 A. Recovery Plan Is Executed During or After a Cybersecurity Incident 89 B. Update Recovery Procedures Based on New Information as Recovery Gets Underway 91 C. Develop Relationships with Media to Accurately Disseminate Information and Engage in Reputational Damage Limitation 92 Summary 92 Chapter Quiz 93 Essential Reading for Developing a Continuity of Operations Plan 94 Chapter 5 Supply Chain Risk Management 95 Introduction 96 I. NIST Special Publication 800-161 96 II. Software Bill of Materials 97 III. NIST Revised Framework Incorporates Major Supply Chain Category 98 A. Identify, Establish, and Assess Cyber Supply Chain Risk Management Processes and Gain Stakeholder Agreement 98 B. Identify, Prioritize, and Assess Suppliers and Third-Party Partners of Suppliers 99 C. Develop Contracts with Suppliers and Third-Party Partners to Address Your Organization’s Supply Chain Risk Management Goals 100 D. Routinely Assess Suppliers and Third-Party Partners Using Audits, Test Results, and Other Forms of Evaluation 101 E. Test to Make Sure Your Suppliers and Third-Party Providers Can Respond to and Recover from Service Disruption 102 Summary 103 Chapter Quiz 103 Essential Reading for Supply Chain Risk Management 104 Chapter 6 Manufacturing and Industrial Control Systems Security 105 Essential Reading on Manufacturing and Industrial Control Security 110 Appendix A: Helpful Advice for Small Organizations Seeking to Implement Some of the Book’s Recommendations 111 Appendix B: Critical Security Controls Version 8.0 Mapped to NIST CSF v1.1 113 Answers to Chapter Quizzes 121 Index 131

Read more less

Book SynopsisMaster CEH v11 and identify your weak spots CEH: Certified Ethical Hacker Version11Practice Testsare the ideal preparation for this high-stakes exam. Five complete, unique practice tests are designed to help you identify weak spots in your understanding, so you can direct your preparation efforts efficiently and gain the confidenceand skillsyou need to pass. These tests cover allsectionsections of the examblueprint, allowing you to test your knowledge ofBackground,Analysis/Assessment, Security, Tools/Systems/Programs, Procedures/Methodology, Regulation/Policy, and Ethics. Coverage aligns with CEH version11, including materialto test your knowledge ofreconnaissance and scanning,cloud, tablet, and mobileand wirelesssecurity and attacks, the latest vulnerabilities, and the new emphasis on Internet of Things (IoT). The exams are designed to familiarize CEH candidates with the test format, allowing them to become more comfortableapply their knowledge and skills in a high-pressure test setting. The ideal companion for the SybexCEH v11 Study Guide, this book is an invaluable tool for anyone aspiring to thishighly-regardedcertification. Offered by the International Council of Electronic Commerce Consultants, the Certified Ethical Hacker certification is unique in the penetration testingsphere, andrequires preparation specific to the CEH exam more than general IT security knowledge. This book of practice tests help you steer your study where it needs to go by giving you a glimpse of exam day while there's still time to prepare. Practice allsevensections of the CEH v11 examTest your knowledge of security, tools, procedures, and regulationsGauge your understanding ofvulnerabilities and threatsMaster the material well in advance of exam day By getting inside the mind ofan attacker, you gain a one-of-a-kind perspective that dramatically boosts your marketability and advancement potential. If you're ready to attempt this unique certification, the CEH: Certified Ethical Hacker Version 11 Practice Tests are the major preparation tool you should not be without.Table of ContentsIntroduction vi Chapter 1 Practice Test 1 1 Chapter 2 Practice Test 2 27 Chapter 3 Practice Test 3 55 Chapter 4 Practice Test 4 81 Chapter 5 Practice Test 5 107 Appendix Answers to Practice Tests 133 Chapter 1: Practice Test 1 134 Chapter 2: Practice Test 2 145 Chapter 3: Practice Test 3 157 Chapter 4: Practice Test 4 169 Chapter 5: Practice Test 5 180 Index 191

Read more less

Book SynopsisDistributed Systems Comprehensive textbook resource on distributed systemsintegrates foundational topics with advanced topics of contemporary importance within the field Distributed Systems: Theory and Applications is organized around three layers of abstractions: networks, middleware tools, and application framework. It presents data consistency models suited for requirements of innovative distributed shared memory applications. The book also focuses on distributed processing of big data, representation of distributed knowledge and management of distributed intelligence via distributed agents. To aid in understanding how these concepts apply to real-world situations, the work presents a case study on building a P2P Integrated E-Learning system. Downloadable lecture slides are included to help professors and instructors convey key concepts to their students. Additional topics discussed in Distributed Systems: Theory and Applications include: Table of ContentsAbout the Authors xv Preface xvii Acknowledgments xxi Acronyms xxiii 1 Introduction 1 1.1 Advantages of Distributed Systems 1 1.2 Defining Distributed Systems 3 1.3 Challenges of a Distributed System 5 1.4 Goals of Distributed System 6 1.4.1 Single System View 7 1.4.2 Hiding Distributions 7 1.4.3 Degrees and Distribution of Hiding 9 1.4.4 Interoperability 10 1.4.5 Dynamic Reconfiguration 10 1.5 Architectural Organization 11 1.6 Organization of the Book 12 Bibliography 13 2 The Internet 15 2.1 Origin and Organization 15 2.1.1 ISPs and the Topology of the Internet 17 2.2 Addressing the Nodes 17 2.3 Network Connection Protocol 20 2.3.1 IP Protocol 22 2.3.2 Transmission Control Protocol 22 2.3.3 User Datagram Protocol 22 2.4 Dynamic Host Control Protocol 23 2.5 Domain Name Service 24 2.5.1 Reverse DNS Lookup 27 2.5.2 Client Server Architecture 30 2.6 Content Distribution Network 32 2.7 Conclusion 34 Exercises 34 Bibliography 35 3 Process to Process Communication 37 3.1 Communication Types and Interfaces 38 3.1.1 Sequential Type 38 3.1.2 Declarative Type 39 3.1.3 Shared States 40 3.1.4 Message Passing 41 3.1.5 Communication Interfaces 41 3.2 Socket Programming 42 3.2.1 Socket Data Structures 43 3.2.2 Socket Calls 44 3.3 Remote Procedure Call 48 3.3.1 Xml RPC 52 3.4 Remote Method Invocation 55 3.5 Conclusion 59 Exercises 59 Additional Web Resources 61 Bibliography 61 4 Microservices, Containerization, and MPI 63 4.1 Microservice Architecture 64 4.2 REST Requests and APIs 66 4.2.1 Weather Data Using REST API 67 4.3 Cross Platform Applications 68 4.4 Message Passing Interface 78 4.4.1 Process Communication Models 78 4.4.2 Programming with MPI 81 4.5 Conclusion 87 Exercises 88 Additional Internet Resources 89 Bibliography 89 5 Clock Synchronization and Event Ordering 91 5.1 The Notion of Clock Time 92 5.2 External Clock Based Mechanisms 93 5.2.1 Cristian’s Algorithm 93 5.2.2 Berkeley Clock Protocol 94 5.2.3 Network Time Protocol 95 5.2.3.1 Symmetric Mode of Operation 96 5.3 Events and Temporal Ordering 97 5.3.1 Causal Dependency 99 5.4 Logical Clock 99 5.5 Causal Ordering of Messages 106 5.6 Multicast Message Ordering 107 5.6.1 Implementing FIFO Multicast 110 5.6.2 Implementing Causal Ordering 112 5.6.3 Implementing Total Ordering 113 5.6.4 Reliable Multicast 114 5.7 Interval Events 115 5.7.1 Conceptual Neighborhood 116 5.7.2 Spatial Events 118 5.8 Conclusion 120 Exercises 121 Bibliography 123 6 Global States and Termination Detection 127 6.1 Cuts and Global States 127 6.1.1 Global States 132 6.1.2 Recording of Global States 134 6.1.3 Problem in Recording Global State 138 6.2 Liveness and Safety 140 6.3 Termination Detection 143 6.3.1 Snapshot Based Termination Detection 144 6.3.2 Ring Method 145 6.3.3 Tree Method 148 6.3.4 Weight Throwing Method 151 6.4 Conclusion 153 Exercises 154 Bibliography 156 7 Leader Election 157 7.1 Impossibility Result 158 7.2 Bully Algorithm 159 7.3 Ring-Based Algorithms 160 7.3.1 Circulate IDs All the Way 161 7.3.2 As Far as an ID Can Go 162 7.4 Hirschberg and Sinclair Algorithm 163 7.5 Distributed Spanning Tree Algorithm 167 7.5.1 Single Initiator Spanning Tree 167 7.5.2 Multiple Initiators Spanning Tree 170 7.5.3 Minimum Spanning Tree 176 7.6 Leader Election in Trees 176 7.6.1 Overview of the Algorithm 176 7.6.2 Activation Stage 177 7.6.3 Saturation Stage 178 7.6.4 Resolution Stage 179 7.6.5 Two Nodes Enter SATURATED State 180 7.7 Leased Leader Election 182 7.8 Conclusion 184 Exercises 185 Bibliography 187 8 Mutual Exclusion 189 8.1 System Model 190 8.2 Coordinator-Based Solution 192 8.3 Assertion-Based Solutions 192 8.3.1 Lamport’s Algorithm 192 8.3.2 Improvement to Lamport’s Algorithm 195 8.3.3 Quorum-Based Algorithms 196 8.4 Token-Based Solutions 203 8.4.1 Suzuki and Kasami’s Algorithm 203 8.4.2 Singhal’s Heuristically Aided Algorithm 206 8.4.3 Raymond’s Tree-Based Algorithm 212 8.5 Conclusion 214 Exercises 215 Bibliography 216 9 Agreements and Consensus 219 9.1 System Model 220 9.1.1 Failures in Distributed System 221 9.1.2 Problem Definition 222 9.1.3 Agreement Problem and Its Equivalence 223 9.2 Byzantine General Problem (BGP) 225 9.2.1 BGP Solution Using Oral Messages 228 9.2.2 Phase King Algorithm 232 9.3 Commit Protocols 233 9.3.1 Two-Phase Commit Protocol 234 9.3.2 Three-Phase Commit 238 9.4 Consensus 239 9.4.1 Consensus in Synchronous Systems 239 9.4.2 Consensus in Asynchronous Systems 241 9.4.3 Paxos Algorithm 242 9.4.4 Raft Algorithm 244 9.4.5 Leader Election 246 9.5 Conclusion 248 Exercises 249 Bibliography 250 10 Gossip Protocols 253 10.1 Direct Mail 254 10.2 Generic Gossip Protocol 255 10.3 Anti-entropy 256 10.3.1 Push-Based Anti-Entropy 257 10.3.2 Pull-Based Anti-Entropy 258 10.3.3 Hybrid Anti-Entropy 260 10.3.4 Control and Propagation in Anti-Entropy 260 10.4 Rumor-mongering Gossip 261 10.4.1 Analysis of Rumor Mongering 262 10.4.2 Fault-Tolerance 265 10.5 Implementation Issues 265 10.5.1 Network-Related Issues 266 10.6 Applications of Gossip 267 10.6.1 Peer Sampling 267 10.6.2 Failure Detectors 270 10.6.3 Distributed Social Networking 271 10.7 Gossip in IoT Communication 273 10.7.1 Context-Aware Gossip 273 10.7.2 Flow-Aware Gossip 274 10.7.2.1 Fire Fly Gossip 274 10.7.2.2 Trickle 275 10.8 Conclusion 278 Exercises 279 Bibliography 280 11 Message Diffusion Using Publish and Subscribe 283 11.1 Publish and Subscribe Paradigm 284 11.1.1 Broker Network 285 11.2 Filters and Notifications 287 11.2.1 Subscription and Advertisement 288 11.2.2 Covering Relation 288 11.2.3 Merging Filters 290 11.2.4 Algorithms 291 11.3 Notification Service 294 11.3.1 Siena 294 11.3.2 Rebeca 295 11.3.3 Routing of Notification 296 11.4 MQTT 297 11.5 Advanced Message Queuing Protocol 299 11.6 Effects of Technology on Performance 301 11.7 Conclusions 303 Exercises 304 Bibliography 305 12 Peer-to-Peer Systems 309 12.1 The Origin and the Definition of P2P 310 12.2 P2P Models 311 12.2.1 Routing in P2P Network 312 12.3 Chord Overlay 313 12.4 Pastry 321 12.5 Can 325 12.6 Kademlia 327 12.7 Conclusion 331 Exercises 332 Bibliography 333 13 Distributed Shared Memory 337 13.1 Multicore and S-DSM 338 13.1.1 Coherency by Delegation to a Central Server 339 13.2 Manycore Systems and S-DSM 340 13.3 Programming Abstractions 341 13.3.1 MapReduce 341 13.3.2 OpenMP 343 13.3.3 Merging Publish and Subscribe with DSM 345 13.4 Memory Consistency Models 347 13.4.1 Sequential Consistency 349 13.4.2 Linearizability or Atomic Consistency 351 13.4.3 Relaxed Consistency Models 352 13.4.3.1 Release Consistency 356 13.4.4 Comparison of Memory Models 357 13.5 DSM Access Algorithms 358 13.5.1 Central Sever Algorithm 359 13.5.2 Migration Algorithm 360 13.5.3 Read Replication Algorithm 361 13.5.4 Full Replication Algorithm 362 13.6 Conclusion 364 Exercises 364 Bibliography 367 14 Distributed Data Management 371 14.1 Distributed Storage Systems 372 14.1.1 Raid 372 14.1.2 Storage Area Networks 372 14.1.3 Cloud Storage 373 14.2 Distributed File Systems 375 14.3 Distributed Index 376 14.4 NoSQL Databases 377 14.4.1 Key-Value and Document Databases 378 14.4.1.1 MapReduce Algorithm 380 14.4.2 Wide Column Databases 381 14.4.3 Graph Databases 382 14.4.3.1 Pregel Algorithm 384 14.5 Distributed Data Analytics 386 14.5.1 Distributed Clustering Algorithms 388 14.5.1.1 Distributed K-Means Clustering Algorithm 388 14.5.2 Stream Clustering 391 14.5.2.1 BIRCH Algorithm 392 14.6 Conclusion 393 Exercises 394 Bibliography 395 15 Distributed Knowledge Management 399 15.1 Distributed Knowledge 400 15.2 Distributed Knowledge Representation 401 15.2.1 Resource Description Framework (RDF) 401 15.2.2 Web Ontology Language (OWL) 406 15.3 Linked Data 407 15.3.1 Friend of a Friend 407 15.3.2 DBpedia 408 15.4 Querying Distributed Knowledge 409 15.4.1 SPARQL Query Language 410 15.4.2 SPARQL Query Semantics 411 15.4.3 SPARQL Query Processing 413 15.4.4 Distributed SPARQL Query Processing 414 15.4.5 Federated and Peer-to-Peer SPARQL Query Processing 416 15.5 Data Integration in Distributed Sensor Networks 421 15.5.1 Semantic Data Integration 422 15.5.2 Data Integration in Constrained Systems 424 15.6 Conclusion 427 Exercises 428 Bibliography 429 16 Distributed Intelligence 433 16.1 Agents and Multi-Agent Systems 434 16.1.1 Agent Embodiment 436 16.1.2 Mobile Agents 436 16.1.3 Multi-Agent Systems 437 16.2 Communication in Agent-Based Systems 438 16.2.1 Agent Communication Protocols 439 16.2.2 Interaction Protocols 440 16.2.2.1 Request Interaction Protocol 441 16.3 Agent Middleware 441 16.3.1 FIPA Reference Model 442 16.3.2 FIPA Compliant Middleware 443 16.3.2.1 JADE: Java Agent Development Environment 443 16.3.2.2 MobileC 443 16.3.3 Agent Migration 444 16.4 Agent Coordination 445 16.4.1 Planning 447 16.4.1.1 Distributed Planning Paradigms 447 16.4.1.2 Distributed Plan Representation and Execution 448 16.4.2 Task Allocation 450 16.4.2.1 Contract-Net Protocol 450 16.4.2.2 Allocation of Multiple Tasks 452 16.4.3 Coordinating Through the Environment 453 16.4.3.1 Construct-Ant-Solution 455 16.4.3.2 Update-Pheromone 456 16.4.4 Coordination Without Communication 456 16.5 Conclusion 456 Exercises 457 Bibliography 459 17 Distributed Ledger 461 17.1 Cryptographic Techniques 462 17.2 Distributed Ledger Systems 464 17.2.1 Properties of Distributed Ledger Systems 465 17.2.2 A Framework for Distributed Ledger Systems 466 17.3 Blockchain 467 17.3.1 Distributed Consensus in Blockchain 468 17.3.2 Forking 470 17.3.3 Distributed Asset Tracking 471 17.3.4 Byzantine Fault Tolerance and Proof of Work 472 17.4 Other Techniques for Distributed Consensus 473 17.4.1 Alternative Proofs 473 17.4.2 Non-linear Data Structures 474 17.4.2.1 Tangle 474 17.4.2.2 Hashgraph 476 17.5 Scripts and Smart Contracts 480 17.6 Distributed Ledgers for Cyber-Physical Systems 483 17.6.1 Layered Architecture 484 17.6.2 Smart Contract in Cyber-Physical Systems 486 17.7 Conclusion 486 Exercises 487 Bibliography 488 18 Case Study 491 18.1 Collaborative E-Learning Systems 492 18.2 P2P E-Learning System 493 18.2.1 Web Conferencing Versus P2P-IPS 495 18.3 P2P Shared Whiteboard 497 18.3.1 Repainting Shared Whiteboard 497 18.3.2 Consistency of Board View at Peers 498 18.4 P2P Live Streaming 500 18.4.1 Peer Joining 500 18.4.2 Peer Leaving 503 18.4.3 Handling “Ask Doubt” 504 18.5 P2P-IPS for Stored Contents 504 18.5.1 De Bruijn Graphs for DHT Implementation 505 18.5.2 Node Information Structure 507 18.5.2.1 Join Example 510 18.5.3 Leaving of Peers 510 18.6 Searching, Sharing, and Indexing 511 18.6.1 Pre-processing of Files 511 18.6.2 File Indexing 512 18.6.3 File Lookup and Download 512 18.7 Annotations and Discussion Forum 513 18.7.1 Annotation Format 513 18.7.2 Storing Annotations 514 18.7.3 Audio and Video Annotation 514 18.7.4 PDF Annotation 514 18.7.5 Posts, Comments, and Announcements 514 18.7.6 Synchronization of Posts and Comments 515 18.7.6.1 Epidemic Dissemination 516 18.7.6.2 Reconciliation 516 18.8 Simulation Results 516 18.8.1 Live Streaming and Shared Whiteboard 517 18.8.2 De Bruijn Overlay 518 18.9 Conclusion 520 Bibliography 521 Index 525

Read more less

Book Synopsis6G Key Technologies An accessible and integrated roadmap to the technologies enabling 6G development In 6G Key Technologies: A Comprehensive Guide, two internationally well-recognized experts deliver a thoroughly original and comprehensive exploration of the technologies enabling and contributing to the development of 6G. The book presents the vision of 6G by reviewing the evolution of communications technologies toward 6G and examining the factors driving that development, as well as their requirements, use cases, key performance indicators, and more. Readers will discover: Thorough introductions to the standardization and technology evolution toward 6G, as well as the vision behind the development of 6G in terms of architectures, algorithms, protocols, and applications. In-depth explorations of full-spectrum wireless technologies in 6G, including enhanced millimeter wave technologies, terahertz-based communications and networking, viTable of ContentsPreface xv List of Abbreviations xxi Part I The Vision of 6G and Technical Evolution 1 1 Standards History of Cellular Systems Toward 6G 3 1.1 0G: Pre-Cellular Systems 4 1.2 1G: The Birth of Cellular Network 6 1.2.1 Nordic Mobile Telephone (NMT) 7 1.2.2 Advanced Mobile Phone System (AMPS) 8 1.3 2G: From Analog to Digital 9 1.3.1 Global System for Mobile communications (GSM) 10 1.3.2 Digital Advanced Mobile Phone System (D-AMPS) 11 1.3.3 Interim Standard 95 (IS-95) 11 1.3.4 Personal Digital Cellular (PDC) 12 1.3.5 General Packet Radio Service (GPRS) 12 1.3.6 Enhanced Data Rates for GSM Evolution (EDGE) 14 1.4 3G: From Voice to Data-Centric 15 1.4.1 Wideband Code-Division Multiple Access (WCDMA) 16 1.4.2 Code-Division Multiple Access 2000 (CDMA2000) 18 1.4.3 Time Division-Synchronous Code-Division Multiple Access (TD-SCDMA) 21 1.4.4 Worldwide Interoperability for Microwave Access (WiMAX) 22 1.5 4G: Mobile Internet 23 1.5.1 Long-Term Evolution-Advanced (LTE-Advanced) 25 1.5.2 WirelessMAN-Advanced 28 1.6 5G: From Human to Machine 30 1.7 Beyond 5G 37 1.8 Conclusions 39 References 39 2 Pre-6G Technology and System Evolution 43 2.1 1G –AMPS 44 2.1.1 System Architecture 44 2.1.2 Key Technologies 46 2.1.2.1 Frequency Reuse 46 2.1.2.2 Cell Splitting 47 2.1.2.3 Sectorization 48 2.1.2.4 Handover 48 2.1.2.5 Frequency-Division Multiple Access 49 2.2 2G –GSM 49 2.2.1 System Architecture 50 2.2.1.1 Mobile Station Subsystem 50 2.2.1.2 Bases Station Subsystem 50 2.2.1.3 Network and Switching Subsystem 51 2.2.1.4 Operation and Support Subsystem 51 2.2.1.5 General Packet Radio Service 52 2.2.1.6 Gateway GPRS Support Node 53 2.2.2 Key Technologies 53 2.2.2.1 Time-Division Multiple Access 53 2.2.2.2 Frequency Hopping 54 2.2.2.3 Speech Compression 55 2.2.2.4 Channel Coding 55 2.2.2.5 Digital Modulation 56 2.2.2.6 Discontinuous Transmission (DXT) 56 2.3 3G –WCDMA 56 2.3.1 System Architecture 57 2.3.1.1 User Equipment 57 2.3.1.2 UMTS Terrestrial Radio Access Network 58 2.3.1.3 Core Network 59 2.3.2 Key Technologies 60 2.3.2.1 Code-Division Multiple Access 60 2.3.2.2 Rake Receiver 63 2.3.2.3 Turbo Codes 63 2.4 4G – LTE 64 2.4.1 System Architecture 65 2.4.1.1 Evolved Universal Terrestrial Radio Access Network 65 2.4.1.2 Evolved Packet Core 65 2.4.2 Key Technologies 68 2.4.2.1 Orthogonal Frequency-Division Multiplexing 70 2.4.2.2 Carrier Aggregation 71 2.4.2.3 Relaying 71 2.4.2.4 Heterogeneous Network 72 2.4.2.5 Coordinated Multi-Point Transmission and Reception 73 2.4.2.6 Device-to-Device Communications 73 2.4.2.7 License-Assisted Access 74 2.5 5G –New Radio 75 2.5.1 System Architecture 76 2.5.1.1 5G Core Network 77 2.5.1.2 Next Generation Radio Access Network 79 2.5.2 Key Technologies 81 2.5.2.1 Massive MIMO 81 2.5.2.2 MillimeterWave 82 2.5.2.3 Non-Orthogonal Multiple Access 83 2.5.2.4 SDN/NFV 84 2.5.2.5 Network Slicing 85 2.5.2.6 Polar Codes 86 2.6 Conclusions 87 References 87 3 The Vision of 6G: Drivers, Enablers, Uses, and Roadmap 89 3.1 Background 90 3.2 Explosive Mobile Traffic 92 3.3 Use Cases 94 3.4 Usage Scenarios 98 3.5 Performance Requirements 102 3.6 Research Initiatives and Roadmap 107 3.6.1 ITU 108 3.6.2 Third Generation Partnership Project 110 3.6.3 Industry 110 3.6.4 Europe 110 3.6.5 The United States 113 3.6.6 China 116 3.6.7 Japan 116 3.6.8 South Korea 117 3.7 Key Technologies 117 3.7.1 MillimeterWave 118 3.7.2 Terahertz Communications 118 3.7.3 Optical Wireless Communications 119 3.7.4 Massive MIMO 120 3.7.5 Intelligent Reflecting Surfaces 121 3.7.6 Next-Generation Multiple Access 122 3.7.7 Open Radio Access Network 123 3.7.8 Non-Terrestrial Networks 124 3.7.9 Artificial Intelligence 125 3.7.10 Communication-Computing-Sensing Convergence 127 3.8 Conclusions 128 References 128 Part II Full-Spectra Wireless Communications in 6G 131 4 Enhanced Millimeter-Wave Wireless Communications in 6G 133 4.1 Spectrum Shortage 134 4.2 mmWave Propagation Characteristics 136 4.2.1 Large-Scale Propagation Effects 137 4.2.1.1 Free-Space Propagation Loss 137 4.2.1.2 NLOS Propagation and Shadowing 139 4.2.1.3 Atmospheric Attenuation 141 4.2.2 Small-Scale Propagation Effects 143 4.2.3 Delay Spread and Coherence Bandwidth 145 4.2.4 Doppler Spread and Coherence Bandwidth 146 4.2.5 Angular Spread 149 4.3 Millimeter-Wave Channel Models 152 4.3.1 Large-Scale Fading 152 4.3.2 3GPP Channel Models 155 4.3.2.1 Urban Micro Scenario 155 4.3.2.2 Urban Macro Scenario 156 4.3.2.3 Indoor Scenario 157 4.3.3 Small-Scale Fading 159 4.4 mmWave Transmission Technologies 163 4.4.1 Beamforming 163 4.4.1.1 Digital Beamforming 164 4.4.1.2 Analog Beamforming 168 4.4.1.3 Hybrid Beamforming 169 4.4.1.4 3D Beamforming 173 4.4.2 Initial Access 175 4.4.2.1 Multi-Beam Synchronization and Broadcasting 176 4.4.2.2 Conventional Initial Access in LTE 178 4.4.2.3 Beam-Sweeping Initial Access in NR 181 4.4.3 Omnidirectional Beamforming 183 4.4.3.1 Random Beamforming 185 4.4.3.2 Enhanced Random Beamforming 187 4.4.3.3 Complementary Random Beamforming 190 4.5 Summary 192 References 193 5 Terahertz Technologies and Systems for 6G 195 5.1 Potential of Terahertz Band 196 5.1.1 Spectrum Limit 196 5.1.2 The Need of Exploiting Terahertz Band 198 5.1.3 Spectrum Regulation on Terahertz Band 203 5.2 Terahertz Applications 205 5.2.1 Terahertz Wireless Communications 205 5.2.1.1 Terabit Cellular Hotspot 205 5.2.1.2 Terabit Wireless Local-Area Network 206 5.2.1.3 Terabit Device-To-Device Link 206 5.2.1.4 Secure Wireless Communication 207 5.2.1.5 Terabit Wireless Backhaul 207 5.2.1.6 Terahertz Nano-Communications 208 5.2.2 Non-Communication Terahertz Applications 209 5.2.2.1 Terahertz Sensing 209 5.2.2.2 Terahertz Imaging 210 5.2.2.3 Terahertz Positioning 212 5.3 Challenges of Terahertz Communications 212 5.3.1 High Free-Space Path Loss 213 5.3.2 Atmospheric Attenuation 215 5.3.3 Weather Effects 222 5.3.4 Blockage 224 5.3.5 High Channel Fluctuation 226 5.4 Array-of-Subarrays Beamforming 228 5.5 Lens Antenna 231 5.5.1 Refraction of RadioWaves 232 5.5.2 Lens Antenna Array 233 5.6 Case Study – IEEE 802.15.3d 236 5.6.1 IEEE 802.15.3d Usage Scenarios 237 5.6.2 Physical Layer 240 5.6.2.1 Channelization 240 5.6.2.2 Modulation 242 5.6.2.3 Forward Error Correction 242 5.6.3 Medium Access Control 244 5.6.4 Frame Structure 246 5.6.4.1 Preamble 247 5.6.4.2 PHY Header 247 5.6.4.3 MAC Header 248 5.6.4.4 Construction Process of Frame Header 248 5.7 Summary 250 References 251 6 Optical and Visible Light Wireless Communications in 6G 253 6.1 The Optical Spectrum 254 6.1.1 Infrared 254 6.1.2 Visible Light 256 6.1.3 Ultraviolet 257 6.2 Advantages and Challenges 258 6.3 OWC Applications 262 6.4 Evolution of Optical Wireless Communications 264 6.4.1 Wireless Infrared Communications 265 6.4.2 Visible Light Communications 266 6.4.3 Wireless Ultraviolet Communications 267 6.4.4 Free-Space Optical Communications 268 6.5 Optical Transceiver 268 6.6 Optical Sources and Detectors 271 6.6.1 Light-Emitting Diode 273 6.6.2 Laser Diode 276 6.6.3 Photodiode 280 6.7 Optical Link Configuration 283 6.8 Optical MIMO 286 6.8.1 Spatial Multiplexing 286 6.8.2 Spatial Modulation 289 6.9 Summary 292 References 292 Part III Smart Radio Networks and Air Interface Technologies for 6G 295 7 Intelligent Reflecting Surface-Aided Communications for 6G 297 7.1 Basic Concept 298 7.2 IRS-Aided Single-Antenna Transmission 302 7.2.1 Signal Model 303 7.2.2 Passive Beamforming 306 7.2.3 Product-Distance Path Loss 309 7.3 IRS-Aided Multi-Antenna Transmission 310 7.3.1 Joint Active and Passive Beamforming 310 7.3.1.1 SDR Solution 312 7.3.1.2 Alternating Optimization 314 7.3.2 Joint Precoding and Reflecting 315 7.4 Dual-Beam Intelligent Reflecting Surface 318 7.4.1 Dual Beams Over Hybrid Beamforming 318 7.4.2 Dual-Beam IRS 321 7.4.3 Optimization Design 322 7.5 IRS-Aided Wideband Communications 325 7.5.1 Cascaded Frequency-Selective Channel 325 7.5.2 IRS-Aided OFDM System 327 7.5.3 Rate Maximization 330 7.6 Multi-User IRS Communications 331 7.6.1 Multiple Access Model 332 7.6.2 Orthogonal Multiple Access 333 7.6.2.1 Time-Division Multiple Access 334 7.6.2.2 Frequency-Division Multiple Access 336 7.6.3 Non-Orthogonal Multiple Access 337 7.7 Channel Aging and Prediction 339 7.7.1 Outdated Channel State Information 341 7.7.1.1 Doppler Shift 341 7.7.1.2 Phase Noise 343 7.7.2 Impact of Channel Aging on IRS 343 7.7.3 Classical Channel Prediction 345 7.7.3.1 Autoregressive Model 345 7.7.3.2 Parametric Model 347 7.7.4 Recurrent Neural Network 348 7.7.5 RNN-Based Channel Prediction 351 7.7.5.1 Flat-Fading Channel Prediction 352 7.7.5.2 Frequency-Selective Fading Channel Prediction 353 7.7.6 Long-Short Term Memory 355 7.7.7 Deep Learning-Based Channel Prediction 358 7.8 Summary 359 References 359 8 Multiple Dimensional and Antenna Techniques for 6G 363 8.1 Spatial Diversity 364 8.2 Receive Combining 366 8.2.1 Selection Combining 368 8.2.2 Maximal Ratio Combining 370 8.2.3 Equal-Gain Combining 373 8.3 Space-Time Coding 374 8.3.1 Repetition Coding 375 8.3.2 Space-Time Trellis Codes 377 8.3.3 Alamouti Coding 379 8.3.4 Space-Time Block Codes 381 8.4 Transmit Antenna Selection 383 8.5 Beamforming 386 8.5.1 Classical Beamforming 386 8.5.2 Single-Stream Precoding 390 8.6 Spatial Multiplexing 393 8.6.1 Single-User MIMO 394 8.6.2 MIMO Precoding 400 8.6.2.1 Full CSI at the Transmitter 400 8.6.2.2 Limited CSI at the Transmitter 403 8.6.3 MIMO Detection 406 8.6.3.1 Maximum-Likelihood Detection 406 8.6.3.2 Linear Detection 407 8.6.3.3 Successive Interference Cancelation 410 8.7 Summary 413 References 413 9 Cellular and Cell-Free Massive MIMO Techniques in 6G 417 9.1 Multi-User MIMO 418 9.1.1 Broadcast and Multiple-Access Channels 419 9.1.2 Multi-User Sum Capacity 422 9.1.3 Dirty Paper Coding 425 9.1.4 Zero-Forcing Precoding 428 9.1.5 Block Diagonalization 429 9.2 Massive MIMO 432 9.2.1 CSI Acquisition 433 9.2.2 Linear Detection in Uplink 435 9.2.2.1 Matched Filtering 436 9.2.2.2 ZF Detection 436 9.2.2.3 MMSE Detection 437 9.2.3 Linear Precoding in Downlink 437 9.2.3.1 Conjugate Beamforming 438 9.2.3.2 ZF Precoding 438 9.2.3.3 Regularized ZF Precoding 439 9.3 Multi-Cell Massive MIMO 439 9.3.1 Pilot Contamination 441 9.3.2 Uplink Data Transmission 444 9.3.3 Downlink Data Transmission 446 9.4 Cell-Free Massive MIMO 447 9.4.1 Cell-Free Network Layout 448 9.4.2 Uplink Training 449 9.4.3 Uplink Signal Detection 451 9.4.3.1 Matched Filtering 452 9.4.3.2 ZF Detection 452 9.4.3.3 MMSE Detection 452 9.4.4 Conjugate Beamforming 453 9.4.5 Zero-Forcing Precoding 455 9.4.6 Impact of Channel Aging 457 9.4.6.1 Channel Aging 457 9.4.6.2 Performance Degradation 460 9.5 Opportunistic Cell-Free Communications 464 9.5.1 Cell-free Massive Wideband Systems 464 9.5.2 Opportunistic AP Selection 466 9.5.3 Spectral Efficiency Analysis 468 9.6 Summary 472 References 472 10 Adaptive and Non-Orthogonal Multiple Access Systems in 6G 475 10.1 Frequency-Selective Fading Channel 476 10.2 Multi-Carrier Modulation 480 10.2.1 The Synthesis and Analysis Filters 480 10.2.2 Polyphase Implementation 483 10.2.3 Filter Bank Multi-Carrier 486 10.3 Orthogonal Frequency-Division Multiplexing 487 10.3.1 DFT Implementation 491 10.3.2 Cyclic Prefix 493 10.3.3 Frequency-Domain Signal Processing 496 10.3.4 Out-of-Band Emission 499 10.4 Orthogonal Frequency-Division Multiple Access 503 10.4.1 Orthogonal Frequency-Division Multiple Access 503 10.4.2 Single-Carrier Frequency-Division Multiple Access 505 10.4.3 Cyclic Delay Diversity 507 10.4.4 Multi-Cell OFDMA 510 10.5 Cell-Free Massive MIMO-OFDMA 512 10.5.1 The System Model 513 10.5.2 The Communication Process 516 10.5.2.1 Uplink Training 516 10.5.2.2 Uplink Payload Data Transmission 518 10.5.2.3 Downlink Payload Data Transmission 518 10.5.3 User-Specific Resource Allocation 519 10.6 Non-Orthogonal Multiple Access 520 10.6.1 Fundamentals of NOMA 521 10.6.1.1 Downlink Non-Orthogonal Multiplexing 522 10.6.1.2 Uplink Non-Orthogonal Multiple Access 525 10.6.2 Multi-User Superposition Coding 528 10.6.3 Uplink Grant-Free Transmission 531 10.6.4 Code-Domain NOMA 533 10.6.4.1 Low-Density Signature-CDMA/OFDM 533 10.6.4.2 Sparse Code Multiple Access 536 10.7 Summary 538 References 538 Index 541

Read more less

Book SynopsisTable of ContentsIntroduction xxv Assessment Test xlviii Part I Getting Started as an SSCP 1 Chapter 1 The Business Case for Decision Assurance and Information Security 3 Information: The Lifeblood of Business 4 Policy, Procedure, and Process: How Business Gets Business Done 10 Who Runs the Business? 20 Summary 24 Exam Essentials 24 Review Questions 26 Chapter 2 Information Security Fundamentals 33 The Common Needs for Privacy, Confidentiality, Integrity, and Availability 34 Training and Educating Everybody 47 SSCPs and Professional Ethics 47 Summary 49 Exam Essentials 50 Review Questions 54 Part II Integrated Risk Management and Mitigation 61 Chapter 3 Integrated Information Risk Management 63 It’s a Dangerous World 64 The Four Faces of Risk 75 Getting Integrated and Proactive with Information Defense 83 Risk Management: Concepts and Frameworks 89 Risk Assessment 95 Four Choices for Limiting or Containing Damage 107 Summary 114 Exam Essentials 114 Review Questions 120 Chapter 4 Operationalizing Risk Mitigation 127 From Tactical Planning to Information Security Operations 128 Operationalizing Risk Mitigation: Step by Step 134 The Ongoing Job of Keeping Your Baseline Secure 164 Ongoing, Continuous Monitoring 174 Reporting to and Engaging with Management 182 Summary 183 Exam Essentials 183 Review Questions 189 Part III The Technologies of Information Security 197 Chapter 5 Communications and Network Security 199 Trusting Our Communications in a Converged World 200 Internet Systems Concepts 206 Two Protocol Stacks, One Internet 218 Wireless Network Technologies 240 IP Addresses, DHCP, and Subnets 243 IPv4 vs. IPv6: Important Differences and Options 248 CIANA Layer by Layer 251 Securing Networks as Systems 262 Summary 273 Exam Essentials 273 Review Questions 280 Chapter 6 Identity and Access Control 285 Identity and Access: Two Sides of the Same CIANA+PS Coin 286 Identity Management Concepts 288 Access Control Concepts 295 Network Access Control 305 Implementing and Scaling IAM 310 User and Entity Behavior Analytics (UEBA) 329 Zero Trust Architectures 332 Summary 333 Exam Essentials 334 Review Questions 343 Chapter 7 Cryptography 349 Cryptography: What and Why 350 Building Blocks of Digital Cryptographic Systems 358 Keys and Key Management 367 “Why Isn’t All of This Stuff Secret?” 373 Cryptography and CIANA+PS 375 Public Key Infrastructures 381 Applying Cryptography to Meet Different Needs 399 Managing Cryptographic Assets and Systems 405 Measures of Merit for Cryptographic Solutions 407 Attacks and Countermeasures 408 PKI and Trust: A Recap 418 On the Near Horizon 420 Summary 423 Exam Essentials 424 Review Questions 429 Chapter 8 Hardware and Systems Security 435 Infrastructure Security Is Baseline Management 437 Securing the Physical Context 442 Infrastructures 101 and Threat Modeling 444 Endpoint Security 457 Malware: Exploiting the Infrastructure’s Vulnerabilities 462 Privacy and Secure Browsing 466 “The Sin of Aggregation” 469 Updating the Threat Model 469 Managing Your Systems’ Security 470 Summary 471 Exam Essentials 472 Review Questions 478 Chapter 9 Applications, Data, and Cloud Security 483 It’s a Data-Driven World…At the Endpoint 484 Software as Appliances 487 Applications Lifecycles and Security 490 CIANA+PS and Applications Software Requirements 498 Application Vulnerabilities 504 “Shadow IT:” The Dilemma of the User as Builder 507 Information Quality and Information Assurance 511 Protecting Data in Motion, in Use, and at Rest 514 Into the Clouds: Endpoint App and Data Security Considerations 522 Legal and Regulatory Issues 533 Countermeasures: Keeping Your Apps and Data Safe and Secure 535 Summary 536 Exam Essentials 537 Review Questions 548 Part IV People Power: What Makes or Breaks Information Security 555 Chapter 10 Incident Response and Recovery 557 Defeating the Kill Chain One Skirmish at a Time 558 Harsh Realities of Real Incidents 564 Incident Response Framework 566 Preparation 571 Detection and Analysis 578 Containment and Eradication 584 Recovery: Getting Back to Business 587 Post-Incident Activities 590 Summary 594 Exam Essentials 595 Review Questions 601 Chapter 11 Business Continuity via Information Security and People Power 607 What Is a Disaster? 608 Surviving to Operate: Plan for It! 609 Timelines for BC/DR Planning and Action 615 Options for Recovery 617 Cloud- Based “Do- Over” Buttons for Continuity, Security, and Resilience 623 People Power for BC/DR 626 Security Assessment: For BC/DR and Compliance 633 Converged Communications: Keeping Them Secure During BC/DR Actions 634 Summary 637 Exam Essentials 637 Review Questions 641 Chapter 12 Cross-Domain Challenges 647 Operationalizing Security Across the Immediate and Longer Term 648 Supply Chains, Security, and the SSCP 657 Other Dangers on the Web and Net 662 On Our Way to the Future 666 Enduring Lessons 672 Your Next Steps 677 At the Close 678 Exam Essentials 678 Review Questions 683 Appendix Answers to Review Questions 689 Chapter 1: The Business Case for Decision Assurance and Information Security 690 Chapter 2: Information Security Fundamentals 693 Chapter 3: Integrated Information Risk Management 695 Chapter 4: Operationalizing Risk Mitigation 698 Chapter 5: Communications and Network Security 701 Chapter 6: Identity and Access Control 704 Chapter 7: Cryptography 707 Chapter 8: Hardware and Systems Security 709 Chapter 9: Applications, Data, and Cloud Security 712 Chapter 10: Incident Response and Recovery 715 Chapter 11: Business Continuity via Information Security and People Power 718 Chapter 12: Cross- Domain Challenges 722 Index 727

Read more less

Book SynopsisDeep Reinforcement Learning for Wireless Communications and Networking Comprehensive guide to Deep Reinforcement Learning (DRL) as applied to wireless communication systems Deep Reinforcement Learning for Wireless Communications and Networking presents an overview of the development of DRL while providing fundamental knowledge about theories, formulation, design, learning models, algorithms and implementation of DRL together with a particular case study to practice. The book also covers diverse applications of DRL to address various problems in wireless networks, such as caching, offloading, resource sharing, and security. The authors discuss open issues by introducing some advanced DRL approaches to address emerging issues in wireless communications and networking. Covering new advanced models of DRL, e.g., deep dueling architecture and generative adversarial networks, as well as emerging problems considered in wireless networks, e.g., ambient backscatterTable of ContentsNotes on Contributors xiii Foreword xiv Preface xv Acknowledgments xviii Acronyms xix Introduction xxii Part I Fundamentals of Deep Reinforcement Learning 1 1 Deep Reinforcement Learning and Its Applications 3 1.1 Wireless Networks and Emerging Challenges 3 1.2 Machine Learning Techniques and Development of DRL 4 1.2.1 Machine Learning 4 1.2.2 Artificial Neural Network 7 1.2.3 Convolutional Neural Network 8 1.2.4 Recurrent Neural Network 9 1.2.5 Development of Deep Reinforcement Learning 10 1.3 Potentials and Applications of DRL 11 1.3.1 Benefits of DRL in Human Lives 11 1.3.2 Features and Advantages of DRL Techniques 12 1.3.3 Academic Research Activities 12 1.3.4 Applications of DRL Techniques 13 1.3.5 Applications of DRL Techniques in Wireless Networks 15 1.4 Structure of this Book and Target Readership 16 1.4.1 Motivations and Structure of this Book 16 1.4.2 Target Readership 19 1.5 Chapter Summary 20 References 21 2 Markov Decision Process and Reinforcement Learning 25 2.1 Markov Decision Process 25 2.2 Partially Observable Markov Decision Process 26 2.3 Policy and Value Functions 29 2.4 Bellman Equations 30 2.5 Solutions of MDP Problems 31 2.5.1 Dynamic Programming 31 2.5.1.1 Policy Evaluation 31 2.5.1.2 Policy Improvement 31 2.5.1.3 Policy Iteration 31 2.5.2 Monte Carlo Sampling 32 2.6 Reinforcement Learning 33 2.7 Chapter Summary 35 References 35 3 Deep Reinforcement Learning Models and Techniques 37 3.1 Value-Based DRL Methods 37 3.1.1 Deep Q-Network 38 3.1.2 Double DQN 41 3.1.3 Prioritized Experience Replay 42 3.1.4 Dueling Network 44 3.2 Policy-Gradient Methods 45 3.2.1 REINFORCE Algorithm 46 3.2.1.1 Policy Gradient Estimation 46 3.2.1.2 Reducing the Variance 48 3.2.1.3 Policy Gradient Theorem 50 3.2.2 Actor-Critic Methods 51 3.2.3 Advantage of Actor-Critic Methods 52 3.2.3.1 Advantage of Actor-Critic (A2C) 53 3.2.3.2 Asynchronous Advantage Actor-Critic (A3C) 55 3.2.3.3 Generalized Advantage Estimate (GAE) 57 3.3 Deterministic Policy Gradient (DPG) 59 3.3.1 Deterministic Policy Gradient Theorem 59 3.3.2 Deep Deterministic Policy Gradient (DDPG) 61 3.3.3 Distributed Distributional DDPG (D4PG) 63 3.4 Natural Gradients 63 3.4.1 Principle of Natural Gradients 64 3.4.2 Trust Region Policy Optimization (TRPO) 67 3.4.2.1 Trust Region 69 3.4.2.2 Sample-Based Formulation 70 3.4.2.3 Practical Implementation 70 3.4.3 Proximal Policy Optimization (PPO) 72 3.5 Model-Based RL 74 3.5.1 Vanilla Model-Based RL 75 3.5.2 Robust Model-Based RL: Model-Ensemble TRPO (ME-TRPO) 76 3.5.3 Adaptive Model-Based RL: Model-Based Meta-Policy Optimization (mb-mpo) 77 3.6 Chapter Summary 78 References 79 4 A Case Study and Detailed Implementation 83 4.1 System Model and Problem Formulation 83 4.1.1 System Model and Assumptions 84 4.1.1.1 Jamming Model 84 4.1.1.2 System Operation 85 4.1.2 Problem Formulation 86 4.1.2.1 State Space 86 4.1.2.2 Action Space 87 4.1.2.3 Immediate Reward 88 4.1.2.4 Optimization Formulation 88 4.2 Implementation and Environment Settings 89 4.2.1 Install TensorFlow with Anaconda 89 4.2.2 Q-Learning 90 4.2.2.1 Codes for the Environment 91 4.2.2.2 Codes for the Agent 96 4.2.3 Deep Q-Learning 97 4.3 Simulation Results and Performance Analysis 102 4.4 Chapter Summary 106 References 106 Part II Applications of Drl in Wireless Communications and Networking 109 5 DRL at the Physical Layer 111 5.1 Beamforming, Signal Detection, and Decoding 111 5.1.1 Beamforming 111 5.1.1.1 Beamforming Optimization Problem 111 5.1.1.2 DRL-Based Beamforming 113 5.1.2 Signal Detection and Channel Estimation 118 5.1.2.1 Signal Detection and Channel Estimation Problem 118 5.1.2.2 RL-Based Approaches 120 5.1.3 Channel Decoding 122 5.2 Power and Rate Control 123 5.2.1 Power and Rate Control Problem 123 5.2.2 DRL-Based Power and Rate Control 124 5.3 Physical-Layer Security 128 5.4 Chapter Summary 129 References 131 6 DRL at the MAC Layer 137 6.1 Resource Management and Optimization 137 6.2 Channel Access Control 139 6.2.1 DRL in the IEEE 802.11 MAC 141 6.2.2 MAC for Massive Access in IoT 143 6.2.3 MAC for 5G and B5G Cellular Systems 147 6.3 Heterogeneous MAC Protocols 155 6.4 Chapter Summary 158 References 158 7 DRL at the Network Layer 163 7.1 Traffic Routing 163 7.2 Network Slicing 166 7.2.1 Network Slicing-Based Architecture 166 7.2.2 Applications of DRL in Network Slicing 168 7.3 Network Intrusion Detection 179 7.3.1 Host-Based IDS 180 7.3.2 Network-Based IDS 181 7.4 Chapter Summary 183 References 183 8 DRL at the Application and Service Layer 187 8.1 Content Caching 187 8.1.1 QoS-Aware Caching 187 8.1.2 Joint Caching and Transmission Control 189 8.1.3 Joint Caching, Networking, and Computation 191 8.2 Data and Computation Offloading 193 8.3 Data Processing and Analytics 198 8.3.1 Data Organization 198 8.3.1.1 Data Partitioning 198 8.3.1.2 Data Compression 199 8.3.2 Data Scheduling 200 8.3.3 Tuning of Data Processing Systems 201 8.3.4 Data Indexing 202 8.3.4.1 Database Index Selection 202 8.3.4.2 Index Structure Construction 203 8.3.5 Query Optimization 205 8.4 Chapter Summary 206 References 207 Part III Challenges, Approaches, Open Issues, and Emerging Research Topics 213 9 DRL Challenges in Wireless Networks 215 9.1 Adversarial Attacks on DRL 215 9.1.1 Attacks Perturbing the State space 215 9.1.1.1 Manipulation of Observations 216 9.1.1.2 Manipulation of Training Data 218 9.1.2 Attacks Perturbing the Reward Function 220 9.1.3 Attacks Perturbing the Action Space 222 9.2 Multiagent DRL in Dynamic Environments 223 9.2.1 Motivations 223 9.2.2 Multiagent Reinforcement Learning Models 224 9.2.2.1 Markov/Stochastic Games 225 9.2.2.2 Decentralized Partially Observable Markov Decision Process (dpomdp) 226 9.2.3 Applications of Multiagent DRL in Wireless Networks 227 9.2.4 Challenges of Using Multiagent DRL in Wireless Networks 229 9.2.4.1 Nonstationarity Issue 229 9.2.4.2 Partial Observability Issue 229 9.3 Other Challenges 230 9.3.1 Inherent Problems of Using RL in Real-Word Systems 230 9.3.1.1 Limited Learning Samples 230 9.3.1.2 System Delays 230 9.3.1.3 High-Dimensional State and Action Spaces 231 9.3.1.4 System and Environment Constraints 231 9.3.1.5 Partial Observability and Nonstationarity 231 9.3.1.6 Multiobjective Reward Functions 232 9.3.2 Inherent Problems of DL and Beyond 232 9.3.2.1 Inherent Problems of dl 232 9.3.2.2 Challenges of DRL Beyond Deep Learning 233 9.3.3 Implementation of DL Models in Wireless Devices 236 9.4 Chapter Summary 237 References 237 10 DRL and Emerging Topics in Wireless Networks 241 10.1 DRL for Emerging Problems in Future Wireless Networks 241 10.1.1 Joint Radar and Data Communications 241 10.1.2 Ambient Backscatter Communications 244 10.1.3 Reconfigurable Intelligent Surface-Aided Communications 247 10.1.4 Rate Splitting Communications 249 10.2 Advanced DRL Models 252 10.2.1 Deep Reinforcement Transfer Learning 252 10.2.1.1 Reward Shaping 253 10.2.1.2 Intertask Mapping 254 10.2.1.3 Learning from Demonstrations 255 10.2.1.4 Policy Transfer 255 10.2.1.5 Reusing Representations 256 10.2.2 Generative Adversarial Network (GAN) for DRL 257 10.2.3 Meta Reinforcement Learning 258 10.3 Chapter Summary 259 References 259 Index 263

Read more less

Book SynopsisSECURITY AND PRIVACY VISION IN 6G Prepare for the future of mobile communication with this comprehensive study 6G is the next frontier in mobile communication, with development of 6G standards slated to begin as early as 2026. As telecommunications networks become faster and more intelligent, security and privacy concerns are critical. In an increasingly connected world, there is an urgent need for user data to be safeguarded and system security enhanced against a new generation of threats. Security and Privacy Vision in 6G provides a comprehensive survey of these threats and the emerging techniques for safeguarding against them. It includes mechanisms for prediction, detection, mitigation, and prevention, such that threats to privacy and security can be forestalled at any stage. Fully engaged with proposed 6G architectures, it is an essential resource for mobile communications professionals looking for a head start on the technology of the future. STable of ContentsAcronyms xvii About the Authors xix Foreword xx Preface xxii Acknowledgments xxv Part I Introduction 1 1 Evolution of Mobile Networks 3 1.1 Introduction 3 1.2 6G Mobile Communication Networks 4 1.2.1 6G as Envisioned Today 6 1.3 Key Driving Trends Toward 6G 6 1.4 6G Requirements/Vision 8 1.4.1 6G Development Timeline 10 References 12 2 Key 6G Technologies 15 2.1 Radio Network Technologies 15 2.1.1 Beyond Sub 6 GHz Toward THz Communication 15 2.1.2 Nonterrestrial Networks Toward 3D Networking 17 2.2 AI/ML/FL 19 2.3 DLT/Blockchain 22 2.4 Edge Computing 24 2.5 Quantum Communication 27 2.6 Other New Technologies 29 2.6.1 Visible Light Communications 29 2.6.2 Large Intelligent Surfaces 30 2.6.3 Compressive Sensing 30 2.6.4 Zero-Touch Network and Service Management 31 2.6.5 Efficient Energy Transfer and Harvesting 32 References 33 3 6G Security Vision 43 3.1 Overview of 6G Security Vision 43 3.1.1 New 6G Requirements 43 3.2 6G Security Vision and KPIs 45 3.2.1 Security Threat Landscape for 6G Architecture 47 References 48 Part II Security in 6G Architecture 51 4 6G Device Security 53 4.1 Overview of 6G Devices 53 4.2 6G Device Security Challenges 55 4.2.1 Growth of Data Collection 55 4.2.2 Cloud Connectivity 56 4.2.3 Device Capacity 56 4.2.4 Ultrasaturated Devices 56 4.3 Addressing Device Security in 6G 57 References 58 5 Open RAN and RAN-Core Convergence 59 5.1 Introduction 59 5.2 Open RAN Architecture 62 5.3 Threat Vectors and Security Risks Associated with Open RAN 65 5.3.1 Threat Taxonomy 65 5.3.2 Risks Related to the Process 65 5.3.2.1 Prerequisites 65 5.3.2.2 General Regulations 67 5.3.2.3 Privacy 67 5.3.2.4 People 68 5.3.3 Risks Related to the Technology 68 5.3.3.1 Open Source Software 68 5.3.3.2 Radio/Open Interface 70 5.3.3.3 Intelligence 71 5.3.3.4 Virtualization 73 5.3.4 Global Risks 76 5.4 Security Benefits of Open RAN 77 5.4.1 Open RAN specific 77 5.4.1.1 Full Visibility 77 5.4.1.2 Selection of Best Modules 78 5.4.1.3 Diversity 78 5.4.1.4 Modularity 78 5.4.1.5 Enforcement of Security Controls 79 5.4.1.6 Open Interfaces 79 5.4.1.7 Open Source Software 79 5.4.1.8 Automation 79 5.4.1.9 Open Standards 80 5.4.2 V-RAN Specific 80 5.4.2.1 Isolation 80 5.4.2.2 Increased Scalability for Security Management 80 5.4.2.3 Control Trust 80 5.4.2.4 Less Dependency Between hardware [HW] and SW 80 5.4.2.5 Private Network 81 5.4.2.6 More Secure Storage of Key Material 81 5.4.3 5G Networks Related 81 5.4.3.1 Edge Oriented 81 5.4.3.2 Simpler Security Model 81 5.5 Conclusion 82 References 82 6 Edge Intelligence 89 6.1 Overview of Edge Intelligence 89 6.2 State-of-the-Art Related to 5G 92 6.2.1 Denial of Service (DOS) 92 6.2.2 Man-in-the-Middle (MitM) Attack 92 6.2.3 Privacy Leakage 93 6.3 State-of-the-Art Related to 6G 94 6.3.1 Training Dataset Manipulation 94 6.3.2 Interception of Private Information 95 6.3.3 Attacks on Learning Agents 95 6.4 Edge Computing Security in Autonomous Driving 95 6.5 Future and Challenges 96 References 97 7 Specialized 6G Networks and Network Slicing 103 7.1 Overview of 6G Specialized Networks 103 7.2 Network Slicing in 6G 104 7.2.1 Trust in Network Slicing 105 7.2.2 Privacy Aspects in Network Slicing 106 7.2.3 Solutions for Privacy and Trust in NS 107 References 107 8 Industry 5.0 109 8.1 Introduction 109 8.2 Motivations Behind the Evolution of Industry 5.0 111 8.3 Key Features of Industry 5.0 112 8.3.1 Smart Additive Manufacturing 112 8.3.2 Predictive Maintenance 113 8.3.3 Hyper Customization 113 8.3.4 Cyber-Physical Cognitive Systems 114 8.4 Security of Industry 5.0 115 8.4.1 Security Issues of Industry 5.0 116 8.5 Privacy of Industry 5.0 118 References 120 Part III Security in 6G Use Cases 125 9 Metaverse Security in 6G 127 9.1 Overview of Metaverse 127 9.2 What Is Metaverse? 128 9.2.1 Metaverse Architecture 129 9.2.2 Key Characteristics of Metaverse 130 9.2.3 Role of 6G in Metaverse 131 9.3 Security Threats in Metaverse 132 9.4 Countermeasures for Metaverse Security Threats 133 9.5 New Trends in Metaverse Security 134 10 Society 5.0 and Security 135 10.1 Industry and Society Evolution 135 10.1.1 Industry 4.0 136 10.1.2 Society 5.0 140 10.2 Technical Enablers and Challenges 144 10.2.1 Dependable Wireless Connectivity 144 10.2.1.1 New Spectrum and Extreme Massive MIMO 144 10.2.1.2 In-X Subnetworks 146 10.2.1.3 Semantic Communication 146 10.2.2 Integrated Communication, Control, Computation, and Sensing 147 10.2.2.1 CoCoCo 147 10.2.2.2 JCAS 148 10.2.3 Intelligence Everywhere 149 10.2.4 Energy Harvesting and Transfer 149 10.2.4.1 Energy Harvesting 149 10.2.4.2 Wireless Power Transfer 150 10.3 Security in Society 5.0 151 References 152 11 6G-Enabled Internet of Vehicles 157 11.1 Overview of V2X Communication and IoV 157 11.2 IoV Use Cases 159 11.3 Connected Autonomous Vehicles (CAV) 160 11.4 Unmanned Aerial Vehicles in Future IoV 161 11.5 Security Landscape for IoV 161 11.5.1 Security Threats 162 11.5.2 Security Requirements 163 References 164 12 Smart Grid 2.0 Security 167 12.1 Introduction 167 12.2 Evolution of SG 2.0 168 12.3 Smart Grid 2.0 169 12.3.1 Comparison of Smart Grids 1.0 and 2.0 170 12.4 Role of 6G in SG 2.0 171 12.5 Security Challenges of SG 2.0 172 12.5.1 Physical Attacks 172 12.5.2 Software Attacks 174 12.5.3 Network Attacks 174 12.5.4 Attacks to the Controller 175 12.5.5 Encryption-Related Attacks 176 12.5.6 AI- and ML-Related Attacks 176 12.5.7 Stability and Reliability of Power Supply 177 12.5.8 Secure and Transparent Energy Trading Among Prosumers and Consumers 178 12.5.9 Efficient and Reliable Communication Topology for Information and Control Signal Exchange 179 12.6 Privacy Issues of SG2. 0 179 12.7 Trust Management 180 12.8 Security and Privacy Standardization on SG 2.0 181 References 182 Part IV Privacy in 6G Vision 185 13 6G Privacy 187 13.1 Introduction 187 13.2 Privacy Taxonomy 188 13.3 Privacy in Actions on Data 189 13.3.1 Information Collection 189 13.3.2 Information Processing 190 13.3.3 Information Dissemination 191 13.3.4 Invasion 191 13.4 Privacy Types for 6G 191 13.4.1 Data 191 13.4.2 Actions and Personal Behavior 192 13.4.3 Image and Video 192 13.4.4 Communication 193 13.4.5 Location 193 13.5 6G Privacy Goals 194 13.5.1 Ensure of Privacy-Protected Big Data 194 13.5.2 Privacy Guarantees for Edge Networks 194 13.5.3 Achieving Balance Between Privacy and Performance of Services 195 13.5.4 Standardization of Privacy in Technologies, and Applications 195 13.5.5 Balance the Interests in Privacy Protection in Global Context 196 13.5.6 Achieving Proper Utilization of Interoperability and Data Portability 196 13.5.7 Quantifying Privacy and Privacy Violations 197 13.5.7.1 Achieving Privacy Protected AI-Driven Automated Network Management Operations 198 13.5.8 Getting Explanations of AI Actions for Privacy Requirements 198 References 198 14 6G Privacy Challenges and Possible Solution 201 14.1 Introduction 201 14.2 6G Privacy Challenges and Issues 202 14.2.1 Advanced 6G Applications with New Privacy Requirements 204 14.2.2 Privacy Preservation Limitations for B5G/6G Control and Orchestration Layer 204 14.2.3 Privacy Attacks on AI Models 205 14.2.4 Privacy Requirements in Cloud Computing and Storage Environments 206 14.2.5 Privacy Issues in Edge Computing and Edge AI 206 14.2.6 Cost on Privacy Enhancements 207 14.2.7 Limited Availability of Explainable AI (XAI) Techniques 208 14.2.8 Ambiguity in Responsibility of Data Ownership 209 14.2.9 Data Communication Confidentiality Issues 209 14.2.10 Private Data Access Limitations 210 14.2.11 Privacy Differences Based on Location 210 14.2.12 Lack of Understanding of Privacy Rights and Threats in General Public 210 14.2.13 Difficulty in Defining Levels and Indicators for Privacy 211 14.2.13.1 Proper Evaluation of Potential Privacy Leakages from Non-personal Data 211 14.3 Privacy Solutions for 6G 212 14.3.1 Privacy-Preserving Decentralized AI 212 14.3.2 Edge AI 212 14.3.3 Intelligent Management with Privacy 213 14.3.4 XAI for Privacy 213 14.3.5 Privacy Measures for Personally Identifiable Information 214 14.3.6 Blockchain-Based Solutions 215 14.3.7 Lightweight and Quantum Resistant Encryption Mechanisms 215 14.3.8 Homomorphic Encryption 216 14.3.9 Privacy-Preserving Data Publishing Techniques 217 14.3.9.1 Syntactic Anonymization 218 14.3.9.2 Differential Privacy 218 14.3.10 Privacy by Design and Privacy by Default 219 14.3.11 Regulation of Government, Industry, and Consumer 220 14.3.12 Other Solutions 221 14.3.12.1 Location Privacy Considerations 221 14.3.12.2 Personalized Privacy 222 14.3.12.3 Fog Computing Privacy 222 References 222 15 Legal Aspects and Security Standardization 227 15.1 Legal 227 15.2 Security Standardization 229 15.2.1 ETSI 229 15.2.2 ITU-T 230 15.2.3 3GPP 230 15.2.4 NIST 231 15.2.5 IETF 231 15.2.6 5G PPP 231 15.2.7 NGMN 231 15.2.8 IEEE 232 References 232 Part V Security in 6G Technologies 235 16 Distributed Ledger Technologies (DLTs) and Blockchain 237 16.1 Introduction 237 16.2 What Is Blockchain 238 16.2.1 Types of Blockchain 239 16.3 What Is Smart Contracts 240 16.4 Salient Features of Blockchain 240 16.5 Key Security Challenges Which Blockchain Can Solve 242 16.5.1 Role of Blockchain 242 16.6 Key Privacy Challenges Which Blockchain Can Solve 244 16.6.1 Key Challenges 244 16.6.2 Role of Blockchain 245 16.7 Threat Landscape of Blockchain 246 16.8 Possible Solutions to Secure 6G Blockchains 248 References 249 17 AI/ML for 6G Security 257 17.1 Overview of 6G Intelligence 257 17.2 AI for 6G Security 259 17.3 Use of AI to Identify/Mitigate Pre-6G Security Issues 259 17.4 AI to Mitigate Security Issues of 6G Architecture 261 17.5 AI to Mitigate Security Issues of 6G Technologies 262 17.6 Security Issues in AI 263 17.7 Using AI to Attack 6G 263 References 264 18 Role of Explainable AI in 6G Security 267 18.1 What Is Explainable AI (XAI) 267 18.1.1 Terminologies of XAI 268 18.1.2 Taxonomy of XAI 269 18.1.3 XAI Methods 270 18.2 Use of XAI for 6G 273 18.3 XAI for 6G Security 275 18.3.1 XAI for 6G Devices and IoT Security 277 18.3.2 XAI for 6G RAN 277 18.3.3 XAI for 6G Edge 278 18.3.4 XAI for 6G Core and Backhaul 278 18.3.5 XAI for 6G Network Automation 279 18.4 New Security Issues of XAI 280 18.4.1 Increased Vulnerability to Adversarial ML Attacks 280 18.4.2 Difficulty to Design Secure ML Applications 281 18.4.3 New Attack Vector and Target 283 References 284 19 Zero Touch Network and Service Management (ZSM) Security 291 19.1 Introduction 291 19.1.1 Need of Zero-Touch Network and Service Management 292 19.1.2 Importance of ZSM for 5G and Beyond 292 19.2 ZSM Reference Architecture 293 19.2.1 Components 294 19.2.1.1 Management Services 294 19.2.1.2 Management Functions 295 19.2.1.3 Management Domains 295 19.2.1.4 The E2E Service Management Domain 295 19.2.1.5 Integration Fabric 295 19.2.1.6 Data Services 296 19.3 Security Aspects 296 19.3.1 ML/AI-Based Attacks 296 19.3.1.1 White-Box Attack 297 19.3.1.2 Black-Box Attack 297 19.3.2 Open API Security Threats 297 19.3.2.1 Parameter Attacks 298 19.3.3 Intent-Based Security Threats 298 19.3.3.1 Data Exposure 298 19.3.3.2 Tampering 299 19.3.4 Automated Closed-Loop Network-Based Security Threats 299 19.3.4.1 MITM Attack 299 19.3.4.2 Deception Attacks 299 19.3.5 Threats Due to Programmable Network Technologies 299 19.3.6 Possible Threats on ZSM Framework Architecture 300 References 300 20 Physical Layer Security 305 20.1 Introduction 305 20.2 Physical Layer Security Background 306 20.2.1 PLS Fundamentals 306 20.2.2 PLS Approaches 307 20.2.2.1 Confidentiality (Edgar) 307 20.2.2.2 Physical Layer Authentication 308 20.2.2.3 Secret Key Generation 309 20.3 The Prospect of PLS in 6G 310 20.3.1 Application Scenarios of PLS in 6G 311 20.3.2 6G Technologies and PLS 312 20.3.2.1 IRS 312 20.3.2.2 Unmanned Aerial Vehicles 313 20.3.3 Cell-Free mMIMO 315 20.3.4 Visible Light Communication (VLC) 316 20.3.5 Terahertz Communication 317 20.3.6 Joint Communications and Sensing 318 References 319 21 Quantum Security and Postquantum Cryptography 327 21.1 Overview of 6G and Quantum Computing 327 21.2 Quantum Computing 328 21.3 Quantum Security 329 21.3.1 Quantum Key Distribution 330 21.3.2 Information-Theoretic Security 331 21.4 Postquantum Cryptography 332 21.4.1 Background 332 21.4.2 PQC Methods 333 21.4.3 PQC Standardization 335 21.4.4 Challenges with PQC 335 21.4.5 Future Directions of PQC 336 21.4.6 6G and PQC 337 References 337 Part VI Concluding Remarks 341 22 Concluding Remarks 343 Index 345

Read more less

Book SynopsisImmerse yourself in the offensive security mindset to better defend against attacks In The Active Defender: Immersion in the Offensive Security Mindset, Principal Technology Architect, Security, Dr. Catherine J. Ullman delivers an expert treatment of the Active Defender approach to information security. In the book, you'll learn to understand and embrace the knowledge you can gain from the offensive security community. You'll become familiar with the hacker mindset, which allows you to gain emergent insight into how attackers operate and better grasp the nature of the risks and threats in your environment. The author immerses you in the hacker mindset and the offensive security culture to better prepare you to defend against threats of all kinds. You'll also find: Explanations of what an Active Defender is and how that differs from traditional defense modelsReasons why thinking like a hacker makes you a better defenderWays to begin your journey as an Active Defender and leverage the hacker mindset An insightful and original book representing a new and effective approach to cybersecurity, The Active Defender will be of significant benefit to information security professionals, system administrators, network administrators, and other tech professionals with an interest or stake in their organization's information security.Table of ContentsForeword xxv Preface xxix Introduction xxxiii Chapter 1 What Is an Active Defender? 1 The Hacker Mindset 1 Traditional Defender Mindset 3 Getting from Here to There 4 Active Defender Activities 7 Threat Modeling 7 Threat Hunting 8 Attack Simulations 9 Active Defense 9 “Active Defense” for the Active Defender 10 Another Take on Active Defense 10 Annoyance 11 Attribution 11 Attack 11 Active Defense According to Security Vendors 11 Active > Passive 12 Active Defense by the Numbers 13 Active Defense and Staffing 13 Active Defender > Passive Defender 13 Relevant Intel Recognition 13 Understanding Existing Threats 14 Attacker Behavior 14 Pyramid of Pain 15 MITRE Att&ck 15 TTP Pyramid 15 Toward a Deeper Understanding 16 Return to the Beginning 16 Summary 18 Notes 18 Chapter 2 Immersion into the Hacker Mindset 21 Reluctance 21 Media Portrayal 21 Fear of Government Retribution 22 The Rock Star Myth 22 Imposter Syndrome 23 A Leap of Faith 23 My First Security BSides 24 My First DEF CON 24 Finding the Community 27 Security BSides 27 Structured Format 27 Unconference Format 28 Hybrid Format 28 Additional Events 28 Other Security Conferences 29 CircleCityCon 29 GrrCON 29 Thotcon 29 ShmooCon 30 Wild West Hackin’ Fest 30 DEF Con 30 Local Security Meetups 30 Infosec 716 31 Burbsec 31 #misec 31 Makerspaces 31 DEF CON Groups 32 2600 Meetings 32 Online Security Communities 33 Traditional Security Communities 34 An Invitation 34 Summary 36 Notes 36 Chapter 3 Offensive Security Engagements, Trainings, and Gathering Intel 37 Offensive Security Engagements 37 Targeting 38 Initial Access 38 Persistence 39 Expansion 39 Exfiltration 40 Detection 40 Offensive Security Trainings 40 Conference Trainings 41 Security BSides 41 DEF Con 42 GrrCON 42 Thotcon 43 CircleCityCon 43 Wild West Hackin’ Fest 43 Black Hat 44 Security Companies 44 Offensive Security 44 TrustedSec 44 Antisyphon 45 SANS 45 Online Options 46 Hackthebox 46 Tryhackme 46 Hackthissite 47 CTFs 47 YouTube 47 Higher Education 48 Gathering Intel 48 Tradecraft Intel 49 Project Zero 49 AttackerKB 49 Discord/Slack 50 Twitter 50 Organizational Intel 51 LinkedIn 51 Pastebin 52 GitHub 52 Message Boards 52 Internal Wikis 53 Haveibeenpwned 53 Summary 54 Notes 54 Chapter 4 Understanding the Offensive Toolset 55 Nmap/Zenmap 57 Burp Suite/ZAP 59 sqlmap 60 Wireshark 61 Metasploit Framework 63 Shodan 64 Social-Engineer Toolkit 66 Mimikatz 67 Responder 70 Cobalt Strike 71 Impacket 73 Mitm6 75 CrackMapExec 76 evil-winrm 77 BloodHound/SharpHound 78 Summary 79 Notes 80 Chapter 5 Implementing Defense While Thinking Like a Hacker 81 OSINT for Organizations 81 OPSEC 82 OSINT 82 Social Engineering 82 Actively Defending 84 ASM 84 ATO Prevention 84 Benefits 86 Types of Risks Mitigated 86 Threat Modeling Revisited 87 Framing the Engagement 87 Scoping in Frame 87 Motivation in Frame 88 The Right Way In 88 Reverse Engineering 88 Targeting 89 Inbound Access 89 Persistence 89 Egress Controls 90 LOLBins 90 Rundll32.exe 91 Regsvr32.exe 91 MSbuild.exe 92 Cscript.exe 92 Csc.exe 92 Legitimate Usage? 92 Threat Hunting 93 Begin with a Question 93 The Hunt 94 Applying the Concepts 94 Dumping Memory 95 Lateral Movement 95 Secondary C2 96 Proof of Concept 97 Attack Simulations 97 Simulation vs. Emulation 97 Why Test? 98 Risky Assumptions 99 Practice Is Key 100 Tools for Testing 100 Microsoft Defender for O365 101 Atomic Red Team 102 Caldera 103 Scythe 103 Summary 104 Notes 104 Chapter 6 Becoming an Advanced Active Defender 107 The Advanced Active Defender 107 Automated Attack Emulations 108 Using Deceptive Technologies 108 Honey Tokens 109 Decoy Accounts 109 Email Addresses 110 Database Data 110 AWS Keys 111 Canary Tokens 111 Honeypots 111 Other Forms of Deception 112 Web Server Header 112 User Agent Strings 113 Fake DNS Records 113 Working with Offensive Security Teams 114 But We Need a PenTest! 114 Potential Testing Outcomes 115 Vulnerability Identification 116 Vulnerability Exploitation 116 Targeted Detection/Response 116 Real Threat Actor 117 Detection Analysis 117 Scope 117 Scoping Challenges 118 Additional Scope Considerations 118 Decisions, Decisions 119 Measuring Existing Defenses 119 Crown Jewels 119 Selecting a Vendor 120 Reputation 120 Experience and Expertise 121 Processes 121 Data Security 122 Adversarial Attitudes 122 Results 123 Additional Considerations 123 Purple Teaming – Collaborative Testing 124 What Is a Purple Team? 124 Purple Team Exercises 125 Cyber Threat Intelligence 125 Preparation 126 Exercise Execution 126 Lessons Learned 127 Purple Teams and Advanced Active Defenders 127 Summary 127 Notes 128 Chapter 7 Building Effective Detections 129 Purpose of Detection 129 Funnel of Fidelity 130 Collection 130 Detection 130 Triage 131 Investigation 131 Remediation 131 Building Detections: Identification and Classification 131 Overall Detection Challenges 132 Attention Problem 132 Perception Problem 133 Abstraction Problem 134 Validation Problem 135 The Pyramids Return 135 Lower Levels 136 Tools 137 Wrong Viewpoint 137 Bypass Options 138 Higher Levels 139 Testing 140 Literal Level 140 Functional Level 140 Operational Level 141 Technical Level 142 Proper Validation: Both Telemetry and Detection 143 Telemetry Coverage 143 Detection Coverage 144 Testing Solutions 144 Atomic Red Team 144 AtomicTestHarness 145 Summary 146 Notes 147 Chapter 8 Actively Defending Cloud Computing Environments 149 Cloud Service Models 150 IaaS 150 PaaS 150 SaaS 150 Cloud Deployment Environments 151 Private Cloud 151 Public Cloud 151 Fundamental Differences 151 On-Demand Infrastructure 152 Shared Responsibility Model 152 Control Plane and Data Plane 153 Infrastructure as an API 154 Data Center Mapping 154 IAM Focus 155 Cloud Security Implications 157 Larger Attack Surface 158 New Types of Exposed Services 158 Application Security Emphasis 159 Challenges with API Use 160 Custom Applications 161 Cloud Offensive Security 161 Enumeration of Cloud Environments 162 Code Repositories 162 Publicly Accessible Resources 163 Initial Access 164 Phishing/Password Spraying 164 Stealing Access Tokens 164 Resource Exploitation 165 Post-Compromise Recon 165 Post-Exploitation Enumeration 166 Roles, Policies, and Permissions 166 Dangerous Implied Trusts 166 Overly Permissive Configurations 170 Multi-Level Access 170 Persistence/Expansion 171 Lateral Movement 172 Privilege Escalation 173 Defense Strategies 175 Summary 175 Notes 176 Chapter 9 Future Challenges 179 Software Supply Chain Attacks 179 A Growing Problem 180 Actively Defending 180 Counterfeit Hardware 181 Fake CISCO Hardware 181 Actively Defending 182 UEFI 182 Increasing Vulnerabilities 182 Enter BlackLotus 183 MSI Key Leak 184 Actively Defending 185 BYOVD Attacks 185 Lazarus Group 186 Cuba Ransomware Group 186 Actively Defending 186 Ransomware 186 Continuing Evolution 187 Actively Defending 187 Tabletop Exercises 188 Ransomware Playbooks 189 Frameworks 191 Cobalt Strike 192 Silver 192 Metasploit 192 Brute Ratel 193 Havoc 193 Mythic 193 Actively Defending 194 Living Off the Land 194 Actively Defending 195 API Security 195 Defining APIs 195 API Impact 196 Security Significance 196 Actively Defending 196 Everything Old Is New Again 197 OWASP Top 10 197 Old Malware Never (Really) Dies 198 Emotet 198 REvil 199 Actively Defending 199 Summary 200 Notes 201 Index 203

Read more less

Book SynopsisNetwork Science Network Science offers comprehensive insight on network analysis and network optimization algorithms, with simple step-by-step guides and examples throughout, and a thorough introduction and history of network science, explaining the key concepts and the type of data needed for network analysis, ensuring a smooth learning experience for readers. It also includes a detailed introduction to multiple network optimization algorithms, including linear assignment, network flow and routing problems. The text is comprised of five chapters, focusing on subgraphs, network analysis, network optimization, and includes a list of case studies, those of which include influence factors in telecommunications, fraud detection in taxpayers, identifying the viral effect in purchasing, finding optimal routes considering public transportation systems, among many others. This insightful book shows how to apply algorithms to solve complex problems in real-life scenarios andTable of ContentsPreface x Acknowledgments xiii About the Author xiv About the Book xv 1 Concepts in Network Science 1 1.1 Introduction 1 1.2 The Connector 2 1.3 History 3 1.3.1 A History in Social Studies 4 1.4 Concepts 5 1.4.1 Characteristics of Networks 7 1.4.2 Properties of Networks 7 1.4.3 Small World 8 1.4.4 Random Graphs 11 1.5 Network Analytics 12 1.5.1 Data Structure for Network Analysis and Network Optimization 13 1.5.1.1 Multilink and Self-Link 14 1.5.1.2 Loading and Unloading the Graph 15 1.5.2 Options for Network Analysis and Network Optimization Procedures 15 1.5.3 Summary Statistics 16 1.5.3.1 Analyzing the Summary Statistics for the Les Misérables Network 17 1.6 Summary 21 2 Subnetwork Analysis 23 2.1 Introduction 23 2.1.1 Isomorphism 25 2.2 Connected Components 26 2.2.1 Finding the Connected Components 27 2.3 Biconnected Components 35 2.3.1 Finding the Biconnected Components 36 2.4 Community 38 2.4.1 Finding Communities 45 2.5 Core 58 2.5.1 Finding k-Cores 59 2.6 Reach Network 62 2.6.1 Finding the Reach Network 65 2.7 Network Projection 70 2.7.1 Finding the Network Projection 72 2.8 Node Similarity 77 2.8.1 Computing Node Similarity 82 2.9 Pattern Matching 88 2.9.1 Searching for Subgraphs Matches 91 2.10 Summary 98 3 Network Centralities 101 3.1 Introduction 101 3.2 Network Metrics of Power and Influence 102 3.3 Degree Centrality 103 3.3.1 Computing Degree Centrality 103 3.3.2 Visualizing a Network 110 3.4 Influence Centrality 114 3.4.1 Computing the Influence Centrality 115 3.5 Clustering Coefficient 121 3.5.1 Computing the Clustering Coefficient Centrality 121 3.6 Closeness Centrality 124 3.6.1 Computing the Closeness Centrality 124 3.7 Betweenness Centrality 129 3.7.1 Computing the Between Centrality 130 3.8 Eigenvector Centrality 136 3.8.1 Computing the Eigenvector Centrality 137 3.9 PageRank Centrality 144 3.9.1 Computing the PageRank Centrality 144 3.10 Hub and Authority 151 3.10.1 Computing the Hub and Authority Centralities 152 3.11 Network Centralities Calculation by Group 157 3.11.1 By Group Network Centralities 158 3.12 Summary 164 4 Network Optimization 167 4.1 Introduction 167 4.1.1 History 167 4.1.2 Network Optimization in SAS Viya 170 4.2 Clique 170 4.2.1 Finding Cliques 172 4.3 Cycle 176 4.3.1 Finding Cycles 177 4.4 Linear Assignment 179 4.4.1 Finding the Minimum Weight Matching in a Worker-Task Problem 181 4.5 Minimum-Cost Network Flow 185 4.5.1 Finding the Minimum-Cost Network Flow in a Demand–Supply Problem 188 4.6 Maximum Network Flow Problem 194 4.6.1 Finding the Maximum Network Flow in a Distribution Problem 195 4.7 Minimum Cut 199 4.7.1 Finding the Minimum Cuts 201 4.8 Minimum Spanning Tree 205 4.8.1 Finding the Minimum Spanning Tree 206 4.9 Path 208 4.9.1 Finding Paths 211 4.10 Shortest Path 220 4.10.1 Finding Shortest Paths 223 4.11 Transitive Closure 235 4.11.1 Finding the Transitive Closure 236 4.12 Traveling Salesman Problem 239 4.12.1 Finding the Optimal Tour 243 4.13 Vehicle Routing Problem 249 4.13.1 Finding the Optimal Vehicle Routes for a Delivery Problem 253 4.14 Topological Sort 265 4.14.1 Finding the Topological Sort in a Directed Graph 266 4.15 Summary 268 5 Real-World Applications in Network Science 271 5.1 Introduction 271 5.2 An Optimal Tour Considering a Multimodal Transportation System – The Traveling Salesman Problem Example in Paris 272 5.3 An Optimal Beer Kegs Distribution – The Vehicle Routing Problem Example in Asheville 285 5.4 Network Analysis and Supervised Machine Learning Models to Predict COVID-19 Outbreaks 298 5.5 Urban Mobility in Metropolitan Cities 306 5.6 Fraud Detection in Auto Insurance Based on Network Analysis 312 5.7 Customer Influence to Reduce Churn and Increase Product Adoption 320 5.8 Community Detection to Identify Fraud Events in Telecommunications 324 5.9 Summary 328 Index 329

Read more less

Book SynopsisSYSTEMS ENGINEERING NEURAL NETWORKS A complete and authoritative discussion of systems engineering and neural networks In Systems Engineering Neural Networks, a team of distinguished researchers deliver a thorough exploration of the fundamental concepts underpinning the creation and improvement of neural networks with a systems engineering mindset. In the book, you'll find a general theoretical discussion of both systems engineering and neural networks accompanied by coverage of relevant and specific topics, from deep learning fundamentals to sport business applications. Readers will discover in-depth examples derived from many years of engineering experience, a comprehensive glossary with links to further reading, and supplementary online content. The authors have also included a variety of applications programmed in both Python 3 and Microsoft Excel. The book provides: A thorough introduction to neural networks, introduced as key element of complex systems Practical discussions of sTable of ContentsABOUT THE AUTHORS ACKNOWLEDGEMENTS 7 HOW TO READ THIS BOOK 8 Part I 9 1 A BRIEF INTRODUCTION 9 THE SYSTEMS ENGINEERING APPROACH TO ARTIFICIAL INTELLIGENCE (AI) 14 SOURCES 18 CHAPTER SUMMARY 18 QUESTIONS 19 2 DEFINING A NEURAL NETWORK 20 BIOLOGICAL NETWORKS 22 FROM BIOLOGY TO MATHEMATICS 24 WE CAME A FULL CIRCLE 25 THE MODEL OF McCULLOCH-PITTS 25 THE ARTIFICIAL NEURON OF ROSENBLATT 26 FINAL REMARKS 33 SOURCES 35 CHAPTER SUMMARY 36 QUESTIONS 37 3 ENGINEERING NEURAL NETWORKS 38 A BRIEF RECAP ON SYSTEMS ENGINEERING 40 THE KEYSTONE: SE4AI AND AI4SE 41 ENGINEERING COMPLEXITY 41 THE SPORT SYSTEM 45 ENGINEERING A SPORT CLUB 51 OPTIMISATION 52 AN EXAMPLE OF DECISION MAKING 56 FUTURISM AND FORESIGHT 60 QUALITATIVE TO QUANTITATIVE 61 FUZZY THINKING 64 IT IS ALL IN THE TOOLS 74 SOURCES 77 CHAPTER SUMMARY 77 QUESTIONS 78 Part II 79 4 SYSTEMS THINKING FOR SOFTWARE DEVELOPMENT 79 PROGRAMMING LANGUAGES 82 ONE MORE THING: SOFTWARE ENGINEERING 94 CHAPTER SUMMARY 101 QUESTIONS 102 SOURCES 102 5 PRACTICE MAKES PERFECT 103 EXAMPLE 1: COSINE FUNCTION 105 EXAMPLE 2: CORROSION ON A METAL STRUCTURE 112 EXAMPLE 3: DEFINING ROLES OF ATHLETES 127 EXAMPLE 4: ATHLETE’S PERFORMANCE 134 EXAMPLE 5: TEAM PERFORMANCE 142 A human-defined-system 142 Human Factors 143 The sport team as system of interest 144 Impact of Human Error on Sports Team Performance 145 EXAMPLE 6: TREND PREDICTION 156 EXAMPLE 7: SYMPLEX AND GAME THEORY 163 EXAMPLE 8: SORTING MACHINE FOR LEGO® BRICKS 168 Part III 174 6 INPUT/OUTPUT, HIDDEN LAYER AND BIAS 174 INPUT/OUTPUT 175 HIDDEN LAYER 180 BIAS 184 FINAL REMARKS 186 CHAPTER SUMMARY 187 QUESTIONS 188 7 ACTIVATION FUNCTION 189 TYPES OF ACTIVATION FUNCTIONS 191 ACTIVATION FUNCTION DERIVATIVES 194 ACTIVATION FUNCTIONS RESPONSE TO W AND b VARIABLES 200 FINAL REMARKS 202 CHAPTER SUMMARY 204 QUESTIONS 205 SOURCES 205 8 COST FUNCTION, BACK-PROPAGATION AND OTHER ITERATIVE METHODS 206 WHAT IS THE DIFFERENCE BETWEEN LOSS AND COST? 209 TRAINING THE NEURAL NETWORK 212 BACK-PROPAGATION (BP) 214 ONE MORE THING: GRADIENT METHOD AND CONJUGATE GRADIENT METHOD 218 ONE MORE THING: NEWTON’S METHOD 221 CHAPTER SUMMARY 223 QUESTIONS 224 SOURCES 224 9 CONCLUSIONS AND FUTURE DEVELOPMENTS 225 GLOSSARY AND INSIGHTS 233

Read more less

Book SynopsisA clear and focused guide to creating useful user experience documentation As web sites and applications become richer and more complex, the user experience (UX) becomes critical to their success.Table of ContentsAbout the Authors v Credits vi Authors' Acknowledgments viii Contents ix Introduction 1 A summary of the documents 2 Putting the documents into context 7 Enjoy yourselves! 8 CHAPTER 1: Personas 9 CHAPTER 2: Task Models 43 CHAPTER 3: User Journeys 77 CHAPTER 4: Content requirements 103 CHAPTER 5: Sitemaps 123 CHAPTER 6: Wireframes 159 CHAPTER 7: Usability Test Reports 263 CHAPTER 8: Funnel Diagrams 291 Index 323

Read more less

Book SynopsisAn all-in-one reference to the major Home Area Networking, Building Automation and AMI protocols, including 802.15.4 over radio or PLC, 6LowPAN/RPL, ZigBee 1.0 and Smart Energy 2.0, Zwave, LON, BACNet, KNX, ModBus, mBus, C.12 and DLMS/COSEM, and the new ETSI M2M system level standard. In-depth coverage of Smart-grid and EV charging use cases. This book describes the Home Area Networking, Building Automation and AMI protocols and their evolution towards open protocols based on IP such as 6LowPAN and ETSI M2M. The authors discuss the approach taken by service providers to interconnect the protocols and solve the challenge of massive scalability of machine-to-machine communication for mission-critical applications, based on the next generation machine-to-machine ETSI M2M architecture. The authors demonstrate, using the example of the smartgrid use case, how the next generation utilities, by interconnecting and activating our physical environment, will be able to deliver more enTrade Review“The technical content is accurate, timely, and up to date with respect to the state of the art in the field. The book is strongly recommended for engineers, academic researchers, and network operators dealing with the Internet of Things. For these readers, the book represents a valuable and authoritative source of information and reference.” (Computing Reviews, 1 March 2013)Table of ContentsList of Acronyms xv Introduction xxiii Part I M2M AREA NETWORK PHYSICAL LAYERS 1 IEEE 802.15.4 3 1.1 The IEEE 802 Committee Family of Protocols 3 1.2 The Physical Layer 3 1.2.1 Interferences with Other Technologies 5 1.2.2 Choice of a 802.15.4 Communication Channel, Energy Detection, Link Quality Information 7 1.2.3 Sending a Data Frame 8 1.3 The Media-Access Control Layer 8 1.3.1 802.15.4 Reduced Function and Full Function Devices, Coordinators, and the PAN Coordinator 9 1.3.2 Association 12 1.3.3 802.15.4 Addresses 13 1.3.4 802.15.4 Frame Format 13 1.3.5 Security 14 1.4 Uses of 802.15.4 16 1.5 The Future of 802.15.4: 802.15.4e and 802.15.4g 17 1.5.1 802.15.4e 17 1.5.2 802.15.4g 21 2 Powerline Communication for M2M Applications 23 2.1 Overview of PLC Technologies 23 2.2 PLC Landscape 23 2.2.1 The Historical Period (1950–2000) 24 2.2.2 After Year 2000: The Maturity of PLC 24 2.3 Powerline Communication: A Constrained Media 27 2.3.1 Powerline is a Difficult Channel 27 2.3.2 Regulation Limitations 27 2.3.3 Power Consumption 32 2.3.4 Lossy Network 33 2.3.5 Powerline is a Shared Media and Coexistence is not an Optional Feature 35 2.4 The Ideal PLC System for M2M 37 2.4.1 Openness and Availability 38 2.4.2 Range 38 2.4.3 Power Consumption 38 2.4.4 Data Rate 39 2.4.5 Robustness 39 2.4.6 EMC Regulatory Compliance 40 2.4.7 Coexistence 40 2.4.8 Security 40 2.4.9 Latency 40 2.4.10 Interoperability with M2M Wireless Services 40 2.5 Conclusion 40 References 41 Part II LEGACY M2M PROTOCOLS FOR SENSOR NETWORKS, BUILDING AUTOMATION AND HOME AUTOMATION 3 The BACnetTM Protocol 45 3.1 Standardization 45 3.1.1 United States 46 3.1.2 Europe 46 3.1.3 Interworking 46 3.2 Technology 46 3.2.1 Physical Layer 47 3.2.2 Link Layer 47 3.2.3 Network Layer 47 3.2.4 Transport and Session Layers 49 3.2.5 Presentation and Application Layers 49 3.3 BACnet Security 55 3.4 BACnet Over Web Services (Annex N, Annex H6) 55 3.4.1 The Generic WS Model 56 3.4.2 BACnet/WS Services 58 3.4.3 The Web Services Profile for BACnet Objects 59 3.4.4 Future Improvements 59 4 The LonWorks R Control Networking Platform 61 4.1 Standardization 61 4.1.1 United States of America 61 4.1.2 Europe 62 4.1.3 China 62 4.2 Technology 62 4.2.1 Physical Layer 63 4.2.2 Link Layer 64 4.2.3 Network Layer 65 4.2.4 Transport Layer 66 4.2.5 Session Layer 67 4.2.6 Presentation Layer 67 4.2.7 Application Layer 71 4.3 Web Services Interface for LonWorks Networks: Echelon SmartServer 72 4.4 A REST Interface for LonWorks 73 4.4.1 LonBridge REST Transactions 74 4.4.2 Requests 74 4.4.3 Responses 75 4.4.4 LonBridge REST Resources 75 5 ModBus 79 5.1 Introduction 79 5.2 ModBus Standardization 80 5.3 ModBus Message Framing and Transmission Modes 80 5.4 ModBus/TCP 81 6 KNX 83 6.1 The Konnex/KNX Association 83 6.2 Standardization 83 6.3 KNX Technology Overview 84 6.3.1 Physical Layer 84 6.3.2 Data Link and Routing Layers, Addressing 87 6.3.3 Transport Layer 89 6.3.4 Application Layer 89 6.3.5 KNX Devices, Functional Blocks and Interworking 89 6.4 Device Configuration 92 7 ZigBee 93 7.1 Development of the Standard 93 7.2 ZigBee Architecture 94 7.2.1 ZigBee and 802.15.4 94 7.2.2 ZigBee Protocol Layers 94 7.2.3 ZigBee Node Types 96 7.3 Association 96 7.3.1 Forming a Network 96 7.3.2 Joining a Parent Node in a Network Using 802.15.4 Association 97 7.3.3 Using NWK Rejoin 99 7.4 The ZigBee Network Layer 99 7.4.1 Short-Address Allocation 99 7.4.2 Network Layer Frame Format 100 7.4.3 Packet Forwarding 101 7.4.4 Routing Support Primitives 101 7.4.5 Routing Algorithms 102 7.5 The ZigBee APS Layer 105 7.5.1 Endpoints, Descriptors 106 7.5.2 The APS Frame 106 7.6 The ZigBee Device Object (ZDO) and the ZigBee Device Profile (ZDP) 109 7.6.1 ZDP Device and Service Discovery Services (Mandatory) 109 7.6.2 ZDP Network Management Services (Mandatory) 110 7.6.3 ZDP Binding Management Services (Optional) 111 7.6.4 Group Management 111 7.7 ZigBee Security 111 7.7.1 ZigBee and 802.15.4 Security 111 7.7.2 Key Types 113 7.7.3 The Trust Center 114 7.7.4 The ZDO Permissions Table 116 7.8 The ZigBee Cluster Library (ZCL) 116 7.8.1 Cluster 116 7.8.2 Attributes 117 7.8.3 Commands 117 7.8.4 ZCL Frame 117 7.9 ZigBee Application Profiles 119 7.9.1 The Home Automation (HA) Application Profile 119 7.9.2 ZigBee Smart Energy 1.0 (ZSE or AMI) 122 7.10 The ZigBee Gateway Specification for Network Devices 129 7.10.1 The ZGD 130 7.10.2 GRIP Binding 131 7.10.3 SOAP Binding 132 7.10.4 REST Binding 132 7.10.5 Example IPHA–ZGD Interaction Using the REST Binding 134 8 Z-Wave 139 8.1 History and Management of the Protocol 139 8.2 The Z-Wave Protocol 140 8.2.1 Overview 140 8.2.2 Z-Wave Node Types 140 8.2.3 RF and MAC Layers 142 8.2.4 Transfer Layer 143 8.2.5 Routing Layer 145 8.2.6 Application Layer 148 Part III LEGACY M2M PROTOCOLS FOR UTILITY METERING 9 M-Bus and Wireless M-Bus 155 9.1 Development of the Standard 155 9.2 M-Bus Architecture 156 9.2.1 Physical Layer 156 9.2.2 Link Layer 156 9.2.3 Network Layer 157 9.2.4 Application Layer 158 9.3 Wireless M-Bus 160 9.3.1 Physical Layer 160 9.3.2 Data-Link Layer 162 9.3.3 Application Layer 162 9.3.4 Security 163 10 The ANSI C12 Suite 165 10.1 Introduction 165 10.2 C12.19: The C12 Data Model 166 10.2.1 The Read and Write Minimum Services 167 10.2.2 Some Remarkable C12.19 Tables 167 10.3 C12.18: Basic Point-to-Point Communication Over an Optical Port 168 10.4 C12.21: An Extension of C12.18 for Modem Communication 169 10.4.1 Interactions with the Data-Link Layer 170 10.4.2 Modifications and Additions to C12.19 Tables 171 10.5 C12.22: C12.19 Tables Transport Over Any Networking Communication System 171 10.5.1 Reference Topology and Network Elements 171 10.5.2 C12.22 Node to C12.22 Network Communications 173 10.5.3 C12.22 Device to C12.22 Communication Module Interface 174 10.5.4 C12.19 Updates 176 10.6 Other Parts of ANSI C12 Protocol Suite 176 10.7 RFC 6142: C12.22 Transport Over an IP Network 176 10.8 REST-Based Interfaces to C12.19 177 11 DLMS/COSEM 179 11.1 DLMS Standardization 179 11.1.1 The DLMS UA 179 11.1.2 DLMS/COSEM, the Colored Books 179 11.1.3 DLMS Standardization in IEC 180 11.2 The COSEM Data Model 181 11.3 The Object Identification System (OBIS) 182 11.4 The DLMS/COSEM Interface Classes 184 11.4.1 Data-Storage ICs 185 11.4.2 Association ICs 185 11.4.3 Time- and Event-Bound ICs 186 11.4.4 Communication Setup Channel Objects 186 11.5 Accessing COSEM Interface Objects 186 11.5.1 The Application Association Concept 186 11.5.2 The DLMS/COSEM Communication Framework 187 11.5.3 The Data Communication Services of COSEM Application Layer 189 11.6 End-to-End Security in the DLMS/COSEM Approach 191 11.6.1 Access Control Security 191 11.6.2 Data-Transport Security 192 Part IV THE NEXT GENERATION: IP-BASED PROTOCOLS 12 6LoWPAN and RPL 195 12.1 Overview 195 12.2 What is 6LoWPAN? 6LoWPAN and RPL Standardization 195 12.3 Overview of the 6LoWPAN Adaptation Layer 196 12.3.1 Mesh Addressing Header 197 12.3.2 Fragment Header 198 12.3.3 IPv6 Compression Header 198 12.4 Context-Based Compression: IPHC 200 12.5 RPL 202 12.5.1 RPL Control Messages 204 12.5.2 Construction of the DODAG and Upward Routes 204 12.6 Downward Routes, Multicast Membership 206 12.7 Packet Routing 207 12.7.1 RPL Security 208 13 ZigBee Smart Energy 2.0 209 13.1 REST Overview 209 13.1.1 Uniform Interfaces, REST Resources and Resource Identifiers 209 13.1.2 REST Verbs 210 13.1.3 Other REST Constraints, and What is REST After All? 211 13.2 ZigBee SEP 2.0 Overview 212 13.2.1 ZigBee IP 213 13.2.2 ZigBee SEP 2.0 Resources 214 13.3 Function Sets and Device Types 217 13.3.1 Base Function Set 218 13.3.2 Group Enrollment 221 13.3.3 Meter 223 13.3.4 Pricing 223 13.3.5 Demand Response and Load Control Function Set 224 13.3.6 Distributed Energy Resources 227 13.3.7 Plug-In Electric Vehicle 227 13.3.8 Messaging 230 13.3.9 Registration 231 13.4 ZigBee SE 2.0 Security 232 13.4.1 Certificates 232 13.4.2 IP Level Security 232 13.4.3 Application-Level Security 235 14 The ETSI M2M Architecture 237 14.1 Introduction to ETSI TC M2M 237 14.2 System Architecture 238 14.2.1 High-Level Architecture 238 14.2.2 Reference Points 239 14.2.3 Service Capabilities 240 14.3 ETSI M2M SCL Resource Structure 242 14.3.1 SCL Resources 244 14.3.2 Application Resources 244 14.3.3 Access Right Resources 248 14.3.4 Container Resources 248 14.3.5 Group Resources 250 14.3.6 Subscription and Notification Channel Resources 251 14.4 ETSI M2M Interactions Overview 252 14.5 Security in the ETSI M2M Framework 252 14.5.1 Key Management 252 14.5.2 Access Lists 254 14.6 Interworking with Machine Area Networks 255 14.6.1 Mapping M2M Networks to ETSI M2M Resources 256 14.6.2 Interworking with ZigBee 1.0 257 14.6.3 Interworking with C.12 262 14.6.4 Interworking with DLMS/COSEM 264 14.7 Conclusion on ETSI M2M 266 Part V KEY APPLICATIONS OF THE INTERNET OF THINGS 15 The Smart Grid 271 15.1 Introduction 271 15.2 The Marginal Cost of Electricity: Base and Peak Production 272 15.3 Managing Demand: The Next Challenge of Electricity Operators . . . and Why M2M Will Become a Key Technology 273 15.4 Demand Response for Transmission System Operators (TSO) 274 15.4.1 Grid-Balancing Authorities: The TSOs 274 15.4.2 Power Shedding: Who Pays What? 276 15.4.3 Automated Demand Response 277 15.5 Case Study: RTE in France 277 15.5.1 The Public-Network Stabilization and Balancing Mechanisms in France 277 15.5.2 The Bidding Mechanisms of the Tertiary Adjustment Reserve 281 15.5.3 Who Pays for the Network-Balancing Costs? 283 15.6 The Opportunity of Smart Distributed Energy Management 285 15.6.1 Assessing the Potential of Residential and Small-Business Powerz Shedding (Heating/Cooling Control) 286 15.6.2 Analysis of a Typical Home 287 15.6.3 The Business Case 293 15.7 Demand Response: The Big Picture 300 15.7.1 From Network Balancing to Peak-Demand Suppression 300 15.7.2 Demand Response Beyond Heating Systems 304 15.8 Conclusion: The Business Case of Demand Response and Demand Shifting is a Key Driver for the Deployment of the Internet of Things 305 16 Electric Vehicle Charging 307 16.1 Charging Standards Overview 307 16.1.1 IEC Standards Related to EV Charging 310 16.1.2 SAE Standards 317 16.1.3 J2293 318 16.1.4 CAN – Bus 319 16.1.5 J2847: The New “Recommended Practice” for High-Level Communication Leveraging the ZigBee Smart Energy Profile 2.0 320 16.2 Use Cases 321 16.2.1 Basic Use Cases 321 16.2.2 A More Complex Use Case: Thermal Preconditioning of the Car 323 16.3 Conclusion 324 Appendix A Normal Aggregate Power Demand of a Set of Identical Heating Systems with Hysteresis 327 Appendix B Effect of a Decrease of Tref. The Danger of Correlation 329 Appendix C Changing Tref without Introducing Correlation 331 C.1 Effect of an Increase of Tref 331 Appendix D Lower Consumption, A Side Benefit of Power Shedding 333 Index 337

Read more less

Book SynopsisIf you've been tasked with the job of maintaining large and complex Hadoop clusters, or are about to be, this book is a must. You'll learn the particulars of Hadoop operations, from planning, installing, and configuring the system to providing ongoing maintenance.

Read more less

Book SynopsisExplore the emerging definitions, protocols, and standards for SDN - software-defined, software-driven, programmable networks - with this comprehensive guide. Two senior network engineers show you what's required for building networks that use software for bi-directional communication between applications and the underlying network infrastructure.

Read more less

Book SynopsisGary R. Bunt is a twenty-year pioneer in the study of cyber-Islamic environments (CIEs). In this new book, he explores the diverse and surprising ways digital technology is shaping how Muslims across vast territories relate to religious authorities in fulfilling spiritual, mystical, and legalistic agendas.

Read more less

Book SynopsisUse a simple programming model and the .NET language of your choice to build large distributed systems. This book teaches you the Microsoft Orleans framework.Even well-versed professional software developers with expertise in C# (or another language) find themselves unequipped to meet the challenges of distributed systems as infrastructure moves to multi-core; multiple computers are being used for scale, redundancy, and cloud computing; and multi-region deployment is taking place.Orleans handles many of the concerns of distributed computing and cloud infrastructure, allowing you to concentrate on writing application logic.What You Will Learn Know the key concepts for building distributed systems Gain a background in the origin and evolution of Orleans, and why it is important for your projects Dive into each of the features available in Orleans by building an example application Develop troubleshootingTable of Contents1. Fundamentals2. Grains and Silos3. Hello World 4. Debugging an Orleans Application5. Orleans Dashboard6. Adding Persistence7. Adding ASP.NET Core8. Unit Testing9. Streams10. Timer and Reminders11. Transactions12. Event Sourced Grains13. Updating Grains14. Optimizations15. Advanced Features16. Interviews

Read more less

Book SynopsisEnhance your product management skills and set yourself apart from other product managers working in the IoT industry. This book shows you how to navigate through the world of small and Edge devices to successfully launch and monitor products connected together to make smart environments. Working in Agile environments, you''ll learn to guide UI builds that serve customer needs and function the way top tech companies expect. Then measure the right product metrics and create reporting dashboards for your IoT products. That way you can effectively engage partners, engineers, and stakeholders. And you''ll learn the entire end-to-end development process of IoT products so that you can make sure you make the right moves at the right stages.     After mastering the IoT product lifecycle and measuring your success against KPIs, you''ll see how to work with marketing to effectively launch your product in the marketplace. Finally, a self-interTable of ContentsChapter 1. History of IoT Product ManagementGrowth of IoT technology Scope of product management How to become a PM Chapter 2. UI / UX for IoT Product Design User experience and user interface creation Steps for product Business models Hardware and recent IoT landscape Chapter 3. IoT Manager in the Agile Era Product Manager journey Advance skills Creating product metricsCreating reporting dashboards, Communication with partners, engineersm and stakeholders End-to-end development. Chapter 4. IoT Product Development and Life Cycle Product evaluation Journey of the product Chapter 5. IoT Product Manager and Life Cycle Management Collaborate Negotiate Launch Chapter 6. IoT Product Marketing Marketing strategy creation Monitor industry trends Review generation methods Chapter 7. Government Regulation in IoT Existing laws (US, EU, Canada) How to follow regulations Audience: Intermediate

Read more less

Book SynopsisFrom the researcher who was one of the first to identify and analyze the infamous industrial control system malware "Stuxnet," comes a book that takes a new, radical approach to making Industrial control systems safe from such cyber attacks: design the controls systems themselves to be "robust." Other security experts advocate risk management, implementing more firewalls and carefully managing passwords and access. Not so this book: those measures, while necessary, can still be circumvented. Instead, this book shows in clear, concise detail how a system that has been set up with an eye toward quality design in the first place is much more likely to remain secure and less vulnerable to hacking, sabotage or malicious control. It blends several well-established concepts and methods from control theory, systems theory, cybernetics and quality engineering to create the ideal protected system. The book's maxim is taken from the famous quality engineer William Edwards Deming, "If I had to reduce my message to management to just a few words, I'd say it all has to do with reducing variation." Highlights include: - An overview of the problem of "cyber fragility" in industrial control systems How to make an industrial control system "robust," including principal design objectives and overall strategic planning Why using the methods of quality engineering like the Taguchi method, SOP and UML will help to design more "armored" industrial control systems

Read more less

Book SynopsisChallenges to Silicon Valley’s dominant role in conjuring and patenting the world’s technological futures are arising around the world. As digital media technologies emerge from new, globally dispersed locations, a multipolar order of communication innovation seems to be in the making. Yet recovering our ability to imagine futures otherwise requires negotiating conditions—economic, geopolitical, sociocultural, and ecological—rather than reproducing them under the pretext of breaking with the present. The essays in this volume examine research on such conditions critically and comparatively in a variety of geographies. Paying due attention to China’s rise as an innovative platform society and AI powerhouse, this book addresses the broader question of a shifting world order and trends that are shaped by China’s influence but that extend beyond its borders. Looking at multipolar communication innovation through various critical lenses, our technological futures simultaneously appear to be old, new, and uncertain, while the infrastructures and platforms underpinning communication innovation both affiliate communities and set them apart.

Read more less

Book SynopsisWhile the 5th Generation (5G) system is being widely deployed across the globe, the research and consensus building for the 6th generation (6G) are already well underway with high expectations toward the merger of digital, physical and human worlds. The main goal of this book is to introduce the upcoming 6G technologies and outline the foreseen challenges, enablers, and architectural design trends that will be instrumental in realizing a Sustainable and Trustworthy 6G system in the coming years.The envisioned 6G system promises to offer a more advanced and comprehensive user experience not only by achieving higher speeds, larger capacity, and lower latency, but also much more improved reliability, greater energy efficiency, and an enhanced security framework while natively integrating intelligence end-to-end (E2E). Achieving these goals will require innovative technological solutions and a holistic system design that considers the needs of various stakeholders and future 6G use cases.Capitalizing on the 5G Public-Private-Partnership (5G PPP) Phase 3 projects and the join efforts between the Architecture Working Group and the flagship Hexa-X project, this book delves into the critical challenges and enablers of the 6G system, including new network architectures and novel enhancements as well as the role of regulators, network operators, industry players, application developers, and end-users. Accordingly, this book provides a comprehensive overview of the current research activities on 6G and sets a solid cornerstone towards a more connected, intelligent, and sustainable world.Trade ReviewThis current book, as a joint effort between the Hexa-X project and the Architecture WG, is the culmination of the European architecture work as a whole. It highlights the latest requirements on the future architecture along with the architectural design principles to respond to technical, economical, and societal needs. Moreover, it elevates the perspective from the long-term evolution of the 5G technologies towards the introduction of the 6G system. It thus provides a reference point for future 6G architecture work to continue in the SNS JU. We count on the Hexa-X flagship as well as collaborative facilities under the 5G-PPP and SNS JU, such as the Architecture WG, to continue creating the critical mass in Europe towards this vision. I am looking forward to the creativity and ambition of the global research and innovation community to shape the new generation of communication technology throughout this decade. -- Peter StuckmannTable of Contents Chapter 1: Introduction Chapter 2: Architecture Landscape Chapter 3: Towards Versatile Access Networks Chapter 4: Towards Joint Communication and Sensing Chapter 5: Towards Natively Intelligent Networks Chapter 6: Towards Sustainable Networks Chapter 7: Towards Continuously Programmable Networks Chapter 8: Secure, Privacy-Preserving, and Trustworthy Networks Chapter 9: 6G Outlook and Timeline Index

Read more less

Book SynopsisOffers a practical blend of theoretical considerations and practical NFV implementation in modern computer environments. A valuable resource for students, engineers, and researchers looking for a comprehensive guide to further network softwarization

Read more less

Book SynopsisENACT is a research project funded by the European Commission under its H2020 program. The project consortium consists of twelve industry and research member organisations spread across the whole EU. The overall goal of the ENACT project was to provide a novel set of solutions to enable DevOps in the realm of trustworthy Smart IoT Systems. Smart IoT Systems (SIS) are complex systems involving not only sensors but also actuators with control loops distributed all across the IoT, Edge and Cloud infrastructure. Since smart IoT systems typically operate in a changing and often unpredictable environment, the ability of these systems to continuously evolve and adapt to their new environment is decisive to ensure and increase their trustworthiness, quality and user experience. DevOps has established itself as a software development life-cycle model that encourages developers to continuously bring new features to the system under operation without sacrificing quality. This book reports on the ENACT work to empower the development and operation as well as the continuous and agile evolution of SIS, which is necessary to adapt the system to changes in its environment, such as newly appearing trustworthiness threats.Table of Contents 1. Introduction 2. The ENACT Approach 3. Privacy Issues Control in Continuous Risk Management 4. Model-based Continuous Deployment of SIS 5. A DevOps Toolchain for Managing Actuation Conflicts in Smart IoT Systems 6. Online Reinforcement Learning for Self-Adaptive Smart IoT Systems 7. Security of Smart IoT Systems 8. Validation, Verification and Root-Cause Analysis 9. SIS-based eHealth application: the Tellu use case 10. Intelligent Transport System: the Indra Use Case 11. Smart Building: the Tecnalia KUBIK use case 12. Conclusion

Read more less

Book SynopsisThis text explores the fundamentals of networking technology and its applications in modern computing. The book covers topics such as network architectures, protocols, security, and wireless networking. It is designed to provide readers with a comprehensive understanding of how computer networks function and how they can be configured and managed effectively. Whether you are a student, a professional, or an enthusiast in the field of computer networking, this book is an essential resource for gaining knowledge and expertise in this dynamic and rapidly evolving field.Table of Contents Chapter 1 Basics of Computer Networking Chapter 2 Protocols and Standards of Computer Networks Chapter 3 Hardware and Software used in Computer Networks Chapter 4 Understanding Computer Network Security Chapter 5 Wireless Networking Chapter 6 Emerging Networking Applications Chapter 7 Network Performance and Optimization Chapter 8 Future of Computer Networking

Read more less

Book SynopsisThe main aim of this book is to offer companies a simple and practical method to assess their maturity in the Governance Information System, so that they are in working order to face the challenges of Digital Transformation. How can companies effectively manage their investment in IT systems and make the most of their development?Table of ContentsForeword ix Preface xv Acknowledgments xxiii Part 1. Information Systems Governance at the Service of the Digital Transformation 1 Chapter 1. Enterprise Governance: A Framework that Includes IS Governance 3 Chapter 2. Challenges of Enterprise IS Governance 11 2.1. Value creation 13 2.2. IS risk management 16 Chapter 3. Objectives, Approaches and Key Success Factors of Enterprise IS Governance 21 3.1. Objectives of Enterprise IS governance (EISG) 21 3.2. Approaches, frameworks and ongoing reflections 23 3.3. Benefits of the approach and its key success factors 27 Chapter 4. How Can the Maturity of Enterprise IS Governance be Improved? 29 4.1. Scope of EISG and assessment of the company’s global maturity level 29 4.2. How can it be properly initiated? 33 4.3. What can be done once the diagnostics have been made? 34 4.4. How can the improvement process be initiated? 35 Part 2. Evaluation of the Maturity of Enterprise Information Systems Governance 37 Chapter 5. Maturity Evaluation Criteria for Each of the 11 Vectors 39 5.1. Vector 1: IS planning and integration into the overall company’s planning process 40 5.1.1. Issues of this vector in the digital transformation 40 5.1.2. Issues of the vector in terms of contribution to the IS gonernance 40 5.1.3. Best practices associated with the vector and measurement of the company’s maturity level in the vector 41 5.2. Vector 2: IS urbanization at the service of strategic challenges in the frame of the Enterprise Architecture 44 5.2.1. Issues of this vector in the digital transformation 44 5.2.2. Issues of the vector in terms of contribution to the IS governance 44 5.2.3. Best practices associated with the vector and measurement of the company’s level maturity in the vector 46 5.3. Vector 3: Portfolio management of value creation-oriented projects 49 5.3.1. Issues of this vector in the digital transformation 49 5.3.2. Issues of the vector in terms of contribution to the IS governance 50 5.3.3. Best practices associated with the vector and measurement of the company’s maturity level in the vector 52 5.4. Vector 4: alignment of the IT organization with respect to business processes 57 5.4.1. Issues of this vector in the digital transformation 57 5.4.2. Issues of the vector in terms of contribution to IS governance 57 5.4.3. Best practices associated with the vector and measurement of the company’s maturity level in the vector 60 5.5. Vector 5: IS-related budgetary management and costs control promoting transparency 64 5.5.1. Vector challenges in the digital transformation 64 5.5.2. Issues of the vector in terms of contribution to IS governance 65 5.5.3. Best practices associated with the vector and measurement of the company’s maturity level in the vector 67 5.6. Vector 6: project management with respect to business objectives 73 5.6.1. Issues of this vector in the digital transformation 73 5.6.2. Issues of the vector in terms of contribution to the IS governance 74 5.6.3. Best practices associated with the vector and measurement of the company’s maturity level in the vector 76 5.7. Vector 7: provision of IT services optimized with respect to clients’ expectations 81 5.7.1. Issues of this vector in the digital transformation 81 5.7.2. Issues of the vector in terms of contribution to IS governance 81 5.7.3. Best practices associated with the vector and measurement of the company’s level of maturity in the vector 87 5.8. Vector 8: prospective management of IT skills 95 5.8.1. Issues of this vector in the digital transformation 95 5.8.2. Issues of the vector in terms of contribution to IS governance 95 5.8.3. Best practices associated with the vector and measurement of the company’s maturity level in the vector 98 5.9. Vector 9: IS-related risk management adapted to business challenges 101 5.9.1. Issues of this vector in the digital transformation 101 5.9.2. Issues of the vector in terms of contribution to IS Governance 102 5.9.3. Best practices associated with the vector and measurement of the company’s maturity level in the vector 103 5.10. Vector 10: management and measurement of IS performance 107 5.10.1. Issues of this vector in the digital transformation 107 5.10.2. Issues of the vector in terms of contribution to IS governance 108 5.10.3. Best practices associated with the vector and measurement of the company’s maturity level in the vector 109 5.11. Vector 11: IS-related communication management 112 5.11.1. Issues of this vector in the digital transformation 112 5.11.2. Issues of the vector in terms of contribution to IS governance 112 5.11.3. Best practices associated with the vector and measurement of the company’s maturity level in the vector 113 Appendices 117 Appendix 1: IT Scorecard 119 Appendix 2: Economic Steering of IT Department 123 Appendix 3: Glossary 129 Bibliography 137 Index 141

Read more less

Book SynopsisBy the year 2000, a balance was sought between security requirements and a respect for privacy, as well as for individual and collective freedoms. As we progress further into the 21st century, however, security is taking precedence within an increasingly controlled society.This shift is due to advances in innovative technologies and the investments made by commercial companies to drive constant technological progress. Despite the implementation of the General Data Protection Regulation (GDPR) within the EU in 2018 or 2020’s California Consumer Privacy Act (CCPA), regulatory bodies do not have the ability to fully manage the consequences presented by emerging technologies. Security and Its Challenges in the 21st Century provides students and researchers with an international legal and geopolitical analysis; it is also intended for those interested in societal development, artificial intelligence, smart cities and quantum cryptology.Table of ContentsIntroduction ix Chapter 1 Security: Actors and Rights 1 1.1 Numerous actors 1 1.1.1 Nation-states 1 1.1.2 Multinationals 3 1.1.3 The GAFAM 9 1.2 Rights and security 10 1.2.1 The law of armed conflict 10 1.2.2 Environmental law 16 Chapter 2 Interceptions 25 2.1 International interceptions 25 2.1.1 Interceptions in the 20th century 25 2.1.2 Interceptions in the 21st century 27 2.2 Interceptions in France 37 2.2.1 The 1991 law 38 2.2.2 The law of March 9, 2004 41 2.2.3 The 2015 Intelligence Act 42 2.2.4 Reform of the code of criminal procedure 52 Chapter 3 Geolocation and Video Protection 59 3.1 International standards for both geolocation and video protection/video surveillance 59 3.1.1 Comparative legal issues in the era of geolocalization 59 3.1.2 Belgian legislation on geolocation 61 3.1.3 Video surveillance/video protection 63 3.2 France 67 3.2.1 The legislative and regulatory framework 67 3.2.2 The case law just before the LOPPSI 2 and the Jean-Marc Philippe establishments 69 3.2.3 The entry into force of the LOPPSI 2 74 3.2.4 Jurisprudence after LOPPSI 2 74 3.2.5 Video protection and terrorism 88 Chapter 4 Biometrics or “the Second Circle” 89 4.1 Biometrics and international law 90 4.1.1 The United States: a historical outline 90 4.1.2 Standardization 93 4.1.3 The European Union and biometrics 94 4.2 France 98 4.2.1 Visa control 98 4.2.2 Passports 99 4.2.3 The TES database 101 4.2.4 Setting up Alicem 117 4.3 Facial recognition at the heart of globalization 119 Chapter 5 Personal Data in the United States and Europe 121 5.1 The United States and the protection of personal data in the European Union: Directive 95/46 122 5.1.1 Sensitive data 122 5.1.2 The right of access 123 5.1.3 Security 123 5.1.4 The directive of December 15, 1997, followed by the directive of July 12, 2002 and supplemented by the directive of November 25, 2009 124 5.1.5 Geolocalization 125 5.1.6 Cookies 125 5.2 The GDPR 126 5.2.1 Consent 127 5.2.2 Metadata and the “Privacy” bill 134 5.3 Cloud computing 138 5.3.1 Definition 138 5.3.2 The Safe Harbor Principles agreement 139 5.3.3 Privacy Shields 140 5.3.4 Two models 140 Chapter 6 Cybersecurity and Privacy 145 6.1 Cybersecurity itself 146 6.1.1 Cybersecurity in the United States 146 6.1.2 Cybersecurity in China 147 6.1.3 Cybersecurity in Japan 147 6.1.4 Cybersecurity and the European Union 148 6.1.5 Cybersecurity in the United Kingdom 149 6.1.6 Cybersecurity in France 149 6.1.7 The dangers of cyber-attacks 151 6.1.8 Two interesting cases 154 6.2 Cybersecurity and cryptology 158 6.2.1 Cryptology: the science of secrecy 158 6.2.2 Risks 161 6.3 PNR data 164 6.3.1 Element of definition 164 6.3.2 PNR data and nation-states 166 6.4 Smart cities 179 6.4.1 The development of standardization and certification 181 6.4.2 Strategies and CSIRTs 182 Chapter 7 Security Instruments in Texts Relating to Terrorism 185 7.1 Security instruments 185 7.1.1 The millimeter-wave scanner 185 7.1.2 The body camera 196 7.1.3 UAVs: a dual use – military and civilian 202 7.2 Standards in relation to terrorism 208 7.2.1 The law of 2014 209 7.2.2 The law strengthening internal security and the fight against terrorism 219 Chapter 8 Security and Democracy 225 8.1 Fake news 226 8.1.1 The definition 227 8.1.2 Obligations 227 8.2 Hate speech 237 8.2.1 The report 237 8.2.2 The proposed new mechanism 239 Conclusion 245 References 249 Index 251

Read more less

Book SynopsisThis book reviews the concept of Software-Defined Networking (SDN) by studying the SDN architecture. It provides a detailed analysis of state-of-the-art distributed SDN controller platforms by assessing their advantages and drawbacks and classifying them in novel ways according to various criteria. Additionally, a thorough examination of the major challenges of existing distributed SDN controllers is provided along with insights into emerging and future trends in that area. Decentralization challenges in large-scale networks are tackled using three novel approaches, applied to the SDN control plane presented in the book. The first approach addresses the SDN controller placement optimization problem in large-scale IoT-like networks by proposing novel scalability and reliability aware controller placement strategies. The second and third approaches tackle the knowledge sharing problem between the distributed controllers by suggesting adaptive multilevel consistency models following the concept of continuous Quorum-based consistency. These approaches have been validated using different SDN applications, developed from real-world SDN controllers.Table of ContentsAcronyms ix Preface xiii Introduction xvii Chapter 1 Toward a Decentralized SDN Control Architecture: Overview and Taxonomy 1 1.1. Introduction 1 1.2. Software-defined networking: a centralized control architecture 2 1.2.1. Conventional networking and the SDN paradigm 2 1.2.2. The SDN architecture 3 1.3. Physical classification of existing SDN control plane architectures 8 1.3.1. Physically centralized SDN control 8 1.3.2. Physically distributed SDN control 11 1.4. Logical classification of existing SDN control plane architectures 16 1.4.1. Logically centralized SDN control 17 1.4.2. Logically distributed SDN control 22 1.5. Conclusion 26 Chapter 2. Decentralized SDN Control: Major Open Challenges 27 2.1. Introduction 27 2.2. Scalability 28 2.2.1. Data plane extensions 30 2.2.2. Control plane distribution 32 2.3. Reliability 33 2.3.1. Control state redundancy 33 2.3.2. Controller failover 34 2.4. Controller state consistency 35 2.4.1. Static consistency 36 2.4.2. Adaptive multi-level consistency 37 2.5. Interoperability 38 2.5.1. Interoperability between the SDN controllers 38 2.5.2. SDN interoperability with legacy networks 38 2.6. Other challenges 39 2.7. Conclusion 40 Chapter 3 Scalability and Reliability Aware SDN Controller Placement Strategies 41 3.1. Introduction 41 3.2. Related work 42 3.3. The SDN controller placement optimization problem 44 3.3.1. Problem statement 44 3.3.2. Problem formulation 45 3.3.3. Placement metrics 45 3.4. The proposed SDN controller placement scheme 49 3.4.1. The adopted approach 49 3.4.2. Multi-criteria placement algorithms 50 3.4.3. Gradual strategies 52 3.5. Performance evaluation 53 3.5.1. Simulation settings 53 3.5.2. Simulation results 54 3.6. Discussion 60 3.7. Conclusion 62 Chapter 4 Adaptive and Continuous Consistency for Distributed SDN Controllers: Anti-Entropy Reconciliation Mechanism 65 4.1. Introduction 65 4.2. Related work 66 4.3. The consistency problem in SDN 68 4.3.1. Consistency trade-offs in SDN 68 4.3.2. Consistency models in SDN 69 4.4. Consistency models in ONOS 70 4.4.1. Strong consistency in ONOS 70 4.4.2. Eventual consistency in ONOS 71 4.5. The proposed adaptive consistency for ONOS 72 4.5.1. A continuous consistency model for ONOS 72 4.5.2. Our consistency adaptation strategy for ONOS 74 4.5.3. Our implementation approach 74 4.6. Performance evaluation 76 4.6.1. Experimental setup 76 4.6.2. Results 76 4.7. Conclusion 79 Chapter 5 Adaptive and Continuous Consistency for Distributed SDN Controllers: Quorum-Based Replication 81 5.1. Introduction 81 5.2. Background on eventual consistency in distributed data stores 83 5.2.1. Consistency and performance metrics 83 5.2.2. Adaptive consistency control 84 5.2.3. Existing modern tunable consistency systems 84 5.3. The proposed adaptive Quorum-inspired consistency for ONOS 86 5.3.1. A continuous consistency model for ONOS 86 5.3.2. Our Quorum-inspired consistency adaptation strategy for ONOS 87 5.4. Implementation approach on ONOS 93 5.4.1. Design of a CDN-like application 93 5.4.2. State synchronization and content distribution 94 5.4.3. Content delivery to customers 95 5.5. Performance evaluation 97 5.5.1. Application-specific performance and consistency metrics 97 5.5.2. Experimental setup 98 5.5.3. Results 103 5.6. Conclusion 112 Conclusions and Perspectives 115 C.1. Summary of contributions 115 C.2. Perspectives and future work 117 References 121 Index 139

Read more less

Book SynopsisThe Internet of Edges is a new paradigm whose objective is to keep data and processing close to the user. This book presents three different levels of Edge networking: MEC (Multi-access Edge Computing), Fog and Far Edge (sometimes called Mist or Skin). It also reviews participatory networks, in which user equipment provides the resources for the Edge network. Edge networks can be disconnected from the core Internet, and the interconnection of autonomous edge networks can then form the Internet of Edges. This book analyzes the characteristics of Edge networks in detail, showing their capacity to replace the imposing Clouds of core networks due to their superior server response time, data security and energy saving.Table of ContentsIntroduction ix Chapter 1. Edge Architectures 1 1.1. The three levels of Edge Networking 1 1.2. Edge Computing architectures 4 1.3. Security and domain name system on Edge 14 1.4. The digital infrastructure of the participatory Internet 16 1.5. Conclusion 17 1.6. References 18 Chapter 2. MEC Networks 21 2.1. The MEC level of 5G architecture 21 2.2. 5G 25 2.3. 5G Edge 29 2.4. Conclusion 37 2.5. References 37 Chapter 3. Fog Networks 39 3.1. Fog architectures 39 3.2. Fog controllers 44 3.3. Fog and the Internet of Things 48 3.4. Wi-Fi in the Fog’s digital infrastructure 50 3.5. The new generation Wi-Fi 54 3.6. The next generation of mobile Wi-Fi 63 3.7. Private 5G for Fog Networking 64 3.8. Conclusion 69 3.9. References 69 Chapter 4. Skin Networks 73 4.1. The architecture of Skin networks 73 4.2. Virtual access points 74 4.3. Participatory Internet networks 77 4.4. Conclusion 82 4.5. References 83 Chapter 5. Ad hoc and Mesh Networks 85 5.1. Ad hoc networks 85 5.2. Routing 88 5.3. Mesh networks 93 5.4. Participatory networks 95 5.5. Local services 96 5.6. The digital infrastructure of the Internet of the Edges 97 5.7. Conclusion 101 5.8. References 102 Chapter 6. Applications of the Internet of Edges 105 6.1. Civil security and defense applications 107 6.2. Applications of the Internet of Things 108 6.3. The tactile Internet. 110 6.4. Telecom applications 115 6.5. Industry 4.0 116 6.6. The smart city 118 6.7. Conclusion 121 6.8. References 121 Chapter 7. Vehicular Networks 123 7.1. Communication techniques for vehicular networks 123 7.2. Vehicular Ad hoc NETworks 126 7.3. Connected and intelligent vehicles 127 7.4. The MEC and the VEC 128 7.5. Intelligent transport systems (ITS)-G5 130 7.6. 5G V2X 133 7.7. The VLC 139 7.8. Conclusion 140 7.9. References 140 Chapter 8. Virtualization of the Internet of Edges 143 8.1. Network virtualization 143 8.2. Virtualization on the Edge 145 8.3. Using virtual networks on the Edge 151 8.3.1. Isolation 152 8.3.2. Extending network virtualization 153 8.4. Mobile Edge Computing 155 8.4.1. Examples of MEC applications 155 8.4.2. Geolocation 156 8.4.3. Augmented reality 156 8.4.4. Video analytics 157 8.4.5. Content optimization 158 8.4.6. Content cache and DNS cache 158 8.4.7. Performance optimization 159 8.4.8. Positioning of MEC servers 159 8.5. Conclusion 162 8.6. References 162 Chapter 9. Security 165 9.1. Cloud of security on the Edge 165 9.2. Secure element 170 9.2.1. Security based on secure elements 174 9.2.2. The TEE 175 9.2.3. The trusted service manager 176 9.2.4. The Cloud-based security solution 177 9.2.5. Solutions for security 178 9.3. Blockchain 183 9.3.1. Blockchain consensus 184 9.3.2. Blockchain in Edge Computing. 185 9.4. Conclusion 188 9.5. References 188 Chapter 10. The Example of Green Communications 193 10.1. The Green PI solution 194 10.2. The Edge Cloud 194 10.3. The IoE 195 10.4. The IoE platform 199 10.5. Use cases: IoT in constrained environments 201 10.6. IoT in motion 202 10.7. Massive IoT 203 10.8. The advantages 205 10.9. References 205 Chapter 11. Deployment of the Participatory Internet 207 11.1. The deployment 207 11.2. The Green Cloud 208 11.2.1. My Network 211 11.2.2. Chat 212 11.2.3. Talk 212 11.2.4. Storage 212 11.2.5. vCard Editor 212 11.3. Scaling up 212 11.4. Energy savings 214 11.5. Security 219 11.6. Wi-Fi and LTE hybridization 220 11.7. Conclusion 223 11.8. References 223 Chapter 12. The Future 225 12.1. The short-term future 225 12.2. The medium-term future 226 12.3. The long-term future 227 12.4. Participatory Internet and IPV6 228 12.5. References 231 List of Authors 235 Index 237

Read more less

Book SynopsisSmart homes use Internet-connected devices, artificial intelligence, protocols and numerous technologies to enable people to remotely monitor their home, as well as manage various systems within it via the Internet using a smartphone or a computer. A smart home is programmed to act autonomously to improve comfort levels, save energy and potentially ensure safety; the result is a better way of life. Innovative solutions continue to be developed by researchers and engineers and thus smart home technologies are constantly evolving. By the same token, cybercrime is also becoming more prevalent. Indeed, a smart home system is made up of connected devices that cybercriminals can infiltrate to access private information, commit cyber vandalism or infect devices using botnets. This book addresses cyber attacks such as sniffing, port scanning, address spoofing, session hijacking, ransomware and denial of service. It presents, analyzes and discusses the various aspects of cybersecurity as well as solutions proposed by the research community to counter the risks. Cybersecurity in Smart Homes is intended for people who wish to understand the architectures, protocols and different technologies used in smart homes.Table of ContentsChapter 1 Home Automation Solutions for SecureWSN 1 Corinna SCHMITT and Marvin WEBER 1.1 Introduction 2 1.2 Background 4 1.2.1 SecureWSN 4 1.2.2 Communication standards 8 1.2.3 The monitor-analyse-plan-execute-knowledge model 12 1.2.4 Hardware and libraries 14 1.3 Design decisions 15 1.3.1 Requirements 16 1.3.2 HAIFA architecture 18 1.3.3 WebMaDa integration 29 1.4 Implementation 30 1.4.1 CoMaDa integration 30 1.4.2 HAIFA’s ZigBee Gateway 48 1.4.3 WebMaDa integration 55 1.4.4 Uploading HA data to WebMaDa 56 1.4.5 Sending HA messages from WebMaDa to CoMaDa 59 1.4.6 WebMaDa’s frontend 62 1.5 Evaluation of HAIFA 64 1.5.1 Actuator interoperability (R1) 65 1.5.2 Rule-based automation (R2) 65 1.5.3 Node hardware interoperability (R3) 68 1.5.4 CoMaDa and WebMaDa management (R4) 68 1.6 Summary and conclusions 68 1.7 Acknowledgements 69 1.8 References 70 Chapter 2 Smart Home Device Security: A Survey of Smart Home Authentication Methods with a Focus on Mutual Authentication and Key Management Practices 75 Robinson RAJU and Melody MOH 2.1 Introduction 75 2.2 Smart home – introduction and technologies 77 2.2.1 Smart home – introduction 77 2.2.2 Smart home devices – categories 79 2.3 Smart home security 80 2.3.1 Threats 81 2.3.2 Vulnerabilities 82 2.3.3 IoT communication protocols 84 2.3.4 Enhancements to IoT communication protocols 86 2.3.5 IoT security architectures 87 2.4 Smart home authentication mechanisms 91 2.4.1 Stages of defining an authentication protocol for IoT 92 2.4.2 Taxonomy of authentication schemes for IoT 93 2.5 A primer on mutual authentication and key management terminologies 96 2.5.1 X.509 certificate 97 2.5.2 CoAP and DTLS 99 2.5.3 Tls 1.3 101 2.5.4 Key management fundamentals 102 2.6 Mutual authentication in smart home systems 104 2.6.1 Device and user onboarding 105 2.6.2 Flow of user authentication and authorization 106 2.6.3 Examples of mutual authentication schemes 107 2.7 Challenges and open research issues 112 2.8 Conclusion 113 2.9 References 114 Chapter 3 SRAM Physically Unclonable Functions for Smart Home IoT Telehealth Environments 125 Fayez GEBALI and Mohammad MAMUN 3.1 Introduction 126 3.2 Related literature 129 3.3 System design considerations 130 3.4 Silicon physically unclonable functions (PUF) 131 3.4.1 Mutual authentication and key exchange using PUF 132 3.4.2 Fuzzy extractor 133 3.5 Convolutional encoding and Viterbi decoding the SRAM words 133 3.6 CMOS SRAM PUF construction 136 3.6.1 SRAM PUF statistical model 138 3.6.2 Extracting the SRAM cell statistical parameters 141 3.6.3 Obtaining the golden SRAM PUF memory content 142 3.6.4 Bit error rate (BER) 142 3.6.5 Signal-to-noise ratio (SNR) for SRAM PUF 143 3.7 Algorithms for issuing CRP 144 3.7.1 Algorithm #1: single-challenge 144 3.7.2 Algorithm #2: repeated challenge 147 3.7.3 Algorithm #3: repeated challenge with bit selection 148 3.8 Security of PUF-based IoT devices 150 3.9 Conclusions 151 3.10 Acknowledgements 151 3.11 References 151 Chapter 4 IoT Network Security in Smart Homes 155 Manju LATA and Vikas KUMAR 4.1 Introduction 156 4.2 IoT and smart home security 159 4.3 IoT network security 164 4.4 Prevailing standards and initiatives 169 4.5 Conclusion 172 4.6 References 172 Chapter 5 IoT in a New Age of Unified and Zero-Trust Networks and Increased Privacy Protection 177 Sava ZXIVANOVICH, Branislav TODOROVIC, Jean Pierre LORRÉ, Darko TRIFUNOVIC, Adrian KOTELBA, Ramin SADRE and Axel LEGAY 5.1 Introduction 178 5.2 Internet of Things 179 5.3 IoT security and privacy challenges 182 5.3.1 Security challenges 183 5.3.2 Privacy challenges 184 5.4 Literature review 187 5.5 Security and privacy protection with a zero-trust approach 190 5.6 Case study: secure and private interactive intelligent conversational 193 5.6.1 LinTO technical characteristics 194 5.6.2 Use case 195 5.6.3 Use case mapping on the reference architecture 197 5.7 Discussion 197 5.8 Conclusion 198 5.9 Acknowledgements 199 5.10 References 199 Chapter 6 IOT, Deep Learning and Cybersecurity in Smart Homes: A Survey 203 Mirna ATIEH, Omar MOHAMMAD, Ali SABRA and Nehme RMAYTI 6.1 Introduction 203 6.2 Problems encountered 205 6.3 State of the art 207 6.3.1 IoT overview 207 6.3.2 History 208 6.3.3 Literature review 208 6.3.4 Advantages, disadvantages and challenges 209 6.4 IoT architecture 212 6.4.1 Sensing layer 213 6.4.2 Network layer 213 6.4.3 Service layer 213 6.4.4 Application–interface layer 213 6.5 IoT security 214 6.5.1 Security in the sensing layer 214 6.5.2 Security in the network layer 215 6.5.3 Security in the service layer 215 6.5.4 Security in the application–interface layer: 216 6.5.5 Cross-layer threats 216 6.5.6 Security attacks 216 6.5.7 Security requirements in IOT 218 6.5.8 Security solutions for IOT 219 6.6 Artificial intelligence, machine learning and deep learning 221 6.6.1 Artificial intelligence 222 6.6.2 Machine learning 222 6.6.3 Deep learning 224 6.6.4 Deep learning vs machine learning 225 6.7 Smart homes 227 6.7.1 Human activity recognition in smart homes 227 6.7.2 Neural network algorithm for human activity recognition 228 6.7.3 Deep neural networks used in human activity recognition 230 6.8 Anomaly detection in smart homes 233 6.8.1 What are anomalies? 233 6.8.2 Types of anomaly 233 6.8.3 Categories of anomaly detection techniques 233 6.8.4 Related work of anomaly detection in smart homes 234 6.9 Conclusion 237 6.10 References 238 Chapter 7 sTiki: A Mutual Authentication Protocol for Constrained Sensor Devices 245 Corinna SCHMITT, Severin SIFFERT and Burkhard STILLER 7.1 Introduction 246 7.2 Definitions and history of IoT 248 7.3 IoT-related security concerns 251 7.3.1 Security analysis guidelines 253 7.3.2 Security analysis by threat models 255 7.3.3 sTiki’s security expectations 256 7.4 Background knowledge for sTiki 258 7.4.1 Application dependencies for sTiki 258 7.4.2 Inspiring resource-efficient security protocols 260 7.5 The sTiki protocol 264 7.5.1 Design decisions taken 266 7.5.2 Implementation of sTiki’s components 267 7.6 sTiki’s evaluation 270 7.6.1 Secured communication between aggregator and server 271 7.6.2 Secured communication between collector and aggregator 275 7.6.3 Communication costs 276 7.6.4 Integration into an existing system 277 7.6.5 Comparison to existing approaches 278 7.7 Summary and conclusions 279 7.8 Acknowledgements 280 7.9 References 281 List of Authors 287 Index 289

Read more less