Network security Books

Book Synopsis Global surveys from McKinsey, BCG, Gartner, and others show that less than 30% of digital transformation programs succeed in their missions to improve a company''s performance and employee productivity. This is due to the fact that IT efforts within the company do not center around the employee. This book will provide concrete steps to allow both IT professionals and business leaders to transform the way they deliver IT to employees - with the employee (the human) centered in their transformation. The concepts, models, checklists, and playbook you''ll review are based on the author''s many years of experience, lessons learned, and proven outcomes. IT organizations want to improve their employee experience but don''t know how and this is the must have book for those who don''t know where to start. More than two-thirds of today''s jobs require good digital and IT skills from employees. The expectations&nTable of ContentsIntroduction (introduction to the topic and why Employee centric IT is needed) ○ Chapter 1: From Technology Centric to Employee Centric IT ■ Dysfunctions of IT ■ Understanding Employees as Humans and not data points ○ Chapter 2: Employee Experience and its core pillar – Employee Centric IT■ Why Employees are Forgotten ■ Dimensions of Employee Centric IT ■ Trust Equation Part 1: Winning Employees’ Hearts (Covering the activities to achieve the first part of the trust equation which is winning the hearts) ○ Chapter 3: Winning the Engagement ■ Employee Engagement ■ Community Engagement ■ Summary and Self-Assessment ■ Checklist for Winning the Engagement ○ Chapter 4: Winning the Support ■ Focused and employee-centered “care” ■ Listening ■ Summary and Self-Assessment ■ Checklist for Winning the Support ○ Chapter 5: Winning the Culture ■ Communication■ Collaboration ■ Technology ■ Summary and Self-Assessment ■ Checklist for Winning the Culture Part 2: Winning Employees’ Minds (Covering the activities to achieve the second part of the trust equation which is winning their minds) ○ Chapter 6: Winning the Operations ■ Data Driven ■ Education Driven ■ Personas ■ Productivity Driven ■ Summary and Self-Assessment■ Checklist for Winning the Operations ○ Chapter 7: Winning the Transformation ■ Priming of the change ■ Change Impact Analysis ■ Summary and Self-Assessment ■ Checklist for Winning the Transformation ○ Chapter 8: Winning the Innovation ■ Incremental ■ Radical ■ Summary and Self-Assessment ■ Checklist for Winning the Innovation Part 3: Winning your IT Team (steps to take to win IT team’s acceptance of the change needed towards employee-centricity and how to achieve it) ○ Chapter 9: Winning the IT Team’s Structure ■ Summary and Self-Assessment ■ Checklist for Winning the Structure ○ Chapter 10: Winning the IT Team’s processes ■ Summary and Self-Assessment ■ Checklist for Winning the Processes ○ Chapter 11: Winning the IT Talent & Skills ■ Summary and Self-Assessment ■ Checklist for Winning the Talent & Skills○ Chapter 12: Winning the IT Leadership & Culture ■ Collaboration ■ Psychological Safety ■ Summary and Self-Assessment ■ Checklist for Winning the Leadership & Culture Part 4: Evangelizing Employee Centric IT in your organization (Putting all the steps together in a playbook to be used in implementing Employee centricity in an organization) ○ Chapter 13: Implementing & Scaling Employee Centric IT for your Company ■ Preparation ■ Implementation ■ Lessons Learnt and Pitfalls ○ Chapter 14: How to deal with the Hybrid Way of working and Employee Centricity ○ Chapter 15: There is no End in Sight ● Conclusion

Read more less

Book SynopsisThe essential reference for security pros and CCIE Security candidates: policies, standards, infrastructure/perimeter and content security, and threat protection Integrated Security Technologies and Solutions – Volume I offers one-stop expert-level instruction in security design, deployment, integration, and support methodologies to help security professionals manage complex solutions and prepare for their CCIE exams. It will help security pros succeed in their day-to-day jobs and also get ready for their CCIE Security written and lab exams. Part of the Cisco CCIE Professional Development Series from Cisco Press, it is authored by a team of CCIEs who are world-class experts in their Cisco security disciplines, including co-creators of the CCIE Security v5 blueprint. Each chapter starts with relevant theory, presents configuration examples and applications, and concludes with practical troubleshooting. Volume 1 focuses on security policies and standards; infrastructure security; perimeter security (Next-Generation Firewall, Next-Generation Intrusion Prevention Systems, and Adaptive Security Appliance [ASA]), and the advanced threat protection and content security sections of the CCIE Security v5 blueprint. With a strong focus on interproduct integration, it also shows how to combine formerly disparate systems into a seamless, coherent next-generation security solution. Review security standards, create security policies, and organize security with Cisco SAFE architecture Understand and mitigate threats to network infrastructure, and protect the three planes of a network device Safeguard wireless networks, and mitigate risk on Cisco WLC and access points Secure the network perimeter with Cisco Adaptive Security Appliance (ASA) Configure Cisco Next-Generation Firewall Firepower Threat Defense (FTD) and operate security via Firepower Management Center (FMC) Detect and prevent intrusions with Cisco Next-Gen IPS, FTD, and FMC Configure and verify Cisco IOS firewall features such as ZBFW and address translation Deploy and configure the Cisco web and email security appliances to protect content and defend against advanced threats Implement Cisco Umbrella Secure Internet Gateway in the cloud as your first line of defense against internet threats Protect against new malware with Cisco Advanced Malware Protection and Cisco ThreatGrid Table of Contents Introduction xxvPart I Hi There! This Is Network Security 1Chapter 1 Let’s Talk About Network Security 3 Know Thy Enemy 4 Know Thy Self 6 Security Standards and Frameworks 9 Regulatory Compliance 15 Payment Card Industry Data Security Standard (PCI DSS) 16 Security Models 18 Integrating Security Solutions 23 Summary 25 References 25Chapter 2 Infrastructure Security and Segmentation 27 The Three Planes 27 Securing the Management Plane 28 Securing the Control Plane 38 Securing the Data Plane 49 Visibility with NetFlow 76 Summary 77 References 78Chapter 3 Wireless Security 79 What Is Wireless? 79 Wireless Security Overview 90 Securing the WLAN 94 Configuring Wireless Protection Policies 98 Management and Control Plane Protection 114 Integrating a WLC with Other Security Solutions 120 Summary 122 References 122Part II Deny IP any any 123Chapter 4 Firewalling with the ASA 125 ASA Fundamentals 125 Traffic with the ASA 151 ASA Advanced Features 167 Advanced Firewall Tuning 172 Troubleshooting the ASA 176 Summary 180 References 181Chapter 5 Next-Gen Firewalls 183 Firepower Deployment Options 184 Configuring Firepower Threat Defense 186 Access Control Policies 206 Analysis and Reporting 229 Summary 237 References 238Chapter 6 Next-Gen Intrusion Detection and Prevention 239 NGIPS Overview 239 Cisco NGIPS Appliances 248 Snort 256 Configuring a NGIPS 267 Operationalizing a NGIPS 283 Summary 296 References 297Chapter 7 IOS Firewall and Security Features 299 Network Address Translation (NAT) 299 Zone-Based Firewall (ZBF) 309 IOS Advanced Security Features 319 Summary 331 References 331Part III EHLO. You have threat in content 333Chapter 8 Content Security and Advanced Threat Protection 335 Content Security Overview 335 Web Security Appliance 336 Email Security Appliance 370 Security Management Appliance 390 Summary 391 References 391Chapter 9 Umbrella and the Secure Internet Gateway 393 Umbrella Fundamentals 393 Umbrella Overview Dashboard 399 Deploying Umbrella 401 Cisco Investigate 423 Summary 425 References 425Chapter 10 Protecting Against Advanced Malware 427 Introduction to Advanced Malware Protection (AMP) 427 Role of the AMP Cloud 429 Doing Security Differently 430 The Cloud 437 Cloud Proxy Mode 438 Air Gap Mode 440 Threat Grid 442 The Clean Interface 446 The Administrative Interface 446 The Dirty Interface 446 Comparing Public and Private Deployments 446 AMP for Networks 447 AMP for Endpoints 457 Custom Detections 462 AMP for Windows 474 Mac Policies 490 Linux Policies 495 AMP for Android 497 Groups, Groups, and More Groups 498 The Download Connector Screen 499 Distributing via Cisco AnyConnect 500 Installing AMP for Windows 501 Installing AMP for Mac 503 Installing AMP for Linux 504 Proxy Complications 511 AMP for Content Security 513 Content Security Connectors 513 Configuring AMP for Content Security Appliances 514 Configuring the Web Security Appliance (WSA) Devices 515 Configuring the Email Security Appliance (ESA) Devices 519 AMP Reports 522 Summary 5249781587147067, TOC, 4/16/2018

Read more less

Book SynopsisCyber Warfare and Cyber Terrorism provides an overview with basic definitions of cyber terrorism and information warfare, along with recommendations on how to handle these attacks. It presents detailed discussion on primary target facilities, deliverables, external penetration, starting points for preparations against attacks, and planning security systems.

Read more less

Book Synopsis

Read more less

Book SynopsisLearn Windows system design from the PE binary structure to modern and practical attack techniques used by red teams to implement advanced preventionPurchase of the print or Kindle book includes a free PDF eBookKey Features Understand how malware evades modern security products Learn to reverse engineer standard PE format program files Become familiar with modern attack techniques used by multiple red teams Book DescriptionAn Advanced Persistent Threat (APT) is a severe form of cyberattack that lies low in the system for a prolonged time and locates and then exploits sensitive information. Preventing APTs requires a strong foundation of basic security techniques combined with effective security monitoring. This book will help you gain a red team perspective on exploiting system design and master techniques to prevent APT attacks. Once you've understood the internal design of operating systems, you'll be ready to get hands-on with red team attacks and, further, learn how to create and compile C source code into an EXE program file. Throughout this book, you'll explore the inner workings of how Windows systems run and how attackers abuse this knowledge to bypass antivirus products and protection. As you advance, you'll cover practical examples of malware and online game hacking, such as EXE infection, shellcode development, software packers, UAC bypass, path parser vulnerabilities, and digital signature forgery, gaining expertise in keeping your system safe from this kind of malware. By the end of this book, you'll be well equipped to implement the red team techniques that you've learned on a victim's computer environment, attempting to bypass security and antivirus products, to test its defense against Windows APT attacks.What you will learn Explore various DLL injection techniques for setting API hooks Understand how to run an arbitrary program file in memory Become familiar with malware obfuscation techniques to evade antivirus detection Discover how malware circumvents current security measures and tools Use Microsoft Authenticode to sign your code to avoid tampering Explore various strategies to bypass UAC design for privilege escalation Who this book is forThis book is for cybersecurity professionals- especially for anyone working on Windows security, or malware researchers, network administrators, ethical hackers looking to explore Windows exploit, kernel practice, and reverse engineering. A basic understanding of reverse engineering and C/C++ will be helpful.Table of ContentsTable of Contents From Source to Binaries – The Journey of a C Program Process Memory – File Mapping, PE Parser, tinyLinker, and Hollowing Dynamic API Calling – Thread, Process, and Environment Information Shellcode Technique – Exported Function Parsing Application Loader Design PE Module Relocation PE to Shellcode – Transforming PE Files into Shellcode Software Packer Design Digital Signature – Authenticode Verification Reversing User Account Control and Bypassing Tricks Appendix – NTFS, Paths, and Symbols

Read more less

Book SynopsisThis textbook surveys the knowledge base in automated and resilient cyber deception. It features four major parts: cyber deception reasoning frameworks, dynamic decision-making for cyber deception, network-based deception, and malware deception. An important distinguishing characteristic of this book is its inclusion of student exercises at the end of each chapter. Exercises include technical problems, short-answer discussion questions, or hands-on lab exercises, organized at a range of difficulties from easy to advanced,. This is a useful textbook for a wide range of classes and degree levels within the security arena and other related topics. It’s also suitable for researchers and practitioners with a variety of cyber security backgrounds from novice to experienced.Table of Contents1 Using Deep Learning to Generate Relational HoneyData.- 2 Towards Intelligent Cyber Deception Systems.- 3 Honeypot Deception Tactics.- 4 Modeling and Analysis of Deception Games based on Hypergame Theory.- 5 Dynamic Bayesian Games for Adversarial and Defensive Cyber Deception.- 6 CONCEAL: A Strategy Composition for Resilient Cyber Deception - Framework, Metrics and Deployment.- 7 NetShifter - A Comprehensive Multi-Dimensional Network Obfuscation and Deception Solution.- 8 Deception-Enhanced Threat Sensing for Resilient Intrusion Detection.- 9 HONEYSCOPE: IoT Device Protection with Deceptive Network Views.- 10 gExtractor: Automated Extraction of Malware Deception Parameters for Autonomous Cyber Deception.- 11 Malware Deception with Automatic Analysis and Generation of HoneyResource.

Read more less

Book SynopsisThis book contains revised selected papers from the 28th International Conference on Selected Areas in Cryptography, SAC 2021, held as a virtual event September and October 2021.* The 23 full papers presented in this volume were carefully reviewed and selected from 60 submissions. They cover the following research areas: design and analysis of symmetric key primitives and cryptosystems, including block and stream ciphers, hash functions, MAC algorithms, and authenticated encryption schemes, efficient implementations of symmetric and public key algorithms, mathematical and algorithmic aspects of applied cryptology, and secure elections and related cryptographic constructions. *The conference was originally planned to take place at the University of Victoria, BC, Canada. Due to the COVID-19 pandemic, it was held virtually.

Read more less

Book SynopsisThis book deals with Private Information Retrieval (PIR), a technique allowing a user to retrieve an element from a server in possession of a database without revealing to the server which element is retrieved. PIR has been widely applied to protect the privacy of the user in querying a service provider on the Internet. For example, by PIR, one can query a location-based service provider about the nearest car park without revealing his location to the server. The first PIR approach was introduced by Chor, Goldreich, Kushilevitz and Sudan in 1995 in a multi-server setting, where the user retrieves information from multiple database servers, each of which has a copy of the same database. To ensure user privacy in the multi-server setting, the servers must be trusted not to collude. In 1997, Kushilevitz and Ostrovsky constructed the first single-database PIR. Since then, many efficient PIR solutions have been discovered. Beginning with a thorough survey of single-database PIR techniques, this text focuses on the latest technologies and applications in the field of PIR. The main categories are illustrated with recently proposed PIR-based solutions by the authors. Because of the latest treatment of the topic, this text will be highly beneficial to researchers and industry professionals in information security and privacy.Table of ContentsPreface.- Acknowledgments.- Classic Private Information Retrieval.- FHE-Based Private Information Retrieval.- Private Data Warehouse Queries.- Privacy-Preserving Location-Based Queries.- Discussion and Future Work.- Bibliography.- Authors' Biographies.

Read more less

Book SynopsisPrivacy Risk Analysis fills a gap in the existing literature by providing an introduction to the basic notions, requirements, and main steps of conducting a privacy risk analysis.The deployment of new information technologies can lead to significant privacy risks and a privacy impact assessment should be conducted before designing a product or system that processes personal data. However, if existing privacy impact assessment frameworks and guidelines provide a good deal of details on organizational aspects (including budget allocation, resource allocation, stakeholder consultation, etc.), they are much vaguer on the technical part, in particular on the actual risk assessment task. For privacy impact assessments to keep up their promises and really play a decisive role in enhancing privacy protection, they should be more precise with regard to these technical aspects.This book is an excellent resource for anyone developing and/or currently running a risk analysis as it defines the notions of personal data, stakeholders, risk sources, feared events, and privacy harms all while showing how these notions are used in the risk analysis process. It includes a running smart grids example to illustrate all the notions discussed in the book.Table of ContentsPreface.- Acknowledgments.- Introduction.- Terminology.- Processing System.- Personal Data.- Stakeholders.- Risk Sources.- Feared Events.- Privacy Harms.- Privacy Risk Analysis.- Conclusion.- Bibliography.- Authors' Biographies .

Read more less

Book SynopsisThis SpringerBrief presents a brief introduction to probabilistic risk assessment (PRA), followed by a discussion of abnormal event detection techniques in industrial control systems (ICS). It also provides an introduction to the use of game theory for the development of cyber-attack response models and a discussion on the experimental testbeds used for ICS cyber security research. The probabilistic risk assessment framework used by the nuclear industry provides a valid framework to understand the impacts of cyber-attacks in the physical world. An introduction to the PRA techniques such as fault trees, and event trees is provided along with a discussion on different levels of PRA and the application of PRA techniques in the context of cybersecurity. A discussion on machine learning based fault detection and diagnosis (FDD) methods and cyber-attack detection methods for industrial control systems are introduced in this book as well.A dynamic Bayesian networks based method that can be used to detect an abnormal event and classify it as either a component fault induced safety event or a cyber-attack is discussed. An introduction to the stochastic game formulation of the attacker-defender interaction in the context of cyber-attacks on industrial control systems to compute optimal response strategies is presented. Besides supporting cyber-attack response, the analysis based on the game model also supports the behavioral study of the defender and the attacker during a cyber-attack, and the results can then be used to analyze the risk to the system caused by a cyber-attack. A brief review of the current state of experimental testbeds used in ICS cybersecurity research and a comparison of the structures of various testbeds and the attack scenarios supported by those testbeds is included. A description of a testbed for nuclear power applications, followed by a discussion on the design of experiments that can be carried out on the testbed and the associated results is covered as well.This SpringerBrief is a useful resource tool for researchers working in the areas of cyber security for industrial control systems, energy systems and cyber physical systems. Advanced-level students that study these topics will also find this SpringerBrief useful as a study guide.Table of ContentsIntroduction.- Probabilistic Risk Assessment: Nuclear Power Plants and Introduction to the Context of Cyber Security.- Machine Learning based Abnormal Event Detection and Classification.- Game-Theoretic Design of Response Systems.- Experimental Testbeds and Design of Experiments.- Conclusions.

Read more less

Book SynopsisThis book constitutes the refereed proceedings of the 17th International Workshop on Security, IWSEC 2022, which took place as a hybrid event in Tokyo, Japan, in August/September 2022. The 12 full papers presented in this book were carefully reviewed and selected from 34 submissions. They were organized in topical sections as follows: mathematical cryptography; system security and threat intelligence; symmetric-key cryptography; post-quantum cryptography; advanced cryptography.

Read more less

Book SynopsisThis book constitutes the proceedings of the 25th International Conference on Information Security, ISC 2022, which took place in Bali, Indonesia, in December 2022.The 21 full papers and 8 short papers presented in this volume were carefully reviewed and selected from 72 submissions. The contributions were organized in topical sections as follows: Cryptography; Post-Quantum Cryptography; Cryptanalysis; Blockchain; Email and Web Security; Malware; and AI Security.Table of ContentsCryptography.- Privacy Preserving Computation in Cloud Using Reusable Garbled Oblivious RAMs.- Efficient Private Set Intersection Cardinality Protocol in the Reverse Unbalanced Setting.- Crypto-Steganographic Validity for Additive Manufacturing (3D Printing) Design Files.- Witness Encryption from Smooth Projective Hashing System.- Post-Quantum Cryptography.- More Efficient Adaptively Secure Lattice-based IBE with Equality Test in the Standard Model.- QUIC Protocol with Post-Quantum Authentication.- Batched Fully Homomorphic Encryption from TFHE.- Implicit Rejection in Fujisaki-Okamoto: Framework and a Novel Realization.- Cryptanalysis.- Further Cryptanalysis of a Type of RSA Variants.- The SAT-Based Automatic Searching and Experimental Verification for Differential Characteristics with Application to Midori64.- Efficient Scalar Multiplication on Koblitz Curves with Pre-computation.- Blockchain.- Efficient ECDSA-based Adaptor Signature for Batched Atomic Swaps.- Searching for Encrypted Data on Blockchain: An Efficient, Secure and Fair Realization.- GRUZ : Practical Resource Fair Exchange without Blockchain.- Daric: A Storage Efficient Payment Channel With Punishment Mechanism.- A Blockchain-based Mutual Authentication Protocol for Smart Home.- Email and Web Security.- OblivSend: Secure and Ephemeral File Sharing Services with Oblivious Expiration Control.- EarlyCrow: Detecting APT Malware Command and Control Over HTTP(S) Using Contextual Summaries.- Malware.- ATLAS: A Practical Attack Detection and Live Malware Analysis System for IoT Threat Intelligence.- Dissecting Applications Uninstallers & Removers: Are they effective?.- Representing LLVM-IR in a Code Property Graph.- Why we need a theory of maliciousness: Hardware Performance Counters in security.- Anatomist: Enhanced Firmware Vulnerability Discovery Based on Program State Abnormality Determination With Whole-system Replay.- AI Security.- AspIOC: Aspect-Enhanced Deep Neural Network for Actionable Indicator of Compromise Recognition.- HeHe: Balancing the Privacy and Efficiency in Training CNNs over the Semi-honest Cloud.- Deep Learning Assisted Key Recovery Attack for Round-Reduced Simeck32/64.- CFL: Cluster Federated Learning in Large-scale Peer-to-Peer Networks.- Bilateral Privacy-Preserving Task Assignment with Personalized Participant Selection for Mobile Crowdsensing.- Communication-Efficient and Secure Federated Learning Based on AdaptiveOne-bit Compressed Sensing.

Read more less

Book SynopsisThis book constitutes the refereed proceedings of the 12th International Conference on Security, Privacy, and Applied Cryptography Engineering, SPACE 2022 held in Jaipur, India, during December 9–12, 2022.The 18 full papers included in this book were carefully reviewed and selected from 61 submissions. They were organized in topical sections as follows: symmetric cryptography; public-key cryptography, post-quantum cryptography, zero knowledge proofs; hardware security and AI; and network security, authentication, and privacy. Table of Contents​Symmetric Cryptography.- Modeling Large S-box in MILP and a (Related-key) Differential Attack on Full Round PIPO-64/128.- Light but Tight: Lightweight Composition of Serialized S-Boxes with Diffusion Layers for Strong Ciphers.- Hardware Implementation of Masked SKINNY SBox with Application to AEAD.- Bias Cancellation of MixColumns.- Big Brother Is Watching You: A Closer Look At Backdoor Construction.- Public-key Cryptography, Post-quantum Cryptography, Zero Knowledge Proofs.- KEMTLS vs. Post-Quantum TLS: Performance on Embedded Systems.- Protecting the most significant bits in scalar multiplication algorithms.- Combining Montgomery Multiplication with Tag Tracing for the Pollard ' s Rho Algorithm in Prime Order Fields.- Card-based zero-knowledge proof for the nearest neighbor property: Zero-knowledge proof of ABC end view.- Hardware Security and AI.- What Do You See? Transforming Fault Injection Target Characterizations.- Dual-Tone Multi-Frequency Assisted Acoustic Side Channel Attack to Retrieve Dialled Call Log.- Machine Learning Attacks on Low-Cost Reconfigurable XRRO and XRBR PUF Designs.- HWGN2: Side-channel Protected NNs through Secure and Private Function Evaluation.- How Many Cameras Do You Need? Adversarial Attacks and Countermeasures for Robust Perception in Autonomous Vehicles.- Network security, Authentication, and Privacy.- SMarT: A SMT based Privacy Preserving Smart Meter Streaming Methodology.- An analysis of the hardware-friendliness of AMQ data structures for network security.- RemOD: Operational Drift-adaptive Intrusion Detection.- A short note on a paper titled A Delaunay Quadrangle-Based Fingerprint Authentication System with Template Protection using Topology Code for local registration and security enhancement.

Read more less

Book SynopsisThis volume constitutes the papers of several workshops which were held in conjunction with the ICWE 2022 International Workshops, BECS, SWEET and WALS, held in Bari, Italy, July 5–8, 2022.The 14 revised full papers and 1 short paper presented in this book were carefully reviewed and selected from 25 submissions. ICWE 2022 presents the following three workshops:Second International Workshop on Big Data driven Edge Cloud Services (BECS 2022)First International Workshop on the Semantic WEb of Everything (SWEET 2022)First International Workshop on Web Applications for Life Sciences (WALS 2022)Table of ContentsSecond International Workshop on Big Data driven Edge Cloud Services (BECS 2022)).-CodeBERT Based Software Defect Prediction for Edge-Cloud Systems.- A Novel Hybrid Approach for Localization in Wireless Sensor Networks.- An Empirical Analysis on Just-In-Time Defect prediction Models for Self-driving Software Systems.- Knowledge Sharing in Proactive WoT Multi-Environment Models.- First International Workshop on the Semantic WEb of Everything (SWEET 2022).- Multivariate Time Series Anomaly Detection Based on Reconstructed Differences Using Graph Attention Networks.- A Decentralized Environment for Biomedical Semantic Content Authoring and Publishing.- AI for Food Waste Reduction in Smart Homes.- Cowl: a lightweight OWL library for the Semantic Web of Everything.- Features and capabilities of a blockchain-based ridesharing enhanced with semantics.- Semantic-based decision support for network management and orchestration.- Semantic Matchmaking for Argumentative Intelligence in Ubiquitous Computing.- First International Workshop on Web Applications for Life Sciences (WALS 2022).- Smart District 4.0 project: validation of results and exploitation perspectives.- WALS 2022 Invited Talk - Are web applications fulfilling the needs of life science scientists?.- CitrusGenome: A Bioinformatics Tool to Characterize, Visualize, and Explore Large Citrus Variant Datasets.- The Laniakea Dashboard and storage encryption components: a foundation for developing on-demand cloud services for Life Science.

Read more less

Book SynopsisThis book constitutes the refereed proceedings of the 13th International Conference on Decision and Game Theory for Security, GameSec 2022, held in October 2022 in Pittsburgh, PA, USA. The 15 full papers presented were carefully reviewed and selected from 39 submissions. The papers are grouped thematically on: deception in security; planning and learning in dynamic environments; security games; adversarial learning and optimization; novel applications and new game models.Table of ContentsDeception in Security.- The Risk of Attacker Behavioral Learning: Can Attacker Fool Defender under Uncertainty? .-Casino Rationale: Countering attacker deception in zero-sum Stackelberg security games of bounded rationality.- Cyber Deception against Zero-day Attacks: A Game Theoretic Approach.- Planning and Learning in Dynamic Enviroments.- On Almost-Sure Intention Deception Planning that Exploits Imperfect Observers.- Using Deception in Markov Game to Understand Adversarial Behaviors through a Capture-The-Flag Environment.- Robust Moving Target Defense against Unknown Attacks: A Meta-Reinforcement Learning Approach.- Security Games.- Synchronization in Security Games.- Multiple Oracle Algorithm to Solve Continuous Games.- Optimal Pursuit of Surveilling Agents near a High Value Target.- Adversarial Learning and Optimization.- On Poisoned Wardrop Equilibrium in Congestion Games.- Reward Delay Attacks on Deep Reinforcement Learning.- An Exploration of Poisoning Attacks on Data-based Decision Making.- Novel Applications and new Game Models.- A Network Centrality Game for Epidemic Control.- Optimizing Intrusion Detection Systems Placement against Network Virus Spreading using a Partially Observable Stochastic Minimum-Threat Path Game.- Voting Games to Model Protocol Stability and Security of Proof-of-Work Cryptocurrencies.

Read more less

Book SynopsisThis book constitutes the refereed proceedings of the 18th International Conference on Information Security and Cryptology, Inscrypt 2022, held in Beijing, China during December 11–13, 2022. The 23 full papers and 3 short papers included in this book were carefully reviewed and selected from 68 submissions. They were organized in topical sections as follows: Block Ciphers, Public key Encryption & Signature, Quantum, MPC, Cryptanalysis, Mathematical aspects of Crypto, Stream ciphers, Malware, Lattices.Table of Contents​Block Ciphers.- Best Paper: How Fast Can SM4 Be in Software?.- LLLWBC: A New Low-Latency Light-Weight Block Cipher.- New Automatic Search Tool for Searching for Impossible Differentials Using Undisturbed Bits.- Public key Encryption & Signature.- You Can Sign but Not Decrypt: Hierarchical Integrated Encryption and Signature.- SR-MuSig2: A Scalable and Reconfigurable Multi-signature Scheme and Its Applications.- McEliece-type encryption based on Gabidulin codes with no hidden structure.- Quantum.- Optimizing the depth of quantum implementations of linear layers.- IND-CCA Security of Kyber in the Quantum Random Oracle Model, Revisited.- MPC.- Practical Multi-party Private Set Intersection Cardinality and Intersection-Sum Under Arbitrary Collusion.- Amortizing Division and Exponentiation.- Cryptanalysis.- Generalized Boomerang Connectivity Table and Improved Cryptanalysis of GIFT.- Cryptanalysis of Ciminion.- Clustering Effect of Iterative Differential and Linear Trails.- Differential Cryptanalysis of Round-reduced SPEEDY Family.- Mathematical aspects of Crypto.- A note on inverted twisted Edwards curve.- Efficiently Computable Complex Multiplication of Elliptic Curves.- Several classes of Niho type Boolean functions with few Walsh transform values.- Stream ciphers.- Higher-Order Masking Scheme for Trivium Hardware Implementation.- An Experimentally Verified Attack on 820-Round Trivium.- Malware.- HinPage: Illegal and Harmful Webpage Identification Using Transductive Classification.- Detecting API Missing-Check Bugs Through Complete Cross Checking of Erroneous Returns.- Efficient DNN Backdoor Detection Guided by Static Weight Analysis.- Mimic Octopus Attack: Dynamic Camouflage Adversarial Examples using Mimetic Feature for 3D Humans.- Lattices.- Subfield Attacks on HSVP in Ideal Lattices.- On the Measurement and Simulation of the BKZ Behavior for q-ary Lattices.- Inferring Sequences Produced by the Quadratic Generator.

Read more less

Book SynopsisThis book introduces some fundamentals of information and communication technology (ICT) and other current and future technologies that are relevant to the field of cybersecurity. In a digitally connected world, cybersecurity is one of the most important issues today. We have witnessed tremendous advancements over the last two decades in various fields of networking, connectivity, electronics, and the technologies that make use of those platforms and devices. Many emerging technologies are also showing promise for future use in the cybersecurity area. Hence, it is important to understand some basics of the technologies and concepts that are making their impacts today and those which may show stronger influence in the near future. The book begins with an introduction to ICT and its advancements, then talks about Artificial Intelligence (AI), Machine Learning (ML), and Blockchain Technologies. It then goes on to cover wireless technology, Internet of Things (IoT), Distributed Cloud Computing, Quantum Computing, Virtual Reality, and other futuristic technologies that would be directly related to Cyberspace and Cybersecurity.This textbook is written in a step-by-step manner, with easily accessible information for both general readers and experts in the field. It is suitable to be used as a textbook for undergraduate and graduate courses like Computer Networks and Security, Information Security, etc.Table of ContentsChapter 01 – An Overview of ICT Technology Advancement ..................................................................... 16Introduction ............................................................................................................................................ 17An Overview of ICT Advanced Technologies ........................................................................................... 18Main Areas of ICT Technologies .............................................................................................................. 19Hardware Technologies .......................................................................................................................... 20Data Processing Hardware .................................................................................................................. 20Data Input Hardware .......................................................................................................................... 22Data Output Hardware ....................................................................................................................... 23Data Transmission Hardware .............................................................................................................. 23Data storage hardware ....................................................................................................................... 24Software Technologies ............................................................................................................................ 25Firmware 25Operating Systems (OSs) ..................................................................................................................... 26IT Protocols ......................................................................................................................................... 28Programming Languages ..................................................................................................................... 29Software Development Methodologies .............................................................................................. 30Evolution of Information Technology ..................................................................................................... 31Computer Generations ........................................................................................................................... 32Zero Generation (1642 – 1945) ........................................................................................................... 32First Generation (1945 – 1954) ........................................................................................................... 33Second Generation (1954 – 1963) ...................................................................................................... 33Third Generation (1963 – 1973) .......................................................................................................... 33Fourth Generation (1973 – 1985) ....................................................................................................... 33Fifth Generation (1985 – Present) ...................................................................................................... 33Operating System Generations ............................................................................................................... 34First Generation (1940 – 1950) ........................................................................................................... 34Second Generation (1955 – 1965) ...................................................................................................... 34Third Generation (1965 – 1980) .......................................................................................................... 35Fourth Generation (1980 – Present) ................................................................................................... 35Application Software Generations .......................................................................................................... 35First Generation .................................................................................................................................. 36Second Generation ............................................................................................................................. 36Third Generation ................................................................................................................................. 36Fourth Generation .............................................................................................................................. 37Fifth Generation .................................................................................................................................. 37Programming Language Generations ..................................................................................................... 37First Generation .................................................................................................................................. 38Second Generation ............................................................................................................................. 38Third Generation ................................................................................................................................. 38Fourth Generation .............................................................................................................................. 39Fifth Generation .................................................................................................................................. 39Wireless/Cellular Technology Generations............................................................................................. 39Zero Generation .................................................................................................................................. 40First Generation .................................................................................................................................. 40Second Generation ............................................................................................................................. 40Third Generation ................................................................................................................................. 41Fourth Generation .............................................................................................................................. 41Fifth Generation .................................................................................................................................. 41WWW Generations ................................................................................................................................. 42Web 1.0 42Web 2.0 42Web 3.0 43Web 4.0 43Evolution of Storage Technologies ......................................................................................................... 44Initial Storage Technologies ................................................................................................................ 44Magnetic Tape-Based Technologies ................................................................................................... 44Magnetic Disk-Based Technologies ..................................................................................................... 45Semiconductor-Based Storage Technologies ...................................................................................... 46Optical-Based Storage Technologies ................................................................................................... 48Advanced Storage Technologies ............................................................................................................. 48Direct Attached Storage (DAS) ............................................................................................................ 48Network Attached Storage (NAS) ....................................................................................................... 49Storage Area Network (SAN) ............................................................................................................... 49Futuristic Storage Technologies .............................................................................................................. 49Software Defined Storage (SDS) ......................................................................................................... 50Storage Virtualization ......................................................................................................................... 50Software Development Generations ...................................................................................................... 50Conventional Era – (1960-1970) ......................................................................................................... 51Transition Era – (1980 – 1990) ............................................................................................................ 51Modern Era – (2000 – Present) ........................................................................................................... 51Types of ICT Services ............................................................................................................................... 52Software Development ....................................................................................................................... 52Computer Networking ........................................................................................................................ 52IT Infrastructure Management ........................................................................................................... 52Telecommunication ............................................................................................................................ 53Data Storage Service ........................................................................................................................... 53Storage Transfer Service (STS) ............................................................................................................ 53Database Management ....................................................................................................................... 53Process Automation & Monitoring ..................................................................................................... 54Data Analytics ..................................................................................................................................... 54Cloud Computing Service .................................................................................................................... 55Application Programming Interface (API) Service ............................................................................... 55Cybersecurity Service .......................................................................................................................... 56Digital Entertainment Services ............................................................................................................ 56Content Delivery Network (CDN) ........................................................................................................ 57A Peep into Next Generation Technologies ............................................................................................ 58Chapter 02 – Artificial Intelligence Technology .......................................................................................... 61Introduction ............................................................................................................................................ 62What Is Artificial Intelligence (AI)?.......................................................................................................... 62What Is Neural Network?........................................................................................................................ 63Major Approaches Used in Artificial Intelligence Research .................................................................... 64Symbolic Approach ............................................................................................................................. 64Connectionist Approach ...................................................................................................................... 65Objectives of Artificial Intelligence ......................................................................................................... 66Reasoning ............................................................................................................................................ 67Problem Solving .................................................................................................................................. 67Natural Language Processing .............................................................................................................. 68Learning 68Planning 69Knowledge Representation ................................................................................................................. 69Motion and Manipulation ................................................................................................................... 69Artificial General Intelligence .............................................................................................................. 70Social Intelligence ............................................................................................................................... 70Business Intelligence ........................................................................................................................... 70Machine Perception ............................................................................................................................ 70An Overview of the History of AI ............................................................................................................ 71Main Areas of AI Application .................................................................................................................. 72Natural Language Processing .............................................................................................................. 73Computer Vision ................................................................................................................................. 76Expert Systems .................................................................................................................................... 77Speech Recognition ............................................................................................................................. 78Robotics 79Text Recognition ................................................................................................................................. 80Voice Recognition ............................................................................................................................... 80Voice-to-Text & Text-to-Voice Conversion ......................................................................................... 81Chatbot 82Types of Artificial Intelligence ................................................................................................................. 83Reactive Machines .............................................................................................................................. 84Limited Memory .................................................................................................................................. 84Theory of Mind.................................................................................................................................... 85Self-Awareness .................................................................................................................................... 85Artificial Narrow Intelligence (ANI) ..................................................................................................... 86Artificial General Intelligence (AGI) .................................................................................................... 86Artificial Super Intelligence (ASI)......................................................................................................... 87Intelligent Agent and Environment ......................................................................................................... 87Intelligent (or, Intelligence) Agent (IA) ............................................................................................... 88Artificial Intelligence Environments .................................................................................................... 90Future of Artificial Intelligence ............................................................................................................... 92Chapter 03 – Machine Learning Technology .............................................................................................. 98Introduction to Machine Learning .......................................................................................................... 99Importance of Machine Learning in Modern World ............................................................................. 100How Does Machine Learning Work? ..................................................................................................... 102Types of Machine Learning ................................................................................................................... 103Supervised Machine Learning ............................................................................................................... 103Unsupervised Machine Learning........................................................................................................... 104Semi-Supervised Machine Learning ...................................................................................................... 106Reinforcement Machine Learning ........................................................................................................ 107What Is Deep Machine Learning? ......................................................................................................... 110Artificial Neural Network .................................................................................................................. 110Major Methods/Techniques of Machine Learning ............................................................................... 110Regression Model ............................................................................................................................. 111Decision Trees ................................................................................................................................... 111Clustering .......................................................................................................................................... 111Classification ..................................................................................................................................... 111Anomaly Detection ........................................................................................................................... 111Neural Network Method ................................................................................................................... 112Dimensionality Reduction ................................................................................................................. 112Ensemble Methods ........................................................................................................................... 113Transfer Learning .............................................................................................................................. 113Natural Language Processing (NLP) ...................................................................................................... 113Word Embedding .............................................................................................................................. 115What Is a Machine Learning Algorithm? ............................................................................................... 116Common Categories of Machine Learning Algorithms ......................................................................... 116Classification Algorithms ....................................................................................................................... 117Naïve Bayes ....................................................................................................................................... 117Decision Tree ..................................................................................................................................... 118Random Forest .................................................................................................................................. 119Support Vector Machines ................................................................................................................. 119K Nearest Neighbors ......................................................................................................................... 121Clustering Algorithms ............................................................................................................................ 123K-Means Clustering ........................................................................................................................... 124Expectation Maximization (EM) Algorithm ....................................................................................... 124Agglomerative Hierarchical Clustering .............................................................................................. 124Fuzzy C-Means Algorithm ................................................................................................................. 124Regression Algorithms .......................................................................................................................... 125Linear Regression .............................................................................................................................. 125Multiple linear Regression ................................................................................................................ 126Multivariate Regression .................................................................................................................... 126Logistic Regression ............................................................................................................................ 127Lasso Regression ............................................................................................................................... 127Other Regression algorithms ............................................................................................................ 127What Is AI Training Data? ..................................................................................................................... 128Types of Training Data .......................................................................................................................... 129Text Training Data ............................................................................................................................. 129Audio Training Data .......................................................................................................................... 129Video Training Data ........................................................................................................................... 129Image Training Data .......................................................................................................................... 130Sensory Training Data ....................................................................................................................... 130What Is AI Training Dataset? ................................................................................................................. 130Major Processes Used in Building Training Datasets for AI Training .................................................... 130Data Collection .................................................................................................................................. 131Data Cleaning .................................................................................................................................... 131Data Classification ............................................................................................................................. 131Data Categorization .......................................................................................................................... 131Data Annotation & Labeling .............................................................................................................. 131What are the Major Categories of Data Annotation? ........................................................................... 132Image Data Annotation ......................................................................................................................... 132Bounding Box Annotation ................................................................................................................. 1323D Cuboids Annotation ..................................................................................................................... 133Polygon Annotation .......................................................................................................................... 133Lines & Splines .................................................................................................................................. 134Semantic Segmentation .................................................................................................................... 134Text Data Annotation ............................................................................................................................ 134Entity Annotation .............................................................................................................................. 134Entity Linking ..................................................................................................................................... 134Sentiment Annotation....................................................................................................................... 135Text Classification ............................................................................................................................. 135Audio Data Annotation ......................................................................................................................... 135Sound Labeling .................................................................................................................................. 135Event Tracking ................................................................................................................................... 135Speech to Text Transcription ............................................................................................................ 135Audio Classification ........................................................................................................................... 136Multi-labeling .................................................................................................................................... 136Video Data Annotation ......................................................................................................................... 136Key Points Annotation/Landmarks ................................................................................................... 137Object localization............................................................................................................................. 137Object Tracking ................................................................................................................................. 137Gradient Boosting ............................................................................................................................. 137Top Uses of Machine Learning in Today’s World.................................................................................. 138Big Data 139Data Analytics ................................................................................................................................... 139Cybersecurity .................................................................................................................................... 139Digital Marketing............................................................................................................................... 140Business Intelligence ......................................................................................................................... 140Process Automation .......................................................................................................................... 141Automobiles ...................................................................................................................................... 141e-Commerce ...................................................................................................................................... 142Impact of Machine Learning on Cybersecurity ..................................................................................... 142Positive Impact .................................................................................................................................. 142Negative Impact ................................................................................................................................ 143Chapter 04 – Blockchain Technology ........................................................................................................ 145Introduction to Blockchain Technology ................................................................................................ 146Top Features of Blockchain Technology ........................................................................................... 147History of Blockchain Technology ......................................................................................................... 149Major Terms Used in Blockchain Technology ....................................................................................... 150Cryptographic Hash ........................................................................................................................... 150Transaction ........................................................................................................................................ 151Proof of Work .................................................................................................................................... 151Block 152Mining 152Timestamp ........................................................................................................................................ 153Stack of Technologies Forming Blockchain ........................................................................................... 153Cryptographic Keys ........................................................................................................................... 153Peer-to-Peer Network with Shared Ledger ....................................................................................... 154Computing Resources to Store Transactions & Network Records.................................................... 155How Does Blockchain Technology Work? ............................................................................................. 155Node 155Block 155What Is Distributed Ledger Technology (DLT)? .................................................................................... 156Types of Blockchain Technology ........................................................................................................... 156Public Blockchain .............................................................................................................................. 158Private Blockchain ............................................................................................................................. 159Consortium Blockchain ..................................................................................................................... 159Hybrid Blockchains ............................................................................................................................ 159Typical Uses of Blockchain Technology ................................................................................................. 160Cryptocurrency.................................................................................................................................. 160Non-Fungible Token (NFT) ................................................................................................................ 161Smart Contracts ................................................................................................................................ 161Financial Markets .............................................................................................................................. 162Electronic Voting ............................................................................................................................... 162Record Maintenance ......................................................................................................................... 163Supply Chain ...................................................................................................................................... 163Government ...................................................................................................................................... 163Impact of Blockchain Technology on Cybersecurity ............................................................................. 164Chapter 05 – 5th Generation Wireless Technology ................................................................................... 168An Introduction to 5G Technology ........................................................................................................ 169Importance of 5G Technology .............................................................................................................. 170Evolution of Cellular Networks ............................................................................................................. 172First Generation (1G) ........................................................................................................................ 172Second Generation (2G) .................................................................................................................... 172Third Generation (3G) ....................................................................................................................... 173Fourth Generation (4G) ..................................................................................................................... 173Fifth Generation (5G) ........................................................................................................................ 174Sixth Generation (6G)........................................................................................................................ 174Key Features and Capabilities of 5G Technology .................................................................................. 174Architecture of 5G Network .................................................................................................................. 176Top Protocols Used in 5G Networks ..................................................................................................... 1793GPP 179New Radio (NR) ................................................................................................................................. 180NextGen Core .................................................................................................................................... 181LTE Advanced Pro .............................................................................................................................. 182EPC Evolution .................................................................................................................................... 183Impact of 5G Technology on Cybersecurity .......................................................................................... 183Chapter 06 – Internet of Things (IoT) ........................................................................................................ 188Introduction to Internet of Things (IoT) ................................................................................................ 189Importance of IoT.............................................................................................................................. 189Main Features of Internet of Things ................................................................................................. 190History of Internet of Things ................................................................................................................. 190What Is Ambient Intelligence in IoT? .................................................................................................... 191Autonomous Control in IoT ................................................................................................................... 191Range of Enabling Technologies Behind Internet of Things ................................................................. 191Low Power Sensors ........................................................................................................................... 192Cloud Computing .............................................................................................................................. 192Artificial Intelligence (AI) ................................................................................................................... 192Machine Learning .............................................................................................................................. 192Data Analytics ................................................................................................................................... 192Big Data 193Short Range Wireless Technologies .................................................................................................. 193Medium & Long-Range Wireless Technologies ................................................................................ 193Effective Communication Protocols .................................................................................................. 193Internet Protocol V6 ......................................................................................................................... 194Architecture of Internet of Things Ecosystem ...................................................................................... 194Three Layer Architecture .................................................................................................................. 194Four Layer Architecture .................................................................................................................... 194Five Layer Architecture ..................................................................................................................... 195What Is Decentralized Internet of Things Concept? ............................................................................. 195What Is Industrial Internet of Things? .................................................................................................. 196Industrial Internet of Things Standard Bodies ...................................................................................... 196Important Industrial Internet of Things IIoT Platforms......................................................................... 197Azure IoT 197Oracle IoT Cloud ................................................................................................................................ 198IBM Watson IoT................................................................................................................................. 198AWS IoT 198Siemens Mind Sphere ....................................................................................................................... 198Flutura Cerebra ................................................................................................................................. 198Thing Worx ........................................................................................................................................ 199GE Predix 199IIoT Use Cases in Different Industries ................................................................................................... 199Smart Cities ....................................................................................................................................... 200Smart Home ...................................................................................................................................... 200Manufacturing .................................................................................................................................. 200Process Automation .......................................................................................................................... 200Energy Management ......................................................................................................................... 200Supply Chain ...................................................................................................................................... 201Healthcare ......................................................................................................................................... 201Agriculture ........................................................................................................................................ 201Military 201Transportation .................................................................................................................................. 201Challenges Posed by Internet of Things ................................................................................................ 202Cybersecurity .................................................................................................................................... 202Privacy 202Complex Operations & Management ............................................................................................... 202Environment Impact ......................................................................................................................... 203Bulky Data ......................................................................................................................................... 203Impact of IoT on Cybersecurity ............................................................................................................. 203Chapter 07 – Distributed Cloud Computing .............................................................................................. 206An Introduction to Distributed Cloud Computing ................................................................................. 207What Is Edge Computing? ..................................................................................................................... 208Advantages of Distributed Cloud .......................................................................................................... 209Working Principle of Distributed Cloud ................................................................................................ 210Distributed Cloud Architecture ............................................................................................................. 210Top Use Cases of Distributed Cloud in Industries ................................................................................. 211Content Delivery Network (CDN) ...................................................................................................... 212Internet of Things (IoT) & Edge ......................................................................................................... 214Software Defined Infrastructure (SDI) .............................................................................................. 214Big Data Processing ........................................................................................................................... 215Multi-Cloud Unification ..................................................................................................................... 215Centralized Management ................................................................................................................. 216Challenges of Distributed Cloud Computing ......................................................................................... 216Impact of Distributed Cloud Computing on Cybersecurity ................................................................... 217Chapter 08 – Quantum Computing ........................................................................................................... 220An Introduction to Quantum Computing.............................................................................................. 221Salient Features of Quantum Computing ............................................................................................. 222Short History of Quantum Computing .................................................................................................. 223What Is Quantum Physics? ................................................................................................................... 224Theory of Quantum Computing ........................................................................................................ 224Working Principle of Quantum Computing........................................................................................... 225How Many States Are Used in Quantum Computing? .......................................................................... 225What Are Superimposition and Entanglement in Quantum Computing? ............................................ 225Difference Between Traditional Computing & Quantum Computing .................................................. 226Real-World Quantum Applications ....................................................................................................... 227Major Projects on Quantum Computing ............................................................................................... 229IBM 230Honeywell ......................................................................................................................................... 230Google 230Microsoft 231Main Terminologies Used in Quantum Computing .............................................................................. 232Superconductors ............................................................................................................................... 232Superfluid .......................................................................................................................................... 233Quantum Mechanics ......................................................................................................................... 234Qubits 234Quantum Logic Gate ......................................................................................................................... 235Quantum Counting ............................................................................................................................ 236Grover’s Algorithm ............................................................................................................................ 236Shor’s Algorithm ............................................................................................................................... 236Josephson Junction ........................................................................................................................... 237Chapter 09 – Tactile Virtual Reality .......................................................................................................... 240An Introduction to Tactile Virtual Reality ............................................................................................. 241Augmented Reality and Virtual Reality ................................................................................................. 242History & Evolution of Tactile Virtual Reality ........................................................................................ 242Types of Virtual Reality ......................................................................................................................... 244Non-Immersive VR ............................................................................................................................ 244Fully-Immersive VR ........................................................................................................................... 244Semi-Immersive VR ........................................................................................................................... 245Neurophysiological Tactile Measurement Techniques ......................................................................... 245Electroencephalography (EEG) ......................................................................................................... 246Magnetoencephalography (MEG)..................................................................................................... 246Functional Magnetic Resonance Imaging (fMRI) .............................................................................. 246Somatosensation and Its Types ............................................................................................................ 246Active Somatosensation.................................................................................................................... 247Passive Somatosensation .................................................................................................................. 247Major VR Terms with Definitions .......................................................................................................... 247Head Mounted Display (HMD) .......................................................................................................... 247Haptics 247360 Videos ......................................................................................................................................... 247Interactive VR .................................................................................................................................... 248Stereoscopy ....................................................................................................................................... 2484D Virtual Reality .............................................................................................................................. 248Field of View (FOV) ............................................................................................................................ 248Image/Video Stitching ....................................................................................................................... 248Simulator Sickness ............................................................................................................................ 248Cave Automatic Virtual Environment ............................................................................................... 249Mixed Reality .................................................................................................................................... 249Real-Word Applications of Tactile Virtual Reality ................................................................................. 249Video Games ..................................................................................................................................... 250Education & Training ......................................................................................................................... 251Product Development ....................................................................................................................... 252Chapter 10 – An Overview of Top Futuristic Technologies ....................................................................... 255What Is Futuristic Technology? ............................................................................................................. 256Top Futuristic Technologies .................................................................................................................. 2583D Printing Technology ..................................................................................................................... 2594D Printing ........................................................................................................................................ 2636G Technology .................................................................................................................................. 263Autonomous Robots ......................................................................................................................... 267Artificial Neurons .............................................................................................................................. 271Artificial General Intelligence (AGI) .................................................................................................. 273Artificial Super Intelligence (ASI)....................................................................................................... 274Mind Uploading................................................................................................................................. 276Driverless Vehicles ............................................................................................................................ 278Infrastructure Hacking ...................................................................................................................... 279Regenerative Medicine ..................................................................................................................... 279Digital Twin (DT) Technology ............................................................................................................ 280Programmable Living Robots ............................................................................................................ 282Human Augmentation ....................................................................................................................... 283Intelligent Process Automation (IPA) ................................................................................................ 283Space Elevator ................................................................................................................................... 284Rotating Skyhook .............................................................................................................................. 285Light Sail 285Chapter 11 – Impact of Advanced & Futuristic Technologies on Cybersecurity ...................................... 288Overview of Impact of Modern Technologies on Cybersecurity .......................................................... 288Major Cybersecurity Challenges Due to Advanced Technologies ........................................................ 291Risk to National Security ................................................................................................................... 292Breach of Privacy ............................................................................................................................... 293Increased Burden of Cybersecurity on Businesses ........................................................................... 294Shortage of Cybersecurity Specialists ............................................................................................... 294Risk of Extensive Data Exposure ....................................................................................................... 295Society & Business Manipulation ...................................................................................................... 295References ................................................................................................................................................ 298

Read more less

Book SynopsisGain a comprehensive understanding of auditing principles and cloud computing fundamentals. Identify and analyze the key challenges faced by cloud auditors. Explore the role of auditors in the implementation of cloud governance, risk, and compliance.

Read more less

Book SynopsisThis textbook provides a comprehensive, thorough and up-to-date treatment of topics in cyber security, cyber-attacks, ethical hacking, and cyber crimes prevention. It discusses the different third-party attacks and hacking processes which a poses a big issue in terms of data damage or theft. The book then highlights the cyber security protection techniques and overall risk assessments to detect and resolve these issues at the beginning stage to minimize data loss or damage. This book is written in a way that it presents the topics in a simplified holistic and pedagogical manner with end-of chapter exercises and examples to cater to undergraduate students, engineers and scientists who will benefit from this approach. Table of ContentsCybersecurity for Beginners.- The Basics of Hacking and Penetration Testing.- Hacking for Dummies.- Networking All-in-One for Dummies.- Effective Cyber Security.- Malware.- Firewalls.- Cryptography.- Control physical and logical access to assets.- Manage the Identification and Authentication of People, Devices, And Services.- Integrate Identity as A Third-Party Service.- Implement and Manage Authorization Mechanisms.- Managing the Identity and Access Provisioning Life Cycle.- Conduct Security Control Testing.- Collect Security Process Data.- Recovery Strategies for Database.- Analyze Test Output and Generate A Report.- Ensure Appropriate Asset Retention.- Determine Information and Security Controls.

Read more less

Book SynopsisThis book focuses on security science and technology, data and information security, and mobile and network security for space-air-ground integrated networks (SAGINs). SAGIN are expected to play an increasingly important role in providing real-time, flexible, and integrated communication and data transmission services in an efficient manner. Today, SAGINs have been widely developed for a range of applications in navigation, environmental monitoring, traffic management, counter-terrorism, etc. However, security becomes a major concern, since the satellites, spacecrafts, and aircrafts are susceptible to a variety of traditional/specific network-based attacks, including eavesdropping, session hijacking, and illegal access. In this book, we review the theoretical foundations of SAGIN security. We also address a range of related security threats and provide cutting-edge solutions in the aspect of ground network security, airborne network security, space network security, and provide future trends in SAGIN security. The book goes from an introduction to the topic’s background, to a description of the basic theory, and then to cutting-edge technologies, making it suitable for readers at all levels including professional researchers and beginners. To gain the most from the book, readers should have taken prior courses in information theory, cryptography, network security, etc.Table of ContentsChapter 1 Introduction to SAGIN Security.- Chapter 2 Theory Foundation of SAGIN Security.- Chapter 3 Ground Network Security.- Chapter 4 Airborne Network Security.- Chapter 5 Space Network Security.- Chapter 6 Future Trend of Network Security.

Read more less

Book SynopsisCindy Green-Ortiz is a Cisco senior security architect, cybersecurity strategist, architect, and entrepreneur. She works in the Customer Experience, Global Enterprise Segment for Cisco. She holds the CISSP, CISM, CSSLP, CRISC, PMP, and CSM Certifications, along with two degreesa BS-CIS Magna Cum Laude and AS-CIS with Honors. She has been with Cisco for 6+ years. Cindy has been in the cybersecurity field for 40 years, where she has held D-CIO, D-CISO, and Corporate Security Architecture Leadership roles, founding two technology businesses as CEO. Cindy is a Cisco Chairman's Club winner (Club Cisco). She is an active blogger for Cisco and has published whitepapers for Cisco and the US Department of Homeland Security. She has spoken to many groups, including PMI International Information Systems & Technology Symposium-Cybersecurity Keynote; Cisco SecCon, and Cisco Live. Cindy is President Emeritus and serves now as the treasurer of Charlotte InfraGard and cofounder of Table of ContentsForeword Introduction Part I: Concepts 1. Overview of Zero Trust (ZT): It's a Journey 2. Cisco Zero Trust: Security Capability Requirements 3. Zero Trust Reference Architecture and Enclave Design 4. Security Capability Use Cases 5. Segmentation Part II: Implementation 6. Segmentation Methods: Pros and Cons 7. Segmentation Foundational Functions and Applications (CMDB, App Inv, VLAN, Host Naming) 8. Map Functions to Segments / Implement Solutions 9. Test and Monitor ZT Segmentation and Solutions (LLD / SVS) - Phased Conclusion (Journey) Afterword Bibliography Acknowledgements

Read more less

a huge range and FREE tracked UK delivery on ALL orders.

Read more less

Book SynopsisAs networks around the world have become more and more connected, an understanding of network security has become an integral part of a network administrator's job. People who design, implement, and manage networks on a day-to-day basis must understand the threats that exist and how to mitigate them to protect a company's assets.Table of Contents1 Network Security Principles 1 Introduction 2 1.1 Importance of Computer and Network Security 2 1.2 Underlying Computer and Network Security Concepts 6 1.3 Threats and Countermeasures 11 1.4 Policies and Standards 20 2 Network and Server Security 30 Introduction 31 2.1 Network Protocols Review 31 2.2 Best Practices for Network Security 45 2.3 Securing Servers 49 2.4 Border Security 57 3 Cryptography 74 Introduction 75 3.1 Cryptography Overview 75 3.2 Symmetric Encryption 83 3.3 Asymmetric Encryption 90 3.4 Hashes 93 3.5 Achieving CIA 97 3.6 Public Key Infrastructure (PKI) 99 4 Authentication 118 Introduction 119 4.1 Authentication Overview 119 4.2 Authentication Credentials 125 4.3 Authentication Protocols 131 4.4 Best Practices for Secure Authentication 136 5 Authentication and Access Control 149 Introduction 150 5.1 Access Control Models 150 5.2 Implementing Access Control on Windows Computers 154 5.3 Implementing Access Control on Unix Computers 174 6 Securing Network Transmission 188 Introduction 189 6.1 Analyzing Security Requirements for Network Traffic 189 6.2 Defining Network Perimeters 195 6.3 Data Transmission Protection Protocols 201 7 Remote Access and Wireless Security 221 7.1 Dial-Up Networking 222 7.2 Virtual Private Networks 230 7.3 RADIUS and TACACS 235 7.4 Wireless Networks 239 8 Server Roles and Security 262 Introduction 263 8.1 Server Roles and Baselines 263 8.2 Securing Network Infrastructure Servers 274 8.3 Securing Domain Controllers 289 8.4 Securing File and Print Servers 292 8.5 Securing Application Servers 298 9 Protecting Against Malware 310 9.1 Viruses and Other Malware 311 9.2 Protecting the Workstation 315 9.3 Web Browser Security 323 9.4 Email Security 336 10 Ongoing Security Management 356 Introduction 357 10.1 Managing Updates 357 10.2 Auditing and Logging 366 10.3 Secure Remote Administration 371 11 Disaster Recovery and Fault Tolerance 395 Introduction 396 11.1 Planning for the Worst 396 11.2 Creating a Backup Strategy 407 11.3 Designing for Fault Tolerance 415 12 Intrusion Detection and Forensics 433 Introduction 434 12.1 Intrusion Detection 434 12.2 Honeypots 439 12.3 Forensics 444 Glossary 462 Index 507

Read more less

Book SynopsisA guide to planning and performing a physical penetration test on your computer's security. It guides you through the entire process from gathering intelligence, getting inside, dealing with threats, staying hidden (often in plain sight), and getting access to networks and data.Table of ContentsPreface xi Acknowledgements xv Foreword xvii 1 The Basics of Physical Penetration Testing 1 What Do Penetration Testers Do? 2 Security Testing in the Real World 2 Legal and Procedural Issues 4 Know the Enemy 8 Engaging a Penetration Testing Team 9 Summary 10 2 Planning Your Physical Penetration Tests 11 Building the Operating Team 12 Project Planning and Workflow 15 Codes, Call Signs and Communication 26 Summary 28 3 Executing Tests 29 Common Paradigms for Conducting Tests 30 Conducting Site Exploration 31 Example Tactical Approaches 34 Mechanisms of Physical Security 36 Summary 50 4 An Introduction to Social Engineering Techniques 51 Introduction to Guerilla Psychology 53 Tactical Approaches to Social Engineering 61 Summary 66 5 Lock Picking 67 Lock Picking as a Hobby 68 Introduction to Lock Picking 72 Advanced Techniques 80 Attacking Other Mechanisms 82 Summary 86 6 Information Gathering 89 Dumpster Diving 90 Shoulder Surfing 99 Collecting Photographic Intelligence 102 Finding Information From Public Sources and the Internet 107 Electronic Surveillance 115 Covert Surveillance 117 Summary 119 7 Hacking Wireless Equipment 121 Wireless Networking Concepts 122 Introduction to Wireless Cryptography 125 Cracking Encryption 131 Attacking a Wireless Client 144 Mounting a Bluetooth Attack 150 Summary 153 8 Gathering the Right Equipment 155 The ‘‘Get of Jail Free’’ Card 155 Photography and Surveillance Equipment 157 Computer Equipment 159 Wireless Equipment 160 Global Positioning Systems 165 Lock Picking Tools 167 Forensics Equipment 169 Communications Equipment 170 Scanners 171 Summary 175 9 Tales from the Front Line 177 SCADA Raiders 177 Night Vision 187 Unauthorized Access 197 Summary 204 10 Introducing Security Policy Concepts 207 Physical Security 208 Protectively Marked or Classified GDI Material 213 Protective Markings in the Corporate World 216 Communications Security 218 Staff Background Checks 221 Data Destruction 223 Data Encryption 224 Outsourcing Risks 225 Incident Response Policies 226 Summary 228 11 Counter Intelligence 229 Understanding the Sources of Information Exposure 230 Social Engineering Attacks 235 Protecting Against Electronic Monitoring 239 Securing Refuse 240 Protecting Against Tailgating and Shoulder Surfing 241 Performing Penetration Testing 242 Baseline Physical Security 245 Summary 247 Appendix A: UK Law 249 Computer Misuse Act 249 Human Rights Act 251 Regulation of Investigatory Powers Act 252 Data Protection Act 253 Appendix B: US Law 255 Computer Fraud and Abuse Act 255 Electronic Communications Privacy Act 256 SOX and HIPAA 257 Appendix C: EU Law 261 European Network and Information Security Agency 261 Data Protection Directive 263 Appendix D: Security Clearances 265 Clearance Procedures in the United Kingdom 266 Levels of Clearance in the United Kingdom 266 Levels of Clearance in the United States 268 Appendix E: Security Accreditations 271 Certified Information Systems Security Professional 271 Communication–Electronics Security Group CHECK 272 Global Information Assurance Certification 274 INFOSEC Assessment and Evaluation 275 Index 277

Read more less

Book SynopsisThe essential guide to e-business security for managers and IT professionals Securing E-Business Systems provides business managers and executives with an overview of the components of an effective e-business infrastructure, the areas of greatest risk, and best practices safeguards.Trade Review"...to be recommended as a as an IT security handbook..." (Information Age, August 2002) "...covers the full gamut of security threats..." (Infoconomy, 5 September 2002) “…a timely and valuable introduction to the fourth generation of cellular networks…(Infoconomy, 1 August 2002)Table of ContentsPreface. Chapter 1 Electronic Business Systems Security. Introduction. How Is E-Business Security Defined? Can E-Business Security Be Explained More Simply? Is E-Business Security Really Such a Big Deal? Is E-Business Security More Important Than Other Information Technology Initiatives? How Does an Organization Get Started? Instead of Playing "Catch-Up," What Should an Organization Be Doing to Design E-Business Systems That Are Secure in the First Place? Chapter 2 E-Business Systems and Infrastructure Support Issues. Introduction. E-Business Defined. A Short History of E-Business Innovations. The Need for Secure E-Business Systems. Software: The Vulnerable Underbelly of Computing. The Interoperability Challenge and E-Business Success. E-Business Security: An Exercise in Trade-Offs. Few Systems Are Designed to Be Secure. Conclusion. Chapter 3 Security Weaknesses in E-Business Infrastructure and "Best Practices" Security. Introduction. Fundamental Technical Security Threats. The Guiding Principles of Protection. "Best Practice" Prevention, Detection, and Countermeasures and Recovery Techniques. x Chapter 4 Managing E-Business Systems and Security. Introduction. Part One: Misconceptions and Questionable Assumptions. Part Two: Managing E-Business Systems as a Corporate Asset. Part Three: E-Business Security Program Management. Chapter 5 A "Just-in-Time" Strategy for Securing the E-Business System: The Role for Security Monitoring and Incident Response. The Current State of E-Business Security. Standard Requirements of an E-Business Security Strategy. A New Security Strategy. The Crucial Role of Security Monitoring and Incident Response to the Securing of E-Business Systems. The Current State of Intrusion Detection Systems (IDS). Defining a Cost-Effective Security Monitoring and Incident Response Capability. Alternatives to Building "Your Own" Security Monitoring and Incident Response Capability. Summary. Chapter 6 Designing and Delivering Secured E-Business Application Systems. Introduction. Past Development Realities. Contemporary Development Realities. Developing Secured E-Business Systems. Using the SDR Framework. Choosing a Systems Development Methodology That Is Compatible with the SDR Framework. Participants in the Identification of Security and Integrity Controls. Importance of Automated Tools. A Cautionary Word About New Technologies. Summary and Conclusions. Chapter 7 Justifying E-Business Security and the Security Management Program. Introduction. The "Quantifiable" Argument. Emerging "Nonquantifiable" Arguments. Benefits Justifications Must Cover Security Program Administration. Conclusion. Chapter 8 Computers, Software, Security, and Issues of Liability. Evolving Theories of Responsibility. Likely Scenarios. How Might a Liability Case Unfold? Questions to Be Asked to Ensure That Reasonable Care Has Been Taken in Developing a Secure E-Business System. Chapter 9 The National Critical Infrastructure Protection (CIP) Initiative. The Problem of Dependency. Critical Infrastructure Protection (CIP) Purpose, Directives, Organizations, and Relationships. Frequently Asked Questions About the IT-ISAC. Critical Information Infrastructure Protection Issues that Need Resolution. Appendix A: Y2K Lessons Learned and Their Importance for E-Business Security. Appendix B: Systems Development Review Framework for E-Business Development Projects. Appendix C: A Corporate Plan of Action for Securing E-Business Systems (Sample). Appendix D: E-Business Risk Management Review Model Instructions for Use. Appendix E: Resources Guide. Index.

Read more less

Book SynopsisNow more than ever auditors must be aware of what is occurring with computer security. According to a 1999 Computer Security Institute (CSI)/FBI survey there has been a dramatic increase in the number of respondents reporting serious computer incidents to law enforcement. Losses due to security breaches have passed the $100 billion mark.Table of ContentsSecurity Management. Physical Security. IBM AS/400 Architecture and Applications. AS/400 Audit Objectives and Procedures. Windows NT Server: Security Features. Unix. Networks. Disaster Recovery Planning. Index.

Read more less

Book SynopsisThis book addresses the problems and brings solutions to the security issues of ad-hoc networks. Topics included are threat attacks and vulnerabilities, basic cryptography mechanisms, authentication, secure routing, firewalls, security policy management, and future developments. .Trade Review"…a first-class textbook on security in ad hoc networks." (Computing Reviews.com, May 17, 2007)Table of ContentsPreface. Foreword. Acknowledgments. 1 Introduction. 1.1 Definition of Wireless Ad Hoc Networks. 1.2 Applications of Wireless Ad Hoc Networks. 1.3 Threats, Attacks, and Vulnerabilities. 1.3.1 Threats. 1.3.2 Vulnerabilities in Ad Hoc Networks. 1.3.3 Attacks. 1.4 Overview of the Book. 2 Basic Security Concepts. 2.1 Introduction. 2.2 Basic Concepts. 2.2.1 Attributes. 2.2.2 Cryptographic Primitives. 2.3 Modes of Operation. 2.4 Miscellaneous Properties. 2.4.1 One-Way Property of Hash Chains. 2.4.2 TESLA. 2.5 Summary. 3 Key Management. 3.1 Introduction. 3.2 Traditional Solution. 3.3 Solutions for Ad Hoc Networks. 3.3.1 Asymmetric Key-Based Approach. 3.3.2 Symmetric Key-Based Approach. 3.4 Summary. 4 Secure Routing. 4.1 Introduction. 4.1.1 Distance-Vector and Link-State Routing. 4.1.2 Proactive vs Reactive Routing. 4.2 Ad Hoc On-Demand Distance Vector. 4.2.1 Secure AODV. 4.2.2 Authenticated Routing for Ad Hoc Networks (ARAN). 4.2.3 Security-Aware Ad Hoc Routing. 4.3 Dynamic Source Routing Protocol. 4.3.1 Secure Routing Protocol. 4.3.2 Ariadne. 4.3.3 EndairA: A Provably Secure Routing Protocol. 4.4 Destination-Sequenced Distance-Vector Routing Protocol. 4.4.1 Secure Efficient Distance Vector Routing (SEAD). 4.4.2 SuperSEAD. 4.4.3 S-DSDV. 4.5 Optimized Link-State Routing Protocol. 4.5.1 Secure Extension to OLSR. 4.5.2 Secure Link-State Routing Protocol. 4.6 Anonymous Routing Protocols. 4.6.1 ANODR. 4.6.2 MASK. 4.7 Generic Attacks Against Routing. 4.7.1 Wormhole Attacks. 4.7.2 Rushing Attacks. 4.7.3 Sybil Attacks. 4.8 Summary. 5 Intrusion Detection Systems. 5.1 Introduction. 5.1.1 Traditional IDS Systems. 5.2 Unique IDS Challenges in MANET. 5.3 Threat Model. 5.4 Architecture for Intrusion Detection in MANET. 5.4.1 Noncollaborative Intrusion Detection System. 5.4.2 Cooperative Intrusion Detection. 5.4.3 Key Novel Concepts for Cooperative Intrusion Detection in MANET. 5.5 Evidence Collection. 5.5.1 Local Evidence. 5.5.2 Promiscuous Monitoring. 5.5.3 Evidence made Available by Other Nodes. 5.6 Detection of Specific Attacks. 5.6.1 Detection of Packet Dropping Attacks. 5.6.2 Detection of Attacks Against Routing Protocols. 5.7 Summary. 6 Policy Management. 6.1 Introduction. 6.2 Policy-Based Network Management. 6.2.1 Overview. 6.2.2 Architecture. 6.2.3 Policy Languages. 6.2.4 Distributed Policy Management Architecture. 6.2.5 IETF and DMTF Standardization Activities. 6.3 Application of Policy Management to Security Management. 6.3.1 Role-Based Access Control (RBAC). 6.3.2 Trust Management and the KeyNote System. 6.3.3 Firewall Management. 6.3.4 Policy Enforcement in a Wireless Ad Hoc Network. 6.4 Summary. 7 Secure Localization. 7.1 Introduction. 7.2 Localization. 7.2.1 Ranging. 7.2.2 Computation. 7.2.3 Attacks. 7.3 Secure Localization. 7.3.1 Distance Bounding Techniques. 7.3.2 Verifiable Multilateration. 7.3.3 Directional Antennae-Based Schemes. 7.3.4 Transmission Range Variation-Based Schemes. 7.3.5 Hybrid Schemes. 7.3.6 Malicious Beacons. 7.4 Summary. 8 Conclusions and Future Research. 8.1 Vehicular Networks. 8.1.1 Differences with MANET. 8.1.2 Open Problems and Solutions. 8.2 Summary. Acronyms. References. Index.

Read more less

Book SynopsisPhishing and Counter-Measures discusses how and why phishing is a threat, and presents effective countermeasures. Educating readers on how phishing attacks have been mounting over the years, how to detect and prevent current as well as future attacks, this text focuses on corporations who supply the resources used by attackers.Trade Review"…I highly recommend this as a must-read book in the collection of phishing literature." (Computing Reviews.com, September 13, 2007) "…may be used as a textbook or a comprehensive reference for individuals involved with Internet security…" (CHOICE, July 2007)Table of ContentsPreface. Acknowledgements. 1. Introduction to Phishing. 1.1 What is Phishing? 1.2 A Brief History of Phishing. 1.3 The Costs to Society of Phishing. 1.4 A Typical Phishing Attack. 1.4.1 Phishing Example: America’s Credit Unions. 1.4.2 Phishing Example: PayPal. 1.4.3 Making The Lure Convincing. 1.4.4 Setting The Hook. 1.4.5 Making The Hook Convincing. 1.4.6 The Catch. 1.4.7 Take-Down and Related Technologies. 1.5 Evolution of Phishing. 1.6 Case Study: Phishing on Froogle. 1.7 Protecting Users from Phishing. References. 2. Phishing Attacks: Information Flow and Chokepoints. 2.1 Types of Phishing Attacks. 2.1.1 Deceptive Phishing. 2.1.2 Malware-Based Phishing. 2.1.3 DNS-Based Phishing (“Pharming”). 2.1.4 Content-Injection Phishing. 2.1.5 Man-in-the-Middle Phishing. 2.1.6 Search Engine Phishing. 2.2 Technology, Chokepoints and Countermeasures. 2.2.1 Step 0: Preventing a Phishing Attack Before it Begins. 2.2.2 Step 1: Preventing Delivery of Phishing Payload. 2.2.3 Step 2: Preventing or Disrupting a User Action. 2.2.4 Steps 2 and 4: Prevent Navigation and Data Compromise. 2.2.5 Step 3: Preventing Transmission of the Prompt. 2.2.6 Step 4: Preventing Transmission of Confidential Information. 2.2.7 Steps 4 and 6: Preventing Data Entry and Rendering it Useless. 2.2.8 Step 5: Tracing Transmission of Compromised Credentials. 2.2.9 Step 6: Interfering with the Use of Compromised Information. 2.2.10 Step 7: Interfering with the Financial Benefit. References. 3. Spoofing and Countermeasures. 3.1 Email Spoofing. 3.1.1 Filtering. 3.1.2 Whitelisting and Greylisting. 3.1.3 Anti-spam Proposals. 3.1.4 User Education. 3.2 IP Spoofing. 3.2.1 IP Traceback. 3.2.2 IP Spoofing Prevention. 3.2.3 Intradomain Spoofing. 3.3 Homograph Attacks Using Unicode. 3.3.1 Homograph Attacks. 3.3.2 Similar Unicode String Generation. 3.3.3 Methodology of Homograph Attack Detection. 3.4 Simulated Browser Attack. 3.4.1 Using the Illusion. 3.4.2 Web Spoofing. 3.4.3 SSL and Webspoofing. 3.4.4 Ensnaring the User. 3.4.5 SpoofGuard Versus the Simulated Browser Attack. 3.5 Case Study: Warning the User About Active Web Spoofing. References. 4. Pharming and Client Side Attacks. 4.1 Malware. 4.1.1 Viruses and Worms. 4.1.2 Spyware. 4.1.3 Adware. 4.1.4 Browser Hijackers. 4.1.5 Keyloggers. 4.1.6 Trojan Horses. 4.1.7 Rootkits. 4.1.8 Session Hijackers. 4.2 Malware Defense Strategies. 4.2.1 Defense Against Worms and Viruses . 4.2.2 Defense Against Spyware and Keyloggers. 4.2.3 Defending Against Rootkits. 4.3 Pharming. 4.3.1 Overview of DNS. 4.3.2 Role of DNS in Pharming. 4.3.3 Defending Against Pharming. 4.4 Case Study: Pharming with Appliances. 4.4.1 A Different Phishing Strategy. 4.4.2 The Spoof: A Home Pharming Appliance. 4.4.3 Sustainability of Distribution in the Online Marketplace. 4.4.4 Countermeasures. 4.5 Case Study: Race-Pharming. 4.5.1 Technical Description. 4.5.2 Detection and Countermeasures. 4.5.3 Contrast with DNS Pharming. References. 5. Status Quo Security Tools. 5.1 An overview of Anti-Spam Techniques. 5.2 Public Key Cryptography and its Infrastructure. 5.2.1 Public key Encryption. 5.2.2 Digital Signatures. 5.2.3 Certificates & Certificate Authorities. 5.2.4 Certificates. 5.3 SSL Without a PKI. 5.3.1 Modes of Authentication. 5.3.2 The Handshaking Protocol. 5.3.3 SSL in the Browser. 5.4 Honeypots. 5.4.1 Advantages and Disadvantages. 5.4.2 Technical Details. 5.4.3 Honeypots and the Security Process. 5.4.4 Email Honeypots. 5.4.5 Phishing Tools and Tactics. References. 6. Adding Context to Phishing Attacks: Spear Phishing. 6.1 Overview of Context Aware Phishing. 6.2 Modeling Phishing Attacks. 6.2.1 Stages of Context Aware Attacks. 6.2.2 Identity Linking. 6.2.3 Analysing the General Case. 6.2.4 Analysis of One Example Attack. 6.2.5 Defenses Against our Example Attacks. 6.3 Case Study: Automated Trawling for Public Private Data. 6.3.1 Mother’s Maiden Name: Plan of Attack. 6.3.2 Availability of Vital Information. 6.3.3 Heuristics for MMN Discovery. 6.3.4 Experimental Design. 6.3.5 Assessing the Damage. 6.3.6 Time and Space Heustics. 6.3.7 MMN Compromise in Suffixed Children. 6.3.8 Other Ways to Derive Mother’s Maiden Names. 6.4 Case Study: Using Your Social Network Against You. 6.4.1 Motivations of a Social Phishing Attack Experiment. 6.4.2 Design Considerations. 6.4.3 Data Mining. 6.4.4 Performing the Attack. 6.4.5 Results. 6.4.6 Reactions Expressed in Experiment Blog. 6.5 Case Study: Browser Recon Attacks. 6.5.1 Who Cares Where I’ve Been? 6.5.2 Mining Your History. 6.5.3 CSS To Mine History. 6.5.4 Bookmarks. 6.5.5 Various Uses For Browser-Recon. 6.5.6 Protecting Against Browser Recon Attacks. 6.6 Case Study: Using the Autofill feature in Phishing. 6.7 Case Study: Acoustic Keyboard Emanations. 6.7.1 Previous Attacks of Acoustic Emanations. 6.7.2 Description of Attack. 6.7.3 Technical Details. 6.7.4 Experiments. References. 7. Human-Centered Design Considerations. 7.1 Introduction: The Human Context of Phishing and Online Security. 7.1.1 Human Behavior. 7.1.2 Browser and Security Protocol Issues in the Human Context. 7.1.3 Overview of the HCI and Security Literature. 7.2 Understanding and Designing for Users. 7.2.1 Understanding Users and Security. 7.2.2 Designing Usable Secure Systems. 7.3 Mis-Education. 7.3.1 How Does Learning Occur? 7.3.2 The Lessons. 7.3.3 Learning to Be Phished. 7.3.4 Solution Framework. References. 8. Passwords. 8.1 Traditional Passwords. 8.1.1 Cleartext Passwords. 8.1.2 Password recycling. 8.1.3 Hashed Passwords. 8.1.4 Brute force attacks. 8.1.5 Dictionary Attacks. 8.1.6 Time-Memory Tradeoffs. 8.1.7 Salted Passwords. 8.1.8 Eavesdropping. 8.1.9 One-Time Passwords. 8.1.10 Alternatives to Passwords. 8.2 Case Study: Phishing in Germany. 8.2.1 Comparison of Procedures. 8.2.2 Recent Changes and New Challenges. 8.3 Security Questions as Password Reset Mechanisms. 8.3.1 Knowledge Based Authentication. 8.3.2 Security Properties of Life Questions. 8.3.3 Protocols Using Life Questions. 8.3.4 Example Systems. 8.4 One-Time Password Tokens. 8.4.1 OTPs as a Phishing Countermeasure. 8.4.2 Advanced Concepts. References. 9. Mutual Authentication and Trusted Pathways. 9.1 The Need for Reliable Mutual Authentication. 9.1.1 Distinctions Between The Physical and Virtual World. 9.1.2 The State of Current Mutual Authentication. 9.2 Password Authenticated Key Exchange. 9.2.1 A Comparison Between PAKE and SSL. 9.2.2 An Example PAKE Protocol: SPEKE. 9.2.3 Other PAKE Protocols and Some Augmented Variations. 9.2.4 Doppelganger Attacks on PAKE. 9.3 Delayed Password Disclosure. 9.3.1 DPD Security Guarantees. 9.3.2 A DPD Protocol. 9.4 Trusted Path: How To Find Trust in an Unscrupulous World. 9.4.1 Trust on the World Wide Web. 9.4.2 Trust Model: Extended Conventional Model. 9.4.3 Trust Model: Xenophobia. 9.4.4 Trust Model: Untrusted Local Computer. 9.4.5 Trust Model: Untrusted Recipient. 9.4.6 Usability Considerations. 9.5 Dynamic Security Skins. 9.5.1 Security Properties. 9.5.2 Why Phishing Works. 9.5.3 Dynamic Security Skins. 9.5.4 User Interaction. 9.5.5 Security Analysis. 9.6 Browser Enhancements for Preventing Phishing. 9.6.1 Goals for Anti-phishing Techniques. 9.6.2 Google Safe Browsing. 9.6.3 Phoolproof Phishing Prevention. 9.6.4 Final Design of the Two-Factor Authentication System. References. 10. Biometrics and Authentication. 10.1 Biometrics. 10.1.1 Fundamentals of Biometric Authentication. 10.1.2 Biometrics and Cryptography. 10.1.3 Biometrics and Phishing. 10.1.4 Phishing Biometric Characteristics. 10.2 Hardware Tokens for Authentication and Authorization. 10.3 Trusted Computing Platforms and Secure Operating Systems. 10.3.1 Protecting Against Information Harvesting. 10.3.2 Protecting Against Information Snooping. 10.3.3 Protecting Against Redirection. 10.4 Secure Dongles and PDAs. 10.4.1 The Promise and Problems of PKI. 10.4.2 Smart Cards and USB Dongles to Mitigate Risk. 10.4.3 PorKI Design and Use. 10.4.4 PorKI Evaluation. 10.4.5 New Applications and Directions. 10.5 Cookies for Authentication. 10.5.1 Cache-Cookie Memory Management. 10.5.2 Cache-Cookie Memory. 10.5.3 C-Memory. 10.5.4 TIF-Based Cache Cookies. 10.5.5 Schemes for User Identification and Authentication. 10.5.6 Identifier Trees. 10.5.7 Rolling-Pseudonym Scheme. 10.5.8 Denial-of-Service Attacks. 10.5.9 Secret Cache Cookies. 10.5.10 Audit Mechanisms. 10.5.11 Proprietary Identifier-Trees. 10.5.12 Implementation. 10.6 Lightweight Email Signatures. 10.6.1 Cryptographic and System Preliminaries. 10.6.2 Lightweight Email Signatures. 10.6.3 Technology Adoption. 10.6.4 Vulnerabilities. 10.6.5 Experimental Results. References. 11. Making Takedown Difficult. 11.1 Detection and Takedown. 11.1.1 Avoiding Distributed Phishing Attacks—Overview. 11.1.2 Collection of Candidate Phishing Emails. 11.1.3 Classification of Phishing Emails. References. 12. Protecting Browser State. 12.1 Client-Side Protection of Browser State. 12.1.1 Same-Origin Principle. 12.1.2 Protecting Cache. 12.1.3 Protecting Visited Links. 12.2 Server-Side Protection of Browser State. 12.2.1 Goals. 12.2.2 A Server-Side Solution. 12.2.3 Pseudonyms. 12.2.4 Translation Policies. 12.2.5 Special Cases. 12.2.6 Security Argument. 12.2.7 Implementation Details. 12.2.8 Pseudonyms and Translation. 12.2.9 General Considerations. References. 13. Browser Toolbars. 13.1 Browser-Based Anti-Phishing Tools. 13.1.1 Information-Oriented Tools. 13.1.2 Database-Oriented Tools. 13.1.3 Domain-Oriented Tools. 13.2 Do Browser Toolbars Actually Prevent Phishing? 13.2.1 Study Design. 13.2.2 Results and Discussion. References. 14. Social Networks. 14.1 The Role of Trust Online. 14.2 Existing Solutions for Securing Trust Online. 14.2.1 Reputation Systems and Social Networks. 14.2.2 Third Party Certifications. 14.2.3 First Party Assertions. 14.2.4 Existing Solutions for Securing Trust Online. 14.3 Case Study: “Net Trust”. 14.3.1 Identity. 14.3.2 The Buddy List. 14.3.3 The Security Policy. 14.3.4 The Rating System. 14.3.5 The Reputation System. 14.3.6 Privacy Considerations and Anonymity Models. 14.3.7 Usability Study Results. 14.4 The Risk of Social Networks. References. 15. Microsoft’s Anti-Phishing Technologies and Tactics. 15.1 Cutting The Bait: SmartScreen Detection of Email Spam and Scams. 15.2 Cutting The Hook: Dynamic Protection Within the Web Browser. 15.3 Prescriptive Guidance and Education for Users. 15.4 Ongoing Collaboration, Education and Innovation. References. 16. Using S/MIME. 16.1 Secure Electronic Mail: A Brief History. 16.1.1 The Key Certification Problem. 16.1.2 Sending Secure Email: Usability Concerns. 16.1.3 The Need to Redirect Focus. 16.2 Amazon.com’s Experience with S/MIME. 16.2.1 Survey Methodology. 16.2.2 Awareness of Cryptographic Capabilities. 16.2.3 Segmenting the Respondents. 16.2.4 Appropriate Uses of Signing and Sealing. 16.3 Signatures Without Sealing. 16.3.1 Evaluating the Usability Impact of S/MIME-Signed Messages. 16.3.2 Problems from the Field. 16.4 Conclusions and Recommendations. 16.4.1 Promote Incremental Deployment. 16.4.2 Extending Security from the Walled Garden. 16.4.3 S/MIME for Webmail. 16.4.4 Improving the S/MIME Client. References. 17. Experimental evaluation of attacks and countermeasures. 17.1 Behavioral Studies. 17.1.1 Targets of Behavioral Studies. 17.1.2 Techniques of Behavioral Studies for Security. 17.1.3 Strategic and Tactical Studies. 17.2 Case Study: Attacking eBay Users with Queries. 17.2.1 User-to-User Phishing on eBay. 17.2.2 eBay Phishing Scenarios. 17.2.3 Experiment Design. 17.2.4 Methodology. 17.3 Case Study: Signed Applets. 17.3.1 Trusting Applets. 17.3.2 Exploiting Applets’ Abilities. 17.3.3 Understanding the Potential Impact. 17.4 Case Study: Ethically Studying Man in the Middle. 17.4.1 Man-in-the-Middle and Phishing. 17.4.2 Experiment: Design Goals and Theme. 17.4.3 Experiment: Man-in-the-Middle Technique Implementation. 17.4.4 Experiment: Participant Preparation. 17.4.5 Experiment: Phishing Delivery Method. 17.4.6 Experiment: Debriefing. 17.4.7 Preliminary Findings. 17.5 Legal Considerations in Phishing Research. 17.5.1 Specific Federal and State Laws. 17.5.2 Contract Law - Business Terms of Use. 17.5.3 Potential Tort Liability. 17.5.4 The Scope of Risk. 17.6 Case Study: Designing and Conducting Phishing Experiments. 17.6.1 Ethics and Regulation. 17.6.2 Phishing experiments—Three Case Studies. 17.6.3 Making it Look Like Phishing. 17.6.4 Subject Reactions. 17.6.5 The Issue of Timeliness. References. 18. Liability for Phishing. 18.1 Impersonation. 18.1.1 Anti-SPAM. 18.1.2 Trademark. 18.1.3 Copyright. 18.2 Obtaining Personal Information. 18.2.1 Fraudulent Access. 18.2.2 Identity Theft. 18.2.3 Wire Fraud. 18.2.4 Pretexting. 18.2.5 Unfair Trade Practice. 18.2.6 Phishing-Specific Legislation. 18.2.7 Theft. 18.3 Exploiting Personal Information. 18.3.1 Fraud. 18.3.2 Identity Theft. 18.3.3 Illegal Computer Access. 18.3.4 Trespass to Chattels. References. 19. The Future. Index. About the Editors.

Read more less

Book SynopsisStrategies for Protecting National Critical Infrastructure Assets eases the research burden, develops investigative protocols, and pulls together data into a comprehensive and practical guide, to help the serious reader understand advanced concepts and techniques of risk assessment with an emphasis on meeting the security needs of the critical national infrastructure. The text is divided into five major sections, which are further broken down by individual chapters, each addressing one element of risk assessment as well as focusing attention on applying the risk assessment methodology to a particular industry. This book establishes a new and acceptable approach for conducting risk assessments in a high-risk world. Helps the reader to understand advanced concepts and techniques of risk assessment Provides a quick, reliable, and practical briefcase reference to use in the office as well as on the road Introduces the elements of the risk assessment proceTable of ContentsPart 1 Understanding the Environment 1 Part 2 Understanding Security Assessments 45 Part 3 Tailoring the S3E Security Methodology to Specific Critical Infrastructure Sectors 219 General Glossary 525 Index 589

Read more less

Book SynopsisToday's uber viruses, worms, and trojans may seem more damaging than ever, but the attacking malware and malicious hackers are using the same tricks they always have. With this book, Microsoft MVP Roger Grimes exposes the real threat to Windows computers and offers practical guidance to secure those systems.Table of ContentsAcknowledgments. Introduction. Part I: The Basics in Depth. Chapter 1: Windows Attacks. Chapter 2: Conventional and Unconventional Defenses. Chapter 3: NTFS Permissions 101. Part II: OS Hardening. Chapter 4: Preventing Password Crackers. Chapter 5: Protecting High-Risk Files. Chapter 6: Protecting High-Risk Registry Entries. Chapter 7: Tightening Services. Chapter 8: Using IPSec. Part III: Application Security. Chapter 9: Stopping Unauthorized Execution. Chapter 10: Securing Internet Explorer. Chapter 11: Protecting E-mail. Chapter 12: IIS Security. Chapter 13: Using Encrypting File System. Part IV: Automating Security. Chapter 14: Group Policy Explained. Chapter 15: Designing a Secure Active Directory Infrastructure. Book Summary. Index.

Read more less

Book SynopsisPractical guide that can be used by executives to make well-informed decisions on cybersecurity issues to better protect their business Emphasizes, in a direct and uncomplicated way, how executives can identify, understand, assess, and mitigate risks associated with cybersecurity issues Covers ''What to Do When You Get Hacked?'' including Business Continuity and Disaster Recovery planning, Public Relations, Legal and Regulatory issues, and Notifications and Disclosures Provides steps for integrating cybersecurity into Strategy; Policy and Guidelines; Change Management and Personnel Management Identifies cybersecurity best practices that executives can and should use both in the office and at home to protect their vital information Table of ContentsForeword xiii Preface xvii Acknowledgments xxiii 1.0 Introduction 1 1.1 Defining Cybersecurity 1 1.2 Cybersecurity is a Business Imperative 2 1.3 Cybersecurity is an Executive-Level Concern 4 1.4 Questions to Ask 4 1.5 Views of Others 7 1.6 Cybersecurity is a Full-Time Activity 7 2.0 Why Be Concerned? 9 2.1 A Classic Hack 9 2.2 Who Wants Your Fortune? 12 2.3 Nation-State Threats 13 2.3.1 China 13 2.3.2 Don’t Think that China is the Only One 17 2.4 Cybercrime is Big Business 20 2.4.1 Mercenary Hackers 20 2.4.2 Hacktivists 25 2.4.3 The Insider Threat 26 2.4.4 Substandard Products and Services 29 2.5 Summary 36 3.0 Managing Risk 37 3.1 Who Owns Risk in Your Business? 37 3.2 What are Your Risks? 38 3.2.1 Threats to Your Intellectual Property and Trade Secrets 38 3.2.2 Technical Risks 42 3.2.3 Human Risks 47 3.3 Calculating Your Risk 54 3.3.1 Quantitative Risk Assessment 55 3.3.2 Qualitative Risk Assessment 63 3.3.3 Risk Decisions 71 3.4 Communicating Risk 77 3.4.1 Communicating Risk Internally 78 3.4.2 Regulatory Communications 79 3.4.3 Communicating with Shareholders 86 3.5 Organizing for Success 89 3.5.1 Risk Management Committee 89 3.5.2 Chief Risk Officers 90 3.6 Summary 91 4.0 Build Your Strategy 95 4.1 How Much “Cybersecurity” Do I Need? 95 4.2 The Mechanics of Building Your Strategy 97 4.2.1 Where are We Now? 99 4.2.2 What do We have to Work with? 103 4.2.3 Where do We Want to be? 104 4.2.4 How do We Get There? 107 4.2.5 Goals and Objectives 108 4.3 Avoiding Strategy Failure 111 4.3.1 Poor Plans, Poor Execution 111 4.3.2 Lack of Communication 113 4.3.3 Resistance to Change 114 4.3.4 Lack of Leadership and Oversight 117 4.4 Ways to Incorporate Cybersecurity into Your Strategy 118 4.4.1 Identify the Information Critical to Your Business 119 4.4.2 Make Cybersecurity Part of Your Culture 119 4.4.3 Consider Cybersecurity Impacts in Your Decisions 119 4.4.4 Measure Your Progress 120 4.5 Plan For Success 121 4.6 Summary 123 5.0 Plan For Success 125 5.1 Turning Vision into Reality 125 5.1.1 Planning for Excellence 127 5.1.2 A Plan of Action 128 5.1.3 Doing Things 131 5.2 Policies Complement Plans 140 5.2.1 Great Cybersecurity Policies for Everyone 140 5.2.2 Be Clear about Your Policies and Who Owns Them 188 5.3 Procedures Implement Plans 190 5.4 Exercise Your Plans 191 5.5 Legal Compliance Concerns 193 5.6 Auditing 195 5.7 Summary 196 6.0 Change Management 199 6.1 Why Managing Change is Important 199 6.2 When to Change? 201 6.3 What is Impacted by Change? 205 6.4 Change Management and Internal Controls 209 6.5 Change Management as a Process 214 6.5.1 The Touhill Change Management Process 215 6.5.2 Following the Process 216 6.5.3 Have a Plan B, Plan C, and maybe a Plan D 220 6.6 Best Practices in Change Management 220 6.7 Summary 224 7.0 Personnel Management 227 7.1 Finding the Right Fit 227 7.2 Creating the Team 229 7.2.1 Picking the Right Leaders 230 7.2.2 Your Cybersecurity Leaders 233 7.3 Establishing Performance Standards 237 7.4 Organizational Considerations 240 7.5 Training for Success 242 7.5.1 Information Every Employee Ought to Know 242 7.5.2 Special Training for Executives 246 7.6 Special Considerations for Critical Infrastructure Protection 249 7.7 Summary 258 8.0 Performance Measures 261 8.1 Why Measure? 261 8.2 What to Measure? 267 8.2.1 Business Drivers 267 8.2.2 Types of Metrics 271 8.3 Metrics and the C-Suite 272 8.3.1 Considerations for the C-Suite 273 8.3.2 Questions about Cybersecurity Executives Should Ask 275 8.4 The Executive Cybersecurity Dashboard 277 8.4.1 How Vulnerable Are We? 277 8.4.2 How Effective Are Our Systems and Processes? 282 8.4.3 Do We Have the Right People, Are They Properly Trained, and Are They Following Proper Procedures? 286 8.4.4 Am I Spending the Right Amount on Security? 287 8.4.5 How Do We Compare to Others? 288 8.4.6 Creating Your Executive Cybersecurity Dashboard 289 8.5 Summary 291 9.0 What To Do When You Get Hacked 293 9.1 Hackers Already Have You Under Surveillance 293 9.2 Things to do Before it’s Too Late: Preparing for the Hack 295 9.2.1 Back Up Your Information 296 9.2.2 Baseline and Define What is Normal 296 9.2.3 Protect Yourself with Insurance 297 9.2.4 Create Your Disaster Recovery and Business Continuity Plan 298 9.3 What to do When Bad Things Happen: Implementing Your Plan 299 9.3.1 Item 1: Don’t Panic 300 9.3.2 Item 2: Make Sure You’ve Been Hacked 301 9.3.3 Item 3: Gain Control 302 9.3.4 Item 4: Reset All Passwords 303 9.3.5 Item 5: Verify and Lock Down All Your External Links 304 9.3.6 Item 6: Update and Scan 305 9.3.7 Item 7: Assess the Damage 305 9.3.8 Item 8: Make Appropriate Notifications 307 9.3.9 Item 9: Find Out Why It Happened and Who Did It 309 9.3.10 Item 10: Adjust Your Defenses 310 9.4 Foot Stompers 310 9.4.1 The Importance of Public Relations 310 9.4.2 Working with Law Enforcement 315 9.4.3 Addressing Liability 317 9.4.4 Legal Issues to Keep an Eye On 318 9.5 Fool Me Once… 319 9.6 Summary 320 10.0 Boardroom Interactions 323 Appendix A: Policies 347 Appendix B: General Rules for Email Etiquette: Sample Training Handout 357 Glossary 361 Select Bibliography 371 Index 373

Read more less

Book SynopsisWritten by a team of experts at the forefront of the cyber-physical systems (CPS) revolution, this book provides an in-depth look at security and privacy, two of the most critical challenges facing both the CPS research and development community and ICT professionals. It explores, in depth, the key technical, social, and legal issues at stake, and it provides readers with the information they need to advance research and development in this exciting area. Cyber-physical systems (CPS) are engineered systems that are built from, and depend upon the seamless integration of computational algorithms and physical components. Advances in CPS will enable capability, adaptability, scalability, resiliency, safety, security, and usability far in excess of what today's simple embedded systems can provide. Just as the Internet revolutionized the way we interact with information, CPS technology has already begun to transform the way people interact with engineered systems. In the years aheTable of ContentsList of Contributors xvii Foreword xxiii Preface xxv Acknowledgments xxix 1 Overview of Security and Privacy in Cyber-Physical Systems 1Glenn A. Fink, ThomasW. Edgar, Theora R. Rice, Douglas G. MacDonald and Cary E. Crawford 1.1 Introduction 1 1.2 Defining Security and Privacy 1 1.2.1 Cybersecurity and Privacy 2 1.2.2 Physical Security and Privacy 3 1.3 Defining Cyber-Physical Systems 4 1.3.1 Infrastructural CPSs 5 1.3.1.1 Example: Electric Power 5 1.3.2 Personal CPSs 5 1.3.2.1 Example: Smart Appliances 6 1.3.3 Security and Privacy in CPSs 6 1.4 Examples of Security and Privacy in Action 7 1.4.1 Security in Cyber-Physical Systems 7 1.4.1.1 Protecting Critical Infrastructure from Blended Threat 8 1.4.1.2 Cyber-Physical Terrorism 8 1.4.1.3 Smart Car Hacking 9 1.4.1.4 Port Attack 10 1.4.2 Privacy in Cyber-Physical Systems 11 1.4.2.1 Wearables 11 1.4.2.2 Appliances 12 1.4.2.3 Motivating Sharing 12 1.4.3 Blending Information and Physical Security and Privacy 12 1.5 Approaches to Secure Cyber-Physical Systems 14 1.5.1 Least Privilege 14 1.5.2 Need-to-Know 15 1.5.3 Segmentation 15 1.5.4 Defensive Dimensionality 16 1.5.4.1 Defense-in-Depth 16 1.5.4.2 Defense-in-Breadth 16 1.5.5 User-Configurable Data Collection/Logging 17 1.5.6 Pattern Obfuscation 17 1.5.7 End-to-End Security 17 1.5.8 Tamper Detection/Security 18 1.6 Ongoing Security and Privacy Challenges for CPSs 18 1.6.1 Complexity of Privacy Regulations 18 1.6.2 Managing and Incorporating Legacy Systems 19 1.6.3 Distributed Identity and Authentication Management 20 1.6.4 Modeling Distributed CPSs 20 1.7 Conclusion 21 References 21 2 Network Security and Privacy for Cyber-Physical Systems 25Martin Henze, Jens Hiller, René Hummen, Roman Matzutt, KlausWehrle andJan H. Ziegeldorf 2.1 Introduction 25 2.2 Security and Privacy Issues in CPSs 26 2.2.1 CPS Reference Model 27 2.2.1.1 Device Level 27 2.2.1.2 Control/Enterprise Level 27 2.2.1.3 Cloud Level 28 2.2.2 CPS Evolution 28 2.2.3 Security and PrivacyThreats in CPSs 30 2.3 Local Network Security for CPSs 31 2.3.1 Secure Device Bootstrapping 32 2.3.1.1 Initial Key Exchange 33 2.3.1.2 Device Life Cycle 33 2.3.2 Secure Local Communication 34 2.3.2.1 Physical Layer 34 2.3.2.2 Medium Access 34 2.3.2.3 Network Layer 35 2.3.2.4 Secure Local Forwarding for Internet-Connected CPSs 35 2.4 Internet-Wide Secure Communication 36 2.4.1 Security Challenges for Internet-Connected CPS 37 2.4.2 Tailoring End-to-End Security to CPS 38 2.4.3 Handling Resource Heterogeneity 39 2.4.3.1 Reasonable Retransmission Mechanisms 39 2.4.3.2 Denial-of-Service Protection 40 2.5 Security and Privacy for Cloud-Interconnected CPSs 41 2.5.1 Securely Storing CPS Data in the Cloud 42 2.5.1.1 Protection of CPS Data 43 2.5.1.2 Access Control 43 2.5.2 Securely Processing CPS Data in the Cloud 44 2.5.3 Privacy for Cloud-Based CPSs 45 2.6 Summary 46 2.7 Conclusion and Outlook 47 Acknowledgments 48 References 48 3 Tutorial on Information Theoretic Metrics Quantifying Privacy in Cyber-Physical Systems 57Guido Dartmann, Mehmet Ö. Demir, Hendrik Laux, Volker Lücken, Naim Bajcinca, Gunes K. Kurt, Gerd Ascheid andMartina Ziefle 3.1 Social Perspective and Motivation 57 3.1.1 Motivation 59 3.1.2 Scenario 60 3.2 Information Theoretic Privacy Measures 62 3.2.1 Information Theoretic Foundations 62 3.2.2 Surprise and Specific Information 63 3.3 Privacy Models and Protection 64 3.3.1 k-Anonymity 65 3.4 Smart City Scenario: System Perspective 67 3.4.1 Attack without Anonymization 68 3.4.2 Attack with Anonymization of the ZIP 70 3.4.3 Attack with Anonymization of the Bluetooth ID 71 3.5 Conclusion and Outlook 71 Appendix A Derivation of the Mutual Information Based on the KLD 72 Appendix B Derivation of the Mutual Information In Terms of Entropy 73 Appendix C Derivation of the Mutual Information Conditioned onx 73 Appendix D Proof of Corollary 3.1 74 References 74 4 Cyber-Physical Systems and National Security Concerns 77Jeff Kosseff 4.1 Introduction 77 4.2 National Security Concerns Arising from Cyber-Physical Systems 79 4.2.1 Stuxnet 80 4.2.2 German Steel Mill 81 4.2.3 Future Attacks 82 4.3 National Security Implications of Attacks on Cyber-Physical Systems 82 4.3.1 Was the Cyber-Attack a “Use of Force” That Violates International Law? 83 4.3.2 If the AttackWas a Use of Force,Was That Force Attributable to a State? 86 4.3.3 Did the Use of Force Constitute an “Armed Attack” That Entitles the Target to Self-Defense? 87 4.3.4 If theUse of ForceWas an ArmedAttack, What Types of Self-Defense Are Justified? 88 4.4 Conclusion 89 References 90 5 Legal Considerations of Cyber-Physical Systems and the Internet of Things 93Alan C. Rither and Christopher M. Hoxie 5.1 Introduction 93 5.2 Privacy and Technology in Recent History 94 5.3 The Current State of Privacy Law 96 5.3.1 Privacy 98 5.3.2 Legal Background 98 5.3.3 Safety 99 5.3.4 Regulatory 100 5.3.4.1 Executive Branch Agencies 101 5.3.4.2 The Federal Trade Commission 101 5.3.4.3 The Federal Communications Commission 105 5.3.4.4 National Highway and Traffic Safety Administration 106 5.3.4.5 Food and Drug Administration 108 5.3.4.6 Federal Aviation Administration 109 5.4 Meeting Future Challenges 111 References 113 6 Key Management in CPSs 117YongWang and Jason Nikolai 6.1 Introduction 117 6.2 Key Management Security Goals and Threat Model 117 6.2.1 CPS Architecture 118 6.2.2 Threats and Attacks 119 6.2.3 Security Goals 120 6.3 CPS Key Management Design Principles 121 6.3.1 Heterogeneity 122 6.3.2 Real-Time Availability 122 6.3.3 Resilience to Attacks 123 6.3.4 Interoperability 123 6.3.5 Survivability 123 6.4 CPS Key Management 124 6.4.1 Dynamic versus Static 124 6.4.2 Public Key versus Symmetric Key 125 6.4.2.1 Public Key Cryptography 125 6.4.2.2 Symmetric Key Cryptography 127 6.4.3 Centralized versus Distributed 128 6.4.4 Deterministic versus Probabilistic 129 6.4.5 Standard versus Proprietary 130 6.4.6 Key Distribution versus Key Revocation 131 6.4.7 Key Management for SCADA Systems 131 6.5 CPS Key Management Challenges and Open Research Issues 132 6.6 Summary 133 References 133 7 Secure Registration and Remote Attestation of IoT Devices Joining the Cloud: The Stack4Things Case of Study 137Antonio Celesti,Maria Fazio, Francesco Longo, Giovanni Merlino and Antonio Puliafito 7.1 Introduction 137 7.2 Background 138 7.2.1 Cloud Integration with IoT 139 7.2.2 Security and Privacy in Cloud and IoT 139 7.2.3 Technologies 140 7.2.3.1 Hardware 140 7.2.3.2 Web Connectivity 141 7.2.3.3 Cloud 141 7.3 Reference Scenario and Motivation 142 7.4 Stack4Things Architecture 143 7.4.1 Board Side 144 7.4.2 Cloud-Side – Control and Actuation 145 7.4.3 Cloud-Side – Sensing Data Collection 146 7.5 Capabilities for Making IoT Devices Secure Over the Cloud 147 7.5.1 Trusted Computing 147 7.5.2 Security Keys, Cryptographic Algorithms, and Hidden IDs 148 7.5.3 Arduino YUN Security Extensions 149 7.6 Adding Security Capabilities to Stack4Things 149 7.6.1 Board-Side Security Extension 149 7.6.2 Cloud-Side Security Extension 150 7.6.3 Security Services in Stack4Things 150 7.6.3.1 Secure Registration of IoT Devices Joining the Cloud 151 7.6.3.2 Remote Attestation of IoT Devices 152 7.7 Conclusion 152 References 153 8 Context Awareness for Adaptive Access Control Management in IoT Environments 157Paolo Bellavista and Rebecca Montanari 8.1 Introduction 157 8.2 Security Challenges in IoT Environments 158 8.2.1 Heterogeneity and Resource Constraints 158 8.2.2 IoT Size and Dynamicity 160 8.3 Surveying Access Control Models and Solutions for IoT 160 8.3.1 Novel Access Control Requirements 160 8.3.2 Access Control Models for the IoT 162 8.3.3 State-of-the-Art Access Control Solutions 164 8.4 Access Control Adaptation:Motivations and Design Guidelines 165 8.4.1 Semantic Context-Aware Policies for Access Control Adaptation 166 8.4.2 Adaptation Enforcement Issues 167 8.5 Our Adaptive Context-Aware Access Control Solution for Smart 8.5.1 The Proteus Model 168 8.5.2 Adapting the General Proteus Model for the IoT 170 8.5.2.1 The Proteus Architecture for the IoT 172 8.5.2.2 Implementation and Deployment Issues 173 8.6 Open Technical Challenges and Concluding Remarks 174 References 176 9 Data Privacy Issues in Distributed Security Monitoring Systems 179Jeffery A. Mauth and DavidW. Archer 9.1 Information Security in Distributed Data Collection Systems 179 9.2 Technical Approaches for Assuring Information Security 181 9.2.1 Trading Security for Cost 182 9.2.2 Confidentiality: Keeping Data Private 182 9.2.3 Integrity: Preventing Data Tampering and Repudiation 186 9.2.4 Minimality: Reducing Data Attack Surfaces 188 9.2.5 Anonymity: Separating Owner from Data 188 9.2.6 Authentication: Verifying User Privileges for Access to Data 189 9.3 Approaches for Building Trust in Data Collection Systems 190 9.3.1 Transparency 190 9.3.2 Data Ownership and Usage Policies 191 9.3.3 Data Security Controls 191 9.3.4 Data Retention and Destruction Policies 192 9.3.5 Managing Data-loss Liability 192 9.3.6 Privacy Policies and Consent 192 9.4 Conclusion 193 References 193 10 Privacy Protection for Cloud-Based Robotic Networks 195Hajoon Ko, Sye L. Keoh and Jiong Jin 10.1 Introduction 195 10.2 Cloud Robot Network: Use Case, Challenges, and Security Requirements 197 10.2.1 Use Case 197 10.2.2 SecurityThreats and Challenges 199 10.2.3 Security Requirements 200 10.3 Establishment of Cloud Robot Networks 200 10.3.1 Cloud Robot Network as a Community 200 10.3.2 A Policy-Based Establishment of Cloud Robot Networks 201 10.3.3 Doctrine: A Community Specification 201 10.3.3.1 Attribute Types and User-Attribute Assignment (UAA) Policies 203 10.3.3.2 Authorization and Obligation Policies 203 10.3.3.3 Constraints Specification 205 10.3.3.4 Trusted Key Specification 206 10.3.3.5 Preferences Specification 206 10.3.3.6 Authentication in Cloud Robot Community 207 10.3.3.7 Service Access Control 207 10.4 Communication Security 207 10.4.1 Attribute-Based Encryption (ABE) 207 10.4.2 Preliminaries 208 10.4.3 Ciphertext-Policy Attribute-Based Encryption (CP-ABE) Scheme 208 10.4.4 Revocation Based on Shamir’s Secret Sharing 209 10.4.5 Cloud Robot Community’s CP-ABE Key Revocation 209 10.4.6 Integration of CP-ABE and Robot Community Architecture 210 10.5 Security Management of Cloud Robot Networks 212 10.5.1 Bootstrapping (Establishing) a Cloud Robot Community 212 10.5.2 Joining the Community 214 10.5.3 Leaving a Community 215 10.5.4 Service Access Control 216 10.6 RelatedWork 217 10.7 Conclusion 219 References 220 11 Toward Network Coding for Cyber-Physical Systems: Security Challenges and Applications 223Pouya Ostovari and JieWu 11.1 Introduction 223 11.2 Background on Network Coding and Its Applications 225 11.2.1 Background and Preliminaries 225 11.2.2 Network Coding Applications 226 11.2.2.1 Throughput/Capacity Enhancement 226 11.2.2.2 Robustness Enhancement 227 11.2.2.3 Protocol Simplification 228 11.2.2.4 Network Tomography 228 11.2.2.5 Security 229 11.2.3 Network Coding Classification 229 11.2.3.1 Stateless Network Coding Protocols 229 11.2.3.2 State-Aware Network Coding Protocols 229 11.3 Security Challenges 230 11.3.1 Byzantine Attack 230 11.3.2 Pollution Attack 230 11.3.3 Traffic Analysis 230 11.3.4 Eavesdropping Attack 231 11.3.5 Classification of the Attacks 232 11.3.5.1 Passive versus Active 232 11.3.5.2 External versus Internal 232 11.3.5.3 Effect of Network Coding 232 11.4 Secure Network Coding 233 11.4.1 Defense against Byzantine and Pollution Attack 233 11.4.2 Defense against Traffic Analysis 234 11.5 Applications of Network Coding in Providing Security 234 11.5.1 Eavesdropping Attack 234 11.5.1.1 Secure Data Transmission 234 11.5.1.2 Secure Data Storage 236 11.5.2 Secret Key Exchange 237 11.6 Conclusion 238 Acknowledgment 239 References 239 12 Lightweight Crypto and Security 243Lo’ai A. Tawalbeh and Hala Tawalbeh 12.1 Introduction 243 12.1.1 Cyber-Physical Systems CPSs 243 12.1.2 Security and Privacy 243 12.1.3 Lightweight Cryptography (LWC) 243 12.1.4 Chapter Organization 244 12.2 Cyber-Physical Systems 244 12.3 Security and Privacy in Cyber-Physical Systems 245 12.4 Lightweight Cryptography Implementations for Security and Privacy in CPSs 247 12.4.1 Introduction 247 12.4.2 Why Is Lightweight Cryptography Important? 249 12.4.3 Lightweight Symmetric and Asymmetric Ciphers Implementations 250 12.4.3.1 Hardware Implementations of Symmetric Ciphers 251 12.4.3.2 Software Implementations of Symmetric Ciphers 253 12.4.3.3 Hardware Implementations of Asymmetric Ciphers 254 12.4.3.4 Software Implementations of Asymmetric Ciphers 255 12.4.3.5 Secure Hash Algorithms (SHA) 256 12.5 Opportunities and Challenges 257 12.6 Conclusion 258 Acknowledgments 259 References 259 13 Cyber-Physical Vulnerabilities ofWireless Sensor Networks in Smart Cities 263Md. Mahmud Hasan and Hussein T. Mouftah 13.1 Introduction 263 13.1.1 The Smart City Concept and Components 263 13.2 WSN Applications in Smart Cities 265 13.2.1 Smart Home 265 13.2.2 Smart Grid Applications 267 13.2.2.1 Substation Monitoring 267 13.2.3 Intelligent Transport System Applications 268 13.2.3.1 Roadside Unit 268 13.2.3.2 Vehicular Sensor Network 269 13.2.3.3 Intelligent Sensor Network 269 13.2.4 Real-Time Monitoring and Safety Alert 270 13.3 Cyber-Physical Vulnerabilities 270 13.3.1 Possible Attacks 271 13.3.2 Impacts on Smart City Lives 272 13.3.2.1 Service Interruption 272 13.3.2.2 Damage to Property 273 13.3.2.3 Damage to Life 273 13.3.2.4 Privacy Infiltration 274 13.4 Solution Approaches 274 13.4.1 Cryptography 274 13.4.2 Intrusion Detection System 276 13.4.3 Watchdog System 277 13.4.4 GameTheoretic Deployment 277 13.4.5 Managed Security 277 13.4.6 Physical Security Measures 278 13.5 Conclusion 278 Acknowledgment 278 References 279 14 Detecting Data Integrity Attacks in Smart Grid 281Linqiang Ge,Wei Yu, Paul Moulema, Guobin Xu, David Griffith and Nada Golmie 14.1 Introduction 281 14.2 Literature Review 283 14.3 Network andThreat Models 285 14.3.1 Network Model 285 14.3.2 Threat Model 286 14.4 Our Approach 287 14.4.1 Overview 287 14.4.2 Detection Schemes 289 14.4.2.1 Statistical Anomaly-Based Detection 289 14.4.2.2 Machine Learning-Based Detection 290 14.4.2.3 Sequential Hypothesis Testing-Based Detection 291 14.5 Performance Evaluation 292 14.5.1 Evaluation Setup 292 14.5.2 Evaluation Results 294 14.6 Extension 297 14.7 Conclusion 298 References 298 15 Data Security and Privacy in Cyber-Physical Systems for Healthcare 305Aida Cauševic, Hossein Fotouhi and Kristina Lundqvist 15.1 Introduction 305 15.2 Medical Cyber-Physical Systems 306 15.2.1 Communication withinWBANs 307 15.2.1.1 Network Topology 307 15.2.1.2 Interference inWBANs 308 15.2.1.3 Challenges with LPWNs inWBANs 308 15.2.1.4 Feedback Control inWBANs 308 15.2.1.5 Radio Technologies 309 15.2.2 ExistingWBAN-Based Health Monitoring Systems 310 15.3 Data Security and Privacy Issues and Challenges inWBANs 312 15.3.1 Data Security and PrivacyThreats and Attacks 314 15.4 Existing Security and Privacy Solutions inWBAN 314 15.4.1 Academic Contributions 315 15.4.1.1 Biometric Solutions 315 15.4.1.2 Cryptographic Solutions 316 15.4.1.3 Solutions on ImplantableMedical Devices 318 15.4.2 Existing Commercial Solutions 319 15.5 Conclusion 320 References 320 16 Cyber Security of Smart Buildings 327SteffenWendzel, Jernej Tonejc, Jaspreet Kaur and Alexandra Kobekova 16.1 What Is a Smart Building? 327 16.1.1 Definition of the Term 327 16.1.2 The Design and the Relevant Components of a Smart Building 328 16.1.3 Historical Development of Building Automation Systems 330 16.1.4 The Role of Smart Buildings in Smart Cities 330 16.1.5 Known Cases of Attacks on Smart Buildings 331 16.2 Communication Protocols for Smart Buildings 332 16.2.1 KNX/EIB 333 16.2.2 BACnet 335 16.2.3 ZigBee 336 16.2.4 EnOcean 338 16.2.5 Other Protocols 339 16.2.6 Interoperability and Interconnectivity 339 16.3 Attacks 340 16.3.1 How Can Buildings Be Attacked? 340 16.3.2 Implications for the Privacy of Inhabitants and Users 340 16.3.3 Reasons for Insecure Buildings 341 16.4 Solutions to Protect Smart Buildings 342 16.4.1 Raising Security Awareness and Developing Security Know-How 342 16.4.2 Physical Access Control 343 16.4.3 Hardening Automation Systems 343 16.4.3.1 Secure Coding 343 16.4.3.2 Operating System Hardening 343 16.4.3.3 Patching 344 16.4.4 Network-Level Protection 344 16.4.4.1 Firewalls 345 16.4.4.2 Monitoring and Intrusion Detection Systems 345 16.4.4.3 Separation of Networks 345 16.4.5 Responsibility Matrix 345 16.5 Recent Trends in Smart Building Security Research 346 16.5.1 Visualization 346 16.5.2 Network Security 346 16.5.2.1 Traffic Normalization 346 16.5.2.2 Anomaly Detection 346 16.5.2.3 Novel Fuzzing Approaches 347 16.6 Conclusion and Outlook 347 References 348 17 The Internet of Postal Things: Making the Postal Infrastructure Smarter 353Paola Piscioneri, Jessica Raines and Jean Philippe Ducasse 17.1 Introduction 353 17.2 Scoping the Internet of PostalThings 354 17.2.1 The Rationale for an Internet of PostalThings 354 17.2.1.1 A Vast Infrastructure 354 17.2.1.2 Trust as a Critical Brand Attribute 355 17.2.1.3 Operational Experience in Data Collection and Analytics 356 17.2.1.4 Customer Demand for Information 356 17.2.2 Adjusting to a New Business Environment 356 17.2.2.1 Shifting from Unconnected to “Smart” Products and Services 357 17.2.2.2 Shifting from Competing on Price to Competing on Overall Value 357 17.2.2.3 Shifting from Industries to Ecosystems 357 17.2.2.4 Shifting fromWorkforce Replacement to Human-Centered Automation 357 17.3 Identifying Internet of Postal Things Applications 358 17.3.1 Transportation and Logistics 358 17.3.1.1 Predictive Maintenance 359 17.3.1.2 Fuel Management 359 17.3.1.3 Usage-Based Insurance 360 17.3.1.4 Driverless Vehicles 360 17.3.1.5 Load Optimization 360 17.3.1.6 Real-Time Dynamic Routing 360 17.3.1.7 Collaborative Last Mile Logistics 361 17.3.2 Enhanced Mail and Parcel Services: The Connected Mailbox 361 17.3.2.1 Concept and Benefits 362 17.3.2.2 The Smart Mailbox as a Potential Source of New Revenue 363 17.3.3 The Internet ofThings in Postal Buildings 364 17.3.3.1 Optimizing Energy Costs 364 17.3.3.2 The Smarter Post Office 365 17.3.4 Neighborhood Services 365 17.3.4.1 Smart Cities Need Local Partners 365 17.3.4.2 Carriers as Neighborhood Logistics Managers 366 17.3.5 Summarizing the Dollar Value of IoPT Applications 367 17.4 The Future of IoPT 367 17.4.1 IoPT Development Stages 367 17.4.2 Implementation Challenges 368 17.4.3 Building a Successful Platform Strategy 371 17.5 Conclusion 371 References 372 18 Security and Privacy Issues in the Internet of Cows 375Amber Adams-Progar, Glenn A. Fink, ElyWalker and Don Llewellyn 18.1 Precision Livestock Farming 375 18.1.1 Impact on Humans 376 18.1.1.1 Labor andWorkforce Effects 377 18.1.1.2 Food Quality and Provenance 377 18.1.1.3 Transparency and Remote Management 378 18.1.2 Impact on Animals 379 18.1.2.1 Estrus Monitoring 379 18.1.2.2 Rumen Health 380 18.1.2.3 Other Bovine Health Conditions 381 18.1.3 Impact on the Environment 382 18.1.4 Future Directions for IoT Solutions 383 18.2 Security and Privacy of IoT in Agriculture 384 18.2.1 Cyber-Physical System Vulnerabilities 385 18.2.2 Threat Models 386 18.2.2.1 Threat: Misuse of Video Data 386 18.2.2.2 Threat: Misuse of Research Data 387 18.2.2.3 Threat: Misuse of Provenance Data 387 18.2.2.4 Threat: Data Leakage via Leased Equipment and Software 388 18.2.2.5 Threat: Political Action and Terrorism 389 18.2.3 Recommendations for IoT Security and Privacy in Agriculture 390 18.2.3.1 Data Confidentiality 391 18.2.3.2 Data Integrity 393 18.2.3.3 System Availability 393 18.2.3.4 System Safety 393 18.3 Conclusion 395 References 395 19 Admission Control-Based Load Protection in the Smart Grid 399Paul Moulema, SriharshaMallapuram,Wei Yu, David Griffith, Nada Golmie and David Su 19.1 Introduction 399 19.2 RelatedWork 401 19.3 Our Approach 402 19.3.1 Load Admission Control 403 19.3.2 Load Shedding Techniques 404 19.3.2.1 Load-Size-Based Shedding – Smallest Load First: 405 19.3.2.2 Load-Size-Based Shedding – Largest Load First: 406 19.3.2.3 Priority-Based Load Shedding: 407 19.3.2.4 Fair Priority-Based Load Shedding: 408 19.3.3 Simulation Scenarios 410 19.4 Performance Evaluation 411 19.4.1 Scenario 1: Normal Operation 411 19.4.2 Scenario 2: Brutal Admission Control 413 19.4.3 Scenario 3: Load-Size-Based Admission Control 413 19.4.4 Scenario 4: Priority-Based Admission Control 416 19.4.5 Scenario 5: Fair Priority-Based Admission Control 417 19.5 Conclusion 419 References 419 Editor Biographies 423 Index 427

Read more less

Book SynopsisThe first comprehensive guide to the design and implementation of security in 5G wireless networks and devices Security models for 3G and 4G networks based on Universal SIM cards worked very well. But they are not fully applicable to the unique security requirements of 5G networks. 5G will face additional challenges due to increased user privacy concerns, new trust and service models and requirements to support IoT and mission-critical applications. While multiple books already exist on 5G, this is the first to focus exclusively on security for the emerging 5G ecosystem. 5G networks are not only expected to be faster, but provide a backbone for many new services, such as IoT and the Industrial Internet. Those services will provide connectivity for everything from autonomous cars and UAVs to remote health monitoring through body-attached sensors, smart logistics through item tracking to remote diagnostics and preventive maintenance of equipment. Most services will be integrated with Table of ContentsThe Editors xvii About the Contributors xxi Foreword xxxiii Preface xxxv Acknowledgements xli Part I 5G Security Overview 1 1 Evolution of Cellular Systems 3Shahriar Shahabuddin, Sadiqur Rahaman, Faisal Rehman, Ijaz Ahmad, and Zaheer Khan 1.1 Introduction 3 1.2 Early Development 4 1.3 First Generation Cellular Systems 6 1.3.1 Advanced Mobile Phone Service 7 1.3.2 Security in 1G 7 1.4 Second Generation Cellular Systems 8 1.4.1 Global System for Mobile Communications 8 1.4.2 GSM Network Architecture 9 1.4.3 Code Division Multiple Access 10 1.4.4 Security in 2G 10 1.4.5 Security in GSM 11 1.4.5.1 IMSI 11 1.4.5.2 Ki 12 1.4.5.3 A3 Algorithm 12 1.4.5.4 A8 Algorithm 13 1.4.5.5 COMP128 14 1.4.5.6 A5 Algorithm 14 1.4.6 Security in IS]95 14 1.5 Third Generation Cellular Systems 15 1.5.1 CDMA 2000 15 1.5.2 UMTS WCDMA 15 1.5.3 UMTS Network Architecture 16 1.5.4 HSPA 17 1.5.5 Security in 3G 17 1.5.6 Security in CDMA2000 17 1.5.7 Security in UMTS 18 1.6 Cellular Systems beyond 3G 20 1.6.1 HSPA+ 20 1.6.2 Mobile WiMAX 20 1.6.3 LTE 21 1.6.3.1 Orthogonal Frequency Division Multiplexing (OFDM) 21 1.6.3.2 SC]FDE and SC]FDMA 21 1.6.3.3 Multi]antenna Technique 21 1.6.4 LTE Network Architecture 21 1.7 Fourth Generation Cellular Systems 22 1.7.1 Key Technologies of 4G 23 1.7.1.1 Enhanced MINO 23 1.7.1.2 Cooperative Multipoint Transmission and Reception for LTE]Advanced 23 1.7.1.3 Spectrum and Bandwidth Management 24 1.7.1.4 Carrier Aggregation 24 1.7.1.5 Relays 24 1.7.2 Network Architecture 24 1.7.3 Beyond 3G and 4G Cellular Systems Security 25 1.7.4 LTE Security Model 26 1.7.5 Security in WiMAX 26 1.8 Conclusion 27 References 28 2 5G Mobile Networks: Requirements, Enabling Technologies, and Research Activities 31Van]Giang Nguyen, Anna Brunstrom, Karl]Johan Grinnemo, and Javid Taheri 2.1 Introduction 31 2.1.1 What is 5G? 31 2.1.1.1 From a System Architecture Perspective 32 2.1.1.2 From the Spectrum Perspective 32 2.1.1.3 From a User and Customer Perspective 32 2.1.2 Typical Use Cases 32 2.2 5G Requirements 33 2.2.1 High Data Rate and Ultra Low Latency 34 2.2.2 Massive Connectivity and Seamless Mobility 35 2.2.3 Reliability and High Availability 35 2.2.4 Flexibility and Programmability 36 2.2.5 Energy, Cost and Spectrum Efficiency 36 2.2.6 Security and Privacy 36 2.3 5G Enabling Technologies 37 2.3.1 5G Radio Access Network 38 2.3.1.1 mmWave Communication 38 2.3.1.2 Massive MIMO 38 2.3.1.3 Ultra]Dense Small Cells 39 2.3.1.4 M2M and D2D Communications 40 2.3.1.5 Cloud]based Radio Access Network 42 2.3.1.6 Mobile Edge and Fog Computing 42 2.3.2 5G Mobile Core Network 44 2.3.2.1 Software Defined Networking 44 2.3.2.2 Network Function Virtualization 44 2.3.2.3 Cloud Computing 46 2.3.3 G End]to]End System 46 2.3.3.1 Network Slicing 46 2.3.3.2 Management and Orchestration 47 2.4 5G Standardization Activities 48 2.4.1 ITU Activities 48 2.4.1.1 ITU]R 49 2.4.1.2 ITU]T 49 2.4.2 3GPP Activities 49 2.4.2.1 Pre]5G Phase 49 2.4.2.2 5G Phase I 50 2.4.2.3 5G Phase II 50 2.4.3 ETSI Activities 50 2.4.4 IEEE Activities 51 2.4.5 IETF Activities 52 2.5 5G Research Communities 52 2.5.1 European 5G Related Activities 52 2.5.1.1 5G Research in EU FP7 52 2.5.1.2 5G Research in EU H2020 52 2.5.1.3 5G Research in Celtic]Plus 53 2.5.2 Asian 5G Related Activities 53 2.5.2.1 South Korea: 5G Forum 53 2.5.2.2 Japan: 5GMF Forum 54 2.5.2.3 China: IMT]2020 5G Promotion Group 54 2.5.3 American 5G Related Activities 54 2.6 Conclusion 55 2.7 Acknowledgement 55 References 55 3 Mobile Networks Security Landscape 59Ahmed Bux Abro 3.1 Introduction 59 3.2 Mobile Networks Security Landscape 59 3.2.1 Security Threats and Protection for 1G 61 3.2.2 Security Threats and Protection for 2G 61 3.2.3 Security Threats and Protection for 3G 63 3.2.4 Security Threats and Protection for 4G 63 3.2.4.1 LTE UE (User Equipment) Domain Security 64 3.2.4.2 LTE (Remote Access Network) Domain Security 65 3.2.4.3 LTE Core Network Domain Security 65 3.2.4.4 Security Threat Analysis for 4G 65 3.2.5 Security Threats and Protection for 5G 66 3.2.5.1 Next Generation Threat Landscape for 5G 68 3.2.5.2 IoT Threat Landscape 68 3.2.5.3 5G Evolved Security Model 68 3.2.5.4 5G Security Threat Analysis 69 3.3 Mobile Security Lifecycle Functions 70 3.3.1 Secure Device Management 71 3.3.2 Mobile OS and App Patch Management 71 3.3.3 Security Threat Analysis and Assessment 71 3.3.4 Security Monitoring 72 3.4 Conclusion 73 References 73 4 Design Principles for 5G Security 75Ijaz Ahmad, Madhusanka Liyanage, Shahriar Shahabuddin, Mika Ylianttila, and Andrei Gurtov 4.1 Introduction 75 4.2 Overviews of Security Recommendations and Challenges 76 4.2.1 Security Recommendations by ITU]T 77 4.2.2 Security Threats and Recommendations by NGMN 78 4.2.3 Other Security Challenges 79 4.2.3.1 Security Challenges in the Access Network 79 4.2.3.2 DoS Attacks 79 4.2.3.3 Security Challenges in the Control Layer or Core Network 80 4.3 Novel Technologies for 5G Security 81 4.3.1 5G Security Leveraging NFV 82 4.3.2 Network Security Leveraging SDN 83 4.3.3 Security Challenges in SDN 84 4.3.3.1 Application Layer 84 4.3.3.2 Controller Layer 85 4.3.3.3 Infrastructure Layer 86 4.3.4 Security Solutions for SDN 86 4.3.4.1 Application Plane Security 86 4.3.4.2 Control Plane Security 87 4.3.4.3 Data Plane Security Solutions 87 4.4 Security in SDN]based Mobile Networks 88 4.4.1 Data Link Security 88 4.4.2 Control Channels Security 89 4.4.3 Traffic Monitoring 91 4.4.4 Access Control 91 4.4.5 Network Resilience 91 4.4.6 Security Systems and Firewalls 92 4.4.7 Network Security Automation 92 4.5 Conclusions and Future Directions 94 4.6 Acknowledgement 95 References 95 5 Cyber Security Business Models in 5G 99Julius Francis Gomes, Marika Iivari, Petri Ahokangas, Lauri Isotalo, Bengt Sahlin, and Jan Melén 5.1 Introduction 99 5.2 The Context of Cyber Security Businesses 100 5.2.1 Types of Cyber Threat 101 5.2.2 The Cost of Cyber]Attacks 102 5.3 The Business Model Approach 103 5.3.1 The 4C Typology of the ICT Business Model 104 5.3.2 Business Models in the Context of Cyber Preparedness 105 5.4 The Business Case of Cyber Security in the Era of 5G 106 5.4.1 The Users and Issues of Cyber Security in 5G 108 5.4.2 Scenarios for 5G Security Provisioning 109 5.4.3 Delivering Cyber Security in 5G 110 5.5 Business Model Options in 5G Cyber Security 112 5.6 Acknowledgment 114 References 114 Part II 5G Network Security 117 6 Physical Layer Security 119Simone Soderi, Lorenzo Mucchi, Matti Hämäläinen, Alessandro Piva, and Jari Iinatti 6.1 Introduction 119 6.1.1 Physical Layer Security in 5G Networks 120 6.1.2 Related Work 121 6.1.3 Motivation 121 6.2 WBPLSec System Model 123 6.2.1 Transmitter 124 6.2.2 Jamming Receiver 126 6.2.3 Secrecy Metrics 126 6.2.4 Secrecy Capacity of WBPLSec 128 6.2.5 Secrecy Capacity of iJAM 129 6.3 Outage Probability of Secrecy Capacity of a Jamming Receiver 131 6.3.1 Simulation Scenario for Secrecy Capacity 134 6.4 WBPLSec Applied to 5G networks 136 6.5 Conclusions 138 References 139 7 5G]WLAN Security 143Satish Anamalamudi, Abdur Rashid Sangi, Mohammed Alkatheiri, Fahad T. Bin Muhaya, and Chang Liu 7.1 Chapter Overview 143 7.2 Introduction to WiFi]5G Networks Interoperability 143 7.2.1 WiFi (Wireless Local Area Network) 143 7.2.2 Interoperability of WiFi with 5G Networks 144 7.2.3 WiFi Security 144 7.3 Overview of Network Architecture for WiFi]5G Networks Interoperability 146 7.3.1 MAC Layer 147 7.3.2 Network Layer 147 7.3.3 Transport Layer 148 7.3.4 Application Layer 149 7.4 5G]WiFi Security Challenges 150 7.4.1 Security Challenges with Respect to a Large Number of Device Connectivity 151 7.4.2 Security Challenges in 5G Networks and WiFi 151 7.5 Security Consideration for Architectural Design of WiFi]5G Networks 156 7.5.1 User and Device Identity Confidentiality 156 7.5.2 Integrity 156 7.5.3 Mutual Authentication and Key Management 157 7.6 LiFi Networks 158 7.7 Introduction to LiFi]5G Networks Interoperability 159 7.8 5G]LiFi Security Challenges 160 7.8.1 Security Challenges with Respect to a Large Number of Device Connectivity 160 7.8.2 Security Challenges in 5G Networks and LiFi 160 7.9 Security Consideration for Architectural Design of LiFi]5G Networks 160 7.10 Conclusion and Future Work 161 References 161 8 Safety of 5G Network Physical Infrastructures 165Rui Travanca and João André 8.1 Introduction 165 8.2 Historical Development 168 8.2.1 Typology 168 8.2.2 Codes 170 8.2.3 Outlook 170 8.3 Structural Design Philosophy 171 8.3.1 Basis 171 8.3.2 Actions 174 8.3.3 Structural Analysis 179 8.3.4 Steel Design Verifications 180 8.3.4.1 Ultimate Limit States 180 8.3.4.2 Serviceability Limit States 181 8.4 Survey of Problems 181 8.4.1 General 181 8.4.2 Design Failures 182 8.4.3 Maintenance Failures 183 8.4.4 Vandalism or Terrorism Failures 186 8.5 Opportunities and Recommendations 188 8.6 Acknowledgement 190 References 191 9 Customer Edge Switching: A Security Framework for 5G 195Hammad Kabir, Raimo Kantola, and Jesus Llorente Santos 9.1 Introduction 195 9.2 State]of]the]art in Mobile Networks Security 197 9.2.1 Mobile Network Challenges and Principles of Security Framework 200 9.2.2 Trust Domains and Trust Processing 202 9.3 CES Security Framework 203 9.3.1 DNS to Initiate Communication 205 9.3.2 CETP Policy]based Communication 206 9.3.3 Policy Architecture 208 9.3.4 CES Security Mechanisms 209 9.3.5 Realm Gateway 210 9.3.6 RGW Security Mechanisms 211 9.3.6.1 Name Server Classification and Allocation Model 212 9.3.6.2 Preventing DNS Abuse 212 9.3.6.3 Bot]Detection Algorithm 213 9.3.6.4 TCP]Splice 213 9.4 Evaluation of CES Security 213 9.4.1 Evaluating the CETP Policy]based Communication 214 9.4.1.1 Security Testing 216 9.4.1.2 Outcomes of the Security Testing 216 9.4.2 Evaluation of RGW Security 217 9.5 Deployment in 5G Networks 222 9.5.1 Use Case 1: Mobile Broadband 224 9.5.1.1 Deployment and Operations 224 9.5.1.2 Security Benefits 224 9.5.1.3 Scalability 225 9.5.1.4 Reliability 225 9.5.2 Use Case 2: Corporate Gateway 225 9.5.2.1 Deployment and Operations 225 9.5.2.2 Security Benefits 226 9.5.2.3 Scalability 226 9.5.2.4 Reliability 226 9.5.3 Use Case 3: National CERT Centric Trust Domain 226 9.5.3.1 Deployment and Operations 226 9.5.3.2 Security Benefits 227 9.5.3.3 Scalability 227 9.5.3.4 Reliability 227 9.5.4 Use Case 4: Industrial Internet for Road Traffic and Transport 227 9.5.4.1 Deployment and Operations 227 9.5.4.2 Security Benefits 228 9.5.4.3 Scalability 228 9.5.4.4 Reliability 228 9.6 Conclusion 228 References 230 10 Software Defined Security Monitoring in 5G Networks 231Madhusanka Liyanage, Ijaz Ahmad, Jude Okwuibe, Edgardo Montes de Oca, Mai Hoang Long, Oscar Lopez Perez, and Mikel Uriarte Itzazelaia 10.1 Introduction 231 10.2 Existing Monitoring Techniques 232 10.3 Limitations on Current Monitoring Techniques 233 10.4 Use of Monitoring in 5G 234 10.5 Software]Defined Monitoring Architecture 235 10.6 Expected Advantages of Software Defined Monitoring 238 10.7 Expected Challenges in Software Defined Monitoring 240 10.8 Conclusion 242 References 243 Part III 5G Device and User Security 245 11 IoT Security 247Mehrnoosh Monshizadeh, and Vikramajeet Khatri 11.1 Introduction 247 11.2 Related Work 248 11.3 Literature Overview and Research Motivation 249 11.3.1 IoT Devices, Services and Attacks on Them 250 11.3.2 Research Motivation 253 11.4 Distributed Security Platform 254 11.4.1 Robot Data Classification 254 11.4.2 Robot Attack Classification 255 11.4.3 Robot Security Platform 256 11.4.3.1 Robot Section 257 11.4.3.2 Mobile Network Section 257 11.5 Mobile Cloud Robot Security Scenarios 259 11.5.1 Robot with SIMcard 259 11.5.2 SIMless Robot 260 11.5.3 Robot Attack 263 11.5.4 Robot Communication 263 11.6 Conclusion 263 References 265 12 User Privacy, Identity and Trust 267Tanesh Kumar, Madhusanka Liyanage, Ijaz Ahmad, An Braeken, and Mika Ylianttila 12.1 Introduction 267 12.2 Background 268 12.3 User Privacy 269 12.3.1 Data Privacy 269 12.3.2 Location Privacy 271 12.3.3 Identity Privacy 272 12.4 Identity Management 273 12.5 Trust Models 274 12.6 Discussion 277 12.7 Conclusion 278 References 279 13 5G Positioning: Security and Privacy Aspects 281Elena Simona Lohan, Anette Alén]Savikko, Liang Chen, Kimmo Järvinen, Helena Leppäkoski, Heidi Kuusniemi, and Päivi Korpisaari 13.1 Introduction 281 13.2 Outdoor versus Indoor Positioning Technologies 283 13.3 Passive versus Active Positioning 283 13.4 Brief Overview of 5G Positioning Mechanisms 285 13.5 Survey of Security Threats and Privacy Issues in 5G Positioning 291 13.5.1 Security Threats in 5G Positioning 291 13.5.1.1 Security Threats Affecting Several or All Players 291 13.5.1.2 Security Threats Affecting LISP 292 13.5.1.3 Security Threats Affecting LBSP 293 13.5.1.4 Security Threats Affecting the 5G User Device or LIC 293 13.6 Main Privacy Concerns 294 13.7 Passive versus Active Positioning Concepts 295 13.8 Physical] Layer Based Security Enhancements Mechanisms for Positioning in 5G 296 13.8.1 Reliability Monitoring and Outlier Detection Mechanisms 296 13.8.2 Detection, Location and Estimation of Interference Signals 297 13.8.3 Backup Systems 298 13.9 Enhancing Trustworthiness 299 13.10 Cryptographic Techniques for Security and Privacy of Positioning 299 13.10.1 Cryptographic Authentication in Positioning 300 13.10.2 Cryptographic Distance]Bounding 301 13.10.3 Cryptographic Techniques for Privacy]Preserving Location]based Services 303 13.11 Legislation on User Location Privacy in 5G 304 13.11.1 EU Policy and Legal Framework 304 13.11.2 Legal Aspects Related to the Processing of Location Data 306 13.11.3 Privacy Protection by Design and Default 306 13.11.4 Security Protection 307 13.11.5 A Closer Look at the e]Privacy Directive 307 13.11.6 Summary of EU Legal Instruments 308 13.11.7 International Issues 308 13.11.8 Challenges and Future Scenarios in Legal Frameworks and Policy 309 13.12 Landscape of the European and International Projects related to Secure Positioning 311 References 312 Part IV 5G Cloud and Virtual Network Security 321 14 Mobile Virtual Network Operators (MVNO) Security 323Mehrnoosh Monshizadeh and Vikramajeet Khatri 14.1 Introduction 323 14.2 Related Work 324 14.3 Cloudification of the Network Operators 325 14.4 MVNO Security 326 14.4.1 Data Security in TaaS 327 14.4.2 Hypervisor and VM Security in TaaS 328 14.4.2.1 SDN Security in TaaS 329 14.4.2.2 NFV Security in TaaS 331 14.4.2.3 OPNFV Security 332 14.4.3 Application Security in TaaS 333 14.4.4 Summary 334 14.4.5 MVNO Security Benchmark 335 14.5 TaaS Deployment Security 338 14.5.1 IaaS 338 14.5.2 PaaS 340 14.5.3 SaaS 340 14.6 Future Directions 340 14.7 Conclusion 341 References 342 15 NFV and NFV]based Security Services 347Wenjing Chu 15.1 Introduction 347 15.2 5G, NFV and Security 347 15.3 A Brief Introduction to NFV 348 15.4 NFV, SDN, and a Telco Cloud 351 15.5 Common NFV Drivers 353 15.5.1 Technology Curve 353 15.5.2 Opportunity Cost and Competitive Landscape 353 15.5.3 Horizontal Network Slicing 354 15.5.4 Multi]Tenancy 354 15.5.5 Rapid Service Delivery 354 15.5.6 XaaS Models 354 15.5.7 One Cloud 355 15.6 NFV Security: Challenges and Opportunities 355 15.6.1 VNF Security Lifecycle and Trust 355 15.6.2 VNF Security in Operation 358 15.6.3 Multi]Tenancy and XaaS 359 15.6.4 OPNFV and Openstack: Open Source Projects for NFV 360 15.7 NFV]based Security Services 364 15.7.1 NFV]based Network Security 365 15.7.1.1 Virtual Security Appliances 365 15.7.1.2 Distributed Network Security Services 366 15.7.1.3 Network Security as a Service 366 15.7.2 Policy]based Security Services 366 15.7.2.1 Group]based Policy 367 15.7.2.2 Openstack Congress 368 15.7.3 Machine Learning for NFV]based Security Services 369 15.8 Conclusions 370 References 370 16 Cloud and MEC Security 373Jude Okwuibe, Madhusanka Liyanage, Ijaz Ahmed, and Mika Ylianttila 16.1 Introduction 373 16.2 Cloud Computing in 5G Networks 374 16.2.1 Overview and History of Cloud Computing 375 16.2.2 Cloud Computing Architecture 376 16.2.3 Cloud Deployment Models 377 16.2.4 Cloud Service Models 378 16.2.5 5G Cloud Computing Architecture 379 16.2.6 Use Cases/Scenarios of Cloud Computing in 5G 380 16.3 MEC in 5G Networks 381 16.3.1 Overview of MEC Computing 381 16.3.2 MEC in 5G 383 16.3.3 Use Cases of MEC Computing in 5G 384 16.4 Security Challenges in 5G Cloud 385 16.4.1 Virtualization Security 385 16.4.2 Cyber]Physical System (CPS) Security 386 16.4.3 Secure and Private Data Computation 386 16.4.4 Cloud Intrusion 387 16.4.5 Access Control 387 16.5 Security Challenges in 5G MEC 388 16.5.1 Denial of Service (DoS) Attack 389 16.5.2 Man]in]the]Middle (MitM) 389 16.5.3 Inconsistent Security Policies 389 16.5.4 VM Manipulation 390 16.5.5 Privacy Leakage 390 16.6 Security Architectures for 5G Cloud and MEC 391 16.6.1 Centralized Security Architectures 391 16.6.2 SDN]based Cloud Security Systems 392 16.7 5GMEC, Cloud Security Research and Standardizations 392 16.8 Conclusions 394 References 394 17 Regulatory Impact on 5G Security and Privacy 399Jukka Salo and Madhusanka Liyanage 17.1 Introduction 399 17.2 Regulatory Objectives for Security and Privacy 401 17.2.1 Generic Objectives 401 17.3 Legal Framework for Security and Privacy 402 17.3.1 General Framework 402 17.3.2 Legal Framework for Security and Privacy in Cloud Computing 403 17.3.3 Legal Framework for Security and Privacy in Software Defined Networking and Network Function Virtualization 405 17.4 Security and Privacy Issues in New 5G Technologies 405 17.4.1 Security and Privacy Issues in Cloud Computing 405 17.4.2 Security and Privacy Issues in Network Functions Virtualization 407 17.4.3 Security and Privacy Issues in Software Defined Networking (SDN) 409 17.4.4 Summary of Security and Privacy Issues in the Context of Technologies under Study (Clouds, NFV, SDN) 410 17.5 Relevance Assessment of Security and Privacy Issues for Regulation 411 17.6 Analysis of Potential Regulatory Approaches 412 17.7 Summary of Issues and Impact of New Technologies on Security and Privacy Regulation 413 References 417 Index

Read more less

Book SynopsisIntensively hands-on training for real-world network forensics Network Forensics provides a uniquely practical guide for IT and law enforcement professionals seeking a deeper understanding of cybersecurity.Table of ContentsIntroduction xxi 1 Introduction to Network Forensics 1 What Is Forensics? 3 Handling Evidence 4 Cryptographic Hashes 5 Chain of Custody 8 Incident Response 8 The Need for Network Forensic Practitioners 10 Summary 11 References 12 2 Networking Basics 13 Protocols 14 Open Systems Interconnection (OSI) Model 16 TCP/IP Protocol Suite 18 Protocol Data Units 19 Request for Comments 20 Internet Registries 23 Internet Protocol and Addressing 25 Internet Protocol Addresses 28 Internet Control Message Protocol (ICMP) 31 Internet Protocol Version 6 (IPv6) 31 Transmission Control Protocol (TCP) 33 Connection-Oriented Transport 36 User Datagram Protocol (UDP) 38 Connectionless Transport 39 Ports 40 Domain Name System 42 Support Protocols (DHCP) 46 Support Protocols (ARP) 48 Summary 49 References 51 3 Host-Side Artifacts 53 Services 54 Connections 60 Tools 62 netstat 63 nbstat 66 ifconfi g/ipconfi g 68 Sysinternals 69 ntop 73 Task Manager/Resource Monitor 75 ARP 77 /proc Filesystem 78 Summary 79 4 Packet Capture and Analysis 81 Capturing Packets 82 Tcpdump/Tshark 84 Wireshark 89 Taps 91 Port Spanning 93 ARP Spoofi ng 94 Passive Scanning 96 Packet Analysis with Wireshark 98 Packet Decoding 98 Filtering 101 Statistics 102 Following Streams 105 Gathering Files 106 Network Miner 108 Summary 110 5 Attack Types 113 Denial of Service Attacks 114 SYN Floods 115 Malformed Packets 118 UDP Floods 122 Amplifi cation Attacks 124 Distributed Attacks 126 Backscatter 128 Vulnerability Exploits 130 Insider Threats 132 Evasion 134 Application Attacks 136 Summary 140 6 Location Awareness 143 Time Zones 144 Using whois 147 Traceroute 150 Geolocation 153 Location-Based Services 156 WiFi Positioning 157 Summary 158 7 Preparing for Attacks 159 NetFlow 160 Logging 165 Syslog 166 Windows Event Logs 171 Firewall Logs 173 Router and Switch Logs 177 Log Servers and Monitors 178 Antivirus 180 Incident Response Preparation 181 Google Rapid Response 182 Commercial Offerings 182 Security Information and Event Management 183 Summary 185 8 Intrusion Detection Systems 187 Detection Styles 188 Signature-Based 188 Heuristic 189 Host-Based versus Network-Based 190 Snort 191 Suricata and Sagan 201 Bro 203 Tripwire 205 OSSEC 206 Architecture 206 Alerting 207 Summary 208 9 Using Firewall and Application Logs 211 Syslog 212 Centralized Logging 216 Reading Log Messages 220 LogWatch 222 Event Viewer 224 Querying Event Logs 227 Clearing Event Logs 231 Firewall Logs 233 Proxy Logs 236 Web Application Firewall Logs 238 Common Log Format 240 Summary 243 10 Correlating Attacks 245 Time Synchronization 246 Time Zones 246 Network Time Protocol 247 Packet Capture Times 249 Log Aggregation and Management 251 Windows Event Forwarding 251 Syslog 252 Log Management Offerings 254 Timelines 257 Plaso 258 PacketTotal 259 Wireshark 261 Security Information and Event Management 262 Summary 263 11 Network Scanning 265 Port Scanning 266 Operating System Analysis 271 Scripts 273 Banner Grabbing 275 Ping Sweeps 278 Vulnerability Scanning 280 Port Knocking 285 Tunneling 286 Passive Data Gathering 287 Summary 289 12 Final Considerations 291 Encryption 292 Keys 293 Symmetric 294 Asymmetric 295 Hybrid 296 SSL/TLS 297 Cloud Computing 306 Infrastructure as a Service 306 Storage as a Service 309 Software as a Service 310 Other Factors 311 The Onion Router (TOR) 314 Summary 317 Index 319

Read more less

Book SynopsisThe technology controlling United States nuclear weapons predates the Internet. Updating the technology for the digital era is necessary, but it comes with the risk that anything digital can be hacked. Moreover, using new systems for both nuclear and non-nuclear operations will lead to levels of nuclear risk hardly imagined before. This book is the first to confront these risks comprehensively. With Cyber Threats and Nuclear Weapons, Herbert Lin provides a clear-eyed breakdown of the cyber risks to the U.S. nuclear enterprise. Featuring a series of scenarios that clarify the intersection of cyber and nuclear risk, this book guides readers through a little-understood element of the risk profile that government decision-makers should be anticipating. What might have happened if the Cuban Missile Crisis took place in the age of Twitter, with unvetted information swirling around? What if an adversary announced that malware had compromised nuclear systems, clouding the confidence of nuclear decision-makers? Cyber Threats and Nuclear Weapons, the first book to consider cyber risks across the entire nuclear enterprise, concludes with crucial advice on how government can manage the tensions between new nuclear capabilities and increasing cyber risk. This is an invaluable handbook for those ready to confront the unique challenges of cyber nuclear risk.Trade Review"Perhaps the only thing more frightening than nuclear weapons is the thought of those weapons being connected to modern software systems. Herbert Lin, an expert in both realms, has written a sobering, enlightening book that should be required reading for all those thinking about the security of these weapons in the internet age."—Jim Waldo, Former Distinguished Engineer, Sun Labs"Herbert Lin is one of this country's leading experts on nuclear and cyber issues. In this important book, he provides a careful but chilling analysis of the risks we face in efforts to modernize the nuclear enterprise. Cyber Threats and Nuclear Weapons should be read carefully in Washington." —Joseph S. Nye, Jr, Harvard University"In this wide-ranging and well-crafted book, Herbert Lin wisely encapsulates his careful analysis in a series of easy-to-digest observations, with the policy imperatives that flow from them. The result is a guide for policy makers as they cope with the hair-raising prospect of nuclear modernization amidst increasing cyber risk."—Rose Gottemoeller, Former Deputy Secretary General of NATO"Lin's purpose in writing this excellent book is to acknowledge the new and sobering reality that computerization makes nuclear weapons much less secure than readers might assume. Highly recommended."—J. A. Stever, CHOICE June 2022"an informative read for novices and experts alike."—Melissa K. Griffith, Survival: Global Politics and StrategyTable of Contents1. Introduction and Background 2. The Cyber-Nuclear Connection 3. The U.S. Nuclear Enterprise 4. Cybersecurity Lessons for Nuclear Modernization 5. Cyber Risks in Selected Nuclear Scenarios 6. Designing the Cyber-Nuclear Future: Observations and Imperatives 7. Moving Forward

Read more less

Book SynopsisAs society rushes to digitize sensitive information and services, it is imperative to adopt adequate security protections. However, such protections fundamentally conflict with the benefits we expect from commodity computers. In other words, consumers and businesses value commodity computers because they provide good performance and an abundance of features at relatively low costs. Meanwhile, attempts to build secure systems from the ground up typically abandon such goals, and hence are seldomadopted.In this book, I argue that we can resolve the tension between security and features by leveraging the trust a user has in one device to enable her to securely use another commodity device or service, without sacrificing the performance and features expected of commodity systems. At a high level, we support this premise by developing techniques to allow a user to employ a small, trusted, portable device to securely learn what code is executing on her local computer. Rather than entrusting her data to the mountain of buggy code likely running on her computer, we construct an on-demand secure execution environment which can perform security-sensitive tasks and handle private data in complete isolation from all other software (and most hardware) on the system. Meanwhile, non-security-sensitive software retains the same abundance of features and performance it enjoys today.Having established an environment for secure code execution on an individual computer, we then show how to extend trust in this environment to network elements in a secure and efficient manner. This allows us to reexamine the design of network protocols and defenses, since we can now execute code on endhosts and trust the results within the network. Lastly, we extend the user's trust one more step to encompass computations performed on a remote host (e.g., in the cloud). We design, analyze, and prove secure a protocol that allows a user to outsource arbitrary computations to commodity computers run by an untrusted remote party (or parties) who may subject the computers to both software and hardware attacks. Our protocol guarantees that the user can both verify that the results returned are indeed the correct results of the specified computations on the inputs provided, and protect the secrecy of both the inputs and outputs of the computations. These guarantees are provided in a non-interactive, asymptotically optimal (with respect to CPU and bandwidth) manner.Thus, extending a user's trust, via software, hardware, and cryptographic techniques, allows us to provide strong security protections for both local and remote computations on sensitive data, while still preserving the performance and features of commodity computers.

Read more less

Book SynopsisThis book provides a practical overview of industrial control systems cybersecurity from governance through design and implementation to operational support. It is for anyone involved in industrial control systems cybersecurity, including asset owners, vendors, system integrators, and consultants, regardless of their level of technical expertise.The term industrial control systems is very broad and, in this context, includes any system that is used to monitor or control physical equipment such as building control systems (e.g., heating, ventilation, and air conditioning systems), water treatment plant supervisory control and data acquisition (SCADA) systems, oil and gas distributed control systems (DCSs), and safety instrumented systems (SISs).The author explains each phase of the process of designing, implementing, and maintaining a successful cybersecurity system, as well as the underlying issues that must be addressed. He emphasizes that the key to success is support and participation from everyone—just like successful safety programs.Topics include: The differences between IT cybersecurity and industrial cybersecurity. Creating effective policy for cybersecurity management. How to manage cybersecurity risk through measurement. Standardized design and vendor certification. The pitfalls in managing cybersecurity during project delivery. What we can learn from the safety culture. Safeguarding operational support. Trade ReviewMr. Mustard's book provides a good fundamental knowledge baseline about OT cybersecurity. For those who ask 'what is cybersecurity?' this book will help those understand how it relates to contributing topics such as operations management, risk assessments, and governance."" - Bob Radvanovsky, Critical Infrastructure and Cybersecurity Researcher"For a lot of people, this is going to be a very useful book. This is a really good book for someone in operations who is looking to get involved in OT security. They'll get up to speed quickly and be able to have discussions on OT risk management." - Dale Peterson, CEO of Digital Bond; Founder and Program Chair of the worldwide S4 ICS Cybersecurity Event

Read more less

Book SynopsisModern critical infrastructures can be considered as large scale Cyber Physical Systems (CPS). Therefore, when designing, implementing, and operating systems for Critical Infrastructure Protection (CIP), the boundaries between physical security and cybersecurity are blurred. Emerging systems for Critical Infrastructures Security and Protection must therefore consider integrated approaches that emphasize the interplay between cybersecurity and physical security techniques. Hence, there is a need for a new type of integrated security intelligence i.e., Cyber-Physical Threat Intelligence (CPTI).This book presents novel solutions for integrated Cyber-Physical Threat Intelligence for infrastructures in various sectors, such as Industrial Sites and Plants, Air Transport, Gas, Healthcare, and Finance. The solutions rely on novel methods and technologies, such as integrated modelling for cyber-physical systems, novel reliance indicators, and data driven approaches including BigData analytics and Artificial Intelligence (AI). Some of the presented approaches are sector agnostic i.e., applicable to different sectors with a fair customization effort. Nevertheless, the book presents also peculiar challenges of specific sectors and how they can be addressed. The presented solutions consider the European policy context for Security, Cyber security, and Critical Infrastructure protection, as laid out by the European Commission (EC) to support its Member States to protect and ensure the resilience of their critical infrastructures. Most of the co-authors and contributors are from European Research and Technology Organizations, as well as from European Critical Infrastructure Operators. Hence, the presented solutions respect the European approach to CIP, as reflected in the pillars of the European policy framework. The latter includes for example the Directive on security of network and information systems (NIS Directive), the Directive on protecting European Critical Infrastructures, the General Data Protection Regulation (GDPR), and the Cybersecurity Act Regulation. The sector specific solutions that are described in the book have been developed and validated in the scope of several European Commission (EC) co-funded projects on Critical Infrastructure Protection (CIP), which focus on the listed sectors. Overall, the book illustrates a rich set of systems, technologies, and applications that critical infrastructure operators could consult to shape their future strategies. It also provides a catalogue of CPTI case studies in different sectors, which could be useful for security consultants and practitioners as well.Table of Contents Part I “Securing Critical Infrastructures of Sensitive Industrial Plants and Sites”: • Chapter 1 “InfraStress approach on risk modelling of cascading events with live data for decision support”. • Chapter 2 “Cyber-physical adversarial attacks and countermeasures for deep learning vision systems on critical infrastructures”.• Chapter 3 “Modelling of interdependencies among and InfraStress approach on risk modelling of cascading events with live data for decision support”. • Chapter 4 “Data Visualisation for Situational Awareness in Industrial Critical Infrastructure: an InfraStress Case Study”.• Chapter 5 “Critical Infrastructures, SIPS and Threat Intelligence: legal and ethical aspects of security research”. Part II “Securing Critical Infrastructures in the Water Sector”: • Chapter 6 “Cyber security importance in the water sector and the contribution of the STOP-IT project”.• Chapter 7 “Cyber-Physical security for critical water infrastructures at strategic and tactical level”. • Chapter 8 “Cyber-physical solutions for real-time detection at operational level”. • Chapter 9 “Applying Machine Learning and Deep Learning algorithms for Anomaly Detection in Critical Water Infrastructures”. Part III “Securing Critical Infrastructures for Air Transport”: • Chapter 10 “Security Challenges for Critical Infrastructures in Air Transport”.• Chapter 11 “Toolkit to enhance cyber-physical security of Critical Infrastructures in Air Transport”.• Chapter 12 “Security ontologies as technological enabler for blended threat detection and enhanced systems interoperability”. Part IV “Securing Critical Infrastructures for Gas”: • Chapter 13 “Conceptual Model and CONOPS for Secure and Resilient Gas CI”.• Chapter 14 “High-Level Reference Architecture (HLRA) for Gas Infrastructures Protection”. • Chapter 15 “The SecureGas Key Performance Indicators for resilient gas critical infrastructures”. • Chapter 16 “Communication of Security-related Incident Information to the Authorities and the Population”. Part V “Securing Critical Infrastructures of the Healthcare Sector”: • Chapter 17 “Security monitoring for medical devices”.• Chapter 18 “User Experience models for threat monitoring and security management in healthcare”. • Chapter 19 “Attacking and defending healthcare building automation networks”.• Chapter 20 “An Intuitive Distributed Cyber Situational Awareness Framework Within a Healthcare Environment”. Part VI “Securing Critical Infrastructures in the Finance Sector”: • Chapter 21 “The FINSEC Platform: End-to-End Data-Driven Cyber-Physical Threat Intelligence for Critical Infrastructures in Finance”. • Chapter 22 “Anomaly detection for critical financial infrastructure protection”. Part VII “Critical Infrastructure Protection and Smart Resilience”: • Chapter 23 “Indicator-based assessment of resilience of critical infrastructures: From single indicators to comprehensive “smart” assessment”.

Read more less

Book SynopsisCyber threats are ever increasing. Adversaries are getting more sophisticated and cyber criminals are infiltrating companies in a variety of sectors. In today’s landscape, organizations need to acquire and develop effective security tools and mechanisms – not only to keep up with cyber criminals, but also to stay one step ahead. Cyber-Vigilance and Digital Trust develops cyber security disciplines that serve this double objective, dealing with cyber security threats in a unique way. Specifically, the book reviews recent advances in cyber threat intelligence, trust management and risk analysis, and gives a formal and technical approach based on a data tainting mechanism to avoid data leakage in Android systemsTable of ContentsIntroduction ix Wiem TOUNSI Chapter 1. What Is Cyber Threat Intelligence and How Is It Evolving? 1 Wiem TOUNSI 1.1. Introduction 1 1.2. Background 3 1.2.1. New Generation Threats 3 1.2.2. Analytical Frameworks 6 1.3. Cyber Threat Intelligence 9 1.3.1. Cyber Threat Intelligence Sources 9 1.3.2. Cyber Threat Intelligence Sub-Domains 11 1.3.3. Technical Threat Intelligence (TTI) 13 1.4. Related Work 14 1.5. Technical Threat Intelligence Sharing Problems 16 1.5.1. Benefits of CTI Sharing for Collective Learning 16 1.5.2. Reasons for Not Sharing 17 1.6. Technical Threat Intelligence Limitations 21 1.6.1. Quantity Over Quality 21 1.6.2. IOC-Specific Limitations 22 1.7. Cyber Threat Intelligent Libraries or Platforms 25 1.7.1. Benefits of CTI Libraries Based In the Cloud 26 1.7.2. Reluctance to Use Cloud Services 26 1.8. Discussion 27 1.8.1. Sharing Faster Is Not Sufficient 27 1.8.2. Reducing the Quantity of Threat Feeds 28 1.8.3. Trust to Share Threat Data and to Save Reputation Concerns 30 1.8.4. Standards for CTI Representation and Sharing 31 1.8.5. Cloud-Based CTI Libraries for Collective Knowledge and Immunity 34 1.9. Evaluation of Technical Threat Intelligence Tools 36 1.9.1. Presentation of Selected Tools 37 1.9.2. Comparative Discussion 38 1.10. Conclusion and Future Work 39 1.11. References 40 Chapter 2. Trust Management Systems: A Retrospective Study on Digital Trust 51 Reda YAICH 2.1. Introduction 51 2.2. What Is Trust? 52 2.3. Genesis of Trust Management Systems 54 2.3.1. Access Control Model 54 2.3.2. Identity-Based Access Control 55 2.3.3. Lattice-Based Access Control 57 2.3.4. Role-Based Access Control 58 2.3.5. Organization-Based Access Control 59 2.3.6. Attribute-Based Access Control 61 2.4. Trust Management 62 2.4.1. Definition 62 2.4.2. Trust Management System 64 2.4.3. Foundations 65 2.4.4. Automated Trust Negotiation 70 2.5. Classification of Trust Management Systems 72 2.5.1. Authorization-Based TMSs 73 2.5.2. Automated Trust Negotiation Systems 81 2.6. Trust Management In Cloud Infrastructures 90 2.6.1. Credentials-Based Trust Models 90 2.6.2. SLA-Based Trust Models 90 2.6.3. Feedback-Based Trust Models 91 2.6.4. Prediction-Based Trust Models 92 2.7. Conclusion 93 2.8. References 94 Chapter 3. Risk Analysis Linked to Network Attacks 105 Kamel KAROUI 3.1. Introduction 105 3.2. Risk Theory 107 3.2.1. Risk Analysis Terminology 107 3.2.2. Presentation of the Main Risk Methods 109 3.2.3. Comparison of the Main Methods 116 3.3. Analysis of IS Risk In the Context of IT Networks 120 3.3.1. Setting the Context 120 3.3.2. Risk Assessment 127 3.3.3. Risk Treatment 133 3.3.4. Acceptance of Risks 136 3.3.5. Risk Communication 137 3.3.6. Risk Monitoring 138 3.4. Conclusion 138 3.5. References 138 Chapter 4. Analytical Overview on Secure Information Flow In Android Systems: Protecting Private Data Used By Smartphone Applications 141 Mariem GRAA 4.1. Introduction 142 4.2. Information Flow 143 4.2.1. Explicit Flows 143 4.2.2. Implicit Flows 143 4.2.3. Covert Channels 144 4.3. Data Tainting 145 4.3.1. Interpreter Approach 145 4.3.2. Architecture-Based Approach 146 4.3.3. Static Taint Analysis 146 4.3.4. Dynamic Taint Analysis 147 4.4. Protecting Private Data In Android Systems 149 4.4.1. Access Control Approach 149 4.4.2. Preventing Private Data Leakage Approach 153 4.4.3. Native Libraries Approaches 157 4.5. Detecting Control Flow 160 4.5.1. Technical Control Flow Approaches 160 4.5.2. Formal Control Flow Approaches 162 4.6. Handling Explicit and Control Flows In Java and Native Android Appsʼ Code 164 4.6.1. Formal Specification of the Under-Tainting Problem 164 4.6.2. Formal Under-Tainting Solution 166 4.6.3. System Design 175 4.6.4. Handling Explicit and Control Flows In Java Android Appsʼ Code 176 4.6.5. Handling Explicit and Control Flows In Native Android Appsʼ Code 180 4.6.6. Evaluation 184 4.6.7. Discussion 187 4.7. Protection Against Code Obfuscation Attacks Based on Control Dependencies In Android Systems 188 4.7.1. Code Obfuscation Definition 188 4.7.2. Types of Program Obfuscations 189 4.7.3. Obfuscation Techniques 189 4.7.4. Code Obfuscation In Android System 190 4.7.5. Attack Model 191 4.7.6. Code Obfuscation Attacks 192 4.7.7. Detection of Code Obfuscation Attacks 194 4.7.8. Obfuscation Code Attack Tests 195 4.8. Detection of Side Channel Attacks Based on Data Tainting In Android Systems 198 4.8.1. Target Threat Model 199 4.8.2. Side Channel Attacks 200 4.8.3. Propagation Rules for Detecting Side Channel Attacks 203 4.8.4. Implementation 205 4.8.5. Evaluation 207 4.9. Tracking Information Flow In Android Systems Approaches Comparison: Summary 210 4.10. Conclusion and Highlights 215 4.11. References 216 List of Authors 227 Index 229

Read more less

Book SynopsisDeveloped in collaboration with a training and certification team from Cisco, Computer Network Security is an exploration of the state-of-the-art and good practices in setting up a secure computer system. Concrete examples are offered in each chapter, to help the reader to master the concept and apply the security configuration. This book is intended for students preparing for the CCNA Security Exam (210-260 IINS) ? whether at professional training centers, technical faculties, or training centers associated with the �Cisco Academy� program. It is also relevant to anyone interested in computer security, be they professionals in this field or users who want to identify the threats and vulnerabilities of a network to ensure better security.Table of ContentsPreface xi Introduction xiii Chapter 1. Fundamentals of Network Security 1 1.1. Introduction 1 1.1.1. The main objectives of securing a network 2 1.1.2. Information security terminology 2 1.2. Types of network security 4 1.2.1. Physical security 4 1.2.2. Logical security 4 1.2.3. Administrative security 5 1.3. The main risks related to the logical security of the network 5 1.3.1. Different kinds of network attacks 5 1.3.2. Network security measures 7 1.3.3. Vulnerability audit measures 8 1.4. Exercises to test learning 8 Chapter 2. Securing Network Devices 15 2.1. Types of network traffic 15 2.2. Securing the management plan 16 2.3. Securing passwords 16 2.4. Implementing connection restrictions 17 2.4.1. Configuring a login banner 17 2.4.2. Configuring connection parameters 17 2.5. Securing access through console lines, VTY and auxiliaries 18 2.5.1. Securing access through the console line and deactivating the auxiliary line 18 2.5.2. Securing VTY access with ssh 18 2.6. Allocation of administrative roles 19 2.6.1. Privilege levels of the IOS system 19 2.6.2. Configuring a privilege level 19 2.6.3. Setting a privilege level per user 20 2.6.4. Setting a privilege level for console, VTY, and auxiliary line access 20 2.6.5. Securing access with the management of “views” and “super-views” 21 2.6.6. Securing configuration files and the IOS system 22 2.6.7. Using automated security features 23 2.7. Securing the control plane 24 2.7.1. Introduction 24 2.7.2. MD5 authentication 24 2.7.3. Configuring OSPF protocol authentication 24 2.7.4. Configuring EIGRP protocol authentication 25 2.7.5. Configuring RIP authentication 26 2.8. Exercises for application 26 Chapter 3. Supervising a Computer Network 41 3.1. Introduction 41 3.2. Implementing an NTP server 42 3.2.1. Introduction to the NTP 42 3.2.2. How the NTP works 42 3.2.3. NTP configuration 43 3.3. Implementing a Syslog server 44 3.3.1. Introduction to the Syslog 44 3.3.2. How Syslog works 45 3.3.3. Configuring a Syslog client 46 3.4. Implementing the Simple Network Management Protocol (SNMP) 46 3.4.1. Introducing the SNMP 46 3.4.2. How SNMP works 47 3.4.3. SNMP configuration 49 3.5. Exercises for application 50 Chapter 4. Securing Access Using AAA 67 4.1. Introduction 67 4.2. AAA authentication 68 4.2.1. Local AAA authentication 68 4.2.2. AAA authentication based on a server 69 4.3. AAA authorizations 71 4.4. AAA traceability 71 4.5. Exercises for application 72 Chapter 5. Using Firewalls 79 5.1. Introducing firewalls 80 5.2. Types of firewalls 80 5.3. Setting up a firewall 80 5.4. Different firewall strategies 81 5.5. ACL-based firewalls 81 5.5.1. Introduction 81 5.5.2. The location of ACLs 81 5.5.3. IPv4 ACLs 81 5.5.4. IPv6 ACLs 82 5.5.5. ACL recommendation 83 5.6. Zone-based firewalls 84 5.6.1. Introduction 84 5.6.2. Types of security zones in a network 84 5.6.3. Rules applied to interzone traffic 85 5.6.4. Terminology 86 5.6.5. Configuring a ZFW 86 5.7. Creating zones 86 5.8. Creating Class-Maps 86 5.9. Creating the Policy-Map to apply the Class-Maps 87 5.10. Defining the zone pairs 87 5.11. Applying the policy maps to the zone pairs 87 5.12. Assigning interfaces to zones 87 5.13. Exercises for application 88 Chapter 6. Putting in Place an Intrusion Prevention System (IPS) 101 6.1. Introduction to a detector 102 6.2. The differences between an IDS and an IPS 102 6.3. Types of IPS 103 6.4. Cisco IP solutions 103 6.5. Modes of deploying IPS 103 6.6. Types of alarms 104 6.7. Detecting malicious traffic 104 6.7.1. Modes of detection 104 6.7.2. Signature-based detection 104 6.7.3. Other modes of detecting malicious traffic 105 6.8. Signature micro-engines 106 6.9. Severity levels of the signatures 107 6.10. Monitoring and managing alarms and alerts 108 6.11. List of actions to be taken during an attack 108 6.12. Configuration of an IOS IPS 109 6.13. Recommended practices 111 6.14. Exercises for application 112 Chapter 7. Securing a Local Network 125 7.1. Introduction 125 7.2. Types of attacks on Layer 2 126 7.2.1. MAC address flooding attacks 126 7.2.2. MAC spoofing attack 127 7.2.3. The DHCP starvation attack 127 7.2.4. VLAN hopping attacks 128 7.2.5. STP-based attacks 130 7.3. The best security practices for protecting Layer 2 131 7.4. Exercises for application 132 Chapter 8. Cryptography 143 8.1. Basic concepts in cryptography 143 8.1.1. Definition 143 8.1.2. Terminology 144 8.2. The different classifications of cryptology 144 8.2.1. Traditional cryptography 145 8.2.2. Modern cryptography 146 8.2.3. Symmetric and asymmetric encryption 147 8.3. Key management 149 8.3.1. Introduction 149 8.3.2. Diffie-Hellman key exchange 149 8.4. Hash functions 151 8.5. HMAC codes 151 8.6. Asymmetric cryptography 151 8.6.1. Introduction 151 8.6.2. How it works 152 8.6.3. Digital signatures 153 8.6.4. Public key infrastructure 155 8.7. Exercises for application 159 Chapter 9. IPsec VPNs 173 9.1. The IPsec protocol 173 9.1.1. Objectives of IPsec 173 9.1.2. Basic IPsec protocols 174 9.1.3. The IPsec framework 174 9.1.4. The IPsec security association 175 9.1.5. IPsec modes 175 9.2. IKE protocol 176 9.2.1. Introduction 176 9.2.2. Components of IKE 176 9.2.3. IKE phases 176 9.3. The site-to-site VPN configuration 178 9.3.1. Introduction 178 9.3.2. Configuration of IPsec VPN 179 9.4. Exercises for application 181 Chapter 10. Studying Advanced Firewalls 189 10.1. Cisco ASA firewalls 189 10.1.1. Introduction 189 10.1.2. ASA models 190 10.1.3. Modes for using ASA devices 190 10.1.4. An overview of ASA 5505 191 10.1.5. ASA levels of security 192 10.1.6. Configuring an ASA with CLI 193 10.2. Exercises for application 198 10.3. Configuring Cisco elements with graphical tools 210 10.3.1. An overview of the CCP 210 10.3.2. An overview of the ASDM 210 10.3.3. Using CCP and ASDM 210 10.4. The TMG 2010 firewall 211 10.4.1. Introduction 211 10.4.2. Installation and configuration 211 References 243 Index 245

Read more less

Book SynopsisThis is the ultimate guide to protect your data on the web. From passwords to opening emails, everyone knows what they should do but do you do it?''A must read for anyone looking to upskill their cyber awareness'' Steve Durbin, Managing Director, Information Security ForumTons of malicious content floods the internet which can compromise your system and your device, be it your laptop, tablet or phone. How often do you make payments online? Do you have children and want to ensure they stay safe online? How often do you sit at a coffee shop and log onto their free WIFI? How often do you use social media on the train or bus? If you believe using an antivirus software will keep devices safe... you are wrong. This book will guide you and provide solutions to avoid common mistakes and to combat cyber attacks.This Guide covers areas such as: Building resilience into our IT Lifestyle Online Identity Cyber Abuse: Scenarios and Stories Protecting Devices Download and share Gaming, gamble and travel Copycat websites I Spy and QR Codes Banking, apps and Passwords Includes chapers from Nick Wilding, General Manager at AXELOS, Tim Mitchell, Content Director at Get Safe Online, Maureen Kendal, Director at Cybercare, Nick Ioannou, Founder of Boolean Logical, and CYBERAWARE.''Conquer the Web is a full and comprehensive read for anyone wanting to know more about cyber-security. It takes it time to explain the many acronyms and jargon that are associated with our industry, and goes into detail where necessary.'' Sarah Jane MD of Layer8 Ltd''Online fraud, cyber bullying, identity theft and these are the unfortunate by products of the cyber age. The challenge is how do we protect ourselves in the online world? Conquer the Web provides practical guidance in an easy to understand language that allows readers to take a small number of steps that will greatly increase their online security. A must read for anyone looking to upskill their cyber awareness.'' Steve Durbin MD of Information Security Forum Limited

Read more less

Book SynopsisThe end of the 20th century witnessed an information revolution that introduced a host of new economic efficiencies. This economic change was underpinned by rapidly growing networks of infrastructure that have become increasingly complex. In this new era of global security we are now forced to ask whether our private efficiencies have led to public vulnerabilities, and if so, how do we make ourselves secure without hampering the economy. In order to answer these questions, Sean Gorman provides a framework for how vulnerabilities are identified and cost-effectively mitigated, as well as how resiliency and continuity of infrastructures can be increased. Networks, Security and Complexity goes on to address specific concerns such as determining criticality and interdependency, the most effective means of allocating scarce resources for defense, and whether diversity is a viable strategy. The author provides the economic, policy, and physics background to the issues of infrastructure security, along with tools for taking first steps in tackling these security dilemmas. He includes case studies of infrastructure failures and vulnerabilities, an analysis of threats to US infrastructure, and a review of the economics and geography of agglomeration and efficiency. This critical and controversial book will garner much attention and spark an important dialogue. Policymakers, security professionals, infrastructure operators, academics, and readers following homeland security issues will find this volume of great interest.Trade Review'The world is growing more interconnected every day, spun with fiber optic cable, electric power lines, transportation and water networks. Gorman provides a detailed analysis of the pattern of telecommunications networks and their interrelationships with other infrastructure. The work is truly interdisciplinary in scope, and provides planners, policy makers, security analysts, and infrastructure managers and educators in all of these fields with an invaluable resource in terms of a rich database, a methodology, and process for assembling, analyzing and portraying information on key infrastructure assets. This work emphasizes space and place in understanding interconnectivity of physical infrastructure, integrating policy and geography as well as providing an important complement to engineering approaches to interconnected infrastructure. He presents the readers with a broad set of questions and how they can be addressed about threats, risk and vulnerability and policy options for their reduction. This is a rare book of its kind, and joins a growing literature on how complexity is a key factor in understanding and setting policies for the services upon which our society depends.' -- Rae Zimmerman, New York University, US'The concepts of Critical Infrastructure Protection are radically redefining the relationship between the public and private sectors in terms of both our national and economic security. Networks, Security and Complexity is a worthy contribution in defining and advancing many of these concepts. The author is among the vanguard of rising young scholars who will assist this nation in thinking through the significant security challenges faced in the age of information and asymmetric threat.' -- John A. McCarthy, George Mason University School of Law, US'This volume on complex networks opens surprising perspectives for the interested reader, either a scientist or a policymaker. It describes and analyzes in a convincing way the significance of critical infrastructures, be it internet or transport connections. Due insight into the existence and emergence of such infrastructures is a prerequisite for an effective security policy. This study presents a model-based, operational framework for identifying critical domains in dynamic networks. The various concepts are illustrated by means of empirical case examples.' -- Peter Nijkamp, VU University Amsterdam, The NetherlandsTable of ContentsContents: 1. Setting the Stage 2. Private Efficiencies and Public Vulnerabilities 3. Is There a Threat? 4. Literature Review of Conceptual Framework 5. The Vulnerability of Networks and the Resurrection of Distance 6. Packets and Power: The Interdependency of Infrastructure 7. Allocating Scarce Resources for Network Protection 8. Diversity as Defense 9. Conclusion References Appendix Index

Read more less

a huge range and FREE tracked UK delivery on ALL orders.

Read more less

a huge range and FREE tracked UK delivery on ALL orders.

Read more less

a huge range and FREE tracked UK delivery on ALL orders.

Read more less