Network security Books

Book SynopsisThis book provides an overview of the most recent developments in Internet of Things (IoT) security and data protection. It presents the results of several international research projects addressing this topic from complementary angles. It starts by analyzing the main privacy and security threats on IoT, as well as the evolution of data protection norms, such as the European General Data Protection Regulation (GDPR), and their impact on IoT. Through a comprehensive and systematic approach, the contributors present new perspectives on IoT & Cloud Computing security requirements. They discuss the most recent approach to support trusted IoT, including new models of privacy risk assessment, labeling and certification, and contractual tools (such as Privacy PACT). Practical implementations, such as in the European Large Scale Pilots on IoT for Smart Cities (Synchronicity), are presented, explaining how they address security, privacy and data protection. Finally, innovative models to secure IoT systems are presented for the network and end-nodes security, including network threats analysis.Table of ContentsChapter 1. Internet of Things Cybersecurity Paradigm Shift, Threats Matrix and Practical Taxonomy .- Chapter 2. Privacy and Security Threats on the Internet of Things.- Chapter 3. End-nodes Security.- Chapter 4. IoT & Cloud Computing: specific security & data protection issues.- Chapter 5. Network Threat Analysis.- Chapter 6. Evolution of Data Protection Norms and their Impact on the Internet of Things.- Chapter 7. GDPR Compliance Assessment from Crowdsourcing to GDPR Certification.- Chapter 8. Universal Privacy Risk Area Assessment Methodology.- Chapter 9. Towards Trustable Internet of Things Certification.- Chapter 10. Voluntary Compliance Commitment Tool for European General Data Protection Regulation.- Chapter 11. IoT Privacy & Security in Smart Cities.- Chapter 12. End-user Engagement, Protection and Education.- Chapter 13. User-Centric Privacy.

Read more less

Book SynopsisThis book constitutes the refereed post-conference proceedings of the 13th EAI International Conference on Testbeds and Research Infrastructures for the Development of Networks and Communications, TridentCom 2018, held in November 2018 in Shanghai, China. The 10 full papers were selected from 29 submissions and are grouped into three sessions: wireless and testbed application; uncertainty analytics and formal verification; knowledge graph.Table of ContentsBig Data Science and Applications.- Big Data and Cloud Computing.- Big Data Outsourcing.- Security and privacy in Big Data.- Big Data Testbeds and Applications in Industries.- Cyber Physical Systems and Applications: Smart Homes, Smart Health, Smart Grids and Green Cities.- Connected Vehicles, Internet of Things, and Industrial Control Systems.- Security and privacy in IoT & CPS.- Next Generation Service Oriented Architectures & Web 2.0 Services.- Emerging Technology in networking and Communications.- Emerging Wired, Wireless and Optical Communication technology.- Virtualized Network and Data Center Network.- Software-Defined Network Testbeds.- Crowd Sourcing, Crowd Sensing and IoT.- Testbeds for Big data, CPS or Emerging Networking technology.- Testbed Development, Operations and Management.- Testbed Experiences in Big data, CPS or Emerging Networking Technology.- Experimental Facilities for Big data Testbeds.- Methodologies and Tools of Testbeds Performance Evaluation.

Read more less

Book SynopsisThis two-volume set of LNCS 12146 and 12147 constitutes the refereed proceedings of the 18th International Conference on Applied Cryptography and Network Security, ACNS 2020, held in Rome, Italy, in October 2020. The conference was held virtually due to the COVID-19 pandemic. The 46 revised full papers presented were carefully reviewed and selected from 214 submissions. The papers were organized in topical sections named: cryptographic protocols cryptographic primitives, attacks on cryptographic primitives, encryption and signature, blockchain and cryptocurrency, secure multi-party computation, post-quantum cryptography.

Read more less

Book SynopsisThis book focuses on the innovation of blockchain technology and the advantages it offers. It provides a clear and comprehensive overview of blockchain technology and its possibilities, and thereby helps readers to form an opinion and draw their own conclusions about its potential exploitations.The book begins with a chapter on the topic of decentralized networks, which familiarizes readers with their challenges by using the example of an online trading platform. Hereinafter, it is then detailed what blockchain technology is, where it comes from, and how it works. The necessary underlying technologies are explained, and various individual approaches as well as their composition are presented. Using well-known examples such as Bitcoin and Ethereum as an illustration, the book looks at the architecture of blockchain technology and focuses on the challenges such as security and scalability. The options available when introducing blockchain technology are also outlined, and best-practice examples are presented to get a better idea of what areas benefit from this technology.Numerous examples and detailed explanations will accompany the readers throughout the book. By the time they have reached the end, they will be able to decide for themselves what is truly innovative about blockchain technology and what is nothing more than hype.Table of Contents​1. Introduction.- 2. What Is Hidden Behind the Term “Blockchain”?.- 3. Technical Basics for a Better Understanding of Blockchain Technology.- 4. Where Does the Hype End, and Where Does the Innovation of Blockchain Technology Begin?.- 5. The Right Use Leads to Success.- 6. Projects and Application Areas of Blockchain Technology.- 7. Summary.

Read more less

Book SynopsisThis book presents a unique, step-by-step approach for monitoring, detecting, analyzing and mitigating complex network cyber threats. It includes updated processes in response to asymmetric threats, as well as descriptions of the current tools to mitigate cyber threats. Featuring comprehensive computer science material relating to a complete network baseline with the characterization hardware and software configuration, the book also identifies potential emerging cyber threats and the vulnerabilities of the network architecture to provide students with a guide to responding to threats. The book is intended for undergraduate and graduate college students who are unfamiliar with the cyber paradigm and processes in responding to attacks. Table of ContentsPre-incident Planning and Analysis.- Incident Detection and Characterization.- Vulnerability/Consequence Analysis.- Incident Response and Recovery.- Cloud Architecture.- Lessons Learned.

Read more less

Book SynopsisThis book constitutes the refereed proceedings of the 14th IFIP TC 9 International Conference on Human Choice and Computers, HCC14 2020, which was supposed take place in Tokyo, Japan, in September 2020, but the conference was cancelled due to the COVID-19 crisis.The 31 revised full papers presented were carefully reviewed and selected from 55 submissions. The papers deal with the constantly evolving intimate relationship between humans and technology. They are organized in the following sections: ethical and legal considerations in a data-driven society; the data-driven society; peace and war; our digital lives; individuals in data-driven society; and gender, diversity and ICT.Table of ContentsEthical and Legal Considerations in a Data-Driven Society.- A Study on Abusing Superior Bargaining Position in the Anti-Monopoly Act and its relation to the Act on the Protection of Personal Information in Japan.- The Laws of Big Data - How Data Protection Law, Competition Law and Contract Law Deal with the Challenges of a Data-Driven World.- The Legal Frameworks of the Right to Request the Deletion of Personal Data in the EU, the U.S. and Japan and the Right to Be Forgotten: A Study Focusing on Search Businesses.- Examining the Possibility of Expanding the Use of Digital Images Recorded in the “Audio-Visual Recording of Custodial Interrogation” System.- Governance Framework for Facial Recognition Systems in Japan.- Advanced Software and Patents: A Patentability Balance for Fostering Technology.- IPR Risk Assessment of Companies Implementing Standard Essential Patents and Validation.- Qualitative Analysis of Interviews with Municipal Officers Toward the Human-Centered Improvement of the eLen Regulation Database System.- Japan-EU Passenger Name Record Negotiations and their Implications.- The Data-Driven Society.- Heaven and Earth – Cloud and Territory in the Internet.- Self-Sovereign Identity and Blockchain-Based Content Management.- Assessing the Japanese Turn in AI and Robot Ethics: Extracting Meaningful Principles Between Exoticism and Empiricism in the Case of AIBO.- Intelligent Monitoring of Chronic Illness for the Ageing Rural Population: Opportunities and Cautions.- The relevance of Humans and Structure: Managerial and organizational challenges in Smart Factories.- Automated Testing of Refreshable Braille Display.- Data Processing Automation for Bulk Water Supply Monitoring.- Peace and War.- Using Cyber applications towards Positive Psychology interventions in Africa.- States’ Capacity Building for Cybersecurity: an IR Approach.- An Analysis of Twitter during the 2017 Zimbabwean Military Intervention.- Cybersecurity and Cybercrime Combatting Culture for African Police Services.- A Consideration of the Case Study of ‎Disinformation and its Legal Problems.- Our Digital Lives.- Exploring Human Nature in a Technology-Driven Society.- Towards a typology of intentionally inaccurate representations of reality in media content.- The Influence of Personal and Professional Commitments on Digitally Disconnected Experiences.- Social materiality of smartphone game apps: Case analysis of Pokémon GO.- Individuals in Data-Driven Society.- Humans of the European Data Economy Ecosystem - What do they demand from a fair data economy?.- Public Fora and Freedom of Expression.- Self-tracking, power, and the transition from discipline to control.- Towards Social Enterprise with Internet of Office Desks.- Gender, Diversity and ICT.- What Can Statistics Tell About the Gender Gap in ICT? Tracing Men and Women's Participation in the ICT Sector Through Numbers.- Silent Data, Active Patients.

Read more less

Book SynopsisHash functions are the cryptographer’s Swiss Army knife. Even though they play an integral part in today’s cryptography, existing textbooks discuss hash functions only in passing and instead often put an emphasis on other primitives like encryption schemes. In this book the authors take a different approach and place hash functions at the center. The result is not only an introduction to the theory of hash functions and the random oracle model but a comprehensive introduction to modern cryptography.After motivating their unique approach, in the first chapter the authors introduce the concepts from computability theory, probability theory, information theory, complexity theory, and information-theoretic security that are required to understand the book content. In Part I they introduce the foundations of hash functions and modern cryptography. They cover a number of schemes, concepts, and proof techniques, including computational security, one-way functions, pseudorandomness and pseudorandom functions, game-based proofs, message authentication codes, encryption schemes, signature schemes, and collision-resistant (hash) functions. In Part II the authors explain the random oracle model, proof techniques used with random oracles, random oracle constructions, and examples of real-world random oracle schemes. They also address the limitations of random oracles and the random oracle controversy, the fact that uninstantiable schemes exist which are provably secure in the random oracle model but which become insecure with any real-world hash function. Finally in Part III the authors focus on constructions of hash functions. This includes a treatment of iterative hash functions and generic attacks against hash functions, constructions of hash functions based on block ciphers and number-theoretic assumptions, a discussion of privately keyed hash functions including a full security proof for HMAC, and a presentation of real-world hash functions.The text is supported with exercises, notes, references, and pointers to further reading, and it is a suitable textbook for undergraduate and graduate students, and researchers of cryptology and information security.Trade Review“The authors put a lot of work to create this 788-page book – the text has been edited even after the layout to insert links with page numbers, there are exercises and a website for errata and discussions.” (Jaak Henno, zbMATH 1490.94001, 2022)“Arno Mittelbach and Marc Fischlin did a good job at producing this book with a collection of ideas on the Theory of Hash Functions and Random Oracles, focusing in-depth on these two areas enabling the student, the practitioner, and the researcher, to deepen their knowledge. The book is a great add-on for a modern cryptography course or for 'light summer reading' for those interested in learning more about these two topics.” (Sven Dietrich, IEEE Cipher, July 20, 2021)Table of ContentsIntroduction.- Preliminaries: Cryptographic Foundations.- Part I: Foundations.- Computational Security.- Pseudorandomness and Computational Indistinguishability.- Collision Resistance.- Encryption Schemes.- Signature Schemes.- Non-cryptographic Hashing.- Part II: The Random Oracle Methodology.- The Random Oracle Model.- The Full Power of Random Oracles.- Random Oracle Schemes in Practice.- Limitations of Random Oracles.- The Random Oracle Controversy.- Part III: Hash Function Constructions.- Iterated Hash Functions.- Constructing Compression Functions.- Iterated Hash Functions in Practice.- Constructions of Keyed Hash Functions.- Constructing Random Oracles: Indifferentiability.- Constructing Random Oracles: UCEs.- Index.

Read more less

Book SynopsisThis book constitutes the refereed proceedings of the First International Workshop on Cyber-Physical Security for Critical Infrastructures Protection, CPS4CIP 2020, which was organized in conjunction with the European Symposium on Research in Computer Security, ESORICS 2020, and held online on September 2020.The 14 full papers presented in this volume were carefully reviewed and selected from 24 submissions. They were organized in topical sections named: security threat intelligence; data anomaly detection: predict and prevent; computer vision and dataset for security; security management and governance; and impact propagation and power traffic analysis.The book contains 6 chapters which are available open access under a CC-BY license. Table of ContentsSecurity Threat Intelligence.- Privacy-Preserving CCTV Analytics for Cyber-Physical Threat Intelligence.- TLSAssistant goes FINSEC: A Security Platform Integration Extending Threat Intelligence Language.- Cyber Threat Monitoring Systems - Comparing attack detection performance of ensemble algorithms.- FINSTIX: a Cyber-Physical Data Model for Financial Critical Infrastructures.- Data Anomaly Detection: Predict & Prevent.- Inferring anomaly situation from multiple data sources in CyberPhysical Systems.- Fusing RGB and Thermal Imagery with Channel State Information for Abnormal Activity Detection using Multimodal Bidirectional LSTM.- A Cloud-Based Anomaly Detection for IoT Big Data.- Computer Vision & Dataset for Security.- An advanced Framework for Critical Infrastructure Protection using computer vision technologies.- A Comprehensive Dataset from a Smart Grid Testbed for Machine Learning based CPS Security Research.- Security Management & Governance.- Cross-Domain Security Asset Management for Healthcare.- Towards a global CIs' cyber-physical security management and joint coordination approach.- Toward a Context-Aware Methodology for Information Security Governance Assessment Validation.- Impact Propagation & Power Traffic Analysis.- Impact Propagation in Airport Systems.- A Comparative Analysis of Emulated and Real IEC-104 Spontaneous Traffic in Power System Networks.

Read more less

Book SynopsisThis book contains selected papers presented at the 15th IFIP WG 9.2, 9.6/11.7, 11.6/SIG 9.2.2 International Summer School on Privacy and Identity Management, held in Maribor, Slovenia, in September 2020.*The 13 full papers included in this volume were carefully reviewed and selected from 21 submissions. Also included is a summary paper of a tutorial. As in previous years, one of the goals of the IFIP Summer School was to encourage the publication of thorough research papers by students and emerging scholars. The papers combine interdisciplinary approaches to bring together a host of perspectives, such as technical, legal, regulatory, socio-economic, social or societal, political, ethical, anthropological, philosophical, or psychological perspectives.*The summer school was held virtually.Table of ContentsTutorial Paper.- Don’t Tell Them now (or at all) – End User Notification Duties under GDPR and NIS Directive.- Selected Student Papers.- Ethical Principles for Designing Responsible Offensive Cyber Security Training.- Longitudinal collection and analysis of mobile phone data with local differential privacy.- Privacy-preserving IDS for In-Car-Networks with Local Differential Privacy.- Strong customer authentication in online payments under GDPR and PSD2: a case of cumulative application.- Privacy in Payment in the Age of Central Bank Digital Currency.- Analysing drivers’ preferences for privacy enhancing car-to-car communication systems.- Learning Analytics and Privacy - Respecting Privacy in Digital Learning Scenarios.- Preserving Privacy in Caller ID Applications.- “Identity management by design” with a technical Mediator under the GDPR.- Open about the open-rate? State of email tracking in marketing emails and its effects on user's privacy.- Privacy Respecting Data Sharing and Communication in mHealth: A Case Study.- Privacy-preserving Analytics for Data Markets using MPC.- Towards models for privacy preservation in the face of metadata exploitation.

Read more less

Book SynopsisCryptography, as done in this century, is heavily mathematical. But it also has roots in what is computationally feasible.This unique textbook text balances the theorems of mathematics against the feasibility of computation. Cryptography is something one actually “does”, not a mathematical game one proves theorems about. There is deep math; there are some theorems that must be proved; and there is a need to recognize the brilliant work done by those who focus on theory. But at the level of an undergraduate course, the emphasis should be first on knowing and understanding the algorithms and how to implement them, and also to be aware that the algorithms must be implemented carefully to avoid the “easy” ways to break the cryptography. This text covers the algorithmic foundations and is complemented by core mathematics and arithmetic.Table of Contents1. Introduction.- 2. Simple Ciphers.- 3. Divisibility, Congruences, and Modular Arithmetic.- 4. Groups, Rings, Fields.- 5. Square Roots and Quadratic Symbols.- 6. Finite Fields of Characteristic 2.- 7. Elliptic Curves.- 8. Mathematics, Computing, and Arithmetic.- 9. Modern Symmetric Ciphers — DES and AES.- 10. Asymmetric Ciphers — RSA and Others.- 11. How to Factor a Number.- 12. How to Factor More Effectively.- 13. Cycles, Randomness, Discrete Logarithms, and KeyExchange.- 14. Elliptic Curve Cryptography.- 15. Quantum Computing and Cryptography.- 16. Lattice-Based Cryptography.- 17. Homomorphic Encryption.- 18. Exercises.

Read more less

Book SynopsisThe two-volume set LNCS 12726 + 12727 constitutes the proceedings of the 19th International Conference on Applied Cryptography and Network Security, ACNS 2021, which took place virtually during June 21-24, 2021. The 37 full papers presented in the proceedings were carefully reviewed and selected from a total of 186 submissions. They were organized in topical sections as follows: Part I: Cryptographic protocols; secure and fair protocols; cryptocurrency and smart contracts; digital signatures; embedded system security; lattice cryptography; Part II: Analysis of applied systems; secure computations; cryptanalysis; system security; and cryptography and its applications. Table of ContentsCryptographic Protocols.- Adaptive-ID Secure Hierarchical ID-Based Authenticated Key Exchange under Standard Assumptions without Random Oracles.- Analysis of Client-side Security for Long-term Time-stamping Services.- Towards Efficient and Strong Backward Private Searchable Encryption with Secure Enclaves.- Secure and Fair Protocols.- CECMLP: New Cipher-Based Evaluating Collaborative Multi-Layer Perceptron Scheme in Federated Learning.- Blind Polynomial Evaluation and Data Trading.- Coin-Based Multi-Party Fair Exchange.- Cryptocurrency and Smart Contracts.- P2DEX: Privacy-Preserving Decentralized Cryptocurrency Exchange.- WOTS+ up my Sleeve! A Hidden Secure Fallback for Cryptocurrency Wallets.- Terrorist Attacks for Fake Exposure Notifications in Contact Tracing Systems.- Digital Signatures.- Unlinkable and Invisible -Sanitizable Signatures.- Partially Structure-Preserving Signatures: Lower Bounds, Constructions and More.- An Efficient Certificate-Based Signature Scheme in the Standard Model.- Embedded System Security.- SnakeGX: a sneaky attack against SGX Enclaves.- Telepathic Headache: Mitigating Cache Side-Channel Attacks on Convolutional Neural Networks.- Efficient FPGA Design of Exception-Free Generic Elliptic Curve Cryptosystems.- Lattice Cryptography.- Access Control Encryption from Group Encryption.- Password Protected Secret Sharing from Lattices.- Efficient Homomorphic Conversion Between (Ring) LWE Ciphertexts.

Read more less

Book SynopsisThis book constitutes the refereed post-conference proceedings of the First International Conference on Applied Cryptography in Computer and Communications, AC3 2021, and the First International Workshop on Security for Internet of Things (IoT). The conference was held in May 2021 and due to COVID-19 pandemic virtually.The 15 revised full papers were carefully reviewed and selected from 42 submissions. The papers present are grouped in 4 tracks on blockchain; authentication; secure computation; practical crypto application. They detail technical aspects of applied cryptography, including symmetric cryptography, public-key cryptography, cryptographic protocols, cryptographic implementations, cryptographic standards and practices.

Read more less

Book SynopsisThe first section of this book addresses the evolution of CISO (chief information security officer) leadership, with the most mature CISOs combining strong business and technical leadership skills. CISOs can now add significant value when they possess an advanced understanding of cutting-edge security technologies to address the risks from the nearly universal operational dependence of enterprises on the cloud, the Internet, hybrid networks, and third-party technologies demonstrated in this book. In our new cyber threat-saturated world, CISOs have begun to show their market value. Wall Street is more likely to reward companies with good cybersecurity track records with higher stock valuations. To ensure that security is always a foremost concern in business decisions, CISOs should have a seat on corporate boards, and CISOs should be involved from beginning to end in the process of adopting enterprise technologies.The second and third sections of this book focus on building strong security teams, and exercising prudence in cybersecurity. CISOs can foster cultures of respect through careful consideration of the biases inherent in the socio-linguistic frameworks shaping our workplace language and through the cultivation of cyber exceptionalism. CISOs should leave no stone unturned in seeking out people with unique abilities, skills, and experience, and encourage career planning and development, in order to build and retain a strong talent pool. The lessons of the breach of physical security at the US Capitol, the hack back trend, and CISO legal liability stemming from network and data breaches all reveal the importance of good judgment and the necessity of taking proactive stances on preventative measures. This book will target security and IT engineers, administrators and developers, CIOs, CTOs, CISOs, and CFOs. Risk personnel, CROs, IT, security auditors and security researchers will also find this book useful.Table of ContentsCISOs – Leading from the front!.- More CISOs on Corporate Boards.- Cyber program turnaround by a new CISO.- CISOs - the next step!.- CISO Maturity Model.- CISO guidance on some Emerging and Disruptive Technologies.- See Something, Do Something.- My journey as a writer.- Defensive measures in the wake of the SolarWinds fallout.- Cyber Exceptionalism.- Special Needs, Disability, and Cybersecurity: often, a great fit.- Bias-free lexicon.- The grass is not always greener on the other side.- Let not any outage go to waste.- If you can’t hire them, then develop them.- Should you accept Counteroffers?.- Importance of 1:1 Conversations.- The Cyber Hygiene Mantra.- Cybersecurity lessons from the breach of physical security at US Capitol building.- Protect society, the commonwealth, and the infrastructure - post COVID-19.- Self-Service Recovery Options for Bricked Windows Devices.- Certification and Accreditation.- Hack back or not.- CISOs need Liability Protection.- Enable Secure work-from-home.

Read more less

Book SynopsisThis book constitutes the refereed proceedings of the 16th International Workshop on Security, IWSEC 2021, held in Tokyo, Japan in September 2021. The conference was held virtually due to COVID-19 pandemic. The 14 regular papers and 3 short paper presented in this volume were carefully reviewed and selected from 37 submissions. They were organized in topical sections named: Lattice-Based Cryptography; System Security; Multiparty Computation; Machine Learning and Security; Post-quantum Cryptography; Symmetric-key Cryptography; Game Theory and Security.Table of ContentsLattice-Based Cryptography A trace map attack against special ring-LWE samples.- Shortest Vectors in Lattices of Bai-Galbraith’s Embedding Attack on the LWR Problem.- System Security KPRM: Kernel Page Restriction Mechanism to Prevent Kernel Memory Corruption.- Evidence Collection and Preservation System with Virtual Machine Monitoring.- Multiparty Computation Evolving Homomorphic Secret Sharing for Hierarchical Access Structures.- Machine Learning and Security Understanding Update of Machine-Learning-Based Malware Detection by Clustering Changes in Feature Attributions.- Proposal of Jawi CAPTCHA Using Digraphia Feature of the Malay Language.- Solving the problem of Blockwise Isomorphism of Polynomials with Circulant matrices.- FFT Program Generation for Ring LWE-based Cryptography.- Symmetric-key Cryptography Optimum Attack on 3-Round Feistel-2 Structure.- Post-quantum Cryptography (2) An Intermediate Secret-Guessing Attack on Hash-Based Signatures.- Analysis of a Strong Fault Attack on Static/Ephemeral CSIDH.- Simple Matrix Signature Scheme.- Game Theory and Security Moving Target Defense for the CloudControl Game.

Read more less

Book SynopsisDigital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Computer networks, cloud computing, smartphones, embedded devices and the Internet of Things have expanded the role of digital forensics beyond traditional computer crime investigations. Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence in legal proceedings. Digital forensics also has myriad intelligence applications; furthermore, it has a vital role in cyber security -- investigations of security breaches yield valuable information that can be used to design more secure and resilient systems.Advances in Digital Forensics XVII describes original research results and innovative applications in the discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. The areas of coverage include: themes and issues, forensic techniques, filesystem forensics, cloud forensics, social media forensics, multimedia forensics, and novel applications. This book is the seventeenth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in digital forensics. The book contains a selection of thirteen edited papers from the Seventeenth Annual IFIP WG 11.9 International Conference on Digital Forensics, held virtually in the winter of 2021. Advances in Digital Forensics XVII is an important resource for researchers, faculty members and graduate students, as well as for practitioners and individuals engaged in research and development efforts for the law enforcement and intelligence communities.

Read more less

Book SynopsisThis book constitutes the revised selected papers from the 22nd International Conference on Information Security Applications, WISA 2021, which took place on Jeju Island, South Korea, during August 2021. The 23 papers included in this book were carefully reviewed and selected from 66 submissions. They were organized in topical sections as follows: machine learning security; cryptography; hardware security; and application security.Table of ContentsMachine Learning Security.- LOM: Lightweight classifier for obfuscation methods.- A Method for Collecting Vehicular Network Data for Enhanced Anomaly Detection.- Unsupervised Driver Behavior Profiling leveraging Recurrent Neural Networks.- On the robustness of intrusion detection systems for vehicles against adversarial attacks.- A Framework for Generating Evasion Attacks for Machine Learning based Network Intrusion Detection Systems.- Echo-Guard : Acoustic-based Anomaly Detection System for Smart Manufacturing Environments.- Research on improvement of anomaly detection performance in industrial control systems.- Cryptography.- Quantum Cryptanalysis Landscape of Shor's Algorithm for Elliptic Curve Discrete Logarithm Problem.- Anonymous IBE from PEKS : A Generic Construction.- Secure Computation of Shared Secrets and Its Applications.- Pattern Matching over Encrypted Data with a Short Ciphertext.- Efficient adaptation of TFHE for high end-to-end throughput.- AnyTRNG: Generic, High-throughput, Low-area True Random Number Generator based on Synchronous Edge Sampling.- Hardware Security.- Masked Implementation of PIPO Block Cipher on 8-bit AVR Microcontrollers.- Parallel Implementation of PIPO Block Cipher on 32-bit RISC-V Processor.- No Silver Bullet: Optimized Montgomery Multiplication on Various 64-bit ARM Platforms.- ARMed Frodo: FrodoKEM on 64-bit ARMv8 Processors.- Quantitative Analysis on Attack Capacity in Meltdown-type Attacks.- Application Security.- Adaptive Network Security Service Orchestraction based on SDN/NFV.- A General Framework for Matching Pattern Hiding in Deep Packet Inspection.- A Privacy-Preserving Payment Model for EV Charging.- Measuring Healthcare Data Breaches.- BadASLR: Exceptional cases of ASLR aiding Exploitation.

Read more less

Book SynopsisThis book constitutes revised selected papers from the 11th International Workshop on Constructive Side-Channel Analysis and Secure Design, COSADE 2021, held in Lugano, Switzerland, in October 2021.The 14 full papers carefully reviewed and selected from 31 submissions are presented in this volume together with the 4 extended keynote abstracts. The workshop covers the following subjects: cryptography, side-channel analysis, cryptographic implementations, fault attacks, implementation attacks, post-quantum cryptography, hardware accelerators, etc.

Read more less

Book SynopsisThis book constitutes the refereed post-conference proceedings of the 17th EAI International Conference on Quality, Reliability, Security and Robustness in Heterogeneous Networks, QShine 2021, held in November 2020. Due to COVID-19 pandemic the conference was held virtually. The 20 revised full papers were carefully reviewed and selected from 43 submissions. The papers are organized thematically in tracks Machine Learning in Distributed Networks; 5G Networks and Security; IoT Security and Lightweight Cryptography; Network Security; and Privacy-preserving Emerging Networked Applications.Table of ContentsMachine Learning in Distributed Networks.- FedDICE: A ransomware spread detection in a distributed integrated clinical environment using federated learning and SDN based mitigation.- Accelerating TEE-based DNN Inference Using Mean Shift Network Pruning.- Towards Secure and Trustworthy Crowdsourcing with Versatile Data Analytics.- Blockchain Networks and Blockchain-based Applications.- Blockchain for IoT : A Critical Analysis Concerning Performance and Scalability.- Toward Achieving Unanimity for Implicit Closings in a Trustless System.- DBS: Blockchain-based privacy-preserving RBAC in IoT.- 5G Networks and Security.- 8 A Lightweight Authentication Protocol for 5G Cellular Network Connected Drones.- Anti-eavesdropping Proportional Fairness Access Control for 5G Networks.- Joint Relay Selection and Frequency Allocationfor D2D Communications.- IoT Security and Lightweight Cryptography 11 Chaos and Logistic Map based Key Generation Technique for AES-driven IoT Security.- A Usability Study of Cryptographic API Design.- An S-box Design using Irreducible Polynomial with Affine Transformation for Lightweight Cipher.- The Phantom Gradient Attack: A Study Of Replacement Functions For The XOR Function.- Network Security 15 Topology Validator - Defense against Topology Poisoning Attack in SDN.- Towards an Attention-based Accurate Intrusion Detection Approach.- Avoiding VPN Bottlenecks: Exploring Network-Level client Identity Validation Options.- Privacy-preserving Emerging Networked Applications.- Privacy-Preserving Ranked Searchable Encryption Based on Differential Privacy.- Memory-efficient Encrypted Search using Trusted Execution Environment Viet Vo.

Read more less

Book SynopsisThe cyber world has been both enhanced and endangered by AI. On the one hand, the performance of many existing security services has been improved, and new tools created. On the other, it entails new cyber threats both through evolved attacking capacities and through its own imperfections and vulnerabilities. Moreover, quantum computers are further pushing the boundaries of what is possible, by making machine learning cyber agents faster and smarter. With the abundance of often-confusing information and lack of trust in the diverse applications of AI-based technologies, it is essential to have a book that can explain, from a cyber security standpoint, why and at what stage the emerging, powerful technology of machine learning can and should be mistrusted, and how to benefit from it while avoiding potentially disastrous consequences. In addition, this book sheds light on another highly sensitive area – the application of machine learning for offensive purposes, an aspect that is widely misunderstood, under-represented in the academic literature and requires immediate expert attention.Table of Contents1. Introduction.- 2. Understanding Machine Learning.- 3. Defence.- 4. Attack.- 5. Feasibility and Misconceptions.- 6. International resonance.- 7. Prospects.- 8. Conclusion.

Read more less

Book SynopsisThis book constitutes the proceedings of the 17th International Conference on Information Systems Security, ICISS 2021, held in Patna, India, during December 16-20, 2021. The 9 regular papers, 2 short papers and 4 work-in-progress papers included in this volume were carefully reviewed and selected from a total of 48 submissions. The papers were organized in topical sections named: attack detection, malware identification, data security in distributed systems, and applied cryptography.

Read more less

Book SynopsisThe information infrastructure – comprising computers, embedded devices, networks and software systems – is vital to operations in every sector: chemicals, commercial facilities, communications, critical manufacturing, dams, defense industrial base, emergency services, energy, financial services, food and agriculture, government facilities, healthcare and public health, information technology, nuclear reactors, materials and waste, transportation systems, and water and wastewater systems. Global business and industry, governments, indeed society itself, cannot function if major components of the critical information infrastructure are degraded, disabled or destroyed.Critical Infrastructure Protection XV describes original research results and innovative applications in the interdisciplinary field of critical infrastructure protection. Also, it highlights the importance of weaving science, technology and policy in crafting sophisticated, yet practical, solutions that will help secure information, computer and network assets in the various critical infrastructure sectors. Areas of coverage include: Industrial Control Systems Security; Telecommunications Systems Security; Infrastructure Security. This book is the fourteenth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.10 on Critical Infrastructure Protection, an international community of scientists, engineers, practitioners and policy makers dedicated to advancing research, development and implementation efforts focused on infrastructure protection. The book contains a selection of 13 edited papers from the Fifteenth Annual IFIP WG 11.10 International Conference on Critical Infrastructure Protection, held as a virtual event during the spring of 2021. Critical Infrastructure Protection XV is an important resource for researchers, faculty members and graduate students, as well as for policy makers, practitioners and other individuals with interests in homeland security.

Read more less

Book SynopsisThe authors explore various aspects of information processing for the design of service systems, efficient management, secure storage, and transmission. In addition, the subline provides knowledge and practice in decentralized ICT technologies, including those based on blockchain. The aim of this book is to analyze and develop methods of building decentralized private databases without the presence of a trusted party, methods of data processing in encrypted form to ensure the confidentiality of information, and accessibility of the corresponding fragment of the original or transformed data. In this book it is also relevant to research methods and protocols routing in infocommunication networks, which provides load balancing in the network, and analysis of intrusion detection methods based on analysis of signatures and anomalies in network behavior (state changes) based on machine learning and fractal analysis methods.Table of ContentsMethods for Privacy Support in the Decentralized Environment.- Application of Bluetooth, Wi-Fi and Gps Technologies in the means of Contact Tracking.- Analysis and Research of Threat, Attacker and Security Models of Data Depersonalization in Decentralized Networks.- Cryptographic Transformations in a Decentralized Blockchain Environment.- Statistical and Signature Analysis Methods of Intrusion Detection.- Criteria and Indicators of Efficiency of Cryptographic Protection Mechanisms.- Methods of Evaluation and Comparative Research of Cryptographic Conversions.- Cryptographic Mechanisms that Ensure the Efficiency of SNARK-Systems.- Comparative Analysis of Consensus Algorithms that use a Directed Acyclic Graph Instead of a Blockchain, and Construction of Estimates of the SPECTRE Protocol Security to the Double Spend Attack.- Models and Methods of Secure Routing and Load Balancing in Infocommunication Networks.- The Methods of Data Comparison in Residue Numeral System.- Data Control in the System of Residual Classes.- Traffic Monitoring and Abnormality Detection Methods for Decentralized Distributed Networks.

Read more less

Book SynopsisThis book constitutes selected and revised papers from the Second Silicon Valley Cybersecurity Conference, held in San Jose, USA, in December 2021. Due to the COVID-19 pandemic the conference was held in a virtual format. The 9 full papers and one shoprt paper presented in this volume were thoroughly reviewed and selected from 15 submissions. They present most recent research on dependability, reliability, and security to address cyber-attacks, vulnerabilities, faults, and errors in networks and systems. Chapters 1, 4, 5, 6, and 8-10 are published open access under a CC BY license (Creative Commons Attribution 4.0 International License).Table of ContentsMachine Learning for Security.- Encryption.- Miscellaneous Security.

Read more less

Book SynopsisAI has become an emerging technology to assess security and privacy, with many challenges and potential solutions at the algorithm, architecture, and implementation levels. So far, research on AI and security has looked at subproblems in isolation but future solutions will require sharing of experience and best practice in these domains.The editors of this State-of-the-Art Survey invited a cross-disciplinary team of researchers to a Lorentz workshop in 2019 to improve collaboration in these areas. Some contributions were initiated at the event, others were developed since through further invitations, editing, and cross-reviewing. This contributed book contains 14 invited chapters that address side-channel attacks and fault injection, cryptographic primitives, adversarial machine learning, and intrusion detection. The chapters were evaluated based on their significance, technical quality, and relevance to the topics of security and AI, and each submission was reviewed in single-blind mode and revised. Table of ContentsAI for Cryptography.- Artificial Intelligence for the Design of Symmetric Cryptographic Primitives.- Traditional Machine Learning Methods for Side-Channel Analysis.- Deep Learning on Side-Channel Analysis.- Artificial Neural Networks and Fault Injection Attacks.- Physically Unclonable Functions and AI: Two Decades of Marriage.- AI for Authentication and Privacy.- Privacy-Preserving Machine Learning using Cryptography.- Machine Learning Meets Data Modification: the Potential of Pre-processing for Privacy Enhancement.- AI for Biometric Authentication Systems.- Machine Learning and Deep Learning for Hardware Fingerprinting. - AI for Intrusion Detection.- Intelligent Malware Defenses.- Open-World Network Intrusion Detection.- Security of AI.- Adversarial Machine Learning.- Deep Learning Backdoors. - On Implementation-level Security of Edge-based Machine Learning Models.

Read more less

Book SynopsisThis book constitutes revised selected papers from the 13th International Workshop on Constructive Side-Channel Analysis and Secure Design, COSADE 2022, held in Leuven, Belgium, in April 2022. The 12 full papers presented in this volume were carefully reviewed and selected from 25 submissions. The papers cover the following subjects: implementation attacks, secure implementation, implementation attack-resilient architectures and schemes, secure design and evaluation, practical attacks, test platforms, and open benchmarks.Table of ContentsMachine/Deep Learning.- Machine-Learning assisted Side-Channel Attacks on RNS ECC Implementations using Hybrid Feature Engineering.- Focus is Key to Success: A Focal Loss Function for Deep Learning-based Side-channel Analysis.- On the Evaluation of Deep Learning-based Side-channel Analysis.- Tools & References A Second Look at the ASCAD Databases.- FIPAC: Thwarting Fault- and Software-Induced Control-Flow Attacks with ARM Pointer Authentication.- Body Biasing Injection: To thin or not to thin the substrate?.- Attacks On the susceptibility of Texas Instruments SimpleLink platform microcontrollers to non-invasive physical attacks.- Single-trace clustering power analysis of the point-swapping procedure in the three point ladder of Cortex-M4 SIKE.- Canonical DPA attack on HMAC-SHA1/SHA2.- Masking Provable Secure Software Masking in the Real-World.- Systematic Study of Decryption and Re-Encryption Leakage: the Case of Kyber.- Handcrafting: Improving Automated Masking in Hardware with Manual Optimizations.

Read more less

Book SynopsisAI for Security.- Classify Me Correctly if You Can Evaluating Adversarial Machine Learning Threats in NIDS.- CUFT Cuflow based Approach with Multi headed Attention Mechanism for Encrypted Traffic Classification.- CyberEA An Efficient Entity Alignment Framework for Cybersecurity Knowledge Graph.- DNN Architecture Attacks via Network and Power Side Channels.- Invisibility Spell Adversarial Patch Attack Against Object Detectors.- Meta Perturbation Generation Network for Text based CAPTCHA.- Model Inversion Attacks on Homogeneous and Heterogeneous Graph Neural Networks.- Unsupervised Multi Criteria Adversarial Detection in Deep Image Retrieval.- VRC GraphNet A Graph Neural Network based Reasoning Framework for Attacking Visual Reasoning Captchas.- Authentication.- An Adaptive Authentication Protocol for Internet of Vehicles Based on Vehicle Density.- Discovering and Understanding the Security Flaws of Authentication and Authorization in IoT Cloud APIs for Smart Home.- Optimizing Lightweight Intermittent Message Authentication for Programmable Logic Controller.- Blockchain and Distributed System Security.- Byzantine Protocols with Asymptotically Optimal Communication Complexity.- Demystifying Blockchain Scalability Sibling Chains with Minimal Interleaving.- VDABSys A novel security testing framework for blockchain systems based on vulnerability detection. Cryptography.- Anonymous Key Issuing Protocol with Certified Identities in Identity based Encryption.- Batch Lattice Based Designated Verifier ZK SNARKs for R1CS.- Certificateless Aggregate Signature Without Trapdoor for Cloud Storage.- Efficient Zero Knowledge for Regular Language.- Enabling Fast Settlement in Atomic Cross-Chain Swaps.- HeSUN Homomorphic Encryption for Secure Unbounded Neural Network Inference.- Optimization of Functional Bootstraps with Large LUT and Packing Key Switching.- Data Security.- An Authentication Algorithm for Sets of Spatial Data Objects.- An Efficient Private Information Retrieval Protocol Based on TFHE.- mShield Protect In-process Sensitive Data Against Vulnerable Third Party Libraries.- Password Cracking by Exploiting User Group Information.

Read more less

Book SynopsisIntrusion and Anomaly Detection.- A Game Theoretical Analysis of Distributed Denial of Service Defense Incent.- DDoS Mitigation Dilemma Exposed A Two Wave Attack with Collateral Damage of Millions.- Lightweight Intrusion Detection for IoT Systems using Artificial Neural Networks.- MVTBA A Novel Hybrid Deep Learning Model for Encrypted Malicious Traffic Identification.- POP-HIT Partially Order Preserving Hash Induced Transformation for Privacy Protection in Face Recognition Access Control. IoT Security.- Enhancing Cross Device Security with Fine Grained Permission Control.- The Security Analysis of ROS2 Communication.- VET Autonomous Vehicular Credential Verification using Trajectory and Motion Vectors. Network Security.- A Stable Fine-grained Webpage Fingerprinting Aiming at the Unstable Realistic Network.- Securing Web Inputs using Parallel Session Attachments.- Unsupervised and Adaptive Tor Website Fingerprinting.- Visibility of Scan Traffic Trends in Sparsely Populated Darknets.- Privacy.- Do Backdoors Assist Membership Inference Attacks.- Efficient and Scalable Multi Party Privacy Preserving k NN Classification.- Efficient Unbalanced Private Set Intersection Protocol over Large-scale Datasets Based on Bloom Filter.- PPEC Privacy Preserving and Cost Effective Incremental Density Peak Clustering Scheme for Profit Driven Clouds.- Practical Privacy Preserving Community Detection in Decentralized Weighted Networks.- Split Without a Leak Reducing Privacy Leakage in Split Learning.- Street Rep A Privacy Preserving Reputation Aggregation System.- Program Analysis.- Analyzing Implementation based SSL TLS Vulnerabilities with Binary Semantics Analysis.- Identifying Library Functions in Stripped Binary Combining Function Similarity and Call Graph Features.- PDFIET PDF Malicious Indicators Extraction Technique through Optimized Symbolic Execution.- Ransomware as a Service Demystifying Android Ransomware Generators.- Software Security.- CV2XFuzzer C V2X Parsing Vulnerability Discovery System Based on Fuzzing.- Learning AI coding style for software plagiarism detection.- Understanding and Measuring Inter Process Code Injection in Windows Malware.

Read more less

Book SynopsisChapter 1 Basic concepts of cybersecurity.- Chapter 2 Attack vectors and malware.- Chapter 3 System security.- Chapter 4 Cryptography.- Chapter 5 Key management and PKI.- Chapter 6 Network security.- Chapter 7 Wireless Security.- Chapter 8 User authentication.- Chapter 9 IAM  Identity and Access Management.- Chapter 10 Digital Privacy.- Chapter 11Secure by design.- Chapter 12 Physical Information Security.- Chapter 13 Security culture.- Chapter 14 Cybersecurity readiness, security testing and audit.- Chapter 15 AI and cybersecurity.- Chapter 16Cyber operations.- Chapter 17 Cyber organizational structures and regulation.- Chapter 18 Governance and information security management.- Chapter 19 Cybersecurity risk management.

Read more less

Book SynopsisEstablishing Secure and Privacy-Preserving Blockchain Applications Through Real World Cryptography. DPM Papers: Privacy-Preserving Optimal Parameter Selection for Collaborative Clustering.- reteLLMe: Design rules for using Large Language Models to Protect the Privacy of Individuals in their Textual Contributions.- Plausible Deniability of Redacted Text.- Exploring Distribution Learning of Synthetic Data Generators for Manifolds.- HEDAS: Secure and Efficient Distributed OLAP using Fully Homomorphic Encryption.- Card-based Cryptographic Protocols for Three-input Functions with a Standard Deck of Cards Using Private Operations.- Grid-Based Decompositions for Spatial Data under Local Differential Privacy.- Balancing Privacy and Utility in Multivariate Time-Series Classification.- Dynamic k-anonymity: A Topological Framework.- Using Static Code Analysis for GDPR Compliance Checks.- Privacy-preserving tabular data generation: Systematic Literature Review.- A DPIA Repository for Interdisciplinary Data Protection Research.- Secrecy and Sensitivity: Privacy-Performance Trade-Offs in Encrypted Traffic Classification. CBT Papers: Route Discovery in Private Payment Channel Networks.- A comparative study of Rust smart contract SDKs for Application-Specific Blockchains.- Offchain Runtime Verification (for The Tezos Blockchain).- Quantifying Liveness and Safety of Avalanche's Snowball.- We will DAG you.- Assessing the Impact of Sanctions in the Crypto Ecosystem: Effective Measures or Ineffective Deterrents?.- Practical Implementation of Pairing-Based zkSNARK in Bitcoin Script.- Homomorphic Encryption Based ECDSA Generation Over Five Party Protocol.- Benchmarking post-quantum cryptography in Ethereum-based blockchains. CyberICPS Papers: Exploring Anomaly Detection for Marine Radar Systems.- Hunting Vulnerabilities in the Maritime Domain.- Threat Modeling in Satellite Communications for Maritime Operations.- Cybersecurity Challenges in Industrial Control Systems: An Interview Study with Asset Owners in Norway.- Usage of Cybersecurity Standards in Operational Technology Systems.- Deployment Challenges of Industrial Intrusion Detection Systems.- A Framework For Applying Digital Twins To Support Incident Response.- Automated Side-Channel Analysis of ARM TrustZone-M Programs.- FrameD: Toward Automated Identication of Embedded Frameworks in Firmware Images.- Leveraging the domain experts: specializing privacy threat knowledge.

Read more less

Book SynopsisNetwork Security.- RFI: Enhancing Network Intrusion Detection through Robust Feature Selection Techniques.- HyperBC: Hypergraph-based Approach for Behavior Cluster of Suspicious APT Attacks.- MEMO: Detecting Unknown Malicious Encrypted Traffic via Metric Learning and Order aware Pre training.- Interoperable Security Information and EventManagement Framework for Multi Cloud Environment.- Anti-EMP: Encrypted Malware Packets Filtering Algorithm Leveraging Ciphertext Patterns under Zero Knowledge Setting.- Is This the Same Code? A Comprehensive Study of Decompilation Techniques for WebAssembly Binaries.- Distributed Intrusion Detection in Dynamic Networks of UAVs using Few Shot Federated Learning.- Interference Avoidance and Mitigation Technique Utilizing Cooperative Characterization of Interferers in Dense Wireless Networks.- A Border Management Protocol for Multi Identifier Network within the Network Layer and Its Attack Detection Extension.- VLDoS Variable Low rate DoS Attack Model for BBR algorithm in TCP.- FullView: Using Bidirectional Group Sequences to Achieve Accurate Encrypted Traffic Classification.- TEE-Receipt: A TEE based Non repudiation Framework for Web Applications.- An Incentive Mechanism for Enhancing Transaction Privacy Based on Reputation Perception and Double Auction.- Dynamically Expanding Factor Base of Index Calculus Algorithm to Solve Massive Discrete Logarithm Problems Faster.- Blockchain and Cryptocurrencies.- ASOZ: Anonymous and Auditable Cryptocurrency withEnhanced Confidential Transaction.- Identity Inference in Ethereum: Towards Financial Security for Blockchain Ecosystem.- SMDT: A Blockchain based Secure Multi version DataTrading Scheme with Fair Profit Sharing.- Substitution Attacks on Asymmetric (Group) Message Franking.- Symerge: Replacing Calls in Under Constrained Symbolic Execution and Find Vulnerabilities.- Threshold Key Management and Signature in Dynamic Distributed System.

Read more less

Book SynopsisFuzzing and IoT security.- Fast Firmware Fuzz with Input/Output Reposition.- ChipFuzzer: Towards Fuzzing Matter based IoT Devices for Vulnerability Detection.- Reusablity Evaluation of Reports in Security Operation Centers for IoT with Sentence ALBERT and Jaccard Similarity.- Multi Server Publicly Verifiable Computation of polynomials.- Siamese Neural Network for Robust IoT Device Type Identification: A Few Shot Learning Approach.- FISFuzzer: A Grey Box Protocol Fuzzer Based on Field Inference and Scheduling.- Malware and Attack Analysis.- Mal POBM: A Genetic Algorithm for Malware Adversarial Sample Generation.- Graphite: Real Time Graph Based Detection of Windows Fileless Malware Attacks.- Robust Network Intrusion Detection via Semi-Supervised Deep Reinforcement Learning.- BinSimDB: Benchmark Dataset Construction for Fine Grained Binary Code Similarity Analysis.- OnionPeeler: A Novel Input Enriched Website Fingerprinting Attack on Tor Onion Services.- Web Security.- Beyond the Public Mempool: Catching DeFi Attacks Before They Happen with Real Time Smart Contract Analysis.- Ensuring Integrity in Online Content Usage and Download Counting with Smart Contracts.-ChatSpamDetector: Leveraging Large Language Models for Effective Phishing Email Detection.- EasyCSPeasy: A Server side and Language agnostic XSS Mitigation by Devising and Ensuring Compliance with CSP.- Encoder based Multimodal Ensemble Learning for High Compatibility and Accuracy in Phishing Website Detection.- Bag of Characters: A Multiple Instance Learning Framework for URL Embedding in Web Security.- AutoS2ploit: From Automotive Safety Critical Functionalities to Security Exploit.- Pitfalls of data masking techniques: Re-identification attacks.- Faster Three Party Constant round Comparison with Application in Neural Network Inference.- WtLDP:Generating Synthetic Decentralized Weighted Graphs with Local Differential Privacy.- Tarnhelm: Using Adversarial Samples to Protect User Privacy Against Traffic Identification.

Read more less

Book SynopsisAuthentication.- Pulse to-Pair: Heartbeat based Authentication of IoT Devices for Elderly Care.- A Lightweight Group Authentication Framework for Cross Domain Internet of Things.- DPU LARD: DPU Leveraged Attestation of Remote Devices for Security of OT Networks.- Gait4Auth: Enhancing Identification and Security in Gait Based Authentication.- A Hardware Oriented Lightweight Block Cipher and Its Application in Surveillance Video.- TGSA: Trajectory Group Semantic Anonymization.- Large Language Model for Cybersecurity.- Can’t say cant? Measuring and Reasoning of Dark Jargons in Large Language Models.- Cybersecurity with LLMs and RAGs: Challenges and Innovations.- Enhancing Pre Trained Language Models for Vulnerability Detection via Semantic Preserving Data Augmentation.- K-BOOST: A Cyber Security NER Model with Knowledge Augmentation via BERT.- FLKT: Improving the Fidelity and Robustness of Federated Learning Aggregation Rules via the Key data and Trap model.- Poisoning Attack on Federated Learning with Non IID Data: A Historical-Global-Model-Based Approach.- Security Assessments.- A Comprehensive Evaluation of the Impact on Tor Network Anonymity Caused by ShadowBridge.- ADG-Dedup: Adaptive Dynamic Grained Deduplication Scheme for IoT Data in Cloud Storage.- Enhancing Reliability in Open Rating Systems: A Trust Aware Filtering Approach.- Graph Injection Attack based on Node Similarity and Non linear Feature Injection Strategy.- Assessing and Prioritizing Ransomware Risk Based onHistorical Victim Data.- Solving ILWE Problem More Efficiently and Application to BLISS Side Channel Attack.

Read more less

Book Synopsis.- Part I Introduction and Intuition: Chapter 1 Introduction .- Chapter 2 Motivating case studies .- Part II Modelling Protocols and Threats: Chapter 3 Syntax and operational semantics for security protocols .- Chapter 4 Threat models for open networks .- Part III Authentication and Privacy: Chapter 5 Authentication by agreement .- Chapter 6 Authentication using time and distance .- Chapter 7 Privacy.

Read more less

Book SynopsisCyber attacks and IT breakdowns threaten every organization. The incidents accumulate and often form the prelude to complex, existence-threatening crises. This book helps not only to manage them, but also to prepare for and prevent cyber crises. Structured in a practical manner, it is ideally suited for crisis team members, communicators, security, IT and data protection experts on a day-to-day basis. With numerous illustrations and checklists.This book is a translation of the original German 1st edition Cyber Crisis Management by Holger Kaschner, published by Springer Fachmedien Wiesbaden GmbH, part of Springer Nature in 2020. The translation was done with the help of artificial intelligence (machine translation by the service DeepL.com). A subsequent human revision was done primarily in terms of content, so that the book will read stylistically differently from a conventional translation. Springer Nature works continuously to further the development of tools for the production of books and on the related technologies to support the authors.Table of Contents- Textbook cyber crises - First things first: the human factor in (cyber) crisis management - Cyber Crisis Response - Crisis Preparation - Cyber Crisis Prevention - Post Crisis Care: post-crisis care and follow-up - At a glance: Seven Deadly Sins of Cyber Crisis Management.

Read more less

Book SynopsisUsing many practical examples and notes, the book offers an easy-to-understand introduction to technical and organizational data security. It provides an insight into the technical knowledge that is mandatory for data protection officers. Data security is an inseparable part of data protection, which is becoming more and more important in our society. It can only be implemented effectively if there is an understanding of technical interrelationships and threats. Data security covers much more information than just personal data. It secures all data and thus the continued existence of companies and organizations.This book is a translation of the original German 2nd edition Datensicherheit by Thomas H. Lenhard, published by Springer Fachmedien Wiesbaden GmbH, part of Springer Nature in 2020. The translation was done with the help of artificial intelligence (machine translation by the service DeepL.com). A subsequent human revision was done primarily in terms of content, so that the book will read stylistically differently from a conventional translation. Springer Nature works continuously to further the development of tools for the production of books and on the related technologies to support the authors.Table of ContentsData protection and data security - How computers communicate with each other - What can happen to data files - Technical threats - Dangerous software - Dangers from mobile data carriers and devices - Telephone system as a source of danger - Destruction of data - Securing data - Encryption - Security of websites - Common threats to IT security - Identification of computers and IP addresses - Firewalls - Routers - Configuration of protection systems - The demilitarized zone - Organizational data protection

Read more less