Large Corporate Network Research Articles

Data Mining Approach for Evil Twin Attack Identification in Wi-Fi Networks

Recent cyber security solutions for wireless networks during internet open access have become critically important for personal data security. The newest WPA3 network security protocol has been used to maximize this protection; however, attackers can use an Evil Twin attack to replace a legitimate access point. The article is devoted to solving the problem of intrusion detection at the OSI model’s physical layers. To solve this, a hardware–software complex has been developed to collect information about the signal strength from Wi-Fi access points using wireless sensor networks. The collected data were supplemented with a generative algorithm considering all possible combinations of signal strength. The k-nearest neighbor model was trained on the obtained data to distinguish the signal strength of legitimate from illegitimate access points. To verify the authenticity of the data, an Evil Twin attack was physically simulated, and a machine learning model analyzed the data from the sensors. As a result, the Evil Twin attack was successfully identified based on the signal strength in the radio spectrum. The proposed model can be used in open access points as well as in large corporate and home Wi-Fi networks to detect intrusions aimed at substituting devices in the radio spectrum where IEEE 802.11 networking equipment operates.

Pivot Attack Classification for Cyber Threat Intelligence

The initial access achieved by cyber adversaries conducting a systematic attack against a targeted network is unlikely to be an asset of interest. Therefore, it is necessary to use lateral movement techniques to expand access to different devices within the network to accomplish the strategic attack’s objectives. The pivot attack technique is widely used in this context; the attacker creates an indirect communication tunnel with the target and uses traffic forwarding methods to send and receive commands. Recognising and classifying this technique in large corporate networks is a complex task, due to the number of different events and traffic generated. In this paper, we present a pivot attack classification criteria based on perceived indicators of attack (IoA) to identify the level of connectivity achieved by the adversary. Additionally, an automatic pivot classifier algorithm is proposed to include a classification attribute to introduce a novel capability for the APIVADS pivot attack detection scheme. The new algorithm includes an attribute to differentiate between types of pivot attacks and contribute to the threat intelligence capabilities regarding the adversary modus operandi. To the best of our knowledge, this is the first academic peer-reviewed study providing a pivot attack classification criteria.

Device models and technologies of data transmission and processing in the internet of things networks

The subject of research is the analysis and definition of the information model of devices, the choice of technologies and protocols for data collection and analysis, routing protocols for the Internet of Things (IoT) networks. The purpose of the article is to create an information model of IoT devices, to define technologies and protocols for data transmission and processing and routing in Internet of Things systems. Building an information model of an IoT device includes identifying data sources and their formats, creating a model and data structure, and analyzing them using tools such as: Eclipse Vorto ThingBoard, Ubodots IoT, Node-Red-UI, freeboard.io . An example of a description of a model of microclimate control devices using the Eclipse Vorto toolkit is given. Two main data processing technologies from IoT devices are considered: IBM Watson IoT, Cisco IWF with examples of their application. Radio frequency, infrared, optical and galvanic technologies for interaction between data collection and data transmission devices in IoT networks with examples of their use are discussed. The areas of application of three main IoT network protocols are considered: MQTT (large corporate networks), CoAP (limited networks on the Internet), Bluetooth Low Energy (local networks without the Internet with a small amount of data).Wi-Fi WebSockets, ZigBee, LoRA, Simple RF, XMPP, RFID, NFC can be used as additional protocols for networks. The features of using routing protocols in IoT networks are discussed: RPL (low power consumption), cognitive RPL (for intelligent networks), CARP (for underwater communication networks), E-CARP (for data reuse).

Detection of network embedded devices in the perimeter of the organization

One of the important tasks in ensuring the information security of a corporate network is to ensure the smooth operation of its main components, especially during peak loads. The development of network infrastructure is inevitably associated with the emergence of processes in the network that reduce network performance. One of the most difficult tasks in the administration of large corporate networks is tracking parasitic traffic generated by computer viruses, various scanners and software. Cyber groups are overcoming the protection on the perimeter of the organizations they are interested in, and this is evidenced by the trend towards an increase in the proportion of successful targeted attacks. This is an occasion to shift the focus from preventing attacks on the perimeter to timely detection of compromise and response within the network. However, it is difficult to identify a carefully planned, sometimes time-spaced cyberattack. Nevertheless, the actions of hackers leave traces in network traffic, which means that the task of a cybersecurity specialist is to detect these traces. This article will consider one of the possible options for identifying atypical network activity and detecting the end device that generates these events.

Wireless Networks Encryption by Simulation of Attacks

Wireless LANs widespread use is attributable to a combination of factors, including simple construction, employee convenience, connection selection convenience, and the ability to support continual movement from residences to large corporate networks. For organizations, however, the availability of wireless LAN means an increased danger of cyberattacks and challenges, according to IT professionals and security specialists. This paper examines many of the security concerns and vulnerabilities associated with the IEEE 802.11 Wireless LAN encryption standard, as well as typical cyber threats and attacks affecting wireless LAN systems in homes and organizations, and provides general perception of weaknesses for home and business users.

Design and Implementation of Network Monitoring System for Campus Infrastructure Using Software Agents

In network management and monitoring systems, or Network Management Stations (NMS), the Simple Network monitoring Protocol (SNMP) is normally used, with which it is possible to obtain information on the behavior, the values of the variables, and the status of the network architecture. network. However, for large corporate networks, the protocol can present latency in data collection and processing, thus making real-time monitoring difficult. This article proposes a multi-agent system based on layers, with three types of agents. This includes the collector agent, which uses a Management Information Base (MIB) value to collect information from the network equipment, an input table of information from the network devices for the consolidator agent to process the collected data and leave it in a consumable format, and its subsequent representation by the application agent as a web service, in this case, as a heat map.

An Effective Algorithm for Collision Resolution in Security Policy Rules

A firewall is the main classic tool for monitoring and managing the network traffic on a local network. Its task is to compare the network traffic passing through it with the established security rules. These rules, which are often also called security policy, can be defined both before and during the operation of the firewall. Managing the security policy of large corporate networks is a complex task. In order to properly implement it, firewall filtering rules must be written and organized neatly and without errors. In addition, the process of changing or inserting new rules should be performed only after a careful analysis of the relationship between the rules being modified or inserted, as well as the rules that already exist in the security policy. In this article, the authors consider the classification of relations between security policy rules and also give the definition of all sorts of conflicts between them. In addition, the authors present a new efficient algorithm for detecting and resolving collisions in firewall rules by the example of the Floodlight SDN controller.

Growth standard charts for monitoring bodyweight in dogs of different sizes.

Limited information is available on what constitutes optimal growth in dogs. The primary aim of this study was to develop evidence-based growth standards for dogs, using retrospective analysis of bodyweight and age data from >6 million young dogs attending a large corporate network of primary care veterinary hospitals across the USA. Electronic medical records were used to generate bodyweight data from immature client-owned dogs, that were healthy and had remained in ideal body condition throughout the first 3 years of life. Growth centile curves were constructed using Generalised Additive Models for Location, Shape and Scale. Curves were displayed graphically as centile charts covering the age range 12 weeks to 2 years. Over 100 growth charts were modelled, specific to different combinations of breed, sex and neuter status. Neutering before 37 weeks was associated with a slight upward shift in growth trajectory, whilst neutering after 37 weeks was associated with a slight downward shift in growth trajectory. However, these shifts were small in comparison to inter-individual variability amongst dogs, suggesting that separate curves for neutered dogs were not needed. Five bodyweight categories were created to cover breeds up to 40kg, using both visual assessment and hierarchical cluster analysis of breed-specific growth curves. For 20/24 of the individual breed centile curves, agreement with curves for the corresponding bodyweight categories was good. For the remaining 4 breed curves, occasional deviation across centile lines was observed, but overall agreement was acceptable. This suggested that growth could be described using size categories rather than requiring curves for specific breeds. In the current study, a series of evidence-based growth standards have been developed to facilitate charting of bodyweight in healthy dogs. Additional studies are required to validate these standards and create a clinical tool for growth monitoring in pet dogs.

Assessing network authorization policies via reachability analysis

Evaluating if a computer network only permits allowed business operations without transmitting unwanted or malicious traffic is a crucial security task. Reachability analysis – the process that evaluates allowed communications – is a tool useful not only to discover security issues but also to identify network misconfigurations. This paper presents a novel approach to quantify network reachability based on the concept of equivalent firewall – a fictitious device, ideally connected directly to the communicating peers and whose policy summarizes the network behaviour between them – that can be queried to derive reachability information. We build equivalent firewalls by using a mathematical model that supports a large variety of network security controls (like NAT, NAPT, tunnels and filters up to the application layer) and allows an accurate analysis. The presented approach is efficient and highly scalable, as confirmed by tests with a large corporate network as well as synthetic networks.

Scalable analytics to detect DNS misuse for establishing stealthy communication channels

The Domain Name System (DNS) protocol is one of the few application protocols that are allowed to cross network perimeters of organizations. However, comprehensive monitoring of DNS traffic has been often overlooked in many organizations' cybersecurity strategies. As such, DNS provides a highly attractive channel for advanced threat actors and botnet operators to establish hard-to-block and stealthy communication channels between infected devices and command-and-control (C&C) infrastructures. Fast-fluxing (FF) and domain name generation algorithms (DGAs) are two well-known public DNS exploitation techniques to build agile C&C infrastructures. The detection of FF and DGA domain names is a big data problem, as it requires analyzing millions of DNS queries and replies over extended time periods. In this paper, we propose two algorithms to perform DNS analytics and effectively detect FF and DGA domain names. More importantly, we describe how the algorithms are implemented using two big data processing models: MapReduce and Feature Collection and Correlation Engine. The algorithms and implementation proposed are iterative and scale over long analysis periods. We describe the implementations and provide an evaluation complemented with case studies on 50 days of real-world DNS data consisting of more than 40 billion events, collected within a large corporate network.

Wireless LAN Security Threats & Vulnerabilities

Wireless LANs are everywhere these days from home to large enterprise corporate networks due to the ease of installation, employee convenience, avoiding wiring cost and constant mobility support. However, the greater availability of wireless LANs means increased danger from attacks and increased challenges to an organisation, IT staff and IT security professionals. This paper discusses the various security issues and vulnerabilities related to the IEEE 802.11 Wireless LAN encryption standard and common threats/attacks pertaining to the home and enterprise Wireless LAN system and provide overall guidelines and recommendation to the home users and organizations.

System analysis of protocols of management of a large corporate network

System analysis of protocols of management of a large corporate network

Corporate Intranet Security: Packet-Level Protocols for Preventing Leakage of Sensitive Information and Assuring Authorized Network Traffic

Securing large corporate communication networks has become an increasingly difficult task. Sensitive information routinely leaves the company network boundaries and falls into the hands of unauthorized users. New techniques are required in order to classify packets based on user identity in addition to the traditional source and destination host addresses. This paper introduces Gaussian cryptographic techniques and protocols to assist network administrators in the complex task of identifying the originators of data packets on a network and more easily policing their behavior. The paper provides numerical examples that illustrate certain basic ideas.

A geografia dos cinemas no lazer paulistano contemporâneo: redes e territorialidades dos cinemas multiplex e de arte

Leisure facilities and culture, cinema, who recentl y returned to be social and mediatically discussed on account of public protests opposing to the closure of the Fine Arts Cinema, played as a key role in the production and reproduc tion of urban space in Sao Paulo. In recent years, the film exhibition market in Sao Paulo has been modeled by at least two different units together: the multiplex cinemas, often located in s hopping centers, owned by large corporate networks, and cinemas that are movie-oriented alte rnative programming, installed in public streets or in galleries, which foster an appropriat ion of space we can nickname as territoriality. Given this social construct, the primary objective was to analyze the meaning of cinema facilities, the actions and appropriations develope d by its visitors, in and for the (re) production of the urban space in the capital of Sao Paulo state starting from the 1990’s, elaborating for this a theoretical and conceptual u nderstanding based on the concepts of territoriality and geographical networks, from a li terature review, with a primary and secondary surveys and mappings. The epistemological aim was to create an amalgam complex that does not mitigate nor the relevance of cultural factors, causes and consequences of the cinemas, nor disregarding the structure and the economic motivations of agents that coordinate the organization of such equipment and f acilities. It is believed, in this sense, that the work subsidized a densified critical of phenome na and cultural and economic processes, responsible, in some extent, by the production of c ontemporary urban space and its social meanings

Conceptual model of management system a large corporate network

Conceptual model of management system a large corporate network

Global Corporate Social Responsibility, Human Rights and Law: An Interactive Regulatory Perspective on the Voluntary-Mandatory Dichotomy

Corporate social responsibility (CSR) is often understood as an inherently voluntary corporate endeavour that inhabits the area stretching ‘beyond compliance’ with law. However, a growing number of writers and practitioners deem this understanding of CSR inaccurate and unproductive. In this article, the notion of CSR as ‘beyond compliance’ is questioned on logical, descriptive and normative grounds; once freed from its conceptual straitjacket, CSR research is encouraged to look more deeply into the mutual interaction between corporate voluntarism and law. When it comes to the regulation of CSR the key notion is that of discretion not voluntarism: regulating CSR is not about replacing voluntarism with hard law, but about guiding discretion through law in such a way that it neither overrides discretion nor leaves it untouched. For such purposes lawmakers employ various strategies to summon the regulatory potential of companies and their stakeholders. When it comes to CSR's impacts on law, effects are discernible at various stages, from law-making to law-specification to law-enforcement; responsible business practices contain benchmarks of due diligence and may enhance local capacities in host countries. Following illustrations and analysis of such interactions, CSR is characterised not merely as ‘self-regulation’ but as an emerging norm, resulting from a bottom-up process, that interacts with legal systems in both home and host countries. Furthermore this article identifies two legal baselines key to the business and human rights area: the ‘corporate baseline’, regarding the responsibility of a parent company for its affiliates' operations where human rights abuses take place, and the ‘governance baseline’, regarding the legal protections in the host country available to rightholders. In the context discussed herein, the fact that both of these baselines have barely been sketched renders the characterisation of CSR as a matter of ‘beyond compliance’ with law problematic. Instead CSR should be analysed for its role in the legal institutionalisation of the baseline. The specific context of respecting human rights in developing countries throughout the operation of large corporate networks such as multinational enterprises (MNEs) requires an attuned concept of CSR and an informed understanding of CSR's relation to law.

Network Protocols, Management and Security

If you have been using the Internet for any length of time, and especially if you work at a larger company and browse the Web while you are at work, you have probably heard the term firewall used. For example, you often hear people in companies say things like, I can't use that site because they won't let it through the firewall. If you have a fast Internet connection into your home (either a DSL connection or a cable modem), you may have found yourself hearing about firewalls for your home network as well. It turns out that a small home network has many of the same security issues that a large corporate network does. You can use a firewall to protect your home network and family from offensive Web sites and potential hackers.

News Briefs

An academic research team has developed a new algorithm that makes network routing more efficient. This would be important in large heterogeneous corporate networks in which the oldest, slowest routers make the others wait while they absorb updates and recalculate path tables.

University Networks and Data Security

In general, the problems of securing a university network are no different than those of securing any other large corporate network. But when it comes to data security, universities have their own unique problems. It's easy to point fingers at students--a large number of potentially adversarial transient insiders. Yet that's really no different from a corporation dealing with an assortment of employees and contractors--the difference is the culture.

Broadband transport — the synchronous digital hierarchy

All data networks require a physical transmission medium to convey information between network nodes. Within a local environment this physical medium might, for example, take the form of an Ethernet LAN, but wide area connections are provided using telecommunications constant bit rate transmission equipment. Furthermore, the assumption that data networking is simply the provision of WAN connectivity for large corporate networks is becoming dated. The explosion of interest in the Internet means that, for transport networks, the term data may encompass voice, video and multimedia applications for delivery to both home and office. This places additional requirements on the network infrastructure as each service has specific transport requirements. Network operators are currently in the process of deploying core networks of equipment conforming to the ITU-T Recommendations for a synchronous digital hierarchy (SDH), but many networks also contain a significant proportion of older transmission technologies. This paper provides a review of transmission technology and describes the impact of such networks on the transport of data.