Network Security Architecture Research Articles

Network Security and Privacy Challenges in Smart Vehicle-to-Grid

Smart vehicle-to-grid (V2G) involves intelligent charge and discharge decisions based on user operational energy requirements, such as desired levels of charging and waiting time. V2G is also supported by information management capabilities enabled by a secure network, such as a reliable privacy-preserving payment system. In this article, we describe the network security and privacy requirements and challenges of V2G applications. We present a new network security architecture to support V2G. We propose a scheme with the following security and privacy-preserving features: anonymous authentication, fine-grained access control, anonymous signatures, information confidentiality, message integrity, remote attestation, and a payment system. This article is oriented toward practitioners interested in designing and implementing secure and privacy-preserving networks for smart V2G applications.

Recent Research in Network Security

Abstract Network security and Data analytics is an important to present society where information technology and services pass through each facet of our lives. However, it is demanding to achieve, as technology is changing at rapid speed and our systems turn into ever more complex. We are gradually more dependent upon such information and communications infrastructures, and the threats we face are organized and exploit our dependency by the attackers or cyber criminals. Moreover, cyber space is considered as fifth battlefield after land, air, water and space. The focal objective of the Special Issue on “Recent research in network security” is to provide insight mechanisms while handling data; provide conceptual understanding of network security issues, challenges and mechanisms; develop basic skills of secure network architecture and explain the theory behind the security of networks, analytics and different cryptographic algorithms. It is to present the most recent challenges and developments in data analytics and networks. It also provides a forum for researchers, practitioners and educators to present and discuss the most recent innovations, trends, and concerns, practical challenges encountered and the solutions adopted in these fields.

Research on Data Intrusion Detection Technology based on Fuzzy Algorithmn

The computer system is becoming more complex and massive network data, which brings great difficulties to the traditional intrusion detection system. Intrusion detection system is an important part of the network and information security architecture, which is mainly used to distinguish the normal activities of the system and the suspicious and intrusion patterns. But the challenge is how to effectively detect network intrusion behavior in order to reduce the false alarm rate and false negative rate. Based on the shortcomings of existing intrusion detection methods, the fuzzy Cmeans clustering method is proposed to analyze the intrusion detection data, so as to find out the abnormal network behavior patterns. By testing the CUP99 data set, the results show that the IFCA is not only feasible but also accurate and efficient. The improved fuzzy clustering algorithm proposed in this paper can improve the detection rate of intrusion detection and reduce the false detection rate, and can be widely used in intrusion detection system.

The Impact of Information Security on Bankss Performance in Egypt

This paper attempts at investigating the impact of information security on the performance of Egyptian banks. This has been conducted using a sample of 13 banks (out of 32 banks), during 2013. Information security is measured by the degree of the application of ISO 27001 and PCI-DSS standards on Egyptian Banks, while banks' performance is measured by indicators of profitability and asset quality. ISO 27001 specifies the requirements for establishing, implementing, operating, monitoring, reviewing, maintaining and improving a documented Information Security Management System (ISMS). Besides Payment Card Industry Data Security Standards (PCI-DSS) is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations protectively protect customer account data. Results indicate that implementation of ISO 27001 standards may affect profitability indicators as measured by Return on Capital, while implementation of PCI-DSS standard may affect asset quality as measured by Non-Performing Loan Ratio.

An Ultra-Lightweight Encryption Scheme in Underwater Acoustic Networks

We tackle a fundamental security problem in underwater acoustic networks (UANs). The S-box in the existing block encryption algorithm is more energy consuming and unsuitable for resources-constrained UANs. In this paper, instead of S-box, we present a lightweight, 8-round iteration block cipher algorithm for UANs communication based on chaotic theory and increase the key space by changing the number of iteration round. We further propose secure network architecture of UANs. By analysis, our algorithm can resist brute-force searches and adversarial attacks. Simulation results show that, compared with traditional AES-128 and PRESENT algorithms, our cryptographic algorithm can make a good trade-off between security and overhead, has better energy efficiency, and applies to UANs.

Pyramid: A Case Study of Cyber Security in India

As the world becomes increasingly interlinked through the Internet, cyberspace frauds are also on the rise. This is a case study on a company, Pyramid Cyber Security (P) Ltd., which specializes in digital crime, fraud and forensic solutions and services in India. Over the years, the company has established several digital forensics laboratories and security projects for agencies in law enforcement, the public sector and corporate organizations. With the scalability, flexibility and economic advantage offered by cloud computing, more and more organizations are moving towards cloud for their applications. With all the benefits of cloud computing, it also opens up a company to the danger of digital crime and security breaches on the cloud platform. This has thrown open new vistas for Pyramid, putting it in a dilemma of whether to focus on the existing business or explore new opportunities in cloud forensics investigation thrown by the wide acceptance of cloud computing. It also poses the question whether a company should go in for pre-incident or post-incident digital network security architecture. It is a teaching case.

English

In modern network security and management architecture, Classification of Traffic plays a major role in recent years. In particular, the process of intrusion detection and QOS control is considered as a essential components in traffic classification. Recent method uses statistical feature related classification approach with machine learning techniques for Traffic classification. Earlier method used several machine learning classifiers for classification purpose. Due to the lack of classifier performance in each aspect, the overall classification of traffic affected while least size of training data are used. To deal with this process, this paper proposes an efficient classifier called adaptive nearest cluster based classifier (ANCC-classifier). The proposed classifier classifies the traffic by collecting the statistical feature based correlated information. Such information is obtained by analysing the normal and abnormal flow of network. The present system is analysed in theoretical and experiential perspectives. Experimental result provides improved performance when compared with the other state of art methods.

Critical infrastructure protection: Requirements and challenges for the 21st century

Critical infrastructures play a vital role in supporting modern society. The reliability, performance, continuous operation, safety, maintenance and protection of critical infrastructures are national priorities for countries around the world. This paper explores the vulnerabilities and threats facing modern critical infrastructures with special emphasis on industrial control systems, and describes a number of protection measures. The paper also discusses some of the challenging areas related to critical infrastructure protection such as governance and security management, secure network architectures, self-healing, modeling and simulation, wide-area situational awareness, forensics and learning, and trust management and privacy.

NetSecCC: A scalable and fault-tolerant architecture for cloud computing security

How to ensure network security for modern virtual machine based cloud computing platforms is still an open question. This question becomes more important and urgent to solve, as the fast development of cloud computing in recent years. Though there are many existing solutions, they either provide incomplete protection or neglect important intrinsic characteristics in cloud computing. In this paper, we introduce a novel network security architecture for cloud computing (NetSecCC) considering characteristics of cloud computing. Specifically, it 1) provides protection to both external and interne traffics in cloud computing, 2) attains flexible scalability with respect to virtual middlebox load, and 3) achieves fault-tolerant among virtual middlebox failure. Experiments and simulations on our proof-of-concept prototype of NetSecCC validate that NetSecCC is an effective architecture with minimal performance overhead, and that it can be applied to extensive practical promotion in cloud computing.

Research and practice of dynamic network security architecture for IaaS platforms

Network security requirements based on virtual network technologies in IaaS platforms and corresponding solutions were reviewed. A dynamic network security architecture was proposed, which was built on the technologies of software defined networking, Virtual Machine (VM) traffic redirection, network policy unified management, software defined isolation networks, vulnerability scanning, and software updates. The proposed architecture was able to obtain the capacity for detection and access control for VM traffic by redirecting it to configurable security appliances, and ensured the effectiveness of network policies in the total life cycle of the VM by configuring the policies to the right place at the appropriate time, according to the impacts of VM state transitions. The virtual isolation domains for tenants' VMs could be built flexibly based on VLAN policies or Netfilter/Iptables firewall appliances, and vulnerability scanning as a service and software update as a service were both provided as security supports. Through cooperation with IDS appliances and automatic alarm mechanisms, the proposed architecture could dynamically mitigate a wide range of network-based attacks. The experimental results demonstrate the effectiveness of the proposed architecture.

Developing Forensic Readiness Secure Network Architecture for Wireless Body Area Network (WBAN)

Wireless Body Area Network (WBAN) is a wireless network that can be attached or implanted into the human body. This allows medical devices that are used for monitoring any bodily function to be equipped with a wireless network system. This system is vulnerable, similar to any other currently available wireless systems e.g. Wireless Local Area Network (WLAN) and Bluetooth. However, currently there were not many discussions on the WBAN security impact and security threats and if there is any, the issues were discussed through theoretical and simulation data. In this paper, a practical approach to assessing WBAN security impact is designed in order to identify, evaluate, and develop a Secure Network Architecture complete with the Forensic Readiness capability to secure WBAN implementation.

Construction of Network Security Architecture Based on Formal Specification in Digital Campus

With comprehensive analysis on security requirements of information transmission in digital campus, new primitives in asymmetric and symmetric cryptographic system are designed to describe essential security attributes. Secure information transmission is constructed with composition of the generated primitives and realized with common security technologies. And then, formal analysis shows that, secrecy, integrity, availability, controllability, non-repudiation and identifiability during information transmission can be insured by this architecture. At last, the network security architecture is verified by experiment based on Hadoop, with comparison data on the attacked rate in cloud environment.

Hybrid Network Defense Model Based on Fuzzy Evaluation

With sustained and rapid developments in the field of information technology, the issue of network security has become increasingly prominent. The theme of this study is network data security, with the test subject being a classified and sensitive network laboratory that belongs to the academic network. The analysis is based on the deficiencies and potential risks of the network's existing defense technology, characteristics of cyber attacks, and network security technologies. Subsequently, a distributed network security architecture using the technology of an intrusion prevention system is designed and implemented. In this paper, first, the overall design approach is presented. This design is used as the basis to establish a network defense model, an improvement over the traditional single-technology model that addresses the latter's inadequacies. Next, a distributed network security architecture is implemented, comprising a hybrid firewall, intrusion detection, virtual honeynet projects, and connectivity and interactivity between these three components. Finally, the proposed security system is tested. A statistical analysis of the test results verifies the feasibility and reliability of the proposed architecture. The findings of this study will potentially provide new ideas and stimuli for future designs of network security architecture.

Research on Computer Network Security Architecture of Universities in China

With the development of network, the computer systems of universities in China gradually use network management and services. However, in network the system faces security threats like virus, malicious software and human attack, which may cause data damage, missing and stealing of confidential documents, or even lead to the breakdown of network system. Therefore, it is important to promote the security of computer network systems of universities. This paper gives the comprehensive analysis on the security system of computer network systems of universities in China, analyzes the factors easily leading to the security and provides suggestions and reference for network construction.

Network Security Architecture Combined Netflow with Cooperative Firewall

The popularization of Internet greatly changes people's lifestyle. E-life is followed with e-business and e-government. When we depend on its convenience, it also derives many unimaginable security issues. Any mainframe may be attacked by hackers, Trojan horses, worms, viruses, DoS / DDoS, and so on. It is more rampant in the last few years. In this paper, we combine with NetFlow and cooperative firewall and propose a more secure protection mechanism. If the assault happened, managers can quickly defense the attacks, protect the server’s security and minimize various injuries.

Wireless Network Security Architecture with Blowfish Encryption Model

In this research paper ,we developed a model for a large network, wireless nodes are interconnected and each can be considered as a node processor that offer services to other node processors connected to a specific network. A very high proportion of the nodes that offer services need to carry out an authentication process so as to make an access request to the node offering the service. In this context, an integrated reconfigurable network security architecture moved to the application layer has become the need of the day for secure wireless data sharing. The security schemes of the seven layer OSI architecture need to be placed intrinsically in the wireless node itself and should be capable of supporting the MAC layer, IP address based layer and the routing protocols of the network layer. This work focuses on the use of emulator and embedded hardware architectures for wireless network security. In this work, the individual nodes can have a unique security signature pattern maintained by respective wireless nodes using an encryption algorithm and this is made dynamic. The metrics includes latency, throughput, Scalability, Effects of data transfer operation

The perimeter is dead – what next for the appliance?

For years there has been talk of ‘de-perimeterisation’. Now people talk of having multiple perimeters, or of bringing the perimeter further inside the organisation. The use of cloud services and mobile devices for enterprise use is also increasing in all sizes of organisation. Is there any place left in this changing world for the security appliance? For years there's been talk of ‘de-perimeterisation’. Now people talk of having multiple perimeters, or of bringing the perimeter further inside the organisation. Is there any place in this changing world for the security appliance? How does it fit with the new security landscape and new modes of working? Tracey Caldwell looks at where the security appliance fits into today's network security architecture.

Security Architecture Framework and Secure Routing Protocols in Wireless Sensor Networks - Survey

Wireless sensor networks emerging has increased now a days , therefore the need for effective security mechanisms is essential. Because sensor networks may interact with sensitive data and operate in hostile unattended environments, it is imperative that these security concerns be addressed from the beginning of the system design. we survey the major topics in wireless sensor network security architecture framework includes the requirements in the sensor security, classify many of the current attacks, listing out their corresponding defensive measures that can be applied, and finally the classification of secure routing protocols, its design issues and their comparison.

A Secure Networking Architecture for the Internet of Things

This article describes innovative and highly secure network architecture, dedicated to internet of things. We recommend that the infrastructure, there is a new label project, to support the upcoming launch of the standard Host Identity Protocol (HIP). Our main concern is to ensure the privacy of RFID tags, while enabling things to things communications.

Analysis and Research of Financial Network Security Architecture

With the rapid development of network technology, computer network applications in the financial system is becoming increasingly popular, the financial network security issues become increasingly prominent. This paper through the analysis of various risks faced by current financial networks, proposes the design principles of financial network security architecture and the design goals of financial network security architecture, finally gives the design patterns of financial network security architecture.