Types Of Security Attacks Research Articles

Distributed anomaly detection for industrial wireless sensor networks based on fuzzy data modelling

Modern infrastructure increasingly depends on large computerized systems for their reliable operation. Supervisory Control and Data Acquisition (SCADA) systems are being deployed to monitor and control large scale distributed infrastructures (e.g. power plants, water distribution systems). A recent trend is to incorporate Wireless Sensor Networks (WSNs) to sense and gather data. However, due to the broadcast nature of the network and inherent limitations in the sensor nodes themselves, they are vulnerable to different types of security attacks. Given the critical aspects of the underlying infrastructure it is an extremely important research challenge to provide effective methods to detect malicious activities on these networks. This paper proposes a robust and scalable mechanism that aims to detect malicious anomalies accurately and efficiently using distributed in-network processing in a hierarchical framework. Unsupervised data partitioning is performed distributively adapting fuzzy c-means clustering in an incremental model. Non-parametric and non-probabilistic anomaly detection is performed through fuzzy membership evaluations and thresholds on observed inter-cluster distances. Robust thresholds are determined adaptively using second order statistical knowledge at each evaluation stage. Extensive experiments were performed and the results demonstrate that the proposed framework achieves high detection accuracy compared to existing data clustering approaches with more than 96% less communication overheads opposed to a centralized approach.

Assessing Ethical Severity of e-Learning Systems Security Attacks

Security and ethical issues with information systems (IS) are important concerns for most organizations. However, limited attention has been given to unethical behaviors and severity of cyber-security attacks, while these instances appear to be critically important. Although managers have been embracing e-learning systems for training and virtual-team collaborations, little is known about motivations for cyber-security attacks on such systems.Our research includes quantitative and qualitative study of 519 end-users who rated the ethical severity of five common cyber-security attacks. This study investigated five types of security attacks for differences in perceived severity according to gender, academic level, and age. Our findings reveal that the majority of users (90%) reported their sense of severity as unethical across all five cyber-security attacks, while only a small minority of users (3.24%) reported these cyber-security attacks to be ethical. This study also presents a further grounded analysis through follow-up interviews.

Cluster-Based Certificate Revocation with Vindication Capability for Mobile Ad Hoc Networks

Mobile ad hoc networks (MANETs) have attracted much attention due to their mobility and ease of deployment. However, the wireless and dynamic natures render them more vulnerable to various types of security attacks than the wired networks. The major challenge is to guarantee secure network services. To meet this challenge, certificate revocation is an important integral component to secure network communications. In this paper, we focus on the issue of certificate revocation to isolate attackers from further participating in network activities. For quick and accurate certificate revocation, we propose the Cluster-based Certificate Revocation with Vindication Capability (CCRVC) scheme. In particular, to improve the reliability of the scheme, we recover the warned nodes to take part in the certificate revocation process; to enhance the accuracy, we propose the threshold-based mechanism to assess and vindicate warned nodes as legitimate nodes or not, before recovering them. The performances of our scheme are evaluated by both numerical and simulation analysis. Extensive results demonstrate that the proposed certificate revocation scheme is effective and efficient to guarantee secure communications in mobile ad hoc networks.

A COMPREHENSIVE SURVEY ON SECURITY ISSUES IN CLOUD COMPUTING AND DATA PRIVACY LAW IN INDIA

Cloud computing is a new computing paradigm that brought a lot of advantages especially in ubiquitous services where everybody can access computer services through internet With cloud computing, there is no need of physical hardware or servers that will support the company’s computer system, internet services and networks. Cloud computing technology is a new concept of providing dramatically scalable and virtualized resources, bandwidth, software and hardware on demand to consumers. Consumers can typically requests cloud services via a web browser or web service. Using cloud computing, consumers can safe cost of hardware deployment, software licenses and system maintenance. On the other hand, it also has a few security issues. This paper introduces cloud security problems. The data in cloud need to secure from all types of security attacks. Another core services provided by cloud computing is data storages.

Malicious Node Attack Preventer (MNAP) Approach for Mobile Ad-hoc Networks (MANET's)

A Mobile Ad-hoc network is a heterogeneous network. They have very particular features such as high mobility, multi-hop routing, open system and the absence of any fix infrastructure. An ad-hoc network faces different type of security attack. In this paper, we discuss our implementation of the AODV protocol extension namely Malicious Node Attack Preventer (MNAP). AODV extension mechanism improves the AODV behavior. MNAP used the reserved field of RREQ and RREP packet format. MNAP implements security in AODV against black-hole and gray-hole attacks. Analyzes has been done based on PDR, throughput and delay of the node selected by doing simulation on Qualnet network simulator. General Terms Security

Security Issues of Routing Protocols in MANETs

There are a number of routing protocols developed by researchers. Due to the nature of ad hoc networks, secure routing is an important area of research in developing secure routing protocols. Although researchers have proposed several secure routing protocols, their resistance towards various types of security attacks and efficiency are primary points of concern in implementing these protocols. This paper presents some of the available secure routing protocols and most common attack patterns against ad hoc networks. Routing protocols are subjected to case studies against the most commonly identified attack patterns such as: denial-of-service attack, tunneling, spoofing, black hole attack and wormhole attack etc. In MANET, the nodes also function as routers that discover and maintain routes to other nodes in the network. Establishing an optimal and efficient route between the communicating parties is the primary concern of the routing protocols of MANET. Any attack in routing phase may disrupt the overall communication and the entire network can be paralyzed. Thus, security in network layer plays an important role in the security of the whole network. A number of attacks in network layer have been identified and studied in security research. An attacker can absorb network traffic, inject themselves into the path between the source and destination and thus control the network traffic flow.

A Study of Black Hole Attack on MANET Performance

Mobile Ad hoc Network (MANET) is a self-organized wireless network, consisting of nodes (mobile devices) responsible for its creation, operation and maintenance. The communication in the MANET is of multihop in nature due to absence of any fixed infrastructure. An attacker may intrude easily into MANET by posing as legitimate intermediate node and present various types of security attacks on data exchanges taking place between source and destination. In this paper we study the impact of presence of black hole node on MANET performance on the basis of reachability, hop count, neighbor node density and path optimality. We observe that as the percentage of black hole nodes increases, the MANET performance degrades significantly.

Impact of Security Attacks on a New Security Protocol for Mobile Ad Hoc Networks

A mobile ad hoc network (MANET) is a self-organized wireless short-lived network consisting of mobile nodes. The mobile nodes communicate with one another by wireless radio links without the use of any pre-established fixed communication network infrastructure. The mobile nodes are vulnerable to different types of security attacks that allow interception, injection, and interference of communication among nodes. Possible damages include leaking secret information, message contamination and node impersonation. MANETs need secure routing protocols to prevent possible security attacks. In this paper, we evaluate the performance of a new security protocol against various known and unknown malicious node attacks. Simulation results have shown that the proposed security protocol resists against malicious nodes with low implementation complexity.

Impact of Security Attacks on a New Security Protocol for Mobile Ad Hoc Networks

A mobile ad hoc network (MANET) is a self-organized wireless short-lived network consisting of mobile nodes. The mobile nodes communicate with one another by wireless radio links without the use of any pre-established fixed communication network infrastructure. The mobile nodes are vulnerable to different types of security attacks that allow interception, injection, and interference of communication among nodes. Possible damages include leaking secret information, message contamination and node impersonation. MANETs need secure routing protocols to prevent possible security attacks. In this paper, we evaluate the performance of a new security protocol against various known and unknown malicious node attacks. Simulation results have shown that the proposed security protocol resists against malicious nodes with low implementation complexity.

ESFBR- Enhanced Secure Field Based Routing in Wireless Mesh Networks

Wireless mesh network is a new type of network in which each node is connected to other nodes to enhance network reliability and performance. As compared to routing in other networks, wireless mesh network faces a lot of problem. Routing in wireless mesh network is a challenging task. Field based routing uses a little information to route the packets in the network. Due to this characteristic, field based routing algorithms are less expensive and much effective, but such algorithms also face different types of security attacks. In this paper, a novel Enhance Secure Field Based Routing Algorithm (ESFBR) is proposed which is an extension to the existing secure field based routing algorithm. ESFBR has been comprehensively tested using Omnet++ network identify and isolate the malicious node and to prevent the traffic flows from various attacks.

Classification and Review of Security Schemes in Mobile Computing

In this paper, we present the classification and review of security schemes in mobile computing system. We classify these schemes based on types the infrastructure used in the mobile computing system-Mobile Ad Hoc Networks (MANET) and Mobile Agent model. Mobile Ad Hoc Networks are pervasive, ubiquitous and without any centralized authority. These unique characteristics, combined with ever-increasing security threats, demand solutions in securing ad hoc networks prior to their deployment in commercial and military applications. This paper reviews the prevailing mobile ad hoc network security threats, the existing solution schemes, their limitations and open research issues. We also explain the Intrusion detection and response technique as an alternate method to protect the MANET based mobile computing systems and their approaches. A literature review of important existing Intrusion Detection approaches and Intrusion Response Approaches for MANET is also presented. This paper also presents the limitations of existing Intrusion Detection and Response Approaches for MANET and open research issues in providing MANET security. With respect to Mobile Agent based mobile computing system, we have presented the classification of various types of security attacks in Mobile Agent based model and presented the security solutions for those type of attacks proposed by the various schemes and the open research issues in providing security for Mobile Agent based mobile computing system. Such classification enhances the understanding of the proposed security schemes in the mobile computing system, assists in the development and enhancement of schemes in the future and helps in choosing an appropriate scheme while implementing a mobile computing system.

Optimal Binding-Management-Key Refresh Interval in Mobile IPv6 Networks

Mobile IPv6 requires periodic return routability (RR) procedures to avoid different types of security attacks. In this paper, we analyze the optimal binding-management-key refresh interval in mobile IPv6 networks. We first derive the expected binding-management-key exposal time in the RR procedure. After that, the optimal binding-management-key refresh interval, which minimizes additional signaling traffic while bounding the number of infected packets, is obtained. Through analytical and simulation studies, the impacts of the mobility rate, packet arrival rate, and security level on the infected packets are demonstrated.

A Wireless Sensor Networks Test-bed for the Wormhole Attack

In some applications, wireless sensor devices must be secured, especially when the captured information is valuable and sensitive. The wormhole attack is a significant type of security attack that can damage wireless sensor networks if they go undetected. It occurs when the attacker records packets at one point of the network, and then passes them into a different node. This node then injects the packets into the network again. In this tutorial article, an actual test bed called BANAID. It describes a simulated wormhole attack against wireless sensor networks. In addition, a recently developed solution against this attack is implemented.

In-Vehicle Secure Wireless Personal Area Network (SWPAN)

During the last several years, the interest in wireless networking has grown significantly due to the availability of many wireless products, such as cell phones, wireless enabled mice, keyboards, modems, and many other products. Bluetooth-enabled cell phones, personal digital assistance (PDAs), and laptops are becoming common. Wireless fidelity (Wi-Fi) products are growing at a rapid rate. Several companies have already started developing WiMax products. The reason for the rapid growth of wireless technology is that it provides the users with additional convenience over the wired technology. General Motors Corporation introduced a Bluetooth network in its 2003 Saab 9-3 model car. Having a wireless personal area network (WPAN) in a vehicle will allow the driver to control the various operations within the vehicle without taking his hands off the steering wheel. For example, the driver will be able to make a phone call through a Bluetooth-enabled headset and a Bluetooth-enabled cell phone using voice-activated dialing features. If the Bluetooth network is connected to the vehicle's wired network through an appropriate gateway device, then the driver will be able to control the lights, windshield wipers, air flow, heat, and various other features of the vehicle through a Bluetooth-enabled headset and voice-activated features. An in-vehicle WPAN will also allow the users to use their PDAs as electronic car keys. Though an in-vehicle WPAN can provide the users with many convenient features, it can also make the vehicle system vulnerable to many types of security attacks unless it is properly designed. In this paper, the authors present a technique for building an in-vehicle secure WPAN (SWPAN). The technique is user friendly and easy to use