Ensuring security in depth based on heterogeneous network security technologies

Abstract

With the explosive growth of Internet connectivity that includes not only end-hosts but also pervasive devices, security becomes a requirement for enterprises. Although a significant effort has been made by the research community to develop defense techniques against security attacks, less focus has been given to manage security configuration efficiently. Network security devices, such as firewalls, intrusion detection and prevention systems, honeypot as well as vulnerability scanner, operate as a stand-alone system for solving a particular security problem. Yet these devices are not necessarily independent. The focus of this work is encompassing a security infrastructure where multiple security devices form a global security layer. Each component is defined with respect to the others and interacts dynamically and automatically with the different security devices in order to choose the best solution to be launched to prevent the final malicious objective. Our solution aims at solving, at the same time, the need for active defence, speed, reliability, accuracy and usability of the network.

Prototype Device With Lightweight Protocol for Secure RFID Communication Without Reliable Connectivity

“…The third pillar, ''availability,'' is especially significant, as it specifically makes critical data available in situations in which it would not be otherwise available. Thus, it would be considered a component of ''Security in Depth'' [47]. In addition to the CIA triad, our proposed system implements the three A's of data security: authorization, authentication, and accounting'' [48].…”

Intrusion Detection System for Home Windows based Computers

“…antivirus software, antimalware etc.). Passive threat-detecting systems usually employ certain selfadaptability (e.g [3]). Recently, together with the quickly growing market of Internet of Things (IoT), new industrial systems connected to the Internet emerge that must be protected as well.…”

“…The rules and their format are used by the Colander IDS, as they were the most wide spread and available rule set. Suricata 2 software is backed by Open Information Security Foundation (OISF) 3 . Its first beta version was released in 2009 while the first stable release in July 2010.…”

Monitoring unauthorized internet accesses through a ‘honeypot’ system

“…In this scenario, honeypots [3][4][5][6][7][8][9] can be useful for two main goals. The first one concerns the significant possible aid in discovering rootkits, Trojans, and potential network risks.…”

“…Consequently, network managers and skilled single users are trying to deploy suitable defense tools, such as firewalls, virus scanning, and intrusion detection systems [1][2][3]. Generally these tools can significantly benefit from the knowledge of the nature of attacks.…”