Intent-Driven Secure System Design: Methodology and Implementation

Ooi, Sian En; Beuran, Răzvan; Kuroda, Takayuki; Kuwahara, Tomohiro; Hotchi, Ryosuke; Fujita, Norihito; Tan, Yasuo

doi:10.1016/j.cose.2022.102955

Cited by 8 publications

(4 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…By leveraging machine learning, anomaly detection algorithms, and behavioral analytics [176], researchers can develop more robust and adaptive defense mechanisms capable of mitigating a wide range of TCP/IP header attacks in real-time. Moreover, researchers can focus on understanding the underlying vulnerabilities in TCP/IP implementations and developing secure-by-design protocols to mitigate common attack vectors [177], [178]. This involves analyzing protocol specifications, identifying weaknesses in packet header fields, and proposing enhancements to strengthen TCP/IP security.…”

Section: Figure 10 Traffic Integrity Verificationmentioning

confidence: 99%

Survey on evolving threats in TCP/IP header attacks: Emerging trends and future directions

Winnie Owoko

2024

World J. Adv. Eng. Technol. Sci.

View full text Add to dashboard Cite

The TCP/IP protocol suite, a cornerstone of modern networking, faces escalating threats from evolving attack vectors targeting its headers. This survey explores emerging trends in TCP/IP header attacks, assessing their potential impact and outlining future directions for defense strategies. By scrutinizing recent research and real-world incidents, the paper aims to offer insights into the evolving threat landscape and provide recommendations for enhancing network security. Key areas of investigation include the historical evolution of TCP/IP header vulnerabilities, the adaptation of attackers' techniques over time, and the development of novel defense mechanisms to counteract these threats. The survey underscores the critical importance of understanding TCP/IP header attacks in contemporary cybersecurity and highlights the necessity for proactive measures to safeguard network infrastructures. By addressing the challenges posed by evolving TCP/IP header attacks and identifying areas for further research and development, this survey contributes to the ongoing efforts to strengthen network defenses and mitigate the risks associated with cyber threats targeting TCP/IP protocols.

show abstract

Section: Figure 10 Traffic Integrity Verificationmentioning

confidence: 99%

Survey on evolving threats in TCP/IP header attacks: Emerging trends and future directions

Winnie Owoko

2024

World J. Adv. Eng. Technol. Sci.

View full text Add to dashboard Cite

show abstract

“…Intent-driven security introduces new capabilities for automation and resilience: By presenting security strategies and requirements as intents, low-level configuration and reconfigurations, implementation, and enforcement of the policies can be left for the responsibility of the network. For example, Ooi et al [11], [12] described a system designer, called SecurityWeaver, to annotate network service requirements with security demands and then automatically generate secure network designs. They utilized MITRE attack matrix based knowledge base to present security annotations: to identify adversarial tactics and to include appropriate countermeasures into designs.…”

Section: B Automated Security Configurationmentioning

confidence: 99%

Security in Intent-Based Networking: Challenges and Solutions

Ahmad,

Malinen,

Christou

et al. 2023

2023 IEEE Conference on Standards for Communications and Networking (CSCN)

View full text Add to dashboard Cite

Intent-Based Networking (IBN) aims to automate administrative and management tasks in future communications networks. By leveraging networking concepts such as network abstractions and data-plane programmability and using artificial intelligence (AI), IBN improves the overall efficiency of communications networks. IBN employs a closed-loop architecture to monitor and optimize real-time network performance, reduce human intervention, and enhance resilience. However, the paradigm and the technological enablers introduce security challenges. This article studies the security gains and challenges in IBN from the aspect of enabling concepts and technologies. Furthermore, the article highlights potential solutions to existing challenges, outlines the standardization efforts, and summarizes the most important research gaps to advance future research in this direction.

show abstract

“…We present an implementation of DPX in hardware with NETFPGA-SUM and in software with an open switch [9]. The article in [10] aimed to improve network infrastructure management by open-stack clouds using the combination of a software-defined network (SDN), network function virtualization (NFV), and machine learning/artificial intelligence (ML/AI) and more predictable and reliable Objects to achieve and secure networks. With the help of artificial intelligence, the behavior of virtual machines and applications that are carried out in the OpenStack SDN-Cloud is monitored, so that if problems or impairments are recognized, a decision to fix this problem can be made quickly by analyzing data in motion, starting at the edge.…”

Section: Related Workmentioning

confidence: 99%

An advanced solution to develop infrastructure of communication systems aiming at flexibility and scalability to accommodate the future growth of institutions

Elsayed

2023

Preprint

View full text Add to dashboard Cite

As institutions expand, and grow, surging interference malware and attacks; large portions of the Internet at a time impinge and create large amounts of service disruption. So, their IT infrastructure needs to be updated and expanded to accommodate the changing demands of their business. The project's main objective is to improve and enhance the network infrastructure design for communication institutions. In this work, we tried to present a meliorating plan for the infrastructure of enormous communication systems inside institutions. It implemented the network topology so it has established an on-premises infrastructure constituting two sites with three different networks: LAN, data center, and DMZ. The LAN network was reserved for client devices. In contrast, the data center network is intended for servers such as the domain controller, additional domain controller, file storage server, network-attached storage, DHCP server, DNS server, and WDS server (used for deploying operating systems on devices). The DMZ network included servers for hosting public websites (IIS server) and public DNS, as well as a DFS server for replicating files between the two sites. To ensure the security of the infrastructure, a Fortigate firewall is used to separate the DMZ network from the LAN and data center networks. It connected firewall A to Firewall B to enhance security and filter traffic. It connected firewall B to a router, which is then connected to the ISP network.The on-premises infrastructure provides a reliable, secure, and scalable solution for institutions. The layered security approach with Fortigate firewalls helps to ensure that data and resources are protected from unauthorized access. Also, we performed the trap and IP security technology on the sites. The infrastructure is flexible enough to accommodate the organization's future growth and expansion needs. The combination of on-premises infrastructure and layered security measures provides a solid foundation for critical business operations. The infrastructure is well-suited to meet the needs of a modern enterprise with its advanced threat protection capabilities and ability to scale up or down as required.

show abstract

Intent-Driven Secure System Design: Methodology and Implementation

Cited by 8 publications

References 9 publications

Survey on evolving threats in TCP/IP header attacks: Emerging trends and future directions

Survey on evolving threats in TCP/IP header attacks: Emerging trends and future directions

Security in Intent-Based Networking: Challenges and Solutions

An advanced solution to develop infrastructure of communication systems aiming at flexibility and scalability to accommodate the future growth of institutions

Contact Info

Product

Resources

About