Network Security Current Status and Future

A unique overview of network security issues, solutions, and methodologies at an architectural and research level Network Security provides the latest research and addresses likely future developments in network security protocols, architectures, policy, and implementations. It covers a wide range of topics dealing with network security, including secure routing, designing firewalls, mobile agent security, Bluetooth security, wireless sensor networks, securing digital content, and much more. Leading authorities in the field provide reliable information on the current state of security protocols, architectures, implementations, and policies. Contributors analyze research activities, proposals, trends, and state-of-the-art aspects of security and provide expert insights into the future of the industry. Complete with strategies for implementing security mechanisms and techniques, Network Security features: * State-of-the-art technologies not covered in other books, such as Denial of Service (DoS) and Distributed Denial-of-Service (DDoS) attacks and countermeasures * Problems and solutions for a wide range of network technologies, from fixed point to mobile * Methodologies for real-time and non-real-time applications and protocols

Christos Douligeris is currently Associate Professor of Informatics at the University of Pireaus, Greece. He has authored ten books in Greek, more than seventy refereed journal articles, and more than 100 papers for conferences. He has served in various editorial roles for IEEE Communications Society magazines and is currently Associate Editor for IEEE Communications Letters and the Technical Editor for IEEE Network Magazine. He is a senior member of the IEEE Communications Society and an IEEE Standards Association voting member for LAN, MAN, and wireless standards. He is also a member of the Association for Computing Machinery (ACM), and the Technical Chamber of Greece.

Dimitrios N. Serpanos is Professor of Electrical and Computer Engineering at the University of Patras, Greece. During his career, Professor Serpanos taught in the Department of Computer Science at the University of Crete and worked for the IBM Corporation at the T. J. Watson Research Center in the area of high-bandwidth systems. He holds two patents and is the author of more than 100 technical articles and papers, as well as the coeditor of Enterprise Networking. He is a senior member of the IEEE and a member of the New York Academy of Sciences, the ACM, and the Technical Chamber of Greece, as well as an Educational Member of USENIX.

Preface	p. xiii
Contributors	p. xv
Computer Network Security: Basic Background and Current Issues	p. 1
Some Terminology on Network Security	p. 1
ISO/OSI Reference Model for Networks	p. 3
Network Security Attacks	p. 7
Mechanisms and Controls for Network Security: Book Overview and Structure	p. 10
References	p. 11
Internet Security
Secure Routing	p. 15
Introduction	p. 15
Networking Technologies	p. 16
Attacks in Networks	p. 18
State of the Art	p. 20
Conclusion and Research Issues	p. 28
References	p. 29
Designing Firewalls: A Survey	p. 33
Introduction	p. 33
Firewall Classification	p. 39
Firewall Deployment: Management	p. 43
Conclusions	p. 48
References	p. 49
Security in Virtual Private Networks	p. 51
Introduction	p. 51
VPN Overview	p. 52
VPN Benefits	p. 52
VPN Terminology	p. 53
VPN Taxonomy	p. 54
IPSec	p. 57
Current Research on VPNs	p. 60
Conclusions	p. 61
References	p. 61
IP Security (IPSec)	p. 65
Introduction	p. 65
IPSec Architecture and Components	p. 67
Benefits and Applications of IPSec	p. 80
Conclusions	p. 81
References	p. 82
IDS for Networks	p. 83
Introduction	p. 83
Background	p. 84
Modern NIDSs	p. 87
Research and Trends	p. 93
Conclusions	p. 95
References	p. 96
Intrusion Detection Versus Intrusion Protection	p. 99
Introduction	p. 99
Detection Versus Prevention	p. 102
Intrusion Prevention Systems: The Next Step in Evolution of IDS	p. 104
Architecture Matters	p. 110
IPS Deployment	p. 112
IPS Advantages	p. 112
IPS Requirements: What to Look For	p. 113
Conclusions	p. 114
References	p. 115
Denial-of-Service Attacks	p. 117
Introduction	p. 117
DoS Attacks	p. 118
DDoS Attacks	p. 120
DDoS Defense Mechanisms	p. 127
Conclusions	p. 131
References	p. 132
Secure Architectures with Active Networks	p. 135
Introduction	p. 135
Active Networks	p. 136
SAVE Test bed	p. 137
Adaptive VPN Architecture with Active Networks	p. 138
(SAM) Architecture	p. 143
Conclusions	p. 149
References	p. 150
Secure Services
Security in E-Services and Applications	p. 157
Introduction	p. 157
What Is an E-Service?	p. 158
Security Requirements for E-Services and Applications	p. 160
Security for Future E-Services	p. 175
References	p. 177
Security in Web Services	p. 179
Introduction	p. 179
Web Services Technologies and Standards	p. 180
Web Services Security Standard	p. 201
Conclusions	p. 203
References	p. 204
Secure Multicasting	p. 205
Introduction	p. 205
IP Multicast	p. 205
Application Security Requirements	p. 206
Multicast Security Issues	p. 207
Data Authentication	p. 207
Source Authentication Schemes	p. 209
Group Key Management	p. 216
Group Management and Secure Multicast Routing	p. 224
Secure IP Multicast Architectures	p. 224
Secure IP Multicast Standardization Efforts	p. 225
Conclusions	p. 226
References	p. 226
Voice Over IP Security	p. 229
Introduction	p. 229
Security Issues in VoIP	p. 229
Vulnerability Testing	p. 234
Intrusion Detection Systems	p. 238
Conclusions	p. 243
References	p. 245
Grid Security	p. 247
Introduction	p. 247
Security Challenges for Grids	p. 248
Grid Security Infrastructure	p. 249
Grid Computing Environments	p. 252
Grid Network Security	p. 253
Conclusions and Future Directions	p. 254
References	p. 255
Mobile Agent Security	p. 257
Introduction	p. 257
Taxonomy of Solutions	p. 261
Security Mechanisms for Mobile Agent Systems	p. 264
References	p. 268
Mobile and Security
Mobile Terminal Security	p. 275
Introduction	p. 275
WLAN and WPAN Security	p. 276
GSM and 3GPP Security	p. 278
Mobile Platform Layer Security	p. 284
Hardware Attacks on Mobile Equipment	p. 290
Conclusion	p. 294
References	p. 295
IEEE 802.11 Security	p. 297
Introduction	p. 297
Introduction to IEEE 802.11	p. 297
Wired Equivalent Privacy	p. 300
Additional IEEE 802.11 Security Techniques	p. 302
Wireless Intrusion Detection Systems	p. 306
Practical IEEE 802.11 Security Measures	p. 309
Conclusions	p. 311
References	p. 311
Bluetooth Security	p. 313
Introduction	p. 313
Bluetooth Wireless Technology	p. 313
Security Architecture	p. 315
Security Weaknesses and Countermeasures	p. 318
Bluetooth Security: What Comes Next?	p. 327
References	p. 328
Mobile Telecom Networks	p. 331
Introduction	p. 331
Architectures Network	p. 331
Security Architectures	p. 336
Research Issues	p. 348
Conclusions	p. 352
References	p. 352
Security in Mobile Ad Hoc Networks	p. 355
Introduction	p. 355
Routing Protocols	p. 356
Security Vulnerabilities	p. 360
Preventing Attacks in MANETs	p. 362
Trust in MANETs	p. 363
Establishing Secure Routes in a MANET	p. 367
Cryptographic Tools for MANETs	p. 370
References	p. 371
Wireless Sensor Networks	p. 375
Introduction	p. 375
Sensor Devices	p. 375
Sensor Network Security	p. 379
Future Directions	p. 388
Conclusions	p. 388
References	p. 389
Trust	p. 391
Introduction	p. 391
What Is a trust Model?	p. 391
How Trust Models Work?	p. 392
Where Trust Can Go Wrong?	p. 399
Why Is It Difficult to Define Trust?	p. 401
Which Lessons Have We Learned?	p. 402
References	p. 403
Trust, Anonymity, and Privacy
PKI Systems	p. 409
Introduction	p. 409
Origins of Cryptography	p. 409
Overview of PKI Systems	p. 410
Components of PKI Systems	p. 411
Procedures of PKI Systems	p. 413
Current and Future Aspects of PKI Systems	p. 414
Conclusions	p. 416
References	p. 417
Privacy in Electronic Communications	p. 419
Introduction	p. 419
Protection from Third Party: Confidentiality	p. 420
Protection from Communication Partner	p. 427
Invasions of Electronic Private Sphere	p. 431
Balancing Privacy with Other Needs	p. 434
Structure of Privacy	p. 436
Conclusion and Future Trends	p. 437
References	p. 437
Securing Digital Content	p. 441
Introduction	p. 441
Securing Digital Content: Need and Challenges	p. 443
Content Protection Techniques	p. 444
Illustrative Application: E-Publishing of E-Learning Content	p. 450
Concluding Remarks	p. 456
References	p. 456
Cryptography Primer: Introduction to Cryptographic Principles and Algorithms	p. 459
Introduction	p. 459
Cryptographic Primitives	p. 461
Symmetric-Key Cryptography	p. 463
Asymmetric-Key Cryptography	p. 468
Key Management	p. 476
Conclusions and Other Fields of Cryptography	p. 478
References	p. 479
Network Security: Overview of Current Legal and Policy Issues	p. 481
Introduction	p. 481
Network Security as a Legal Requirement	p. 482
Network Security Policy Overview	p. 484
Legal Aspects of Network Security	p. 487
Self-Regulatory Security Frameworks	p. 502
Conclusions	p. 505
References	p. 505
Standards in Network Security	p. 507
Introduction	p. 507
Virtual Private Networks: Internet Protocol Security (IPSec)	p. 507
Multicast Security (MSEC)	p. 512
Transport Layer Security (TLS)	p. 513
Routing Security	p. 514
ATM Networks Security	p. 514
Third-Generation (3G) Mobile Networks	p. 516
Wireless LAN (802.11) Security	p. 522
E-Mail Security	p. 523
Public-Key Infrastructure (X.509)	p. 526
Index	p. 531
About the Editors and Authors	p. 563
Table of Contents provided by Ingram. All Rights Reserved.

What is included with this book?

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Network Security Current Status and Future Directions

Summary

Author Biography

Table of Contents

Supplemental Materials