Die Realisierung der Vision der Industrie 4.0 bedarf neben der Erhebung relevanter Daten, der stetigen Vernetzung aller Geräte sowie Maschinen, auch die Möglichkeit, erhobene Datenmengen schnell und effizient möglichst in Echtzeit – zu verarbeiten. Hierbei stoßen bestehende Konzepte, wie beispielsweise Cloud Computing an ihre Grenzen, da die zentrale Datenverarbeitung in den meisten Fällen zu viel Zeit für die Übertragung der Daten benötigt. Die Konzepte Edge oder Fog Computing, die in den letzten Jahren aufgekommen und weiterentwickelt wurden, ermöglichen es, Latenzzeiten zu verringern und bieten dadurch die Möglichkeit analytische Berechnungen in (nahezu) Echtzeit auszuführen. Die vorliegende Literaturanalyse zeichnet den Status Quo der wissenschaftlichen Diskussion von Edge Computing im Rahmen der Smart Factory auf. Die Ergebnisse legen dabei die aktuellen thematischen Schwerpunkte offen und dienen somit als Grundlage zur Weiterentwicklung Edge Computing Architekturen im Spannungsfeld der Smart Factory.

/pdf/edge-computing-im-spannungsfeld-der-smart-factory-ein-status-1gl9500y3i.pdf

Edge Computing im Spannungsfeld der Smart Factory - Ein Status Quo.

Abstract Impersonation attack, also known as MAC spoofing, is widespread in wireless local area networks. Under this attack, the senders cannot control the device that listens to their traffic. On the other hand, the physical layer of the wired local area network is more secure, where the traffic is transmitted through cables and network nodes to the intended receivers. Each network node builds its MAC address table, which states stations that are physically connected (directly or indirectly) to each port, so traffic encryption is an unnecessary process. This paper discusses the design and testing of a new attack called a data link impersonation attack. In this attack, the attacker is considered a hardware intruder that deceives data link layer apparatus like the switches of layer two or three, taking advantage of a vulnerability in the MAC address table of the network nodes. That leads the network switches to send all the network traffic to the intruder instead of the real network device (usually a network service provider under attack). Intruder accepts all incoming requests/traffic from the service requester. If the intruder does not reply to the received requests sent by service requesters, it acts as a black hole intruder, simply causing a denial-of-service attack. If an intruder responds to these requests with fake replies to steal information from service requesters, it acts as a white hole intruder. During the attack, the intruder is transparent for the whole network and does not affect overall network performance and generally the network services, so it is so hard to be discovered by the network software running the network apparatus. Different scenarios were tested using different network simulators and physical networks (CISCO L2/L3 switches). It is demonstrated that the attacker is successfully denied the service/application under attack. The proposed attack reveals the new vulnerability of the wired local area network and opens the door for network scientists to enhance network software that runs the network apparatus immune against the proposed attack. 

/pdf/design-and-analysis-of-data-link-impersonation-attack-for-3h29fssn.pdf

Design and analysis of data link impersonation attack for wired LAN application layer services

Ensuring the security of modern cyberphysical devices is the most important task of the modern world. The reason for this is that such devices can cause not only informational, but also physical damage. One of the approaches to solving the problem is the static analysis of the machine code of the firmware of such devices. The situation becomes more complicated in the case of a Smart Home, since its devices can have different processor architectures (means instruction sets). In the case of cyberphysical devices of the Smart Home, the destruction of machine code due to physical influences is also possible. Therefore, the first step is to correctly identify the processor architecture. In the interests of this, a machine code model is proposed that has a formal notation and takes into account the possibility of code destruction. The article describes the full cycle of research (including experiment) in order to obtain this model. The model is based on byte-frequency machine code signatures. The experiment resulted in obtaining template signatures for the Top-16 processor architectures: Alpha, X32, Amd64, Arm64, Hppa64, I486, I686, Ia64, Mips, Mips64, Ppc, Ppc64, RiscV64, S390, S390x and Sparc64. 

/pdf/analytical-modeling-for-identification-of-the-machine-code-38fvne9d.pdf

Analytical Modeling for Identification of the Machine Code Architecture of Cyberphysical Devices in Smart Homes

Wireless Sensor Network is a wireless network technology that includes sensor nodes and embedded systems. WSN has several advantages: it is cheaper for large-scale applications, can withstand extreme environments, and data transmission is relatively more stable. One of the WSN devices is nRF24L01+. Within the specifications given, the maximum communication distance is 1.1 km. However, the most effective distance for transmitting data in line of sight and non-line of sight is still unknown. Therefore, testing and analysis are needed so that the nRF24L01+ device can be used optimally for communication and data transmission. Through testing analysis on nRF24L01+ line of sight, Kuta beach location in Bali and non-line of sight on the STMIK STIKOM Indonesia campus. The effective communication distance of the nRF24L01+ module in line of sight is between 1 and 1000 meters. The distance of 1000 meters is the limit of the effective distance for sending data, and the packet loss rate is less than 15% which is included in the medium category. Meanwhile, in the non-line of sight, the effective distance of the nRF24L01+ communication module is 20 meters, and the packet loss is close to 15%, which is a moderate level limit. With the analysis module, nRF24L01+ can be a reference in determining the effective distance on WSN nRF24L01+ in determining remote control equipment data communication.

Pengiriman data nrf24l01+ dengan kondisi line of sight dan non line of sight

Using English words as passwords have been a popular topic in the last few years. The following article discusses a study to compare self-selection of the system-generated words for recognition and selfgenerated words for recall for nouns and mixture words. The results revealed no significant difference between recognition and recall of password nouns. The average memorability rate of noun recognition was 75.72%, slightly higher than noun recall 74.23% in long-term memory. Also, there was no significant difference between recognition and recall mixture word passwords. The average memorability rate of mixture word recognition was 95.23%, and recall was 84.14% in long-term memory. The authors concluded that the recognition and recall of mixed word passwords had a higher memorability rate than nouns.

/pdf/the-effectiveness-of-applying-different-strategies-on-votkpo74.pdf

The Effectiveness of Applying Different Strategies on Recognition and Recall Textual Password

A Novel Password Policy Focusing on Altering User Password Selection Habits: A Statistical Analysis on Breached Data

The Internet is the universal network infrastructure that surrounds the Earth with thousands of devices and connections that make up it. The communication of various technologies from data centers to personal smartphones is provided through this infrastructure. While end devices are renewed as technology and product in short periods, network devices such as switches and routers, where communication is provided, can work for many years and work with out-of-date software and protocols. Therefore, it is clear how important the weaknesses are. Internet communication protocols are designed with security concerns in mind instead of communication speed and bandwidth. Even though researchers work intensively on wireless networks, the security of the infrastructure that connects wireless networks is ignored. In this study, we examined the attacks on OSI layer 2 and layer 3 layers made to the devices that constitute the backbone of the Internet infrastructure. Although several security measures and updates have been published for some of these attacks, the vulnerabilities that may occur in outdated devices are revealed.

A Survey on Backbone Attack

Internet of Things is found with new products and services in every field of life with the vision of smart World. Unlike other conventional devices, intelligent objects emerge in the face of life at home, at work, or on the street. Though it makes life easier for everyday physical objects to become accessible from outside, it poses security threats for end users. In addition, intelligent objects that are not protected by physical security measures are subject to many theft and attack threats. Precautions must be taken to identify objects in IoT applications exposed to physical attacks and to ensure that the system is not affected by these attacks. In this paper, the detection of physical attacks on IoT applications with machine learning methods is shown in the context of Smart Home.

Physical Attack Detection for Smart Objects

Intelligent systems change familiar objects as well as rapidly change common technologies. Internet of Things (IoT) applications are made with Cloud Computing can not meet the expectation of service quality due to bandwidth and network delays. It focuses on solving these needs in real-time intelligent applications that use Edge Computing, which is introduced as a new platform between the cloud and the objects. Security and privacy concerns are a major obstacle to the widespread use of intelligent objects. Edge Computing has both its proximity to objects and sufficient resources are available to provide an environment for the operation of security applications. In this study, Edge Computing is introduced. Edge Computing Security Aplication Kilic is recommend, which works on the Edge Layer. To illustrate the effective use of the Kilic, the real-time industry application has been shown in the context of the Smart Factory.

Ebu Yusuf Guven

Papers

A Novel Password Policy Focusing on Altering User Password Selection Habits: A Statistical Analysis on Breached Data

A Novel Password Policy Focusing on Altering User Password Selection Habits: A Statistical Analysis on Breached Data

A Survey on Backbone Attack

Physical Attack Detection for Smart Objects

Edge Computing Security Application: Kılıç