Network anomaly detection is an important and dynamic research area. Many network intrusion detection methods and systems (NIDS) have been proposed in the literature. In this paper, we provide a structured and comprehensive overview of various facets of network anomaly detection so that a researcher can become quickly familiar with every aspect of network anomaly detection. We present attacks normally encountered by network intrusion detection systems. We categorize existing network anomaly detection methods and systems based on the underlying computational techniques used. Within this framework, we briefly describe and compare a large number of network anomaly detection methods and systems. In addition, we also discuss tools that can be used by network defenders and datasets that researchers in network anomaly detection can use. We also highlight research directions in network anomaly detection.

Network Anomaly Detection: Methods, Systems and Tools

Due to the broadcast nature of radio propagation, the wireless air interface is open and accessible to both authorized and illegitimate users. This completely differs from a wired network, where communicating devices are physically connected through cables and a node without direct association is unable to access the network for illicit activities. The open communications environment makes wireless transmissions more vulnerable than wired communications to malicious attacks, including both the passive eavesdropping for data interception and the active jamming for disrupting legitimate transmissions. Therefore, this paper is motivated to examine the security vulnerabilities and threats imposed by the inherent open nature of wireless communications and to devise efficient defense mechanisms for improving the wireless network security. We first summarize the security requirements of wireless networks, including their authenticity, confidentiality, integrity, and availability issues. Next, a comprehensive overview of security attacks encountered in wireless networks is presented in view of the network protocol architecture, where the potential security threats are discussed at each protocol layer. We also provide a survey of the existing security protocols and algorithms that are adopted in the existing wireless network standards, such as the Bluetooth, Wi-Fi, WiMAX, and the long-term evolution (LTE) systems. Then, we discuss the state of the art in physical-layer security, which is an emerging technique of securing the open communications environment against eavesdropping attacks at the physical layer. Several physical-layer security techniques are reviewed and compared, including information-theoretic security, artificial-noise-aided security, security-oriented beamforming, diversity-assisted security, and physical-layer key generation approaches. Since a jammer emitting radio signals can readily interfere with the legitimate wireless users, we also introduce the family of various jamming attacks and their countermeasures, including the constant jammer, intermittent jammer, reactive jammer, adaptive jammer, and intelligent jammer. Additionally, we discuss the integration of physical-layer security into existing authentication and cryptography mechanisms for further securing wireless networks. Finally, some technical challenges which remain unresolved at the time of writing are summarized and the future trends in wireless security are discussed.

/pdf/a-survey-on-wireless-security-technical-challenges-recent-3uamoalvot.pdf

A Survey on Wireless Security: Technical Challenges, Recent Advances, and Future Trends

The use of unmanned aerial vehicles (UAVs) is growing rapidly across many civil application domains, including real-time monitoring, providing wireless coverage, remote sensing, search and rescue, delivery of goods, security and surveillance, precision agriculture, and civil infrastructure inspection. Smart UAVs are the next big revolution in the UAV technology promising to provide new opportunities in different applications, especially in civil infrastructure in terms of reduced risks and lower cost. Civil infrastructure is expected to dominate more than $45 Billion market value of UAV usage. In this paper, we present UAV civil applications and their challenges. We also discuss the current research trends and provide future insights for potential UAV uses. Furthermore, we present the key challenges for UAV civil applications, including charging challenges, collision avoidance and swarming challenges, and networking and security-related challenges. Based on our review of the recent literature, we discuss open research challenges and draw high-level insights on how these challenges might be approached.

Unmanned Aerial Vehicles: A Survey on Civil Applications and Key Research Challenges

This paper examines the security vulnerabilities and threats imposed by the inherent open nature of wireless communications and to devise efficient defense mechanisms for improving the wireless network security. We first summarize the security requirements of wireless networks, including their authenticity, confidentiality, integrity and availability issues. Next, a comprehensive overview of security attacks encountered in wireless networks is presented in view of the network protocol architecture, where the potential security threats are discussed at each protocol layer. We also provide a survey of the existing security protocols and algorithms that are adopted in the existing wireless network standards, such as the Bluetooth, Wi-Fi, WiMAX, and the long-term evolution (LTE) systems. Then, we discuss the state-of-the-art in physical-layer security, which is an emerging technique of securing the open communications environment against eavesdropping attacks at the physical layer. We also introduce the family of various jamming attacks and their counter-measures, including the constant jammer, intermittent jammer, reactive jammer, adaptive jammer and intelligent jammer. Additionally, we discuss the integration of physical-layer security into existing authentication and cryptography mechanisms for further securing wireless networks. Finally, some technical challenges which remain unresolved at the time of writing are summarized and the future trends in wireless security are discussed.

/pdf/a-survey-on-wireless-security-technical-challenges-recent-k705wofne7.pdf

A Survey on Wireless Security: Technical Challenges, Recent Advances and Future Trends

Smart grid is a promising power delivery infrastructure integrated with communication and information technologies. Its bi-directional communication and electricity flow enable both utilities and customers to monitor, predict, and manage energy usage. It also advances energy and environmental sustainability through the integration of vast distributed energy resources. Deploying such a green electric system has enormous and far-reaching economic and social benefits. Nevertheless, increased interconnection and integration also introduce cyber-vulnerabilities into the grid. Failure to address these problems will hinder the modernization of the existing power system. In order to build a reliable smart grid, an overview of relevant cyber security and privacy issues is presented. Based on current literatures, several potential research fields are discussed at the end of this paper.

https://repository.um.edu.mo/bitstream/10692/2883/3/Liu-2012-Cyber-security-and-privacy-issues-i.pdf

Cyber Security and Privacy Issues in Smart Grids

Significant security concerns have come to the attention of both service providers and end users in cellular mobile systems. In these systems, misuse-based intrusion detec- tion approaches are not effective since a potential wide variety of mobile users' behaviors are not taken into consideration. In this paper, by exploiting the location history traversed by mobile users, we propose an anomaly detection scheme to identify a group of especially harmful insider attackers - masqueraders. A realistic network model integrating geographic road-level granularities is proposed to effectively utilize users' location information. Based on this model, an Instance-Based Learning (IBL) technique is presented to construct mobile users' movement patterns. Simulation results demonstrate the effectiveness of the proposed scheme in terms of false positive rate and detection rate. I. INTRODUCTION

Enhancing Security using Mobility Profile for Cellular Mobile Networks

In this paper, a new transmission approach is proposed for bundle protocol (BP) of delay/disruption-tolerant networking (DTN) adopted for use in deep-space communications. It is intended to achieve highly reliable deep-space file transfer over unreliable space channel which may experience unpredictable or random link disruption events or any other events that lead to burst data losses. The main idea of the proposed approach is to use a hybrid of the proactive retransmission and active retransmission during file transfer, with each employing different time intervals for the bundle’s custodial retransmission timeout (RTO) timer. The reactive retransmission is to provide additional transmission reliability in case the reliability provided by the proactive retransmission was not achieved due to the unpredictable link disruption events. Analytical modeling is presented for performance analysis of the approach, and the built model is validated by the file transfer experiment.

Reliable Proactive Retransmission of Bundle Protocol for Deep-Space Communications

Space communications are characterized by link intermittent connectivity and long link propagation delay. The use of bundle protocol (BP) in space communications has been in debate. An analytical understanding of its performance for reliable data delivery in the presence of link intermittent connectivity, especially with a lengthy link disruption, is quickly needed. In this paper, analytical models are built to estimate the number of transmission rounds (or efforts) caused by the link disruption and the resulting delay in bundle delivery of BP for applications in space communication networks. The models are validated by conducting bundle delivery experiments using a testbed.

Bundle Protocol for Space Communication Networks in Presence of Intermittent Link Connectivity

In this paper, we present a detection technique based on Bayes decision rule to identify a group of especially harmful insider attackers - masqueraders. In this technique, we exploit the calling patterns demonstrated by mobile users in mobile cellular networks. Specifically, we formulate the intrusion detection problem as a multi-feature two-class pattern classification problem. Call duration time, call inactivity period and call destination are extracted to form a feature vector to reflect users' calling activities. A nonparametric technique, Parzen window approach with a Gaussian kernel, is used to estimate the smooth class-conditional probability density function. A Bayes decision rule is applied in order to achieve the minimum error rate. Using users' calling activities to demonstrate different behaviors, we carried out simulations to evaluate the proposed scheme in terms of false positive rate and detection rate.

NIS08-2: Enhancing Security using Calling Activity for Wireless Networks

Space Communication Protocol Standards (SCPS) has been developed for the reliable transfer of information in the space Internet. There is a need to have an evaluation of the SCPS protocol in a realistic space environment with a large bandwidth- delay product (BDP). An experimental evaluation of SCPS-TP was done by transferring user files using the SCPS protocol over the NASA's Advanced Communications Technology Satellite (ACTS) links. However, the user files were so small that the steady performance of the protocol could not be accurately evaluated. This paper describes an experimental evaluation of SCPS-TP over high-speed, asymmetric space links by transferring a large user file over asymmetric ACTS link, leading to its steady performance.

Ruhai Wang

Papers

Enhancing Security using Mobility Profile for Cellular Mobile Networks

Reliable Proactive Retransmission of Bundle Protocol for Deep-Space Communications

Bundle Protocol for Space Communication Networks in Presence of Intermittent Link Connectivity

NIS08-2: Enhancing Security using Calling Activity for Wireless Networks

SAT01-6: Performance Evaluation of Space Communication Protocol Standards (SCPS) over Asymmetric ACTS Satellite Links