检索结果-内蒙古大学图书馆

2nd IEEE International Conference on Futuristic Technologies, INCOFT 2023

作者： George, Reenu Sara Kumar, Amit Padmasree, S. Rao, J Srinivasa Info. Technology Division Laboratory for Electro-Optics Systems Indian Space Research Organization Bangalore India

ISBN: (纸本)9798350308846

Secure data transfer between public network and private network within an organization is a significant area of concern. Manual methods of burning data to disk or copying to USB devices and then reloading in private network raises major security risks. These risks include malware infection, data loss, etc. In addition, majority of the companies forbids the use of USBs and other portable storage devices. A unidirectional network bridge (data diode) that serves as a oneway gateway between two networks with different security classifications can be utilized to bypass this manual technique. data diode alone will not suffice the security requirements of inter-network data transfer. By implementing numerous levels of defense and a segmented network, cross-network communication path can be secured against security compromise. This paper discusses on the multi-layered architecture and the network segmentation implemented to establish a secure inter-network data transfer solution with the help of a commercial data diode. © 2023 IEEE.

关键词： antimalware data diode download receiver sender unidirectional upload

来源：评论

学校读者我要写书评

暂无评论

Cyber diode: Animated 2D Barcodes as a Mobile and Robust data diode 9

Cyber Diode: Animated 2D Barcodes as a Mobile and Robust Dat...

引用

9th Annual IEEE Ubiquitous Computing, Electronics and Mobile Communication Conference (UEMCON)

作者： Geiger, Christopher Lockheed Martin Rotary & Mission Syst 100 Global Innovat Circle Orlando FL 32825 USA

ISBN: (纸本)9781538676936

The Cyber diode uses animated 2D barcodes to create ad hoc mobile networks with data diode and robust error correcting properties. It is displayed on a broadcasting device and read by a physically separated receiving device serving as unidirectional optical communication. data rate and error correction are evaluated. The communication method has beneficial information assurance properties, is well suited for Augmented Reality, and can reduce the cost of sustaining fleets of systems. Cyber diode use cases are catalogued (including out of band networking for sustainment, device location concealment, and social media privacy infringement and censorship mitigation) and alternate comparable communication methods are reviewed.

关键词： Animated 2D barcode Animated Steganography Cyber diode Sustainment data diode Augmented Reality

来源：评论

学校读者我要写书评

暂无评论

Security Validation for data diode with Reverse Channel 11th

引用

11th International Conference on Critical Information Infrastructures Security (CRITIS)

作者： Yun, Jeong-Han Chang, Yeop Kim, Kyoung-Ho Kim, Woonyon Natl Secur Res Inst Daejeon South Korea

ISBN: (纸本)9783319713687;9783319713670

Hardware-based data diode is a powerful security method that removes the reverse channel for network intrusion. However, simple removal leads to data unreliability and user inconvenience. A reverse channel is forbidden if it affects physical unidirectionality without an exact security analysis. If a reverse channel is used restrictively and its security is validated, the data diode can be a secure solution. Thus, we propose security criteria based on an application environment for a data diode that was implemented with a reverse channel and validate the data diode's security by unit/integration/system testing based on our security criteria.

关键词： Unidirectional network data diode Security Control system Unidirectional gateway One-way data transfer

来源：评论

学校读者我要写书评

暂无评论

A Secure and Resilient Smart Energy Meter

引用

IEEE ACCESS 2024年 12卷 3114-3125页

作者： Hseiki, Hussam A. El-Hajj, Ahmad M. Ajra, Youssef O. Hija, Fathelalem A. Haidar, Ali M. Beirut Arab Univ BAU Dept Elect & Comp Engn Beirut 11072809 Lebanon Amer Univ Beirut Olayan Sch Business Beirut 11072020 Lebanon Joaan Bin Jassim Acad Def Studies Cyber Secur Grad Program Al Khor Qatar

The expansion of the Internet of Things (IoT), Smart Grids (SG), and renewable energy sources has created a greater need for effective cybersecurity measures. These systems need to be protected from all threats in order to maintain continuity and functionality. Smart grids are made up of integrated modules that rely on essential data communication. Each module is exposed to different cybersecurity issues that, if compromised, will affect the entire system. This study addressed the security and data integrity issues in smart energy meters (SEMs), which are critical components in smart grid networks. After a comprehensive review of existing products and their features, a security-focused design for the SEM was proposed. The proposed solution provides a multi-level design to ensure the hardware, communication, and data security of the SEM. The solution mitigates Distributed Denial of Service (DDoS) attacks, data integrity issues, data privacy and energy theft. The security of a smart meter depends on securing two-way data communication, data processing and data integrity. To achieve this goal, the authors leveraged LoRaWAN technology in smart grid communications and unidirectional data transmission to ensure network security and resilience.

关键词： Artificial intelligence cybersecurity data diode Internet of Things (IoT) LoRaWAN smart grid smart meter sustainable energy

来源：评论

学校读者我要写书评

暂无评论

Cross-Domain Solutions (CDS): A Comprehensive Survey

引用

IEEE ACCESS 2024年 12卷 163551-163620页

作者： Sundaravarathan, Vignesh Alqalaf, Husain Siddiqui, Asif Kim, Kiju Lee, Sanghee Reisslein, Martin Thyagaturu, Akhilesh S. Ross, Nick Howard, Jason Tayal, Sanjaya Arizona State Univ Sch Elect Comp & Energy Engn Tempe AZ 85287 USA Prince Sultan Univ Coll Comp & Informat Sci Riyadh 11586 Saudi Arabia Hyundai Transys Mesa AZ 85212 USA Intel Corp Network & Edge Grp Chandler AZ 85226 USA Intel Corp Extreme Scale Comp Grp Hillsboro OR 97124 USA

A domain is commonly defined as a set of system resources, e.g., computers, to which certain users have prescribed access rights as governed by some security policies. The access (viewing) and transfer of data between distinct domains facilitates a wide range of information technology applications. A Cross-Domain Solution (CDS) can provide the security mechanisms that are required to properly restrict the access and exchange of sensitive information between different domains. This article provides a comprehensive up-to-date survey of CDS. This survey is organized according to a CDS taxonomy with access, transfer, and Multi-Level Security (MLS) as the main CDS categories. An access solution helps a client to view the data present in a server (which is in a different domain, other than the client's domain);thus an access solution effectively provides isolation between domains by allowing data access (without data transfer capabilities) between these domains. A transfer solution secures the transfer of data between domains to avoid leaks of data to unauthorized entities. Thereby, a transfer solution effectively connects domains in either a unidirectional or bidirectional manner. An MLS solution handles data with multiple levels of security (sensitivity of the data), such as top-secret, secret, or unclassified data. Aside from the fundamental conceptual approaches from the existing CDS research, this survey gives a comprehensive overview of the existing commercial CDS products. We identify the limitations of the existing CDS concepts and products and outline directions for future research and development to address these limitations and advance the overall CDS research area.

关键词： Security Hardware Wireless communication Surveys Privacy Military computing Buildings Wireless sensor networks Testing Access data diode cross-domain solution (CDS) multi level security (MLS) transfer

来源：评论

学校读者我要写书评

暂无评论

An FPGA-based Unidirectional Gateway Proposal for OT-IT Network Separation to Secure Industrial Automation Systems 21

An FPGA-based Unidirectional Gateway Proposal for OT-IT Netw...

引用

IEEE 21st International Conference on Industrial Informatics (INDIN)

作者： Ha, Song Son Beuster, Henry Doebbert, Thomas Robert Scholl, Gerd Helmut Schmidt Univ Elect Measurement Engn Hamburg Germany

ISBN: (纸本)9781665493130

A new FPGA-based approach for a data diode transmitting data unidirectionally from a high security zone to a lower security zone is evaluated and implemented. With the FPGA implementation, the need of additional hardware could be minimized compared to most state-of-the-art data diode realizations. The proposed data diode is designed to use the available backplane bus communication protocol between the programmable logic controller (PLC) and its connected peripherals. To demonstrate the universal approach an open-source platform based on the Revolution Pi (RevPi) and its backplane bus is used. Principally the data diode behaves as a mirror presenting the complete protected system behind the high security zone including the RevPi controller and its devices to the information technology (IT) network. Another controller within the lower security zone is used to imitate the operational technology (OT) process. Our approach is not limited to the above controller and can be applied to any type of PLC. The only requirement is that the communication protocol on the backplane bus is known and can be modified for this purpose.

关键词： data diode FPGA-based Unidirectional Secure Industrial Automation System OT-IT Separation

来源：评论

学校读者我要写书评

暂无评论

Enhancing Syslog Message Security and Reliability over Unidirectional Fiber Optics

引用

SENSORS 2024年第20期24卷 6537页

作者： Anton, Alin-Adrian Csereoka, Petra Capota, Eugenia Ana Cioarga, Razvan-Dorel Politehn Univ Timisoara Fac Automat & Comp Comp & Informat Technol Dept 2nd Vasile Parvan Ave Timisoara 300223 Romania

Standard log transmission protocols do not offer a robust way of segregating the log network from potential threats. A secure log transmission system and the realization of a data diode using affordable components are proposed. Unidirectional data flow prevents unauthorized access and eavesdropping, ensuring the integrity and confidentiality of sensitive log data. The system uses an encryption protocol that requires that the upstream and the downstream of the data diode are perfectly synchronized, mitigating replay attacks. It has been shown that message amplification can mitigate UDP packet loss, but this is only required when the data diode traffic is congested. The implementation of the encryption algorithm is suitable for resource-constrained devices and it has been shown to produce random-looking output even on a reduced number of rounds when compared to the parent cipher. Several improvements have been made to the original encryption algorithm for which an actual implementation was missing. Free software and datasets have been made available to reproduce the results. The complete solution is easy to reproduce in order to secure the segregation of a log network inside any scenario where logging is required by the law and log tampering must be prevented.

关键词： syslog air gap log management log monitoring data diode

来源：评论

学校读者我要写书评

暂无评论

A New Approach to Secure Industrial Automation Systems Based on Revolution Pi Modules 27

A New Approach to Secure Industrial Automation Systems Based...

引用

IEEE 27th International Conference on Emerging Technologies and Factory Automation (ETFA)

作者： Ha, Song Son Beuster, Henry Doebbert, Thomas Robert Scholl, Gerd Helmut Schmidt Univ Elect Measurement Engn Hamburg Germany

ISBN: (数字)9781665499965

ISBN: (纸本)9781665499965

In the context of Industry 4.0 and the Industrial Internet of Things, an exponential increase in the interconnection of machines and smart devices can be observed together with an increase of interconnections between Operation Technology (OT) and Information Technology (IT) networks as well as Cloud systems. This development is linked to the user's expectation for suitable security solutions, where it remains a challenging task to ensure that, e.g. a specific Safety Integrity Level (SIL) level can be maintained in view of possible potential cyberattacks. In this case, a data diode can be a suitable solution. In this paper a data diode prototype is presented being integrated into an industrial network analyzing the communication on the backplane bus of an Open Source Industrial PC called Revolution Pi. The advantage of our approach is that the data diode is totally transparent from the IT to the OT network, because all process data behind the data diode are mirrored into the IT network within a few system cycles. The security and reliability issues related with this approach are also discussed and evaluated.

关键词： data diode Security Internet of Things

来源：评论

学校读者我要写书评

暂无评论

Protecting Networks with Intelligent diodes

Protecting Networks with Intelligent Diodes

引用

17th International Conference on Cyber Warfare and Security (ICCWS)

作者： Dahlstrom, Jason Taylor, Stephen Web Sensing LLC Lebanon NH 03766 USA Dartmouth Coll Thayer Sch Engn Hanover NH 03755 USA

ISBN: (纸本)9781914587276

This paper explores the utility, practical nuances, performance characteristics, and attendant security risks associated with intelligent diodes -- network appliances that regulate traffic flow by validating formats and mission payloads within the security perimeter afforded by a single Field Programmable Gate Array (FPGA). diodes operate in the middle-ground between networks that are fully air-gapped -- i.e., completely disconnected from the Internet -- and those that are fully connected but require complex boundary defenses and security administration. As such, they provide an all-hardware, real-time alternative for protecting military vehicles and sensitive networks. diodes are particularly useful in four core settings: when industrial plant need be connected to cloud-analytic services, such as Google-Analytics, for the purpose of process optimization;for supporting the lifecycle of military vehicles through Condition-based Maintenance;for preventing information bleed when sensor feeds must be consumed inside sensitive networks;and finally, for the reliable distributed replication of large files and databases. The devices may operate directly on protocol-specific traffic headers to dispatch or block traffic. Alternatively, they may be customized to validate file and traffic formats. This is achieved using an automated circuit design workflow that builds a hardware parsing plugin from a formal grammar and embeds it into the FPGA. This results in custom hardware that intelligently operates on mission specific data.

关键词： data diode google-analytics condition-based maintenance FPGA cloud connectivity data leak prevention

来源：评论

学校读者我要写书评

暂无评论

Design for a TCP/IP transparent FPGA-based network diode: To what extent is it possible to implement a network diode on an FPGA under realistic network environments, using the Transmission Control Protocol?

Design for a TCP/IP transparent FPGA-based network diode: To...

引用

作者： Kerkhof, Jorden Delft University of Technology

学位级别：硕士

The urgency for high-security products for industrial networks is increasing as malicious hackers are improving their accessibility tools. A common practice for a company to protect its sensitive data is network segmentation. The network is segmented in different domains with distinctive security levels. The sensitive data is stored and managed within the domain of the highest security level. To access this domain from another domain of a lower security level, a highly reliable connection is required. You want to have full control over the incoming and outgoing data flow between these network segments. A variety of solutions provide a highly-secured connection to link those segments which differ in range of features and control. An upcoming trend is the network diode. This device will allow data flow in only one direction. All the flows going into the opposite direction are being blocked. However, to feature an arbitrary flow between two network segments, the diode should consist of a numerous amount of properties. To narrow down the optional features a network diode should provide, this thesis will focus on TCP streams. TCP is one of the most common protocols used in internet traffic. Furthermore, TCP is a challenging protocol as it is a connection-oriented bidirectional protocol, which is intrinsic controversial with the concept of the data diode. To ensure the security of the data diode, this thesis will focus on a complete hardware design of the data diode. Software inside the data diode is still a risk for a security breach. This thesis will investigate the critical operations of TCP to implement them in the data diode. The aim is to utilise TCP's characteristic operations of the acknowledgement managing, the sliding window system, the congestion control algorithm, and explores the advantage of existing TCP options. To evaluate the feasibility of a high performance data diode featuring TCP, the system is broken down to project the behaviour of a TCP stream on a

关键词： FPGA TCP/IP Network Security data diode

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：