The Experts below are selected from a list of 87 Experts worldwide ranked by ideXlab platform
Dharmendra Sharma - One of the best experts on this subject based on the ideXlab platform.
-
A Novel Framework for Abnormal Behaviour Identification and Detection for Wireless Sensor Networks
2013Co-Authors: Muhammad R. Ahmed, Xu Huang, Dharmendra SharmaAbstract:Abstract—Despite extensive study on wireless sensor network security, defending internal attacks and finding abnormal behaviour of the sensor are still difficult and unsolved task. The conventional cryptographic technique does not give the robust security or detection process to save the network from internal Attacker that cause by abnormal behavior. The Insider Attacker or abnormally behaved sensor identificationand location detection framework using false massage detection and Time difference of Arrival (TDoA) is presented in this paper. It has been shown that the new framework can efficiently identify and detect the Insider Attacker location so that the Attacker can be reprogrammed or subside from the network to save from internal attack
-
Dempster-Shafer Theory to Identify Insider Attacker in Wireless Sensor Network
2012Co-Authors: Muhammad Ahmed, Xu Huang, Dharmendra SharmaAbstract:Due to the construction and network infrastructure of wireless sensor network (WSN) are known to be vulnerable to variety of attacks. In order to ensure its functionality especially in malicious environments, security mechanisms are essential. Several works have been done to secure WSN, but identification of Insider Attacker has not been given much attention. In the WSN system the malicious node behavior is different from the neighbor nodes. Instead of relying the untrustworthy neighbor node we use Dempster-Shafer theory (DST) of combined evidence to identify the Insider Attacker in WSN. This theory reflects with the uncertain event or uncertainty as well as uncertainty of the observation. The mathematical calculation shows the DST capability of identifying the Insider Attacker.
-
NPC - Dempster-Shafer Theory to Identify Insider Attacker in Wireless Sensor Network
Lecture Notes in Computer Science, 2012Co-Authors: Muhammad R. Ahmed, Xu Huang, Dharmendra SharmaAbstract:Due to the construction and network infrastructure of wireless sensor network (WSN) are known to be vulnerable to variety of attacks. In order to ensure its functionality especially in malicious environments, security mechanisms are essential. Several works have been done to secure WSN, but identification of Insider Attacker has not been given much attention. In the WSN system the malicious node behavior is different from the neighbor nodes. Instead of relying the untrustworthy neighbor node we use Dempster-Shafer theory (DST) of combined evidence to identify the Insider Attacker in WSN. This theory reflects with the uncertain event or uncertainty as well as uncertainty of the observation. The mathematical calculation shows the DST capability of identifying the Insider Attacker.
-
ICA3PP (2) - Wireless sensor network internal Attacker identification with multiple evidence by dempster-shafer theory
Algorithms and Architectures for Parallel Processing, 2012Co-Authors: Muhammad R. Ahmed, Xu Huang, Dharmendra Sharma, Li ShutaoAbstract:Wireless sensor Network (WSN) is known to be vulnerable to variety of attacks due to the construction of nodes and distributed network infrastructure. In order to ensure its functionality especially in malicious environments, security mechanisms are essential. Malicious or Insider Attacker has gained prominence and poses the most challenging attacks to WSN. Many works has been done to secure WSN from internal Attacker but most of it relay on either training data set or predefined threshold. Without a fixed security infrastructure WSN need to find the internal Attacker. Normally, internal Attacker node behavioral pattern is different from the other neighbor good nodes in the system, but neighbor node can be attacked as well. In this paper, we use Dempster-Shafer theory (DST) of combined multiple evidence to identify the malicious or internal Attacker in WSN. This theory reflects with the uncertain event or uncertainty as well as uncertainty of the observation. Moreover, it gives a numerical procedure for fusing together multiple pieces of evidence from unreliable neighbor with higher degree of conflict reliability.
Muhammad R. Ahmed - One of the best experts on this subject based on the ideXlab platform.
-
A Novel Framework for Abnormal Behaviour Identification and Detection for Wireless Sensor Networks
2013Co-Authors: Muhammad R. Ahmed, Xu Huang, Dharmendra SharmaAbstract:Abstract—Despite extensive study on wireless sensor network security, defending internal attacks and finding abnormal behaviour of the sensor are still difficult and unsolved task. The conventional cryptographic technique does not give the robust security or detection process to save the network from internal Attacker that cause by abnormal behavior. The Insider Attacker or abnormally behaved sensor identificationand location detection framework using false massage detection and Time difference of Arrival (TDoA) is presented in this paper. It has been shown that the new framework can efficiently identify and detect the Insider Attacker location so that the Attacker can be reprogrammed or subside from the network to save from internal attack
-
NPC - Dempster-Shafer Theory to Identify Insider Attacker in Wireless Sensor Network
Lecture Notes in Computer Science, 2012Co-Authors: Muhammad R. Ahmed, Xu Huang, Dharmendra SharmaAbstract:Due to the construction and network infrastructure of wireless sensor network (WSN) are known to be vulnerable to variety of attacks. In order to ensure its functionality especially in malicious environments, security mechanisms are essential. Several works have been done to secure WSN, but identification of Insider Attacker has not been given much attention. In the WSN system the malicious node behavior is different from the neighbor nodes. Instead of relying the untrustworthy neighbor node we use Dempster-Shafer theory (DST) of combined evidence to identify the Insider Attacker in WSN. This theory reflects with the uncertain event or uncertainty as well as uncertainty of the observation. The mathematical calculation shows the DST capability of identifying the Insider Attacker.
-
ICA3PP (2) - Wireless sensor network internal Attacker identification with multiple evidence by dempster-shafer theory
Algorithms and Architectures for Parallel Processing, 2012Co-Authors: Muhammad R. Ahmed, Xu Huang, Dharmendra Sharma, Li ShutaoAbstract:Wireless sensor Network (WSN) is known to be vulnerable to variety of attacks due to the construction of nodes and distributed network infrastructure. In order to ensure its functionality especially in malicious environments, security mechanisms are essential. Malicious or Insider Attacker has gained prominence and poses the most challenging attacks to WSN. Many works has been done to secure WSN from internal Attacker but most of it relay on either training data set or predefined threshold. Without a fixed security infrastructure WSN need to find the internal Attacker. Normally, internal Attacker node behavioral pattern is different from the other neighbor good nodes in the system, but neighbor node can be attacked as well. In this paper, we use Dempster-Shafer theory (DST) of combined multiple evidence to identify the malicious or internal Attacker in WSN. This theory reflects with the uncertain event or uncertainty as well as uncertainty of the observation. Moreover, it gives a numerical procedure for fusing together multiple pieces of evidence from unreliable neighbor with higher degree of conflict reliability.
Xu Huang - One of the best experts on this subject based on the ideXlab platform.
-
A Novel Framework for Abnormal Behaviour Identification and Detection for Wireless Sensor Networks
2013Co-Authors: Muhammad R. Ahmed, Xu Huang, Dharmendra SharmaAbstract:Abstract—Despite extensive study on wireless sensor network security, defending internal attacks and finding abnormal behaviour of the sensor are still difficult and unsolved task. The conventional cryptographic technique does not give the robust security or detection process to save the network from internal Attacker that cause by abnormal behavior. The Insider Attacker or abnormally behaved sensor identificationand location detection framework using false massage detection and Time difference of Arrival (TDoA) is presented in this paper. It has been shown that the new framework can efficiently identify and detect the Insider Attacker location so that the Attacker can be reprogrammed or subside from the network to save from internal attack
-
Dempster-Shafer Theory to Identify Insider Attacker in Wireless Sensor Network
2012Co-Authors: Muhammad Ahmed, Xu Huang, Dharmendra SharmaAbstract:Due to the construction and network infrastructure of wireless sensor network (WSN) are known to be vulnerable to variety of attacks. In order to ensure its functionality especially in malicious environments, security mechanisms are essential. Several works have been done to secure WSN, but identification of Insider Attacker has not been given much attention. In the WSN system the malicious node behavior is different from the neighbor nodes. Instead of relying the untrustworthy neighbor node we use Dempster-Shafer theory (DST) of combined evidence to identify the Insider Attacker in WSN. This theory reflects with the uncertain event or uncertainty as well as uncertainty of the observation. The mathematical calculation shows the DST capability of identifying the Insider Attacker.
-
NPC - Dempster-Shafer Theory to Identify Insider Attacker in Wireless Sensor Network
Lecture Notes in Computer Science, 2012Co-Authors: Muhammad R. Ahmed, Xu Huang, Dharmendra SharmaAbstract:Due to the construction and network infrastructure of wireless sensor network (WSN) are known to be vulnerable to variety of attacks. In order to ensure its functionality especially in malicious environments, security mechanisms are essential. Several works have been done to secure WSN, but identification of Insider Attacker has not been given much attention. In the WSN system the malicious node behavior is different from the neighbor nodes. Instead of relying the untrustworthy neighbor node we use Dempster-Shafer theory (DST) of combined evidence to identify the Insider Attacker in WSN. This theory reflects with the uncertain event or uncertainty as well as uncertainty of the observation. The mathematical calculation shows the DST capability of identifying the Insider Attacker.
-
ICA3PP (2) - Wireless sensor network internal Attacker identification with multiple evidence by dempster-shafer theory
Algorithms and Architectures for Parallel Processing, 2012Co-Authors: Muhammad R. Ahmed, Xu Huang, Dharmendra Sharma, Li ShutaoAbstract:Wireless sensor Network (WSN) is known to be vulnerable to variety of attacks due to the construction of nodes and distributed network infrastructure. In order to ensure its functionality especially in malicious environments, security mechanisms are essential. Malicious or Insider Attacker has gained prominence and poses the most challenging attacks to WSN. Many works has been done to secure WSN from internal Attacker but most of it relay on either training data set or predefined threshold. Without a fixed security infrastructure WSN need to find the internal Attacker. Normally, internal Attacker node behavioral pattern is different from the other neighbor good nodes in the system, but neighbor node can be attacked as well. In this paper, we use Dempster-Shafer theory (DST) of combined multiple evidence to identify the malicious or internal Attacker in WSN. This theory reflects with the uncertain event or uncertainty as well as uncertainty of the observation. Moreover, it gives a numerical procedure for fusing together multiple pieces of evidence from unreliable neighbor with higher degree of conflict reliability.
Xirong Ning - One of the best experts on this subject based on the ideXlab platform.
-
In the mind of an Insider Attacker on cyber‐physical systems and how not being fooled
IET Cyber-Physical Systems: Theory & Applications, 2020Co-Authors: Xirong Ning, Jin JiangAbstract:Insider attacks are one of the most serious threats for cyber-physical systems, they have potentials to inflict destructive damages on physical processes while remaining stealthy. This study dissects several Insider attacks by examining their modes of data tampering. To set the scene, a general framework of a cyber-physical system is constructed, a pattern characterising Insider attacks is introduced in the form of attack goals, resources, constraints, modes, and attack paths. The conditions under which the Attackers can maintain stealthy are examined in both temporal and spatial domains. With the inside knowledge, an Attacker can use an attack graph to exploit system vulnerabilities and determine the high impact targets. To demonstrate the effectiveness of this analysis, a cyber-physical system is constructed by using networks and a nuclear process control test facility with ports deliberately left open for Attackers. Two attack scenarios are staged, and their characteristics and impacts are examined. This case study demonstrates how an Insider Attacker might mount an attack by using data tampering and how they can maintain stealthy before major damages are done to the physical system. The significance of this study is to uncover the techniques of Insider Attackers so that vulnerabilities can be mended.
-
in the mind of an Insider Attacker on cyber physical systems and how not being fooled
IET Cyber-Physical Systems: Theory & Applications, 2020Co-Authors: Xirong Ning, Jin JiangAbstract:Insider attacks are one of the most serious threats for cyber-physical systems, they have potentials to inflict destructive damages on physical processes while remaining stealthy. This study dissects several Insider attacks by examining their modes of data tampering. To set the scene, a general framework of a cyber-physical system is constructed, a pattern characterising Insider attacks is introduced in the form of attack goals, resources, constraints, modes, and attack paths. The conditions under which the Attackers can maintain stealthy are examined in both temporal and spatial domains. With the inside knowledge, an Attacker can use an attack graph to exploit system vulnerabilities and determine the high impact targets. To demonstrate the effectiveness of this analysis, a cyber-physical system is constructed by using networks and a nuclear process control test facility with ports deliberately left open for Attackers. Two attack scenarios are staged, and their characteristics and impacts are examined. This case study demonstrates how an Insider Attacker might mount an attack by using data tampering and how they can maintain stealthy before major damages are done to the physical system. The significance of this study is to uncover the techniques of Insider Attackers so that vulnerabilities can be mended.
-
Analysis, Design and Demonstration of Control Systems Against Insider Attacks in Cyber-Physical Systems
2019Co-Authors: Xirong NingAbstract:This dissertation aims to address the security issues of Insider cyber-physical attacks and provide a defense-in-depth attack-resilient control system approach for cyber-physical systems. Firstly, security analysis for cyber-physical systems is investigated to identify potential risks and potential security enhancements. Vulnerabilities of the system and existing security solutions, including attack prevention, attack detection and attack mitigation strategies are analyzed. Subsequently, a methodology to analyze and mathematically characterize Insider attacks is developed. An attack pattern is introduced to represent key features in an Insider cyber-physical attack, which includes attack goals, resources, constraints, modes, as well as probable attack paths. Patterns for such attacks are analyzed for different attack stages. Impacts and consequences of these attacks are analyzed by using an attack tree. Stealthy conditions of Insider attacks are identified through temporal and spatial analysis, respectively. On the defense side, a cross-layered detection scheme is developed to reveal stealthy Insider attacks, and an attack-resilient control scheme is proposed to mitigate impacts of these attacks. The detection scheme includes a hierarchical approach by incorporating different detection methods in multiple layers to provide a defense-in-depth detection against the attacks. A model-based anomaly detection method is used to uncover the anomalies caused by temporal stealthy attacks, while a data-driven clustering detection method is used to recognized anomalies induced by spatial stealthy attacks. The attack-resilient control scheme consists of a decision logic and multiple attack-resilient controllers. The decision logic responds to the anomalies identified by the detection scheme and subsequently switches to suitable controllers. These controllers are designed to respond to these attacks and mitigate or minimize their impacts. To validate the above methodologies, a general guideline for designing an experimental security assessment platform has been developed in this dissertation. Furthermore, a modular approach is proposed to design and implement a platform to simulate various Insider attacks and to evaluate corresponding defense mechanisms on a cyber-physical system. The designed platform has been implemented on a physical component based dynamic system simulator, known as Nuclear Process Control Test Facility (NPCTF). The proposed vulnerability assessment and security enhancement techniques have been validated under different Insider Attacker scenarios.
Jin Jiang - One of the best experts on this subject based on the ideXlab platform.
-
In the mind of an Insider Attacker on cyber‐physical systems and how not being fooled
IET Cyber-Physical Systems: Theory & Applications, 2020Co-Authors: Xirong Ning, Jin JiangAbstract:Insider attacks are one of the most serious threats for cyber-physical systems, they have potentials to inflict destructive damages on physical processes while remaining stealthy. This study dissects several Insider attacks by examining their modes of data tampering. To set the scene, a general framework of a cyber-physical system is constructed, a pattern characterising Insider attacks is introduced in the form of attack goals, resources, constraints, modes, and attack paths. The conditions under which the Attackers can maintain stealthy are examined in both temporal and spatial domains. With the inside knowledge, an Attacker can use an attack graph to exploit system vulnerabilities and determine the high impact targets. To demonstrate the effectiveness of this analysis, a cyber-physical system is constructed by using networks and a nuclear process control test facility with ports deliberately left open for Attackers. Two attack scenarios are staged, and their characteristics and impacts are examined. This case study demonstrates how an Insider Attacker might mount an attack by using data tampering and how they can maintain stealthy before major damages are done to the physical system. The significance of this study is to uncover the techniques of Insider Attackers so that vulnerabilities can be mended.
-
in the mind of an Insider Attacker on cyber physical systems and how not being fooled
IET Cyber-Physical Systems: Theory & Applications, 2020Co-Authors: Xirong Ning, Jin JiangAbstract:Insider attacks are one of the most serious threats for cyber-physical systems, they have potentials to inflict destructive damages on physical processes while remaining stealthy. This study dissects several Insider attacks by examining their modes of data tampering. To set the scene, a general framework of a cyber-physical system is constructed, a pattern characterising Insider attacks is introduced in the form of attack goals, resources, constraints, modes, and attack paths. The conditions under which the Attackers can maintain stealthy are examined in both temporal and spatial domains. With the inside knowledge, an Attacker can use an attack graph to exploit system vulnerabilities and determine the high impact targets. To demonstrate the effectiveness of this analysis, a cyber-physical system is constructed by using networks and a nuclear process control test facility with ports deliberately left open for Attackers. Two attack scenarios are staged, and their characteristics and impacts are examined. This case study demonstrates how an Insider Attacker might mount an attack by using data tampering and how they can maintain stealthy before major damages are done to the physical system. The significance of this study is to uncover the techniques of Insider Attackers so that vulnerabilities can be mended.