National Cyber Summit (NCS) Research Track 2020

Name: National Cyber Summit (NCS) Research Track 2020
Brand: Springer
Price: 96.29 EUR
Availability: OnlineOnly

Kim-Kwang Raymond Choo Tommy Morris Gilbert L. Peterson Eric Imsand(Herausgeber*in)

Springer (Verlag)

Erschienen am 8. September 2020

X, 246 Seiten

E-Book

PDF mit Wasserzeichen-DRM

Systemvoraussetzungen

978-3-030-58703-1 (ISBN)

96,29 €inkl. 7% MwSt.

Systemvoraussetzungen

für PDF mit Wasserzeichen-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Intro
Preface
Organization
Organizing Committee
General Chairs
Program Committee Chairs
Program Committee and External Reviewers
Program Committee Members
External Reviewers
Contents
Invited Paper
Experiences and Lessons Learned Creating and Validating Concept Inventories for Cybersecurity
1 Introduction
2 Background and Previous and Related Work
2.1 Concept Inventories
2.2 Cybersecurity Assessment Exams
2.3 Other Related Work
3 Key Steps and Takeaways from the CATS Project
3.1 Genesis of the CATS Project
3.2 Defining Scope of Project and Assessment Tools
3.3 Identifying Core Concepts
3.4 Interviewing Students
3.5 Creating Scenarios
3.6 Drafting Stems
3.7 Developing Distractors
3.8 Generating Educational Materials
3.9 Performing Expert Reviews
3.10 Recruiting Test Subjects
3.11 Organizing and Running Hackathons
3.12 Building Community Acceptance
3.13 Forming a Team and Nurturing Collaboration
3.14 Adopting Tools
3.15 Obtaining and Using Funding
4 Discussion
5 Conclusion
A A Crowdsourcing Experiment
References
Cyber Security Education
A Video-Based Cybersecurity Modular Lecture Series for Community College Students
1 Introduction
2 Background
3 Curriculum Development Process
4 Curriculum Contents
4.1 Overview
4.2 Module and Lecture Descriptions
4.3 Suggested Uses
5 Distribution and Metrics
References
Digital Forensics Education Modules for Judicial Officials
1 Introduction
2 Background
2.1 Computer Forensics
2.2 Legal Basis of Computer Forensics
3 Motivation
3.1 Differences Between Computer Forensics and Other Legal Issues
3.2 Difference Between Training Judges and the Police
3.3 Lack of Proper Understanding of Digital Evidence May Lead to Miscarriages of Justice
4 Challenges
4.1 Scope and Depth of the Curriculum
4.2 Designing a Domain-Specific Curriculum
4.3 Time Constraints for Education
4.4 Finding the Best Dissemination Mechanism
4.5 Keeping the Content Up-to-Date
4.6 Scalability
5 Approach Towards Developing the Educational Materials
6 Sample Syllabus from the Educational Materials
7 Conclusion
References
Gaming DevSecOps - A Serious Game Pilot Study
1 Introduction
2 Related Work
2.1 DevSecOps
2.2 Serious Games
3 Transforming Learning Objectives into Game Mechanics
3.1 Learning Objectives and Class Constraints
3.2 Game Dynamics and Mechanics
4 Rules Summary
4.1 Design Decisions
4.2 Design Decisions 1: Brevity
4.3 Design Decision 2: Abstraction
4.4 Design Decision 3: Cards
4.5 Design Decision 4: Racing
4.6 Initial Feedback
5 The Experiment
6 Results
7 Conclusions and Future Work
References
A Single-Board Computing Constellation Supporting Integration of Hands-On Cybersecurity Laboratories into Operating Systems Courses
1 Introduction
2 The Challenges of Updating the OS Course
2.1 Resource Constraints
2.2 Content Constraints
3 New Operating System Cybersecurity Laboratories
4 Cybersecurity Laboratory Deployment Options
4.1 Laboratory Deployment Alternatives
4.2 Single-Board Computer Constellation
5 Constellation Requirements, Architecture, and Operation
5.1 Single-Board Computer Selection
5.2 The SBC Constellation Architecture and Operation
5.3 The Odroid XU4Q Computing Constellation
6 Laboratory Deployment Experiences
7 Conclusions
References
TWOPD: A Novel Approach to Teaching an Introductory Cybersecurity Course
1 Introduction
2 Related Work
3 The TWOPD Approach
3.1 Transparent Assignments
3.2 Writing
3.3 Online Design
3.4 Projects
3.5 Demonstrations
3.6 Additional Support
4 Evaluation
5 Discussion and Conclusions
References
Network System's Vulnerability Quantification Using Multi-layered Fuzzy Logic Based on GQM
1 Introduction
2 Background
2.1 Fuzzy Logic
2.2 Related Works
3 Methodology
3.1 Network Security Standards
3.2 Goal Question Metrics
3.3 Security Factors and Sub-factors
3.4 Multi-layered Fuzzy Logic
4 Implementation
5 Conclusion
References
Cyber Security Technology
Challenges of Securing and Defending Unmanned Aerial Vehicles
1 Introduction
2 Background
3 CNSSP 28 Policies, Threat Model, MAVLink and Virtualization
3.1 CNSSP 28: Cybersecurity of Unmanned National Systems
3.2 Threat Model and Cost of Protecting UAVs
3.3 The Micro Air Vehicle Communication Protocols
3.4 Virtualization Technologies for Isolation, Separation and Encapsulation
4 A CNSSP 28 Compliant Framework for UASs
4.1 A CNSSP 28 Framework for UAV
4.2 Securing UAVs: Isolation and Encapsulation (CNSSP 28 Policies: A, C)
4.3 Securing MAVLink Messages
4.4 Bootstrap Loading and Zeroizing (CNSSP 28 Policies: A, Be)
4.5 A CNSSP 28 Framework for the GCS and Remote Control
4.6 Offensive Security for C2 Messages (CNSSP 28: C, D)
5 Future Work
References
Using Least-Significant Bit and Random Pixel Encoding with Encryption for Image Steganography
1 Introduction
2 Related Work
3 Design of BPStegano
3.1 Encoding Algorithm
3.2 Decoding Algorithm
4 Results and Analysis
4.1 Visual Comparison
4.2 SHA-256 Image Hash Values
4.3 Software Based Image Comparison
4.4 Mean Square Error and Peak Signal to Noise Ratio
4.5 Image Histogram Analysis
5 Conclusion and Future Work
References
Automated Linux Secure Host Baseline for Real-Time Applications Requiring SCAP Compliance
1 Introduction
2 Background
2.1 Security Content Automation Protocol (SCAP)
2.2 Security Technical Implementation Guide (STIG)
2.3 Government and Industry Collaboration - NIST, DISA, NSA, USGCB
2.4 Windows 10 Secure Host Baseline (SHB)
2.5 Community ENTerprise Operating System (CentOS)
2.6 Real-Time Linux Kernel Extensions (PREEMPTRT Patch)
2.7 SCAP Compliance Tools - OpenSCAP (OSCAP), SCAP Compliance Checker (SCC)
3 Related Work
3.1 Security Hardening Technology
3.2 Automated Hardening and Testing Linux
4 Design and Implementation
4.1 Base Linux Distribution
4.2 Test Setup and Build Environment
4.3 ISO Build Approach
4.4 Security Hardening Approach
4.5 Security Tools and Services
4.6 System Profiles
4.7 Installation and Automation
5 Customizing the Distribution
5.1 Profiles
5.2 Custom Kickstart Files
6 Maintaining the Distribution
6.1 Trigger Events
6.2 Approach for Updates
7 Security Results Analysis
7.1 Post Remediation Real-Time Host Scan
7.2 STIG Deficiencies not Remediated
7.3 Limitations and Proposed Next Steps
8 Conclusion
References
Deficiencies of Compliancy for Data and Storage
1 Introduction
1.1 Prevailing Definitions
1.2 Compliancy Standards
2 Research Methodology
2.1 Sources of Articles
2.2 Security Principles
2.3 Source Classification
3 Article Mapping to CIA Triad
4 Results of Classification
5 Analysis and Interpretation
5.1 Industry Perspective of Storage
5.2 Data Risks
5.3 Security Threats Related to Data Storage
5.4 Regulatory Requirements for Disclosure of Data Breaches
6 Summary
References
Taming the Digital Bandits: An Analysis of Digital Bank Heists and a System for Detecting Fake Messages in Electronic Funds Transfer
1 Introduction
2 Background
2.1 Electronic Fund Transfer
2.2 Architecture of SWIFT System
3 Classification of Digital Bank Heists
3.1 Data Breach & Financial Account Hack
3.2 Banking Service Disruption
3.3 Compromised Bank Messaging Network
4 Case Studies
4.1 Incident I: Central Bank of Bangladesh
4.2 Incident II: Brazilian Banks
5 SecureSWIFT
5.1 System Architecture
5.2 Operational Model
5.3 Security Analysis
5.4 Experimental Setup and Results
6 Related Work
7 Conclusion
References
Identifying Vulnerabilities in Security and Privacy of Smart Home Devices
1 Introduction
2 Methodology
2.1 Databases and Keywords
2.2 Inclusion and Exclusion Criteria
3 Vulnerabilities of the Smart Home
3.1 Device Vulnerabilities
3.2 Application Vulnerabilities
3.3 Communication Vulnerabilities
3.4 Software Architecture Vulnerabilities
4 Solutions to SHD Vulnerabilities
5 Discussion
5.1 Open Research Areas
5.2 Limitations
6 Conclusion
References
Short Papers
Information Warfare and Cyber Education: Issues and Recommendations
1 Introduction
2 Cyber and IW
3 Recommendations
References
Designing an Internet-of-Things Laboratory to Improve Student Understanding of Secure Embedded Systems
1 Introduction
2 Methods and Results
3 Discussion and Conclusion
References
Distributed Denial of Service Attack Detection
1 Introduction
2 TF-IDF and LSI Approach
References
Is There a Prophet Who Can Predict Software Vulnerabilities?
1 Introduction
2 Overall Approach and Results
3 Discussion and Conclusion
References
Author Index

Systemvoraussetzungen

Als PDF speichern Als Link merken