Improving Network Infrastructure Security by Partitioning Networks Running Spanning Tree Protocol

Yeung, K.H.; Yan, Fan; Leung, C. M.

doi:10.1109/icisp.2006.13

Cited by 11 publications

(5 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Yeung et al have proposed a partition based switched network [19] using the special switches, for the modified STP protocol. The solution is approached by partitioning a STP network into a hierarchy of switching domains, a network infrastructure and a non-network infrastructure.…”

Section: Related Workmentioning

confidence: 99%

Exploit detection techniques for STP using distributed IDS

Rai

Barbhuiya

Sur

et al. 2011

2011 World Congress on Information and Communication Technologies

View full text Add to dashboard Cite

Spanning tree protocol (STP) is a link layer protocol used for link management, prevention of loop formation etc. in the network. Although STP is widely used, it is still prone to many kinds of attacks that exploit the lack of security features both in basic working process and STP packet format. By exploiting STP control packet an attacker can pretend to be the new root in STP domain and perform unauthorized activities that lead to root take-over attack, STP control packet flooding, traffic redirection and so on. In this paper, a coverage based distributed intrusion detection system (DIDS) has been introduced, for the detection of attacks on STP. The proposed scheme computes a set of switches in the network that can cover the STP network completely; where every switch belongs to that set is installed with a small module of IDS. This set of IDSs logically divides the STP network into a set of local zones. All the switches in a zone is directly connected to one switch installed with IDS and thus covered by at least one IDS in STP domain. Each IDS can detect and verify any exploit inside its local zone. Additionally IDSs communicate with each other so that any exploit outside the local zone of a particular IDS can also be detected and verified. The results show that the proposed DIDS approach can detect all the STP based attacks.

show abstract

Section: Related Workmentioning

confidence: 99%

Exploit detection techniques for STP using distributed IDS

Rai

Barbhuiya

Sur

et al. 2011

2011 World Congress on Information and Communication Technologies

View full text Add to dashboard Cite

show abstract

“…Running a network infrastructure model comes with a variety of difficulties. The following are three of the top three network infrastructure challenges (Kaeo, 2004) (Yeung, Yan and Leung, 2006) (Hansen, 1997) (Wong and Yeung, 2009):…”

Section: Some Network Infrastructure Challengesmentioning

confidence: 99%

Assuring the Optimum Security Level for Network, Physical and Cloud Infrastructure

Atieh¹

2021

Preprint

View full text Add to dashboard Cite

A robust and secure IT infrastructure ensures reliable security, high speeds and connectivity, employee support and accessibility, and a positive user experience for clients. It is hard to manage a modern firm without a secure and adaptable IT infrastructure. Technology, when properly set up and networked, can improve back-office processes, increase efficiency, and simplify communication. This research explores how an organization assure the optimum level of infrastructure security in in three domains: network infrastructure security, physical infrastructure security, and cloud infrastructure security. Running a network infrastructure model comes with a variety of difficulties. The findings suggest that there are few recommendations for assuring right security level for the network infrastructure, including: conducting a network security assessment, keeping user access privileges to a bare minimum for work, updating programs, investigating cybersecurity tools and Increasing cyber-awareness. Physical infrastructure security is also crucial. We divided he dangers are divided into the following categories and suggested for appropriated measure: threats by environment, threats by technical infrastructure, threats by humans, inappropriate humidity and temperature, Electrification, Electromagnetic Interference (EMI), Unauthorized physical access. Cloud security is necessitated by the widespread adoption of cloud technology, as well as an ever-increasing volume and sophistication of cyber attacks. To ensure the right level of cloud security, this research recommend to take some measures, including: Transit and Rest Protection, Asset Security. Securing User Management, Integration of compliance and security, Authentication and Identity, and Operational Safety and Security While no amount of security will ever stop all attacks, organizations can significantly minimize risk of suffering a breach and the fallout from such attacks by taking a few critical steps to secure business’ network, physical and cloud infrastructure.

show abstract

“…Role and authentication-based access controls are key strategies to prevent attacks of this nature. Segmentation of VLANs, link-layer encryption, and integrity validation techniques could also be of help [103][104][105][106].…”

Section: Data Link (Layer 2)mentioning

confidence: 99%

A Survey of Protocol-Level Challenges and Solutions for Distributed Energy Resource Cyber-Physical Security

et al. 2018

View full text Add to dashboard Cite

The increasing proliferation of distributed energy resources (DERs) on the smart grid has made distributed solar and wind two key contributors to the expanding attack surface of the network; however, there is a lack of proper understanding and enforcement of DER communications security requirements. With vendors employing proprietary methods to mitigate hosts of attacks, the literature currently lacks a clear organization of the protocol-level vulnerabilities, attacks, and solutions mapped to each layer of the logical model such as the OSI stack. To bridge this gap and pave the way for future research by the authors in determining key DER security requirements, this paper conducts a comprehensive review of the key vulnerabilities, attacks, and potential solutions for solar and wind DERs at the protocol level. In doing so, this paper serves as a starting point for utilities, vendors, aggregators, and other industry stakeholders to develop a clear understanding of the DER security challenges and solutions, which are key precursors to comprehending security requirements.

show abstract

Improving Network Infrastructure Security by Partitioning Networks Running Spanning Tree Protocol

Cited by 11 publications

References 1 publication

Exploit detection techniques for STP using distributed IDS

Exploit detection techniques for STP using distributed IDS

Assuring the Optimum Security Level for Network, Physical and Cloud Infrastructure

A Survey of Protocol-Level Challenges and Solutions for Distributed Energy Resource Cyber-Physical Security

Contact Info

Product

Resources

About