Security Infrastructure for Cyber Attack Targeted Networks and Services

Abstract

Cyber security covers various aspects of confidentiality, integrity, availability, and other related concepts for organizations and individuals. With the increase in web services, Internet enabled devices, and the amount of data generated, we see a huge growth in the number of cyber security incidents across the globe. Denial of service attacks, covert channel attacks, side-channel attacks, malware-driven attacks, and ransomware attacks are some of the most common cyber attack classes with a number of variants. These attacks may show various direct and indirect effects such as data loss, data leakage, data alteration, reputation loss, maintenance cost, malware spread, and service unavailability among others. There is number of levels in the overall target network or service hierarchy which need to have security deployments in the form of devices, software, filtering, and admission control mechanisms. In this chapter, we provide comprehensive detail on various modern security solutions across the overall spectrum of services. We categorize the modern security infrastructure into four categories which include network security, server security, cloud security, and device security infrastructures. We detail various primitives available in each of these categories in the state of the art and discuss their related security aspects.