Abstract Network security is a complex and challenging problem. The area of network defense mechanism design is receiving immense attention from the research community. However, the network security problem is far from completely solved. In this context, several modeling approaches have been developed, such as approaches based on attack trees (AT). Researchers have been exploring the applicability of colored Petri nets... Network security is a complex and challenging problem. The area of network defense mechanism design is receiving immense attention from the research community. However, the network security problem is far from completely solved. In this context, several modeling approaches have been developed, such as approaches based on attack trees (AT). Researchers have been exploring the applicability of colored Petri nets approaches to address the network security issues and some of these approaches look promising. Petri Nets provide a graphical notation for modeling systems and performing analysis. Colored Petri Nets (CoPNets) combine the strengths of ordinary Petri Nets with a high level programming language, making them more suitable for modeling large systems. A CoPNet model is an executable representation of a system that can be analyzed through simulation. CoPNet models are built using CoPNet Tools, a graphical software tool and interface used to create, edit, simulate, and analyze models. This paper proposes Colored Petri Net (CoPNet) modeling approach by extending the attack trees with new modeling constructs and analysis approaches. CoPNet based attack model is flexible enough to model Internet intrusion, including the static and dynamic features of the intrusion. The process and rules of building CoPNet based attack model from AT are also presented. In order to evaluate the risk of intrusion, some cost elements are added to CoPNet based attack modeling. We show how attack trees can be converted and analyzed in CoPNets. Finally, we provide three case studies that illustrate the CoPNet approach. Read More Read Less

Abstract In recent years, wireless access technology is quite popular for its convenience, fast and flexible. However, due to the openness of wireless network, this technology also faces with a number of secure challenges, one of which is how to deal with the unauthorized access point effectively. As we all know, the unauthorized access point leads to not only increasing interference between... In recent years, wireless access technology is quite popular for its convenience, fast and flexible. However, due to the openness of wireless network, this technology also faces with a number of secure challenges, one of which is how to deal with the unauthorized access point effectively. As we all know, the unauthorized access point leads to not only increasing interference between signals induced by the fierce competition of wireless channel resources, but also data leakage resulting in “wireless phishing”. In response to these security threats, much importance has been put on the research of unauthorized access point location and trajectory tracking. This paper firstly proposes an optimization model of wireless signal propagation. Then an access point location and tracking method called APL_T is put forward, which supports three-dimensional location based on the weight update improving the location accuracy effectively and raises the trajectory tracking of the access point in the light of the three-dimensional location. Finally, the experimental results show that APL_T has a high accuracy and can meet practical requirements. Read More Read Less

Abstract Security of wireless sensor networks (WSN) is an important feature, as they are used in critical applications such as surveillance, monitoring, tracking and controlling etc. Secure and reliable communication is highly important in delivering critical information correctly and in-time by low-powered sensor motes (SM). Many secure WSNs protocols have been proposed but they have focused primarily on denial-of-communication at the... Security of wireless sensor networks (WSN) is an important feature, as they are used in critical applications such as surveillance, monitoring, tracking and controlling etc. Secure and reliable communication is highly important in delivering critical information correctly and in-time by low-powered sensor motes (SM). Many secure WSNs protocols have been proposed but they have focused primarily on denial-of-communication at the routing or medium access control levels. Although WSNs have interesting distinctiveness (i.e., minimum set-up cost, unattended network operation), and because of the wireless medium (i.e., there are no gateways or routers to observe data flow), the security of these networks is the main issue, particularly when privacy is the main theme. Secure communication in WSNs reclines in the security of their routing protocols. However, resource bound security solutions are needed for WSNs. This paper has proposed novel security mechanism by combining features of two security architectures in WSNs, i.e., TESLA from SPINE and Bloom Filters (BF) from MiniSec. We have used TOSSIM for simulation and showed that our proposed mechanism perform better than other security schemes. Read More Read Less