An Introduction to Network Security

Data Analysis Approach
1. Auflage 2026
ISBN: 978-1-032-94366-4
Verlag: Taylor & Francis Ltd

Buch, Englisch, 250 Seiten, Format (B × H): 156 mm x 234 mm

This book is designed to provide a starting point for researchers and students in the field of network security. The goal is to help them understand the problem domain, learn how to build an experimental set, and conduct experiments. This book focuses on concepts related to securing computer networks and does not cover cryptography. This book covers the areas of intrusion detection, intrusion prevention, and response systems. This includes processing data collected from network traffic and post-processing alerts generated by the intrusion detection system. Alert post-processing methods include alert aggregation and alert correlation. This book covers the theoretical concepts used in this field of work, supported by empirical examples, to show the reader how these tasks are possible. Concepts such as statistics, principal component analysis, dimensionality reduction, feature selection, classification methods, clustering methods, and expert systems are discussed in this book and used in examples. Finding and creating suitable datasets are also explained in this book. The examples provided are MS-Windows based, coded in C++, and explained in full detail. The examples are implemented in environments such as WEKA, CLIPS, and Visual Studio. This book covers methods for preventing and responding to intrusions. In addition to current methods in this field, the registry and MS-Windows Firewall are among the sections discussed in two chapters of this book. This book focuses primarily on wired networks or networks using TCP/IP-based connections, but there is also discussion of the applicability of these methods to other technologies and methods, such as Wi-Fi, cookies, fingerprinting, and honeypots.

Zielgruppe

Professional Practice & Development, Professional Reference, and Professional Training

Autoren/Hrsg.

Kabiri, Peyman

Fachgebiete

• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit
• Geisteswissenschaften Architektur Gestaltung, Darstellung, Bautechnik
• Technische Wissenschaften Bauingenieurwesen Gebäudesicherheit
• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Datensicherheit, Datenschutz

Inhaltsverzeichnis

CHAPTER 1

1 INTRODUCTION TO NETWORK SECURITY

1.1 CYBERATTACKS CATEGORIES

1.2 SECURITY POLICIES, STANDARDS, AND LEGISLATIONS RELATED TO SYSTEM, NETWORK, AND CYBERSPACE SECURITY

CHAPTER 2

2 BASIC DEFINITIONS AND CONCEPTS IN NETWORK SECURITY

2.1 GENERAL TYPES OF ATTACKS ON COMPUTER NETWORKS IN THE NETWORK LAYER

2.2 DOS ATTACKS

2.3 INTRUSION DETECTION FOR ATTACKS ON COMPUTER NETWORKS

2.4 INTRODUCTION TO ALERT AGGREGATION

2.5 INTRODUCTION TO ALERT CORRELATION

2.6 INTRUSION PREVENTION FOR ATTACKS ON COMPUTER NETWORKS

2.7 INTRUSION RESPONSE FOR ATTACKS ON COMPUTER NETWORKS

2.8 HYBRID APPROACH TO COMPUTER NETWORK SECURITY

CHAPTER 3

3 INTRUSION DETECTION METHODS

3.1 SIGNATURE-BASED INTRUSION DETECTION

3.2 ANOMALY-BASED INTRUSION DETECTION

3.3 DATASET FOR INTRUSION DETECTION

3.4 FEATURE EXTRACTION

CHAPTER 4

4 PROCESSING DATA COLLECTED FROM NETWORK TRAFFIC

4.1 PRE-PROCESSING OF COLLECTED DATA

4.2 DATA ANALYSIS

4.3 MEAN, VARIANCE AND EXPECTED VALUE

4.4 FEATURE SELECTION AND DIMENSIONALITY REDUCTION

4.5 DIFFERENT APPROACHES TO FEATURE SELECTION 81

4.6 DIMENSIONALITY REDUCTION

4.7 DATA ACQUISITION AND ANALYSIS TOOLS

4.8 INTERACTING WITH THE NETWORK USING THE NETWORK INTERFACE TOOL

4.9 PLATFORMS FOR RUNNING EXPERIMENTS

CHAPTER 5

5 ALERT POST-PROCESSING

5.1 ALERT AGGREGATION USED FOR INTRUSION DETECTION

5.2 ALERT CORRELATION METHODS USED FOR INTRUSION DETECTION

5.3 ASSOCIATION RULE MINING

5.4 EXPERT SYSTEM

CHAPTER 6

6 INTRUSION PREVENTION METHODS

6.1 SIMPLIFYING SOFTWARE AND PROTOCOLS AS SOURCES OF VULNERABILITY

6.2 EXAMPLES OF PREVENTIVE MEASURES FOR EXPLOITS

6.3 ACTIVE AND PASSIVE INTRUSION PREVENTION SYSTEMS

6.4 ACCESSING SOME STRUCTURES OF THE OPERATING SYSTEM OR THE REGISTRY IN MS-WINDOWS

6.5 SOME MISCELLANEOUS PREVENTIVE METHODS

6.6 PROTECTION AGAINST PROFILING ATTACKS

CHAPTER 7

7 INTRUSION RESPONSE METHODS

7.1 COST-BASED APPROACH IN RESPONSE TO INTRUSIONS

7.2 ADVANCED TOPICS IN INTRUSION RESPONSE

REFERENCES

INDEX

Über Autor(innen)

Peyman Kabiri, PhD, received his bachelor’s degree in computer hardware engineering from Iran University of Science and Technology in 1992. After receiving his master’s degree in real-time systems from Nottingham Trent University in 1996, he received a bursary from Nottingham Trent University to continue his doctoral studies. He received a PhD in Computer Science from Nottingham Trent University in 2000. After receiving his PhD, he held various positions in companies and universities, including Assistant Professor in the School of Computer Engineering at the Iran University of Science and Technology, project coordinator in Faculty of Computer Science at the University of New Brunswick – Canada, Senior Lecturer in Cybersecurity in the Department of Computing at Sheffield Hallam University, and Senior Lecturer in Cybersecurity in the School of Computer Science and Informatics at De Montfort University.

Dr Kabiri has designed and taught many modules in the field of cybersecurity at undergraduate and graduate levels since 2010. His lectures are based on his research findings and were initially intended for graduate students, including Intrusion Detection and Response Methods and Systems for Computer Networks, Secure Computer Systems, and Cyber-Physical Systems Security. Later, he designed and taught undergraduate lectures and laboratory tutorials for undergraduate courses at UK universities, namely Network Intrusion Detection and Artificial Intelligence for Cybersecurity (except for the last few sessions). He has a diverse range of research and teaching experiences that enable him to contribute to multidisciplinary research and teaching areas. He has published 46 conference papers and 32 journal articles and edited one book. He has supervised the final projects of many undergraduate students, 52 master’s students and 5 doctoral students to completion. He strongly believes in research-based teaching, and in his lectures, he provides his students with theoretical and practical knowledge along with examples of real-world scenarios. Having diverse research and teaching experience at the international level helps him to have a broader perspective on different research and teaching approaches and the educational needs of researchers and students.