My Portfolio

MANET

2011-05-09T02:08:00.000-07:00

Security in Manet Networks Challenges and Solutions

MANETS recent popularity

Self-configuration
Self-maintenance

Challenges to security

Open network architecture
Shared medium
Resource constraints
Dynamic topology

Goals of MANET Security

Protect network connectivity over multi-hop wireless channels
Link level solutions + network level solutions

Approaches

Proactive
Reactive

Attacks (Network Layer)

Routing attacks
Attempt to “screw up” the others’ routing tables (remote effect)
Forwarding attacks
Leave routing tables alone, but change delivery of packets (local effect)
Attack dependent on underlying protocol

Attacks (Link Layer)

Key attacks
WEP
DoS attacks - Manipulation of backoff interval

Easy corruption of other’s data
Effects are compounded at higher layers
Solution Outline – A Multi-fence Security Solution

Message Authentication Primitives

Message authentication code

One-way hash function based on shared key
Send data + MAC
Verified only by intended receiver
Low computational overhead
Storage requirement
O(n2) keys

Digital signature

Public key infrastructure w/ certificates
Encrypt w/ private and decrypt w/ public
Verified by all receivers
High computational overhead
Storage requirement
O(n) keys
Certificate revocation lists
Less resilient to DoS attacks

Secure Routing

Usually proactive approach
Authenticate source and routing information
Based on routing protocols
Source-based routing
Distance vector routing
Link state routing

Secure Source-based Routing

Append node ids to dynamically create routing path
Goal: Prevent intermediate nodes from altering routing list
End-to-end verification of nodes in paths
Example protocol (Adriadne) uses hash chaining technique

Secure Distance Vector Routing

Advertise global shortest paths to neighbor
Based on a distance metric
Goal: ensure correct advertisement of distance metric and authentic sender
Authenticate aggregation of metric
Unclear example in the paper that used hash chain on hop count

Secure Link State Routing

Discover neighbors and broadcast that info to everyone
Links only added if bidirectional
Nodes can collude
Goal: authenticate both neighbor discovery and neighbor broadcast
Example protocol (SLSP) uses digital signatures

Secure Packet Forwarding

Prevention impossible
Detection
Monitor neighbors
Probe path (for failures)
Reaction
Related to prevention mechanism
Global
End-host

Open Challenges

Larger problem space
Thwart attacks but include failures, misconfigurations, and network overload
Intrusion toleration
Make system robust in the presence of attacks
Larger solution space
Supplement encryption with other mechanisms (connectivity or route redundancy)
Use redundancy on system and protocol levels

Conclusions

High level description of security issues in MANETSFocused on network layer. Especially routing
Proposed “resiliency-oriented” multi-layered solution design – increased fault tolerance in security systems and called for better analysis models.

Cyberwarfare & Terrorism

2011-04-12T18:50:00.001-07:00

Cyberspace

Introduction to Cyberspace - William Gibson in 1984, Cyberspace refer to the virtual world created by communication over the internet.

A crime is an offensive act against society that violates a law and punishable by the government. Below is different between cybercrime, cyberterrorism and cyberwarfare.

CyberWarfare

Cyberwarfare has been defined by government security expert Richard A. Clarke, in his book Cyber War(May 2010), a "actions by a nation-state to penetrate another nation's computers or network for the purpose of causing damage or diruption. Cyberwarfare in US a military strategy a proactive cyber defense and the use of cyberwarfare as a platform for attack. In China, diplomatic cables highlight US concern that China is using access to Microsoft source code and harvesting the talents of its private sector to boost its offensive and defensive capabilities. However, in Russian state includes allegation of DoS attacks, hackers attacks, dissemination of disinformation over the internet, participation pf tate-sponsored teams in political blogs, internet surveillance using SORM technology and persecution of cyber-disidents. According to Lieutenant Colonel Timothy F. O’Hara, United States Army, Cyber warfare is a very attractive means to accomplish non-kinetic warfare. It has many features that our adversaries would find attractive. Figure 1.0 showed the cyber warfare depth.

Figure 1.0: Cyber warfare Depth

Terrorism

Terrorism is a criminal act that influences an audience beyond the immediate victim. The strategy of terrorists is to commit acts of violence that draws the attention of the local populace, the government, and the world to their cause. The terrorists plan their attack to obtain the greatest publicity, choosing targets that symbolize what they oppose. The effectiveness of the terrorist act lies not in the act itself, but in the public’s or government’s reaction to the act. For example, in 1972 at the Munich Olympics, the Black September Organization killed 11 Israelis. The Israelis were the immediate victims. But the true target was the estimated 1 billion people watching the televised event. However, the primary goal of a cyber terrorist maybe to disrupt, destroy, or “dis-inform” cyberspace. The primary goal might be to use cyberspace to “augment or enhance” some other physical threat or act of terrorism. Cyber terrorism as a method of operation also depends on the group.

According to CYBER WARFARE/CYBER TERRORISM by Lieutenant Colonel Timothy F. O’Hara, cyber terrorism can be conclude that cyber terrorism is not fictional concept. Cyber terrorism is a real and a legitimate threat. Cyber attacks at the low to medium level do occur on a regular basis. However, study clearly indicates that cyber terrorism, as a threat, is not currently and has not been at the level the media pundits would have us believe. A “digital Pearl Harbor” is certainly conceivable, but it is probably unlikely, and the threat diminishes as the level of awareness increases. Correspondingly, the threat of a cyber attack resulting in physical damage is equally unlikely. What is more likely to occur in the future is a steady increase in the number of cyber attacks that we are currently experiencing. These attacks are designed primarily to disrupt digital data and “dis-inform” the public. It is also more likely that the future will see a steady increase in the use of cyberspace to support general terrorist operations. For the same reasons that private businesses and governments derive value added from cyber operations, so will terrorists.

In spite of the events of September 11th we live in an optimistic time. The terrorist group that attacked us on our home soil is on the run. While still dangerous, their over-all effectiveness has most likely been reduced. Although cyberspace is not a risk-free environment, the benefits of private, business, and governmental usage of cyberspace clearly outweigh the risks. The freedom of cyberspace can be maintained, as long as domestic cyber security measures are properly structured so as to minimize damage resulting from intentional cyber attacks

Virtual Private Network - VPN

2011-03-02T04:10:00.000-08:00

Virtual Private Network Flow

What is VPN

VPN is special type for WAN(Wide Area Network) which achieves to connect without use leased private lines. It uses to establish Internet. Development of VPN is to establish secure and cost effective long distance links between two or more computing networks. VPN has its own set of software programs, protocols and security constructs which make secure connectivity possible. The USP of virtual private computer networks over conventional computer networks lies in the fact that this technology is a significantly low cost alternative. Before we see how VPN works, let us have a look at the types of VPNs that can be set up.

Types of VPN

Remote client access via VPN
Peer to peer VPN (can let two separate local area networks, to be linked together)
Private VPN (private intranet of a company that allows enabling of access control for each user)

How VPN Works

Install VPN client programs on the machines which need remote access
Enable Internet connectivity provided by an ISP, after verification of user name and password.
Access the private network easily use client remote computer.

*Tips: For more secure, established tunnel between VPN server and client.

Benefit of VPN

Substantially easy and inexpensive to set it up
Can provide long distance connectivity, between multiple branches of a company office, by providing secure data transfer and encryption, to enable video conferencing, as well as data transfer.
Reduces the costs involved in maintaining long distance networks and costs of operation.

VPN is a technology that are really cost effectiveness, efficiency and security features of virtual private networks make them attractive and preferred choices over conventional leased line based networks. Because of that, most industry Intranets use VPN technology to establish internal connectivity.

Hope this article has given you a rough idea of how VPN works, offering secure connectivity and resource sharing services.

AWARD

2010-10-28T04:47:00.000-07:00

Universiti Teknologi Malaysia (UTM)

Dean’s Certificate, Semester 1, Session 2005/2006, Diploma Computer Science (Information Technology), University Technology Malaysia, City Campus, KL.
Dean’s Certificate, Semester 2, Session 2005/2006, Diploma Computer Science (Information Technology), University Technology Malaysia, City Campus, KL.
Dean’s Certificate, Semester 1, Session 2006/2007, Diploma Computer Science (Information Technology), University Technology Malaysia, City Campus, KL.
Dean’s Certificate, Semester 2 Session 2006/2207, Diploma Computer Science (Information Technology), University Technology Malaysia, City Campus, KL.
Dean’s Certificate, Semester 1 Session 2007/2208, Diploma Computer Science (Information Technology), University Technology Malaysia, City Campus, KL.

SMK Sultan Alauddin

Best Student in Mathematics SPM 2004, Sekolah Menengah Kebangsaan Sultan Alauddin
Best Student in Pendidikan Islam SPM 2004, Sekolah Menengah Kebangsaan Sultan Allauddin
Best Student in Bahasa Melayu PMR 2002, Sekolah Menengah Kebangsaan Sultan Alauddin
Best Student in Kemahiran Hidup Pilihan 2 PMR 2002, Sekolah Menengah Kebangsaan Sultan Alauddin

PROJECT DONE

2010-10-28T04:43:00.000-07:00

Projek Sarjana Muda

Sistem Pengurusan Aset Alih Kerajaan Secara Atas Talian Menggunakan Teknologi RFID
(SPAAK Online Using RFID)

This project is designed for Pejabat Pendidikan Daerah (PPD) Kulaijaya, SMK Sultan Alauddin and SMK Sultan Ismail to manage ICT equipment in order to store, detect, borrow and search the ICT inventory devices. This project used RFID technology for security purpose.

NAv6 Training Information Centre (iPhone Application)

This iPhone application was developed for NAv6 organization to access information aboutIPv6 training program. Scope of users are who have the iPhone devices. This application is design to make the data and information more easier and faster to access.

NAv6 Server Installation

This project was designed to accelerate the NAv6 LAN network. This server supports IPv4 and IPv6 protocol. In this task; the operating systems we are using are VM Ware ESX 3.5, CentOS 5.4, Ubuntu 9.04 Server, FreeBSD 7 and Windows Server 2003. This project is fully successful and can be used by NAv6 staff.

Club Photography Management System

This project was developed to manage Club Photography UTM, KL information system. In this task, programming language we are using was Visual Basic.

EXPERIENCE

2010-10-28T04:42:00.000-07:00

Jun - Disember 2011 - Part time worker with CICT, UTM Skudai

November- April 2010 Intership with nasional Advanced For IPv6

January – May 2009 Admin for Website Kolej Datin Sri Endon(KDSE), UTM (Using Joomla)

May – Sept 2009

Admin for Website Klinik Pergigian Temenggong Ibrahim, Kulaijaya
(Using ZOOM)

April – Sept 2009

Part time as Tutor/Tuition Teacher in SK (F) Bukit Ramun, Kulaijaya

SKILLS

2010-10-28T04:38:00.000-07:00

Networking :

CCNA1, CCNA2, CCNA3, CCNA4,

Design Topology LAN, WAN, MAN

IPv6 Certified Network Engineer (CNE6)

Security :

Security Management
Computer Security
Cryptography

Web-Based :

HTML,
Microsoft FrontPage,
PHP

Programming Language :

C, C++, HTML, Visual Basic, JAVA, MySQL, PHP, ASP.net Objective C

Project Software :

Microsoft Office Access,
Microsoft Office Project,
Microsoft Office Excel,
Macromedia Dreamweaver MX,
Adobe Photoshop,
Rational Rose,
Visual Studio 8,

Operating System :

Windows 95, 98, 2000, ME, XP, VISTA
MacOS, CentOS, FreeBSD

Internet Application :

Internet Explorer, Mozilla Firefox.

Presentation Software :

Microsoft Office Power Point 2003/2007

Others : Maintenance Computer (Formatting, Others), Setting Up Computer Network

EDUCATION

2010-10-28T04:36:00.001-07:00

January 2011(1st Semester)

Master in Computer Science (Information Security)

December 2010
Bachelor in Computer Science (Computer Network & Security)
University Technology Malaysia (UTM)
Skudai, Johor

May 2008
Diploma in Computer Science (Information Technology)
University Technology Malaysia (UTM), City Campus
Jln Semarak, Kuala Lumpur

December 2004
Sijil Pelajaran Malaysia (SPM)
SMK Sultan Alauddin,
Kulaijaya, Johor

PERSONAL DETAIL’S

2010-10-28T04:33:00.000-07:00

Name : Hafsah Binti Salam
Date of Birth : April 02, 1987
Place of Birth : Kulaijaya, Johor
E-mail Address : ha_a227@yahoo.com

Race : Malay
Nationality : Malaysian
Religion : Islam
Language : Malay and English
Age : 24 Years Old
Gender : Female
Marital Status : Single
Health : Excellent

About Me

Once focused on an objective, I believe myself to have undying lust for success with accuracy and efficiency. I am committed in what I do. I am fast learner and willing to accept new invention. As blogger I am open to any comments and criticisms.

ACTIVITIES

2010-10-28T04:30:00.000-07:00

University Technology Malaysia (UTM)

Ketua Exco ICT , Jawatankuasa Mahasiswa Datin Seri Endon College 2008/2009
Exco Pameran & Komunikasi, Jawatankuasa Mahasiswa Datin Seri Endon College 2008/2009
Exco Hubungan, Malam Sinar Gemerlapan 09, Datin Seri Endon College 2009
Participants, Program Hari Raya Terbuka, Datin Seri Endon College 2008

University Technology Malaysia (UTM), City Campus

Secretary, Adobe Photoshop Workshop 2007
Committee Members, Open Day College-2 (Kediaman Siswa Jaya)

SMK Sultan Alauddin (Secondary School)

Vice President, School Prefect, SMK Sultan Alauddin
President, Student’s Mathematics & Sciences Club, SMK Sultan Alauddin
President, Pandu Puteri Club, SMK Sultan Alauddin
Vice President, Pandu Puteri Club, Schools in Johor Bahru
Participant (District), 2nd Place in ‘Syarahan Bahasa Arab’ tournament
Participant (District), Campion Pemantun Terbaik 2003
Participant (District), Campion Mathematics Quiz tournament
Participant t (District), Best Debater in English Carnival, Johor
Participant, Malaysia & Singapore 2nd Link Bridge Run (The Malaysia Book of Records)

REFERENCE

2010-10-28T04:23:00.000-07:00

Dr Kamarulnizam B. Abu Bakar
Senior Lecturer / Academic Advisor
Department of Computer System and Communication
Faculty of Computer Science & Information Systems
University Technology Malaysia 81310 Skudai
Johor, Malaysia
kamarul@fsksm.utm.my / knizam@utm.my
(607)-5532382

Dr Shukor Abdul Razak
Lecturer / Academic Advisor
Department of Science,
College of Science and Technology,
University Technology Malaysia
shukor@citycampus.utm.my
Tel: +6075532391
Fax: +6075565044

ABOUT ME

2010-10-21T06:13:00.000-07:00

About Me
Welcome to my site where I share my experiences and methods I learn. I am fresh graduated from University Technology Malaysia (UTM) in Computer Science (Computer Network & Security). Now I continue my study in Master in Computer Science (Information Security) and part time worker in CICT, UTM. Before I continue my bachelor study, I have certified in Diploma in Computer Science (Information Technology) for 3 years. I spend much of my time online and oftentimes across stuffs I like that I feel others should know about it. With this I want to take the opportunity to ask everyone to share your wisdoms to the readers of this blog by putting comment/s. As with all bloggers, I'm open to any offers to place advertisements on my blog.

Career Objective

To associate myself with the organization where I work.
To build up my potential and my knowledge & gain as much experience as possible in computer network and security.