Secure Chains

Secure Chains
Author: Abhishek Bhattacharya
Publisher: BPB Publications
Total Pages: 387
Release: 2020-03-03
Genre: Computers
ISBN: 9389328659

Understand Cybersecurity fundamentals and protect your Blockchain systems for a scalable and secured automation KEY FEATURES Ê Understand the fundamentals of Cryptography and Cybersecurity and the fundamentals of Blockchain and their role in securing the various facets of automation. Also understand threats to Smart contracts and Blockchain systems. Understand areas where blockchain and cybersecurity superimpose to create amazing problems to solve. A dedicated part of the book on Standards and Frameworks allows you to be industry-ready in information security practices to be followed in an organization. Learn the very lucrative areas of Smart Contract Security, Auditing, and Testing in Blockchain. Finish to build a career in cybersecurity and blockchain by being Industry 4.0 ready. DESCRIPTIONÊ As this decade comes to a closure, we are looking at, what we like to call, an Industry 4.0. This era is expected to see radical changes in the way we work and live, due to huge leaps and advancements with technologies such as Blockchain and Quantum Computing. This calls for the new age workforce to be industry-ready, which essentially means an understanding of the core fields of Cybersecurity, Blockchain, and Quantum Computing is becoming imperative. This book starts with a primer on the ÒEssentials of CybersecurityÓ. This part allows the reader to get comfortable with the concepts of cybersecurity that are needed to gain a deeper understanding of the concepts to follow. The next part gives a similar primer on the ÒEssentials of BlockchainÓ. These two parts at the beginning of the book allow this book to be easily followed by beginners as well. The following parts delve into the concepts, where we see a ÒSuperimposition of Cybersecurity and BlockchainÓ, and the concepts and situations where we may see and understand amazing problems that systems in the current world face day in and day out. This book puts immense emphasis on helping the reader know about the Standards and Frameworks needed to be put in place to make an organization work seamlessly. Towards the end, a part dedicated to Smart Contract Security, Auditing, and Testing in Blockchain provides knowledge about what is one of the most lucrative career options and has vital importance in the field of Blockchain. Conclusively, the book tries well to make the reader ÒIndustry 4.0-readyÓ, helping them in traversing through the upcoming decade of significant career options. Ê WHAT WILL YOU LEARNÊ By the end of the book, you should be able to understand the gravity of the concepts involved in technologies like Blockchain and Cybersecurity, with an acute understanding of the areas, such as Quantum Computing, which affect the technologies. You will also know about the tools used in Smart Contract Auditing and Testing in Blockchain. You should be able to make a career in blockchain and associated technologies going forward. WHO THIS BOOK IS FORÊÊ This book is meant for everyone who wishes to build a career in blockchain and/or cybersecurity. The book doesnÕt assume prior knowledge on any of the topics; hence a beginner from any diverse field might definitely give these technologies a try by reading this book. The book is divided into parts that take the reader seamlessly from beginner concepts to advanced practices prevalent in the industry. No prior programming experience is assumed either. Familiarity with the basic web technologies would help, though it is not mandatory to follow this book. Table of Contents Preface Introduction Why Did We Write This Book? Part 1. Essentials of Cryptography Introduction Chapter 1: Cryptography Techniques Introduction Key Length Key Management Algorithmic Principles Usage Chapter 2: Cryptography Protocols Introduction Basic Components of Cryptographic Protocols Security Applications of Cryptographic Protocols Categories of Cryptographic Protocols Chapter 3: Algorithms and Modes Introduction Behind the Scene Mathematics Block Ciphers Stream Ciphers One-Way Hash Functions Public-Key Algorithms Symmetric Key Distribution using Symmetric Encryption Symmetric Key Distribution using Asymmetric Encryption Distribution of Public Keys X.509 Certificates Public-Key Infrastructure (PKI) Cryptographic Attacks Key-Exchange Algorithms Elliptic Curve Cryptography (ECC) Digital Signatures With Encryption Data Encryption Standard (DES) Secure Hash Algorithm (SHA) Message Digest Algorithms (MD5) Rivest, Shamir, Adleman (RSA) Zero-Knowledge Proofs Elliptical Curve Digital Signature Algorithm (ECDSA) Probabilistic Encryption Quantum Cryptography Part 2. Essentials of Blockchain Introduction What is Blockchain? The Need for Decentralization Demystifying Disintermediation Principles in Blockchain Architectures Chapter 4: Introduction: Distributed Consensus & Consensus Mechanisms Proof of Work (PoW) Proof of Stake (PoS) Proof of Elapsed Time (PoET) Byzantine Fault Tolerance (BFT) and Variants Federated Byzantine Agreement Ripple Consensus Protocol Algorithm Stellar Consensus Protocol Delegated Proof of Stake (DPoS) Chapter 5: Types of Blockchain Public Blockchain Private Blockchain Federated or Permissioned Blockchain Chapter 6: Key Considerations for Blockchain Implementations Scalability Interoperability Sustainability Contracts Currency Application Chapter 7 : Strategic Roadmap for Digital Enterprise Adoption Convergence of Principles Legacy of Cypherpunks Digital Enterprise Use Cases Digital Transformation Perspective Decentralized Operating Models Prominent Trust Patterns Major Challenges and Constraints Chapter 8: Blockchain Ð The New Generation Tool for Cybersecurity Blockchain with Turin Complete State Machine Private and Consortium/Permissioned BlockchainsÊ Overview of Security Tools in Blockchain Vulnerabilities in Blockchain Security Challenges to the Growth of Blockchain Eco-system Part 3: The Superimposition of Blockchain and Cybersecurity Chapter 9: Cyberattack Prevention Strategies Evolution of Security Endpoint Detection and Response (EDR) Deception Technology Cyberthreat Intelligence (CTI) Deploying Blockchain-based DDoS Chapter 10: Blockchain-based Security Mechanisms Blockchain-based DNS Alternatives Public Key Cryptography PKI Components and Functions Decentralizing the PKI System Deploying Blockchain-based PKI Identity Mechanisms Multi-Factor Authentication with Blockchain Blockchain-based Interaction Model for Security Chapter 11: Threats for Blockchain systems Cyberthreats with Public and Permissioned Blockchains Major Potential Attacks on Blockchain Networks Chapter 12: Practical Implementations and Use Cases IBM ADEPT Platform Digital Identity as a Distributed Data Structure Cyber-liability Management: A Connected Car Use Case A Smart Home Security Implementation Use Case Chapter 13: Security in Popular Public Blockchain Networks Project in Discussion: Corda Point-to-Point TLS-encrypted Communications Security using Notary Trust Pluggable Consensus Mechanism Chapter 14: Cryptography as a Digital Labor for the Integration of Distributed Finance New Generation Payment Infrastructure Powering Secure Global Finance Libra JP Money Ripple Stellar Lumens Part 4: Standards and Frameworks Chapter 15: ISO 27001 ISO 27001 Introduction Scope Terms and Definitions Structure Information Security Policies Organization of Information Security Human Resource Security Asset Management Access Control Cryptography Physical and Environmental Security Operations Security Communications Security Supplier Relationships Information Security Incident Management Implementation of ISO 27001 in Organizations Chapter 16: NIST Introduction to NIST and HIPAA HIPAA Security Rule NIST and its role in Information Security A Framework for Managing Risk HIPAA Risk Assessment Requirements Part 5: Smart Contract Security, Auditing and Testing in Blockchain Chapter 17: Smart Contract Auditing Why is a Security Audit Necessary Types of Smart Contracts Smart Contract Vulnerabilities and Known Attacks Ownership Attack Re-entrancy Attack Underflow and Overflow Attacks Short Address Attack Storage Injection Vulnerability Risks in ICO Crowdfunding Smart Contracts An Ideal Audit Process Chapter 18: Testing in Blockchain Blockchain Attacks Network Attacks User Wallet Attacks Transaction Verification Mechanism Attacks Mining Pool Attacks Security Testing Phases in Blockchain Testing Framework Quality Issues in Blockchain Practices and Governing Mechanisms Popular Tools for Testing Part 6: Blockchain Power Automation for Industry 4.0 Chapter 19: Risks posed by the ÔSmartÕ Economy ParadigmsÊ Zigbee Chain Reaction Attack Controlling Drones through Blockchain for Security & Auditing Securing Robots through Blockchain Secured Access and Management of Automobiles using Blockchain ÊÊ ÊChapter 20: Summary & Conclusion: ÊA Safer and Secure World with Blockchain-based Solutions

Secure-by-Design Enterprise Architectures and Business Processes in Supply Chains. Handling Threats from Physical Transport Goods in Parcel Mail Services

Secure-by-Design Enterprise Architectures and Business Processes in Supply Chains. Handling Threats from Physical Transport Goods in Parcel Mail Services
Author: Michael Middelhoff
Publisher: Logos Verlag Berlin GmbH
Total Pages: 272
Release:
Genre:
ISBN: 3832557083

Supply chain security encompasses measures preventing theft, smuggling, and sabotage through heightened awareness, enhanced visibility, and increased transparency. This necessitates the adoption of a security-by-design paradigm to achieve effective and efficient security measures, yielding additional benefits such as diminished supply chain costs. Given their vulnerability, transportation and logistics service providers play a pivotal role in supply chain security. This thesis leverages systems security engineering and security-by-design to provide a methodology for designing and evaluating security measures for physical transport goods. It formulates nine principles that define security-by-design and establishes a supply chain security framework. An adaptation of the TOGAF architecture development facilitates the creation of secure-by-design enterprise architectures. Security measures are documented using security-enhanced processes based on BPMN. This enables an analysis and compliance assessment to ascertain the alignment of security with business objectives and the adequate implementation of requirements. The culmination of these efforts is exemplified through a case study.

Software Supply Chain Security

Software Supply Chain Security
Author: Cassie Crossley
Publisher: "O'Reilly Media, Inc."
Total Pages: 281
Release: 2024-02-02
Genre: Computers
ISBN: 1098133668

Trillions of lines of code help us in our lives, companies, and organizations. But just a single software cybersecurity vulnerability can stop entire companies from doing business and cause billions of dollars in revenue loss and business recovery. Securing the creation and deployment of software, also known as software supply chain security, goes well beyond the software development process. This practical book gives you a comprehensive look at security risks and identifies the practical controls you need to incorporate into your end-to-end software supply chain. Author Cassie Crossley demonstrates how and why everyone involved in the supply chain needs to participate if your organization is to improve the security posture of its software, firmware, and hardware. With this book, you'll learn how to: Pinpoint the cybersecurity risks in each part of your organization's software supply chain Identify the roles that participate in the supply chain—including IT, development, operations, manufacturing, and procurement Design initiatives and controls for each part of the supply chain using existing frameworks and references Implement secure development lifecycle, source code security, software build management, and software transparency practices Evaluate third-party risk in your supply chain

Supply Chain Security

Supply Chain Security
Author: Andrew R. Thomas
Publisher: Bloomsbury Publishing USA
Total Pages: 503
Release: 2010-03-02
Genre: Business & Economics
ISBN: 0313364214

A practical, global-centric view of how to make the worldwide supply chain safer, more resilient, and efficient. With more and more enterprises managing supply operations that reach farther and farther from headquarters, Supply Chain Security: International Practices and Innovations in Moving Goods Safely and Efficiently could not be more timely or well-targeted. This comprehensive two-volume set is the first look at the present and future of supply chain management, and the full range of threats to supply chain security. Each volume of Supply Chain Security focuses on a specific area: the first explores the historic context and current operational environment in which supply chain security must function. Volume Two is a look at emerging issues that includes proven, innovative steps companies and governments can take to counter the inherent risks of moving goods and people more safely and efficiently. Reflecting its subject, this resource is truly global in perspective, with contributions from 18 countries and over two-thirds of its contributors from outside the United States. No company that does business internationally should be without this essential resource.

New Challenges in Energy Security

New Challenges in Energy Security
Author: C. Mitchell
Publisher: Springer
Total Pages: 190
Release: 2013-08-29
Genre: Business & Economics
ISBN: 1137298855

Researchers and practitioners explore the effect of evolving global economic and political powers on energy security within the UK and puts forward practical options for moving towards a more energy secure system over both the short and long terms.

WebSphere Application Server Administration Using Jython, Portable Documents

WebSphere Application Server Administration Using Jython, Portable Documents
Author: Robert A. Gibson
Publisher: Pearson Education
Total Pages: 616
Release: 2009-10-18
Genre: Computers
ISBN: 0137043724

Save Time and Money: Streamline WebSphere Application Server Management with Jython Scripting! Utilizing Jython scripting, you can dramatically reduce the effort, resources, and expense associated with managing WebSphere Application Server. WebSphere Application Server Administration Using Jython will show you how. The first start-to-finish guide to Jython scripting for WebSphere administration, this book’s practical techniques and downloadable scripts can help you improve efficiency, repeatability, and automation in any WebSphere environment. This book’s expert authors begin with practical introductions to both WebSphere Application Server administration and Jython, today’s powerful, Java implementation of Python. Next, they cover a broad spectrum of WebSphere management tasks and techniques, presenting real, easy-to-adapt solutions for everything from server configuration and security to database management. These are powerful solutions you can begin using immediately–whether you’re running WebSphere in production, development, or test environments. Coverage includes Mastering the Jython rules, characteristics, and properties that are most valuable in WebSphere scripting Viewing and manipulating WebSphere configuration and run-time details Making the most of the wsadmin scripting engine and objects–including rarely-used wsadmin parameters that can simplify administration Adjusting wsadmin properties to reflect your needs and environment Using the AdminApp scripting object to list, view, install, uninstall, and modify AppServer applications Using the AdminTask object to manipulate WebSphere Application Server at a high level Configuring the WebSphere Application Server with AdminConfig Manipulating active AppServer objects (MBeans) with AdminControl Controlling security, including aliases, roles, administrative and application security, and multiple security domains

ITF Round Tables Terrorism and International Transport Towards Risk-based Security Policy

ITF Round Tables Terrorism and International Transport Towards Risk-based Security Policy
Author: International Transport Forum
Publisher: OECD Publishing
Total Pages: 152
Release: 2009-04-28
Genre:
ISBN: 9282102327

This Round Table examines the contribution economic analysis can make to improving security in aviation and maritime shipping by quantifying the benefits of security measures and assessing their effectiveness, and examining techniques to allocate resources to target the highest risks.