This book introduces the basic ideas involved in cybersecurity, whose principal aim is protection of IT systems against unwanted behaviour.

This chapter provides an introduction to important basic concepts of cybersecurity and its relationship to information security in general. It explains how the historical development of the Internet has led to the situation today, where worldwide communication has become almost universally available. This development offers new opportunities, but also new threats to security which users of computer systems need to protect themselves against. The concept of a computer system is explained. Some examples of recent large scale failures of cybersecurity and their costs to society are presented. The concepts of security targets and security policies are introduced. The chapter concludes with a reader’s guide, which gives an overview of the diverse disciplines which you need to have a grasp of in order to deal successfully with the challenges of cybersecurity.

This chapter presents a number of common ways of protecting systems against various forms of attack via the network. These include: The chapter concludes with a review of areas in which there are still significant challenges., such as protection against distributed DOS attacks or attacks on large-scale infrastructure.

This chapter illustrates how cryptography can be used to achieve aims other than confidentiality of data. In particular, it can be used to ensure:

This chapter explains how modern communication networks such as the Internet work, and considers the security risks due to its way of working. Basic concepts such as layered architectures, services and protocols, and the functions of the five layers of the Internet architecture are defined. It is characteristic of the Internet that each layer has its own addressing schemes for identifying the senders and receivers of messages sent within that layer The Internet then relies heavily on having a trustworthy service DNS which maintains information about the relationships between the names of systems and the placement of these systems within the Internet. The functioning of the two central Internet protocols TCP and IP and their interaction with the DNS is illustrated with examples.

This chapter 1 focuses on how to react if, despite all precautions, an attack or other incident leads to a security breach. This is largely a question of planning. Firstly, to ensure that all security breaches, large or small, are registered so suitable action can be taken. Secondly, by planning how to discover what has actually happened, if a breach is detected. And thirdly, planning how to restore the IT systems to a normal state so that daily operations can continue. It looks at forensic techniques used to investigate incidents which involve ordinary computers and the more specialised smartphones, and at how to deal with encrypted units. It introduces the discplines of Business Continuity Planning (BCP) and Disaster Recovery Planning (DRP), and the NIST Cybersecurity Framework-Finally it reviews some methods for improving security awareness, so that all members of an organisation know what to do if an incident is detected.

Modelling and subsequently optimising workflow processes has been a key part of efforts to improve efficiency in production and engineering firms since the beginning of the 20th century (Gilbreth & Gilbreth, 1921).

We present a framework for the automated generation of fault trees from models of real-world process workflows, expressed in a formalised subset of the popular Business Process Modelling and Notation (BPMN) language. To capture uncertainty and unreliability in workflows, we extend this formalism with probabilistic non-deterministic branching. We present an algorithm that allows for exhaustive generation of possible error states that could arise in execution of the model, where the generated error states allow for both fail-stop behaviour and continued system execution. We employ stochastic model checking to calculate the probabilities of reaching each non-error system state. Each generated error state is assigned a variable indicating its individual probability of occurrence. Our method can determine the probability of combined faults occurring, while accounting for the basic probabilistic structure of the system being modelled. From these calculations, a comprehensive fault tree is generated. Further, we show that annotating the model with rewards (data) allows the expected mean values of reward structures to be calculated at points of failure.

We present a framework for modeling and analysis of real-world business workflows. We present a formalized core subset of the business process modeling and notation (BPMN) and then proceed to extend this language with probabilistic nondeterministic branching and general-purpose reward annotations. We present an algorithm for the translation of such models into Markov decision processes (MDP) expressed in the syntax of the PRISM model checker. This enables precise quantitative analysis of business processes for the following properties: transient and steady-state probabilities, the timing, occurrence and ordering of events, reward-based properties, and best- and worst- case scenarios. We develop a simple example of medical workflow and demonstrate the utility of this analysis in accurate provisioning of drug stocks. Finally, we suggest a path to building upon these techniques to cover the entire BPMN language, allow for more complex annotations and ultimately to automatically synthesize workflows by composing predefined subprocesses, in order to achieve a configuration that is optimal for parameters of interest.

We present a framework for the optimisation of business processes modelled in the business process modelling language BPMN, which builds upon earlier work, where we developed a model checking based method for the analysis of BPMN models. We define a structure for expressing optimisation goals for synthesized BPMN components, based on probabilistic computation tree logic and real-valued reward structures of the BPMN model, allowing for the specification of complex quantitative goals. We here present a simple algorithm, inspired by concepts from evolutionary algorithms, which iteratively generates candidate improved processes based on the fittest of the previous generation. The evaluation of the fitness of each candidate in a generation is performed via model checking, detailed in previous work. At each iteration, this allows the determination of the precise numerical evaluation of the performance of a candidate in terms of the specified goals. A discussion of this method's application, and the degree of optimization which is possible, is illustrated using an example drawn from the healthcare industry.

Botnets are collections of compromised computers which have come under the control of a malicious person or organisation via malicious software stored on the computers, and which can then be used to interfere with, misuse, or deny access to a wide range of Internet-based services. With the current trend towards increasing use of the Internet to support activities related to banking, commerce, healthcare and public administration, it is vital to be able to detect and neutralise botnets, so that these activities can continue unhindered. In this paper we present an overview of existing botnet detection techniques and argue why a new, composite detection approach is needed to provide efficient and effective neutralisation of botnets. This approach should combine existing detection efforts into a collaborative botnet protection framework that receives input from a range of different sources, such as packet sniffers, on-access anti-virus software and behavioural analysis of network traffic, computer sub-systems and application programs. Finally, we introduce ContraBot, a collaborative botnet detection framework which combines approaches that analyse network traffic to identify patterns of botnet activity with approaches that analyse software to detect items which are capable of behaving maliciously.

We present a framework for modelling and analysis of real-world business workflows. Business processes regularly form the basis for the design of software services, and frequently display complex stochastic behaviour. The accurate evaluation of their qualitative aspects can allow for determining bounds on resources consumed during execution of business processes. Accurate resource provisioning is often central to ensuring the safe execution of a process. We first introduce a formalised core subset of the Business Process Modelling and Notation (BPMN), which we extend with probabilistic and non-deterministic branching and reward annotations. We then develop an algorithm for the efficient translation of these models into the guarded command language used by the model checker PRISM, in turn enabling model checking of BPMN processes and allowing for the calculation of a wide range of quantitative properties of business processes including transient probabilities, timing, occurrence and ordering of events, and best- and worst-case scenarios. The developments presented are illustrated using an example from the health-care industry.

European hospitals are being placed under growing pressure to deliver efficiency gains due to an increasing elderly population and ever tighter financial constraints. A significant proportion of the treatment performed relies on the adaptive application of various intravenous medicine which is mostly in liquid form and which is prepared in central pharmacies serving a number of departments. Due to strict safety requirements within pharmacies, the process of preparation of fluid medicine for intravenous use is; labour intensive, inefficient[3], error-prone[1, 6] and poses health risks to medical staff. Current product preparation workflows rely on production techniques largely abandoned by other industries; including duplicating inventory, inflexible batch processing, and over production where doses are often prepared in anticipation of a need or demand that may end up not being realised which contributes to waste[7]. A solution to these issues has been sought in the automation of the medication management and dispensing processes. Deployment of systems for this purpose has delivered significant improvements in safety for both staff and patients[2, 10], and new pharmacy capabilities such as customised medicine have become feasible[2]. However, the technology has proven disruptive to traditional pharmacy processes and many potential efficiency gains have yet to be realised.

This paper describes some experiences with using the Common Criteria for Information Security Evaluation as the basis for a design methodology for secure application systems. The examples considered include a Point-of-Sale (POS) system, a wind turbine park monitoring and control system and a secure workflow system, all of them specified to achieve CC assurance level EAL3. The methodology is described and strengths and weaknesses of using the Common Criteria in this way are discussed. In general, the systematic methodology was found to be a good support for the designers, enabling them to produce an effective and secure design, starting with the formulation of a Protection Profile and ending with a concrete design, within the project timeframe.