Cyber Security in India (eBook)

Series Editor’s Preface 6
Contents 7
Editors and Contributors 8
1 Building India's First Cyber-Security Test-Bed for CI 10
1.1 Introduction 10
1.1.1 Contribution of This Article 11
1.2 C3i Center, IIT Kanpur 11
1.2.1 Objective 13
1.3 Existing Setup: Experimental Setup 14
1.3.1 Level-0: Field Devices 14
1.3.2 Level-1: Protection and Control System 14
1.3.3 Level-1.5: Industrial Communication 15
1.3.4 Level-2: Visualization and Control 15
1.3.5 Level-3: Management 18
1.4 Future Planning of Smart Infrastructure 19
1.4.1 Smart Power Grid 19
References 24
2 The State of Android Security 25
2.1 Introduction 25
2.2 The Security Architecture of Android 26
2.2.1 Application Sandbox 26
2.2.2 Permissions 26
2.3 Android Vulnerability and Advanced Threats 26
2.3.1 Architectural Vulnerability 26
2.3.2 Software Vulnerability 27
2.3.3 Hardware Vulnerability 27
2.3.4 Advanced Threats 27
2.4 Malware Analysis: Techniques and Its Limitation 27
2.4.1 Static Analysis 28
2.4.2 Dynamic Analysis 28
2.4.3 Hybrid Analysis 29
2.5 Conclusion 29
References 29
3 Blockchain and Its Application in Cybersecurity 31
3.1 Introduction 31
3.2 Evolution of Blockchain 32
3.2.1 Blockchain 1.0 32
3.2.2 Blockchain 2.0 33
3.2.3 Blockchain 3.0 33
3.3 Security of Blockchains 33
3.3.1 Confidentiality: Who Can See the Data 33
3.3.2 Integrity: The Accuracy and Consistency of Data over Its Entire Life Cycle 33
3.3.3 Availability: Liveness Guarantee 34
3.4 Applications 34
3.4.1 Secure Decentralized Currency 34
3.4.2 Smart Contracts 34
3.4.3 Document Verification in KSI 34
3.4.4 Insider Threats 35
3.4.5 Supply Chain Management 36
3.4.6 Patch Management, Backing Up, and Restoration: Enforcing Policy 36
3.4.7 Blockchain-Based Authentication 37
3.5 Blockchain in IoT 37
3.5.1 Use of Blockchain in the IoT Space 37
3.5.2 The Important Aspects of Blockchain-Based IoT Applications 37
3.6 Attacks on Blockchain-Based Systems 38
3.6.1 51% Attack 38
3.6.2 Mining Pool Attack 38
3.6.3 Eclipse Attack 39
3.6.4 Practical Attacks ch355 39
3.7 Conclusion 39
References 39
4 Malware Analysis Using Image Classification Techniques 41
4.1 Windows Malware Classification Using Image Representation 41
4.1.1 Data Collection and Labeling 42
4.1.2 Data Generation 42
4.1.3 Classification 42
4.1.4 Packed and Unknown Malware Classification 43
4.1.5 Results 43
4.2 Linux Malware Classification Using Image Representation 43
4.2.1 Data Collection and Labeling 43
4.2.2 Data Generation 44
4.2.3 Classification 44
4.2.4 Packed Malware Classification 44
4.2.5 Results 44
4.3 Conclusion and Future Work 45
References 46
5 A Review: Malware Analysis Work at IIT Kanpur 47
5.1 PeerClear: Peer-to-Peer BotNet Detection 47
5.1.1 P2P Host Detection 48
5.1.2 P2P BotNet Detection 49
5.1.3 Experimental Results 49
5.2 Malware Classification Using Early-Stage Behavioral Analysis 49
5.2.1 Dataset 49
5.2.2 Feature Extraction, Features Selection, and Classification 49
5.2.3 Experimental Results 50
5.3 Automated Malware Detection Using Memory Forensics 53
5.3.1 Memory Dump Generation and Selection 53
5.3.2 Feature Extraction, Selection, and Classification 53
5.3.3 Experimental Results 53
5.4 Conclusion 55
References 55
6 Honeypot Deployment Experience at IIT Kanpur 57
6.1 Introduction 57
6.2 Classification of Honeypots 58
6.2.1 Low/High-Interaction Honeypot 58
6.2.2 Server/Client Honeypot 59
6.2.3 Production/Research Honeypot 59
6.3 Deployed Honeypots 59
6.3.1 OpenCanary 59
6.3.2 Cowrie 60
6.3.3 Clientpot 61
6.3.4 HoneyFARM 64
6.3.5 HoneyWEB 66
6.3.6 HoneyFTP 66
6.3.7 Cloud-Based IoT Honeypot 67
6.4 Analysis of Attacks on Our Honeypots 68
6.4.1 Analysis of HoneySSH 68
6.4.2 Analysis of HoneySMB 69
6.4.3 Analysis of HoneyWEB 69
6.4.4 Analysis of HoneyFTP 69
6.4.5 IoT Honeypot Analysis 69
6.5 Conclusion 70
References 71
7 Cache Based Side-Channel Attacks 72
7.1 Introduction to Memory Systems and Side-Channel Attacks 72
7.2 Side-Channel Attacks and Information Leakage 73
7.2.1 Attacks of Interest 73
7.2.2 Side-Channel Attacks on Real-World Applications 73
7.2.3 What Is Needed for a Successful Attack? 74
7.2.4 A Case of Spectre and Meltdown Attacks 75
7.3 Countermeasures 75
7.4 Conclusion 75
References 76
8 Hardware Security in India: The Journey so Far 77
8.1 Introduction 77
8.2 Fault Analysis of Cryptosystems 79
8.2.1 Attacks and Countermeasures 79
8.2.2 Automated Detection of Fault Attacks 80
8.3 Hardware Design of Public-Key Cryptosystems 82
8.3.1 Fast and Efficient Implementation of GF(2n) ECC Scalar Multiplication on FPGA 83
8.3.2 Efficient Resource Utilization for ECC Scalar Multiplication in GF(p) 84
8.3.3 Lightweight Architecture for ECC Scalar Multiplication in GF(p) 85
8.4 PUFs: Design and Usage in IoT Security 85
8.4.1 Design of PUF-Based Protocols 88
8.5 Micro-architectural Attacks and Countermeasures 89
8.5.1 Cache Timing Attack on Clefia 89
8.5.2 Branch Misprediction Attack 92
8.5.3 Software-Driven Fault Attack Using Row-Hammer 93
8.5.4 Detection of These Attacks 94
8.6 Hardware Security to Accelerate Cloud Cryptosystems 95
8.7 Conclusions 101
References 101
9 The World of Bug Bounties—the Indian Scenario 103
9.1 Introduction 103
9.2 What Is a Bug Bounty Program? 103
9.2.1 Foreign Companies and Bug Bounties 104
9.2.2 Indian Private Sector and Bug Bounties 105
9.3 Foreign Government 105
9.4 Indian Government 106
9.4.1 Case Study 1 106
9.4.2 Case Study 2 107
9.5 Conclusion 107
References 108
10 Post-quantum Cryptography: An Introduction 109
10.1 Introduction 109
10.2 Directions for Post-quantum Cryptography 110
10.3 Lattice-Based Cryptography 111
10.3.1 Classic Computational Lattice Problems 111
10.3.2 Modern Computational Lattice Problems 111
10.4 Cryptographic Constructions 113
10.4.1 Public-Key Encryption 113
10.5 Conclusions 113
References 114