Journal Of Network security

Journal Of Network security

• Network security architecture and protocols: secure protocol design and analysis, firewall and segmentation strategies, zero trust architecture, virtual private networks and tunnelling, software-defined network security, secure routing, and denial-of-service resilience at network scale.
• Applied cryptography and cryptographic protocols: protocol design, verification, and formal analysis, key exchange and management, public key infrastructure, post-quantum cryptographic schemes, lightweight cryptography for constrained devices, homomorphic and searchable encryption, and implementation security including side-channel resistance.
• Identity, authentication, and access control: authentication protocols and multi-factor schemes, password security and credential management, biometric and continuous authentication, mutual authentication in distributed systems, role-based, attribute-based, and mandatory access control, and federated identity and single sign-on.
• Intrusion detection and prevention: signature-based and anomaly-based detection, network and host intrusion detection architecture, detection in ad hoc and sensor networks, alert correlation and false positive reduction, evasion and adversarial resistance of detectors, and automated response and mitigation.
• Malware and threat analysis: malware classification and family attribution, static and dynamic analysis techniques, botnet detection and takedown, ransomware behaviour and defence, reverse engineering and code forensics, and threat intelligence collection and sharing.
• Attack techniques and countermeasures: denial and distributed denial of service, man-in-the-middle and session hijacking, replay and injection attacks, side-channel and fault attacks, supply chain compromise, and systematic taxonomies of attack and defence.
• Email security and social engineering: spam filtering and classification methods, phishing and spear-phishing detection, email authentication and sender verification, business email compromise, user susceptibility and decision aids, and email forensics and authorship analysis.
• Wireless and mobile security: wireless LAN and cellular security, security in mobile ad hoc and vehicular networks, sensor and body area network protection, mobile application and platform security, and location and proximity privacy.
• Internet of Things and embedded security: device identity and secure provisioning, firmware integrity and secure update, constrained-device authentication, IoT botnet and traffic analysis, gateway and edge security architecture, and evaluation using IoT security datasets.
• Cloud, virtualisation, and container security: multi-tenancy isolation and hypervisor security, container and orchestration platform hardening, cloud access control and configuration risk, secure outsourced storage and computation, and shared responsibility and cloud threat modelling.
• Critical infrastructure and industrial control security: SCADA, distributed control, and process control system protection, smart grid and synchrophasor security, security assessment of power and utility networks, safety–security interaction in industrial systems, and resilience of operational technology networks.
• Privacy-enhancing technologies: anonymity and unlinkability mechanisms, differential privacy in network and system data, privacy-preserving analytics and federated approaches, traffic analysis resistance, and regulatory compliance including data protection obligations.
• Machine learning and security: learning-based detection of intrusions, malware, and anomalies, dataset construction and benchmarking for security ML, adversarial attacks on and robustness of security models, security of machine learning pipelines, and emerging risks from large language model deployment.
• Digital forensics and incident response: network and memory forensics, evidence acquisition and chain of custody, log analysis and timeline reconstruction, incident classification and reporting frameworks, post-incident analysis, and forensic readiness.
• Security management, risk, and human factors: risk assessment and security metrics, security policy design and compliance auditing, vulnerability management and disclosure, security awareness and user behaviour, insider threat, and economics of security investment.