Flow-based detection of DNS tunnels

DNS tunnels allow circumventing access and security policies in firewalled networks. Such a security breach can be misused for activities like free web browsing, but also for command & control traffic or cyber espionage, thus motivating the search for effective automated DNS tunnel detection techniques. In this paper we develop such a technique,...

Multi-Level Security Cannot Realise NEC Objectives

Multi-Level Security (MLS) is often viewed as the holy grail of information security, especially in those environments where information of different classifications is being processed. In this paper we argue that MLS cannot facilitate the right balance between need-to-protect and duty-to-share as required for a Network Enabled Capability (NEC)...

Labelling: Security in Information Management and Sharing

Military communication infrastructures are often deployed as stand-alone information systems operating at the System High mode. Network-Enabled Capabilities (NEC) and combined military operations lead to new requirements for information management and sharing which current communication architectures cannot deliver. This paper informs...

A methodology for the structured security analysis of interconnections

Effective and efficient cooperation within future military operations increasingly requires the sharing of information among coalition partners and other organisations, as envisioned by the NATO Network-Enabled Capabilities (NNEC) study. It is therefore necessary that military communication infrastructures can be interconnected to facilitate the...

Decomposition of the Security Requirements for Connected Information Domains

The introduction of network enabled capabilities (NEC) changed the way defence organisations look at their IT infrastructure. Finding the right balance between security and duty-to-share has proven to be a difficult challenge. The situations are complex and may lead to high security requirements that eventually result in unmanageable...

A Secure NEC-enabling Architecture: Disentangling Infrastructure, Information and Security

The NATO Network-Enabled Capability (NNEC) study envisions effective and efficient cooperation among the coalition partners in missions. This requires information sharing and efficient deployment of IT assets. Current military communication infrastructures are mostly deployed as stand-alone networked information systems operating at the System...

IPv6 Monitoring in Nederland: De derde meting : TNO-White paper

Dit whitepaper beschrijft de derde meting in het kader van IPv6 monitoring in Nederland. Eerder zijn de Nulmeting2 en Tweede Meting3 gepubliceerd. In de tweede helft van 2011 zal nog een vierde meting gepubliceerd worden. Uit de vorige metingen is gebleken dat IPv6 bewustzijn toeneemt, maar dat het nog op weinig plekken daadwerkelijk is...

IPv6 Monitoring in Nederland: De vierde meting : TNO-White paper

Security Shift in Future Network Architectures

In current practice military communication infrastructures are deployed as stand-alone networked information systems. Network-Enabled Capabilities (NEC) and combined military operations lead to new requirements which current communication architectures cannot deliver. This paper informs IT architects, information architects and security...