Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTIONS FOR OPERATION DEVICE ATTACKS <s> IEEE Std 802.11i [1] has specified the security functionality of wireless local area networks (WLANs). However, two types of DoS attacks have been disclosed which could block the 4-way handshake procedure [2]. Some improvements over them have been investigated. But all of them have obvious drawbacks. In this paper, we address the security issue in WLANs and analyze the operations of the 4-way handshake protocol. Based on the insight of the protocol and the existing potential vulnerabilities under the DoS attacks, we propose an enhancement solution to protect the protocol from DoS attacks. Compared with other existing works, our solution is more effective and efficient. Colored Petri Nets (CPN) has been employed to formally verify our solution. <s> BIB001 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTIONS FOR OPERATION DEVICE ATTACKS <s> In Mobile IPv6(MIPv6), a Mobile Node(MN) communicating with the Correspondent Node(CN) cannot prove the ownership of the claimed IP address. If a malicious node impersonates victim's IP address, it could hijack the session or forward packets to non-existing destination or other nodes. Currently, in order for a MN to prove the ownership of its own IP address, it is considered to use Feige-Fiat-Shamir (FFS) identification scheme [1]. However, there is one serious problem. In this scheme, a CN has to verify all of the Binding Update requests, and this leads to DoS(Denial of Service) attack. This paper shows a method which mitigates the effect of the DoS attack by making the challenge twice in a transaction. We make the first challenge easily verified to exclude the malicious nodes and the second one much more difficult than the first one to avoid impersonation. This method can efficiently exclude the malicious nodes which do not have proper IP addresses by verifying the first challenge. Furthermore, by making the challenge twice, our scheme can decrease the probability of impersonation over the previous scheme for equivalent calculation amount. By the computer simulation, we show that the proposed scheme is efficient to decrease the effect of the DoS attack and the probability of impersonation compared to the previous scheme. <s> BIB002 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTIONS FOR OPERATION DEVICE ATTACKS <s> The ability to identify anomalous traffic patterns is a central issue for network managers: primarily lots of problems could arise from network attacks, such as viruses and tunneling tools. In this paper we present a detection algorithm able to extract information analyzing features of the network traffic containing attacks. The algorithm exploits statistical methodologies for traffic categorization. To assess the practical usability of the proposed algorithms we have tested its application in a case of abuse of resources through an application DoS attack known as slowloris. We have obtained an excellent reliability both analyzing single samples of traffic (100% of anomalies detection, with 1% probability of false positives) and processing multiple samples, through an average measurement (100% of anomalies detection, with a distance between traffics of 5.29 σ, providing an extremely low false positive error rate). <s> BIB003 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTIONS FOR OPERATION DEVICE ATTACKS <s> Media Access Layer (MAC) vulnerabilities are the primary reason for the existence of the significant number of Denial of Service (DoS) attacks in 802.11 Wi-Fi networks. In this paper we focus on the de-authentication DoS (Deauth-DoS) attack in Wi-Fi networks. In Deauth-DoS attack an attacker sends a large number of spoofed de-authentication frames to the client (s) resulting in their disconnection. Existing solutions to mitigate Deauth-DoS attack rely on encryption, protocol modifications, 802.11 standard up gradation, software and hardware upgrades which are costly. In this paper we propose a Machine Learning (ML) based Intrusion Detection System (IDS) to detect the Deauth-DoS attack in Wi-Fi network which does not suffer from these drawbacks. To the best of our knowledge ML based techniques have never been used for detection of Deauth-DoS attack. We have used a variety of ML based classifiers for detection of Deauth-DoS attack enabling an administrator to choose among a host of classification algorithms. Experiments performed on in-house test bed shows that the proposed ML based IDS detects Deauth-DoS attack with precision (accuracy) and recall (detection rate) exceeding 96% mark. <s> BIB004 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTIONS FOR OPERATION DEVICE ATTACKS <s> The pervasive presence of interconnected objects enables new communication paradigms where devices can easily reach each other while interacting within their environment. The so-called Internet of Things (IoT) represents the integration of several computing and communications systems aiming at facilitating the interaction between these devices. Arduino is one of the most popular platforms used to prototype new IoT devices due to its open, flexible and easy-to-use architecture. Ardunio Yun is a dual board microcontroller that supports a Linux distribution and it is currently one of the most versatile and powerful Arduino systems. This feature positions Arduino Yun as a popular platform for developers, but it also introduces unique infection vectors from the security viewpoint. In this work, we present a security analysis of Arduino Yun. We show that Arduino Yun is vulnerable to a number of attacks and we implement a proof of concept capable of exploiting some of them. <s> BIB005 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTIONS FOR OPERATION DEVICE ATTACKS <s> The recent emerge of Software Defined Networking (SDN) promotes both supporters and opponents to further explore this network architecture. One of the main attributes that characterize SDN is the significant role of software to manage and control the architecture. There are four major concerns for such software dominant role, security, performance, reliability, and fault tolerance. Among them security is considered a major concern. SDNs security concerns include attacks on the control plane layer such as DoS attacks. This paper presents an inference-relation context based technique for the detection of DoS attacks on SDNs. The proposed technique utilizes contextual similarity with existing attack patterns to identify DoS in an OpenFlow infrastructure. A validation of the proposed technique has been performed using a several benchmark datasets yielding promising results. <s> BIB006 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTIONS FOR OPERATION DEVICE ATTACKS <s> Vehicular Ad-hoc Network (VANET), an unplanned network formed by vehicles on the road to improve road safety and driving conditions. Today, the vehicle count increases and the roads are becoming more hazardous by the effect of congestion and increased the likelihood of collision. Safety messages are to be routed to the vehicles in timely and correct manner. Because of the wireless medium, VANET messages are vulnerable to many attacks. To be secure, network availability must be obtained at all times since availability of the network is severely needed when a node sends any life critical information to other nodes. In this respect, the network availability is exposed to many types of attacks. In this paper, Denial of Service (DoS) attack on network availability is presented and its extremity level in VANET environment is elaborated. This paper also classifies and summarizes the techniques to prevent DoS attack with its pros and cons. From the survey, PBA technique is found to be good on authenticating vehicles with minimum delay and packet loss. Finally, we explore the significance of cellular automata in authenticating vehicles with lightweight operation that further reduces the delay with strong security. <s> BIB007 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTIONS FOR OPERATION DEVICE ATTACKS <s> The majority of computer systems use security software/hardware to protect against cyber attacks. A firewall is one the most popular security systems to protect against unauthorized access to or from its hosted network/system. The Microsoft Windows Operating System (OS) is equipped with an intrinsic firewall utility, which has been enhanced over the years to offer advanced security features including IPSec-based virtual private network functionality. This intrinsic Windows Firewall is still not capable of detecting and preventing Denial of Service (DoS) attacks. Nevertheless as an established end user security tool which is supplied with Windows OS, Windows Firewall with some additional intelligence may be an extremely valuable security utility for millions of Windows users. An intelligent Windows fuzzy firewall named FR-WinFirewall has been developed to improve its functionalities and aid prevention of DoS attacks. This paper presents the further extended and generalised version of the FR-WinFirewall to cover IPv6 traffic and for the inclusion of some extra DoS attack types related to ICMPv4, ICMPv6 and TCP. This augmented FR-WinFirewall can monitor, alert and prevent the three types of DoS attacks, ICMP (ICMPv4 and ICMPv6) DoS, UDP DoS and TCP DoS, as these protocols cover the majority of the TCP/IP traffic within any network. In this firewall, three separate fuzzy reasoning components related to three DoS attack types are designed, implemented and tested successfully. The addition of fuzzy intelligence to an intrinsic Windows Firewall makes it comparatively better than many well known firewalls, which are not yet capable of controlling DoS attacks. <s> BIB008 </s> Survey: Cybersecurity Vulnerabilities, Attacks and Solutions in the Medical Domain <s> 2) SOLUTIONS FOR OPERATION DEVICE ATTACKS <s> We consider remote state estimation of cyberphysical systems under signal-to-interference-plus-noise ratio-based denial-of-service attacks. A sensor sends its local estimate to a remote estimator through a wireless network that may suffer interference from an attacker. Both the sensor and the attacker have energy constraints. We first study an associated two-player game when multiple power levels are available. Then, we build a Markov game framework to model the interactive decision-making process based on the current state and information collected from previous time steps. To solve the associated optimality (Bellman) equations, a modified Nash Q-learning algorithm is applied to obtain the optimal solutions. Numerical examples and simulations are provided to demonstrate our results. <s> BIB009
Operation devices are greatly affected due to DoS attacks and Dropbear SSH server vulnerabilities shown in Table 8 . Schuster and Holz  defined backdoors in software systems. To reduce this kind of security problem, approaches are proposed to eliminate backdoors. Among them, Dropbear SSH is analyzed. Through the experiment, it is determined that deciders and handlers in the SSH server can be identified. Alberca BIB005 analyzed software that can be seen as an external attacker; Dropbear SSH is one such software. The attacks are divided into three types. The first one denies the server by running a DoS, the second one causes a timing error that prevents user commands from running, and the third, when run on concurrency channels, can be used to execute remote code that contributes to the attack. Li and Ma BIB001 suggested that DoS attacks can damage the 4-way handshake method and proposed a solution that can defend against DoS attacks. An encryption algorithm is used to change the 4-way handshake method and minimize the standard requirements. The proposed improvements are much better than the existing solutions in terms of compatibility and efficiency. Toyoda et al. BIB002 found that a DoS attack occurs if the correspondent node must verify all binding update requests. A solution is proposed that results in two challenges in a transaction to reduce the effect. The two challenges eliminate the malicious node; however, the second challenge is harder than the first challenge. Through these challenges, the impersonation probability is decreased. Moreover, excluding the malicious nodes efficiently decreases the risk of DoS attack. Aiello et al. BIB003 proposed an algorithm that can categorize traffic to detect DoS attacks. It should find the equation that describes the parameters of network traffic, and then it can solve the problem of detecting malicious attacks. Agarwal et al. BIB004 introduced an intrusion detection system based on machine learning (ML) to detect a DoS attack using a Wi-Fi network. This paper proposed many ML algorithms for detection. Additionally, machine learning based on IDS does not need protocol modifications and has high precision and recall. To improve the firewall, which is included in the Windows OS to avoid DoS attacks, Naik et al. BIB008 proposed an intelligent Windows fuzzy firewall called FR-Win Firewall. The design, implementation and testing are successful because of fuzzy reasoning components that are related to DoS attacks. The firewall with fuzzy intelligence is a good choice for avoiding the control of DoS attacks. Li et al. BIB009 addressed a DoS attack based on SINR by designing a Markov game framework to solve the Bellman equations. A modified Nash Q-learning (MNQ) algorithm is used to obtain the solutions. However, while this method can solve the problem, there is still a long way to go to ensure the security of wireless networks. Aleroud and Alsmadi BIB006 proposed a technology that can control a DoS attack by using software-defined networking (SDN). SDN takes advantage of the similarities in the context of prevailing attack patterns to detect DoS attacks in OpenFlow infrastructures. The paper's solution can avoid attacks on SDN; however, it may introduce new attacks such as DOS attacks. Thilak and Amuthan BIB007 introduced a solution that can prevent a DoS attack under the VANET environment. Additionally, it summarizes the advantages and disadvantages of methods for preventing DoS attacks. Among these methods, although it can ensure the safety of delivering messages, the processor in OBU is over headed. The complete detail of vulnerabilities and their effects that lead to different types of attacks and possible solutions are shown in Table 16 . The possible solutions also are evaluated based on several features such as attack reduction, high ransomware detection, low test error, reasonable expense and stability improvement. Furthermore, the limitation of those solutions for each attack are shown in Table 17 .