Jarno Salonen

Evaluating the security and privacy of near field communication --- case: public transportation

Public transportation has been the killer application of Radio Frequency Identification (RFID) technology in recent years. However, RFID-based Near Field Communication (NFC) is gaining the advantage by challenging RFID technology in its own environment. NFC enables the enhanced use of value-adding features, such as obtaining a ticket over-the-air, by using the already existing Internet channel of the mobile device. Smart posters on the other hand provide an improved service initialization method for the mobile device that enhances the functionalities of the existing user interface. This article describes security and privacy challenges related to NFC. We describe the use of NFC in smart posters within services related to public transportation and discuss about further NFC research activities. By providing information to consumers about the security and privacy issues related to NFC, it is possible to increase their awareness and perhaps prevent some potential current or future threats facing the technology.

Towards security metrics-supported IP traceback

The threat of DDOS and other cyberattacks has increased during the last decade. In addition to the radical increase in the number of attacks, they are also becoming more sophisticated with the targets ranging from ordinary users to service providers and even critical infrastructure. According to some resources, the sophistication of attacks is increasing faster than the mitigating actions against them. For example determining the location of the attack origin is becoming impossible as cyber attackers employ specific means to evade detection of the attack origin by default, such as using proxy services and source address spoofing. The purpose of this paper is to initiate discussion about effective Internet Protocol traceback mechanisms that are needed to overcome this problem. We propose an approach for traceback that is based on extensive use of security metrics before (proactive) and during (reactive) the attacks.

Network Security Monitoring in a Small-Scale Smart-Grid Laboratory

Smart grids are the next generation of electrical grids, enabling the better management and leveling of power consumption by suppliers. Via the use of automatic meter reading, smart grid also provides better information to the end-users, making it possible to enhance their energy consumption and adapt it according to the current energy price, availability and other factors. As the grid becomes more and more reliant to ICT and communication networks, risks related to cybersecurity and privacy have to be taken into account. The link between automatic meters and the distribution operator has to be protected from security breaches that may lead to false billing and the transferred data has to be protected as it contains sensitive information about household and business behavior. In this article we present a limited state-of-the-art review as well as a network security monitoring setup for small-scale laboratory that is in essence a small scale smart grid environment. We discuss about the challenges and threats that are possible in the smart grid environment and the feasibility of using network security monitoring techniques that represent our work-in-progress research in this context.

eInsurance Project: How to Develop Novel Electronic Services with Co-operation between Academics and Practitioners

This case study covers two R&D projects called eInsurance 1 and eInsurance 2, which are concerned with electronic insurance. This case emphasizes project organization, its activities and roles, together with the results of the projects. In addition, the structure and innovation level of the projects are analyzed and the challenges involved in launching the concepts into insurance markets are presented. The most important outcomes of the projects are novel service concepts, and valuable information of consumer expectations that corporate partners utilized in their R&D activities. For research partners, the projects brought ideas, how to organize future projects in new ways, and how to combine academic and business expertise successfully.