Securing an Application Layer Gateway: An Industrial Case Study

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Cesarano, Carmine, Natella, Roberto
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866912355447734272
author Cesarano, Carmine
Natella, Roberto
author_facet Cesarano, Carmine
Natella, Roberto
contents Application Layer Gateways (ALGs) play a crucial role in securing critical systems, including railways, industrial automation, and defense applications, by segmenting networks at different levels of criticality. However, they require rigorous security testing to prevent software vulnerabilities, not only at the network level but also at the application layer (e.g., deep traffic inspection components). This paper presents a vulnerability-driven methodology for the comprehensive security testing of ALGs. We present the methodology in the context of an industrial case study in the railways domain, and a simulation-based testing environment to support the methodology.
format Preprint
id arxiv_https___arxiv_org_abs_2401_05961
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Securing an Application Layer Gateway: An Industrial Case Study
Cesarano, Carmine
Natella, Roberto
Cryptography and Security
Application Layer Gateways (ALGs) play a crucial role in securing critical systems, including railways, industrial automation, and defense applications, by segmenting networks at different levels of criticality. However, they require rigorous security testing to prevent software vulnerabilities, not only at the network level but also at the application layer (e.g., deep traffic inspection components). This paper presents a vulnerability-driven methodology for the comprehensive security testing of ALGs. We present the methodology in the context of an industrial case study in the railways domain, and a simulation-based testing environment to support the methodology.
title Securing an Application Layer Gateway: An Industrial Case Study
topic Cryptography and Security
url https://arxiv.org/abs/2401.05961