Vol. 5 Issue 1

Editorial

Volume 5 starts with a special series on the network security topic of digital security.
There are three special papers on this topic. Valli examines the ability of malicious attackers to control machines remotely, Bhuyan examines how honeypots can be use to identify botnets, whilst Yek examines the use of fingerprinting by honeypots.

The general papers section starts with Dike-Anyiam and Q. Rehmani issues surrounding the adoption of biometric measurement for authentication. Next Pye and Warren look at protecting Australia’s critical infrastructure. Finally, Kuokkanen examines the mathematical basis for anticipatory decision-making in Information Warfare and Security situations.

We hope you enjoy this first issue for 2006. The editor would like to apologize for the delay in this issue. There were a number of factors causing this but we hope you find it all worthwhile. We are trying to ensure that this does not happen with the August issue.

Bill Hutchinson
May, 2006
Email: w.hutchinson@ecu.edu.au

Table of Contents

DIGITAL FORENSICS PAPERS
Paper 1: A Preliminary Investigation into Malware Propagation on Australian ISP Networks using the mwcollect Malware Collector daemon

C. Valli 

Paper 2: Using Honeynets for Discovering and Disrupting IRC-based Botnets

D. Bhuyan 

Paper 3: Investigating the Accuracy of Wired and Wireless TCP/IP Fingerprinting on Honeyd

S. Yek 

GENERAL PAPERS
Paper 4: Biometric vs. Password Authentication: A User’s Perspective

B. Dike-Anyiam, Q. Rehmani 

Paper 5: Security Management: Modelling Critical Infrastructure

G. Pye, M.J. Warren 

Paper 6: Anticipatory Decision-Making Support Using a Bayesian Network

P. Kuokkanen 

 About the Authors

Dr. Berna O. Dike-Anyiam has over 5 years of experience in network administration through her work in the industry and entrepreneurship. She is a co-author of Data security in the electronic economy. Dr. Dike-Anyiam has a Master of Science in Public Administration and Housing from Middlesex University, a Master of Business Administration in Computer Information Systems from De Sales University and a Doctor of Business Administration in Computer Information Systems from Argosy University .  

Dhiraj Bhuyan is a CISSP certified Senior Security Researcher at British Telecommunications, in the United Kingdom . He has worked in many different areas of security including Voice over Internet, secure remote access, Wi-Fi technologies, Smart Cards, 3GPP IMSplatform, Liberty Alliance, Trusted Computing Platform, firewalls, botnets, malware,  computer viruses, honeynets, Distributed Denial of Service attack mitigation and Broadband gateways.  

Pertti Kuokkanen has received his Master of Science degree in Computer Science from the University of Helsinki, Finland, in 1999. He is a Doctoral student, and conducts his post-graduate research in computer science with primary interests in modelling of decision support applications. He is currently the Chief of the Kuopio Ordnance Depot at the Defence Forces Materiel Command.   

Graeme Pye is an Associate Lecturer and doctoral candidate with the School of Information Systems, Deakin University, Australia . His research is focused on developing a practical model of Australian critical infrastructure and investigating the influence of relationships between associated infrastructures.  

Professor Qamar Rehmani teaches in the Information Systems concentration at Argosy University .  Dr. Rehmani has over 20 years of experience in information systems through his work in academia, industry, and entrepreneurship. He has worked on research projects on NASA’s Space Shuttle.  Dr. Rehmani has a B.S.E.E. from the Indian Institute of Technology, Kanpur, and earned his MBA and PhD from the University of Houston .  

Dr. Craig Valli lectures as a Senior Lecturer in Computer and Network Security at Edith Cowan University . His active research profile includes honeypots, digital forensics and network security. He is completing a second doctoral study on applying honeypots as a countermeasure to insider malfeasance. Craig regularly consults to government and private industry on network security and forensics. He is founding Chair of the Australian Digital Forensics Conference and also founding Co-Chair of the Australian Information Security Management Conference. Craig is also active on various conference and journal committees.  

Professor Matthew J. Warren is the Head of School and a Professor in the School of Information Systems, Deakin University, Australia . He has gained international recognition for his scholarly work in the areas of Information Security, Risk Analysis, Electronic Commerce and Information Warfare.  

Suen Yek is a doctoral candidate within the School of Computer and Information Science at Edith Cowan University in Perth, Western Australia . Her research is on wireless honeynets and the application of deceptive mechanisms for countermeasures against network attacks. Suen holds a Bachelor of Science (Software Engineering) with Honours and a Bachelor of Business (Marketing).