Computer >> Hướng Dẫn Máy Tính >  >> Kết Nối Mạng >> An Ninh Mạng

Chủ đề nghiên cứu hot trong An ninh mạng & An ninh máy tính (2024-2025)

Top Trending Research Topics in Network/Computer Security (2024-2025)

1. AI/ML trong An ninh mạng (AI for Security & Security for AI)

  • LLM Security: Prompt injection, jailbreak, data extraction, model stealing, membership inference, watermarking
  • AI-powered Threat Detection: Graph Neural Network cho NDR, LLM cho log analysis/threat hunting, Few-shot learning cho zero-day detection
  • Adversarial ML: Evasion/poisoning attacks trên ML-based detectors, robust ML models
  • Generative AI for Defense: Tự động sinh detection rule (Sigma/YARA), playbook, threat report, secure code
  • AI Red Teaming: Tự động hóa tấn công, fuzzing, exploit generation

2. Zero Trust Architecture (ZTA) & Implementation

  • Zero Trust Network Access (ZTNA) deployment tại scale, migration từ VPN
  • Continuous Authentication & Authorization (CARTA), Risk-based Adaptive Access
  • Micro-segmentation trong Hybrid Cloud/K8s (Cilium, Calico, Istio Ambient, eBPF)
  • Device Trust / Identity (TPM, TEE, Hardware Root of Trust, Device Attestation)
  • Policy Decision Point (PDP) / Policy Enforcement Point (PEP) architecture patterns

3. Cloud-Native Security (Cloud Security)

  • CNAPP (Cloud-Native Application Protection Platform): CSPM + CWPP + CIEM + DSPM + IaC Scanning + API Security + Container Security + Serverless Security
  • Kubernetes Security: Admission Control (Kyverno, OPA Gatekeeper), Runtime Security (Falco, Tetragon, Tracee), Network Policy, Service Mesh (Istio, Cilium, Linkerd) mTLS
  • Cloud Supply Chain Security: SBOM (Software Bill of Materials), SLSA, Sigstore, Cosign, in-toto
  • Serverless/Function Security: Cold start attack, event injection, privilege escalation
  • Multi-cloud Security Posture Management & Data Security Posture Management (DSPM)

4. Ransomware & Extortion Evolution

  • Ransomware-as-a-Service (RaaS) ecosystem analysis: Affiliate model, leak site, negotiation
  • Double/Triple/Quadruple Extortion: Encrypt + Exfil + DDoS + Harassment (customer/partner/regulator)
  • Living-off-the-Land (LotL) / Fileless: LOLBAS, WMI, PowerShell, Certutil, MSBuild, Signed binaries
  • Active Directory / Entra ID (Azure AD) Attack & Defense: Kerberos delegation, GPO abuse, Certificate abuse (AD CS), Token theft, PRT
  • Backup/Recovery Targeting: Veeam, Rubrik, Commvault exploitation, immutable backup bypass

5. Supply Chain & Software Supply Chain Security

  • SBOM (SPDX, CycloneDX) generation, validation, vulnerability correlation (VEX)
  • SLSA (Supply Chain Levels for Software Artifacts) adoption, build provenance (Sigstore, Cosign, Rekor, Fulcio)
  • Malicious Package Detection (typosquatting, dependency confusion, protestware) - npm, PyPI, Maven, Go, Cargo, NuGet
  • CI/CD Pipeline Security: GitHub Actions/GitLab CI/Jenkins/ArgoCD hardening, OIDC, least privilege runner, secret scanning
  • Open Source Security: OpenSSF Scorecard, OSV, deps.dev, GUAC

6. IoT / OT / ICS / CPS Security

  • IEC 62443 implementation, Purdue Model modernization, IT/OT Convergence security
  • Firmware Analysis & Binary Analysis (EMBA, FirmAE, Ghidra, IDA Pro) - Vuln finding trong embedded
  • Protocol Security: Modbus, DNP3, OPC UA, MQTT, CoAP, PROFINET, EtherNet/IP - Fuzzing, Anomaly Detection
  • Medical Device Security (FDA guidance), Automotive (UN R155/R156, ISO 21434), Smart Grid (IEEE 2030.5)
  • Side-channel & Fault Injection trên embedded crypto (Power/EM/Clock/Glitch)

7. Cryptography & Post-Quantum Cryptography (PQC)

  • NIST PQC Standardization: CRYSTALS-Kyber (KEM), CRYSTALS-Dilithium (Signature), SPHINCS+, FALCON - Migration planning, Hybrid KEM
  • TLS 1.3 / QUIC / HTTP/3 Security Analysis, 0-RTT risks, Encrypted Client Hello (ECH)
  • Threshold Cryptography, MPC (Multi-Party Computation), FHE (Fully Homomorphic Encryption) applications
  • Blockchain/Crypto Security: MEV, Bridge exploits, Smart contract formal verification, ZK-proof systems

8. Privacy Enhancing Technologies (PETs) & Data Security

  • Confidential Computing: TEEs (Intel SGX/TDX, AMD SEV-SNP, ARM CCA), Remote Attestation
  • Federated Learning Privacy, Differential Privacy, Secure Multi-party Computation (MPC)
  • Data Security Posture Management (DSPM): Data discovery, classification, access governance, flow mapping
  • Privacy Regulations Tech Compliance: GDPR, CCPA/CPRA, Vietnam PDPD (Đề án 06, Luật Bảo vệ dữ liệu cá nhân)

9. Threat Intelligence & Threat Hunting

  • ATT&CK-based Threat Hunting: Hypothesis-driven, Analytics-driven, Situational-awareness-driven
  • Cyber Threat Intelligence (CTI) Sharing: STIX/TAXII, MISP, OpenCTI, TAXII, Trust Groups (ISAC/ISAO)
  • Attribution & Campaign Tracking, Malware Family Classification (ML-based)
  • Deception Technology: High-interaction Honeypot/Honeynet, Honeytoken, Decoy Network (Seed, Canary)

10. Human-Centric Security & Security Culture

  • Phishing Susceptibility Modeling, Personalized Training, Nudge Theory in Security
  • Insider Threat Detection: UEBA (User & Entity Behavior Analytics), Psychometric indicators
  • Security Decision Making, Cognitive Bias, Usable Security (Password managers, MFA UX, Warning design)
  • Security Culture Maturity Models, Gamification, Security Champions Program

Cách chọn đề tài nghiên cứu (Cho sinh viên/PhD/Professional Research)

  1. Interest + Feasibility: Bạn thích gì? Có data/công cụ/hướng dẫn viên không?
  2. Gap Analysis: Đọc top conference (IEEE S&P, USENIX Security, ACM CCS, NDSS, RAID, ACSAC, Black Hat, DEF CON, BlueHat) 2-3 năm gần → tìm "Future Work", "Limitations"
  3. Practical Impact: Giải quyết vấn đề thực tế (Enterprise, VN context: VNPT, Viettel, Bank, Gov, SME)
  4. Publishability: Target venue (Top tier vs Second tier vs Workshop). Co-author với advisor.
  5. Funding & Resources: Grant (NAFOSTED, Vingroup, Enterprise), GPU cluster, dataset access, legal/ethical clearance.

Nguồn cập nhật xu hướng nghiên cứu

  • Conference: IEEE S&P (Oakland), USENIX Security, ACM CCS, NDSS, RAID, ACSAC, Black Hat, DEF CON, BlueHat, RSA Conference
  • Journal: IEEE TDSC, TIFS, TNET, ACM TOPS, Digital Threats, Computers & Security, Computers & Electrical Engineering
  • ArXiv: cs.CR (Cryptography and Security) daily
  • Vendor Research: Google Project Zero, Microsoft Threat Intelligence, Palo Alto Unit 42, CrowdStrike Intelligence, Mandiant, Cisco Talos, FortiGuard, Kaspersky GReAT, Trend Micro, Zscaler ThreatLabz
  • Standard: NIST CSF 2.0, NIST 800-53 Rev5, ISO 27001:2022, IEC 62443, PCI-DSS 4.0, CIS Benchmarks v8