اساس‌نامهٔ شبکه‌های آینده: راهنمای عملی برای کاوش در محیط‌های شبکه ابری، لبه و هسته ۵G

Table of Contents About the Author About the Technical Reviewer Acknowledgments Introduction Part I: Docker Basics and Networking Chapter 1: Getting Started with Future Networking Environments Understanding Future Networking Environments Cloud Computing Platforms SaaS PaaS IaaS Edge Computing and Its Environment VPC and Setting Up a VPC 5G 5G RAN 5G Core Platforms Docker Role in Future Networking Environments Docker Architecture Docker Architecture Blocks Docker Host Docker Client Docker Registry Docker Way for Services Deployment BUILD PUBLISH RUN Docker Objects Docker Image Docker Container Docker Volume Docker Network Docker Service Getting Started with Docker Installation Set Up Docker Registry Know Building Process of Your Image Let’s Create and Run Custom Images Docker Basic Commands for Experimenting Container Management Volumes Quick View of Docker Networking Commands Summary Chapter 2: Exploring Docker Networking Features Docker Networking Services Getting Started with Docker Networking Docker Default Supporting Networks Default Bridge Network Docker Host Network Docker None Network Understanding Docker Host and Container Networking Set Up a Custom Bridge Network Set Up a Custom Network with ICC Disabled Set Up a Custom Network with Internet Access Disabled Docker IP Addressing and Naming Services Docker IP Addressing Service Reserve a Few IP Addresses Allocate a Range of IP Addresses Host Interfaces Binding to Access Services Docker DNS Services Docker Default DNS Services Docker Embedded DNS Services Docker DNS Aliases Docker Host Routing and Iptables Docker Routing Docker Host to Container’s Network Container’s Network to Docker Host Docker and Iptables Iptables Important Tables and Supporting Rule Chains Filter Table NAT Table Mangle Table Iptables Rule Structure Docker-Specific Iptables Rules Filter Traffic from Docker Host to Container Network Filter Traffic from Container Network to Docker Host Filter Traffic from Container to Container Summary Chapter 3: Setting Up Realistic Networking Scenarios Docker Services for Setting Up Experimental Networks docker-compose Basics docker-compose for Deployment Tasks Configuring Computational Resources Checking Health of a Container or Service docker-compose for Containers Orchestration Controlling Services Order and Scaling Important Options for Networks Compose Exposing Container Services and Accessing Host Internet Importance of Iptables for Accessing the Internet Experimenting by Setting Up a LAN over Docker Containers Experimenting with an Internetworking over Docker Containers Summary Part II: Network Function Virtualization and Virtual Networks Basics Chapter 4: Virtualizing Network Functions in Cloud and Telecom Core Networks Importance of Virtualizing Network Functions Approaches for Deploying VNFs Virtual Machines for Deploying VNFs Containers for Deploying VNFs Benefits of VNFs Explore NFV Architecture Details Introduction to NFV Architecture NFV Key Use Cases Flexible Ways for Deploying NFs Provisioning of Network Services Quickly Helping in the Design of Flexible, Scalable, and Reliable Telecom Infrastructure Role of NFV in 5G Core Networks Service-Based Architecture Principles for 5G Basic 5G Core Network Functions Look into Sample 5G Core NFs Service Interfaces Role of Docker in Realizing VNFs Introduction to OpenAIR 5G Core Network Experimenting with OPENAIR-CN-5G Summary Chapter 5: Experiment with VNFs over Docker Containers Setting Up VNFs Using Docker Build VNFs Using Docker Images Set Up Suitable Volumes and Networks for VNFs Deployment Automate VNFs Deployment and Testing Tasks Experimenting with Virtual DHCP Server Set Up and Test DHCP VNFs Setting Up Reliable DHCP Service VNFs Experimenting with Virtual DNS Server Experiment with Local DNS Server Experiment with Authoritative DNS Server Experimenting with Virtual High-Availability Proxy Server Basic Experiments with a Proxy Server VNF Advanced Experiments with Proxy Server VNF Summary Chapter 6: Importance of Virtual Networks in Cloud and Telecom Networks Role of Virtual Networks in Cloud and 5G Core Networks Importance of MAC VLANs Importance of IP VLANs Docker IP VLAN L2 Mode IP VLAN L3 Mode Importance of Overlay Networks Docker Overlay Networks Experimenting with Docker Virtual Networks Experiment with MAC VLANs Experiment with IP VLANs Overlay Networks Using Docker Swarm Set Up and Experiment a Variety of VLANs over Docker Containers Quickly Set Up MAC VLANs and Test Using docker-compose Quickly Set Up IP VLAN L2 Mode and Test Using docker-compose Quickly Set Up IP VLAN L3 Mode and Test Using docker-compose Learning Setting Up Overlay Networks over Docker Containers Quickly Set Up Overlay Networks and Test over the Docker Swarm Practice Setting Up Network Slices over the Docker Swarm Setup Summary Part III: Cloud and Networking Security Chapter 7: Learning Docker Security for Experimenting with Cloud Security Importance of Cloud Security Know Docker Features and Ways for Security Docker Security Features Kernel-Level Access Control: Capabilities Docker and Capabilities System Calls-Level Access Control: Seccomp Docker and Seccomp Application-Level Access Control: AppArmors Docker and AppArmor Experimenting with Seccomp Profiles Understanding Seccomp Profile Syntax Define a Custom-Secure Computing Environment for Linux Containers Learn How to Override Secure Environments Using Capabilities Experimenting with AppArmor Profiles AppArmor Profile Syntax Quickly Set Up and Test an AppArmor Profile Application-Specific AppArmor Profiles Summary Chapter 8: Explore Scapy for Experimenting with Networking Environments Security Scapy for Exploring Network Security Getting Started with Scapy Usage Know Important Features of Scapy for Experimenting with Network Security Scapy’s Unique Features Learning Basics of Scapy Programming Construction of Network Protocol Stack Packets Generating Network Protocol Packets Quickly Sniffing and Inspecting of Network Traffic Sending and Receiving Packets Using Scapy Implement a Packet Sniffer Using Scapy Implement an ARP Sniffer Implement a UDP Sniffer Implement an ICMP Sniffer Implement a Packet Spoofer Using Scapy Implement an ARP Spoofer Implement a UDP Spoofer Implement an ICMP Spoofer Summary Chapter 9: Recreating and Analyzing Realistic Network Security Scenarios Understanding a Variety of Network Security Attacks Sniffing and Spoofing Network Traffic Attacks Denial-of-Service (DoS) Attacks Man-in-the-Middle (MiTM) Attacks Hands-On 1: Sniffing and Spoofing Network Traffic Sniffing and Spoofing UDP Traffic Sniffing and Spoofing ICMP Messages Hands-On 2: Sniffing and Spoofing Network Traffic Start with Sniffing TCP Session Segments Sniffing an Ongoing TCP Session and Spoofing TCP Segments Setting Up a Network and Simulating a Variety of Attacks Spoofing DNS Replies DoS Attack on a TCP Server Resetting Ongoing TCP Connections Summary Index This book reviews how to safeguard digital network infrastructures, emphasizing on the latest trends in cybersecurity. It addresses the evolution of network systems, AI-driven threat detection, and defense mechanisms, while also preparing readers for future technological impacts on security. This concise resource is essential to understanding and implementing advanced cyber defense strategies in an AI-integrated world. Readers are provided with methods and tips on how to evaluate the efficacy, suitability, and success of cybersecurity methods and AI/machine learning applications to safeguard their networks. Case studies are included; with examples of how security gaps have led to security breaches and how the methods discussed in the book would help combat these. This book is intended for those who wish to understand the latest trends in network security. It provides an exploration of how AI is revolutionizing cyber defense, offering readers from various fields including insights into strengthening security strategies. With its detailed content, the book empowers its audience to navigate complex regulations and effectively protect against a landscape of evolving cyber threats, ensuring they are well-equipped to maintain robust security postures within their respective sectors. What You Will Learn The transformative role AI plays in enhancing network security, including threat detection, pattern recognition, and automated response strategies. Cutting-edge security protocols, encryption techniques, and the deployment of multi-layered defense systems for robust network protection. Insights into vulnerability assessments, risk analysis, and proactive measures to prevent and mitigate cyber threats in modern network environments. Who This Book is for IT professionals and network administrators, cybersecurity specialists and analysts, students and researchers in computer science or cybersecurity programs, corporate decision-makers and C-level executives responsible for overseeing their organizations' security posture. Also security architects and engineers designing secure network infrastructures, government and defense agency personnel tasked with protecting national and organizational cyber assets. Finally technology enthusiasts and hobbyists with a keen interest in cybersecurity trends and AI developments and professionals in regulatory and compliance roles requiring an understanding of cybersecurity challenges and solutions.