Many companies seek to gain reputation by going through a certification process, and the standard of choice for many companies will be the ISO 27001:2013 standard [1]. A thorough literature review on ISO27001 research [8] found that only 26% of the studies have cited outcomes of the ISO27001 certification, and only 3 papers focus explicitly on the impact of the standard. Neither of these focus on availability and risk, and no research provides real data from a risk registry showing the standard’s effect. In this research we analyse the controls of the standard from the point of view of a Network Operations Centre. We further analyse a global network operator’s risk registry over a 5-year period and show how the risks and risk improvements relate to the ISO27001 information security objectives. The results show that the implementation of ISO27001 caused a significant reduction of risk in all areas, and argues that the ISO27001 standard is well suited to reducing the operator’s risk related to the objects of confidentiality, integrity and availability.

{Computing infrastructure is becoming ubiquitous thanks to the advancement in computing and the network domain. Reliable network communication is essential to offer good quality services, but it is not trivial. There are privacy concerns. Metadata may leak user information even if traffic is encrypted. Some countries have data privacy preserving-related regulations, but end-users cannot control through which path, networks, and hardware their data packets should travel. Even worse, the user cannot declare their privacy preferences. This paper presents an approach to tackle such privacy issues through data privacy-aware routing. The user can specify their preferences for packet routing using marking and filtering. Routing can work according to such specifications. It is implemented by P4, allowing a vendor-independent realisation with standard off-the-shelf hardware and open-source software components. We presented the initial experimental results of a proof-of-concept run on a unified cloud/fog research testbed.}

The rapid increase in mobile data traffic and the number of connected devices and applications in networks is putting a significant pressure on the current network management approaches that heavily rely on human operators. Consequently, an automated network management system that can efficiently predict and detect anomalies is needed.  In this paper, we propose, RCAD, a novel distributed architecture for detecting anomalies in network data forwarding latency in an unsupervised fashion. RCAD employs the hierarchical temporal memory (HTM) algorithm for the online detection of anomalies.  It also involves a collaborative distributed learning module that facilitates knowledge sharing across the system.  We implement and evaluate RCAD on real world measurements from a commercial mobile network.  RCAD achieves over 0.7 F-1 score significantly outperforming the state-of-the-art methods. 

With the intuition that every device on the data path contributes to the end-to-end delay, we propose a simple and deterministic measurement-based approach for detecting the insertion of a layer-2 switch on the data path of a network operator. 
For this purpose, we use commodity hardware and the standard ping tool for collecting ICMP RTTs. 
To minimise inaccuracies in the measurements, we increase timing determinism on both ICMP source and target by using a real-time kernel on both, a dedicated source (a Linux server) and target (an RPI4 with custom image). Additionally, we manipulate real-time attributes for prioritising the ping process. By using this approach on different loaded networks: lab, campus network,  research and education network and an ISP, we are able to reliably detect that a switch was added at the end of the path or within it.
Our method yields an excellent performance on  networks with considerable cross traffic as well as lightly loaded networks.