หัวข้อพื้นฐาน (Fundamental Topics)
- Network Security Models (Bell-LaPadula, Biba, Clark-Wilson)
- Cryptography in Networks (IPsec, TLS/SSL, DTLS, MACsec, WireGuard)
- Authentication & Authorization (802.1X, RADIUS, TACACS+, Kerberos, SAML, OIDC)
- Firewall Technologies (Stateful, Next-Gen, UTM, Cloud Firewall, Micro-segmentation)
- Intrusion Detection/Prevention (Signature vs Anomaly, Suricata, Snort, Zeek)
- VPN & Remote Access (IPsec, SSL VPN, SD-WAN, Zero Trust Network Access - ZTNA)
- Network Monitoring & Analysis (NetFlow, sFlow, PCAP, SIEM Integration)
- Wireless Security (WPA3, 802.1X/EAP, Wi-Fi 6/6E/7 Security, IoT Onboarding)
หัวข้อร้อนแรง (Trending/Hot Topics 2024-2025)
| หมวดหมู่ | หัวข้อเฉพาะ |
|---|---|
| Zero Trust & SASE | ZTNA, SSE, CASB, SWG, RBI, Identity-based Segmentation, Continuous Verification |
| Cloud Network Security | VPC Security Groups, Transit Gateway, Cloud Firewall (AWS Network Firewall, Azure Firewall, GCP Firewall), CNAPP, CSPM |
| Threat Detection & Response | NDR (Network Detection & Response), XDR, Threat Hunting, MITRE ATT&CK Mapping, Behavioral Analytics, AI/ML for Anomaly Detection |
| IoT/OT/ICS Security | Network Segmentation for OT, IEC 62443, Purdue Model, Passive Monitoring, Firmware Analysis |
| Encryption & Privacy | TLS 1.3 Deployment, Encrypted Traffic Analysis (ETA), DNS over HTTPS/TLS (DoH/DoT), Post-Quantum Cryptography (PQC) |
| Automation & Programmability | Network as Code (Terraform, Ansible), API-driven Security, SOAR Integration, Policy as Code (OPA/Rego) |
| Emerging Threats | Supply Chain Attacks (SolarWinds style), Ransomware Evolution, AI-generated Attacks, Deepfake Voice/Video for Social Engineering |
หัวข้อวิจัยระดับ Graduate/PhD (Research Directions)
- AI/ML for Network Security: Graph Neural Networks for Threat Detection, Federated Learning for Collaborative Detection, Adversarial ML against Network Classifiers
- Quantum-Safe Networking: QKD (Quantum Key Distribution) Integration, PQC Migration Strategies for TLS/IPsec
- Intent-Based Networking Security: Formal Verification of Security Policies, Automated Policy Synthesis
- 5G/6G Network Security: Network Slicing Security, AKA/5G-AKA Vulnerabilities, RAN Security
- Blockchain/Distributed Ledger for Security: Decentralized PKI, Audit Logs, Threat Intelligence Sharing
- Moving Target Defense (MTD): Network Address Hopping, Port Hopping, Configuration Randomization
- Privacy-Preserving Network Analytics: Secure Multi-party Computation (SMPC), Homomorphic Encryption for Traffic Analysis
แหล่งข้อมูลและการติดตาม (Resources)
- Conferences: IEEE S&P (Oakland), USENIX Security, ACM CCS, NDSS, Black Hat, DEF CON, RSA Conference
- Journals: IEEE TDSC, ACM TISSEC, Computers & Security, Journal of Network and Computer Applications
- Standards Bodies: IETF (TLS, IPsec, DOH), IEEE 802.1X/802.11, NIST (SP 800-series), ISO/IEC 27001
- Vendor Research: Cisco Talos, Palo Alto Unit 42, FortiGuard, Microsoft Threat Intelligence, Google Project Zero, Cloudflare Blog
คำแนะนำเลือกหัวข้อ
- เลือกตาม ความสนใจ + ทักษะปัจจุบัน + โอกาสทางอาชีพ
- เริ่มจาก Survey Paper / Literature Review ล่าสุด 3-5 ปี (Google Scholar, Semantic Scholar)
- หา Gap ที่ยังไม่มีคำตอบชัดเจน หรือ Practical Problem จากงานจริง
- พิจารณา Data Availability (Public Datasets: CICIDS2017/2018, UNSW-NB15, MAWI, CAIDA)
- Target: Top-tier Conference/Journal หรือ Industry Whitepaper/Certification