Cost-Effective Cybersecurity: A Multi-Tiered Defense Framework with Open-Source Solutions
暫譯: 具成本效益的網路安全：多層防禦框架與開源解決方案

本書提供了一個全面的、以研究為基礎的框架，通過在結構化的多層防禦模型中整合開源安全工具，實現具成本效益的網絡安全解決方案。針對中小企業、教育機構和資源有限的組織面臨的網絡安全可負擔性挑戰，本書提供了一種系統化的方法來減輕威脅，同時確保可擴展性和韌性。書中提供了安全工具的實證評估、實際部署見解和實用的實施策略，彌合了理論網絡安全原則與可行解決方案之間的鴻溝。通過結合技術、經濟和戰略視角，本書使網絡安全專業人士、IT 管理員、研究人員和政策制定者具備在不產生高昂成本的情況下增強安全態勢的知識。本出版物的特色在於提供了一個結構化的防禦模型、開源解決方案的性能基準測試，以及對新興威脅的前瞻性分析，使其成為在財務受限環境中提升網絡安全韌性的必備資源。

Hassan Jalil Hadi received the Ph.D. degree in Cyberspace Security from the School of Cyber Science and Engineering, Wuhan University, China. He is currently working as a Research Specialist at the Resilient Computing and Cybersecurity Center (RC3), King Abdullah University of Science and Technology (KAUST), Saudi Arabia. Previously, he served as a Cybersecurity Expert at the CRC Laboratory, National Center for Cyber Security, Islamabad, where he was engaged in threat detection, monitoring, mitigation, and audits aligned with industry standards for cybersecurity challenges. His research interests include IoT security, digital forensics, edge computing, and botnet detection and mitigation. In addition to his academic and research contributions, he holds multiple professional certifications, including CISM from ISACA, as well as CEH, CHFI, and ISO 27001 certifications, demonstrating his expertise in strategic security management, ethical hacking, digital forensics, and information security governance.

Muhammad Khurram Khan is a global thought leader and influencer in cybersecurity. He is a Professor of Cybersecurity at the Center of Excellence in Information Assurance, King Saud University, Saudi Arabia. He is the founder and CEO of the 'Global Foundation for Cyber Studies and Research', an independent and non-partisan cybersecurity think-tank in Washington, D.C., USA. He has contributed to cyber policy work for the G20 (Saudi and Italian Presidencies) in shaping a safer cyberspace for children, protecting the masses and vulnerable populations in cyberspace, and empowering and enabling women in the cybersecurity profession. In 2019, he played an instrumental role as a cybersecurity subject expert for a USD 6 million series B investment in a South Korean startup, "SecuLetter," which has received an IPO valuation of USD 100 million (2023). He is also an International Advisory Board Member at AIFT, which is a leading AI cybersecurity company.

He is the Editor in Chief of a well-reputed international journal 'Telecommunication Systems', published by Springer Nature for over 28 years, with a recent impact factor of 2.3 (JCR 2025). Furthermore, he is the area editor (Cybersecurity) of IEEE Communications Surveys & Tutorials, which has a 46.7 impact factor. Moreover, he has been on the editorial board of several journals, including, IEEE Transactions on Information Forensics and Security, IEEE Transactions on Network Science and Engineering, IEEE Transactions on Mobile Computing, IEEE Communications Magazine, IEEE Transactions on Intelligent Vehicles, IEEE Internet of Things Journal, IEEE Transactions on Consumer Electronics, JNCA, and IEEE Communications Letters, etc. He serves as a referee for research foundations of Switzerland, Italy, Saudi Arabia, and the Czech Republic.

He has published over 500 research papers and holds 12 U.S. patents. His research focuses on cybersecurity, smart mobility security, AI security and governance, IoT security, digital authentication, cyber policy, and innovation management. He is a fellow of the IET, BCS, and FTRA, and a senior member of IEEE and IACSIT. He also chaired an ITU working group on child online protection in the Metaverse.

Naveed Ahmad (Senior Member, IEEE) received his Ph.D. in computer science from the University of Surrey, U.K., in 2013. He is an Associate Professor at Prince Sultan University, Riyadh, Saudi Arabia. His research interests include security and privacy in emerging networks, such as VANETs, DTNs, IoT, machine learning, and big data.

Rehana Yasmin is a Research Scientist at KAUST, Saudi Arabia. Prior to this, she worked as an automotive cybersecurity researcher at Huawei International, Singapore from 2016 to 2023. Her research interests cover wide-ranging aspects of cybersecurity, including applications in automotive and satellite systems.

哈桑·賈利爾·哈迪（Hassan Jalil Hadi）於中國武漢大學的網絡科學與工程學院獲得網絡空間安全的博士學位。他目前在沙烏地阿拉伯的阿卜杜拉國王科技大學（KAUST）擔任韌性計算與網絡安全中心（RC3）的研究專家。此前，他曾在伊斯蘭堡的國家網絡安全中心的CRC實驗室擔任網絡安全專家，專注於威脅檢測、監控、緩解及符合行業標準的網絡安全挑戰的審計。他的研究興趣包括物聯網安全、數位取證、邊緣計算以及僵屍網絡的檢測與緩解。除了學術和研究貢獻外，他還擁有多項專業認證，包括ISACA的CISM，以及CEH、CHFI和ISO 27001認證，顯示出他在戰略安全管理、道德駭客、數位取證和資訊安全治理方面的專業知識。

穆罕默德·庫拉姆·汗（Muhammad Khurram Khan）是網絡安全領域的全球思想領袖和影響者。他是沙烏地阿拉伯國王沙烏德大學資訊保障卓越中心的網絡安全教授。他是「全球網絡研究與研究基金會」的創始人兼首席執行官，這是一個位於美國華盛頓特區的獨立非黨派網絡安全智庫。他為G20（沙烏地和意大利主席國）的網絡政策工作做出了貢獻，致力於為兒童塑造更安全的網絡空間，保護大眾和脆弱群體，並賦能女性在網絡安全職業中的角色。2019年，他在一項600萬美元的B輪投資中擔任網絡安全主題專家，該投資針對一家韓國初創公司「SecuLetter」，該公司在2023年獲得了1億美元的首次公開募股估值。他還是AIFT的國際諮詢委員會成員，該公司是領先的AI網絡安全公司。

他是國際知名期刊《電信系統》（Telecommunication Systems）的主編，該期刊由Springer Nature出版，已有超過28年的歷史，最近的影響因子為2.3（JCR 2025）。此外，他還是IEEE通訊調查與教程（IEEE Communications Surveys & Tutorials）的區域編輯（網絡安全），該期刊的影響因子為46.7。此外，他曾擔任多個期刊的編輯委員會成員，包括IEEE資訊取證與安全期刊、IEEE網絡科學與工程期刊、IEEE行動計算期刊、IEEE通訊雜誌、IEEE智慧車輛期刊、IEEE物聯網期刊、IEEE消費電子期刊、JNCA和IEEE通訊信件等。他還擔任瑞士、意大利、沙烏地阿拉伯和捷克共和國的研究基金會的審稿人。

他已發表超過500篇研究論文，並擁有12項美國專利。他的研究重點包括網絡安全、智慧移動安全、AI安全與治理、物聯網安全、數位身份驗證、網絡政策和創新管理。他是IET、BCS和FTRA的研究員，並且是IEEE和IACSIT的高級會員。他還曾主持ITU在元宇宙中針對兒童在線保護的工作組。

納維德·艾哈邁德（Naveed Ahmad，IEEE高級會員）於2013年在英國薩里大學獲得計算機科學博士學位。他是沙烏地阿拉伯利雅德的蘇丹王子大學的副教授。他的研究興趣包括新興網絡中的安全與隱私，如VANETs、DTNs、物聯網、機器學習和大數據。

瑞哈娜·雅斯敏（Rehana Yasmin）是沙烏地阿拉伯KAUST的研究科學家。在此之前，她於2016年至2023年在新加坡的華為國際擔任汽車網絡安全研究員。她的研究興趣涵蓋網絡安全的廣泛方面，包括在汽車和衛星系統中的應用。