This dissertation studies several security issues in data networks, to reveal the vulnerability, to propose defense mechanisms, to provide better tools for analysis, and to develop good security architecture. This dissertation consists of the following three parts: (1) Internet-like topologies...