Security, Governance, Sustainability and Future Strategy

Introduction and Context

Wireless communication has become critical infrastructure. Mobile networks, Wi-Fi, satellite systems, industrial wireless networks, connected vehicles, and emerging sensing platforms support finance, health care, energy, transport, defence, and public administration. Consequently, wireless engineering can no longer be evaluated only through spectral efficiency, coverage, latency, and data rate. A technically excellent system may still be unacceptable if it exposes personal data, enables unsafe surveillance, consumes excessive energy, violates electromagnetic-exposure limits, or depends on an ungoverned supply chain.

Security and sustainability are also interdependent. Stronger encryption may require computation and energy; dense security monitoring may increase infrastructure load; resilient architectures may duplicate equipment; and low-power operation may constrain authentication or sensing capability. The strategic task is therefore to optimize a multi-dimensional system objective involving performance, security, safety, cost, environmental impact, legal compliance, and social value.

This chapter develops a framework for evaluating these dimensions at postgraduate level. It considers physical-layer security, authentication and privacy, jamming and resilience, spectrum policy, standards governance, electromagnetic exposure, ethical artificial intelligence, digital inclusion, and lifecycle impacts. It then applies techno-economic and risk-analysis methods to reconfigurable intelligent surfaces (RIS), terahertz (THz) communication, and integrated sensing and communication (ISAC), before identifying future research directions.

Learning Objectives

After studying this chapter, the reader should be able to:

1. Explain security threats and protections across the wireless protocol stack.

2. Analyse physical-layer security, authentication, privacy, jamming, and resilience.

3. Evaluate spectrum, standards, safety, ethical, and inclusion issues.

4. Apply lifecycle and techno-economic reasoning to emerging wireless technologies.

5. Construct a risk register and compare strategic options under uncertainty.

6. Critically assess RIS, THz, ISAC, and future research priorities.

1. Wireless Security as a Layered System Property

Wireless signals propagate through an open medium. An adversary need not obtain physical access to a cable: it may eavesdrop, inject packets, impersonate a device, alter control information, jam a channel, or exploit a vulnerable cloud interface. Security should therefore be treated as a system property rather than as an encryption function added at the network edge.

The principal objectives are confidentiality, integrity, availability, authenticity, accountability, and privacy. Confidentiality prevents unauthorized disclosure; integrity prevents undetected modification; availability ensures service continuity; authenticity establishes the identity or legitimacy of communicating entities; accountability supports attribution and audit; and privacy limits inappropriate collection, inference, and use of information.

A useful threat classification is:

• Passive interception: observing signals without modifying them.
• Active manipulation: injecting, replaying, modifying, or suppressing messages.
• Impersonation: presenting a false identity or compromised credential.
• Denial of service: reducing availability through interference, overload, or protocol abuse.
• Side-channel attack: inferring secrets from timing, power, radio fingerprints, or implementation behaviour.
• Supply-chain attack: compromising hardware, firmware, software, updates, or vendors.
• Inference attack: deriving sensitive information from metadata, location, traffic patterns, or sensed environments.

The attack surface includes user equipment, radio access networks, core networks, edge servers, cloud platforms, network-management systems, positioning functions, and application programming interfaces. Virtualized and open architectures can improve innovation and vendor diversity, but they also expand the number of software components and trust relationships.

1.1 Physical-layer security

Physical-layer security (PLS) exploits characteristics of propagation, fading, noise, antenna arrays, and channel uncertainty. Its central information-theoretic concept is the secrecy capacity. For a wiretap channel, an idealized expression is

\[

C_s=[C_b-C_e]^+,

\]

where \(C_s\) is secrecy capacity, \(C_b\) is the legitimate receiver’s channel capacity, \(C_e\) is the eavesdropper’s channel capacity, and \([x]^+=\max(x,0)\). In an additive white Gaussian noise (AWGN) single-input single-output model,

\[

C= B\log_2(1+\gamma),

\]

where \(B\) is bandwidth in hertz and \(\gamma\) is received signal-to-noise ratio (SNR) expressed as a linear ratio, not decibels. The secrecy-capacity expression is an analytical idealization: it assumes a specified channel model, reliable coding, and knowledge or statistical characterization of the relevant channels. Practical systems use secrecy coding, beamforming, artificial noise, key generation, or combinations of these methods.

PLS methods include:

• Secure beamforming: directing useful energy toward an intended user while suppressing leakage.
• Artificial-noise transmission: injecting structured interference into spatial directions that harm an eavesdropper more than the legitimate receiver.
• Cooperative jamming: using trusted nodes to interfere with an unauthorized receiver.
• Secret-key generation: extracting correlated randomness from reciprocal channel observations.
• Friendly relaying: selecting trusted relays to improve the legitimate link or obstruct interception.
• Reconfigurable propagation control: using RIS to shape reflections, while recognizing that the surface itself becomes a security asset and attack target.

PLS is not a replacement for cryptography. Channel estimates may be inaccurate, eavesdroppers may be close to legitimate users, and an attacker may exploit higher-layer weaknesses. The strongest architecture normally combines cryptographic protection with radio-level detection, localization, beam management, and interference control.

1.2 Authentication, authorization, and privacy

Authentication answers “who or what is communicating?” Authorization answers “what is that entity allowed to do?” These functions should not be conflated. A device may be genuine but unauthorized to access a sensitive service. Mutual authentication is generally preferable in infrastructure networks because it prevents a device from trusting a fraudulent base station or access point.

A robust wireless identity architecture normally includes secure boot, hardware-rooted or protected credentials, mutual authentication, credential revocation, key separation, secure update mechanisms, and audit logs. Lightweight protocols are valuable for constrained sensors, but “lightweight” must not mean unauthenticated or dependent on static shared passwords. Post-quantum migration should also be considered for information requiring long-term confidentiality, although algorithm selection must account for message size, computation, memory, and update capability.

Privacy extends beyond payload encryption. Location, timing, cell association, device identifiers, mobility traces, radio fingerprints, and sensor-derived characteristics may reveal health, employment, political activity, or domestic behaviour. Privacy-preserving design can include data minimization, purpose limitation, local processing, pseudonymous identifiers, access control, aggregation, differential privacy, and retention limits. Differential privacy introduces calibrated randomness so that the contribution of an individual has limited influence on a released statistic; however, repeated releases can consume a privacy budget and degrade utility.

2. Jamming, Resilience, and Trustworthy Operation

Jamming is deliberate interference intended to prevent reception or increase error rates. It may be broadband, narrowband, reactive, protocol-aware, deceptive, or geographically selective. Accidental interference, congestion, and equipment faults can produce similar symptoms, so detection should not assume hostile intent.

Countermeasures include frequency agility, spread-spectrum techniques, directional and adaptive antennas, interference cancellation, coding and interleaving, redundant links, power control, geographic diversity, and rapid channel reassignment. At the network level, resilience requires graceful degradation: safety-critical traffic should receive priority, essential control should survive partial failure, and fallback modes should be tested rather than merely specified.

Resilience can be analysed through a sequence of functions:

1. Anticipate: identify dependencies, threat actors, failure modes, and vulnerable locations.

2. Absorb: maintain minimum service during an attack or fault.

3. Adapt: reconfigure spectrum, routes, beams, authentication policy, or capacity.

4. Recover: restore normal service and remove persistence mechanisms.

5. Learn: update designs, controls, and training using evidence from incidents.

A key performance measure is not merely peak availability but service availability for a defined critical function. A network can report high average availability while failing repeatedly in a hospital ward, emergency corridor, or industrial safety zone. Risk analysis must therefore be spatially, temporally, and functionally specific.

3. Spectrum Policy and Standards Governance

Radio spectrum is a shared and regulated resource. Governance balances competing uses, including commercial broadband, public safety, scientific services, satellite systems, broadcasting, defence, and unlicensed innovation. Important policy mechanisms include exclusive licensing, general authorization or unlicensed access, spectrum sharing, dynamic access, local licensing, and secondary markets.

A sound spectrum decision considers propagation, interference temperature or coordination constraints, incumbent protection, equipment availability, geographic demand, cross-border effects, and public-interest obligations. Auction revenue alone is not an adequate measure of policy success. Long-term outcomes include coverage, affordability, innovation, competition, resilience, rural service, and efficient coexistence.

Standards governance determines how technical designs become interoperable products. Organizations such as 3GPP, IEEE, ITU, ETSI, and national regulators operate through different mandates and procedures. Standards can reduce transaction costs and improve security through common controls, but they may also embed assumptions, create patent concentration, or move slowly relative to threats.

Effective governance includes transparent technical contributions, conflict-of-interest management, open consultation, security review, vulnerability disclosure, version control, conformance testing, and mechanisms for urgent correction. Open interfaces can reduce vendor lock-in, but openness without strong authentication and supply-chain assurance can expose control functions. Certification should be risk-based: a low-risk sensor and a vehicle-control system should not be assessed by identical criteria.

4. Electromagnetic Exposure, Safety, and Public Trust

Wireless systems must comply with exposure limits established by competent authorities and based on scientific assessment. Exposure assessment distinguishes far-field and near-field conditions, frequency range, antenna configuration, duty cycle, spatial averaging, and simultaneous emissions. A commonly used far-field quantity is power density, measured in watts per square metre; in near-field or device-compliance contexts, specific absorption rate (SAR), measured in watts per kilogram, may be relevant. These quantities are not interchangeable, and compliance must use the measurement method applicable to the frequency and device configuration.

Engineers should not infer safety from transmit power alone. Antenna gain, distance, beam direction, reflection, duty cycle, and simultaneous transmitters affect exposure. Conversely, a compliance result is not a guarantee that every possible misuse or installation condition has been considered. Transparent documentation, calibrated testing, conservative installation practice, and public communication are essential. Public trust declines when institutions dismiss concerns instead of explaining uncertainty, evidence, and regulatory margins.

5. Ethical AI and Responsible Wireless Intelligence

AI is increasingly used for beam prediction, handover, anomaly detection, traffic forecasting, spectrum management, localization, network slicing, and radio-resource allocation. Its risks include biased performance across locations or demographic groups, adversarial manipulation, model drift, opaque decisions, privacy leakage, unsafe automation, and excessive dependence on a single vendor or data source.

A responsible wireless-AI lifecycle includes:

• defining a legitimate purpose and prohibited uses;
• documenting data provenance, consent, representativeness, and retention;
• testing accuracy, robustness, calibration, fairness, and energy cost;
• separating training, validation, and operational data;
• monitoring drift and distribution changes;
• preserving human oversight for high-impact decisions;
• recording decisions and enabling contestability;
• securing models, interfaces, and update pipelines; and
• conducting post-deployment audits.

Fairness cannot be reduced to one universal metric. A rural user may receive lower predicted throughput because of infrastructure scarcity, while a mobility classifier may perform differently across devices or environments. Designers must distinguish genuine physical constraints from avoidable discriminatory allocation. Explainability should be proportionate to impact: a safety-related beam or access decision requires stronger evidence and auditability than a low-risk caching recommendation.

6. Digital Inclusion and the Social Purpose of Connectivity

Digital inclusion involves availability, affordability, accessibility, skills, relevant content, safety, and meaningful use. Coverage maps can conceal unaffordable subscriptions, poor indoor performance, inaccessible user interfaces, language barriers, lack of repair support, or inadequate service for people with disabilities.

Inclusive wireless strategy may combine universal-service obligations, community networks, neutral-host infrastructure, open-access backhaul, local spectrum licensing, device subsidies, public Wi-Fi, accessible design, and digital-skills programmes. The appropriate measure is not simply population coverage. Useful indicators include service quality by geography and income, adoption, affordability as a share of household resources, reliability, accessibility, and the ability to use services for education, employment, health, and civic participation.

Inclusion also has a security dimension. Unsupported devices and informal credential sharing can increase compromise risk. Security controls should therefore be affordable, understandable, and compatible with older equipment during migration periods.

7. Sustainability and Lifecycle Engineering

Wireless sustainability has three major dimensions: environmental, economic, and social. Environmental assessment includes operational electricity, embodied emissions from materials and manufacturing, transport, maintenance, replacement, recycling, and end-of-life treatment. Economic sustainability concerns total cost of ownership, energy prices, spectrum fees, maintenance, upgrade cycles, and revenue or public value. Social sustainability includes labour conditions, accessibility, community impact, and long-term service equity.

A simplified lifecycle energy model is

\[

E_{life}=E_{embodied}+\sum_{t=1}^{T}E_{operation,t}+E_{maintenance}+E_{end},

\]

where each term is measured in a consistent energy unit over service life \(T\). The expression is a bookkeeping framework, not a universal emissions equation. To estimate greenhouse-gas impact, each energy component must be multiplied by an appropriate time- and location-specific emissions factor, while material and process emissions must be separately accounted for to avoid double counting.

Energy efficiency should be measured against a useful functional output, such as joules per delivered bit, joules per inference, or energy per reliably covered area, with the service definition stated clearly. A system that reduces energy per bit but stimulates substantially higher traffic may increase total energy use. Embodied impacts can dominate for frequently replaced equipment, especially when manufacturing involves energy-intensive semiconductors, batteries, or large antenna structures.

Best practices include sleep modes, efficient cooling, renewable-energy procurement with credible accounting, repairable and modular hardware, longer software support, equipment reuse, recyclable materials, right-sized capacity, and supplier lifecycle reporting. End-of-life security is essential: storage media and programmable radios must be sanitized or destroyed, and discarded equipment must not become a source of credential leakage.

8. Techno-Economic and Risk Analysis of Emerging Platforms

Emerging technologies should not be judged by demonstrations alone. A strategic appraisal should define the use case, alternatives, assumptions, uncertainty, performance indicators, lifecycle costs, dependencies, and failure consequences.

A basic total-cost-of-ownership model is

\[

TCO=C_0+\sum_{t=1}^{T}\frac{C_t}{(1+r)^t}-\frac{S_T}{(1+r)^T},

\]

where \(C_0\) is initial cost, \(C_t\) is cost in year \(t\), \(r\) is the discount rate, \(T\) is the analysis horizon, and \(S_T\) is residual value at the end. Costs may include spectrum, sites, power, backhaul, software licences, maintenance, cybersecurity, training, compliance, and decommissioning. The discount rate and residual value must be justified; a low discount rate is often more appropriate for public-interest infrastructure than for a high-risk commercial venture.

Risk can be represented as a combination of likelihood and consequence, but a numerical product should not conceal uncertainty or catastrophic tail events. A practical risk register records the asset, threat, vulnerability, initiating event, consequence, existing controls, owner, indicators, treatment, and residual risk. Scenario analysis, sensitivity analysis, fault-tree analysis, and Monte Carlo simulation can complement a simple risk matrix.

8.1 Reconfigurable intelligent surfaces

An RIS is a surface containing many controllable reflecting or transmitting elements. By adjusting element responses, it can alter propagation to improve coverage, spatial separation, or energy efficiency. Its attraction is that it may shape the radio environment with lower active-radio power than a fully active relay. However, practical performance depends on channel estimation, control latency, element loss, phase quantization, mutual coupling, placement, blockage, illumination from a transmitter, and the power consumed by controllers and networking.

The economic case is strongest where a surface can solve a specific coverage or interference problem without requiring a new active base station. It is weaker where the surface needs extensive cabling, frequent reconfiguration, difficult maintenance, or a dedicated control link. Security concerns include unauthorized surface reprogramming, false channel states, covert reflection, denial of control, and physical tampering. Lifecycle analysis must include substrate materials, electronics, mounting structures, maintenance access, and eventual replacement.

8.2 Terahertz communication

THz systems, broadly associated with frequencies above conventional millimetre-wave bands, offer very large potential bandwidths. They also face severe propagation loss, molecular absorption, blockage, narrow beams, oscillator and packaging constraints, and difficult alignment. The high directionality can reduce casual interception but can make link disruption easier through blockage or beam misalignment. THz security must therefore address availability and control-plane robustness as well as confidentiality.

Promising applications include short-range ultra-high-throughput links, chip-to-chip or rack-scale interconnects, fixed access, high-resolution sensing, and specialized backhaul. A credible business case must compare THz with fibre, millimetre wave, optical wireless, and conventional sub-6-GHz systems. It should include installation precision, weather and blockage conditions, device yield, thermal management, spectrum regulation, and maintenance—not only headline bandwidth.

8.3 Integrated sensing and communication

ISAC designs waveforms, antennas, resources, and processing to support data transmission and environmental sensing using shared hardware or spectrum. It can improve localization, imaging, industrial monitoring, vehicular awareness, and network-assisted perception. The central trade-off is that communication prefers reliable information transfer, while sensing may require bandwidth, waveform structure, aperture, dwell time, and angular or range resolution.

ISAC creates new privacy and governance obligations. A device that communicates may also detect people, rooms, movement, or behaviour without the same consent expectations as a camera. Data minimization, on-device processing, clear purpose limitation, access control, retention limits, and bystander protections are therefore essential. Safety validation is particularly important when sensing informs vehicle, industrial, or healthcare decisions.

9. Illustrative Case: Resilient Smart-Port Wireless Infrastructure

Background

Consider a fictional port authority planning a private 5G network for automated guided vehicles, worker communications, asset tracking, and environmental monitoring. The port contains cranes, metal structures, hazardous areas, public roads, and a dense mixture of licensed and unlicensed radios.

Problem

The authority must choose between extending conventional small cells, deploying RIS on warehouse walls, and piloting THz links for high-capacity crane-to-control-room connections. It must also prevent jamming, protect worker and vehicle data, meet exposure requirements, and reduce energy and equipment waste.

Analysis

The authority first defines critical functions. Vehicle safety commands require high integrity and availability; video analytics require high throughput but can tolerate controlled degradation; environmental sensors can buffer data. A threat assessment identifies rogue devices, jamming near loading zones, compromised maintenance laptops, false sensor data, and unauthorized tracking of workers.

The procurement team creates a lifecycle cost model covering radio equipment, fibre or wireless backhaul, power, cooling, site access, software support, security monitoring, and decommissioning. It conducts sensitivity analysis for energy price, equipment life, and traffic growth. RIS is considered for a warehouse shadow zone, but only after confirming that the surface has a reliable control path and measurable benefit under changing cargo configurations. THz is limited to a short, line-of-sight link with a redundant fibre or millimetre-wave path. ISAC is piloted for vehicle localization with strict separation between operational safety data and worker-monitoring data.

Approach and solution

The selected architecture uses conventional reliable coverage as the baseline, RIS only at validated dead zones, and THz only for a bounded high-capacity link. Critical commands use mutual authentication, cryptographic integrity, network segmentation, and a resilient fallback channel. Spectrum monitoring detects anomalous interference, while directional antennas and geographically separated access points support recovery. AI is used for anomaly ranking rather than autonomous safety decisions, and its models are audited across weather, equipment, and traffic conditions.

Exposure measurements are repeated after antenna changes. Equipment procurement requires secure boot, signed updates, vulnerability disclosure, support for credential rotation, and documented environmental data. Worker consultation establishes acceptable sensing purposes and retention periods.

Outcome

The port obtains a staged deployment rather than committing to an unproven all-emerging architecture. The approach reduces technical lock-in, preserves safety fallback, and makes future expansion conditional on measured reliability, lifecycle cost, and social acceptance.

Learning points

The case illustrates that emerging technologies are enablers, not objectives. A strategic decision links each technology to a defined problem, quantifies uncertainty, assigns risk ownership, protects affected people, and preserves alternatives.

10. Future Research Strategy

Future wireless research should move beyond isolated peak metrics. Important directions include:

• secure and explainable AI for radio-resource management;
• post-quantum and quantum-resistant key-management migration;
• joint communication, sensing, positioning, and computing with privacy guarantees;
• semantic and goal-oriented communications evaluated by task reliability;
• energy-aware cell-free and distributed architectures;
• secure open interfaces and verifiable supply chains;
• resilient non-terrestrial and terrestrial integration;
• spectrum sharing supported by trustworthy sensing;
• low-cost, repairable, and recyclable radio hardware;
• formal methods for safety-critical wireless control; and
• inclusive design metrics that capture affordability and meaningful use.

Research quality requires reproducible channel models, realistic hardware impairments, adversarial evaluation, lifecycle boundaries, uncertainty reporting, and comparison with strong practical baselines. A simulation showing a gain under perfect channel knowledge is not sufficient evidence for deployment. Researchers should report computational energy, training-data assumptions, control overhead, failure cases, and the conditions under which a proposed advantage disappears.

Best-Practice Framework for Strategic Decisions

A repeatable decision process is:

1. Define the mission, users, critical functions, and unacceptable harms.

2. Map assets, data flows, dependencies, stakeholders, and regulatory duties.

3. Establish a conventional baseline and identify the specific gap.

4. Compare technical alternatives using common performance, security, cost, and lifecycle metrics.

5. Test threats, faults, uncertainty, edge cases, and equity impacts.

6. Pilot with independent measurement and meaningful user participation.

7. Use staged investment gates tied to evidence rather than publicity milestones.

8. Deploy monitoring, incident response, update procedures, and sunset criteria.

9. Review outcomes and revise assumptions throughout the lifecycle.

Chapter Summary

Wireless communication is strategic infrastructure whose value depends on more than throughput and latency. Physical-layer security can exploit channel and spatial properties, but it complements rather than replaces cryptography, authentication, and secure lifecycle management. Privacy must address metadata, location, sensing, and inference as well as payloads. Jamming resilience requires anticipation, absorption, adaptation, recovery, and learning.

Spectrum and standards governance shape competition, interoperability, public interest, and security. Electromagnetic-exposure assessment must use frequency- and configuration-appropriate quantities and transparent testing. Ethical AI requires valid purposes, representative data, robustness, oversight, auditability, and contestability. Digital inclusion includes affordability, accessibility, skills, safety, and meaningful use.

Sustainability requires lifecycle accounting of embodied and operational impacts, while techno-economic analysis must include total ownership cost, uncertainty, dependencies, and residual value. RIS, THz, and ISAC offer important opportunities but introduce control, alignment, privacy, exposure, supply-chain, and lifecycle risks. Sound future strategy therefore links innovation to measurable need, staged evidence, resilience, social legitimacy, and responsible governance.

Key Terms

Physical-layer security: Protection that exploits wireless-channel, propagation, antenna, and signal properties.

Secrecy capacity: Maximum reliable confidential rate under a specified legitimate and eavesdropper channel model.

Mutual authentication: Procedure in which both communicating entities verify one another.

Privacy: Control over collection, inference, use, disclosure, and retention of information about people or organizations.

Jamming: Deliberate interference intended to degrade or deny wireless communication.

Resilience: Ability to anticipate, withstand, adapt to, recover from, and learn from disruption.

Spectrum governance: Policies and institutional processes that allocate and coordinate radio-frequency use.

Standards governance: Processes that develop, maintain, review, and enforce technical specifications.

Specific absorption rate: Rate at which radio-frequency energy is absorbed per unit mass, measured in watts per kilogram.

Digital inclusion: Availability, affordability, accessibility, skills, safety, and meaningful use of digital services.

Lifecycle assessment: Evaluation of impacts from material extraction through manufacture, operation, and end of life.

Total cost of ownership: All relevant acquisition, operation, maintenance, risk, and disposal costs over an asset’s life.

Reconfigurable intelligent surface: A controllable surface that modifies electromagnetic propagation through programmable elements.

Terahertz communication: Wireless communication using very high-frequency bands offering large bandwidth but severe propagation and implementation challenges.

Integrated sensing and communication: Joint use of wireless resources and infrastructure for data transmission and environmental sensing.

Network slicing: Logical partitioning of shared network resources to provide differentiated services.

Supply-chain security: Protection against compromise or weakness in vendors, components, software, updates, and logistics.

Privacy budget: A quantitative limit on cumulative privacy loss in repeated privacy-preserving data releases.

Risk register: Structured record of threats, vulnerabilities, consequences, controls, owners, and residual risks.

Responsible AI: Design, deployment, and governance of AI that address safety, fairness, privacy, transparency, accountability, and sustainability.

Review Questions

Short Answer Questions

1. Why is physical-layer security not a substitute for cryptographic security?

2. Distinguish authentication from authorization.

3. Identify four stages of wireless resilience.

4. Why must embodied impacts be included in wireless sustainability analysis?

5. State two privacy risks created by ISAC.

Long Answer Questions

1. Explain how a wireless network can combine authentication, privacy, physical-layer security, and anti-jamming measures.

2. Discuss the major governance challenges involved in spectrum sharing and open wireless standards.

3. Compare the opportunities and limitations of RIS, THz communication, and ISAC.

4. Develop a lifecycle sustainability framework for a private industrial wireless network.

5. Explain how ethical AI principles should be applied to automated radio-resource management.

Analytical / Application Questions

1. A hospital network experiences intermittent service loss near an emergency department. Construct a threat-and-fault analysis that distinguishes congestion, accidental interference, and deliberate jamming, and recommend resilient controls.

2. A regulator must choose between exclusive licensing and local shared access for an industrial band. Propose decision criteria covering efficiency, competition, public interest, security, and inclusion.

3. Design a staged evaluation plan for an RIS-assisted smart-campus network. Specify baseline metrics, security tests, lifecycle data, user-impact measures, and deployment-gate conditions.

Multiple Choice Questions with Answers

Question 1

In the idealized wiretap-channel expression Cs = [Cb − Ce]+, what does Cs represent?

A. Total transmit power

B. Secrecy capacity

C. Eavesdropper noise power

D. Channel bandwidth

Correct Answer: B. Secrecy capacity

Question 2

Which function determines what an authenticated device is permitted to do?

A. Authorization

B. Encryption

C. Modulation

D. Frequency allocation

Correct Answer: A. Authorization

Question 3

Which measure is especially associated with deliberate interference intended to deny wireless service?

A. Jamming

B. Pseudonymization

C. Beam training

D. Spectrum sensing only

Correct Answer: A. Jamming

Question 4

Which item is part of operational resilience?

A. Ignoring partial failures

B. Maintaining a tested fallback mode

C. Using one centralized link for every critical function

D. Removing incident monitoring

Correct Answer: B. Maintaining a tested fallback mode

Question 5

Why is payload encryption alone insufficient for privacy?

A. It prevents all authentication

B. Metadata such as location and timing may still reveal sensitive information

C. It increases antenna gain

D. It eliminates the need for access control

Correct Answer: B. Metadata such as location and timing may still reveal sensitive information

Question 6

Which quantity is expressed in watts per kilogram?

A. Power density

B. Specific absorption rate

C. Bandwidth

D. Spectral efficiency

Correct Answer: B. Specific absorption rate

Question 7

What is a central practical limitation of THz communication?

A. It has no potential for large bandwidth

B. It is unaffected by blockage

C. It faces severe propagation loss and alignment challenges

D. It cannot use directional antennas

Correct Answer: C. It faces severe propagation loss and alignment challenges

Question 8

What does an RIS primarily do?

A. Generate all network traffic independently

B. Modify electromagnetic propagation through controllable elements

C. Replace every cryptographic function

D. Guarantee zero interference

Correct Answer: B. Modify electromagnetic propagation through controllable elements

Question 9

Which item should be included in a lifecycle energy assessment?

A. Only the receiver’s idle power

B. Only spectrum-auction revenue

C. Embodied, operational, maintenance, and end-of-life energy

D. Only peak data rate

Correct Answer: C. Embodied, operational, maintenance, and end-of-life energy

Question 10

Why does ISAC create additional governance obligations?

A. It cannot transmit data

B. It may infer people, spaces, and behaviour through sensing

C. It eliminates privacy concerns

D. It operates only in wired networks

Correct Answer: B. It may infer people, spaces, and behaviour through sensing