Cyber Threats

The new Requirement for a Fifth Dimension of war: Cyber Intelligence
Gokhan Bayraktar
ICCWS2014-9th International Conference on Cyber Warfare & Security: ICCWS 2014, 9, 2014
The structure and operational domain of intelligence concept has been evolving continuously in parallel to the change in threat perceptions since it became a discipline more than half a century back. The difficulties encountered in defining the Intelligence concept and its operational domain is a significant barrier to the construct of intelligence theory despite the steady transformation. It is observed that effective utilization of outer space and intelligence surveillance reconnaissance (ISR) functions, such as electronic‐war capabilities and remote detection, are as important as command control systems and warfare weapons in present day military expeditions, with respect to comparing military operational excellence and power. Moreover, it is also noticed that nations make use of invisible attacks and cyber space as a defense system during pre‐war, crisis and low intensity collisions period without employing conventional arms in addition to countries efforts to obtain new capabilities. All these developments brought a new approach to the war area. Indeed, specific intelligence started to dominate the field in comparison to conventional intelligence due to the quick progress in cyber space. Cyber‐attacks, which can be classified as an asymmetric warfare, are not only used as a support tool to conventional wars but also considered as an independent war type on its own so that it brings a new dimension to the military operations. It is predicted that attacks in cyber space will be more dangerous than conventional assaults because the usage of information technology spreads out quickly as well. Cyber‐attacks that usually target the information systems of the governments’ critical departments, are a great threat, especially for the nations that are heavily dependent on the cyber space domain. The importance of cyber‐attacks rise daily because the challenge to detect the source of the attack might be initiated through a wide spectrum of profiles ranging from simple individuals to complex organizations. Moreover, these attacks make a great impact despite their low cost. Furthermore, they are initiated through invisible methods where conventional weapons are not even utilized. Hence, the concept of cyber intelligence looms large against this threat. This paper strives to explain that cyber‐attacks can be classified as a new type of warfare, because it threatens national securities and happens in cyber space, a domain that does not have any defined borders in international relations. In addition to the above, this study defines cyber intelligence concept and its operational domain as well as puts forth the methodology for consideration in order to gain the advantage in cyber‐attacks and to make analysis on the threat.

The book faces an essential contemporary issue: the definition of the limits of action, protection and use of cyberspace as a fifth operational domain, as well as in the measures to be taken to make this environment more secure. Using the term adopted by the US Department of Defense, the authors use practical experience to indicate an agenda that aims to create means to improve the defense of areas such as state security, economics, democracy and privacy.

—The increasing need to implement on-line services for all industries has placed greater focus upon the security controls deployed to protect the corporate network. The demand for cyber security is further required when IT solutions are built to operate in the cloud. As more business activities are migrated to the on-line channel the security protection systems must cater for a variety of applications. This includes access for enterprise users who are mobile, working from home, or situated at business partner locations. One set of key security measures deployed to protect the enterprise perimeter include firewalls, network routers, and access gateways. In addition, a set of controls are also in place for cloud enabled IT solutions. Collectively these components make up a set of protection systems referred to as the security zones. In this paper, a security zone model that has been deployed in practice for the industry is presented. The zone model serves as a design blueprint to validate existing architectures or to assist in the design of new cyber security zone deployments.

—With the increase in cyber threats and attacks many institutions are exploring how newer technologies may be applied to strengthen the way users are verified when bestowing permissions for carrying out web transactions. In particular, many institutions are under increasing pressure to improve the security instruments used to authenticate users, while permitting access to their personal records to approve transactions. Whilst multifactor authentication protocols have been adopted to validate more sensitive transactions, this has added an additional physical interaction during the verification process. More recently, the industry has turned its attention to the use of biometric authentication as a way to securely verify user identities. This has reduced the complexity associated with existing authentication processes that require passwords, tokens, and challenge-response keywords. This paper explores these new authentication techniques, discussing the benefits while highlighting the challenges in practice to using biometrics. In particular, identity theft of biometric markers and its potential impact to customers and liability challenges for institutions are presented.

Connectivity provides a safer environment, but it also acts as a backbone to provide attack surface to hackers. There are millions of cars on the road today, and so many are expected to be in future; there might be a risk to the passengers, vehicle drivers, etc. Methods/statistical analysis: This study discusses the issue of car hacking which is one of the real threats to automobile as well as automation, and how we can prevent it by studying the details about the controller area network (CAN) bus architecture so that the auto manufacturer gives more emphasis to developing a secure vehicular information system. Findings: Hackers gain access to the car system via the internet, Bluetooth, etc. As much as a car is automated, it is much more vulnerable to cyber-attack. When a car is connected to the internet, it provides access to the vehicle’s delicate CAN bus. Hackers can hijack non-safety and safety-critical functions such as steering, accelerator, brake and clutches by sending commands. Improvements/applications: This study gives a general overview of how we can validate the security features of the vehicle so that we can secure our vehicle from black hat hackers, resulting in saving millions of people who could be a victim of such menacing cyber-attacks.

The paper describes the evolution of cyber-attacks, based on different official reports from law enforcement
agencies and cybersecurity companies. It focuses on the EMPACT priority ‘cybercrime-attacks on information systems’ and analyses the main types of malware (banking trojans, ransomware, cryptojacking and botnets malware) and their evolution during the COVID-19 Pandemic. The paper presents both online threats vectors (email-based attacks, web-based attacks, social media scams) and offline threats and their impact to the information systems.
The present article underlines the importance of education and training in this field and recommends measures to fight with the cybercrime phenomenon.

The emerging of new technology is making easier for people to access things in seconds just like the platform of the internet as it has become a crucial part of everyone's life. It enables people to share information worldwide very fast. But the most challenging here is the security of systems as cyber-crimes are increasing day by day. Cyber threats are now very complex and evasive. Though many organizations have come forward with various solutions using different tools as privacy is a major concern for the data amount is very large to handle nowadays and regular updates are required to confront such attacks. This paper focuses on an analysis of cybersecurity and its challenges with the application of different strategies implementations. keywordscybersecurity, cyber-crimes, attacks, IoT, block chain.

Cyber Civilization has become an important source of information sharing and professional activities like business, banking transactions, shopping, services and advertisement. With the exponentially increase in usage of cyberspace, cybercriminal actives are also increase exponentially. The basic reasons is that with the inception of world wide web, the web applications were also getting popularity for data storing and data sharing, irrespective of the user. With the passage of time web applications were getting more complex with rapid increase in their design faults, creating the surfing of internet totally unsafe. More than 90 percent web applications have some kind of design or development fault which can be easily exploited by the cyber criminals. These faults in web application can help criminals in getting the illegal access to trade secrets of any business. Sometime the web application may not be posing threat but the technology used in these applications become the root cause and put the application to the risk of illegal access. Presently the social networks, Internet connected mobile devices, individual privacy, and the online connectivity of entities such as banks are the most enticing targets for cyber criminals. In this survey we highlight the common cyber threats and detailed analysis of existing system and methodology used for its industrial solutions. Some important some industrial application also analyzed this paper.

Cyber-attacks represent a potential threat to information security. As rates of data usage and internet consumption continue to increase, cyber awareness turned to be increasingly urgent. This study focuses on the relationships between cyber security awareness, knowledge and behavior with protection tools among individuals in general and across four countries: Israel, Slovenia, Poland and Turkey in particular. Results show that internet users possess adequate cyber threat awareness but apply only minimal protective measures usually relatively common and simple ones. The study findings also show that higher cyber knowledge is connected to the level of cyber awareness, beyond the differences in respondent country or gender. In addition, awareness is also connected to protection tools, but not to information they were willing to disclose. Lastly, findings exhibit differences between the explored countries that affect the interaction between awareness, knowledge, and behaviors. Results, implications, and recommendations for effective based cyber security training programs are presented and discussed.

Hypertext pre-processor (PHP), a server side scripting language very often used to develop a web application. Web application has a big importance in communication over internet. Web applications got very fast growth in past some time. To pay bills, shopping, transactions, emails, social networking every days billions of users using these web application on in internet. Though web applications are very effective and time saving still security threats is also there. Now a day’s most of the application facing problem of security and data integrity. This study is to give different types possible attacks on web application which is developed by using php and how we anticipate such attack and prevent from them for future.

Wireless Networking technology is now one of the most popular technologies but still there are drawbacks which are closely associated with Wireless Networks. In wireless network communication, the data is transferred from one point to another point through radio waves which makes wireless networks weak for attacks. To eliminate threats, understanding about said attacks always provides good ability to defend wireless network. This research paper will describe the overview of the wireless technology with its drawbacks, Present security and privacy issues, Potential wireless network Security threats (unauthorized access, Active eavesdropping, Man in the Middle Attack, Denial of
Service and etc), Tools that hackers often use to exploit vulnerabilities in wireless networking (NetStumbler, Kismet, Airsnort, Airsnarf, Airjack and etc) and will propose the best ways to secure Wireless Network.

This chapter is focused on the research results in the area of organizational and functional changes pertaining to the NATO Command and NATO Force Structure in the light of activity corresponding  to the safety and security of cyberspace as the result of the NATO Summits addressed in Strategic Concepts and Declarations from Washington Summit’s 1999 beginning. Scientific findings were developed under transparent methodology when considered courses of action were tested by qualitative and quantitative  factors within various constraints and restraints given and relevant to the NATO capabilities necessary to accomplish missions and tasks drawn from the strategic planning scenario in the NATO AOR. The key aspects of the research are aimed on the critical infrastructure protection and a new approaches to the 5th domain of the battle space – cyberspace. Other leading factors subject research are relevant to NATO level of Ambition influenced by Interopearability and Standardization in Communication and Information System settled within Defence Planning Process associated with Threat,  Capability and Knowledge with whole range of cybersecurity  possible violations included.

With the U.S. government acknowledgement of the seriousness of cyber threats, particularly against its critical infrastructures, as well as the Department of Defense officially labeling cyberspace as a war fighting domain, the Cold War strategy of deterrence is being applied to the cyber domain. However, unlike the nuclear realm, cyber deterrence must incorporate a wide spectrum of potential adversaries of various skill, determination, and capability, ranging from individual actors to state run enterprises. What’s more, the very principles that achieved success in deterring the launch of nuclear weapons during the Cold War, namely the threat of severe retaliation, cannot be achieved in cyberspace, thus neutralizing the potential effectiveness of leveraging a similar strategy. Attribution challenges, the ability to respond quickly and effectively, and the ability to sustain a model of repeatability prove to be insurmountable in a domain where actors operate in obfuscation.

Since the late 1990s, the UN has been home to debates and negotiations on the rules, norms and principles of states' responsible behaviour in cyberspace. As these discussions matured over years, they have been taken further to different fora and have been embedded in various stakeholder initiatives. In early 2021, the Open-Ended Working Group on Developments in the Field of ICTs in the context of international security (OEWG) and the UN Group of Governmental Experts on advancing responsible state behaviour in cyberspace in the context of international security (GGE) presented their respective consensus reports, the result of over two years work. It is not only the content of this work per se that is of interest - both in what has been achieved and which parts of these mandates were less successful. These processes, historically due to the two-decades-long GGE efforts, are shaping more than just the states' commitments around cyber strategies. They help build an overarching normative environment shifting priorities in cyber risk management and contribute to the development of voluntary tech-norms, while doing this out of sync with the implications of the emerging technologies for state as well as non-state actors' accountability in cyberspace.

https://www.tandfonline.com/doi/full/10.1080/23738871.2021.2020316

INPRESEC (Intelligent Predictive Security) – Network and end-point security. Detects anomalies in behavior, security threats and attacks. Exploring the paradigm shift in Information Security and Privacy with Artificial Intelligence and Machine Learning. Novel approach to cyber security to predict the most likely cyber-attacks and to plan optimal preventive and proactive cyber-security defensive measures.

Critical infrastructures are the physical and virtual systems essential to the minimum operations of the economy and the government. Critical Infrastructure Protection (CIP) is a critical agenda item for governments in the developed countries. In these countries, policies and procedures on CIP are already in place and required laws are in action as well. In Turkey, some official introductory studies have been performed in 2009. However, there are a number of steps that Turkey still has to take. In this study, key definitions are provided firstly. After the definitions, the efforts of USA, EU, OECD and NATO are summarized. The last two sections of the paper are dedicated to the steps taken by Turkey and the challenges still ahead Turkey.

This paper aims to evaluate NATOs’ “Smart Defense” policy in the view of the continuing significance and global roles of the Alliance. Smart  defense being an integrative part of the collective defense of NATO, it is required to respond to existing threats and challenges through the use of new operational and tactical elements, which should include flexibility and the adaptive use of technology.
Current and future strategic threats and challenges require NATO to re-examine policy and operational posture. This includes building on NATOs future strategy, through adaptable policy and procedure. Through NATOs’ cyber-defense policy, greater resilience when dealing
with threats can be achieved. A methodological approach will be presented on to how to integrate NATOs collective defense,
through cyber-defense policy, to the 21st challenges and threats. NATOs resilience policy, if adopted at the Warsaw Summit in July 2016, will become an integrated part of NATO’s Smart Defense and collective defense. It will create a new standardized form of procedure,
which will afford flexible strategic and operational forces but also commanding forces, through the use of multi-level and multi-dimensional tools.

Abstract:  The exponential growth of the internet and new technology lead today's world in a hectic situation both positive as well as the negative module. Cybercriminals gamble in the dark net using numerous techniques. This leads to cybercrime. Cyber threats like Malware attempt to infiltrate the computer or mobile device offline or internet, chat(online), and anyone can be a potential target. Malware is also known as malicious software is often used by cybercriminals to achieve their goal by tracking internet activity, capturing sensitive information, or blocking computer access. Reverse engineering is one of the best ways to prevent and is a powerful tool to keep the fight against cyber attacks. Most people in the cyber world see it as a black hat—It is said as being used to steal data and intellectual property. But when it is in the hands of cybersecurity experts, reverse engineering dons the white hat of the hero. Looking at the program from the outside in –often by a third party that had no hand in writing the code. It allows those who practice it to understand how a given program or system works when no source code is available. Reverse engineering accomplishing several tasks related to cybersecurity: finding system vulnerabilities, researching malware &analyzing the complexity of restoring core software algorithms that can further protect against theft. It is hard to hack certain software.
Keywords: Malware, threat, vulnerablity, detection, reverse engineering, analysis.
Title: Malware analysis and detection using reverse Engineering
Author: B.Rashmitha, J. Alwina Beauty Angelin, E.R. Ramesh
International Journal of Computer Science and Information Technology Research
ISSN 2348-1196 (print), ISSN 2348-120X (online)
Vol. 10, Issue 2, Month: April 2022 - June 2022
Page: (1-4)
Published Date: 01-April-2022
Research Publish Journals
Available at website: www.researchpublish.com
You can download full research paper at given below link:
https://www.researchpublish.com/papers/malware-analysis-and-detection-using-reverse-engineering

Throughout the world, every field has obtained a drastic transformation. The ultimate reason is digital technologies. This change made better performances of individual, industries, government, private organizations etc. Even this revolution brought many reward, this also has harmful side that is cyber threat. The attention must be turn to cyber threat at the same time when we are getting benefit from these digital technologies. Cyber threats are improving its intelligence day by day. The updating of knowledge in recent threats is significant one to prevent from this harm. This paper tries to find out what are the modern cyber attacks made and research over those.

In the twenty-first century, globalisation made corporate boundaries invisible and difficult to manage. This new macroeconomic transformation caused by globalisation introduced new challenges for critical infrastructure management. By 123 Security threats to critical infrastructure: the human… 4987 replacing manual tasks with automated decision making and sophisticated technology , no doubt we feel much more secure than half a century ago. As the technological advancement takes root, so does the maturity of security threats. It is common that today's critical infrastructures are operated by non-computer experts, e.g. nurses in health care, soldiers in military or firefighters in emergency services. In such challenging applications, protecting against insider attacks is often neither feasible nor economically possible, but these threats can be managed using suitable risk management strategies. Security technologies, e.g. firewalls, help protect data assets and computer systems against unauthorised entry. However, one area which is often largely ignored is the human factor of system security. Through social engineering techniques, malicious attackers are able to breach organisational security via people interactions. This paper presents a security awareness training framework, which can be used to train operators of critical infrastructure, on various social engineering security threats such as spear phishing, baiting, pretexting, among others.

This study seeks to contribute to the literature by presenting a discussion of potential cyber risks and precautionary measures concerning unmanned vehicles as a whole. In this study, Global Navigation Satellite System (GNSS) spoofing, jamming, password cracking, denial-of-service (DoS), injecting malware, and modification of firmware are identified as potential cyberattack methods against unmanned vehicles. Potential deterrents against the aforementioned cyberattack methods are suggested as well. Illustrations of such safeguards include creating an architecture of the multi-agent system, using solid-state storage components, applying distributed programming tools and techniques, implementing sophisticated encryption techniques for data storage and transmission, deploying additional sensors and systems, and comparing the data received from different sensors.

This chapter looks at what makes cyber-security a key national security issue. Section 28.2 provides background information to understand why cyberspace is insecure and what it takes to hack a system. Section 28.3 looks at different types of politically relevant cyber-operations, describing hacktivism, cyber-crime , cyber-espionage , cyber-terrorism and cyber-war , among others. Section 28.4 sets the threat into perspective, exploring the realities of cyber-conflict. The debate has shifted from scenarios of imminent cyber-doom to the observable reality of often stealthy, sometimes disruptive operations under the threshold of war. Section 28.5 details selected protection concepts that help
to reduce cyber-risks.

The emerging of new technology is making easier for people to access things in seconds just like the platform of the internet as it has become a crucial part of everyone's life. It enables people to share information worldwide very fast. But the most challenging here is the security of systems as cyber-crimes are increasing day by day. Cyber threats are now very complex and evasive. Though many organizations have come forward with various solutions using different tools as privacy is a major concern for the data amount is very large to handle nowadays and regular updates are required to confront such attacks. This paper focuses on an analysis of cybersecurity and its challenges with the application of different strategies implementations. keywords-cybersecurity, cyber-crimes, attacks, IoT, block chain.

Cyber and its related technologies such as Internet was introduced to the world only in late 1980s, and today it is unimaginable to think of a life without these all pervasive technologies. Despite being ubiquitous around the world, cyber technology is still seen as an enigma by many, mainly due to its rapid development and high level of science involved with it. In addition to the existing complexities of the technology, the level of threat matrix surrounding the cyber domain further lead to various misconceptions and exaggerations apart from elevating the complexity to a few notches above. It is evident that the world in the future is going to be fully dependent on the cyber technology and hence humans are forced to understand this complex domain in order to survive and evolve successfully as 'technological' beings. It is in this context of understanding the enigma around the cyber domain, the book attempts to analyse and disentangle the various issues related to cyber technology. The book also attempts to unravel the various threats that terrorise the cyber world in detail by categorising them according to the perpetrators. The book aims to decrypt the cyber domain and at the same time exhibit the realities in terms of the threat vector, technological sophistication and the rapid development of the domain itself. The book also tries to present the existing reality of cyber environment in India and charts out a few recommendations and suggestions for enhancing the country's cyber security architecture. The eight chapters of the book attempts to decipher the cyber world through detailed analysis of the various issues like hacking, dark web, cyber enabled terrorism, covert cyber capabilities of countries like the US and China apart from studying the cyber environment of India.

There are few more critical questions in the field of cyber security than the issue of how to prevent malicious cyber actions and the utility of deterrence in the cyber domain. For many, deterrence will protect us from an uncertain cyber future. Yet, the proliferation of scholars and academics conceptually stretching an age old or nuclear era concept to the new domain prevents the development of logics that might be more applicable and progressive in this transformative digital age. Put simply, cyber deterrence is logically problematic, empirically unsupported, and impractical to put into practice in cyberspace. The most powerful states in the world, conventionally or in terms of cyber power, are constantly attacked and probed, yet their capabilities do not deter the adversary given the conditions of the cyber framework. Building more powerful systems, making clear the threats and consequences of actions, or extending the threats to conventional actions will not save deterrence and make it work. Instead the concept of restraint offers a more viable perspective by which to understand cyber conflict dynamics and perhaps offers a better way to manage future interactions. This article explores the evolution of the concept, its application to the cyber domain, the problems with its implementation and logic, and the policy implications of our inability to move beyond the concept. By giving up the crutch of deterrence, strategists can finally focus on the important tasks required in the cyber domain-defenses, hygiene, understanding restraint dynamics, and shared norms and institutions that might make a cyber future a safe one. A clear intellectual debt is owed to