Cyber Security

The focus of the article revolves around NATO’s roadmap of smart defense against cyber attacks as the bedrock of Euro-Atlantic security. The author discloses NATO’S new policy and cutting-edge technical initiatives, aimed at focusing on countering global threats and cyber security challenges. It is stressed out, that new ideas towards a more synergetic approach between all the NATO Cyber Defense agencies should be explored to develop a shared framework for cybersecurity that might provide up-to-the date intelligence in order to ensure the development, acquisition and maintenance of the necessary military capabilities. The research highlights the core aspects of the 2010 Lisbon Summit that adopted NATO’s Strategic Concept ‘Active Engagement, Modern Defense: Strategic Concept for the Members of the North Atlantic. Treaty Organization’, that recognizes Cyber Defense as one of its strategic priorities. In particular, to foster Allied Nations’ cooperative efforts to counter terrorism, cyber attacks, prevent the proliferation of nuclear weapons and other weapons of mass destruction (WMD), Reinforce energy security and environmental constraints. Develop the capacity to contribute to energy security, including protection of critical energy infrastructure and transit areas and lines, cooperation with partners, and consultations among Allies on the basis of trategic assessments and contingency planning; In July 2011, NATO Defense Ministers adopted revised NATO Policy on Cyber Defense, which highlighted three areas: • The principles of subsidiarity and proportionality, which involve the assistance provided only upon request, in any other cases, the principle of selfresponsibility of sovereign states is applied; • Avoiding unnecessary duplication of the structures or capabilities and approaches on the international, regional and national levels; • Collaboration based on trust, with regard to the potential sensitivity and vulnerability of the system, the access to which has to be given. After the 2014 Wales Summit, in the revised NATO Cyber Defense Policy, cyber threats were identified as a potential prerequisite for collective defense under the Article 5 of the NATO Treaty. Noteworthy, Cyber Security is responsible for providing the broad spectrum of services in the following specialist security areas: CIS Security, Cyber Defense, Information Assurance, and Computer & Communications Security. Cyber defense is provided by many Alliance bodies: any NATO response concerning collective defense against cyber attacks will be subordinated to the North Atlantic Council (NAC), The Cyber Defense Committee (CDC) – the leading advisory body of the NAC. The executive level is represented by The Cyber Defense Management Board (CDMB), NATO Communications and Information Agency (NCI Agency), Cyber Security incorporates the NATO Computer Incident Response Capability (NCIRC) Technical Centre, providing specialist services to prevent, detect, respond to and recover from cyber security incidents.

Cybersecurity is an active and important area of study, practice, and research today. It spans various fields including cyber terrorism, cyber warfare, electronic civil disobedience, governance and security, hacking and hacktivism, information management and security, internet and controls, law enforcement, national security, privacy, protection of society and the rights of the individual, social engineering, terrorism, and more. This book compiles original and innovative findings on issues relating to cybersecurity and threats. This comprehensive reference explores the developments, methods, approaches, and surveys of cyber threats and security in a wide variety of fields and endeavors. It specifically focuses on cyber threats, cyberattacks, cyber techniques, artificial intelligence, cyber threat actors, and other related cyber issues. The book provides researchers, practitioners, academicians, military professionals, government officials, and other industry professionals with an in-depth discussion of the state-of-the-art advances in the field of cybersecurity.

The connection of physical devices, buildings, home appliances, vehicles, and other things embedded with electronics, sensors, software, and actuators that facilitate these objects in networking is called the Internet of Things (IoT). IoT has drastically changed our lives by way of automating jobs across almost all industries. The application and adoption of it in industrial machine utilization, industrial processes, and manufacturing is known as the Industrial Internet of Things (IIoT). This IIoT is coined Industry 4.0, and is a subclass of IoT that focuses on industrial applications such as machine control and maintenance, optimizing industrial robotic systems in manufacturing, and industrial central monitoring systems. Integrating the operations of manufacturing companies in Industry 4.0 means exposing the company’s IT infrastructure and data, which makes it more susceptible and vulnerable to cyber threats. Shielding IIoT against cyber threats is crucial in order to control and stimulate the economic engine of the future. Protecting cyber systems from thievery and adversaries is essential since it includes everything that is appropriate for securing sensitive data, personal information, cerebral property, industry, and governmental information systems. Cyber security refers to the umbrella of processes, technologies, and tools intended to protect networks, programs, devices, and data from various cyber attacks, damage, and unauthorized access. Cyber security ought to be an essential part of design, strategy, and operations, and needs to be focused on from the start for any new connected, Industry 4.0-driven approach. This chapter focuses on providing a clear understanding of cyber space, cyber systems, and the security challenges inherent to Industry 4.0.

Globally, internet usage has grown rapidly over the decades. However, this increase in usage of ICT and internet arouses cyber-security challenges such as Data Privacy, malicious cyber-attacks etc. Cyber defense and threat prevention can be managed gracefully if we have better knowledge about the threat trends, attack patterns and advance preparedness to handle victimized situations. In this paper, we study different elements of cyber security, types of cyber threats and their articulation. We further perform data analysis of attack patterns of cyber threats and malicious activities over APCERT countries (India, Japan, Sri Lank and Singapore). We investigate the most targeted countries, most common malwares and sectoral distribution of cyber threats. We also analyze the effect of COVID-19 outbreak over the attack patterns and global trends.

The increasing digitalization of our society has brought about numerous benefits, enabling seamless communication, convenient transactions, and efficient operations. However, with this growing reliance on interconnected systems and information technology, the risk of cyber-attacks has also surged. Cyber threats, such as data breaches, ransomware, and sophisticated malware, have become more prevalent, threatening the confidentiality, integrity, and availability of critical data and services. Organizations across industries face the daunting challenge of defending against a wide array of cyber-attacks that continue to evolve in complexity and stealth. In response to this ever-changing cyber threat landscape, Cyber Security Risk Management (CSRM) and attack detection have become critical components of any comprehensive cybersecurity strategy. The ability to identify and mitigate cyber risks and swiftly detect malicious activities is paramount for safeguarding sensitive information, preserving business continuity, and maintaining the trust of customers and stakeholders. A novel approach to Cyber Security Risk Management through an Attack Detection Model that utilizes Semi-Supervised Learning Auto-Encoders in conjunction with Probabilistic Bayesian Networks. The study compares the performance of Multi Connect Variational Auto-Encoder (MC-VAE), Probabilistic Bayesian Networks (PBN), and a combined model of MC-VAE and PBN. The study employs the NUSW-NB15_GT dataset for training and evaluation purposes. Notably, the Semi-Supervised Learning with Probabilistic Bayesian Networks (SSL-PBN) model demonstrates exceptional results, achieving a precision rate of 94% and a recall rate of 90%. The F1 score of 0.9191 highlights the SSL-PBN model's efficacy in achieving a balanced trade-off between precision and recall, critical for minimizing false positives and false negatives...

Thousands of cyber-attacks (fraudulent online activities to acquire users' sensitive information via email, during online transactions, live video streaming, online gaming and browsing) are launched every day against Internet users across the world. To prevent these attacks, researchers have responded with a number of protection systems. Currently, the methods which cyber-attackers use to conduct attacks is associated with exploiting humans. Such attacks are recorded more frequently than before, and they are more challenging to control. Traditional security countermeasures are unable to prevent breaches targeting the human element. This paper describes the state of the art of cyber security attacks, countermeasures, and protection tools related to everyday online activities. It provides a useful cyber-attack taxonomy and classification which helps to involve in a protection process to identify attacks and measures for cyber security. Existing protection schemes that target the cyber threats and risks are evaluated against three of our criteria for an effective measure: resilience to cyber-attacks' countermeasures; real-time support and needs-based action; and training and educational materials to increase users' awareness of cybercrimes. Potential features of smart solutions to cybercrime are also identified.

Botnets are used for malicious activities such as cyber-attacks, spamming, and data theft and have become a significant threat to cyber security. Despite existing approaches for cyber attack detection, botnets prove to be a particularly difficult problem that calls for more advanced detection methods. In this research, a stacking classifier is proposed based on K-nearest neighbor, support vector machine, decision tree, random forest, and multilayer perceptron, called KSDRM, for botnet detection. Logistic regression acts as the meta-learner to combine the predictions from the base classifiers into the final prediction with the aim of increasing the overall accuracy and predictive performance of the ensemble. The UNSW-NB15 dataset is used to train machine learning models and evaluate their effectiveness in detecting cyber-attacks on IoT networks. The categorical features are transformed into numerical values using label encoding. Machine learning techniques are adopted to recognize botnet attacks to enhance cyber security measures. The KSDRM model successfully captures the complex patterns and traits of botnet attacks and obtains 99.99% training accuracy. The KSDRM model also performs well during testing by achieving an accuracy of 97.94%. Based on 3, 5, 7, and 10 folds, the k-fold cross-validation results show that the proposed method’s average accuracy is 99.89%, 99.88%, 99.89%, and 99.87%, respectively. Further, the demonstration of experiments and results shows the KSDRM model is an effective method to identify botnet-based cyber attacks. The findings of this study have the potential to improve cyber security controls and strengthen networks against changing threats.

Purpose of the study: This study aimed to explore cyber-security and cyber threats in social media. It includes an analysis of how social media is used as a tool for cyberattacks, the kinds of cyberattacks, and what people are doing to prevent them.
 Methodology: The paper was prepared using the critical literature review method, mainly in cybersecurity and cyber threats in social media.
 Main findings: Cybersecurity experts have warned that social media sites like Facebook, Twitter, and Instagram are particularly vulnerable to cyber-attacks because they are used extensively by companies and governments to distribute propaganda, to launch cyberattacks and are full of personal information (like passwords) that can be valuable to criminals.
 Application of the study: The presented article refers to cybersecurity and cyber threats in social media. It implies reflections in such scientific fields as, among others, security sciences.
 The study's originality: The study identifies cyber security measures used to handle the identified threats.

The tremendous growth of information technology has abruptly changed the world into global village. It has caused the distances to shrink and information to flow across the globe as it occurs. At the same time it has also given boost to vulnerabilities, threats, frauds and criminals in the cyberspace. The ease of access, user friendly hacking tools and sophistication in cyber attacks has infringed the privacy of the individuals, organizations and states. Pakistan is facing multifaceted cyber threats in the present era. The cyber attacks occurred on the government, corporate and private sectors within last couple of years has been analyzed in this paper to identify nature dynamics of threat to Pakistani ICT infrastructure and resources. The study highlights wide range and variety of cyber threats ranging from normal website defacement to sophisticated and persistent cyber threat. Further, existing response capability at government and organizational level is evaluated and the shortcomings have been highlighted. It is feared that non existence of any cyber security laws, void of response mechanism and lack of organizational framework in the country may offer Pakistan cyberspace a heaven for the criminals and malicious operators / users. It is noted that Pakistan government not only requires realization of cyber threats and consequences of its uncontrolled usage but also needs appropriate response mechanism to guard against such threats. A top level organizational structure is proposed in this paper for establishment of essential cyber security bodies at different tiers, responsible for securing cyber space of the country by introducing necessary legislation and formulating the response mechanism at different government tiers.

The growing use and innovation in information technology and communication in all domains of life has made the world richer but also fragile and it has led to breach of privacy and increased dependence on the internet. Thus cyber security has become one of the major global concerns a growing nontraditional security issue. We can observe that the cyber security discourse of today emphasizes the increasing set of threats ranging from cybercrime, computer viruses, and cyber espionage. Globally cyber terrorism and cyber war are also becoming major issues that are discussed on global platforms. The complexity of the digital world and increased security risk have led to overemphasis that may violate equality, freedom of speech, and fairness. The study aims to highlight the growing paranoia that comes with the growth of cyberspace through the lens of the theory of realism, understanding that the concept of security dilemma also exists in the cyber domain. Just like traditional conflicts, states are engaged in constant power struggles in cyberspace. The study highlights the major concerns related to cyber security and cyber-warfare with its relationship to foreign policy implications for China and the U.S. The methodology applied in this study includes a comprehensive exploration of the landscape of cyber-security and cyber-warfare in China and the U.S. The chapter seeks to analyze the growing landscape of cyber security and cyber warfare and the changing nature of threats with a focus on the foreign policy implications of China and the U.S. about cyber security and warfare. A detailed comparative analysis of China and the U.S. with an understanding of differences and potentials of collaboration and conflict concerning cyber policies. The chapter will contribute to the promotion of international cooperation in addressing this new emerging global challenge of cyber security and warfare. With deep insights to understand this global threat, this research aspires to have a lasting influence on national security considerations with evidence-based suggestions and recommendations. By identifying potential areas for collaboration and examining diplomatic responses to cyber incidents. This chapter seeks to foster a more collaborative approach to secure cyber security and the implication of the phenomenon on the Foreign Policies of China and the U.S. Recognizing that Cybersecurity is entwined with international relations, the research argues that findings extend beyond the specific context of China and the U.S. The chapter aims to contribute to the vast field of international relations by shedding light on the complex between national interest, diplomatic relations, and Cybersecurity. The key argument in this study is to underscore the rapidly evolving nature of cyber warfare tactics and Cybersecurity threats and emphasize the need for an adaptive policy response to effectively counter emerging challenges in both China and the U.S.

This article analyzed North Korea's rapidly changing cyber capabilities and presented countermeasures against future threats from a military perspective. Previous studies had limitations in staying in past data with North Korea experts, so this study differentiated them based on specific latest cases. North Korea is focusing on selecting cyber warfare talents and increasing manpower, strengthening education and training systems, and upgrading cyber attack patterns and technologies, focusing on excluding background components in accordance with domestic and foreign environmental changes such as the signing of the New Treaty between North Korea and Russia, promoting local development 20×10 policies, and developing artificial intelligence (AI) technology. In particular, North Korea laid the foundation for the remarkable development of cyber warfare capabilities based on the New Treaty. In addition, cyber attacks are expanding into the social infrastructure sector to support the economic policies directly managed by Kim Jong-un. It is expected that AI technology will be applied more to North Korea's destructive cyber attacks in the future. In conclusion, Republic of Korea (ROK) should strengthen ROK-U.S. cybersecurity cooperation and develop its capabilities to fully respond to all-round cyber threats, including North Korea's cyber threats, by applying cutting-edge AI technology to cyber warfare in earnest from the perspective of total power.

The aim of the study is to identify strategic directions for ensuring economic cybersecurity of business in Ukraine. The importance of information protection in the context of the development of the digital economy is updated. The place of economic cybersecurity in the national security system is determined. A thorough analysis of the dynamics of cyber incidents in the world in recent years is carried out. The specifics of cyber threats at the macro and micro levels are outlined. The qualitative changes in the state policy of Ukraine in the field of information and cyber security are investigated. A number of the most pressing risks and threats to economic cybersecurity of business in 2023 are identified. The author proves the need for business entities to develop an effective internal policy of cyber protection of computer networks from attacks, intrusions and unauthorised access. The author considers current trends in cyber threats and describes the strategy of cybersecurity policy of business entities in Ukraine. Particular attention is paid to the intrusion detection process. The principles of operation of modern intrusion detection and prevention systems are considered in detail. The behavioural analytics of users and UEBA objects to detect security breaches is considered. Based on Microsoft Advanced Threat Analytics (ATA), the process of tracking network traffic of domain controllers to detect cyberattacks is considered. Using the example of the Azure security centre, intelligent security tools and advanced analytics are studied to detect threats faster and reduce the number of false threat alerts. The use of the proposed recommendations on cybersecurity policy will significantly increase the level of information security (confidentiality, integrity and availability) of business.

With the COVID-19 pandemic, many organizations and institutions moved to e-learning and to e-working from home. With the increase in internet usage, the rate of cyber-attacks have also increased, and this was followed by the request for more cyber security behaviors from employees and students. In the current study, the authors explore the connection between cyber security awareness, cyber knowledge, and cyber security behavior. The authors measured the behaviors among students in two similar countries: Israel and Slovenia. Results show that students felt they had adequate awareness on cyber threat but apply only a few protective measures to protect their devices, usually relatively common and simple ones. The study findings also show that awareness to cyber threats mediate the connection between knowledge and protection behaviors, but only in the case that the knowledge is specific with regard to IT protection courses. Results, implications, and recommendations for effective cyber security training programs for organizations and academic institutions are presented and discussed.

In today’s digital world, cyber security has become a top priority for companies, particularly in Jordan. Owing to the fast assimilation of technology and the growing dependence on digital platforms, enterprises in Jordan encounter an extensive array of cyber hazards that have the potential to jeopardize their information, functions, and standing. The purpose of this article is to present a thorough study of the common cyber threats and cyber security strategies in the context of Jordanian company. This research outlines the main cyber threats that Jordanian firms face, including malware, phishing attacks, distributed denial-of-service (DDoS) assaults, and advanced persistent threats (APTs), through a thorough analysis of the literature that has already been published and industry reports. Because these risks have the potential to cause data breaches, financial losses, and operational interruptions, it is crucial that businesses put strong cyber security measures. The paper delves deeper into the cyber security tactics and best practices that Jordanian companies have used to lessen these risks. Implementing intrusion detection and prevention systems, firewalls, encrypting critical data, carrying out frequent vulnerability assessments, and raising employee understanding of cybersecurity through training and educational initiatives are some of these precautions. Through an analysis of the consequences of cyberattacks and the efficacy of different cyber security strategies, this research offers important information that Jordanian companies may use to improve their cyber resilience. It also emphasizes how crucial it is for the public and commercial sectors to work together with cybersecurity specialists to create a thorough cybersecurity framework that protects the country’s digital infrastructure and promotes a safe business climate.

Cyber Security in the Gulf Cooperation Council