Introduction to Cyber Security

In the last few years, cyber security has been an essential prerequisite for almost every organization to handle the massive number of emerging cyber attacks worldwide. A critical factor in reducing the possibility of being exploited is cyber security awareness. Not only having the adequate knowledge but how to utilize this knowledge to prevent cyber attacks. In this paper we conducted a survey that focuses on three vital security parameters, which are trust, passwords and defensive attitude respectively. The survey mainly aimed at assessing cyber security knowledge of 200 students and 100 faculty members in a Sudanese college and how secure these participants think they are according to their current cyber behaviour. 56% of the participants are males and 44% are females. The results revealed that all participants were having fairly-low level of security awareness and their defensive attitude is considerably weak and doesn’t protect them either individually or at institutional-level. Nevertheless, faculty member showed better cyber security knowledge and skills by 8% higher than students. This study can be used to develop training approaches that bridge the security gaps depicted by the respondents of the survey questions manipulated in this study.

Cyber security in smart cities: A review of deep learning-based applications and case studies

The connection of physical devices, buildings, home appliances, vehicles, and other things embedded with electronics, sensors, software, and actuators that facilitate these objects in networking is called the Internet of Things (IoT). IoT has drastically changed our lives by way of automating jobs across almost all industries. The application and adoption of it in industrial machine utilization, industrial processes, and manufacturing is known as the Industrial Internet of Things (IIoT). This IIoT is coined Industry 4.0, and is a subclass of IoT that focuses on industrial applications such as machine control and maintenance, optimizing industrial robotic systems in manufacturing, and industrial central monitoring systems. Integrating the operations of manufacturing companies in Industry 4.0 means exposing the company’s IT infrastructure and data, which makes it more susceptible and vulnerable to cyber threats. Shielding IIoT against cyber threats is crucial in order to control and stimulate the economic engine of the future. Protecting cyber systems from thievery and adversaries is essential since it includes everything that is appropriate for securing sensitive data, personal information, cerebral property, industry, and governmental information systems. Cyber security refers to the umbrella of processes, technologies, and tools intended to protect networks, programs, devices, and data from various cyber attacks, damage, and unauthorized access. Cyber security ought to be an essential part of design, strategy, and operations, and needs to be focused on from the start for any new connected, Industry 4.0-driven approach. This chapter focuses on providing a clear understanding of cyber space, cyber systems, and the security challenges inherent to Industry 4.0.

While many organizations offer certifications associated with information technology (IT) security, there is no single overarching accrediting organization that has identified the body of knowledge and experience necessary for success in the IT security field. In order for an IT security workforce to be acknowledged and recognized throughout the world as possessing a proven level of education, knowledge, and experience in IT security, a formal process for certifying IT security professionals must be developed. This research effort suggests that the IT security community use the Project Management Institute’s process for certifying Project Management Professionals (PMPs) as a model for developing an open and easily accessible IT Security Body Of Knowledge (ITSBOK) and an associated international certification process for IT security professionals.

In many organisations, cyber security is considered to be an information technology (IT) problem. However, the traditional relationship between IT operations and cyber security teams, where one is focused entirely on carrying out business-as-usual activities and maintenance while the other attempts to prevent cyberattacks, is outdated and leads to an increased cyber risk for organisations. These long-held views and failure to fully integrate current cyber security methodology and principles into IT-related business processes not only increases the likelihood of a successful cyberattack but exacerbates the resulting damage. It is not possible for organisations to prevent every attempted cyberattack; instead, organisations should expect and plan for breaches. This paper explains how implementing an assumed breach paradigm and combining the knowledge of IT operations and cyber security teams to form a combined CyberOps function can help close gaps in defence and incident response preparedness.

This article explores the UK's current approach in addressing the cybersecurity skills gap championed by the National Cyber Security Strategy. There have been progressive and elaborate steps taken in the UK toward professionalization of the cybersecurity field. However, cybersecurity knowledge has been labelled as inconsistent when a cybersecurity Chartered status is being proposed. The objective of this analysis was to apply an academic lens over the UK's voyage towards the establishment of a cybersecurity profession. It has been an ambitious but complex endeavor that at times has had alterations of course. Learning from this experience, a blended learning and development approach is now recommended underpinned by an overarching core knowledge framework. Such a framework could join up the existing silos of learning and development activities to benefit from, and build upon, a coherent core knowledge-base for the community. It is argued that this will provide a more satisfactory outcome to enhance the UK's cybersecurity capability on the road to a cybersecurity profession.

Information technologies are nowadays part of industrial systems. Employees in charge of managing these systems typically have little or very little knowledge of cybersecurity. In this work we initially explore the challenges related to cybersecurity training in industrial systems and then we propose an approach based on CYBERWISER.eu cyber range platform. A cyber range provides a multipurpose virtual environment in which organisations can test critical capabilities and reveal how effectively they integrate people, processes, and technology to protect their strategic information, services, and assets. By facilitating high-fidelity simulations, a cyber range can associate the cybersecurity training phase with a personalized security testing, together with a unit testing, on different kind of systems, including SCADA.

Cyber security has become a critical issue for organizations, especially in public and private sectors where sensitive information is stored and processed. This study aims to examine the impact of cyber security strategy on information systems effectiveness, through a comprehensive literature review. The primary outcome reveals a positive association between effective cybersecurity practices and the success of information systems, highlighting cybersecurity's management vital role in controlling and protecting information within organizations in the private and public sectors. Additionally, the research emphasizes the importance of using new tools and mechanisms to search the sources and causes of cyber threats and attacks and to abandon traditional mechanisms to identify them, perhaps those related to information systems and methods to manage and protect information systems and information within organizations. Key recommendations include that developing a strategy for cybersecurity is crucial for ensuring the resilience of an organization against cyber risks, and essential to protecting institutions' systems and users' data from theft and exposure to risks. This investigation enriches the academic dialogue on cyber security's strategic value and provides actionable insights for entities seeking to improve their systems and maintain the privacy of their data and information through reinforcement cybersecurity measures.

Thousands of cyber-attacks (fraudulent online activities to acquire users' sensitive information via email, during online transactions, live video streaming, online gaming and browsing) are launched every day against Internet users across the world. To prevent these attacks, researchers have responded with a number of protection systems. Currently, the methods which cyber-attackers use to conduct attacks is associated with exploiting humans. Such attacks are recorded more frequently than before, and they are more challenging to control. Traditional security countermeasures are unable to prevent breaches targeting the human element. This paper describes the state of the art of cyber security attacks, countermeasures, and protection tools related to everyday online activities. It provides a useful cyber-attack taxonomy and classification which helps to involve in a protection process to identify attacks and measures for cyber security. Existing protection schemes that target the cyber threats and risks are evaluated against three of our criteria for an effective measure: resilience to cyber-attacks' countermeasures; real-time support and needs-based action; and training and educational materials to increase users' awareness of cybercrimes. Potential features of smart solutions to cybercrime are also identified.

Managers rarely have deep knowledge of cyber security and yet are expected to make decisions with cyber security implications for software-based systems. We investigate the decision-making conversations of seven teams of senior managers from the same organisation as they complete the Decisions & Disruptions cyber security exercise. We use grounded theory to situate our analysis of their decision-making and help us explore how these complex socio-cognitive interactions occur. We have developed a goal-model (using iStar 2.0) of the teams’ dialogue that illustrates what cyber security goals teams identify and how they operationalise their decisions to reach these goals. We complement this with our model of cyber security reasoning that describes how these teams make their decisions, showing how each team members’ experience, intuition, and understanding affects the team’s overall shared reasoning and decision-making. Our findings show how managers with little cyber security expertise are able to use logic and traditional risk management thinking to make cyber security decisions. Despite their lack of cyber security–specific training, they demonstrate reasoning that closely resembles the decision-making approaches espoused in cyber security–specific standards (e.g., NIST/ISO). Our work demonstrates how organisations and practitioners can enrich goal modelling to capture not only what security goals an organisation has (and how they can operationalise them) but also how and why these goals have been identified. Ultimately, non–cyber security experts can develop their cyber security model based on their current context (and update it when new requirements appear or new incidents happen), whilst capturing their reasoning at every stage.

CYBERNEWS

Universities hold and process vast amounts of financial, user, and research data, which makes them prime targets for cybercriminals. In addition to the usual external threat actors, universities face a unique insider threat from students, who—alongside staff—may lack adequate cyber security training despite having access to various sensitive systems. This paper provides a focused assessment of the current cyber security threats facing UK universities, based on a comprehensive review of available information. A chronological timeline of notable cyber attacks against universities is produced, with incidents classified according to the CIA triad (Confidentiality, Integrity, Availability) and incident type. Several issues have been identified. Limited disclosure of attack details is a major concern, as full information is often withheld for security reasons, hindering institutions’ abilities to assess vulnerabilities thoroughly and respond effectively. Additionally, universities increasingly rely on third-party service providers for critical services, meaning that an attack on these external providers can directly impact university operations and data security. While SQL injection attacks, previously a significant issue, appear to have declined in frequency—perhaps reflecting improvements in defences—other threats continue to persist. Universities report lower levels of concern regarding DDoS attacks, potentially due to enhanced resilience and mitigation strategies; however, ransomware and phishing attacks remain prevalent. Insider threats, especially from students with varied IT skills, exacerbate these risks, as insiders may unknowingly or maliciously facilitate cyber attacks, posing ongoing challenges for university IT teams. This study recommends that universities leverage these insights, along with other available data, to refine their cyber security strategies. Developing targeted policies, strengthening training, and implementing international standards will allow universities to enhance their security posture and mitigate the complex and evolving threats they face.

The focus of the article revolves around NATO’s roadmap of smart defense against cyber attacks as the bedrock of Euro-Atlantic security. The author discloses NATO’S new policy and cutting-edge technical initiatives, aimed at focusing on countering global threats and cyber security challenges. It is stressed out, that new ideas towards a more synergetic approach between all the NATO Cyber Defense agencies should be explored to develop a shared framework for cybersecurity that might provide up-to-the date intelligence in order to ensure the development, acquisition and maintenance of the necessary military capabilities. The research highlights the core aspects of the 2010 Lisbon Summit that adopted NATO’s Strategic Concept ‘Active Engagement, Modern Defense: Strategic Concept for the Members of the North Atlantic. Treaty Organization’, that recognizes Cyber Defense as one of its strategic priorities. In particular, to foster Allied Nations’ cooperative efforts to counter terrorism, cyber attacks, prevent the proliferation of nuclear weapons and other weapons of mass destruction (WMD), Reinforce energy security and environmental constraints. Develop the capacity to contribute to energy security, including protection of critical energy infrastructure and transit areas and lines, cooperation with partners, and consultations among Allies on the basis of trategic assessments and contingency planning; In July 2011, NATO Defense Ministers adopted revised NATO Policy on Cyber Defense, which highlighted three areas: • The principles of subsidiarity and proportionality, which involve the assistance provided only upon request, in any other cases, the principle of selfresponsibility of sovereign states is applied; • Avoiding unnecessary duplication of the structures or capabilities and approaches on the international, regional and national levels; • Collaboration based on trust, with regard to the potential sensitivity and vulnerability of the system, the access to which has to be given. After the 2014 Wales Summit, in the revised NATO Cyber Defense Policy, cyber threats were identified as a potential prerequisite for collective defense under the Article 5 of the NATO Treaty. Noteworthy, Cyber Security is responsible for providing the broad spectrum of services in the following specialist security areas: CIS Security, Cyber Defense, Information Assurance, and Computer & Communications Security. Cyber defense is provided by many Alliance bodies: any NATO response concerning collective defense against cyber attacks will be subordinated to the North Atlantic Council (NAC), The Cyber Defense Committee (CDC) – the leading advisory body of the NAC. The executive level is represented by The Cyber Defense Management Board (CDMB), NATO Communications and Information Agency (NCI Agency), Cyber Security incorporates the NATO Computer Incident Response Capability (NCIRC) Technical Centre, providing specialist services to prevent, detect, respond to and recover from cyber security incidents.

Software testing plays a vital role in software security because hackers attack on a system through back channels which they can easily find if there is any error or bug exists in the software. The software security failure can cause the unbearable loss for IT companies and other organizations. Cyber security is another big issue for computer users' personal data as all their information is vulnerable because of easy excess, visibility and availability. Therefore, software testing is also useful to secure the personal information. In this article, cyber security testing based on particle swam optimization algorithm (CST) is proposed for testing of software cyber security testing. CSTPSOA is a PSO base technique which is used to solve the complex multi-level problems and is also used for optimization. In the CST method PSO is used for the optimization of test cases for cyber security testing.

Due to the Internet of Things and the digitalization revolution, there is nowadays an overwhelming amount of cybersecurity information in the tech world. Dealing efficiently with cyber deviations and attacks is an emerging challenge to any cyber security industry all over the world. Traditional security solutions can no longer address today's security threats because of the rapid proliferation of various cyber-attacks and threats. Artificial intelligence understanding, especially machine learning technology can make a security system up to date by analyzing its security data so that the safety mechanism can be upgraded continuously and so that it can remain programmatic and automated. This study provides a comprehensive overview of existing machine-learning techniques inspired by the notion of AI. We explore its capabilities of advanced information analytics and management by deriving meaningful conclusions out of cyber data in Cybersecurity. The performance of the proposed method will be compared against that of a standard machine learning technique, Support Vector Machine (SVM), using cross-validation. This scheme is known as a Secured Learning based Data Evaluation Scheme (SLDES). Based on its analysis of past incidents and knowledge summaries from experts, the proposed AI approach SLDES (Shift Left Diverse Experiments and Simulations) would change or reform newly appearing sections as it retrieves recent events. Last but not least we present our research about the future of artificial intelligence in information security etc. Machine learning and its related approaches are being investigated and used in cyber defense, and the focus of the described section is to evaluate the current and future uses of machine learning in cyber defense, for the scheme proposed the section presented the way to demonstrate how to effect the proposed scheme is and the result metrics are plotted in histogram form To derive such insights and information necessary for designing countermeasures for such attacks, even as stated in, a thorough data analysis is important. The main aim of this research is to establish that clients can develop a safe situation to protect their electronic data from intruders.