Journal of Cybersecurity and Privacy最新文献_第7页

MOCA: A Network Intrusion Monitoring and Classification System MOCA:一个网络入侵监控与分类系统

Journal of Cybersecurity and Privacy Pub Date : 2022-08-15 DOI: 10.3390/jcp2030032

Jessil Fuhr, Feng Wang, Yongning Tang

引用次数: 2

SMARTEN—A Sample-Based Approach towards Privacy-Friendly Data Refinement smarten -基于样本的隐私友好型数据优化方法

Journal of Cybersecurity and Privacy Pub Date : 2022-08-15 DOI: 10.3390/jcp2030031

Christoph Stach, M. Behringer, Julia Bräcker, Clémentine Gritti, B. Mitschang

{"title":"SMARTEN—A Sample-Based Approach towards Privacy-Friendly Data Refinement","authors":"Christoph Stach, M. Behringer, Julia Bräcker, Clémentine Gritti, B. Mitschang","doi":"10.3390/jcp2030031","DOIUrl":"https://doi.org/10.3390/jcp2030031","url":null,"abstract":"Two factors are crucial for the effective operation of modern-day smart services: Initially, IoT-enabled technologies have to capture and combine huge amounts of data on data subjects. Then, all these data have to be processed exhaustively by means of techniques from the area of big data analytics. With regard to the latter, thorough data refinement in terms of data cleansing and data transformation is the decisive cornerstone. Studies show that data refinement reaches its full potential only by involving domain experts in the process. However, this means that these experts need full insight into the data in order to be able to identify and resolve any issues therein, e.g., by correcting or removing inaccurate, incorrect, or irrelevant data records. In particular for sensitive data (e.g., private data or confidential data), this poses a problem, since these data are thereby disclosed to third parties such as domain experts. To this end, we introduce SMARTEN, a sample-based approach towards privacy-friendly data refinement to smarten up big data analytics and smart services. SMARTEN applies a revised data refinement process that fully involves domain experts in data pre-processing but does not expose any sensitive data to them or any other third-party. To achieve this, domain experts obtain a representative sample of the entire data set that meets all privacy policies and confidentiality guidelines. Based on this sample, domain experts define data cleaning and transformation steps. Subsequently, these steps are converted into executable data refinement rules and applied to the entire data set. Domain experts can request further samples and define further rules until the data quality required for the intended use case is reached. Evaluation results confirm that our approach is effective in terms of both data quality and data privacy.","PeriodicalId":316237,"journal":{"name":"Journal of Cybersecurity and Privacy","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-08-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128671133","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Developing Security Assurance Metrics to Support Quantitative Security Assurance Evaluation 开发安全保障指标以支持定量安全保障评估

Journal of Cybersecurity and Privacy Pub Date : 2022-08-10 DOI: 10.3390/jcp2030030

Shao-Fang Wen, Ankur Shukla, Basel Katt

引用次数: 5

Addressing Human Factors in Cybersecurity Leadership 解决网络安全领导中的人为因素

Journal of Cybersecurity and Privacy Pub Date : 2022-07-22 DOI: 10.3390/jcp2030029

William J. Triplett

{"title":"Addressing Human Factors in Cybersecurity Leadership","authors":"William J. Triplett","doi":"10.3390/jcp2030029","DOIUrl":"https://doi.org/10.3390/jcp2030029","url":null,"abstract":"This article identifies human factors in workplaces that contribute to the challenges faced by cybersecurity leadership within organizations and discusses strategic communication, human–computer interaction, organizational factors, social environments, and security awareness training. Cybersecurity does not simply focus on information technology systems; it also considers how humans use information systems and susceptible actions leading to vulnerabilities. As cyber leaders begin to identify human behavior and processes and collaborate with individuals of the same mindset, an organization’s strategy can improve substantially. Cybersecurity has been an expanding focal point from the viewpoint of human factors. Human inaccuracy can be unintentional due to an inaccurate strategic implementation or accurate unsatisfactory plan implementation. A systematic literature review was conducted to realize unintentional human factors in cybersecurity leadership. The results indicate that humans were the weakest link during the transmission of secure data. Furthermore, specific complacent and unintentional behaviors were observed, enabled by the ignorance of leaders and employees. Therefore, the enforcement of cybersecurity focuses on education, awareness, and communication. A research agenda is outlined, highlighting a further need for interdisciplinary research. This study adopts an original approach by viewing security from a human perspective and assessing how people can reduce cybersecurity incidents.","PeriodicalId":316237,"journal":{"name":"Journal of Cybersecurity and Privacy","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-07-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133558295","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

The Evolution of Volatile Memory Forensics 易失性内存取证的演变

Journal of Cybersecurity and Privacy Pub Date : 2022-07-20 DOI: 10.3390/jcp2030028

Hannah Nyholm, Kristine Monteith, Seth Lyles, Micaela Gallegos, Mark Desantis, John Donaldson, C. Taylor

{"title":"The Evolution of Volatile Memory Forensics","authors":"Hannah Nyholm, Kristine Monteith, Seth Lyles, Micaela Gallegos, Mark Desantis, John Donaldson, C. Taylor","doi":"10.3390/jcp2030028","DOIUrl":"https://doi.org/10.3390/jcp2030028","url":null,"abstract":"The collection and analysis of volatile memory is a vibrant area of research in the cybersecurity community. The ever-evolving and growing threat landscape is trending towards fileless malware, which avoids traditional detection but can be found by examining a system’s random access memory (RAM). Additionally, volatile memory analysis offers great insight into other malicious vectors. It contains fragments of encrypted files’ contents, as well as lists of running processes, imported modules, and network connections, all of which are difficult or impossible to extract from the file system. For these compelling reasons, recent research efforts have focused on the collection of memory snapshots and methods to analyze them for the presence of malware. However, to the best of our knowledge, no current reviews or surveys exist that systematize the research on both memory acquisition and analysis. We fill that gap with this novel survey by exploring the state-of-the-art tools and techniques for volatile memory acquisition and analysis for malware identification. For memory acquisition methods, we explore the trade-offs many techniques make between snapshot quality, performance overhead, and security. For memory analysis, we examined the traditional forensic methods used, including signature-based methods, dynamic methods performed in a sandbox environment, as well as machine learning-based approaches. We summarize the currently available tools, and suggest areas for more research.","PeriodicalId":316237,"journal":{"name":"Journal of Cybersecurity and Privacy","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-07-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115479250","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Cybersecurity Threats and Their Mitigation Approaches Using Machine Learning—A Review 网络安全威胁及其使用机器学习的缓解方法综述

Journal of Cybersecurity and Privacy Pub Date : 2022-07-10 DOI: 10.3390/jcp2030027

M. Ahsan, Kendall E. Nygard, Rahul Gomes, M. Chowdhury, Nafiz Rifat, Jayden F Connolly

{"title":"Cybersecurity Threats and Their Mitigation Approaches Using Machine Learning—A Review","authors":"M. Ahsan, Kendall E. Nygard, Rahul Gomes, M. Chowdhury, Nafiz Rifat, Jayden F Connolly","doi":"10.3390/jcp2030027","DOIUrl":"https://doi.org/10.3390/jcp2030027","url":null,"abstract":"Machine learning is of rising importance in cybersecurity. The primary objective of applying machine learning in cybersecurity is to make the process of malware detection more actionable, scalable and effective than traditional approaches, which require human intervention. The cybersecurity domain involves machine learning challenges that require efficient methodical and theoretical handling. Several machine learning and statistical methods, such as deep learning, support vector machines and Bayesian classification, among others, have proven effective in mitigating cyber-attacks. The detection of hidden trends and insights from network data and building of a corresponding data-driven machine learning model to prevent these attacks is vital to design intelligent security systems. In this survey, the focus is on the machine learning techniques that have been implemented on cybersecurity data to make these systems secure. Existing cybersecurity threats and how machine learning techniques have been used to mitigate these threats have been discussed. The shortcomings of these state-of-the-art models and how attack patterns have evolved over the past decade have also been presented. Our goal is to assess how effective these machine learning techniques are against the ever-increasing threat of malware that plagues our online community.","PeriodicalId":316237,"journal":{"name":"Journal of Cybersecurity and Privacy","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-07-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131285724","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 16

Requirements for Crafting Virtual Network Packet Captures 制作虚拟网络数据包捕获的要求

Journal of Cybersecurity and Privacy Pub Date : 2022-07-06 DOI: 10.3390/jcp2030026

Daniel Spiekermann, J. Keller

{"title":"Requirements for Crafting Virtual Network Packet Captures","authors":"Daniel Spiekermann, J. Keller","doi":"10.3390/jcp2030026","DOIUrl":"https://doi.org/10.3390/jcp2030026","url":null,"abstract":"Currently, network environments are complex infrastructures with different levels of security, isolation and permissions. The management of these networks is a complex task, faced with different issues such as adversarial attacks, user demands, virtualisation layers, secure access and performance optimisation. In addition to this, forensic readiness is a demanded target. To cover all these aspects, network packet captures are used to train new staff, evaluate new security features and improve existing implementations. Because of this, realistic network packet captures are needed that cover all appearing aspects of the network environment. Packet generators are used to create network traffic, simulating real network environments. There are different network packet generators available, but there is no valid rule set defining the requirements targeting packet generators. The manual creation of such network traces is a time-consuming and error-prone task, and the inherent behaviour of virtual networks eradicates a straight-forward automation of trace generation in comparison to common networks. Hence, we analyse relevant conditions of modern virtualised networks and define relevant requirements for a valid packet generation and transformation process. From this, we derive recommendations for the implementation of packet generators that provide valid and correct packet captures for use with virtual networks.","PeriodicalId":316237,"journal":{"name":"Journal of Cybersecurity and Privacy","volume":"52 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-07-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131785334","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Work Experience as a Factor in Cyber-Security Risk Awareness: A Survey Study with University Students 工作经验是影响大学生网络安全风险意识的因素之一

Journal of Cybersecurity and Privacy Pub Date : 2022-06-28 DOI: 10.3390/jcp2030025

Tibor Pósa, Jens Grossklags

{"title":"Work Experience as a Factor in Cyber-Security Risk Awareness: A Survey Study with University Students","authors":"Tibor Pósa, Jens Grossklags","doi":"10.3390/jcp2030025","DOIUrl":"https://doi.org/10.3390/jcp2030025","url":null,"abstract":"The emergence of the COVID-19 pandemic in early 2020 has transformed how individuals work and learn and how they can apply cyber-security requirements in their, mostly remote, environments. This transformation also affected the university student population; some needed to adjust to new remote work settings, and all needed to adjust to the new remote study environment. In this online research study, we surveyed a large number of university students (n = 798) to understand their expectations in terms of support and help for this new remote work and study environment. We also asked students to report on their practices regarding remote location and Wi-Fi security settings, smart home device usage, BYOD (bring your own device) and personal device usage and social engineering threats, which can all lead to compromised security. A key aspect of our work is a comparison between the practices of students having work experience with the practices of students having no such additional experience. We identified that both the expectations and the level of cyber-security awareness differ significantly between the two student populations and that cyber-security awareness is increased by work experience. Work experience students are more aware of the cyber-security risks associated with a remote environment, and a higher portion of them know the dedicated employee whom they can contact in the event of incidents. We present the organizational security practices through the lens of employees with initial work experience, contributing to a topic that has so far received only limited attention from researchers. We provide recommendations for remote study settings and also for remote work environments, especially where the existing research literature survey results differ from the findings of our survey.","PeriodicalId":316237,"journal":{"name":"Journal of Cybersecurity and Privacy","volume":"23 2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-28","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123556290","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

A Game or Notes? The Use of a Customized Mobile Game to Improve Teenagers’ Phishing Knowledge, Case of Tanzania 游戏还是笔记?利用定制手机游戏提高青少年网络钓鱼知识，坦桑尼亚案例

Journal of Cybersecurity and Privacy Pub Date : 2022-06-22 DOI: 10.3390/jcp2030024

Rosemary Cosmas Tlatlaa Panga, J. Marwa, J. D. Ndibwile

{"title":"A Game or Notes? The Use of a Customized Mobile Game to Improve Teenagers’ Phishing Knowledge, Case of Tanzania","authors":"Rosemary Cosmas Tlatlaa Panga, J. Marwa, J. D. Ndibwile","doi":"10.3390/jcp2030024","DOIUrl":"https://doi.org/10.3390/jcp2030024","url":null,"abstract":"Recently, phishing attacks have been increasing tremendously, and attackers discover new techniques every day to deceive users. With the advancement of technology, teenagers are considered the most technologically advanced generation, having grown up with the availability of the internet and mobile devices. However, as end-users, they are also considered the weakest link for these attacks to be successful, as they still show poor cybersecurity hygiene and practices. Despite several efforts to educate and provide awareness on the prevention of phishing attacks, less has been done to develop tools to educate teenagers about protecting themselves from phishing attacks considering their differences in social-economic and social culture. This research contributes a customized educational mobile game that fits the African context due to the participants’ existing differences in social-economic and social culture. We initially conducted a survey to assess teenagers’ phishing and cybersecurity knowledge in secondary schools categorized as international, private, and government schools. We then developed a customized mobile game based on the African context taking into consideration participants’ differences in social-economic and social culture. We compared the performance of phishing knowledge of teenagers using a game and a traditional teaching method. The traditional teaching method was presented by the reading notes method. The results revealed that teenagers’ phishing and cybersecurity knowledge differs based on their socioeconomic and social culture. For instance, international, private scholars, and those who live in urban areas have better phishing knowledge than those from government schools and those who live in rural areas. On the other hand, participants who had a poor performance in the first assessment improved their knowledge after playing the game. In addition, participants who played the game had retained their phishing knowledge more, two weeks later, than their counterparts who read only notes.","PeriodicalId":316237,"journal":{"name":"Journal of Cybersecurity and Privacy","volume":"71 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127162208","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Bingo: A Semi-Centralized Password Storage System Bingo:半集中式密码存储系统

Journal of Cybersecurity and Privacy Pub Date : 2022-06-21 DOI: 10.3390/jcp2030023

Abdullah F. Al-Aboosi, Matan Broner, Fadhil Y. Al-Aboosi

{"title":"Bingo: A Semi-Centralized Password Storage System","authors":"Abdullah F. Al-Aboosi, Matan Broner, Fadhil Y. Al-Aboosi","doi":"10.3390/jcp2030023","DOIUrl":"https://doi.org/10.3390/jcp2030023","url":null,"abstract":"A lack of security best practices in modern password storage has led to a dramatic rise in the number of online data breaches, resulting in financial damages and lowered trust in online service providers. This work aims to explore the question of how leveraging decentralized storage paired with a centralized point of authentication may combat such attacks. A solution, “Bingo”, is presented, which implements browser side clients which store password shares for a centralized proxy server. Bingo is a fully formed system which allows for modern browsers to store and retrieve a dynamic number of anonymized password shares, which are used when authenticating users. Thus, Bingo is the first solution to prove that distributed password storage functions in the context of the modern web. Furthermore, Bingo is evaluated in both simulation and cloud in order to show that it achieves high rates of system liveness despite its dependence on its users being active at given intervals. In addition, a novel simulator is presented which allows future researchers to mock scheduled behavior of online users. This work concludes that with the rise in online activity, decentralization may play a role in increasing data security.","PeriodicalId":316237,"journal":{"name":"Journal of Cybersecurity and Privacy","volume":"8 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-06-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126583738","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0