{"title":"Zero Trust Security","authors":"Ioan-Alexandru Dumitru","doi":"10.19107/cybercon.2022.13","DOIUrl":"https://doi.org/10.19107/cybercon.2022.13","url":null,"abstract":"Zero Trust security is an IT security model that requires strict identity verification for every person and device trying to access resources on a private network, whether they are inside or outside the perimeter of the network. No specific technology is associated with the Zero Trust architecture; It is a holistic approach to network security that incorporates several different principles and technologies. The traditional security of the IT network is based on the „castle-and-moat” concept. In that model, it's hard to gain access from outside the network, but everyone on the network is trusted by default. The problem with this approach is that once an attacker gains access to the network, he has free rein over everything inside.","PeriodicalId":380538,"journal":{"name":"Proceedings of the International Conference on Cybersecurity and Cybercrime (IC3)","volume":"35 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116274151","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Security Enhancements for Cloud Applications","authors":"Ana-Maria Dincă, S. Axinte","doi":"10.19107/cybercon.2022.04","DOIUrl":"https://doi.org/10.19107/cybercon.2022.04","url":null,"abstract":"This study scrutinizes the cloud applications infrastructure and the associated vulnerabilities that could allow unauthorized access to users’ accounts. The research is based on a Fault Tree Analysis that uncovers various security design flaws and their occurrence probabilities. For each undesirable event, a preventive mechanism is suggested and validated by the testing results, decreasing to a minimum the risk exposure of unauthorized access to users’ sensitive data.","PeriodicalId":380538,"journal":{"name":"Proceedings of the International Conference on Cybersecurity and Cybercrime (IC3)","volume":"54 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122393781","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Establishing Effective Cyber Diplomacy and Deterrence Capabilities between International Partners","authors":"V. Oancea","doi":"10.19107/cybercon.2022.15","DOIUrl":"https://doi.org/10.19107/cybercon.2022.15","url":null,"abstract":"Changes has been always a constant in a modern and dynamic world, but the rapidity of change in the global security landscape accelerated after 9/11 and global war against terrorism. There is a new approach regarding political, ideological, economic and military race due to globalization which improved the landscape with good practices and developmental growth, but is still a major driver of instability. While threat of conventional decrease, accordingly the spread of conflict, it complexity, accuracy, changeable and reach into many areas have emerged. Many new types of warfare have also emerging like cyber, network, digital, information, economic, media pursued cross domains both in peace or war. Especially nowadays but also during challenging times, deterrence has been an important part of foreign affairs of a nation, to conserve internal and external stability and preserve it’s integrity.","PeriodicalId":380538,"journal":{"name":"Proceedings of the International Conference on Cybersecurity and Cybercrime (IC3)","volume":"6 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131454466","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Integrating and Shaping Military Cyber Defence in Operational and Intelligence Planning","authors":"Joseph Jones","doi":"10.19107/cybercon.2022.07","DOIUrl":"https://doi.org/10.19107/cybercon.2022.07","url":null,"abstract":"The cyber threat landscape has undoubtedly evolved at an exponential rate. As such, NATO and EU forces have transformed their capabilities to meet present-day operational challenges in cyberspace. However, this paper will not only identify relative successes by NATO and EU forces with regards to their respective development of cyber defence capabilities, it will also indicate limitations with regards to the projection of power within cyberspace and the lack of national and international coordination concerning offensive cyber operations and the collection of intelligence from cyberspace.","PeriodicalId":380538,"journal":{"name":"Proceedings of the International Conference on Cybersecurity and Cybercrime (IC3)","volume":"15 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134526736","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Cybersecurity of WordPress Platforms. An Analysis Using Attack-Defense Trees Method","authors":"Gabriel Petrica","doi":"10.19107/cybercon.2022.09","DOIUrl":"https://doi.org/10.19107/cybercon.2022.09","url":null,"abstract":"The aim of this paper is to analyze the techniques for securing a Content Management System, highlighting the vulnerabilities of the WordPress platform. The study includes qualitative and quantitative analyzes on the resilience of CMS platforms to cyber-attacks, simulated by the AD Trees methodology. The data provided by CVE is used to build possible attack scenarios that could compromise the cybersecurity of the web application. At the end of the paper, in order to minimize the impact of these attacks, solutions are proposed as sets of countermeasures within the Attack‑Defense Trees.","PeriodicalId":380538,"journal":{"name":"Proceedings of the International Conference on Cybersecurity and Cybercrime (IC3)","volume":"27 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134020407","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Children and the Internet: Vulnerability or Opportunity?","authors":"Nicoleta Apolozan","doi":"10.19107/cybercon.2022.08","DOIUrl":"https://doi.org/10.19107/cybercon.2022.08","url":null,"abstract":"As a member of the implementation team of the Cyberex RO Project - Improving, cooperating and preventing in the fight against cybercrime, I conducted a survey among students aged 10 to 18 on the topic of online security. This paper discusses the results of this survey regarding children's habits on using the Internet, the safety measures they know and use, their level of information and their need to learn about Internet safety issues.","PeriodicalId":380538,"journal":{"name":"Proceedings of the International Conference on Cybersecurity and Cybercrime (IC3)","volume":"21 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121819906","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"At the Intersection of Interests and Objectives in Cybersecurity","authors":"M. Șcheau, Mihai-Daniel Leu, C. Udroiu","doi":"10.19107/cybercon.2022.03","DOIUrl":"https://doi.org/10.19107/cybercon.2022.03","url":null,"abstract":"The exponential increase in the advancements registered across all sectors of the information technology field gave a new, ever-expanding dimension to the idea of protesting against national governments by introducing political activism into cyberspace. Despite the apparent noble objectives, there is a thin line between hacking as a form of protest against the established order and cyber-criminal activity that can cause financial or material prejudice against organizations. This aspect outlines several dimensions of hacktivism which will be brought into discussion. Another interesting characteristic in hacktivist psychology is the pursuit of “digital clout” as a way to measure success: the more notorious a group becomes, the more attention it will get from the press alas the more successful it is. Even though it is a clear distinction between financially motivated threat actors and hacktivists, some shifts were observed in the cyber threat spectrum in the very politically charged context of war, with different groups which had a history of financially motivated cybercrime, joining the cyber conflict and engaging in hacktivist campaigns either on the one side or the other.","PeriodicalId":380538,"journal":{"name":"Proceedings of the International Conference on Cybersecurity and Cybercrime (IC3)","volume":"7 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122333730","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"AI and IoT Mapping and the Transition to an Interconnected Cyber Defence and Intelligence Capabilities","authors":"Joseph Jones, A. Ioniţă, I. Mihai","doi":"10.19107/cybercon.2022.01","DOIUrl":"https://doi.org/10.19107/cybercon.2022.01","url":null,"abstract":"This paper brings together authors from a diverse range of technical areas to discuss the evolving cyber threat landscape and how military forces, have transformed their capabilities to meet present-day operational challenges in cyberspace. The Internet of Things (IoT) is based on the premise that enough data can lead to new perspectives on processes and systems. With over 7 billion IoT devices connected today, experts expect that number to increase to 22 billion by 2025. They can be used to support decisions and new products and services, or they can lead to internal savings and new external revenue streams. Despite countless discussions and opinions on the definition of AI in its various facets, successful IoT implementation projects require major actors to play their part, but in conjunction with human experts to work with to make better decisions in cyberspace, improving the quality of human-machine team’s actions in asymmetric operations. The Defence domain already looking at ways to organize better human-machine teams, which promise to boost individual and team performance, reduce threats to humans, enable new operating concepts, and ultimately boost national power.","PeriodicalId":380538,"journal":{"name":"Proceedings of the International Conference on Cybersecurity and Cybercrime (IC3)","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130513357","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Developing a Comprehensive Model for Digital Lifelong Learning Using Cyber Resilience Framework","authors":"Costel Ciuchi","doi":"10.19107/cybercon.2022.14","DOIUrl":"https://doi.org/10.19107/cybercon.2022.14","url":null,"abstract":"Ensuring a secure environment through the use of information systems are mandatory requirements of today's society, practically it become an intense and ongoing concern in relation to possible risks and threats. The development of organizations is conditioned by the use of information systems, which gain vital importance over time and become the \"engine\" of daily activity. Also, in addition to the fact that information systems meet administrative and operational needs, they have gradually gained a significant share at all levels of the organization, up to the strategic and decision-making level. The working flows model must include new approaches, starting from the technological levels to managerial levels including most important layer of an organization: human resources. User’s education and cybersecurity management knowledge represent an important part of ensuring the real organization's data and influenced managerial decisions. Technological threats and vulnerabilities can compromise decisional process starting from the early stages. With all the latest security technology implemented, a system will become cyber resilient if will take in consideration the 3 dimensions - human resources, processes, and technology. To achieve this goals, new approaches in cyber security education is needed. The diversity of technologies and accelerated developments of information technology in all domains need to be supported by a complex educational environment who must meet the actual society requirements.","PeriodicalId":380538,"journal":{"name":"Proceedings of the International Conference on Cybersecurity and Cybercrime (IC3)","volume":"213 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115942173","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"From the Borderless Digital Chambers to Prison’s Four Walls after Committing Personal Data Unlawful Acts","authors":"Larisa-Mădălina Munteanu","doi":"10.19107/cybercon.2022.05","DOIUrl":"https://doi.org/10.19107/cybercon.2022.05","url":null,"abstract":"This paper represents a concise comparative presentation of how and why can imprisonment be a penalty in different legal systems when committing cybercrimes that affect personal data. Yet, since personal data is closely linked to cybersecurity (especially in cases of non-compliance with regulatory standards), the subject matter herein will focus on the subsequent relationship between personal data and cybercrimes, but from a peculiar perspective – how impactful unlawful acts can be so as to result in criminal convictions. It relies, therefore, on a symbiosis of acknowledging where personal data sits in the cybercrimes’ ecosystem and applying this to the most threatening cases identified by global regulators. In this context, the current research is contingent on mirroring the major legal models worldwide, based on which these offences are sanctioned with imprisonment. It is utterly thought-provoking to analyse how the contrasting legal provisions are driven by a common goal: preventing cybercrimes or, as the case may be, minimising their consequences. All these differences have, essentially, homogenous values at a foundational level. Particularly, that foundational level is the research core of this paper.","PeriodicalId":380538,"journal":{"name":"Proceedings of the International Conference on Cybersecurity and Cybercrime (IC3)","volume":"8 4 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-04-30","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"116933493","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}