International Conference on Cyber Warfare and Security最新文献_第3页

The Role of Industry-Academia Partnerships Can Play in Cybersecurity: 产学合作在网络安全方面可发挥的作用：

International Conference on Cyber Warfare and Security Pub Date : 2024-03-21 DOI: 10.34190/iccws.19.1.2169

Benjamin Yankson, Emmanuel Berkoh, Mubarak Hussein, Y. Dadson

{"title":"The Role of Industry-Academia Partnerships Can Play in Cybersecurity:","authors":"Benjamin Yankson, Emmanuel Berkoh, Mubarak Hussein, Y. Dadson","doi":"10.34190/iccws.19.1.2169","DOIUrl":"https://doi.org/10.34190/iccws.19.1.2169","url":null,"abstract":"Cybercrime presents a pervasive threat globally, affecting governments, organizations, and individuals. Addressing this threat requires collaborative efforts, particularly between industry and academia. This paper delves into the key role played by industry-academia partnerships in elevating cybersecurity training and awareness, intending to narrow gaps and align the trajectories of cybersecurity professionals. Employing a secondary research methodology, this study provides insights into the impact of collaborations between academia and industry on Cybersecurity education and awareness. It identifies areas within the education sector that can be improved to enhance cybersecurity awareness. The findings emphasize the crucial role of industry-academia partnerships in advancing cybersecurity awareness and resilience, offering potential solutions for cultivating skilled cybersecurity professionals. Additionally, the research aims to contribute to policymaking by advocating for laws and regulations that encourage collaborations between state institutions and industry to mitigate cybersecurity crime effectively. \u0000 ","PeriodicalId":429427,"journal":{"name":"International Conference on Cyber Warfare and Security","volume":"166 2","pages":""},"PeriodicalIF":0.0,"publicationDate":"2024-03-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140222901","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Utilization and Sharing of Cyber Threat Intelligence Produced by Open-Source Intelligence 利用和共享开放源码情报机构提供的网络威胁情报

International Conference on Cyber Warfare and Security Pub Date : 2024-03-21 DOI: 10.34190/iccws.19.1.2069

J. Rajamäki, Stephen McMenamin

{"title":"Utilization and Sharing of Cyber Threat Intelligence Produced by Open-Source Intelligence","authors":"J. Rajamäki, Stephen McMenamin","doi":"10.34190/iccws.19.1.2069","DOIUrl":"https://doi.org/10.34190/iccws.19.1.2069","url":null,"abstract":"Open-source intelligence (OSINT) is crucial for enhancing organizational cybersecurity by proactively identifying and mitigating potential threats using publicly available information. This study, part of the DYNAMO project, explores the production of cyber threat information (CTI) through OSINT, its application in safeguarding against cyber threats, and the necessary elements for secure information exchange between organizations. The authors employed an integrative literature review of various sources, including industry literature, articles, blog posts, studies, and organizational websites, which were then systematically analyzed using content analysis. The research focuses on OSINT tools and techniques emphasizing the need for expertise in discerning relevant data and respecting privacy rights. Human judgment is highlighted as crucial in ethical decision-making despite the significant role of technology in data collection. Platforms like the Malware Information Sharing Platform (MISP) facilitate the sharing of threat information, promoting prevention and identification of cyber-attacks. Ethical considerations, adherence to data protection legislation, and compliance with directives like the revision of the Network and Information Security Directive (NIS2) and artificial intelligence regulations are paramount. In conclusion, OSINT is a valuable tool for cybersecurity, requiring expertise, transparent processes, and a balanced integration of technology and human skills. The ethical dimensions of OSINT and the role of artificial intelligence merit separate in-depth studies.","PeriodicalId":429427,"journal":{"name":"International Conference on Cyber Warfare and Security","volume":"128 6","pages":""},"PeriodicalIF":0.0,"publicationDate":"2024-03-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140223574","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Building Cybersecurity Capacities in Zambia’s Business Sector: Guideline for SMEs 赞比亚商业部门的网络安全能力建设：中小企业指南

International Conference on Cyber Warfare and Security Pub Date : 2024-03-21 DOI: 10.34190/iccws.19.1.2051

Goni Saar, R. Dagada

{"title":"Building Cybersecurity Capacities in Zambia’s Business Sector: Guideline for SMEs","authors":"Goni Saar, R. Dagada","doi":"10.34190/iccws.19.1.2051","DOIUrl":"https://doi.org/10.34190/iccws.19.1.2051","url":null,"abstract":"This research explores cybersecurity awareness and implementation within Zambia’s small and medium-sized enterprises (SMEs), a sector increasingly targeted by cyberattacks that lead to substantial financial losses. The study’s primary aim was to enhance cyber awareness and develop actionable guidelines for SMEs in Zambia. Utilising an interpretivist philosophy and inductive approach, the methodology encompassed semi-structured interviews, cross-sectional analysis, and a comprehensive review of CISA, ENISA guidelines, and Zambia’s Data Protection Act. Findings indicate a notable deficit in cybersecurity training and awareness among SMEs. Key concerns include inadequate data security measures, a lack of formal cybersecurity policies, and a reliance on basic tools like antivirus software. In response, the study formulated targeted guidelines, emphasising the integration of cyber awareness into SME governance and risk management. These guidelines have garnered significant interest from Zambian government entities, highlighting their potential influence on national cybersecurity policy. The study contributes theoretically by contextualising international cybersecurity standards within Zambia’s unique SME landscape. Methodologically, it pioneers a Cyber Awareness Framework tailored to Zambian SMEs, underscoring the critical role of human factors in cybersecurity. Practically, the research has sparked engagement among SMEs and government bodies, demonstrating its applicability and potential for shaping policy. However, limitations include reliance on outdated demographic data and a focus on digitally enabled SMEs, potentially overlooking broader IT governance aspects and less digitized businesses. Future research should aim for comprehensive, up-to-date analysis across all SME sectors, contributing to a more inclusive and resilient cybersecurity landscape in Zambia.","PeriodicalId":429427,"journal":{"name":"International Conference on Cyber Warfare and Security","volume":"8 4","pages":""},"PeriodicalIF":0.0,"publicationDate":"2024-03-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140223657","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Capture the Flag with ChatGPT: Security Testing with AI ChatBots 与 ChatGPT 一起夺旗：使用人工智能聊天机器人进行安全测试

International Conference on Cyber Warfare and Security Pub Date : 2024-03-21 DOI: 10.34190/iccws.19.1.2171

David Chamberlain, Ellis Casey

{"title":"Capture the Flag with ChatGPT: Security Testing with AI ChatBots","authors":"David Chamberlain, Ellis Casey","doi":"10.34190/iccws.19.1.2171","DOIUrl":"https://doi.org/10.34190/iccws.19.1.2171","url":null,"abstract":"Penetration testing, commonly referred to as pen testing, is a process of assessing the security of a computer system or network by simulating an attack from an external or internal threat actor. One type of pen testing exercise that has become popular among cybersecurity enthusiasts is called Capture the Flag (CTF). This involves solving a series of challenges that simulate real-world hacking scenarios, with the goal of capturing a flag that represents a piece of sensitive information. Recently, there has been a growing interest in the use of natural language processing (NLP) and machine learning (ML) technologies for penetration testing and CTF exercises. One such technology that has received significant attention is ChatGPT, a large language model (LLM) trained by OpenAI based on the GPT-3.5 architecture. The use of ChatGPT in CTFs has several potential benefits for participants and organisers, including more dynamic and realistic scenarios and enhanced learning experiences, and enhance the effectiveness and realism of CTFs.. Future research can explore more sophisticated models and evaluate the effectiveness of ChatGPT in improving the performance of participants in CTFs.","PeriodicalId":429427,"journal":{"name":"International Conference on Cyber Warfare and Security","volume":"122 2","pages":""},"PeriodicalIF":0.0,"publicationDate":"2024-03-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140223803","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Anomaly Detection for the MIL-STD-1553B Multiplex Data Bus Using an LSTM Autoencoder 使用 LSTM 自动编码器进行 MIL-STD-1553B 多路数据总线异常检测

International Conference on Cyber Warfare and Security Pub Date : 2024-03-21 DOI: 10.34190/iccws.19.1.1974

Brian Lachine, Alec Harlow, Vincent Roberge

{"title":"Anomaly Detection for the MIL-STD-1553B Multiplex Data Bus Using an LSTM Autoencoder","authors":"Brian Lachine, Alec Harlow, Vincent Roberge","doi":"10.34190/iccws.19.1.1974","DOIUrl":"https://doi.org/10.34190/iccws.19.1.1974","url":null,"abstract":"Due to the modernization of commercial and military aircraft, real-time systems and their connectivity to ground based networks, including the Internet, that were thought to be “air-gapped”, are becoming more susceptible to cyber-attack. Most real-time systems that communicate using the Military Standard 1553B Multiplex data bus (MIL-STD-1553B) protocol do not have the ability to detect cyber-attacks. These systems were originally developed with safety and redundancy in mind, not security. These two factors introduce attack vectors to MIL-STD-1553B communication buses and expose associated avionics systems to exploitation. Recent approaches to anomaly detection for the MIL-STD-1553B data bus have leveraged statistical analysis, Markov Chain modelling, remote terminal fingerprinting and signature-based detection. However, their comparative effectiveness is unknown. Regarding the statistical analysis technique, the lack of accuracy and precision in detecting the start and stop time of anomalous events are not ideal for conducting investigations due to the sheer volume of messages still required to be manually analysed. Deep learning techniques offer an effective means of anomaly detection and applying these techniques to the MIL-STD-1553B data bus could provide more accurate and precise detection times when anomalies or attacks are present, when compared to known statistical analysis, leading to more efficient forensic investigations of anomalous events.","PeriodicalId":429427,"journal":{"name":"International Conference on Cyber Warfare and Security","volume":"17 12","pages":""},"PeriodicalIF":0.0,"publicationDate":"2024-03-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140222431","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Past and Present Russian Information Operations in Ukraine: Competition into Conflict 俄罗斯过去和现在在乌克兰的信息行动：从竞争到冲突

International Conference on Cyber Warfare and Security Pub Date : 2024-03-21 DOI: 10.34190/iccws.19.1.2015

Stephen Defibaugh

引用次数: 0

A Strategic Path for Digital Transformation in Cyber Warfare for African Militaries 非洲军队网络战数字化转型的战略路径

International Conference on Cyber Warfare and Security Pub Date : 2024-03-21 DOI: 10.34190/iccws.19.1.2170

M. Thaba, J. Mtsweni

{"title":"A Strategic Path for Digital Transformation in Cyber Warfare for African Militaries","authors":"M. Thaba, J. Mtsweni","doi":"10.34190/iccws.19.1.2170","DOIUrl":"https://doi.org/10.34190/iccws.19.1.2170","url":null,"abstract":"Digital disruption has changed the battlefield and increased its complexity for the war fighter. The modern battlefield continues to increase this complexity, due to the evolution of components that constitute military capability. The technologies, processes and the users are such components. The modern battlefield relies on advanced technologies tapping on high connectivity, are more lethal, precise, and autonomous. Due to this evolution, areas once thought to be safe from conventional attacks are increasingly becoming vulnerable. This evolution of technology and shorter development curves have also increased the prominence of the cyberspace, as a domain of war. However, many militaries, especially in Africa are still operating legacy systems and struggling with modernizing their systems to take advantage of the digital evolution. This paper, therefore, uses a systematic literature review and benchmarking focusing on selected super cyber power nations’ indices to propose a strategic path for African militaries to drive digital transformation in their operational environments. The roadmap is proposed to stimulate the establishment and enhancement of African militaries’ cyber warfighting capabilities in the digital age. The objectives of this digital transformation path include establishing a digital backbone, where all the sensors, effectors and the deciders are plugged to share information and intelligence.","PeriodicalId":429427,"journal":{"name":"International Conference on Cyber Warfare and Security","volume":"41 1","pages":""},"PeriodicalIF":0.0,"publicationDate":"2024-03-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140223556","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Deep Learning-based Framework for Detecting Malicious Insider-Inspired Cyberattacks Activities in Organisations 基于深度学习的组织内部恶意网络攻击活动检测框架

International Conference on Cyber Warfare and Security Pub Date : 2024-03-21 DOI: 10.34190/iccws.19.1.2166

Gibson Chengetanai, Teandai R. Chandigere, Pepukai Chengetanai, Rachna Verma

{"title":"Deep Learning-based Framework for Detecting Malicious Insider-Inspired Cyberattacks Activities in Organisations","authors":"Gibson Chengetanai, Teandai R. Chandigere, Pepukai Chengetanai, Rachna Verma","doi":"10.34190/iccws.19.1.2166","DOIUrl":"https://doi.org/10.34190/iccws.19.1.2166","url":null,"abstract":"\u0000Abstract— Cyberattacks are happening at an alarming rate both in developed and developing countries. This is due to more users now being connected to the global village (internet). Significant strides have been taken by organisations to protect information technology assets together with data, by doing defense-in-depth, using firewalls and access control approaches collectively. These approaches work well in detecting attacks by outsider cyber-attackers. In recent cyberattacks the perpetrators have been those within the organisation, as they can easily bypass security measures especially those with high privileges and they can go undetected for quite a long time. We propose a deep learning approach termed Automatic_ IDS_ Deep model (framework) that is infused with intrusion detection systems to give timely detection of malicious activities by those within the organisation. Experiments were conducted and averaging of results was done to determine accuracy, recall, and precision of the proposed model. The model (framework) offers better results on its performance in detecting attacks that are perpetrated within the organisation. \u0000 \u0000 \u0000 \u0000","PeriodicalId":429427,"journal":{"name":"International Conference on Cyber Warfare and Security","volume":" 54","pages":""},"PeriodicalIF":0.0,"publicationDate":"2024-03-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140221173","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Infusing Morabaraba game design to develop a cybersecurity awareness game (CyberMoraba) 注入 Morabaraba 游戏设计，开发网络安全意识游戏（CyberMoraba）

International Conference on Cyber Warfare and Security Pub Date : 2024-03-21 DOI: 10.34190/iccws.19.1.1957

Mike Wa Nkongolo

{"title":"Infusing Morabaraba game design to develop a cybersecurity awareness game (CyberMoraba)","authors":"Mike Wa Nkongolo","doi":"10.34190/iccws.19.1.1957","DOIUrl":"https://doi.org/10.34190/iccws.19.1.1957","url":null,"abstract":"Numerous studies have confirmed the effectiveness of Cybersecurity Awareness Games (CAGs) in enhancing the security posture of diverse organizations. As these organizations increasingly face the formidable challenge of cyberattacks, implementing serious CAGs to solve this issue has become a paramount concern. This article introduces an innovative approach to cybersecurity education by presenting a serious CAG. The game aims to effectively educate students about critical aspects of cybersecurity awareness engagingly and interactively. The study aimed to redefine cybersecurity awareness training by introducing an indigenous game design that intricately incorporates the traditional South African Morabaraba board game. While the effectiveness of non-indigenous games like \"Capture The Flag (CTF)\" in cybersecurity training is acknowledged, indigenous designs have been overlooked. This research creatively integrates Morabaraba's gameplay into cybersecurity training, adapting it into a competitive game where players adopt the roles of either defenders or attackers, with corresponding tokens/images symbolizing various cyber defense and attack strategies. Both the defenders and attackers in the game can elevate their awareness scores by strategically positioning defensive or attacking images on the game board. Subsequently, a judging entity assesses the players' moves and assigns scores based on the accuracy of the images placed. The game mirrors real-world scenarios, promoting strategic thinking and leveraging interactive gameplay for practical insights into cybersecurity awareness. Players demonstrate their cybersecurity knowledge through offensive and defensive strategies. A group of 40 students evaluated the game's effectiveness, highlighting its potential to create an engaging and competitive learning environment that imparts cybersecurity principles and practical application. The evaluation of the game mechanics demonstrated a remarkably positive outcome, with students expressing both enjoyment and an enhanced understanding of cybersecurity awareness.","PeriodicalId":429427,"journal":{"name":"International Conference on Cyber Warfare and Security","volume":" 6","pages":""},"PeriodicalIF":0.0,"publicationDate":"2024-03-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140221778","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Using Digital Forensics for Android Smartphone Devices to aid Criminal Investigations 利用 Android 智能手机设备的数字取证技术协助刑事调查

International Conference on Cyber Warfare and Security Pub Date : 2024-03-21 DOI: 10.34190/iccws.19.1.2004

Stephanie Agenbag, Andre Henney, H. Pieterse

{"title":"Using Digital Forensics for Android Smartphone Devices to aid Criminal Investigations","authors":"Stephanie Agenbag, Andre Henney, H. Pieterse","doi":"10.34190/iccws.19.1.2004","DOIUrl":"https://doi.org/10.34190/iccws.19.1.2004","url":null,"abstract":"In the past decade, there has been an exponential adoption and ownership of smartphones by billions of users worldwide. However, as smartphone usage increases, criminals have taken advantage of them for illicit or criminal purposes. In criminal investigations, smartphone data has become an invaluable source of information. This study focuses on constructing a snapshot of Android-operated smartphone data to assist investigators in answering critical investigative questions. A thorough review of the literature with regard to the use of smartphone evidence in criminal cases, with the goal of emphasising the investigative phase and the supportive role of mobile data evidence in guiding investigations will be performed. In order to identify additional persons of interest and develop a thorough understanding of the case, the methodology will entail analysing user profiles, smartphone usage patterns, communication logs, application usage, geographic lookups, and device interactions. By conducting a thorough examination of relevant literature, designing a suitable model, and executing a case study, the study intends to offer valuable perspectives on the creation of timelines or visual representations derived from smartphone data. The results of this study will contribute to improving the efficacy of mobile forensics in assisting investigators and facilitating the use of Android-operated smartphone data as supporting evidence in criminal investigations.","PeriodicalId":429427,"journal":{"name":"International Conference on Cyber Warfare and Security","volume":" 3","pages":""},"PeriodicalIF":0.0,"publicationDate":"2024-03-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140221985","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0