Threat Analysis Research Articles

Analysis of threats and risks in the Web3 ecosystem in the security context

This research article discusses current and promising issues in the field of cybersecurity, in particular, the analysis of potential threats and risks of Web3 development. Web3 is a new generation of the Internet based on blockchain technology, decentralization, cryptography, and smart contracts. This approach aims to improve security, privacy, and user rights in the virtual environment, but without proper understanding, it can carry the opposite risk. The article begins with an analysis of recent research and issues. The authors discuss potential threats and risks, including possible attacks on decentralization protocols, censorship manipulation, attacks on blockchain protocols, attempts to break the consensus system, and unfair smart contract transactions. The article discusses a number of vulnerabilities and attacks that can harm the new Web 3.0 technology. The article describes new threats to the privacy of users and their digital assets, including the use of anonymization technologies and countermeasures by criminal organizations or government agencies. The article also emphasizes the importance of discussing the legal aspects of Web3 integration, finding an optimal balance between the regulation of the digital space and users' rights to privacy and autonomy. Global challenges require international cooperation and standardization of regulatory rules in this area. The results of the study demonstrate that a conscious approach to analyzing Web3 threats is the key to building a secure future for the Internet. This article contributes to the dissemination of information and knowledge about possible risks, opens up new horizons for scientific research, practical implementation of cybersecurity measures, and political dialogue in the Web3 era.

A Comprehensive Analysis of Cybersecurity Threats based IoTs

The rapid growth of the Internet of Things (IoT) in our daily activities, has led to serious concerns regarding to potential cybersecurity threats. Therefore, there is a real need to have active and proactive solutions. This research undertakes an extensive analysis review of literature for the existing cybersecurity challenges and threats within various IoT devices. Also, it presents the suggested solutions as well as the structural frameworks. Moreover, it helps to detect and identify possible threats using different methods. Furthermore, it makes a contribution by drawing attention to research gaps within industrial and economic fields based IoTs. According to our findings, the main concern issues in IoT systems are cybercrimes and privacy cases. Artificial Intelligence, on the other hand, presents promising opportunities to improve cybersecurity. Nonetheless, certain attacks including authentication and confidentiality remain unaddressed when applying current solutions. This is, in fact, calling for more investigation and practical testing of suggested defences.

Utilization of Traditional Conservation of Sumatran Tiger as a Potential Development of Biology Teaching Materials

Indigenous communities have long had an unwritten norm system that regulates the protection of forests and biodiversity inside. Customary law has the potential to be developed as a source of learning biology. Therefore, the purpose of this study is to find out the values of traditional conservation of the Sumatran tiger which can be used as a source of developing biology teaching materials based on local wisdom. The method used in this research is a systematic literature review. Based on the results of the study, obtained results regarding the identification of Sumatran tiger, threats, and forms of conservation in the natural habitat of the Sumatran tiger. Based on the Curriculum 2013, the relevance of this study is linked into basic competencies 3.2 and 4.2 regarding distribution, threat analysis, and conservation efforts of biodiversity for the grade of 10-th of high school. The material is also included in the learning outcomes of the Merdeka Curriculum phase E regarding understanding and process skills analyzing interactions between ecosystem components and efforts to conserve biodiversity. These material resources can be developed into a module-based on local culture to be studied independently by students

An analysis of threats to endangered animal taxa in California's freshwater systems

Abstract This study analysed threats to federally and State‐listed endangered and threatened animal taxa in California, United States, and how threats varied by taxa, habitat use, spatial extent, severity, geographical region and endemic status using threat categories from the International Union for Conservation of Nature (IUCN) Red List Threats Classification Scheme and information from scientific literature and reports. A majority of the taxa evaluated were associated with freshwater habitats and were endemic to California. The most threatened taxonomic groups were fish, followed by mammals and birds. The number of threats was mostly evenly distributed across the State's three geographical regions (i.e., North, Central and South), and no single region had a disproportionately high number of endangered animal taxa. Freshwater taxa were the most affected in nearly every threat category, suggesting that freshwater taxa are more threatened than their terrestrial and marine counterparts. In descending order, the most prominent threats across all taxa were habitat loss, invasive species, climate change and altered hydrology. Threats identified as high severity also tended to have a high spatial extent and vice versa. This study shows that the numerous freshwater faunas in California are disproportionately affected by threats also found in other freshwater systems and Mediterranean‐climate regions, highlighting the scope of the freshwater biodiversity crisis in California. Managing priorities to target the most pervasive threats to endangered freshwater taxa documented in this study will help safeguard freshwater biodiversity against human threats in California and beyond.

An Analysis of Climate Change Threats to Cultural Practices: A Case Study of the Dikgale Community, South Africa

Scientists and policymakers are failing to account for the influence of climate change on many facets of cultural life. Much emphasis is placed on the effects of climate change on agriculture, with less emphasis placed on how low crop and livestock output may affect socio-cultural activities. The current study investigated the effects of climate change on the socio-cultural practices of the Dikgale community in South Africa’s Limpopo Province. Semi-structured interviews were conducted with 150 participants purposely selected in a rural community. The study’s findings revealed that cultural activities that foster communities’ cohesion are already under threat from the effects of climate change. Temperature fluctuations and irregular rainfall negatively impacted cultural festivities such as the First Fruit Rituals, Rain-making Rituals, Cultural Entertainments, and bride price payment. To complete the rites and meet marital requirements, subsistence crops and cattle are used. Poor subsistence crop and livestock production has left the rituals obsolete, and as a result, these customs are rarely practised and have been supplanted by western practices. If this cultural heritage is lost, rural communities will lose significant social, cultural, and economic values. The study contributes to the less documented intangible cultural heritage dimensions impacted by climate change. Keywords: Climate Change, Socio-Cultural Practices, Cultural Heritage, Limpopo Province

Strengths, Weaknesses, Opportunities, and Threats Analysis for the Strengthening of Solar Thermal Energy in Colombia

Colombia has made different efforts to contribute to fulfilling its international commitments to curb climate change by reducing emissions and promoting technological development and project financing. However, the existing policies and regulatory framework primarily focus on promoting the photovoltaic industry for electricity production. Likewise, the energy sector has neglected the potential of solar thermal energy as a heat source. In this sense, it is necessary to redouble efforts through new public policies that integrate solar thermal energy in the residential and productive sectors. Using solar thermal energy for heating can contribute to the energy transition and meet its sustainable development goals. Therefore, the main objective of this work was to analyze Strengths, Weaknesses, Opportunities, and Threats to determine the potential application of thermal solar heat in Colombia while considering the local context. Factors such as their environmental conditions, policies, and regulations; the existence of international agreements; and their political status in general were analyzed. The analysis revealed Colombia’s significant solar heat potential, enabling over 1.3 million cold-climate households to access hot water or reduce firewood use. Industrially, applying solar heat in 5% of the current industry could decrease fossil fuel consumption by 13 PJ. The findings highlight that Colombia’s potential in thermal solar energy necessitates collaborative efforts, legislative reinforcement, climate-adaptive measures, and the resolution of political and social challenges.

Analysis of corporate network cyber threats based on parallel processing of Netflow data

Public services of various organizations are subject to constant cyber attacks, which increases information security risks. Network traffic analysis is an important task to ensure the safe operation of network infrastructure, including corporate networks. This paper provides an overview of the main approaches for analyzing network traffic, provides related works, and points out the shortcomings of existing works. One method is to analyze network traffic data using the Netflow protocol, which allows traffic data to be stored at the L3 layer of the OSI model. A feature of the study is the use of long observation periods. When storing data over long time intervals, the logs become large, which requires parallelization for primary data processing. The authors developed a cross-platform software package for distributed processing of network activity logs, which was used to analyze the network activity of the corporate network of the Krasnoyarsk Scientific Center for 2021–2022. A diagram of the software package is shown, its capabilities and operating features are described. Data sources for analysis and processing methods are provided. In this paper the authors formulated and formalized heuristic criteria for the anomaly of network traffic, which identify the presence of possible network attacks, and extracted datasets on the network activity of various application-level protocols. For the obtained data sets, statistical indicators were calculated, information about anomalous network activity was obtained for two years. In this work we tested the previously proposed method for comparing the cyber threats risks for different time intervals, which showed a significant increase in risks for 50% of indicators in 2022. Comparisons of monthly intervals over different years showed similar increases in risk. Thus, the method has shown its efficiency and can be used in other areas in which there are groups of criteria for independent indicators. The authors proposed plans for further development of methods for analyzing network activity.

Influence of selected management factors on strategic planning process in secondary schools in Lagos state

For quality education delivery, quality assessment and suitable policy environment to achieve the goal of secondary schools’ education, principals should transform their schools through development and appropriate implementation of strategic plans. This study investigated influence of selected management factors on strategic planning process in secondary schools in Education District VI Area of Lagos State. Three research questions and one hypothesis were generated for the study. The study employed descriptive survey design. A sample of one hundred and twenty (120) respondents was used. Instrument tagged “Management factors and strategic planning Questionnaire” (MFSPQ) was used to elicit information from respondents. Pearson Product Moment Correlation (PPMC) of 0.81 was obtained as the reliability coefficient. Data collected were analyzed using descriptive and inferential statistics, standard deviation t-test statistical methods). The findings showed that constraint of financial practices, personnel, inability to establish school implementation team, among others affect implementing their schools’ strategic plans by 59.2%. Analyses revealed that there is a significant difference between urban and rural schools in terms of the problems they encounter in the implementation of strategic plan (t= -.689, df = 118, p<0.05).The study recommended among others that schools’ management and educational stakeholders should carry out a Strengths, Weaknesses, Opportunities, and Threats (SWOT) analysis and identify strategic issues affecting the schools; All stakeholders such as SBMC, Principals and staff should be trained in the art of preparation, implementation and continuous evaluation of strategic plans. Government should also assist the rural schools with necessary facilities to enhance the procedure for strategic plans.

Application of Drones in Humanitarian Relief: A Review of State of Art and Recent Advances and Recommendations

With the advent of unmanned aerial vehicles (UAVs), known as drones, their deployment in various sectors, especially in humanitarian relief, has witnessed considerable attention. Despite the growing number of studies highlighting the potential of drones, there remains a discernible research gap in consolidating the lessons learned, challenges faced, and regulations governing their usage, particularly in the United States. The aim of this study is to provide a comprehensive examination of drone deployment in humanitarian relief through a systematic literature review. By outlining the state of the art of studies and practices of the application of drones for humanitarian relief and healthcare support, and analyzing case studies and regulations, this paper presents a strengths, weaknesses, opportunities, and threats (SWOT) analysis and offers a clear picture of the current state of drone application in relief efforts. Results indicate that while drones offer unique advantages, such as accessibility to hard-to-reach areas and rapid response, they also face challenges relating to regulatory restrictions, privacy concerns, and logistical limitations. Based on the analysis, this paper concludes with a set of recommendations for the effective employment of drones, including fostering multi-stakeholder partnerships and streamlining the approval process for emergency drone flights. This study emphasizes the need for collaborative regulatory frameworks and best practices to maximize the potential of drone technology in aiding those in distress.

A secure blockchain framework for the internet of medical things

AbstractTechnological advancements in the Internet of Medical Things (IoMT) enable medical services to provide incredibly challenging real‐time functions. The proliferation of health sensors has improved patient monitoring, both for patient care and medical purposes, giving professionals more data for early diagnosis and treatment recommendations. Privacy and security are critical considerations for collecting and transferring data from these heterogeneous sensors across the database and the IoT network. This study leverages blockchain technology to improve Electronic Health Record (EHR) privacy and security. This article proposes a novel decentralized architecture using IoT and Blockchain technology for storing EHR and monitoring real‐time patient data. The proposed patient‐centric framework and architecture offer a straightforward solution that fulfills data integrity and anonymity and meets the data interoperability demands. Self‐contained encryption–decryption and primitive cryptographic techniques enhance the system's security. The proposed study models IoT health sensors such as body temperature, pulse rate, spO2, and Electromyogram (EMG) in a blockchain‐based IoT framework. The proposed system has been evaluated to determine that it can process and store Remote Patient Monitoring (RPM) data with encouraging results. The article provides performance, security, and threat analysis to contribute toward a robust, secure, and smart healthcare system using metrics such as latency, throughput, IoT sensor activity, and resource usage. Experimental results present that the proposed method beats the standard healthcare system regarding service quality and patient data monitoring.

Cyber attacker’s next action prediction on dynamic real-time behavior model

This paper addresses the critical need for enhanced threat analysis amid escalating cyber threats. Recognizing limitations in current network-level Attack Graphs (AGs), including scalability issues and the challenge of detecting zero-day attacks, we introduce a two-phase approach. Firstly, we dynamically model the attacker’s real-time behavior within the target system, resulting in a minimal AG with action states and their system impact. In the second phase, a Hidden Markov Model (HMM) predicts the next action based on the real-time behavior model, refined through Honeypot data for continuous accuracy. The minimal AG not only predicts but also forecasts the impact of the next action, facilitating robust security decisions. Experimental evaluations using Cowrie Honeypot logs demonstrate its efficacy, outperforming conventional algorithms. This innovative approach significantly advances cyber threat analysis, enhancing security decision-making within a concise framework.

Development strategy of halal tourism village in Gedepangrango tourism village, Sukabumi district

Tourism is an industry that significantly contributes to the country's economy. Halal tourism is a type of tourism with promising potential. The number of tourism villages with halal concepts in Indonesia is still limited. However, Gedepangrango Tourism Village shows potential for development as a halal tourism village. This study analyses the strategy for developing a halal tourism village in Gedepangrango Tourism Village, Sukabumi Regency, utilizing the Analytical Network Process (ANP) method and Strengths, Weaknesses, Opportunities, and Threats (SWOT) approaches. The study's findings indicate that strengths, weaknesses, and opportunities significantly impact the development of a halal tourism village in Gedepangrango Tourism Village. The analysis of strengths, weaknesses, opportunities, and threats reveals the tourism potential in agriculture, nature, and culture within Gedepangrango Tourism Village. However, governance in the village has not been optimal. Notably, the development plans for the halal tourism village correspond to the Regional Medium-Term Development Plan of Sukabumi Regency. Additionally, several other tourist village objects present competition. The primary focus lies in raising human resources' capacity to develop halal tourism villages.

FOOD SECURITY OF THE REGION: CURRENT TRENDS AND THREATS

Food security is a very significant aspect of development for regions around the world, as it concerns the availability, accessibility, use, and stability of food resources. The purpose of this article is to explore the features of the conceptual framework of food security and study the multifaceted factors that influence it in the regional context. Analysis of current trends and threats also comes to the fore. A full understanding of these factors, trends, and challenges is necessary for politicians and stakeholders to develop effective strategies aimed at ensuring food security of the population in a particular region. The methods used in the article are comparison, analysis of scientific publications and statistical method.
 Based on the results of the article, it is substantiated that trends in food security in the region are determined by a complex interaction of factors. A complex set of threats is at play and addressing them requires a multifaceted approach that combines sustainable agricultural practices, investment in infrastructure and the promotion of stability and peace.

A systematic review of ChatGPT use in K‐12 education

AbstractThis systematic review, adhering to the PRISMA framework, investigated the utilisation of ChatGPT, a language model developed by OpenAI, throughout Kindergarten to 12th grade (K‐12) educational settings. The review synthesises findings from 13 selected papers, encompassing the strengths, weaknesses, opportunities, and threats (SWOT) analysis of ChatGPT's implementation in K‐12 education, implications for various stakeholders, and practical recommendations. It is highlighted that ChatGPT could empower educators through curriculum, lesson planning, materials generation, differentiation, and optimising student learning experience through personalised learning. However, concerns regarding academic integrity and output quality must be addressed. The paper provides pedagogical recommendations and ethical considerations to utilise ChatGPT better. It contributes to the ongoing discourse about AI, particularly ChatGPT's role in K‐12 education, further inspiring future research and educational practices and facilitating the effective integration of ChatGPT into K‐12 educational settings where collaboration arises as a key role, in particular under the approach of co‐design for learning.

Countering Extremist Ideology and Media Security of the State

National security in the media sphere is becoming a multifaceted task related to the implementation of Russia’s cultural sovereignty in the context of digital transformation. Strategic planning for the development of the national media space involves domestic political and diplomatic decisions of a conceptual nature that can ensure the unity of the international information space while countering threats: (1) propaganda of violent extremism, (2) popularization of destructive ideology, (3) reduction of cultural capital level of the party in power and opposition. Operational plans for ensuring media security quite often follow the logic of situational response to threats posed by enemies and implement protective measures in relation to the media space at the national level. In methodological terms, the media security of the state is characterized by systemic practices of ensuring information security (in formal legal analysis), and analysis of threats to cognitive and noospheric security (in the natural science study of communication processes). The research methodology involves the use of the method of participant observation inherent in noxology to classify threats emanating from the mass media. Among the main objectives of the article: analysis of modern Russian political and legal documents aimed at ensuring media security and countering extremism, characterizing the Russian policy of securitization of social problems in the media sphere, delimiting legal political struggle from criminal (extremist and destructive) practices of political communication. The objectives of the study include the analysis of foreign experience in ensuring national media security in the context of digitalization and the growing threat of violent extremism. The logic of competition in the digital cultural space practically excludes the use of secrecy, censorship and forcing the audience to watch propaganda in the process of ensuring media security. Public relations in the media sphere involves the choice of media content by the audience of the global information space, which means that the protection of national spiritual and moral values is implemented in the liberal paradigm and demands open dialogue between the party in power and the opposition on topical issues of national security.

Тестування на проникнення компонентів FPGA як сервісу для забезпечення кібербезпеки

The subject of study in this article is modern penetration testing technologies, in which the test object is a platform with access to FPGA resources. The goal of this work is to improve modern methods of penetration testing of services that provide FPGA as a Service, to identify vulnerabilities, the elimination of which increases the level of security of services and increases the level of user trust in such services. Task: to analyze possible threats of FPGA as a Service platforms; analyze the structure of FPGA as a Service platforms; analyze options for using the penetration testing standard; and offer key components for ensuring cyber security of FPGA as a Service platforms. According to the tasks, the following results were obtained. A study of the cyber security problems of FPGA as a Service platforms was conducted, and a set of components for ensuring the cybersecurity of FPGA as a Service platforms was proposed. An analysis of modern cybersecurity threats of FPGA as a Service platforms was carried out. The possibility of applying the penetration testing standard to FPGA services is considered. Regular audits and penetration testing are key elements of a cybersecurity strategy and help maintain customer and user trust in FPGA services. A set of components for ensuring cybersecurity of FPGA as a Service platforms is proposed, which corresponds to modern threats. The complex includes activities such as regular software updates, security monitoring and analysis, audit and penetration testing, compliance with security standards, and staff training. Conclusions. The main contribution and scientific novelty of the obtained results is that a study of the possibilities of penetration testing was conducted, where the test object is a platform with access to FPGA resources. As in many other areas, ensuring the cybersecurity of FPGA as a Service platforms is a complex task, where ignoring any component can lead to critical consequences. Applying only penetration testing is not enough; therefore, a comprehensive list of cybersecurity measures for FPGA as a Service platforms is provided.

Strengthening Automotive Cybersecurity: A Comparative Analysis of ISO/SAE 21434-Compliant Automatic Collision Notification (ACN) Systems

The increasing usage of autonomous and automatic systems within the automotive industry is steering us towards a more interconnected world. This enhanced interconnectivity fosters a more streamlined driving experience, reduces costs, and provides timely driver assistance. The electric/electronic (EE) architectures of modern vehicles are inherently complex due to the multitude of components they encompass. Contemporary architectures reveal that these components converge at an electronic control unit (ECU) called the central gateway, which could potentially represent a single point of failure. While this central unit is typically adequately safeguarded, the same cannot be said for the connected components, which often remain vulnerable to cyber threats. The ISO/SAE 21434 standard paved the way for automotive cybersecurity and could be used in parallel with other standards such as ISO 26262 and ISO PAS 21488. Automatic collision notification (ACN) is one of the most typical systems in a vehicle, and limited effort has been dedicated to identifying the most suitable architecture for this feature. This paper addresses the existing security and privacy gap of this feature by conducting a comparative analysis of security threats in two distinct ACN architectures. Notably, despite ACN architectures exhibiting inherent similarities, the primary distinction between the two architectures lies in their strategies for crash estimation and detection, followed by subsequent communication with emergency response teams. A rigorous security assessment was conducted using the ISO/SAE 21434 standard, employing the TARA and STRIDE methodologies through the Ansys medini analyze software. This analysis identified an average of 310 threats per architecture, including a significant number of high-level threats (11.8% and 15%, respectively), highlighting the importance of a comprehensive evaluation.

Building Resilience in the European Union in Times of Polycrisis and Challenges in the Cognitive Domain

This aim of this publication is to draw attention to the need to build resilience in the societies and Member States of the European Union in times of “polycrisis” and challenges in the cognitive domain. Following an analysis of global risks and hybrid threats, as well as the emergence of artificial intelligence in today's communication and security environment, certain recommendations and conclusions are drawn to enable the EU to exploit its potential to be a “multidimensional power”, overcoming non-kinetic challenges to vulnerabilities in democratic societies, citizens' minds and emotions. In this research, a range of political science analysis methods were employed. In addition, the “mind maps” technique of the British psychologist Tony Buzan was implemented by enabling the synthesis of ideas through visual representations. On the eve of the European elections in 2024, the publication draws key conclusions and recommendations for overcoming the challenges of desinformation, perception management and psychological manipulation, which undermine trust in democratic institutions and prevent decision-makers from countering them. These include: building resilience through education, media literacy, critical thinking, digital competencies, mental toughness; the ability to think not only fast but also slow; the application of exponential design to strategic thinking; multilateralism and close cooperation with NATO.

Creating an integrated strategic plan

The modern surgical leader now requires many tools for successful leadership. One critical tool is developing an integrated strategic plan where team and culture are developed with a directed common mission. This mission or strategic plan must fit within certain constraints, such as the larger institutional goals and constrained resources. To help develop this strategic plan, the surgical leader has many resources to use. The most common strategic planning tool is the Strengths, Weaknesses, Opportunities, and Threats analysis. Here, both internal and external factors are evaluated. From here, the contribution will review the Political, Economic, Social, Technological, Legal, and Environmental analysis (ideal for external factors) and Mission, Objectives, Strategies and Tactics analysis (ideal for internal factors), along with the Blue Ocean Strategy, Scenario Planning, and Ansoff Matrix, all of which are excellent for future planning. Porter’s Five Forces will review standard competing forces, whereas Six Sigma reviews measurable process development, and Balanced Scorecard provides the framework for measurable advancements. After the paper, the reader will better understand the various tools that can be used to develop an integrated strategic plan.

Machine learning based fileless malware traffic classification using image visualization

In today’s interconnected world, network traffic is replete with adversarial attacks. As technology evolves, these attacks are also becoming increasingly sophisticated, making them even harder to detect. Fortunately, artificial intelligence (AI) and, specifically machine learning (ML), have shown great success in fast and accurate detection, classification, and even analysis of such threats. Accordingly, there is a growing body of literature addressing how subfields of AI/ML (e.g., natural language processing (NLP)) are getting leveraged to accurately detect evasive malicious patterns in network traffic. In this paper, we delve into the current advancements in ML-based network traffic classification using image visualization. Through a rigorous experimental methodology, we first explore the process of network traffic to image conversion. Subsequently, we investigate how machine learning techniques can effectively leverage image visualization to accurately classify evasive malicious traces within network traffic. Through the utilization of production-level tools and utilities in realistic experiments, our proposed solution achieves an impressive accuracy rate of 99.48% in detecting fileless malware, which is widely regarded as one of the most elusive classes of malicious software.