Cybercrime Research Articles

Evaluation of the extent and demanding roles of ethical hacking in cybersecurity

<p>A permitted effort to acquire unlawful connection to computing systems, programs, or information is referred to as ethical hacking. Software developers must check for flaws, compartment focus, define needs and objectives, and create a method that makes the most of their resources. The rationale for this kind of vulnerability evaluation has a direct impact on the overall assessment’s estimate. More specifically, it is known that technological gadgets are necessary to prevent computer criminals from breaking into web applications to control their operations and gain access to confidential knowledge for unintended objectives. This research study provides an analysis to determine the scope and challenging responsibilities of ethical hacking employed in cyber security. Network monitoring is a legitimate need in which authorized developers attempt to breach a company’s frameworks or arrangements for the convenience of the owners to uncover security flaws. It provides information on how organizations may use computer forensics, such as vulnerability assessments using open-source devices, to safeguard their program’s administrators and operations. Numerous tools have been explored for security auditing of the networks which involves Nmap, Nessus, Brutus, Acunetix, etc. As a result, safeguards were put in place to identify these flaws and protect sensitive data from cyber-attacks. Ethical hacking has a bright future for detecting system or application vulnerabilities effectively. Nevertheless, tools utilized in the cyber security field for network or computer application secrecy have some limits namely growing complexity, high cost, security measures restrictions, etc. Hence, there is a wide scope to build new cost-effective cyber secrecy tools for the enhanced secrecy of user data in real time.</p>

Цифровые технологии как инструменты кибермошенничества: типологический подход

Cyber fraud is the subject of study of a whole cluster of sciences, the area of verification of various conceptual approaches, general scientific and special research methods. In the present article, the heuristic merits of such a method of studying cyber fraud as typological analysis are substantiated, as well as the existing variants of various aspects of cyber fraud typology are considered. As part of the given approach, the authors proposed a typology of cyber fraud practices based on the application of current digital technologies (phishing sites, deep-fakes, cookies, digital imitation of documents, scam pages, file hosting services, MVNO-operators, SIM card duplicates, Bluetooth, chatbots, QR code, VPN services), which allows diversifying specific cyber fraud tech-niques, including both manipulation of personal data and creation of special malicious content.

Tinjauan Yuridis Kejahatan di dalam Sistem Elektronik pada Rekening Virtual

Virtual account is an electronic application that is created to connect to a large computer network when using the internet. This is very vulnerable to the threat of online crime, virtual accounts must provide security for customers. The aim of the research is to find out what electronic system crimes are, analyze the application of data protection laws, and legal sanctions for perpetrators of account burglary crimes. The research method is normative juridical. The research results show that the electronic systems currently in force in Indonesia are Mobile Banking, SMS Banking and Internet Banking. Regarding data protection in banking, it is regulated in article 40 (1) of Law no. 10 of 1998 concerning banking, namely that banks are obliged to keep confidential information regarding depositors and their deposits. Even though the Laws and Regulations have strictly regulated the protection of customer data, the fact is that in the field there is still a lot of misuse of customer personal data by irresponsible parties. Prohibitions for perpetrators of virtual account burglary crimes are regulated in Law Number 19 of 2016 concerning Information and Electronic Transactions Article 31 Paragraphs 1, 2, 3 and 4. The conclusion is that the application of the law regarding data protection in banking is regulated in Article 40 (1) of the Law No. 10 of 1998 concerning banking, namely that "banks are obliged to keep confidential information regarding depositors and their deposits.

A Multi-Indicator Light Weight Defense Scheme for Smartphone Camera-Based Attacks

Over the years, cyber criminals have succeeded in exposing some vulnerabilities in smartphones and have exploited those vulnerabilities in several ways. In recent years, one of the growing attacks on smartphones is the camera-based attacks. Attackers are able to exploit smartphone vulnerabilities to cause harm to smartphone users by using cameras of the smartphones to capture images and videos. Privacy leakage and confidentiality remains a big threat to smartphone users and this has gained attention from researchers and industry players across the world. In this research paper, a multi-indicator light weight defense scheme is presented to address the rising smartphone camera-based attacks. The random forest algorithm, the Gini coefficient index and the entropy method are adopted in the designing of the proposed scheme. The means of the threat indicators and the Mean Square Deviation (MSD) is also calculated in order to ensure accurate scores and weight assignments of the threat indicators. The proposed multi-indicator light weight scheme demonstrated to be consistent with real situations. A review of literature in camera-based attacks is also presented in this research paper.

Organized Transnational Crime and Combating Crimes in the Field of Information Technologies (Past and Present)

The article deals with the issue of criminal law aspects of organized crime. The author's vision of the foundations of the concept of organizational and tactical elements of the Ministry of Internal Affairs of Ukraine is presented. Recommendations on prevention and counteraction of transnational computer crimes are provided.

Cyber Crime Detection and Prevention Techniques on Cyber Cased Objects Using SVM and Smote

Conventional cybersecurity employs crime prevention mechanisms over distributed networks. This demands crime event management at the network level where Detection and Prevention of cybercrimes is a must. A new Framework IDSEM has been introduced in this paper to handle the contemporary heterogeneous objects in cloud environment. This may aid for deployment of analytical tools over the network. A supervised machine learning algorithm like SVM has been implemented to support IDSEM. A machine learning technique Like SMOTE has been implemented to handle imbalanced classification of the sample data. This approach addresses imbalanced datasets by oversampling the minority classes. This will help to solve Social Engineering Attacks (SEA) like Phishing and Vishing. Classification mechanisms like decision trees and probability functions are used in this context. The IDSEM framework could minimize traffic across the cloud network and detect cybercrimes maximally. When results were compared with existing approaches, the results were found to be good, leading to the development of a unique SMOTE algorithm.

A bibliometrics analysis of multimedia forensics and deep learning research based on Scopus index

Forensics of digital data are concerned with identifying, acquiring, processing, analysing, and reporting on electronic data. Multimedia forensics focuses on investigating computer crimes using forensic methods. The analysis of multimedia evidence is the role of multimedia forensics, on the other hand. In the analysis, digital evidence is evaluated scientifically to maintain its integrity, to find its source, and to authenticate it. There are several methods in multimedia forensics, such as the implementation of deep learning. The purpose of this research is to conduct bibliometric analysis in multimedia forensics and deep learning by using the data gathered from Scopus index on the keyword “multimedia forensics and deep learning”. The result is 68 relevant papers were found in the range of 2017-2022. The results of this research can be used by researchers as a reference when conducting research and determining the research themes to be pursued.

Legislative intervention to confront computer and Internet crimes

Legislative intervention to confront computer and Internet crimes

Current Security Threats in Applications of Wireless Sensor Network

Wireless sensor networks have a broader application range in almost every field of human endeavours, which exposes them to a variety of security threats on a daily basis from cyber criminals. It is a remote monitoring system for events or phenomena in areas such as smart grids, intelligent healthcare, circular economies in smart cities, and underwater surveillance. Cybersecurity threats have long been a source of concern in the field of wireless sensor networks. The goal of cyber security in this era is to certify the authenticity of networks confidentiality, data integrity and availability of network assets. Various security mechanisms, particularly key management cryptographic, authentication mechanisms, and intrusion detection systems have been developed from several machine learning algorithms, and so on, which have been used to ensure network security. In this paper, we focused on outlining diverse application areas of wireless sensor networks with their security threats, major challenges and given some common mechanism to counter security threats for in-depth research insight on security in applications of wireless sensor networks. In addition, an analysis of the common attacks on wireless sensor networks has been provided.

Debit Card Fraud: An Imminent Issue in Cyber Crime

Debit Card Fraud: An Imminent Issue in Cyber Crime

Service, game and livelihood, the new dimensions of neutralization techniques in Internet Romance Fraud: Extending the Neutralization Theory in Modern Internet crimes.

Internet romance fraud is a serious international crime made possible by the use of the internet and social media dating sites. It is a relationship fraud based on mutual love shared between the victims and their offender partners, without the victim knowing that the offenders have criminal intent to defraud the victim. This crime affect victims in developed countries who are referred to as ‘clients’ by their offenders’ partners. Offenders use neutralization techniques to rationalize and justify their deviant behavior by deflecting the quilt associated with this crime. This study surveyed 320 respondents in validated internet romance fraud (IRF) hotspots. Variance-based partial least square (SmartPLS) with structural equation modeling (SEM) was used to investigate casual relationships among the various. The findings indicate internet romance fraudsters” (IRF) use neutralization methods (“condemn of the condemners”, “denial of injury”, “denial of victim,” “denial of responsibility”, game, service and livelihood) to justify their crimes. The offenders do not use defense of necessity and metaphor of the ledger to rationalize their crimes against their victims. The evidence from this study suggests new dimensions of neutralization techniques (game, service and livelihood) have been introduced by criminals to justify their crimes. The empirical evidence from this study suggests that crime intention in the context of IRF is carried on to the actualization of the crime, a novelty in IS research. The implication of this suggests that criminals are using new techniques in emerging crimes (IRF). Law enforcement and prosecution should arm themselves to deal with the new way of crime justification and rationalization.

PRAVNI OKVIR ZAŠTITE OD VISOKOTEHNOLOŠKOG KRIMINALA U BOSNI I HERCEGOVINI – analiza strateških ciljeva i mogućnost usklađivanja sa evropskom strategijom sajber bezbednosti

The topic of this paper is the legal framework for protection against high-tech crime in Bosnia and Herzegovina, with an analysis of strategic goals and the possibility of alignment with the EU Cyber Security Strategy for the Digital Decade, which was adopted the year before last. The paper provides a conceptual definition of high-tech crime and cyber security, as well as their basic characteristics. Then, in brief, the legal framework of protection against high-tech crime in Bosnia and Herzegovina was analyzed. When it comes to the EU Cyber Security Strategy for the Digital Decade, the most significant parts of it are interpreted in the continuation of the work, especially those that could have application significance for Bosnia and Herzegovina. Based on the above, appropriate recommendations were given in the final deliberations for the improvement of the legal and strategic framework of cyber security in BiH.

IMPACT OF HIGH RADIO FREQUENCY SATELLITE OSCILLATIONS ON INITIATING EARTHQUAKES

Advanced satellite technology is worse than all the disasters on Earth due to the lack of dynamic security. The study of earthquakes is the most innovative research of all man-made disasters - no doubt, but there are new horizons of wonder for the thoughtful. Earthquakes are increasing unexpectedly in different countries of the world. People of most countries are worried about sudden earthquakes, but no one is able to reveal the main secret of these earthquakes. Many are blaming nature for this earthquake. Through this survey the exact origin of the matter has been presented to the whole world with proper evidence. Research shows that climate criminals are misusing advanced satellite technology to cause these earthquakes. According to research, misuse of advanced satellite technology causes artificial earthquakes at specific GPS locations on Earth, resulting in severe damage to humans, animals, plants and other objects. The intensity of these earthquakes is so intense that everyone is surprised. Studies have shown that the misuse of satellite technology has caused massive damage in man-made technological earthquake at a particular tectonic plate and other disasters. Due to these sudden earthquake, human suffering increases, standing institutions are demolished, road communication systems are ruptured, crop lands and residential areas are destroyed, individuals lose their lives. The study revealed that artificial earthquakes are caused by sudden radio-waves and strong oscillations of variable magnitude anywhere on earth. The study also showed the climate criminals use various fake messages and wireless tracking to influence policy-makers, the public and the media, as can be doubted in this study, All citizens and administrations should be aware and vigilant to prevent the rise of earthquake terror. The research shows that using advanced satellite technology, earthquakes can be created in time on any tectonic plate on the Earth. Moreover, the question remains that when technology was not invented, but earthquakes occurred - which were natural. Humans now generate artificial oscillations at specific GPS locations through earthquake simulation coding by multiplying the magnetosphere of previous natural earthquakes. The study shows that the EMMAST (Earthquake Mitigation and Management through Advanced Satellite Technology) model will make disaster mitigation systems safer and more efficient, saving millions of lives. The study on earthquakes is unique with world- class scientific research, which will open many research gateways for future generations.

Dynamic Inference From IoT Traffic Flows Under Concept Drifts in Residential ISP Networks

Millions of vulnerable consumer IoT devices in home networks are the enabler for cyber crimes putting user privacy and Internet security at risk. Internet service providers (ISPs) are best poised to mitigate risks by automatically inferring active IoT devices per household and notifying users of vulnerable ones. Developing a scalable inference method that can perform robustly across thousands of home networks is a non-trivial task. This paper focuses on the challenges of developing and applying datadriven inference models when labeled data of device behaviors is limited and the distribution of data changes across time and space domains (concept drifts). Our contributions are fourfold: (1) We collect and analyze more than six million network traffic flows of 24 types of consumer IoT devices from 12 real homes over six weeks to highlight the challenge of temporal and spatial concept drifts in network behaviors of IoT devices -we publicly release our training and testing instances data; (2) We analyze the performance of two inference strategies, namely “global inference” (a model trained on a combined set of all labeled data from training homes) and “contextualized inference” (several models each trained on the labeled data from a training home) in the presence of concept drifts; (3) To manage concept drifts, we develop a method that dynamically applies the “best” model (from a set) to network traffic of unseen homes during the testing phase, yielding better performance in a fifth of scenarios when the labels are available for the testing data (ideal but unrealistic settings); and (4) We develop a method to automatically select the best model without needing labels of unseen data (a realistic inference) and show that it can achieve 94% of the ideal model’s accuracy.

Analisis Bukti Digital Direct Message Pada Twitter Menggunakan Metode National Institute Of Justice (NIJ)

Twitter is a social media application that can be used on desktop, web and smartphone systems. The large number of Twitter users makes Twitter inseparable from cyber crimes, such as pornography, online gambling, hate speech and other crimes. The purpose of this study is to conduct a forensic investigation on the Twitter Direct Message (DM) application using the NIJ method and determine the success rate of forensic tools in finding deleted data. This study uses the National Institute of Justice (NIJ) method with the stages of identification, collection, examination, analysis, and reporting assisted by forensic tools to obtain digital traces that can be used as evidence. The results obtained from this study were the discovery of evidence of deleted chats and images on Twitter DMs with a success rate of forensic tools (Magnet AXIOM and MOBILEedit) in finding these evidences of 66.66%.

The influence of cyber security on financial fraud in the Nigerian banking industry

The study looked at Financial Institution in Nigeria for how cyber security affects financial fraud in Nigerian banks. The study focused on the following topics: the types of electronic frauds committed in the banking industry, the reasons why cyber fraud occurs in banks, the difficulties in preventing cyber fraud in banks, the impact of cyber fraud on Nigerian banks, and potential solutions for preventing cyber fraud in banks. The two hypotheses that the study is based on. Six Nigeria Banks made up the study's population, which used a survey research design. 557 bank employees were sampled using multistage sampling techniques. The bank staff's responses were gathered using a structured questionnaire, which was then, analyzed using the SPSS statistical package for social science version 27. Descriptive analysis was used to analyze the objectives, and multiple regression and Kendal Tau B were used to test the hypotheses. The study's findings indicated that computer viruses, hacking/cracking, phishing, pharming, and accounting fraud by bank employees were the main types of cyber fraud in the banking system. The causes of cybercrime in banks included a lack of line manager or senior manager oversight on deviations from existing electronic processes or controls, current business pressure to meet set targets, collusion between employees and outside parties, insufficient data encryption, the use of third-party services, and parodying. Similarly, the study's findings showed that the challenges impeding the effort to stop cyber fraud in Nigeria's banking system included a lack of standards and national central control, a lack of infrastructure, the internet's vulnerability, a lack of national functional databases, and inadequate awareness by bank customers. A security audit, antivirus and antimalware software, the use of multi-factor authentication, the use of biometrics, and automatic logout were found to be solutions to cybercrime in banks. The findings also showed that financial loss, decreased productivity, and vulnerability of banks' Information and Communication Technology (ICT) systems and networks were effects of cybercrime on banks in Nigeria. According to the study's findings, banks' cyberspace security cannot be overextended in Nigeria, so necessary precautions should be taken to reduce cybercrime in Nigeria Banks. The study recommended that Nigeria Banks implement stringent measures to monitor staff activities, particularly in the confidentiality of customer information, cyber security audit be performed by financial institution regularly, sensitization of bank customers, and Multi-factor authentication, biometrics and automatic log out, and strong firewall should be adopted by Nigeria Financial Institutions.

Review of Smishing Detection Via Machine Learning

Smishing is a cybercriminal attack targeting mobile Short Message Service (SMS) devices that contains a malicious link, phone number, or email. The attacker intends to use this message to steal the victim's sensitive information, such as passwords, bank account details, and credit cards. One method of combating smishing is to raise awareness and educate users about the various tactics used by SMS phishers. But even so, this method has been criticized for becoming inefficient because smishing tactics are continually evolving. A more promising anti-smishing method is to use machine learning. This paper introduces a number of machine learning algorithms that can be used for detecting smishing. Furthermore, the differences and similarities among them as well as the pros and cons of each are presented to support future research into more effective anti-smishing solutions for securing mobile devices from cyber criminals.

Fintech innovations in E-payments: Privacy and security in cybercrime threats

The digitalization challenges in the e-commerce world provide ample opportunities and advantages for the corporates, financial institutions and the consumers but also have posed several threats in the form of financial thefts and cyber frauds. The Fintech innovations have brought in effective solutions for many fraud detections and poised to have a controlled safety and security systems in handling the financial and other commercial transactions, most specifically in the fund transfers and other payment processes in the Electronic Payments Systems (EPS) in the current era. Absence of security culture is vulnerable to incur heavy and unaffordable costs to the service provider’s organization pertaining to financial frauds, cybercrime threats, identity larceny, illegal procedures, loss of consumer confidence, etc. Hence, in today’s robust e-commerce scenario the vitality of Fintech Innovative solutions, Security enabled systems, ensuring Safety and Privacy of Information of the customers are of prominence. This research study analyses the Fintech Innovative solutions, on the security, safety and privacy of customer’s information on effective Electronic Payment Systems (EPS) and the legal safety assurance on cybercrimes.

CA-CD: context-aware clickbait detection using new Chinese clickbait dataset with transfer learning method

PurposeA clickbait is a deceptive headline designed to boost ad revenue without presenting closely relevant content. There are numerous negative repercussions of clickbait, such as causing viewers to feel tricked and unhappy, causing long-term confusion, and even attracting cyber criminals. Automatic detection algorithms for clickbait have been developed to address this issue. The fact that there is only one semantic representation for the same term and a limited dataset in Chinese is a need for the existing technologies for detecting clickbait. This study aims to solve the limitations of automated clickbait detection in the Chinese dataset.Design/methodology/approachThis study combines both to train the model to capture the probable relationship between clickbait news headlines and news content. In addition, part-of-speech elements are used to generate the most appropriate semantic representation for clickbait detection, improving clickbait detection performance.FindingsThis research successfully compiled a dataset containing up to 20,896 Chinese clickbait news articles. This collection contains news headlines, articles, categories and supplementary metadata. The suggested context-aware clickbait detection (CA-CD) model outperforms existing clickbait detection approaches on many criteria, demonstrating the proposed strategy's efficacy.Originality/valueThe originality of this study resides in the newly compiled Chinese clickbait dataset and contextual semantic representation-based clickbait detection approach employing transfer learning. This method can modify the semantic representation of each word based on context and assist the model in more precisely interpreting the original meaning of news articles.

URGENSI PEMBUKTIAN DALAM PERSIDANGAN TINDAK PIDANA ELEKTRONIK

<p><em>This article analyzes the urgency of the evidentiary process in electronic criminal trials. This study </em><em>aims to determine the importance of the evidentiary process in an electronic crime trial where in an </em><em>electronic crime the evidence submitted is not only tangible but intangible evidence. This research is a </em><em>normative legal research that is prescriptive and applied. The legal material collection technique used in </em><em>this study is the document study technique or library study technique. The collection of legal materials is </em><em>carried out through document studies and literature studies. Based on the results of the research, it shows </em><em>that proof in electronic crime is the main thing, because in the proof what is sought is material truth, that </em><em>a crime has occurred and it is the defendant who is guilty of committing it. The court is bound by a rule or</em><em> methods or provisions of evidence as stipulated in the law. Legitimate evidence must be carried out in court </em><em>in accordance with the procedures or methods that apply in the law of evidence.</em><em></em></p><p><em>Keywords: Evidence, Electronic Crime, Criminal Procedure law</em></p>