Cyber Protection Research Articles

The Identification of Network Intrusions with Generative Artificial Intelligence Approach for Cybersecurity

Generative Artificial Intelligence (Generative AI) offers a paradigm shift to the way robots perceive and interact with data. Generative AI approaches aim to produce new data samples that closely match the original dataset, in contrast to standard AI models that concentrate on tasks such as categorisation or prediction. This ability has broad implications for a variety of fields, including network security. New generation of network intrusion defense brought forth by Generative AI is revolution using the area of network security. In this work, investigates the revolutionary potential of Generative AI in network intrusion detection, with the goal of developing a proactive and adaptable cyber protection mechanism. In this work the use of Generative AI use for identifying network intrusions, using the NSL-KDD dataset. The work begins with meticulous data preprocessing using handling missing values, encoding, feature scaling, and feature extraction to enhance the dataset and then focuses on using Generative AI for intrusion detection. In this work many models have been used like SVM, AE, DAE, and GANs, and in this GANs has the best accuracy with 91.12% compared with other models.

Education in Cybersecurity – A Case Study

The inclusion of soft skills linked to Cybersecurity and cyber defense in the academic curricula of higher education courses is a very current issue. Several studies have been carried out in this regard, given the increasing importance of creating awareness about good practices in accessing computer networks, particularly the Internet. These studies primarily consist of recommendations on building the curricula of such courses, guiding the correct ways to do this. Our approach here is from the perspective of the students who may be the target of these cybersecurity skills. In this sense, we are developing a study in a Portuguese higher education institution to understand what higher education students think about this issue and their perception of the need for training in the area. We will ask students from various areas of education about this topic. We will then present an extended study when the preliminary results of a pilot test study are completed and shown. We questioned 423 students from the Informatics Engineering Degree course and analyzed the data obtained in the survey. Since then, this analysis of the data obtained in this study allows us to conclude that the students who participated in this study are very aware of issues related to cyber security and the need to be taught at least the fundamental concepts of cyber hygiene and cyber protection to all to all higher education students. In addition to this first conclusion, most of these students are concerned about the causes and consequences of cyber-attacks and the lack of knowledge that most people have about this problem.

An expert system of recommendations for combating cyber threats using CVSS metrics and game theory

This study is focused on the creation of an expert system for generating recommendations on cyber security. The developed expert system uses a game-theoretic model as a inference engine to transform expert knowledge into recommendations for end-users, who may be chief IT security officers (CISOs), system administrators, or cyber security engineers. Expert knowledge is presented in the form of an estimate of the base group of CVSS metrics - Common Vulnerability Score System, for each type of attack and adjusted values of CVSS in the case that the counterattack strategy is applied. Given a set of attacks and a base of expert attack knowledge, the system generates a game matrix of zero-sum game with a cybercriminal and a cyberdefense expert as players. The inference engine of the expert system is a game-theoretic model responsible for solving the game using the Brown-Robinson iterative method and generating cyber protection recommendations. An experiment was conducted on the convergence of the BrownRobinson algorithm on the 2022 vulnerability dataset from the Cybersecurity and Infrastructure Security Agency database, as a result of which it was determined that the convergence of the algorithm for solving the matrix game is achieved at a number of iterations of 1000. As a result of the work, expert system was designed and implemented along with the Web interface, which provides input by experts of CVSS level assessments of collected threats, threats countermeasures and output of recommendations for combating cyber threats

Ensuring Cybersecurity in Action Electronic Commerce Enterprises in the Conditions of Implementation of the Sustainable Development Model

Objective: The article analyzes modern trends and prospects for the development of e-commerce enterprises in the modern digital world in the conditions of implementation of the sustainable development model. Theoretical Framework: The main attention is paid to the issues of ensuring the cybersecurity of the work of such enterprises, taking into account the active development of digital technologies, including and in the field of cyber fraud. Method: The following were the main research methods in the work: content analysis, generalization, description, forecasting, statistical methods. Results and Discussion: The prerequisites for the creation and features of the functioning of e-commerce enterprises were specified, the impact of digital technologies on individual business processes of such enterprises, including primarily their marketing activities, was described. The article also identifies the reasons for the importance of e-commerce enterprises forming their own information security systems, and describes the role of such systems in ensuring the effective operation of these economic entities in the conditions of implementation of the sustainable development model. Research Implications: Accordingly, the main directions of ensuring the reliability of the cyber protection system of e-commerce enterprises in the modern world were also analyzed and determined. Originality/Value: Special attention was paid to the study of modern trends in cyber protection in the world, the forecast of the further development of cyber fraud in the economic sphere.

Cyber Protection of Financial Data in Accounting: Implementation and Use of Cryptographic Techniques

"The primary objective of this study is to explore the effectiveness of cryptographic techniques in enhancing the cyber protection of financial data within accounting practices. As the digital landscape evolves, the security of financial information becomes increasingly critical. This research aims to assess the effectiveness of cryptographic methods and understand their impact on various facets of accounting systems. The study employs a two-pronged analytical approach: matrix analysis and Structural Equation Modeling (SEM). Through matrix analysis, focusing on substitution cyphers like the Hill cypher, the research provides a technical evaluation of encryption techniques. This analysis highlights the effectiveness of cryptographic methods in ensuring data confidentiality and integrity. The SEM analysis further reveals significant findings: Cryptographic techniques notably enhance perceived security (with a path coefficient β of 0.2 and a p-value of 0.03) and regulatory compliance (β = 0.5, p < 0.01). A positive impact on user satisfaction (β = 0.25, p = 0.04) is observed, albeit with challenges in implementation, particularly in training and technological infrastructure. The study concludes that cryptographic techniques are essential in safeguarding financial data in accounting. However, their effectiveness centres on strategic implementation, which includes considerations for user-centric design and adherence to evolving regulatory standards. The research highlights the importance of a balanced approach to cybersecurity, integrating advanced cryptographic methods with practical considerations for their implementation. This study contributes both qualitative insights and quantitative evidence, offering valuable guidance for practitioners, IT security experts, and policymakers in developing robust cyber protection strategies in the accounting sector."

Cyber Protection Applications of Quantum Computing: A Review

Quantum computing is a cutting-edge field of information technology that harnesses the principles of quantum mechanics to perform computations. It has major implications for the cyber security industry. Existing cyber protection applications are working well, but there are still challenges and vulnerabilities in computer networks. Sometimes data and privacy are also compromised. These complications lead to research questions asking what kind of cyber protection applications of quantum computing are there and what potential methods or techniques can be used for cyber protection? These questions will reveal how much power quantum computing has and to what extent it can outperform the conventional computing systems. This scoping review was conducted by considering 815 papers. It showed the possibilities that can be achieved if quantum technologies are implemented in cyber environments. This scoping review discusses various domains such as algorithms and applications, bioinformatics, cloud and edge computing, the organization of complex systems, application areas focused on security and threats, and the broader quantum computing ecosystem. In each of these areas, there is significant scope for quantum computing to be implemented and to revolutionize the working environment. Numerous quantum computing applications for cyber protection and a number of techniques to protect our data and privacy were identified. The results are not limited to network security but also include data security. This paper also discusses societal aspects, e.g., the applications of quantum computing in the social sciences. This scoping review discusses how to enhance the efficiency and security of quantum computing in various cyber security domains. Additionally, it encourages the reader to think about what kind of techniques and methods can be deployed to secure the cyber world.

Cyber Resiliency of Aircraft Systems: A Literature Review

Aircraft have an important role in the overall defense of almost every country. However, military aircraft are not only susceptible to traditional kinetic weapons but also to constantly developing cyber weaponry. There has been global growth in the number of cyber threats in recent years, and the field of military aviation is not outside the growing threat. The war in Ukraine and recent military aircraft procurements in Europe make the topic very timely. A highly skilled and resourced adversary is able to conduct complex long-term attacks that penetrate even well-protected systems, such as military aircraft systems. Even air-gap does not protect aircraft from cyber threats as modern aircraft have complex and networked avionics and support systems. The study aims to find the current trends of cyber security research related to aircraft systems. The included topics are, for example, cyber resiliency and cyber protection in the system life cycle. The study concentrates particularly on forming an overall view of the most vulnerable military aircraft systems. The study presents a non-systematic literature review based on public data sources, such as research reports, articles, etc. A set of nine relevant sources was chosen for detailed qualitative analysis. Because of the lack of detailed military sources, applicable study materials related to commercial passenger aircraft were included. The results suggest that the most vulnerable aircraft systems from the viewpoint of cyber security are those that are exposed to threats via communication and satellite systems. Other vulnerable systems are sensors and avionics systems that transfer, or process critical data related to the functions of the aircraft. In addition, the study found that it is difficult to protect aircraft systems from cyber threats because of their complexity, maintenance operations, and supply chains, which also increase the size of the attack vector. To tackle the issue, it is important to follow the development of regulations and policies related to cyber security in aviation and to study the methods of managing the threat in a holistic and cost-effective manner.

Unmasking the Subconscious Fallacies Within Critical Infrastructure Protection

Cybersecurity, a vital challenge in today’s ever-changing digital world, it has gained prominence with the global shift towards cyber-enabled critical infrastructures. Critical infrastructure protection efforts are fundamental for the continuation of essential services. Traditionally constituted as separate sectors, these infrastructures are increasingly interconnected, leading to potential domino effects during security breaches. For instance, failures within the power grid could have cascading effects on multiple sectors that depend on electricity for their operations, creating large-scale failures that affect functions on which society depends. The multidimensional nature of the infrastructures presents complex challenges for solutions, given their status as long-established legacy systems needing further development and enhancements to withstand the digital world. The lack of a concerted and focused infrastructure enhancement strategy has led to incremental approaches versus a comprehensive revamp to ensure a holistic cyber protection program. A lack of national focus has created inconsistencies that can lead to potentially catastrophic consequences. Understanding the decision-making processes within a complex environment is critical to the mission success. One significant risk is the cognitive roadblocks that have the potential to influence one’s judgements as this often outweighs balanced decisions. This study aims to investigate the subconscious biases that arise from a perceived resolution of the problem which can lead to de-prioritization within the decision-making processes. The study employs a convergent parallel mixed methods design to collect and analyse the data. The study then will compare the results allowing for the exploration of various aspects of the research. This approach is aligned to provide a thorough understanding of the challenges associated with protecting the infrastructures and the underlying subconscious fallacies in the digital age, thereby devising effective mitigation strategies, and fostering a more sustainable and resilient critical infrastructure that is useful for a variety of stakeholders, including policymakers, infrastructure owners and operators, cybersecurity professionals, and researchers

Assessment of vulnerability of Server-side Web Application and prevention of their manifestation.

The vulnerability of the system (technological, communication) of the cyber protection object to negative technical impact is always based on the exploitation of its defects. Defect is a property of software, hardware, software-hardware or system components, which under certain conditions can lead to vulnerability. Attack – an attempt to exploit a defect(s) of the system (object of cyber protection) for the implementation of a negative technical effect (unauthorized reading/writing of data, incorrect operation, circumvention of protective mechanisms, abnormal consumption of resources; execution of imposed commands, etc.) under the manifestation of vulnerability using an exploit (exploit). The appearance of defects is inherent in all stages of the system (cyber protection object) life cycle. Thus, defects are distinguished at the design stage, implementation, adjustment during commissioning, maintenance, and completion of work. The existence of at least one defect in the components of the system, which allows a negative technical effect, makes it vulnerable. Timely detection and elimination of defects reduces the probability of system compromise using at least known exploits. The expediency, rationality and reasonableness of solutions for finding defects is based on the application of proven sources of world-class expert experience. Thus, Adversarial Tactics, Techniques & Common Knowledge defines Server-side Web Application class systems as an attractive attack target for hackers with the highest average number of potential defects in at least three components: Web Server, Web Application Server, DBMS Server. To find out the distribution of Server-side Web Application defects by characteristic classes, it is necessary to use the Open Worldwide Application Security Project, for a detailed study of them - Common Weakness Enumeration. The application of the National Vulnerability Database and Common Vulnerabilities and Exposures complements the evaluation of the found defect.

Analysis of Information Security Under the Conditions of Hybrid War in Ukraine: Social Aspects

Abstract The development of the post-industrial society requires the acceleration of the integration of the national economy into the globalized economic space. This stage is characterized by active informatization of all spheres of life in society, which requires information security and cyber protection for high-quality information provision of the country’s population, intellectualization of economic processes and prevention of destructive informational influence on the social status of the individual. It is also necessary to consider that for Ukraine the specified stage is complicated by the hybrid war with Russia, which requires strengthening the protection of information from cyber-attacks and the formation of new approaches in preserving the quality of information on social networks. Therefore, the purpose of this article is the development of scientific and methodological approaches in information security management, strengthening its social significance. This requires solving a certain range of tasks of identifying and preventing socially dangerous information based on the use of economic and mathematical methods and models. The article highlights the main directions of socialization of modern technological development and theoretically substantiates its significant impact on human consciousness and behavior, puts a person in front of serious challenges and, under conditions of hybrid warfare, requires strengthening of information security in social networks. In the work, the components of information security are supplemented, its impact on social aspects of society’s life is highlighted. As a result of the research, the authors proposed a scientific and methodical approach to the construction of a system for countering the spread of socially dangerous information in social networks. Besides, its functional elements are highlighted. A method of combating the spread of harmful information in social networks has been developed, which solves the problem of information support of the decision-making process and includes providing the chosen and alternative options to the person making the decision, with the justification of the choice. This creates prerequisites for information support for making a well-founded management decision.

The challenge of securing electric vehicle charger infrastructure

With the advent of clean energy and the transformation of internal combustion engines (ICE) to battery electrical vehicles (BEV), a new generation of electric vehicle (EV) charger infrastructure connected to the power grid has emerged. Along with any infrastructure comes the responsibility of cyber security. This paper explores the attack surface of EV charger infrastructure and the various dimensions of cyber protection. Large language models (LLMs) enable new technologies such as artificial intelligence (AI). It is the early days of cyberattacks on EV chargers; however, some early attacks have already occurred. Once a critical mass of EV chargers is achieved, cyberattacks pose a more significant potential threat to our power grid and our society.

Agile Transformation through the Performing Management of It and Cyber Security Projects, at the Government Level

Abstract Modern theories of intelligence have developed from the observation that the person, throughout life, is in constant development. In order to be successful, certain conditions must be met. These conditions for achieving success in life depend on the skills that are formed during formal education, or at least should be pursued as goals, beyond the disciplines. In a current information society, the quality of life as well the perspectives of social change and economic development depend on information and its exploitation, especially in the institutional field of managing computer applications for the absorption of European funds, becoming a matter of national importance, with critical values for national security, characterized by the state of economic equilibrium. Scientific knowledge and information are of particular importance in the global information society by: supporting innovation through technology, promoting economic development through the use of emerging technologies, making decisions efficiently and transparently at government level. The implementation and use of intelligent technologies have a decisive role in the development of the degree of digitization of public services through non-refundable funding from European funds and the National Recovery and Resilience Plan. The reinvention of the government can be transformed into a reality through the digitization and computerization of the public administration, assuming the modernization of the infrastructure through specific sources of funding, such as European funds, ensuring security through advanced cyber protection and defense capabilities against possible vulnerabilities, risks or cyber-attacks. Achieving performance within the public institution requires an increased concern for innovation, creativity and change.

Analysis of the Impact of Cybersecurity on The Stability of Financial Institutions

The issue of the impact of cybersecurity is a top priority for the functioning of a financial institution. Therefore, its provision becomes a priority in organizing the further activities of the institution itself. The article aims to analyze the current trends in ensuring the cybersecurity of financial institutions and its role in their functioning. The paper describes the theoretical foundations of the cyber protection concept. The authors also outline the specifics of cybersecurity and the leading technological solutions for achieving these goals. Special attention is paid to modern, innovative solutions to maintain the stability of financial institutions and the possibility of further development. An important area of research is the disclosure of the practical experience of information corporations in providing technical solutions to ensure the security of financial transactions and support the global financial system. The study presents the experience of Ukrainian financial institutions that use variable digital defense strategies and maintain their functionality based on an effective cybersecurity system in the context of a global military conflict. The results of the study include a detailed profile of effective practical solutions to ensure the stability of financial institutions based on the implementation of blockchain technologies. The authors pay attention to the issue of modern software, hardware, and management solutions to improve the quality of cybersecurity in the context of growing cyberattacks and digital threats to the stability of financial institutions. The research findings may be helpful for further analytical studies on the effectiveness of cybersecurity and the stability of financial institutions.

Importance of cyber protection in the power grid in the face of an uncertain future

In the digital era, cybersecurity is transforming the behavior of human beings in the correct use of technology, which is why it has become a critical element in business strategy, thus giving rise to the present research, which identified the current situation of associated companies in the process of generation, transmission, distribution and public lighting of electricity in Costa Rica, in the field of cybersecurity, with special emphasis on the identification, analysis and evaluation of policies, standards, procedures, controls, regulations and infrastructure in the sector. The study approach was quantitative, descriptive, and exploratory; based on a sample of experts in information security, where a survey was used for data collection. In the findings obtained, the existence of personnel with the technical knowledge to deal with a computer incident was observed, but from the business perspective, the lack of an institutional guideline and country strategy for the protection of the electrical network was recognized. In conclusion, there is a latent risk in the infrastructure of the national power grid, which is evidenced by the lack of a clear national strategy that establishes a roadmap to protect the sector against a possible cyber-attack.

INSTITUTIONAL TRANSFORMATIONS IN THE DIRECTION OF INCREASING THE EFFECTIVENESS OF THE STATE POLICY OF CRITICAL INFRASTRUCTURE PROTECTION

The article analyzes modern features of state policy in the field of critical infrastructure protection. Attention is focused on the need for institutional transformations in the direction of improving efficiency, transparency, responsibility and responding to new security challenges in the conditions of a hybrid war with the Russian Federation.
 The practice of protecting critical infrastructure facilities in developed countries has been studied. It was determined that its priority is the actualization of the predicate of stability of critical infrastructure objects. The content of normative and legal acts of Ukraine in this area was analyzed. A number of provisions have been identified that allow the adjustment of the domestic security doctrine to the European vector of stability.
 Within the perspective of the development of the concept of sustainability, the intention of «critical infrastructure stakeholders» is substantiated. This opens up the prospects of creating transparent conditions for ensuring the annihilation of state institutions of power, state protection systems, the private sector, educational and scientific institutions and other stakeholders of critical infrastructure to the National System of Critical Infrastructure Protection at the next levels of management. The possible levels of such cooperation are determined.
 Modern scientific works were analyzed, which studied the prospects of changing the paradigm of protection and stability to the paradigm of resilience. The complex of institutional transformations is proposed to be expanded due to the application within the framework of the functioning of the National Critical Infrastructure Protection System of the process of determining and analyzing the range of risks that the country faces in the spheres of critical infrastructure functioning. The transformation of institutional protection systems is considered through the prism of systemic determinants, among which physical protection and defense, cyber protection and defense, preventive measures of protection and defense, and an educational and scientific approach are highlighted.
 The system of organization at the state level of conducting regular interdisciplinary trainings on the operational response to emergency situations at facilities has been studied. It is proposed to increase clarity in the delineation of responsibility for project threats and to strengthen control over compliance with the systematicity of interdisciplinary training. On the basis of the extrapolations of scientists' hypotheses and the results of the author's research, a proposal was made to systematize the main proposals for institutional transformations in the direction of increasing the effectiveness of the state policy for the protection of critical infrastructure in the form of a Preventive concept of resilience of critical infrastructure objects.

Cloud Computing and firm performance: a SEM microdata analysis for Israeli firms

PurposeThis paper aims to study the economic effects of Cloud Computing for a sample of Israeli firms. The authors propose a framework that considers how this technology affects firm performance also introducing the indirect economic effects that take place through cloud-complementary technologies such as Big Data and Machine Learning.Design/methodology/approachThe model is estimated through structural equation modeling. The data set consists of the microdata of the survey of information and communication technologies uses and cyber protection in business conducted in Israel by the Central Bureau of Statistics.FindingsThe results point to Cloud Computing as a crucial technology to increase firm performance, presenting significant direct and indirect effects as the use of complementary technologies maximizes its impact. Firms that enjoy most direct economic gains from Cloud Computing appear to be the smaller ones, although larger enterprises seem more capable to assimilate complementary technologies, such as Big Data and Machine Learning. The total effects of cloud on firm performance are quite similar among manufacturing and service firms, although the composition of the different effects involved is different.Originality/valueThis paper is one of the very few analyses estimating the impact of Cloud Computing on firm performance based on country microdata and, to the best of the authors’ knowledge, the first one that contemplates the indirect economic effects that take place through cloud-complementary technologies such as Big Data and Machine Learning.

Impact of Artificial Intelligence on Cybersecurity

The increasing complexity of cyber attacks necessitates defenses that are as sophisticated. The field ofcyber security is changing dramatically thanks to artificial intelligence (AI), which carries both unanticipated hazardsand enormous possibilities. Cybersecurity has become a major concern in the digital age. It's typical to hear about databreaches, captcha cracking, and other occurrences of a similar nature that affect millions of people and organizations.As digital transformation continues, organizations are becoming more aware of the benefits that modern technologyoffers. However, there is a higher possibility of cyber security threats and attacks with increased technology use.Consequently, increasingly complex defenses are needed to counter ever-evolving threats. One potential solution is theuse of artificial intelligence (AI). The findings showed that artificial intelligence (AI) can improve cyber security atevery level of the procedure, leading to improved automation, threat intelligence, and cyber protection. These findingsdemonstrate how AI improves cyber security by increasing efficacy and resilience.

Analysis of the Impact of Cybersecurity on the Stability of Financial Institutions

"The issue of the impact of cybersecurity is a top priority for the functioning of a financial institution. Therefore, its provision becomes a priority in organizing the further activities of the institution itself. The article aims to analyze the current trends in ensuring the cybersecurity of financial institutions and its role in their functioning. The paper describes the theoretical foundations of the cyber protection concept. The authors also outline the specifics of cybersecurity and the leading technological solutions for achieving these goals. Special attention is paid to modern, innovative solutions to maintain the stability of financial institutions and the possibility of further development. An important area of research is the disclosure of the practical experience of information corporations in providing technical solutions to ensure the security of financial transactions and support the global financial system. The study presents the experience of Ukrainian financial institutions that use variable digital defense strategies and maintain their functionality based on an effective cybersecurity system in the context of a global military conflict. The results of the study include a detailed profile of effective practical solutions to ensure the stability of financial institutions based on the implementation of blockchain technologies. The authors pay attention to the issue of modern software, hardware, and management solutions to improve the quality of cybersecurity in the context of growing cyberattacks and digital threats to the stability of financial institutions. The research findings may be helpful for further analytical studies on the effectiveness of cybersecurity and the stability of financial institutions."

Bridging the cyber protection gap: An investigation into the efficacy of the German cyber insurance market

AbstractCybersecurity requires an effective risk transfer regime and a well‐functioning insurance market to improve stakeholder resilience. However, rapid cyber threat adaptation, limited data availability, and inadequate risk understanding pose significant challenges for the insurance industry and its customers. This research uses a mixed methods approach to analyze the inclusions, exclusions, and suitability of current cyber policies in the German cyber insurance market. The study analyzes 41 cyber insurance policies, representing about 80% of the German cyber insurance market. This examination is supported by semistructured interviews with 23 cyber insurance experts. The authors find that there are no standardized cyber policy wordings, and insurers use different terms and definitions in their insurance policies. Specifically, the results show a significant lack of clarity around coverages and exclusions. This research contributes to the cybersecurity risk management community and will enable businesses, insurance companies, and policymakers to better understand, measure, and manage cyber risk.

Quantum-safe: Cybersecurity in the age of Quantum-Powered AI

There is a lot of talk about how the cyber world will change and perceive itself as quantum computing takes center stage in the computing industry in a decade. While some are enthusiastic about the advancement of quantum technology, others remain skeptical about its application in cyberspace. But there is no doubt the interaction of artificial intelligence (AI) and quantum computing offers cybersecurity both tremendous benefits and difficulties as we navigate the digital terrain. This article explores the complex interrelationship between these two state-of-the-art technologies and how it affects information system security. In this article, we look at the possible risks that the fusion of AI and quantum computing could bring, as well as the creative ways that experts are attempting to strengthen our cyber protections, current research and future directions.