Cyber Terrorist Attacks Research Articles

Flying challenges for the future: Aviation preparedness – in the face of cyber-terrorism

Transport has always been, and will continue to be, a means to serve to eradicate world inequalities bringing relief and salvation across the globe and no transport mode more so perhaps than aviation. However, aviation has served as both the salvation and the aggressor, having also itself been the victim of terrorist attacks. Arguably (to date) in 2016, the world could consider itself fortunate not to have witnessed a devastating cyber-terrorist attack on an aircraft. Certainly concerns were raised after the disappearance of MH370 in terms of cockpit tampering; and yet, these reports only touched upon the surface of an effervescing iceberg – set to erupt into a tsunami of devastation. The question inevitably remains ‘when’ rather than ‘if’ this will occur. This research reviews the vulnerability of air travel and the preparedness of the industry in terms of coordination (prevention and protection) from the perspective of policy, legislation (regulation) and organisation.

Cyber security in nuclear industry – Analytic study from the terror incident in nuclear power plants (NPPs)

The cyber terrorism for nuclear power plants (NPPs) is investigated for the analytic study following the South Korean case on December 2014. There are several possible cyber terror attacks in which the twelve cases are studied for the nuclear terror cases including the computer hacking and data stealing. The defense-in-depth concept is compared for cyber terrorism, which was imported from the physical terror analysis. The conventional three conditions of the physical protection system (PPS) are modified as prevention, detection, and response. The six cases are introduced for the solutions of the facility against the possible cyber terrorism in NPPs. The computer hacking methods and related solutions are analyzed for the applications in the nuclear industry. The nuclear security in the NPPs could be an extremely serious condition and the remedies are very important in the safe plant operations. In addition, the quantitative modeling study is performed.

Cyberterrorism targeting the general public through social media

AbstractCurrent literature suggests that critical national infrastructure is the main focus of attack for cyberterrorism, but this research will address the issue of whether a mimetic virus would be a viable cyberterrorist attack against a target population. Statistical data was obtained from questionnaires with 100 random participants regarding their understanding and current levels of fear of a cyberterrorist attack against them; responses indicated that there was a good level of understanding as to what cyberterrorism was and that participants' fear levels of an impending attack were low. The participants were then introduced using a fabricated video clip to what they were led to believe was a real weaponised computer virus that attacked laptop batteries causing them to explode. The data showed that not only had participants' fear levels increased but also would modify future habits and behaviour. This research highlighted that the general public could indeed be a target of cyberterrorism, and a mimetic virus could be an effective method of attack. Copyright © 2016 John Wiley & Sons, Ltd.

Analogy and Authority in Cyberterrorism Discourse: An Analysis of Global News Media Coverage

This article explores constructions of cyberterrorism within the global news media between 2008 and 2013. It begins by arguing that the preoccupation with questions of definition, threat and response in academic literature on cyberterrorism is problematic, for two reasons. First, because it neglects the constitutivity of representations of cyberterrorism in the news media and beyond; second, because it prioritises policy-relevant research. To address this, the article provides a discursive analysis drawing on original empirical research into 31 news media outlets across the world. Although there is genuine heterogeneity in representations of cyberterrorism therein, we argue that constructions of this threat rely heavily on two strategies. First, appeals to authoritative or expert “witnesses” and their institutional or epistemic credibility; second, generic or historical analogies, which help shape understanding of the likelihood and consequences of cyberterrorist attack. These strategies have particular discursive importance, we argue, given the lack of readily available empirical examples of the “reality” of cyberterrorism.

Lightweight Acknowledgement-Based Method to Detect Misbehavior in MANETs

Due to an increasing number of cyberattacks globally, cybersecurity has become a crucial part of national security in many countries. In particular, the Digital Pearl Harbor has become a real and aggressive security threat, and is considered to be a global issue that can introduce instability to the dynamics of international security. Against this context, the cyberattacks that targeted nuclear power plants (NPPs) in the Republic of Korea triggered concerns regarding the potential effects of cyber terror on critical infrastructure protection (CIP), making it a new security threat to society. Thus, in an attempt to establish measures that strengthen CIP from a cybersecurity perspective, we perform a case study on the cyber-terror attacks that targeted the Korea Hydro & Nuclear Power Co., Ltd. In order to fully appreciate the actual effects of cyber threats on critical infrastructure (CI), and to determine the challenges faced when responding to these threats, we examine factual relationships between the cyberattacks and their responses, and we perform analyses of the characteristics of the cyberattack under consideration. Moreover, we examine the significance of the event considering international norms, while applying the Tallinn Manual. Based on our analyses, we discuss implications for the cybersecurity of CI in South Korea, after which we propose a framework for strengthening cybersecurity in order to protect CI. Then, we discuss the direction of national policies.

Draft of National Cybersecurity Act

The world has actually been attacked from other countries by means of cyberattacks against national infrastructure and cyber-terror weapons. In December, 2014, a hacker stole the nuclear power data including key nuclear power technology to infringe people’s assets and further increased damages and people’s uneasiness about cyber-terror attacks against national infrastructure. The National Cybersecurity Act in response to cybercrime and cyber-terrorism and cyberwarfare citizens, public agencies, and experts in the military to establish a comprehensive response system for participation. National Cybersecurity Council should respond to cyberattacks, defense, media psychological warfare. National Cybersecurity Council is mutually share relevant information and real-time analysis, information sharing and coordination support. National Cybersecurity Act aim to build a general national action system by private, public and military organizations, detect cyber-terror attacks in advance to block potential cyber-terror attacks and warfare early and integrate national capacity for fast action if they occur.

A Comparative Study of the Proposed National Cyber-terror Prevention Act

Cybercrimes and cyber-terror attacks disturb national order, and can result in cyber warfare that ruins people's happiness, and destroys national security and people's safety. Cyber-terror attacks have occurred in the 7.7 DDoS attack, the 3.4 DDoS attack, the attack that paralyzed the NH Computer Network, the Jungang Ilbo Incident, The APT attack against KBS, MBC, YTN, the Shinhan Bank, and the NH Bank to stop computer operation. In 2013, the website of Cheongwadae was attacked through the 6.25 cyber- terror attack. In January, 2014, confidential personal information of approximately 85 million customers of 3 credit card companies of the Lotte Card, KB Kookmin Card and the NH Card was stolen. There is a need for real-time response system that can respond in real-time cyber-hacking attacks. However, acts and regulations are insufficient, the budget and the policies and institutions of national cyber security is needed to support the organization. In this study, we analyze and compare the two Cyber-terro Prevention Act was proposed to the National Assembly. And, triggered alarm in the control tower and cyber need for cyber security against cyber crisis. Keywords: Cybersecurity, Cyber-terror, Hacking. National Cybersecurity, Prevention Act

Logic Tester for the Classification of Cyberterrorism Attacks

The merging of terrorism with the cyber domain introduces the potential for using computers and networked technologies in cyberspace to carry out extremist activities. Despite the current debate on whether cyberterrorism can be regarded as a real threat, this research will propose a method for classifying incidents as either cyberterrorism or cyber attacks. Although there have been no reported cases of Information Communication Technologies causing life-threatening situations or death, this research aims to show that cyberterrorism is not a negligible threat but instead a dangerous risk that should not be overlooked. This research will investigate the merging of terrorism with the cyber domain and present a multi-layered definition for cyberterrorism. This proposed definition is founded on the definition for traditional terrorism and incorporates elements of the international understanding of cyberterrorism. The research future presents a Logic Tester that uses Boolean logic to test the application of the multi-layered definition for cyberterrorism in terms of past international cyber incidents. The merit of the Logic Tester is presented through its application on a number of potential cyberterrorism scenarios, using the definition to classify these as either cyberterrorism or cyber attacks.

Ability to Face Threats of Cyberterrorism: Factors Associated with Organizational Competence

ABSTRACT Acts of cyberterrorism represent potential, significant negative effects to property, infrastructure systems, security, and an overall way of life. These disruptions garner significant attention from government and the public. Managers concerned by threats of cyberterrorism should understand the components that enhance organizational competence so that doubt and fear do not overtake organizational members when faced with such extreme events. Although organizational competence is important in everyday organizational behaviors, the presence of confidence in organizational abilities is especially critical when operating in the midst of the ambiguity and destructive disruptions associated with cyberterrorist threats. We empirically assess three factors associated with competence for organizations facing simulated cyberterror attacks. Our results support the relationship between two of these factors—organizational identification and deference to expertise—with organizational competence. These findings contribute to research concerning the antecedents critical to organizational competence and also add to the growing research on cyberterrorism.

A survey of Cyber Attack Detection Strategies

Homeland security field deals with diverse subjects, audio processing, video surveillance, image detection, geolocation determination, and cyber attack detection. Audio processing and video surveillance area are significant for public places safety and land border area. However the big threat for homeland security is cyber attacks. Cyber terror attacks and cyber crime attacks may move over virtual networks and can get every home. Nowadays, we consider the homeland security field however we set the cyber attack detection area the highest priority in our research. This paper introduces the overview of the state of the art in cyber attack detection strategies.

Cyber terrorism challenges: The need for a global response to a multi-jurisdictional crime

With the widespread concerns about cyber terrorism and the frequent use of the term “cyber terrorism” at the present time, many international organisations have made efforts to combat this threat. Since cyber terrorism is an international crime, local regulations alone are not able to defend against such attacks; they require a transnational response. Therefore, an attacked country will invoke international law to seek justice for any damage caused, through the exercise of universal jurisdiction. Without the aid of international organisations, it is difficult to prevent cyber terrorism. At the same time, international organisations determine which state court, or international court, has the authority to settle a dispute. The objective of this paper is to analyse and review the effectiveness and sufficiency of the current global responses to cyber terrorism through the exercise of international jurisdiction. This article also touches upon the notion of cyber terrorism as a transnational crime and an international threat; thus, national regulations alone cannot prevent it. The need for an international organisation to prevent and defend nations from cyber terrorism attacks is pressing. This paper finds that, as cyber terrorism is a transnational crime, it should be subjected to universal jurisdiction through multinational cooperation, and this would be the most suitable method to counter future transnational crimes such as cyber terrorism.

스마트그리드 환경에서 공증기관을 이용한 디지털 증거 수집 기법

세계 주요 국가들은 전력수요 증가, 환경오염 등의 문제를 해결하기 위해 자국의 전력망을 스마트그리드로 변경하기 위한 노력을 기울이고 있다. 국내에서도 스마트그리드 도입을 위한 다방면의 연구가 진행되고 있다. 그러나 양방향 통신을 적용한 스마트그리드에는 기존 IT에 존재하는 사이버 위협이 적용되어, 국가적 차원에서 사회적 경제적 혼란을 야기할 수 있는 사이버 테러의 위험도 증가하고 있다. 이러한 사이버 공격에 대응하기 위해 사이버 침해사고 발생 시 이에 대한 조사와 이를 분석하고 재발 방지를 위한 노력이 필수적이다. 침해사고에 대응하기 위한 디지털 증거 수집에 대한 연구는 그간 꾸준히 진행되고 있으나 스마트그리드 환경에 적합한 디지털 증거 수집 방안에 대한 연구는 아직까지 미흡하다. 본 논문에서는 스마트그리드 환경에서 필요한 증거 수집 요구사항과 기존까지 연구된 디지털 증거 수집 방안을 분석하여 스마트그리드 환경에 적합한 디지털 증거 수집 기법에 대해 제안한다. Considerable number of major countries have put great efforts to leverage the efficiency of power consumption using Smart Grid in order to resolve the critical issues with drastical growing demands regarding electricity, the crisis of environmental pollution and so on. There has been increasing number of researches to construct Smart Grid in Korea as well. The threats of cyber terror attacks which might cause national crisises in terms of economy and society have been climbing up because of the fact that Smart Grid employs bi-directional communications embedding the cyber threats from existing/legacy communication networks. Consequently, it is required to build concrete response processes including investigation and analysis on cyber breaches into Smart Grid. However, the digital evidence acquisition techniques do not suffice to be deployed in Smart Grid systems despite of the fact that the techniques, against cyber breaches into well-known networks, have been studied in plenty of time. This work proposes a novel digital evidence acquisition scheme appropriate to Smart Grid systems through intensive investigation of the evidence acquisition requirements in Smart Grid and the historical evidence acquisition methods.

Social Aspects of New Technologies - the CCTV and Biometric (Framing Privacy and Data Protection) in the Case of Poland

The purpose of this paper is to review the institution responsible for the protection of personal data within the European Union and national example - Polish as a country representing the new Member States. The analysis of institutional system - providing legal security of communication and information institutions, companies and citizens against the dangers arising from the ongoing development of innovative new technologies in the European Union and Poland. This article is an attempt to analyze the possibility of using security systems and Biometry CTTV in Poland in terms of legislation. The results of the analysis indicate that, in terms of institutions Poland did not do badly in relation to the risks arising from the implementation of technology. The situation is not as good when it comes to the awareness of citizens and small businesses. This requires that facilitate greater access to free security software companies from data leakage or uncontrolled cyber-terrorist attacks. With regard to the use of security systems, CCTV and biometrics, Poland in legal terms is still early in the process of adapting to EU Directive. The continuous development of technology should force the legislature to establish clear standards and regulations for the application of CCTV technology and biometrics, as it is of great importance in ensuring the fundamental rights and freedoms of every citizen of the Polish Republic.

Research on the Cyber Terrorist Attacks and its Impacts on Information Infrastructure Security

With technology advances, the interdependence of various infrastructures has increased, which enhances their vulnerabilities. The national information infrastructure security concerns the nation's stability and economic security. Risk assessment methodology was introduced into the safeguard of the information infrastructure, which is prone to terrorist attack. Through the analysis of terrorists’ behaviors and its characteristics, the four steps of risk management were studied in detail using many factual examples. The macroscopic and microscopic countermeasures were developed lately, which attribute to adopting counteractions to reduce the vulnerability and relieve the risk in the modern society caused by terrorist attack.

Social Network Theory: A Comparative Analysis of the Jewish Revolt in Antiquity and the Cyber Terrorism Incident over Kosovo

ABSTRACT This paper uses social network theory to compare the social network of the Jewish Revolt in 66–73 AD and the cyber terrorist attacks during the Kosovo war in 1999. The goal is to demonstrate that terrorist networks in Antiquity and cyber terrorist networks today not only mirror each other in their patterns of “terror” stratagems but also differ in key ways. The use of social network theory is appropriate because the theory embodies a particular theoretical orientation towards the structure of terrorist networks. This is why social network theory applies well to the Jewish Revolt and the Kosovo war. The ultimate goal of this analysis is to bridge the gap between theory and practice.

Cyberterrorism: Postmodern State of Chaos

ABSTRACT This paper examines cyberterrorism and its potential to create a postmodern state of chaos. In general, chaos refers to a state of extreme confusion and disorder. This analysis breaks new ground in that it describes chaos theory as a foundation for better understanding cyberterrorism and explains how chaos theory and game theory are tightly coupled. The author also contrasts modern, conventional terrorism with postmodern, innovative cyberterrorism. The main idea is that the postmodern state of chaos caused by cyberterrorist attacks differs dramatically from the destruction caused by conventional terrorist acts. This comparison serves as the basis for making the point that cyberterrorism is not three-dimensional, it is not analog (but it is digital), and it exposes actors of cyberspace to new concepts of time and space. Another important argument is that the postmodern state of chaos implies the danger of cascading failures brought forth by cyberterrorists. A cascading failure is a succession of f...

Potential cyberterrorism via a multimedia smart phone based on a web 2.0 application via ubiquitous Wi-Fi access points and the corresponding digital forensics

Cyberterrorism has become a hotly debated research issue in the past decades because of the convergence of mobile computing powers and the fledging multimedia communication computing capabilities. Cyberterrorism is the exploitation of computer network tools to incur malfunction or shut down critical infrastructures with several keyboard punches, which is dramatically different from traditional terrorism. Due to the ubiquitous multimedia communication tools, they have radically transformed the ways concerning data transmission. Unfortunately, it also incurs unprecedented opportunities for committing cyber crimes that we were not able to foresee two decades ago. Undoubtedly, the mushrooming proliferation of mobile phones spectacularly triggers the information security leakage while most people heavily rely on mobile phones for daily communication. As cybercrime or cyberterrorism surges, digital forensics (DF) of mobile communication devices still enormously lags behind than computer forensics. Hence, in this research paper, we provide a hypothetical case review concerning the DF of a potential cyberterrorist attack that was triggered by a mobile multimedia smart phone utilizing a popular web 2.0 application program via ubiquitous Wi-Fi access points. The corresponding DF of the mobile device was conducted in a step-by-step manner as well as the crime scene reconstruction based on the digital evidence collected, analyzed, and preserved.

Cyber-Terrorism and Ethical Journalism

Terrorism has been a constant threat in traditional and contemporary societies. Recently, it has been converged with new media technology and cyberspace, resulting in the modern tactic, cyber-terrorism, which has become most effective in achieving terrorist goals. Among the countless cyber-terrorist cases and scenarios of only this last decade, the paper discusses four cyber-terrorism cases that represent the most recent severe cyber-terrorist attacks on infrastructure and network systems—Internet Black Tigers, MafiaBoy, Solo, and Irhabi 007. Regardless of the nature of actors and their motivations, cyber-terrorists hit very aggressively causing serious damages. Cyber-terrorists are rational actors who use the most advanced technology; hence, the critical need for the use of counter-threat swords by actors on the other side. Given that terrorist goals are mostly dependent on the media’s reactions, journalistic practices are significant and need to be most effective. A major tool that can help journalists in their anti- and counter-terrorist strategies with cyber-terrorists is rationalism, merged with the expected socially responsible conduct. Rational behaviour, founded in game theory, along with major journalistic ethical principles are fundamental components of effective media decision-making during times of terrorism.

The terrors and the errors [cyber-terrorist attack

The paper presents the cyber-terrorist attack that launched through the Internet. Cyberterrorism attacks would be aimed at damage or disruption to critical national infrastructure, such as power grids, water and sewage systems, traffic and transport controls, and communications networks. Some concern stems from the perception that some such infrastructures were built-out years before the notion of online threats was ever dreamt of, so are inherently insecure; at the same time there is also a perception that the ever increasing complexity of new IT-driven control systems is a vulnerability in itself.

Modelling the spread of mobile malware

The popularity of mobile phones and the internet makes it more enticing for hackers to write viruses and create malicious code. There are currently over 150 mobile viruses today and the prevalence of mobile viruses in the US is currently at its tipping point. The first known cellular virus in the USA is called Cabir and was discovered in 2004. In this paper, we reveal how cellular phones running the Symbian and Windows Mobile operating systems get infected through various channels, specifically, Bluetooth and 802.11 wireless. We investigated the transmission rate of mobile malware in Washington, DC from 2004 to 2012, focusing our research in the Washington DC metropolitan area being that it has a high risk of cyber terrorism attacks. The goal of our study is to show the impact of mobile malware on cell phones using the SIS epidemic model. We aim to help cell phone users prepare now in the event of a future mobile malware epidemic in the District. We then proposed some preventative measures.