Cybersecurity Standards Research Articles

Development of a software application for working with cyber security standards

Development of a software application for working with cyber security standards

Impact, Vulnerabilities, and Mitigation Strategies for Cyber-Secure Critical Infrastructure.

Several critical infrastructures are integrating information technology into their operations, and as a result, the cyber attack surface extends over a broad range of these infrastructures. Cyber attacks have been a serious problem for industries since the early 2000s, causing significant interruptions to their ability to produce goods or offer services to their clients. The thriving cybercrime economy encompasses money laundering, black markets, and attacks on cyber-physical systems that result in service disruptions. Furthermore, extensive data breaches have compromised the personally identifiable information of millions of people. This paper aims to summarize some of the major cyber attacks that have occurred in the past 20 years against critical infrastructures. These data are gathered in order to analyze the types of cyber attacks, their consequences, vulnerabilities, as well as the victims and attackers. Cybersecurity standards and tools are tabulated in this paper in order to address this issue. This paper also provides an estimate of the number of major cyber attacks that will occur on critical infrastructure in the future. This estimate predicts a significant increase in such incidents worldwide over the next five years. Based on the study's findings, it is estimated that over the next 5 years, 1100 major cyber attacks will occur on critical infrastructures worldwide, each causing more than USD 1 million in damages.

A Guide to become NIST Compliant

The National Institute of Standards and Technology (NIST) develops cybersecurity standards, guidelines, best practices, and other tools to meet the needs of American business, government organizations, and the general public. Their work spans from giving businesses accurate information that they can utilize immediately to longer-term research that anticipates technology developments and future challenges. Moreover, the needs of American industry and the general public are what drive their cybersecurity endeavors. They collaborate closely with stakeholders to set priorities and ensure that our resources are focused on the most urgent issues they face. NIST also advances the management of privacy risks, some of which are directly connected to cybersecurity, and broadens our understanding of those risks. Among the main areas on which NIST contributes and focuses are cryptography, education and workforce, emerging technologies, risk management, identity and access management, measurements, privacy, trustworthy networks, and trustworthy platforms. This research paper aims to focus on discussing the various controls of the NIST. It also emphasizes on the processes to be followed by the federal agencies to ensure that they are NIST compliant.

Production Planning Using a Shared Resource Register Organized According to the Assumptions of Blockchain Technology.

This article presents the architecture of integration of blockchain technology (BCT) and the Internet of Things with the planning of production processes. The authors proposed a shared concept of a distributed machine database based on BCT. As part of the work, a network of connections for the exchange of production resources was created using nodes communicating in a decentralized system, which at the same time serves as an integration of the virtual and real environment. Particular attention was focused on developing an algorithm for the efficient division of production tasks between all interested network users. BCT is used to conclude smart contracts and transactions and ensure the security of exchanged production data within shared ledgers. The proposed concept is a solution enabling a modern approach to the interdisciplinary management of production resources while maintaining the highest cybersecurity standards.

How Urgent is Mobile Authentication in Special Need/Education? A Review Systematic of Cyber Security and Psychological Approach

The use of mobile apps due to the Covid-19 pandemic for the distance learning process, learning media, entertainment, and payment instruments creates an awareness of how urgently cyber security is needed in special education. Students, teachers, parents, and therapists, in special education who has interests and have the responsibility data, must be kept confidential or protected as the authenticity of their work, as well as the diversity of levels of disability, trying to study in a systematic review through scientific journal searches related to contemporary mobile authentication methods, authenticity. The review was conducted through several scientific search engines and mobile apps. The results show that authentication is a challenging study for mobile app (computing) developers but it is not easy to facilitate the unique, diverse needs of disability, and the privacy of personal data is still not following cyber security standards while the need for mobile apps in the health and education sectors is growing rapidly.

Upgrading space debris mitigation measures to cope with proliferating cyber threats to space activities

Growing possibilities and actual cases of cyber-attacks against space activities have brought about new challenges to overall space security and safety, aggravating, in all probability, the increasingly severe space debris problem. While space debris mitigation practices are recognized on both the international and national levels, their effectiveness differs, especially confronting space debris-generating cyber threats. Most current mitigation practices envisage only the debris-generating scenarios caused by internal reasons of the space objects, such as lousy design and manufacture, ignoring accidental disablements of space systems, collisions and break-ups caused intentionally by another party, which is the case of cyber-attacks against space activities. With more and more States finding it obligatory to adopt space debris mitigation measures, mitigating practice, if it has not evolved into, is at least on its way to customary international law. Facing new threats, some States and regions have already issued new policies to ensure the cyber-security of space activities, and further specific updates to the already outdated mitigating measures are also necessary. Incorporation in space debris mitigation practices of technical standards aiming to enhance space systems’ cyber-security standards, situational awareness, resilience, and physical robustness is thus of importance. It is also suggested that periodic review regimes and communication and coordination mechanisms between relevant standard-setting platforms be established in response to proliferating new risks in the space environment.

EXPLORING THE BENEFITS OF CROSS-IMPLEMENTING CYBERSECURITY STANDARDS TO COMBAT RANSOMWARE CYBER CRIMES

This article is devoted to research and analysis of recent cyberattacks on critical infrastructure of Ukraine using ransomware. In the article, the authors emphasize the growing importance of cyber security in today's digital environment due to the increase in the number of cybercrimes, in particular, attacks using ransomware. As a result, it is important to apply cybersecurity standards to effectively combat these threats. The article emphasizes the importance of implementing comprehensive measures that cover technical, organizational, and legal aspects to combat ransomware cybercrimes. The article also provides the main methods and tools for successfully countering ransomware, both for ordinary users and representatives of businesses and critical infrastructure facilities. Also, this paper offers an exploration of the benefits of cross-implementation of cybersecurity standards in the context of combating ransomware attacks and cybercrimes. The authors consider the methods and approaches to cyber security auditing, determine the advantages of the method of cross-implementation of standards, and offer recommendations for its effective use to ensure the security of information systems. This approach contributes to the creation of a comprehensive defense system that reduces the probability of success of attacks using ransomware and provides greater resilience of the organization to incidents and cybercrimes. The results of the study can be useful for organizations seeking to improve their cyber security and protect themselves from ransomware attacks and cybercrimes.

Особенности формирования системы национальной кибербезопасности Государства Кувейт

The article is devoted to the analysis of the state of the national cybersecurity system of the State of Kuwait. Based on the cybersecurity standards of the International Telecommunication Union (a specialized UN agency responsible for coordinating international efforts to develop the digital sector) the author reveals the main specific features of the formation of the Kuwaiti cyber system, and also determines the level of the country's participation in the development of the international digital security system. The author comes to the conclusion that the digital system of Kuwait is formed with imbalances, and many decisions are aimed at "selective" relief of digital threats. In addition, the author draws attention to the existence of contradictions in the Kuwaiti model of international cooperation on cybersecurity issues: on the one hand, the country advocates more active participation in international processes, and, on the other hand, does not actively participate in the work of key international platforms. In addition, the sharp anti-Israeli position of the country has a certain negative impact on the Kuwaiti model of digital protection. The author notes that Kuwait is currently aimed at harmonizing the national cyber system and developing a more effective approach to international cooperation. However, to make these efforts more effective, some aspects of the existing approach need to be revisited, such as developing a model for interacting with digital companies that do business with Israel.

A methodology for mapping cybersecurity standards into governance guidelines for SME in Portugal

The digitalization of companies and the implantation of Industry 4.0 concepts are emerging and challenging for micro and Small and Medium Enterprises (SME). The benefits are evident for the companies, as their business processes become simplified, and the internationalization and global market penetration turn out to be improved.However, information security and cybersecurity concerns have been raised on SME, as best practices and regulations compliance should be applied. The wide set of these regulations and their broad scope has put constraints on their overall direct mapping and adoption into SME.This paper describes an original methodology to map the Roadmap for Minimum Cybersecurity Capabilities (RMCSC) delivered by the Portuguese Cybersecurity Centre, into the well-adopted international information security ISO 27001:2013 standard. The proposed mapping is oriented toward the characteristics of SME and allows these companies to assess their cybersecurity risk to further mitigate potential identified flaws.The main deliverable of this paper is the developed methodology, which correlates the actions of the cybersecurity capabilities roadmap and the security controls enclosed in the ISO 27001:2013 standard. A questionnaire was developed to support the cybersecurity risk self-diagnosis, and the actions were justified and detailed in this paper. Further developments include the submission of the questionnaire to a case study of SME in the centre region of Portugal.

A Comparative Analysis of Industrial Cybersecurity Standards

A Comparative Analysis of Industrial Cybersecurity Standards

КРИТЕРІЇ ISO 21434 ДЛЯ ФОРМУВАННЯ СИСТЕМНИХ СПЕЦИФІКАЦІЙ У ПРОЦЕСАХ A-SPICE ДЛЯ АВТОМОБІЛІВ

With the increasing presence of electronics and autonomous systems in modern automobiles, cybersecurity has become a critical concern. Automotive manufacturers and other stakeholders are actively seeking ways to ensure reliable protection against cyber attacks. One approach involves the utilization of ISO 21434, a standard designed to enhance cybersecurity in the automotive industry. This research article investigates the ISO 21434 standard and its application in the field of automotive production, specifically in software development under the A-SPICE standard. The publication describes the methods and concepts used to enhance cybersecurity in the automotive industry and establishes the role of ISO 21434 within the A-SPICE model. The study's findings are valuable for companies and professionals involved in the development and implementation of cybersecurity measures in the automotive sector. Implementing the ISO 21434 standard can mitigate the risk of cyber attacks and improve the quality and reliability of automobiles, thus making the automotive industry safer and more trustworthy for consumers. The article provides an overview of key cybersecurity standards in the automotive industry. ISO 26262 sets out processes and requirements for functional safety in automotive systems, including cybersecurity considerations. SAE J3061 focuses on cybersecurity management in electronic systems of vehicles and is widely used in the industry. ISO/SAE 21434, introduced in 2020, replaces the previous ISO 26262 standard and specifies cybersecurity requirements in the automotive industry. These standards are closely related as they aim to ensure the safety and security of automotive products. Furthermore, the Automotive SPICE (Software Process Improvement and Capability Determination) framework is widely employed for evaluating and enhancing software development processes in the automotive sector. A-SPICE, a specific variant of Automotive SPICE, provides a framework for improving software development processes in automotive organizations. ISO 21434 guides cybersecurity activities within the A-SPICE framework, emphasizing the importance of a systematic and standardized approach to cybersecurity. To effectively implement cybersecurity in automotive products developed under A-SPICE, compliance with the ISO 21434 standard is crucial. However, mere adherence to the standard may be insufficient for achieving a high level of cybersecurity. Additional tools such as risk analysis methodologies and cybersecurity management can be employed to ensure robust cybersecurity measures. Risk analysis results can help identify vulnerabilities in the security system, enabling the development of effective mitigation measures. Cybersecurity management ensures compliance with the standard throughout the product development lifecycle. ISO 21434 can be applied at various stages of the V-model software development process, including requirements definition, design, and testing. During requirements definition, cybersecurity requirements are identified and incorporated into the system or software specifications. In the design phase, architectures are developed considering the cybersecurity requirements outlined in the standard. The testing phase addresses the fulfillment of cybersecurity requirements and evaluates the effectiveness of cybersecurity measures. In conclusion, the inclusion of ISO 21434 criteria in the development process of automotive software significantly impacts the quality and safety of products. The research demonstrates that applying ISO 21434 criteria allows for a systematic and structured approach to software development, ensuring the reliability, safety, and compliance of software products with regulatory requirements in the automotive industry. The article presents an analysis of standards, methods, and approaches used in the automotive industry and highlights the influence of ISO 21434 on the A-SPICE framework, defining its position within the model. Ultimately, this publication contributes to the advancement of knowledge in automotive cybersecurity.

A Review of Cyber Security and Cyber-Attacks – What to Know?

In this era, human activities have seen a shift and our majority activities including social, cultural,economic and even governmental and NGOs are being done in the cyberspace, especially during andafter the crisis of corona pandemic. Due to this shift in communication culture, many individuals andorganizations including governments have to face cyber-attacks. Due to heavy reliance ontechnology and little awareness, defending against cyber-attacks is very challenging. Cyber attacksare usually conducted with the goal of harming an organization or individual financially or theseattacks may also be motivated for political or military purposes. Viruses, malwares, ransomwares,denial-of-service and phishing attacks are some of the examples. To protect themselves,organizations employ variety of strategies to mitigate or prevent the threat of these attacks. Toprevent and mitigate cyber-attacks, researchers and professionals have devised a number oftechniques. This paper is written to thoroughly study and analyze these various approaches andproposed cybersecurity standards, and also to look into the problems, limitations and strengths ofthese techniques. Fundamental concepts of cyber-attacks and cyber security are discussed alongwith the current advancements and upcoming trends in security of cyber space. Such acomprehensive review paper would be highly beneficial.

ЦИФРОВЫЕ ИННОВАЦИИ, СООТВЕТ- СТВУЮЩИЕ ТРЕБОВАНИЯМ ПОД/ФТ И РИСК-ОРИЕНТИРОВАННЫЙ ПОДХОД

The article analyzes a review of the best in- ternational practices in the field of AML/CFT, developed and adopted by such countries as Germany, Great Britain, USA, Singapore, France. These include the standards of the Intergovernmental Commission on Financial Monitoring (FATF), as well as the ongoing monitoring and risk-based approach that are being implemented to combat money laun- dering around the world. The following re- search methods were used in the article: an analysis of modern scientific literature by foreign authors, focused on the aspect of crimes related to money laundering in the international AML regime in accordance with FATF standards. The purpose of this study is to consider the possibility of introducing artificial intelligence (AI) in the field of AML/CFT based on an analysis of the best international practices. 13 sources were ana- lyzed, including 4 scientific articles, including those on the introduction of artificial intelli- gence in combating money laundering and terrorism financing, 5 websites of regional organizations like the FATF. The study iden- tified barriers to the introduction of digital innovations in the field of AML/CFT for both commercial organizations and supervisory authorities: the difficulties and costs associ- ated with replacing or updating outdated sys- tems, difficulties associated with the explain- ability and interpretability of digital solutions. It is concluded that, when used responsibly and proportionately, innovative AML/CFT technologies can help identify risks and fo- cus efforts on existing and emerging issues,while manual verification and human partici- pation remain critical, while developing, im- plementing and regulatory oversight of inno- vative technologies should reflect both threats and opportunities, and the use of innovative tools should be compatible with international data protection, privacy and cybersecurity standards.

Cybersecurity Testing for Automotive Domain: A Survey

Modern vehicles are more complex and interconnected than ever before, which also means that attack surfaces for vehicles have increased significantly. Malicious cyberattacks will not only exploit personal privacy and property, but also affect the functional safety of electrical/electronic (E/E) safety-critical systems by controlling the driving functionality, which is life-threatening. Therefore, it is necessary to conduct cybersecurity testing on vehicles to reveal and address relevant security threats and vulnerabilities. Cybersecurity standards and regulations issued in recent years, such as ISO/SAE 21434 and UNECE WP.29 regulations (R155 and R156), also emphasize the indispensability of cybersecurity verification and validation in the development lifecycle but lack specific technical details. Thus, this paper conducts a systematic and comprehensive review of the research and practice in the field of automotive cybersecurity testing, which can provide reference and advice for automotive security researchers and testers. We classify and discuss the security testing methods and testbeds in automotive engineering. Furthermore, we identify gaps and limitations in existing research and point out future challenges.

Cybersecurity Comparison of Brain-Based Automotive Electrical and Electronic Architectures

Modern autonomous vehicles with an electric/electronic (E/E) architecture represent the next big step in the automation and evolution of smart and self-driving vehicles. This technology is of significant interest nowadays and humans are currently witnessing the development of the different levels of automation for their vehicles. According to recent demand, the components of smart vehicles are centrally or zonally connected, as well as connected to clouds to ensure the seamless automation of driving functions. This necessity has a downside, as it makes the system vulnerable to malicious attacks from hackers with unethical motives. To ensure the control, safety, and security of smart vehicles, attaining and upholding automotive cybersecurity standards is inevitable. The ISO/SAE 21434 Road vehicle—Cybersecurity engineering standard document was published in 2021 and can be considered the Bible of automotive cybersecurity. In this paper, a comparison between four different E/E architectures was made based on the aforementioned standard. One of them is the traditional distributed architecture with many electronic control units (ECUs). The other three architectures consist of centralized or zonally distributed high-performance computers (HPCs). As the complexity of autonomous E/E systems are on the rise, the traditional distributive method is compared against the HPC (brain)-based architectures to visualize a comparative scenario between the architectures. The authors of this paper analyzed the threats and damage scenarios of the architectures using the ISO/SAE 21434 standard, “Microsoft Threat Analysis Tool - STRIDE”, TARA, and “Ansys Medini Analyze”. Security controls are recommended to mitigate the threats and risks in all of these studied architectures. This work attempted to mitigate the gap in the scholarly literature by creating a comparative image of the E/E architectures on a generalized level. The exploratory method of this research provides the reader with knowledge on four different architecture types, their fundamental properties, advantages, and disadvantages along with a general overview of the threats and vulnerabilities associated with each in light of the ISO/SAE 21434 standard. The improvement possibilities of the studied architectures are provided and their advantages and disadvantages are highlighted herein.

Cybersecurity threats in agriculture supply chains: A comprehensive review

Agriculture supply chains, vital to global food security and economic stability, are increasingly integrating advanced technologies such as the Internet of Things (IoT), precision agriculture, and blockchain to enhance efficiency and transparency. However, this digital transformation exposes these supply chains to significant cybersecurity threats. This comprehensive review explores the various cybersecurity threats faced by agriculture supply chains, including malware and ransomware attacks, phishing and social engineering, data breaches, IoT vulnerabilities, and supply chain attacks. Through case studies and analysis, the review highlights the economic, operational, and reputational impacts of these threats, underscoring the potential for substantial financial losses, disruption of supply chain processes, and erosion of consumer trust. The review identifies several vulnerabilities within agriculture supply chains, such as technological weaknesses in IoT devices, inadequate encryption, lack of cybersecurity awareness among personnel, and reliance on legacy systems. Addressing these vulnerabilities is crucial for maintaining the integrity and resilience of agriculture supply chains. The review discusses various mitigation strategies and best practices, including the implementation of robust cybersecurity measures, regular updates and patch management, the use of advanced technologies like AI and machine learning for threat detection, and comprehensive cybersecurity training programs. Additionally, the review emphasizes the importance of policy and regulatory measures, advocating for the development and enforcement of cybersecurity standards and enhanced collaboration between government and private sectors. Looking towards the future, the review explores emerging trends and advancements in cybersecurity technologies, anticipated regulatory changes, and the necessity of continuous monitoring and adaptive strategies to address evolving threats. This review highlights the critical need for proactive cybersecurity measures in agriculture supply chains, encouraging stakeholders to prioritize cybersecurity to safeguard the sector's sustainability and resilience in an increasingly digitalized world.

A taxonomy for cybersecurity standards applicable to the maritime sector

A taxonomy for cybersecurity standards applicable to the maritime sector

Adopting and integrating cyber-threat intelligence in a commercial organisation

ABSTRACT Cyber-attacks are increasingly perpetrated by organised, sophisticated and persistent entities such as crime syndicates and paramilitary forces. Even commercial firms that fully comply with industry “best practice” cyber security standards cannot cope with military-style cyber-attacks. We posit that the primary reason is the increasing asymmetry between the cyber-offensive capability of attackers and the cyber-defensive capability of commercial organisations. A key avenue to resolve this asymmetry is for organisations to leverage cyber-threat intelligence (CTI) to direct their cyber-defence. How can commercial organisations adopt and integrate CTI to routinely defend their information systems and resources from increasingly advanced cyber-attacks? There is limited know-how on how to package CTI to inform the practices of enterprise-wide stakeholders. This clinical research describes a practitioner-researcher’s experiences in directing a large multinational finance corporation to adopt and integrate CTI to transform cybersecurity-related practice and behaviour. The research contributes practical know-how on the organisational adoption and integration of CTI, enacted through the transformation of cybersecurity practice, and enterprise-wide implementation of a novel solution to package CTI for commercial contexts. The study illustrates the inputs, processes, and outputs in clinical research as a genre of action research.

From Zero to One Hundred

Changing network landscapes and rising security threats have imparted a sense of urgency for new approaches to security. Zero trust has been proposed as a solution to these problems, but some regard it as a marketing tool to sell existing best practice while others praise it as a new cybersecurity standard. This article discusses the history and development of zero trust and why the changing threat landscape has led to a new discourse in cybersecurity. Drivers, barriers, and business implications of zero trust provide a backdrop for a brief overview of key logical components of a zero trust architecture and implementation challenges.

The baseline of global consumer cyber security standards for IoT: quality evaluation

ABSTRACT The popularity of the Internet of Things (IoT) devices has been gaining interest amongst consumers. The rise of consumers benefiting from IoT devices has increased the threat of cyber-attacks. The safety, security, and privacy of consumers can be negatively affected if vulnerabilities of IoT devices are exploited. Therefore, there is a need of understanding what within IoT devices is necessary to secure. Further, the implementation of necessary and important requirements is needed to ensure protection against cyber-attacks on IoT devices. The recently published Cyber Security for Consumer Internet of Things (CSCIoT) standard, called ETSI EN 303 645, is a global standard that describes requirements on implementing a minimum level of security for IoT devices. This paper evaluates the sufficiency of cyber security of the consumer IoT standards’ requirements and gradation. The evaluation is done by comparing CSCIoT to the international professional IoT standard, called IEC 62443, and with the other related work, such as the Secure by Design report of the UK Department for Digital, Culture Media & Sport. Also, this paper discusses implications regarding consumer responsibility on security. This paper aims to stimulate more precision and extension of requirements for consumer IoT devices to lower the risk of cyber-attacks.