Hacker Attacks Research Articles

Proposed Hybrid Cryptosystems Based on Modifications of Playfair Cipher and RSA Cryptosystem

Cipher security is becoming an important step when transmitting important information through networks. The algorithms of cryptography play major roles in providing security and avoiding hacker attacks. In this work two hybrid cryptosystems have been proposed, that combine a modification of the symmetric cryptosystem Playfair cipher called the modified Playfair cipher and two modifications of the asymmetric cryptosystem RSA called the square of RSA technique and the square RSA with Chinese remainder theorem technique. The proposed hybrid cryptosystems have two layers of encryption and decryption. In the first layer the plaintext is encrypted using modified Playfair to get the cipher text, this cipher text will be encrypted using squared RSA to get the final cipher text. This algorithm achieved higher security to data but suffers from a long computational time. So Chinese remainder theorem has been used in the second hybrid cryptosystem to obtain less encryption and decryption time. The simulation results indicated that using the modified Playfair with the proposed square RSA has improved security. Moreover, using the Chinese remainder theorem achieved less encryption and decryption time in comparison to our first proposed and the standard algorithms.

PENGONTROLAN KEAMANAN SISTEM KOMPUTER CLIENT DARI SERANGAN HACKER DAN VIRUS KOMPUTER SECARA JARAK JAUH (REMOTE SERVER) DENGAN MENGGUNAKAN SSH

Computer system security is very important to be considered by computer users to protect their computers from attacks such as hackers and computer viruses that can take data and damage the user's computer system. Hacker is a person or party who has the skill in breaking through and sneaking to access a computer without the user's permission and can take data and even damage the system on the user's computer. And a Computer Virus is a computer program that copies and inserts copies into the program and can damage the computer system. So that by using SSH (Secure Shell) can control and check computer security from hacker attacks and computer viruses without having to come to the location where there is a client computer or done remotely (Remote Server).

Audit Trails and Logging Biometric Authentication for Data Security in Banking Using Reporting Tools

Many sectors, including government, consumer electronics, and business security systems, are beginning to see the potential benefits of biometric authentication. More and more businesses, organisations, and individuals are turning to biometric security measures to keep cyberspace safe from malicious actors. Cybersecurity is the practice of protecting computer systems, networks, data, and software from intrusion and other forms of cyberattack. The provision of banking services through electronic means is known as "cyber banking." The rise of online banking is a reflection of the general shift in consumer spending habits. Despite its many advantages, online banking has been plagued by security breaches. Biometric security ensures the identity of individuals by confirming their behavioural and physical characteristics. It is the gold standard of physical security when it comes to verifying identities. Biometric authentication holds that individuals can be uniquely identified by their intrinsic physical or behavioural characteristics. To combat these difficulties, a plethora of security safeguards have been integrated across the entire online banking service. A major danger to the occurrence of criminal or terrorist behaviour, cybercrime has deep roots globally. These threats can jeopardise both internal and external security if no one in charge takes them seriously. Money and personal information are at risk if cybercrime goes undetected. Attacks on the Internet and its supporting infrastructure have happened before. Every single day, crimes involving computers occur, such as hacker attacks and online fraud. In order to combat the threat of cybersecurity and offer the banking industry with a high level of safety and security, the study delves into the essential characteristics of biometric systems in both conventional and Islamic banking

Multiple 3D Chaotic Keys to Protect Digital Images

A simple, multipurpose, efficient, sensitive and highly qualities method of image cryptography will be introduced in this research paper. The method will be easily used to encrypt-decrypt any type of image with any size (gray and color images). The proposed method will secure the image by providing a high degree of image protection based on using a complex private key, which contains eight values, each of the has a double data type. The private key will provide the required key space to resist any hacking attack. The private key components will be used to calculate the size of the generated 3D chaotic logistic key. The private key will also be used to run two chaotic logistic map models to get two different chaotic keys base on the chaotic parameters values included in the private key. Two rounds of XORing operations will be used to generate the encrypted-decrypted image. The generated outputs of the proposed method will be sensitive to the selected value of the private key. The proposed method will be very flexible, changing the source image or/and changing the private key will not require any changes in the method algorithm. The proposed method will be tested and implemented using various image, the obtained results will be discussed to prove the features provided by the method: quality, sensitivity, security and efficiency.

Digital Platforms with the Ups and Downs in the Metaverse Era

The arrival of the metaverse era, the birth and development of digital currency, and the creation and improvement of the blockchain platform. How does the cryptocurrency sector in the financial markets attract more and more investors? Is it a risk or an opportunity? Digital currency is the product of The Times, keeping pace with The Times is the trend of social development, and seeking advantages and avoiding disadvantages is a necessary condition for operation. This paper through the definition of the metauniverse, the rise of the metauniverse era and unknown, cryptocurrency types, judgment and analysis, digital platform trading and loopholes, analyzes the cause of the virtual currency market instability, as a rational investor, under the premise of self-financing, should be in this field of what financial theory can be as profitable as much as possible. How does FSV stand out, how does it operate, and what is its potential? It also describes the Kepler market for the recent hacking attack and the reasons for the birth of blockchain.

Real-Time Risk Detection Method and Protection Strategy for Intelligent Ship Network Security Based on Cloud Computing

When studying an unfamiliar system, we first look for the symmetry that the system has, so that we can make many predictions about the possible properties of the system. The symmetry in ship network security needs to maintain a stable state and maintain a constant state of ship network security. With the rapid development of network information technology, smart ships have become a new hot spot in the international shipping industry. The smart ships cybersecurity discussion is also at the top of the list in the maritime field. More and more shipping companies feel that their smart ship systems need to be upgraded and the main reason behind this is that the systems are maliciously attacked by cyber hackers. Therefore, it is extremely important to detect and protect the security of intelligent ship network systems in real time. The issue of network security has always accompanied the whole process of the development of the Internet. At the same time, with the development of Internet technology, network hacking attacks against the Internet have never stopped developing, and traditional ship network security risk detection and protection cannot achieve good results. After understanding the operation mode of intelligent ship networks, this paper deeply studied the characteristics of cloud computing technology and proposed a real-time risk detection method and protection strategy for intelligent ship network security based on cloud computing. This paper mainly used multi-sensor nodes to analyze data containing malicious attack information and implemented self-execution protection strategy generation nodes to intercept and protect from the attack, so as to achieve the purpose of maintaining the network security of intelligent ships. Through experiments, the virus intrusion detection and defense rate of the algorithm proposed in this paper was able to reach 85% to 95%, while the virus intrusion detection defense rate of the traditional intelligent ship network security protection algorithm was 55% to 65%. The detection rate of the algorithm proposed in this paper was able to reach 96.95% and the false positive rate was 2.56%. The detection rate of the traditional algorithm was only 70.76%, while the false positive rate reached 4.69%. All of the proposed algorithm’s data were significantly better than that of traditional algorithms, which proved that the performance of cloud computing-based real-time risk detection and protection algorithms for intelligent ship network security was significantly better than that of traditional algorithms.

Holistic Approach to Ensuring Safety and Cybersecurity in the Use of Intelligent Technologies in Air Transport

The article is devoted to the study and analysis of the problems associated with the use of intelligent technologies in air transport security and cybersecurity issues. Possible dangers that may arise when using autonomous systems, including autonomous aircraft, are considered. The technical measures that can be taken to prevent these dangers, including the development of new methods of cybersecurity and protection against hacker attacks, are analyzed. The problem of ensuring security in air transport associated with the introduction of new technologies and automated systems is investigated. The risks associated with this process are described, such as possible aircraft accidents, data storage problems, and passenger safety issues. Technical measures that can be taken to ensure safety in air transport, including the development of new technologies and diagnostic methods that can detect possible problems before they become serious, are considered. Practical solutions to these problems are proposed, including the development of new security and cybersecurity systems that can be used in air transport. The technical measures that can be taken to ensure the safety and efficiency of the use of intelligent technologies in air transport are described. It is established that the developed simulation model can serve as an effective tool for managing the processes of aircraft ground handling at the airport, as well as allow predicting the results of such processes and developing algorithms for the rational allocation of resources, considering the functioning of the system in different modes. To ensure the efficient functioning of the aircraft ground handling system, it is proposed to implement technical measures to improve cybersecurity and ensure the system's resilience to possible cyberattacks.

Criminal liability for illegal possession of cryptocurrency in Ukraine

This study investigated the criminal liability for illegal acquisition of cryptocurrency in Ukraine, which is relevant in connection with the considerable spread of cryptocurrencies and cases of their illegal acquisition, as a result of which significant material damage is caused to the victims. Specifically, this is explained by the collapse of cryptocurrency exchanges and hacker attacks on cryptocurrency wallets. The purpose of this study was to investigate what criminal liability is prescribed for illegal possession of cryptocurrency in Ukraine. The study employed a dialectical approach and methods of system and technical and legal analysis, as well as a formal and logical method. Approaches to understanding the term “cryptocurrency” were defined, and its types were specified. The features of the functioning of blockchain technology were covered. This paper analysed the legal regulation of virtual assets in Ukraine, their relationship with cryptocurrency. It is noted that at its core, cryptocurrency is not a virtual asset and that it is advisable to consider it an electronic asset based on the blockchain – a decentralized public register of all cryptocurrency transactions conducted on the network. Shortcomings in the legal regulation of cryptocurrencies in Ukraine were highlighted, specifically, it was noted that the signs of virtual assets do not fully coincide with the signs of cryptocurrencies. The most common ways of illegal possession of cryptocurrency were specified, and problematic issues of bringing individuals who have come into illegal possession of cryptocurrency to criminal responsibility were outlined. This paper substantiated the impossibility of bringing individuals who have come into illegal possession of cryptocurrency to criminal responsibility in Ukraine, considering the principle of legal certainty and avoiding analogy in criminal law. The necessity of criminalizing illegal possession of cryptocurrency was proved. Practical recommendations on making appropriate amendments to the Criminal Code of Ukraine were formulated. The theoretical value of this study lies in the formation of an approach to the need to criminalize the illegal possession of cryptocurrencies, and its results can be used in law-making activities.

Security feedback trust model of power network demand response terminal triggered by hacker attacks

With the rapid expansion of power system scale, demand response business is promoted to develop. More and more demand response terminals are connected to the smart grid, smart grid is an intelligent system that allows the grid to effectively perform its functions. Its data can be used in intelligent decision-making during grid operation, which may be attacked by hackers in practical applications, causing security problems of demand response terminals of the power network. The security feedback trust model establishes trust relationship through trust mechanism, which can effectively ensure the security of interaction between nodes and demand response terminals of the smart grid. Therefore, a security feedback trust model of power network demand response terminal triggered by hacker attacks is proposed. Analyze the role of smart grid in power grid, and use convolutional neural network in artificial intelligence technology to enhance the flexibility of smart grid. Aiming at the security problem of the demand response terminal of the power network being attacked by hackers, based on the trust theory, the security feedback trust model of the demand response terminal of the power network is designed through the main services provided by the security feedback trust model, the trust information storage of the power network nodes and the summary of the main work. Establish the identity trust relationship, adopt the distributed verifiable signature scheme, update the power grid node certificate, update the identity trust relationship, and revoke the identity trust relationship based on the trust evaluation and threshold value to prevent hackers from attacking the power grid demand response terminal. Based on information theory, trust is established and measured. Entropy is used to represent the trust value. Behavior trust evaluation and composition mechanism are introduced into the security feedback trust model of power network demand response terminals to achieve the credibility of identity and behavior among power network nodes. The experimental results show that the proposed method can judge the hacker attacks, reduce the impact of hacker attacks on the trust of power grid nodes, and improve the interaction security between power grid demand response terminals and power grid nodes.

Nash mixed detection strategy of multi-type network attack based on zero-sum stochastic game

The defense strategy of the Internet of Things (IoT) under hacker attack is a crucial issue in the security field of industry. When IoT plants are attacked by hackers, it is impossible to understand the type of attack employed by the hackers. At this point, we need a detection mechanism that can cope with the known multiple types of network attacks. In this paper, we focus on the issue of IoT security defense and construct a multi-detector detection system capable of detecting multiple types of network attacks based on a zero-sum stochastic game framework. The system can choose between multiple detectors according to a mixed Nash equilibrium strategy that takes into account both the detection cost and the detection effect. Finally, we present a simulation comparison between the multi-detector system and the single detector system to verify that the mixed strategy leads to higher detection effectiveness and lower control performance loss.

The current state and future of mobile security in the light of the recent mobile security threat reports.

Smartphones have become small computers that meet many of our needs, from e-mail and banking transactions to communication and social media use. In line with these attractive functions, the use of smartphones has greatly increased over the years. One of the most important features of these mobile devices is that they offer users many mobile applications that they can install. However, hacker attacks and the spread of malware have also increased. Today, current mobile malware detection and defense technologies are still inadequate. Mobile security is not only directly related to the operating system and used device but also related with communication over the internet, data encryption, data summarization, and users' privacy awareness. The main aim and contribution of this study are to collect the current state of mobile security and highlight the future of mobile security in light of the recent mobile security threat reports. The studies in the field of malware, attack types, and security vulnerabilities concerning the usage of smartphones were analyzed. The malware detection techniques were analyzed into two categories: signature-based and machine learning (behavior detection)-based techniques. Additionally, the current threats and prevention methods were described. Finally, a future direction is highlighted in the light of the current mobile security reports.

Observer-based decentralized fuzzy control for connected nonlinear vehicle systems

This article analyzes the tracking control of a type of connected nonlinear vehicle system, where the problem of hacker attacks and external disturbance is considered. A decentralized fuzzy control method based on observer is constructed. Specifically, first of all, the mathematical model of an automobile system with disturbance and false data injection attacks is built, which is composed of a head vehicle and N following vehicles. Then, in order to obtain prior knowledge of disturbance and states, a disturbance estimator on fuzzy sliding mode technique is proposed and a state observer is designed. Thirdly, an observer-based decentralized secure control strategy via fuzzy and backstepping control technique is designed to achieve the tracking control. Furthermore, the boundness of closed-loop signals and existence of appropriate safety distance between vehicles are certificated by Lyapunov theory. Finally, the potential of presented approaches is simultaneously illustrated by a numerical simulation and a semi-physical simulation.

Vulnerability Assessment with Network-Based Scanner Method for Improving Website Security

The digital world has seen a significant increase in security threats in recent years, with hacker attacks on websites being a major concern in cybersecurity. One platform that is particularly vulnerable is WordPress, which is widely used and therefore a popular target for hackers. About 95.62% hacked website in 2021 is WordPress based site. Therefore, to improve website security we conducted a vulnerability assessment on a WordPress based website, in order to identify vulnerabilities that may be exploited by hackers. To do the vulnerability assessment, we used the network-based scanner based to detect vulnerabilities on the WordPress website. Our results showed that the website had several vulnerabilities that needed to be addressed and fixed immediately. The conclusion of our research highlights the importance of conducting regular vulnerability assessments on WordPress-based websites to reduce the risk of vulnerabilities being exploited. By taking proactive measures to identify and fix vulnerabilities, website owners can better protect their sites from potential hacker attacks. It is crucial for website owners to be aware of the risks posed by security threats in the digital world and to take steps to mitigate these risks to protect their businesses and their customers.

Безпека даних підприємства у хмарному середовищі: аналіз загроз

Wider use of cloud services leads to increased cyber attacks on data arrays in cloud storage. Ensuring privacy in the cloud comes at a cost, and businesses are willing to bear these costs for data security. However, there is still a high risk of data being tracked and stolen due to existing vulnerabilities in the Internet environment. The purpose of the article is to analyze threats to data in the cloud environment under conditions of uncertainty and to reveal their increase in the virtual IT infrastructure of the enterprise. The advantages and disadvantages of enterprises using cloud services for data storage were revealed. Considering the amount of financial losses and reputational risks, the issue of protecting networks and services in the cloud, especially when hosting confidential or secret information, is a priority for enterprises of all industries. According to Significant Cyber Incidents, cyber incidents against government, defence and high-tech companies in the world were analyzed during 2021-2022. It was found that the attacks were primarily aimed at critical infrastructure enterprises and government organizations. Analysis of data from the Future Risk Report 2022 shows that climate change, geopolitical tensions, cyber security risks, and energy risks will remain the most significant risks over the next decade. It was revealed that since the beginning of the full-scale invasion, the number of attacks on Ukrainian enterprises of critical infrastructure and the telecommunications sphere has increased significantly. This shows that hacker attacks are one of the tools of hybrid warfare, capable of causing significant damage to the country's economy. The revealed trend in Ukraine confirms the predictions of international experts that cyber threats will grow in conditions of uncertainty and geopolitical instability. The article provides a chronology of massive cyberattacks on Ukrainian enterprises and organizations in the IT sphere over the past two years. It was determined that the means of reducing risks in the field of cyber security, which lead to the saving of costs of enterprises for data security, are the tools of artificial intelligence of security and further automation of threat identification. Thus, cyber security becomes an integral component in ensuring the full functioning of the enterprise, and the ways and means of its achievement require further research.

Cost accounting to ensure the economic security of the enterprise in the conditions of digital transformations

The study considered and analyzed the economic essence of the concept of «economic security» and its importance in the company's activities, the impact on the organization and maintenance of accounting operations and the need for cyber protection of such operations, especially depending on the sectoral or innovative direction of the company's activity. The development of digital technologies and their application in the economy requires enterprises of all forms of ownership to take measures for digital data security, including the organization of accounting and tax accounting in the conditions of their digital transformations, and from state bodies during interaction with the subject of economic activity protection of information transmission channels at the appropriate level against cyber attacks. Any measures taken by the enterprise to protect data, record keeping in the conditions of the digital economy require it to bear the appropriate costs for ensuring the keeping of such records and protection of data transmitted by the enterprise, or accepted from state authorities, since at the current stage of development of digital technologies, server data stores on which state bodies store information about the activities of a significant number of subjects are regularly attacked by hacker attacks. As a rule, the costs of the enterprise are proportional to the measures related to the protection of the existing information component of the activity and the necessary complex of them, as well as the corresponding accounting operations when they are reflected in accounting or tax accounting. An analysis of scientific and specialized literature was carried out, where it was investigated that the approaches to the definition of the concept of economic security among scientists and scientists differ in their nature and approaches, which requires further study of the terminology and the creation of a single generalizing approach to the definition of the concept and the scope of its use as a whole. It was determined that the costs of the economic security of the enterprise in the conditions of digital transformations of the modern economy are the resources of the enterprise expressed in monetary form, which are used in the process of its activity to ensure the proper and uninterrupted functionality of the external and internal electronic communication system, as well as incurred to ensure the protection of intellectual and technological component of its activity.

RDMA Congestion Control: It Is Only for the Compliant

Remote direct memory access (RDMA) networks enable low latency and low central processing unit utilization, and their widespread adoption in datacenters enables improved application performance. However, there are performance isolation concerns for RDMA deployed in a shared cloud environment. In particular, congestion control enforcement and congestion control algorithms in RDMA make the network susceptible to performance hacking attacks, which give the attacker extra bandwidth and cause severe congestion in the network. These attacks can increase short flow completion times by several orders of magnitude. We surface a fundamental tradeoff in congestion control between short flow completion time and performance isolation. We discuss this tradeoff and how existing approaches do not provide a robust solution. We also advocate that researchers incorporate performance isolation concerns into the design and evaluation of congestion control.

Research on Personal Information Security Protection Measures in the Big Data Era

While big data brings convenience to people, it also exposes various problems. Personal information is always exposed to risks. Protecting personal information from infringement in the big data era has become an urgent problem to be solved. This paper studies from three aspects. First, it analyzes the importance of personal information security protection in the big dataera: maintaining normal social production and life order, protecting personal physical and mental health and property safety, and reducing the occurrence of cyber crimes. Second, it summarizes the problems existing in personal information security protection in the big data era: serious disclosure of personal privacy information, malicious attacks on personal privacy by cyber hackers, low awareness of personal information security protection, and imperfect laws and regulations on personal information security protection. Third, the main measures of personal information security protection in the big data eraare put forward: improving the laws and regulations of personal information protection, raising the awareness of personal information security protection, building a data-centric security governance system, and strengthening the prevention and governance of cyber hacking attacks.

A competitive analysis of information security investment: The role of hacker attacks

The role of hacker attacks on information security investment and firm profits is fundamental in information security economics, which, however, has not been fully examined yet. This paper builds a duopolistic horizontal differentiation model to study this issue and yields a series of interesting findings. First, we find that each firm may benefit from an increase of the probability of hacker attacks when it gains more from security differentiation and suffers less from investment competition. Second, when market competition becomes fiercer, each firm invests less in information security to maintain security differentiation. Third, each firm may benefit from an increase of consumer security loss because the resulting security investment can lead to a more desirable security differentiation. Finally, an increase of cost coefficient of security investment may be profitable to each firm in spite of an increase of security expenditure. This is because an increase of cost coefficient may facilitate security differentiation through discouraging security investment. Additionally, the model is extended to analytically and numerically check the robustness of the main results.

미국 CMMC 제도 대응을 위한 통합실태조사 제도 개선 연구

Recently, thanks to the rapidly growing K-defense industry, Korea's defense industry is rising as one of the world's top 10 powerhouses, and insider information leakage and cyber hacking attacks targeting core defense industry technologies are continuously increasing. The need for defense technology protection is increasing. In response, the government enacted the Defense Industrial Technology Protection Act and conducted annual integrated fact-finding surveys on defense companies to check their cyber security systems. Meanwhile, the US government, which holds the leadership in the defense industry market, is threatening the growth of the domestic defense industry by implementing the CMMC (Cyber Security Maturity Model Certification) system and planning to require CMMC certification from companies in other countries. In this paper, an integrated fact-finding survey improvement model was designed through the analysis of the integrated fact-finding survey checklist and CMMC control items that investigate the cyber security reality of the defense industry, and a solution was proposed for elements not included in CMMC, and the CMMC system was implemented in Korea. Suggested countermeasures for a soft landing. The government and academia are reviewing various policy measures to respond to the US CMMC, such as preparing the K-CMMC certification system. Therefore, this study is expected to help settle the K-CMMC system in the future.

Securitisation of Ukrainian Critical Infrastructures: The Case of the Failure of SCADA System in Protecting the Power Grids

Critical infrastructures are the important element to support the social cohesion in a certain area. Therefore, it is necessary to protect critical infrastructures in order to maintain the sustainability of the assets. There are many attempts of states to control the security of their critical infrastructures, one of them is using Supervisory Control and Data Acquisition (SCADA) system, a control system in which to monitor and retrieve data under the supervision of an operator. However, although countries are aware of the preventive action over their critical infrastructures, it is still possible to fail. In this case, Ukraine which has a relatively secure control system was failed in protecting its power grids from multiple hacker attacks which contributed to blackouts in December 2015. The devastating failure of Ukraine’s security system has led public opinion to point a finger to Russia since the relationship of both countries is at stake. In this sense, Ukraine issued a speech act to securitise its critical infrastructures. By exercising securitisation theory, this article would discuss further about the fruitfulness of the speech act after the failure of the security system in protecting Ukraine’s power grids.