Hacker Attacks Research Articles

RDMA Congestion Control: It Is Only for the Compliant

Remote direct memory access (RDMA) networks enable low latency and low central processing unit utilization, and their widespread adoption in datacenters enables improved application performance. However, there are performance isolation concerns for RDMA deployed in a shared cloud environment. In particular, congestion control enforcement and congestion control algorithms in RDMA make the network susceptible to performance hacking attacks, which give the attacker extra bandwidth and cause severe congestion in the network. These attacks can increase short flow completion times by several orders of magnitude. We surface a fundamental tradeoff in congestion control between short flow completion time and performance isolation. We discuss this tradeoff and how existing approaches do not provide a robust solution. We also advocate that researchers incorporate performance isolation concerns into the design and evaluation of congestion control.

Research on Personal Information Security Protection Measures in the Big Data Era

While big data brings convenience to people, it also exposes various problems. Personal information is always exposed to risks. Protecting personal information from infringement in the big data era has become an urgent problem to be solved. This paper studies from three aspects. First, it analyzes the importance of personal information security protection in the big dataera: maintaining normal social production and life order, protecting personal physical and mental health and property safety, and reducing the occurrence of cyber crimes. Second, it summarizes the problems existing in personal information security protection in the big data era: serious disclosure of personal privacy information, malicious attacks on personal privacy by cyber hackers, low awareness of personal information security protection, and imperfect laws and regulations on personal information security protection. Third, the main measures of personal information security protection in the big data eraare put forward: improving the laws and regulations of personal information protection, raising the awareness of personal information security protection, building a data-centric security governance system, and strengthening the prevention and governance of cyber hacking attacks.

A competitive analysis of information security investment: The role of hacker attacks

The role of hacker attacks on information security investment and firm profits is fundamental in information security economics, which, however, has not been fully examined yet. This paper builds a duopolistic horizontal differentiation model to study this issue and yields a series of interesting findings. First, we find that each firm may benefit from an increase of the probability of hacker attacks when it gains more from security differentiation and suffers less from investment competition. Second, when market competition becomes fiercer, each firm invests less in information security to maintain security differentiation. Third, each firm may benefit from an increase of consumer security loss because the resulting security investment can lead to a more desirable security differentiation. Finally, an increase of cost coefficient of security investment may be profitable to each firm in spite of an increase of security expenditure. This is because an increase of cost coefficient may facilitate security differentiation through discouraging security investment. Additionally, the model is extended to analytically and numerically check the robustness of the main results.

미국 CMMC 제도 대응을 위한 통합실태조사 제도 개선 연구

Recently, thanks to the rapidly growing K-defense industry, Korea's defense industry is rising as one of the world's top 10 powerhouses, and insider information leakage and cyber hacking attacks targeting core defense industry technologies are continuously increasing. The need for defense technology protection is increasing. In response, the government enacted the Defense Industrial Technology Protection Act and conducted annual integrated fact-finding surveys on defense companies to check their cyber security systems. Meanwhile, the US government, which holds the leadership in the defense industry market, is threatening the growth of the domestic defense industry by implementing the CMMC (Cyber Security Maturity Model Certification) system and planning to require CMMC certification from companies in other countries. In this paper, an integrated fact-finding survey improvement model was designed through the analysis of the integrated fact-finding survey checklist and CMMC control items that investigate the cyber security reality of the defense industry, and a solution was proposed for elements not included in CMMC, and the CMMC system was implemented in Korea. Suggested countermeasures for a soft landing. The government and academia are reviewing various policy measures to respond to the US CMMC, such as preparing the K-CMMC certification system. Therefore, this study is expected to help settle the K-CMMC system in the future.

Securitisation of Ukrainian Critical Infrastructures: The Case of the Failure of SCADA System in Protecting the Power Grids

Critical infrastructures are the important element to support the social cohesion in a certain area. Therefore, it is necessary to protect critical infrastructures in order to maintain the sustainability of the assets. There are many attempts of states to control the security of their critical infrastructures, one of them is using Supervisory Control and Data Acquisition (SCADA) system, a control system in which to monitor and retrieve data under the supervision of an operator. However, although countries are aware of the preventive action over their critical infrastructures, it is still possible to fail. In this case, Ukraine which has a relatively secure control system was failed in protecting its power grids from multiple hacker attacks which contributed to blackouts in December 2015. The devastating failure of Ukraine’s security system has led public opinion to point a finger to Russia since the relationship of both countries is at stake. In this sense, Ukraine issued a speech act to securitise its critical infrastructures. By exercising securitisation theory, this article would discuss further about the fruitfulness of the speech act after the failure of the security system in protecting Ukraine’s power grids.

Development of a method for processing log files using clustering

A log file is a document that keeps track of all events that occur on a website or server. Many log files are very large, so they can be regularly written over outdated content, or entire collections of log files with names, including a date, for example, can be created. In the event of technical problems, site inaccessibility, virus infection, hacker attacks and Distributed Denial of Service (DDoS) attacks, the resource administrator can use the information in log to find the cause, which makes it easier and faster to eliminate unwanted incidents. The paper analyzes the definition, types, location, use and examples of log files. Data are transferred to the MySQL database using the Squid.db database. Clustering is performed using a database. The study highlights clustering, analyzes metrics, and determines the proximity of clusters and objects in clusters in Euclidean space. Experiments are conducted and the results are satisfactory. For example, data are transferred to the MySQL database using the Squid.db database. Since the Squid proxy server is a cache proxy server, it stores resources, and the work is done quickly on the next request. Data are clustered using a compiled table of databases transferred to MySQL via Squid proxy. In this case, unnecessary entries are deleted from the table, which significantly speeds up data processing. The application of clustering method in problem solving is fast and simple. For the problem stated, the degree of closeness of clusters and objects in clusters in Euclidean space is determined. Experiments are conducted using obtained results.

Blockchain analysis of the Bitcoin market. (Part 3)

The detailed analysis of the Bitcoin network and its main participants. The expert authors (Igor Makarov, London School of Economics, Antoinette Schoar, MIT Sloan School of Management) completed the study authorized by the National Bureau of Economic Research (NBER), the US-based private agency. The Bitcoin network is defined as a new database comprising many of public and proprietary sources to link bitcoin address to real object, and an extensive set of algorithms to extract information on market key players behavior. Three major pieces of analysis of the Bitcoin eco-system were conducted. First, the authors analyze the transaction volume and network structure of the main participants on the blockchain. Second, they document the concentration and regional composition of the miners which are the backbone of the verification protocol and ensure the integrity of the blockchain ledger. Finally, they analyze the ownership concentration of the largest holders of Bitcoin. The researchers found that 1/3 of all bitcoins issued were owned by 10,000 individual investors. They conclude that the high concentration makes the first cryptocurrency market vulnerable to hypothetical hacker attack. The translator notes that paraphrasing English text in Russian was rather challenging due to the newness of the financial agenda and introduction of the term entity extensively used in the Western countries though new to Russia. Nevertheless, it is necessary to introduce readers to the bitcoin technology which will be also practical and useful for the library and information community.

SYNTHESIS OF THREATS AND RISKS OF CYBER SECURITY OF MONTENEGRO - THE VULNERABILITY ASPECT OF INFORMATION COMMUNICATION INFRASTRUCTURE

That there are no untouchables and that cyber threats are entering Montenegro through the big doors, is indicated by the hacker attack on the Government of Montenegro. Fortunately, the hackers did not get hold of confidential data, but their act itself caused a serious act of endangering state security, especially because they breached the system that is networked with all state bodies. It was not the first time in 2022 that hackers broke into Government IC systems and state and private companies and organizations. Experts from the IT sector have been warning about the vulnerability of the system for a long time, but not loudly enough to be taken seriously. Let’s also mention the attack on Montenegro on the eve of joining NATO, where Montenegro was under increased cyber attacks, and the Ministry of Defense says that it is similar today.Cyber is no longer the world of gamers and geeks, it is increasingly becoming a prefix for terrorism, crime, and other types of threats (Kazerić 2017). Internet trade and the use of electronic services such as e-government are also on the rise. To the global trend, almost everything that was only tangible and materialized in the real world is moving to the virtual community. This brings with it many advantages, but also disadvantages, and one of them is certainly the vulnerability of critical information and communication infrastructure and the danger of cyber attacks. In such circumstances, the issue of security partially shifts the focus to cyber, that is, cyber security. Precisely for this reason, it is necessary to take a critical look at the existing information and communication infrastructure and analyze the existing threats and risks brought by the modern, cybernetic age. The synthesis of threats and risks is necessary so that we can adequately face them and predict the difficulties that may come our way, which could have significant consequences for national security.

Research on Cyber ISR Visualization Method Based on BGP Archive Data through Hacking Case Analysis of North Korean Cyber-Attack Groups

North Korean cyber-attack groups such as Kimsuky, Lazarus, Andariel, and Venus 121 continue to attempt spear-phishing APT attacks that exploit social issues, including COVID-19. Thus, along with the worldwide pandemic of COVID-19, related threats also persist in cyberspace. In January 2022, a hacking attack, presumed to be Kimsuky, a North Korean cyber-attack group, intending to steal research data related to COVID-19. The problem is that the activities of cyber-attack groups are continuously increasing, and it is difficult to accurately identify cyber-attack groups and attack origins only with limited analysis information. To solve this problem, it is necessary to expand the scope of data analysis by using BGP archive data. It is necessary to combine infrastructure and network information to draw correlations and to be able to classify infrastructure by attack group very accurately. Network-based infrastructure analysis is required in the fragmentary host area, such as malware or system logs. This paper studied cyber ISR and BGP and a case study of cyber ISR visualization for situational awareness, hacking trends of North Korean cyber-attack groups, and cyber-attack tracking. Through related research, we estimated the origin of the attack by analyzing hacking cases through cyber intelligence-based profiling techniques and correlation analysis using BGP archive data. Based on the analysis results, we propose an implementation of the cyber ISR visualization method based on BGP archive data. Future research will include a connection with research on a cyber command-and-control system, a study on the cyber battlefield area, cyber ISR, and a traceback visualization model for the origin of the attack. The final R&D goal is to develop an AI-based cyber-attack group automatic identification and attack-origin tracking platform by analyzing cyber-attack behavior and infrastructure lifecycle.

The importance of safety and security in urban space

Purpose of the study: This article presents the main determinants of security and safety in the public space of the city. The main objective is to examine the importance of security in the public area of the city and to discuss how it can be achieved.
 Methodology: In the article was used a literature review mainly on the urban public area as one of the most critical aspects of the city. "Desk research" is the method that was used to analyze.
 Main findings: From the considerations, the urban public space can be a place of excellent security or an area of crime and fear. Key factors affecting safety in urban public regions are visibility and design.
 Application of the study: This rticle refers to the behavior of citizens in urban spaces. As more and more hackers attack both companies and individuals, everyone needs to take the necessary precautions. The use of aids such as cameras and lighting can help to warn residents of possible hazards. Article's content may be helpful for residents to work together to create a safer environment.
 Originality/Novelty of the study: Safety and security must never be compromised in public places in the city. Aspects of public space are an essential part of life and must be secure for safety and well-being. The reasons for applying precautions in urban areas in this article suggest that security should not be neglected, as it can lead to large-scale accidents and tragedies in the absence of adequate safety measures. This article may stimulate further research and study in the field of public security and contribute to other interesting scientific contributions on the subject.

ADAPTATION MECHANISM OF THE CRYPTO INDUSTRY IN THE PROCESS OF VIRTUALIZATION OF FINANCIAL FLOWS

It has been investigated that the development dynamics of digital media environment causes the emergence of the crypto industry on the basis of blockchain technologies and asymmetric encryption of reliable transactions. The authors state that the crypto industry has been growing through the stages of adaptation, whose features are incredible dynamics and speed of transformations. It has been established that cryptocurrencies, introduced on the markets, function as a means of exchange, store of value and unit of account, are based on mathematical calculations, are a result of these calculations and have cryptographic protection. It has been noted that the basis of cryptocurrency is blockchain technology, considered as a distributed database created by electronic computing and representing a code, whose process of creation is called mining. The advantages and disadvantages hindering the development and use of cryptocurrency in the world have been outlined. Introduction. Current trends in the development of information technology and digitalization of economic processes create an innovative basis for the functioning of the financial market. The dynamic development of the digital media environment is due to the emergence of a new digital economy – Industry 4.0, which is accompanied by virtualization of financial flows through cryptocurrency circulation in the Internet environment based on new blockchain and asymmetric encryption technologies. Problem Statement. Modern computer information technology has significantly affected the global economy and the stock markets, creating opportunities for their virtualization. Today, despite the value of scientific results, many issues of organizational, legal, financial, information support, economic stimulation of the cryptocurrency market, as well as the adaptation mechanism of the crypto industry in the process of virtualization of financial flows remain unresolved. Although studies have been conducted by many authors, methodological approaches to solving the problems of the functioning of the financial mechanism and the integral assessment of the effectiveness of the development of cryptotechnologies are still insufficiently explored. In this context, there is a need for theoretical justification and the formation of a holistic view of the role of the crypto industry in the process of virtualization of financial flows as a basis for building effective financial policy, which determines the relevance of this study. Purpose. The aim of the study is to identify the main problems and outline the directions of development of cryptocurrency in the digital economy. Materials and Methods. The study of this problem was carried out using a multi-level concept, which includes a range of various scientific methods, in particular, dialectical and general scientific principles of complex research, which include: empirical (to identify approaches available in the global and domestic practice to the assessment of trends in cryptocurrency circulation and the cryptocurrency market – observation, comparison, description); theoretical-cognitive (to consider the essence and substantiate the cryptocurrency features – formalization, proposal and testing of hypotheses); general logic (to identify methodological problems of cryptocurrency integration into the financial system and differentiation of approaches to the concept of cryptocurrency – analysis, synthesis, scientific abstraction, generalization, induction, deduction, analogy). Results. It has been found that the emergence of cryptocurrencies has dramatically changed the perception of the world of finance and business. The costs of cryptocurrency extraction have been analyzed and their economic feasibility has been considered. It has been established that the main advantages of cryptocurrency are: the possibility of its use as an investment instrument, protection against inflation, lack of control and restrictions on financial transactions, anonymity, high speed transactions and low commission. However, there are some disadvantages, such as the possibility of a hacker attack, the high cost of cryptocurrency, the instability of its exchange rate, the complexity of legislation, the possibility of tax evasion and financing of criminal groups, speculation in the virtual currency market.

Quantum Network Intelligent Management System

Quantum network materializes the paradigm change caused by the depletion of classical computation. Quantum networks have been built gathering reliable quantum repeaters connected by optical fiber networks. The need to build robust and resilient networks against hacking attacks is fundamental in the design of the future quantum Internet, detecting structural security as the major issue in the current development of the technology. A network management method is proposed to achieve its real-time adaptation and to protect itself against sabotage or accidents that render part of the network or its nodes useless.

Research on the Application of Computer Data Encryption Technology in Cloud Security

Computer network is the basis of current enterprise operation and social service operation. Under the network mechanism, high-speed and high-quality operation can further accelerate the gradual development of enterprise and social structure. However, under the diversified and open transmission mode, the network has become the main disaster area where the current security accidents occur. Some hacker attacks and network viruses have brought greater threats to network users. Therefore, this paper mainly takes the practical application of computer data confidentiality technology in cloud security as the main analysis content, and discusses the characteristics of the technology, hoping to have corresponding reference value.

Blockchain analysis of the Bitcoin market. (Part 2)

The detailed analysis of the Bitcoin network and its main participants. The expert authors (Igor Makarov, London School of Economics, Antoinette Schoar, MIT Sloan School of Management) completed the study authorized by the National Bureau of Economic Research (NBER), the US-based private agency. The Bitcoin network is defined as a new database comprising many of public and proprietary sources to link bitcoin address to real object, and an extensive set of algorithms to extract information on market key players behavior. Three major pieces of analysis of the Bitcoin eco-system were conducted. First, the authors analyze the transaction volume and network structure of the main participants on the blockchain. Second, they document the concentration and regional composition of the miners which are the backbone of the verification protocol and ensure the integrity of the blockchain ledger. Finally, they analyze the ownership concentration of the largest holders of Bitcoin. The researchers found that 1/3 of all bitcoins issued were owned by 10,000 individual investors. They conclude that the high concentration makes the first cryptocurrency market vulnerable to hypothetical hacker attack. The translator notes that paraphrasing English text in Russian was rather challenging due to the newness of the financial agenda and introduction of the term entity extensively used in the Western countries though new to Russia. Nevertheless, it is necessary to introduce readers to the bitcoin technology which will be also practical and useful for the library and information community.

Improved Bonferroni mean operator to apprehend graph based data interconnections with application to the Hacker Attack system

The Bonferroni mean (BM) operator has extended the class of interrelationship handling fusion functions by modeling homogeneous pairwise interactions among data entities. This operator has been further extended to diverse directions with the intention of capturing dissimilar association that exists within data sets of different real-world systems like, social network systems, biological systems, etc. It has been observed that some of the existing forms of the BM operator pre-assumes a specific model of association among data entities during its formulation, which may not be feasible in many systems. In this study, an effort has been made to develop the framework of the BM operator by generalizing the structure of relationship patterns among data entities. Classical graphs are considered as a prominent tool for describing pairwise relations among data entities. Such consideration prompted the proposal of a systematized framework of an improved version of the BM operator, denoted by the fGBM operator, where the unconventional association among data entities are portrayed through different graphical patterns. The fGBM operator has been formulated in a way that the knowledge of interactional information depicted through graphs is embedded into its processing system with the aim of capturing precise interconnections among entities. The generalized variation of the fGBM operator has also been proposed by substituting the sub-components of the fGBM operator with other precise forms of the aggregation functions to provide an illustrative alignment, which is quite expressible and interpretable, and also facilitates modeling mandatory prerequisites of the decision systems. For an applicatory aspect, the proposed operators have been utilized over the Hacker attack system and have been presented with a numerical example. A detailed comprehensive analysis has been presented to demonstrate the efficiency of the proposed operators.

Bits and Characters Substitutions to Increase the Security Level of Transmitted Secret Message

Chaotic logistic map model is an interesting tool, it has good features, which make it capable to create chaotic keys, these keys are stable and sensitive to the selected values of chaotic parameters. In this paper research we will introduce a simple, secure and efficient method of secret message cryptography. The encryption-decryption phases will be implemented in two rounds. Two secret keys will be used; these keys will be generated by running two CLMM with a selected chaotic parameter. The first key ‘CSK’ will be used for message characters’ substitution, while the second secret key ‘BSK’ will be used for message binary version bits’ substitution. The two secret keys will be generated using a PK which contains the selected values of the CLMM. The PK will provide a huge key space capable to resist any hacking attack, also the generated two keys will be sensitive to any changes in the PK components, making any minor changes in these components in the decryption phase will be considered as a hacking attempt. The proposed method will be implemented using various messages, the obtained results will be analyzed using various types of data analysis method to prove the quality, security and the efficiency of the proposed method.

Prevention of Cyber Security with the Internet of Things Using Particle Swarm Optimization.

High security for physical items such as intelligent machinery and residential appliances is provided via the Internet of Things (IoT). The physical objects are given a distinct online address known as the Internet Protocol to communicate with the network’s external foreign entities through the Internet (IP). IoT devices are in danger of security issues due to the surge in hacker attacks during Internet data exchange. If such strong attacks are to create a reliable security system, attack detection is essential. Attacks and abnormalities such as user-to-root (U2R), denial-of-service, and data-type probing could have an impact on an IoT system. This article examines various performance-based AI models to predict attacks and problems with IoT devices with accuracy. Particle Swarm Optimization (PSO), genetic algorithms, and ant colony optimization were used to demonstrate the effectiveness of the suggested technique concerning four different parameters. The results of the proposed method employing PSO outperformed those of the existing systems by roughly 73 percent.

AdaBoost Algorithm in Trustworthy Network for Anomaly Intrusion Detection

Abstract Boosting is an ensemble learning method that combines a set of weak learners into a strong learner to minimize training errors. AdaBoost algorithm, as a typical boosting algorithm, transforms weak learners or predictors to strong predictors in order to solve problems of classification. With remarkable usability and effectiveness, AdaBoost algorithm has been widely used in many fields, such as face recognition, speech enhancement, natural language processing, and network intrusion detection. In the large-scale enterprise network environment, more and more companies have begun to build trustworthy networks to effectively defend against hacker attacks. However, since trustworthy networks use trusted flags to verify the legitimacy of network requests, it cannot effectively identify abnormal behaviors in network data packets. This paper applies Adaboost algorithm in trustworthy network for anomaly intrusion detection to improve the defense capability against network attacks. This method uses a simple decision tree as the base weak learner, and uses AdaBoost algorithm to combine multiple weak learners into a strong learner by re-weighting the samples. This paper uses the real data of trustworthy network for experimental verification. The experimental results show that the average precision of network anomaly detection method based on AdaBoost algorithm is more than 0.999, indicating that it has a significant detection effect on abnormal network attacks and normal network access. Therefore, the proposed method can effectively improve the security of trustworthy networks.

U.S. Cybersecurity Strategy as One of the Main Directions of National Security Policy of the Country

The paper discusses the history of cyber warfare, its essence, basics and origins, the Internet, and technological advances. As well as threats from cyberwar, cyber-attacks, cyber defenses of different countries, viruses, malware and hacker attacks, information warfare, propaganda, disinformation, fake news, security concepts, and challenges. The main topic of the research is cyberwar, as a process following the real conventional war, as well as an alternative version of the war. There are analyzed global security, the role of the United States, and NATO. Based on the research, the paper separates and explains different terms, focusing on the political term “civil cyberwar” presented by discourse analysis based on new circumstances.
 Keywords: Cybersecurity, Cyberwarfare, NATO, Security, Strategy, USA

Intrusion Detection Network Attacks Based on Whale Optimization Algorithm

Network intrusion detection is a significant issue faced by the Information technology industry. Hacker's attacks set of techniques cause confusion network and computer systems, therefore, the need for a network penetration detection process became urgent. This paper proposed an optimization method to detect the potential of attacks on network packets effectively by defining unfamiliar patterns in a massive volume of the network traffic. Initially, the packet characteristics are defined as the normal dispersal of attributes from the data packet. This algorithm is used a bio-inspired meta-heuristic technique named whale optimization algorithm (WOA) to detect systems against the attackers. The detection method whale optimization (DMWO) is applied to calculate the process of standard deviation distribution to judge the anomaly of the data packet. The simulation algorithm performed by OPNET and Matlab-2015a to main factors of DMGO to classify the input to check whether any attack is present or not. Finally, the performance of this algorithm is a better flexibility result compared with other algorithms DMCM and IHMM.