Vulnerability Of Internet Research Articles

A Hybrid Technique Based on RF-PCA and ANN for Detecting DDoS Attacks IoT

The increasing reliance on smart products has increased vulnerabilities in Internet of Things (IoT) traffic, which poses significant security risks. These vulnerabilities allowed some hackers to exploit them, which led to system performance degradation. Attacks can lead to these vulnerabilities to various undesirable outcomes, including data leakage, economic losses, data breaches, operational disruptions, and damage to the company's reputation. To address these security challenges, network intrusion detection alarms play a crucial role in assessing system security. In recent years, the proliferation of intelligent and soft computing-based algorithmic and structural frameworks has been evident. However, previous studies have faced challenges related to comprehensiveness, zero-day attacks, realism, and data interpretation. In light of these concerns, this study proposes to design a neural network for proactive detection of attacks. Moreover, we propose to use a hybrid system called RF-PCA to facilitate dimensionality reduction and help classifiers. Notably, this is the first application of a BOT-IoT data set in such an approach. The study also includes a discussion of relevant IoT terms in the context of our work. The proposed method uses high-level data features to represent and draw conclusive conclusions. To evaluate its effectiveness, an experiment was conducted using Python as the programming environment, achieving a remarkable detection rate of 99.73%.

Deep learning enabled intrusion detection system for Industrial IOT environment

The prevalence of security vulnerabilities in Internet of Things (IoT) applications poses a serious threat to enterprise systems, necessitating sophisticated and reliable defense solutions to counter emerging and evolving threats. For the Industrial Internet of Things (IIoT), stakeholders require trustworthy and sustainable systems that can prevent the loss of human life during critical operations. The impact of multi-variant persistent and sophisticated bot attacks on connected IIoTs is potentially catastrophic, and their detection presents a highly complex and critical challenge. Therefore, there is a pressing need for efficient and timely detection of IIoT botnet attacks. This research paper proposes a robust deep learning model named AttackNet for the detection and classification of different botnet attacks in IIoT based on adaptive based CNN-GRU model. The model is extensively evaluated using the latest dataset and standard performance evaluation metrics, demonstrating its capacity to protect IIoT networks against sophisticated cyber-attacks with a testing accuracy of 99.75%, a loss of 0.0063, precision and recall score of 99.75% and 99.74% respectively. Our proposed model demonstrates superior accuracy, particularly within the N_BaIoT dataset. It achieves an outstanding accuracy of 99.75% across ten classes, surpassing state-of-the-art techniques by a substantial margin ranging from 3.2% to 16.07%. Moreover, the proposed model outperforms state-of-the-art anomaly detection systems in IIoT based on a real-time IoT device dataset in terms of detecting and classifying botnet attacks accurately.

BLOCKBOX: Blockchain based black box designing and modeling

SummaryWith the development of technology, data has become more accessible. The storage of critical and valuable information is getting harder and harder with the increase of cyber attacks and vulnerabilities of network and internet. The centralized storage of data causes security and privacy problems. As a remedy to these problems, blockchain has occurred. The reliability, transparency, integrity and confidentiality of the data have been increased with the blockchain technology. Blockchain maintains the immutability of the data with cryptographic hash algorithms. The data is kept in distributed structures with the consensus algorithms so that it is not lost. Projects and studies using blockchain technology have shown that data stored in centralized structures is not as reliable as data that is distributed and secured by cryptographic algorithms, smart contracts, and consensus. The data of flights, which is a critical data, has a great place in world transportation. The parameters inside the black boxes guide us on why the aircrafts have crashed: whether the responsibility belongs to the manufacturer, to the pilot, or to the aircraft technicians. In this way, the real reasons of the accident may be determined and measures can be taken for the accidents that may occur afterwards. In addition, the safe delivery of all black box data to the interested parties and its storage in a way that is immutable will not only benefit to the manufacturer's self‐development by processing the data, but also help flight companies to find optimum flight data. Both the flight companies and the manufacturer will be able to read the black box data, thus the suspicion of data manipulation will be eliminated and the data will become more transparent. In this study, a system is proposed in which an aircraft's black box data can be saved safely and securely with the help of blockchain technology.

ML-DDoS: A Blockchain-Based Multilevel DDoS Mitigation Mechanism for IoT Environments

Distributed denial of service (DDoS) attacks as well as botnet-based attacks are among the most important security vulnerabilities in Internet of Things (IoT) environments. Most of the existing research approaches use centralized defense mechanisms to prevent DDoS attacks in IoT environments. However, it is important to provide a reliable and scalable solution to prevent DDoS attacks. Combining technologies such as distributed blockchain-based mechanisms and smart contracts facilitates the construction of a trusted distributed framework that can defend against DDoS attacks in IoT. In this article, we have proposed a multilevel DDoS mitigation approach (ML-DDoS) to protect IoT devices and other computing resources or machines using the blockchain-based framework. The core concept of the proposed system is to use a device-based verification mechanism using blockchain and exclude malicious devices from IoT environments. The proposed framework was developed using Hyperledger Caliper (a blockchain benchmark tool) and its performance was evaluated using three benchmark applications. Compared to the state of the art, the results show that the proposed framework achieves up to 35% improvement in throughput, up to 40% improvement in latency, and up to 25% better utilization of CPU.

The influence of cyber security on financial fraud in the Nigerian banking industry

The study looked at Financial Institution in Nigeria for how cyber security affects financial fraud in Nigerian banks. The study focused on the following topics: the types of electronic frauds committed in the banking industry, the reasons why cyber fraud occurs in banks, the difficulties in preventing cyber fraud in banks, the impact of cyber fraud on Nigerian banks, and potential solutions for preventing cyber fraud in banks. The two hypotheses that the study is based on. Six Nigeria Banks made up the study's population, which used a survey research design. 557 bank employees were sampled using multistage sampling techniques. The bank staff's responses were gathered using a structured questionnaire, which was then, analyzed using the SPSS statistical package for social science version 27. Descriptive analysis was used to analyze the objectives, and multiple regression and Kendal Tau B were used to test the hypotheses. The study's findings indicated that computer viruses, hacking/cracking, phishing, pharming, and accounting fraud by bank employees were the main types of cyber fraud in the banking system. The causes of cybercrime in banks included a lack of line manager or senior manager oversight on deviations from existing electronic processes or controls, current business pressure to meet set targets, collusion between employees and outside parties, insufficient data encryption, the use of third-party services, and parodying. Similarly, the study's findings showed that the challenges impeding the effort to stop cyber fraud in Nigeria's banking system included a lack of standards and national central control, a lack of infrastructure, the internet's vulnerability, a lack of national functional databases, and inadequate awareness by bank customers. A security audit, antivirus and antimalware software, the use of multi-factor authentication, the use of biometrics, and automatic logout were found to be solutions to cybercrime in banks. The findings also showed that financial loss, decreased productivity, and vulnerability of banks' Information and Communication Technology (ICT) systems and networks were effects of cybercrime on banks in Nigeria. According to the study's findings, banks' cyberspace security cannot be overextended in Nigeria, so necessary precautions should be taken to reduce cybercrime in Nigeria Banks. The study recommended that Nigeria Banks implement stringent measures to monitor staff activities, particularly in the confidentiality of customer information, cyber security audit be performed by financial institution regularly, sensitization of bank customers, and Multi-factor authentication, biometrics and automatic log out, and strong firewall should be adopted by Nigeria Financial Institutions.

An extensive survey of smart agriculture technologies: Current security posture

Smart agriculture, enabled by advanced technologies such as internet of things, artificial intelligence and data analytics, offers immense potential for optimizing farming practices and increasing agricultural productivity. However, as the adoption of smart agriculture systems continues to grow, it brings forth various security issues that need to be addressed to protect farming operations, data integrity, and privacy. This paper provides an overview of the security issues in smart agriculture, including vulnerabilities in internet of things devices, lack of standardized security protocols, limited security awareness among farmers, and challenges in securing data and communication networks. In addition, it highlights the need for robust security measures to mitigate risks such as unauthorized access, data breaches, and disruption of operations. Moreover, emphasis should be laid on the importance of collaborative efforts between technology providers, agricultural stakeholders, researchers, and policymakers to develop effective security solutions and standards that ensure the trustworthiness and resilience of smart agriculture systems.

Machine Learning with Dimensionality Reduction for DDoS Attack Detection

With the advancement of internet, there is also a rise in cybercrimes and digital attacks. DDoS (Distributed Denial of Service) attack is the most dominant weapon to breach the vulnerabilities of internet and pose a significant threat in the digital environment. These cyber-attacks are generated deliberately and consciously by the hacker to overwhelm the target with heavy traffic that genuine users are unable to use the target resources. As a result, targeted services are inaccessible by the legitimate user. To prevent these attacks, researchers are making use of advanced Machine Learning classifiers which can accurately detect the DDoS attacks. However, the challenge in using these techniques is the limitations on capacity for the volume of data and the required processing time. In this research work, we propose the framework of reducing the dimensions of the data by selecting the most important features which contribute to the predictive accuracy. We show that the ‘lite’ model trained on reduced dataset not only saves the computational power, but also improves the predictive performance. We show that dimensionality reduction can improve both effectiveness (recall) and efficiency (precision) of the model as compared to the model trained on ‘full’ dataset.

Firewall Technology's Importance in the Fight against the Internet Security

The ubiquity of online vulnerability and fraud throughout the world is posing a major threat to the internet’s and information technology’s benefits. There have been considerable initiatives and investigations to tackle this hydra-headed challenge of internet vulnerability, with one of them being the discovery of firewall. A firewall is a network security device that monitors and restricts internet traffic based on predefined security rules. It creates an obstacle between a trusted and secure internal network and an untrusted and insecure external network. The firewall security technology was thoroughly examined in this study by the use of secondary data, and it was discovered that it is still extremely important in countering system network vulnerability through the use of Prescriptive Analysis. This study concluded that firewall technology is essential for any sort of computer usage that is connected to the internet. It has been discovered to be an effective counter measure in countering the various security threats that affect internet users for a variety of reasons, including business. This is due to the fact that firewalls have evolved through time to the generations indicated in this article, with each generation being properly prepared to tackle the security risks of that generation. That is to say, while hackers advance in their wicked research to deliver more damaging security threats to internet users, firewall research has far surpassed them in order to deal with such threats as they arise. Hence, the study proposed that computer users install a firewall, whether it is independent, a personal network, or an office network. Keywords: Confidentiality: Firewall: Internet: Network

Letmegrab Seller- Simple And Secure Way For Online Transaction

An online payment system allows a customer to make a payment to an online merchant or a service provider. Payment gateways, a channel between customers and payment processors, use various security tools to secure a customer’s payment information, usually debit or credit card information, during an online payment. However, the security provided by a payment gateway cannot completely protect a customer’s payment information when a merchant also has the ability to obtain the payment information in some form. Furthermore, not all merchants provide a secure payment environment to their customers and, despite having a standard payment policy, adhere to it. Consequently, this exposes a customer’s payment information to risks of being compromised or misused by merchants or stolen by hackers and spammers. In this thesis we propose a new approach to payment systems in which a customer’s payment information cannot be obtained by a merchant. A customer sends his payment information directly to a payment gateway and a payment gateway, upon verifying the transaction, sends a payment to the appropriate merchant. We use the Pedersen commitment scheme along with dual signatures to securely transfer funds to a merchant and protect a customer’s payment information from any Internet vulnerabilities.

Factorials Experiments, Covering Arrays, and Combinatorial Testing

In the twenty-first century, our life will increasingly depend on software-based products and complex interconnected systems. Thus, the quality and security of software-based systems is a world-wide concern. Combinatorial testing is a versatile methodology for finding errors (bugs) and vulnerabilities in software-based systems. This paper offers a review of combinatorial testing. Combinatorial testing (CT) methods evolved from investigations which looked like factorial experiments (FE) with pass/fail outcomes. We will discuss the similarities and differences between FE and CT. Use of CT for detecting errors (bugs) in software-based systems has gained significant interest from the international software testing community. Many successful results have been reported from the use of CT to detect software errors in aerospace, automotive, defense, cybersecurity, electronic medical systems, and financial service industries. Now, combinatorial testing methods are being increasingly used to investigate vulnerabilities in software-based systems. Combinatorial testing could be useful in detecting errors and security vulnerabilities in Internet of Things, Autonomous Systems, and Artificially Intelligent Software.

A South African Legal Perspective on the Regulation of Net Neutrality and Its Implications for Cyber-Security and Cyber-Warfare

With the approval of Articles 11 and 13 in Europe, net neutrality has become a contentious issue globally. These articles refer to European Union (EU) copyright law, which could possibly destroy the freedom of the internet that once existed. Throughout Europe it has become known as the “meme ban,” referring to the censorship elements. While there is much opposition to these articles, its supporters consider it necessary for the preservation for creative works online. Opposition to the legislation, which includes certain websites and internet presences, remains of the opinion that these two pieces of legislation will mean an end to “meme culture and user-generated content.” Along with the limitation to the freedom of the internet, cyber-security and cyber-warfare risks and vulnerabilities are imminent. This paper seeks to provide an in-depth discussion on the implications of neutrality on cyber-security and cyber-warfare.

Enterprise IoT at risk

New research by Palo Alto Networks paints a stark picture of the vulnerability of Internet of Things (IoT) devices and their potential impact on enterprise networks.

IoVT: Internet of Vulnerable Things? Threat Architecture, Attack Surfaces, and Vulnerabilities in Internet of Things and Its Applications towards Smart Grids

In recent years, people have witnessed numerous Internet of Things (IoT)-based attacks with the exponential increase in the number of IoT devices. Alongside this, the means to secure IoT-based applications are maturing slower than our budding dependence on them. Moreover, the vulnerabilities in an IoT system are exploited in chains to penetrate deep into the network and yield more adverse aftereffects. To mitigate these issues, this paper gives unique insights for handling the growing vulnerabilities in common IoT devices and proposes a threat architecture for IoT, addressing threats in the context of a three-layer IoT reference architecture. Furthermore, the vulnerabilities exploited at the several IoT attack surfaces and the challenges they exert are explored. Thereafter, the challenges in quantifying the IoT vulnerabilities with the existing framework are also analyzed. The study also covers a case study on the Intelligent Transportation System, covering road transport and traffic control specifically in terms of threats and vulnerabilities. Another case study on secure energy management in the Smart Grid is also presented. This case study covers the applications of Internet of Vulnerable Things (IoVT) in Smart energy Grid solutions, as there will be tremendous use of IoT in future Smart Grids to save energy and improve overall distribution. The analysis shows that the integration of the proposed architecture in existing applications alarms the developers about the embedded threats in the system.

Spoofed traffic inference at IXPs: Challenges, methods and analysis

Ascertaining that a network will forward spoofed traffic usually requires an active probing vantage point in that network, effectively preventing a comprehensive view of this global Internet vulnerability. Recently, researchers have proposed using Internet Exchange Points (IXPs) as observatories to detect spoofed packets, by leveraging Autonomous System (AS) topology knowledge extracted from Border Gateway Protocol (BGP) data to infer which source addresses should legitimately appear across parts of the IXP switch fabric. We demonstrate that the existing literature does not capture several fundamental challenges to this approach, including noise in BGP data sources, heuristic AS relationship inference, and idiosyncrasies in IXP interconnectivity fabrics. We propose Spoofer-IX, a novel method to navigate these challenges, leveraging customer cone semantics of AS relationships to guide precise classification of inter-domain traffic as in-cone, out-of-cone (spoofed), unverifiable, bogon, and unassigned. We apply our method in three distinct periods to two IXPs, with 200+ and 1,600+ members each, and find an upper bound volume of out-of-cone traffic to be more than an order of magnitude less than the previous method inferred on the same data, revealing the practical importance of customer cone semantics in such analysis. We observed no significant improvement in deployment of Source Address Validation (SAV) in networks using the mid-size IXP between 2017 and 2019. In hopes that our methods and tools generalize to use by other IXPs who want to avoid use of their infrastructure for launching spoofed-source DoS attacks, we explore the feasibility of scaling the system to larger and more diverse IXP infrastructures. To promote this goal, and broad replicability of our results, we make the source code of Spoofer-IX publicly available.

Copyright in the Era of Internet Adversity: Pre-Empting a New Dawn for Nigeria

Copyright laws, policies and enforcement mechanisms would be considered weak if inf-ringers reign free. The vulnerability of internet copyrighted materials is dire in the internet age mainly because of the ease of engaging in illegal copying, sharing, downloading, and streaming of copyright materials. Considering this concern, it is reassuring to note that the Nigerian Copyright Commission is awake to the prospects and challenges within this internet access sub-sector as it recently forwarded a Copyright bill to the legislative chambers. The Bill aims to modernize Nigeria's copyright law by paying more attention to the internet, an area of strategic importance to the Nigerian economy. This paper analyses the Bill and also seeks to explore the potential paths that may be taken by Nigeria in the application of its modernized copyright law.

Copyright in the era of internet adversity: pre-empting a new dawn for Nigeria

ABSTRACTCopyright laws, policies and enforcement mechanisms would be considered weak if infringers reign free. The vulnerability of internet copyrighted materials is dire in the internet age mainly because of the ease of engaging in illegal copying, sharing, downloading, and streaming of copyright materials. Considering this concern, it is reassuring to note that the Nigerian Copyright Commission is awake to the prospects and challenges within this internet access subsector as it recently forwarded a Copyright bill to the legislative chambers. The Bill aims to modernise Nigeria's copyright law by paying more attention to the internet, an area of strategic importance to the Nigerian economy. This paper analyses the Bill and also seeks to explore the potential paths that may be taken by Nigeria in the application of its modernised copyright law.

A Review on Emerging Threats and Vulnerabilities in Internet of Things and its Applications

A Review on Emerging Threats and Vulnerabilities in Internet of Things and its Applications

EMUD: Enhanced Manufacturer Usage Description for IoT Botnets Prevention on Home WiFi Routers

Distributed Denial of Service (DDoS) attacks have caused significant disruptions in the operations of Internet-based services. These DDoS attacks use large scale botnets, which often exploit millions of compromised Internet of Things (IoT) devices worldwide. IoT devices are traditionally less secure and are easy to be exploited. The extent of these exploitations has increased after the publication of the Mirai botnet source code on GitHub that provided a foundation for the attackers to develop and launch Mirai botnet variants. The Internet Engineering Task Force (IETF) proposed RFC 8520 Manufacturer Usage Description (MUD) so that an IoT device can convey to the network the level of network access it requires to accomplish its standard functionality. Though MUD is a promising effort, there is a need to evaluate its effectiveness, identify its limitations, and enhance its architecture to overcome its weakness and improve its efficiency. The latest Mirai variant malware is exploiting vulnerabilities of Internet of Things devices. As MUD does not consider identifying and patching vulnerabilities present in the device before the issuance of the MUD profile, a device can be compromised even in the presence of the Manufacturer Usage Description profile by exploiting either the configuration vulnerabilities or firmware vulnerabilities present in the device. This paper presents an evaluation study of the Manufacturer Usage Description (MUD), identifies its weaknesses, and proposed enhancements in its architecture. This research proposed a mechanism for identifying and eliminating the configuration vulnerabilities before creating the MUD profile for a device to minimize the attack surface. This research adopts the OWASP firmware testing methodology for discovering vulnerabilities in the firmware of WiFi home routers. The device is allowed to request the MUD profile only if the identified firmware vulnerabilities are low. The identified firmware vulnerabilities are patched in case the score of the identified firmware vulnerabilities is moderate or high. The device is allowed to request the MUD profile after the vulnerabilities are patched. The firmware vulnerabilities are shared with other peers using blockchain smart contracts. There is a possibility that the MUD URL might be pointing to a corrupted or malicious MUD profile hosted at the attacker file server due to the absence of an authentication mechanism in the MUD process. This research also proposed an authentication mechanism for device MUD profile, MUD file generator, and MUD file server. Implementation results show that proposed enhancements improve the security services provided by the Manufacturer Usage Description (MUD).

Apply Blockchain to Overcome Wi-Fi Vulnerabilities

This paper, wireless internet such as Wi-Fi has a vulnerability to security. Blockchain also means a 'Ledger' in which transaction information that occurs on a public or private network is encrypted and shared among the network participants. Blockchain maintains information integrity by making it impossible for a particular node to tamper with information arbitrarily, a feature that would result in changes in the overall blockchain hash value if any one transaction information that constitutes a block was changed. The complete sharing of information through a peer-to-peer network will also cripple hacking attempts from outside, targeting specialized nodes, and prepare for the "single point of failure" risk of the entire system being shut down. Due to the value of these Blockchain, various types of Blockchain are emerging, and related technology development efforts are also actively underway. Various business models such as public block chains such as Bitcoin, as well as private block chains that allow only certain authorized nodes to participate, or consortium block chains operated by a select few licensed groups, are being utilized. In terms of technological evolution, Blockchain also shows the potential to grow beyond cryptocurrency into an online platform that allows all kinds of transactions with the advent of 'Smart Contract'. By using Blockchain technology, the company makes suggestions to overcome the vulnerability of wireless Internet.

Assessing risks and threats with layered approach to Internet of Things security

Internet of Things is the next-generation Internet network created by intelligent objects with software and sensors, employed in a wide range of fields such as automotive, construction, health, textile, education and transportation. With the advent of Industry 4.0, Internet of Things has been started to be used and it has led to the emergence of innovative business models. The processing and production capabilities of Internet of Things objects in hidden and critical data provide great advantages for the next generation of Internet. However, the integrated features of Internet of Things objects cause vulnerabilities in terms of security, making them the target of cyber threats. In this study, a security model which offers an integrated risk-based Internet of Things security approach for the Internet of Things vulnerabilities while providing detailed information about Internet of Things and the types of attacks targeting Internet of Things is proposed. In addition, in this study, the vulnerabilities of Internet of Things were explained by classifying attack types threatening the physical layer, network layer, data processing layer and application layer. Moreover, the risk-based security model has been proposed by examining the vulnerabilities and threats of smart objects that generate the Internet of Things. The proposed Internet of Things model is a holistic security model that separately evaluates the Internet of Things layers against vulnerabilities and threats based on the risk-level approach.