Today's Threats Research Articles

A Supervised Ml Algorithm for Detecting and Predicting Fraud Credit Card Transactions

A Credit card fraud presents an escalating threat in today's digital economy, leading to significant financial losses for consumers, businesses, and financial institutions. Traditional detection methods are increasingly inadequate due to the rise in online transactions and the evolving complexity of fraudulent activities. This research aims to create a reliable supervised machine learning model designed to detect and predict fraudulent credit card transactions in real-time. Our approach leverages advanced algorithms and extensive datasets to enhance transaction security, thereby mitigating financial risks. Current systems, like FICO's Fraud Detection System (FDS), utilize a range of supervised learning techniques, including Decision Trees, Random Forests, and Neural Networks. However, they face limitations, including data quality issues, high false positive rates, and the need for continuous retraining to adapt to evolving fraud patterns. To address these challenges, we propose an innovative anomaly detection method based on the Isolation Forest algorithm. Unlike traditional methods that rely on distance and density measures, Isolation Forests isolate anomalies by randomly selecting features and split values, making it more efficient in identifying fraudulent transactions, especially in imbalanced datasets. The proposed system boasts low linear time complexity and minimal memory requirements, enabling the construction of high-performing models even with large datasets. The research demonstrates that the Isolation Forest approach significantly outperforms traditional models in detecting credit card fraud, offering a promising solution for enhancing security in the financial ecosystem.

A Study on the Key Applications of Malware

Malware, a portmanteau of "malicious software," represents a significant threat in today's interconnected digital landscape. This abstract explores the multifaceted impacts of malware applications on individuals, organizations, and society at large. Types of malware include computer viruses, worms, Trojan horses, ransomware and spyware. These malicious programs steal, encrypt and delete sensitive data; alter or hijack core computing functions; and monitor end users' computer activity. malware jeopardizes individual privacy and security by surreptitiously infiltrating personal devices, often leading to identity theft, financial loss, and unauthorized access to sensitive information. Beyond personal repercussions, malware poses substantial risks to organizational integrity. It can compromise corporate networks, disrupt operations, and inflict substantial financial losses through data breaches, ransomware attacks, and intellectual property theft

Threat Modeling for Cyber Warfare Against Less Cyber-Dependent Adversaries

Cyber warfare poses a substantial threat in today's interconnected world, where digital attacks can transcend physical boundaries and affect targets globally. Technologically, less advanced adversaries, such as smaller nations or organizations with limited resources, face unique challenges in defending against sophisticated cyber attacks from more advanced entities. This paper explores the threat landscape for these adversaries and proposes a tailored threat modeling framework to address their specific vulnerabilities and needs. By examining the evolution of cyber warfare, including historical incidents and the increasing sophistication of cyber attacks, the study highlights the limitations of existing threat modeling approaches like the Cyber Kill Chain, MITRE ATT&CK Framework, and SWOT analysis when applied to less advanced adversaries. A comprehensive literature review underscores the gaps in current research, particularly the necessity for frameworks tailored to asymmetric technological capabilities. Employing a mixed methods approach, the research combines qualitative and quantitative data from primary sources, such as interviews with cybersecurity experts, and secondary sources, including existing literature and case studies. The proposed framework focuses on asset identification and classification, vulnerability assessment, threat analysis, and risk assessment. Proactive measures, such as basic cyber hygiene practices, advanced threat detection systems, and collaboration with technologically advanced allies, are recommended alongside reactive measures like incident response planning and disaster recovery. The importance of international cooperation and information sharing is also emphasized. Case studies of cyber incidents involving less advanced adversaries, such as the attacks on Estonia, Georgia, and Ukraine, validate the framework and demonstrate its practical application. The findings indicate that the tailored threat modeling framework effectively addresses the unique challenges faced by less advanced adversaries, enhancing their ability to mitigate risks and improve their cybersecurity posture. This study provides valuable insights and offers a practical framework to bolster defenses against cyber warfare, with future research needed to explore emerging threats and technologies further.

A novel CNN‐based approach for detection and classification of DDoS attacks

SummaryAmong the recent network security issues, Distributed Denial of Service (DDoS) attack is one of the most dangerous threats in today's cyberspace that can disrupt essential services. These attacks compromise network security by flooding the target with malicious traffic. Several researchers have designed effective DDoS detection mechanisms using machine learning (ML) and deep learning (DL)‐based techniques. However, existing detection approaches paid less attention to issues such as class imbalance, multi‐classification, or computational cost of the models, especially time. In this study, we propose a novel framework for detecting and classifying DDoS attacks with high accuracy and low computational cost. To address the class imbalance, we employ random sampling, while feature selection techniques such as low information gain, quasi‐constant elimination, and principal component analysis are utilized for optimal feature selection and reduction. Our proposed CNN‐based model achieves outstanding performance, boasting an accuracy of 99.99% for binary classification and 98.44% for multi‐classification. The proposed model is compared to existing works and baseline line models and found to be effective in binary and multi‐classification.

A Robust Approach to Malware Detection through Ensemble learning

Abstract: With the proliferation of digital threats in today's interconnected world, the need for efficient and effective automated malware detection systems has become paramount. Traditional signature-based methods often fail to keep pace with the evolving landscape of malware, necessitating the development of more sophisticated techniques. In this paper, we propose a robust approach to automated malware detection leveraging ensemble learning techniques. Ensemble learning, which combines the predictions of multiple base models, has demonstrated remarkable success in various domains, including cybersecurity. Our approach harnesses the diversity of ensemble methods to enhance the detection accuracy and robustness against adversarial attacks. By integrating diverse base classifiers such as decision trees, random forests, support vector machines, and neural networks, our ensemble model learns to effectively discriminate between benign and malicious software samples. Furthermore, we introduce novel feature engineering strategies tailored to capture the intricate characteristics of malware. These features encompass a wide range of attributes, including static file properties, dynamic behavioural patterns, and frequency-based representations. Leveraging these rich feature sets, our ensemble model can generalize well across different types of malware families and variants.

Malware Detection in Files and URL’s Using Machine Learning

The rampant extrusion of personal or sensitive data by malicious software has inflicted significant damage worldwide, posing a critical threat to individuals and various sectors of society. Cyber attackers engage in relentless warfare against computer systems, deploying malware to breach crucial data. Consequently, safeguarding this data has become a paramount concern for researchers. This paper aims to address this challenge by proposing the development of an application leveraging machine learning algorithms to discern between malicious and legitimate files effectively. In the contemporary era, marked by pervasive technological advancements, the widespread adoption of the internet has facilitated unprecedented connectivity but also heightened the risk of cyber threats perpetrated by malicious actors. These threats, often executed through the deployment of malware, have inflicted substantial financial losses, amounting to billions of dollars globally. Consequently, safeguarding against malicious attacks has become a paramount endeavor in the ongoing battle against cybercrime. To address this imperative, this paper endeavors to leverage machine learning algorithms to prognosticate the likelihood of malware infections in computer systems, utilizing a supervised learning approach alongside gradient boosting algorithms. Drawing upon a publicly available dataset, meticulously partitioned into training and testing sets, the study embarks on four distinct experiments employing the aforementioned algorithms. Notably, the findings underscore Light GBM as the most efficacious model, boasting an impressive AUC Score of 0.73926, thus signifying a pivotal advancement in fortifying cyber defenses through predictive analytics. Malware poses a significant threat in today's digital landscape, with various forms proliferating over the last decade, leading to substantial financial losses for organizations. Defined as malicious software, malware wreaks havoc on users' computers through various means. To address this challenge, a solution leveraging machine learning techniques has been proposed to detect malware in downloaded files. By analyzing features such as MD5 hash, Optional Header size, and Load Configuration Size, different machine learning algorithms are trained to distinguish between malicious and benign files effectively. Through rigorous training and comparison using Validation and Test datasets, the SVM Classifier emerged as the most accurate, achieving up to 99.99% accuracy in detecting malware types like Adware, Trojan, Backdoors, Unknown, Multidrop, Rbot, Spam, and Ransomware. This approach not only identifies malware but also mitigates potential risks to users' systems, safeguarding against detrimental impacts from infections.

Safeguarding Networks: The Role of Cryptography

Due to complex network threats, network security faces unprecedented challenges in a rapidly changing environment. These details highlight the importance of cryptography in protecting networks from today's threats. The development of technology has led to the increase in connected devices, the expansion of parking areas and the need for security measures. Honest and confidential information is protected by encryption technology using complex methods and algorithms. The brief reviews state-of-the-art cryptographic techniques and highlights the importance of quantum-resistant mechanisms against the threat of quantum computing. It explores how cryptography can be used together with technologies such as blockchain, artificial intelligence and the Internet of Things, and emphasizes its importance in ensuring the security of these areas. It envisions the development and implementation of post-quantum cryptography, covers concepts such as homomorphic encryption and zero-knowledge proofs, and addresses issues of cryptographic efficiency and creative control. It aims to protect networks from new threats and ensure secure data exchange by meeting the need for strong cryptographic protection in the evolving business environment.

Methods of calculation and engineering protection of critical infrastructure objects and other strategic facilities against long-range projectiles

Relevance. One of the key areas of russia's military operations against Ukraine is the destruction of critical infrastructure objects (CIO) of strategic importance. The main types of enemy means for air strikes on CIO are air-launched, ground-launched and water-launched missiles, as well as barrage munitions. The vast majority of the CIO were built in Ukraine above ground, without any engineering structural protection systems to counter air threats, explosions or other impacts related to military operations. The importance of developing the most effective methods of engineering structural protection of the CIO from various types of projectiles as soon as possible was demonstrated by the experience of Ukraine's war with russia, in particular, the analysis of the significant impact of damage to the CIO in the energy sector. At present, Ukraine has a certain lack of regulatory data for designing reliable protective structures for CIO. The aim of this work is to develop a regulatory base for making calculations for the possible impact of various types of forceful effects from air strikes, terrorist attacks, etc. when designing the CIO and other strategic facilities. Currently, the issue of organising the defence of critical infrastructure and other strategic objects is being systematically addressed on the basis of the "Country-Fortress" principle, which provides for the organisation of echeloned air defence combined with comprehensive civil and engineering defence measures. In addition, it is necessary to provide for the reliable protection of existing facilities, taking into account the hazards and threats of today. The process of reducing the risks of damage to the CIO involves identifying threats, their comprehensive assessment, developing measures to reduce threats and their prompt implementation, followed by an assessment of the measures effectiveness. Results. The presented methods of risk assessment of critical infrastructure damage, methods of their engineering and analytical calculations and methods of engineering structural protection against ammunition of various types allow developing an effective integrated system of protection of strategically important objects. The article deals with both the protection of existing facilities and the design of new ones, taking into account the requirements for engineering protection and civil defence.

Evaluation of Cloud-Based Cyber Security System

Cloud-based cyber security systems leverage the power of cloud computing to protect digital assets from cyber threats. By utilizing remote servers and advanced algorithms, these systems provide real-time monitoring, threat detection, and incident response. They offer scalable solutions, enabling businesses to adapt to evolving threats and handle increasing data volumes. Cloud-based security systems provide benefits such as reduced infrastructure costs, continuous updates and patches, centralized management, and global threat intelligence. They protect against various attacks, including malware, phishing, DDoS, and unauthorized access. With their flexibility, reliability, and ease of deployment, cloud-based cyber security systems are becoming essential for organizations seeking robust protection in today's interconnected digital landscape. The research significance of cloud-based cyber security systems lies in their ability to address the growing complexity and scale of cyber threats in today's digital landscape. By leveraging cloud computing, these systems offer several key advantages for researchers and organizations: Scalability: Cloud-based systems can scale resources on-demand, allowing researchers to handle large volumes of data and analyze complex threat patterns effectively. Cost-efficiency: The cloud eliminates the need for extensive on-premises infrastructure, reducing costs associated with hardware, maintenance, and upgrades. Researchers can allocate resources based on their needs, optimizing cost-effectiveness. Real-time monitoring and threat detection: Cloud-based systems provide real-time monitoring of network traffic, enabling quick identification of suspicious activities and potential threats. Researchers can leverage advanced analytics and machine learning algorithms to enhance threat detection capabilities. Collaboration and knowledge sharing: Cloud platforms facilitate collaboration among researchers and organizations by enabling the sharing of threat intelligence, best practices, and research findings. Compliance and regulatory requirements: Cloud platforms often offer built-in compliance features and tools to meet regulatory requirements, assisting researchers in adhering to data protection and privacy standards. Overall, the research significance of cloud-based cyber security systems lies in their ability to provide scalable, cost-effective, and advanced security capabilities, empowering researchers to mitigate evolving cyber threats and protect sensitive data and systems effectively. We will be using Weighted Product Methodology (WPM) which is a decision-making technique that assigns weights to various criteria and ranks alternatives based on their weighted scores. It involves multiplying the ratings of each criterion by their corresponding weights and summing them up to determine the overall score. This method helps prioritize options and make informed decisions in complex situations. Taken of Operational, Technological, Organizational Recorded Electronic Delivery, Recorded Electronic Deliver, Blockchain technology, Database security, Software updates, Antivirus and antimalware The Organizational cyber security measures comes in last place, while Technological cyber security measures is ranked top and Operational measures comes in between the above two in second place. In conclusion, a cloud-based cyber security system revolutionizes the way organizations safeguard their digital assets. By utilizing remote servers, advanced algorithms, and real-time monitoring, it offers scalable and robust protection against evolving threats. With features like threat detection, data encryption, and centralized management, it ensures enhanced security, agility, and efficiency. Embracing a cloud-based approach empowers organizations to stay ahead in the ever-changing landscape of cyber security, effectively safeguarding their critical data and infrastructure.

Implementation the Last Indonesian Minister Regulation of 2022 uses SEM-PLS and Blockchain-BIM to Green Cost Efficiency

Today's threats and crises are about climate change and its consequences. Therefore, the target towards Net Zero Emission (NZE) in 2060 must be an obligation in all countries. A Green Building (GB) is a building that meets Building Technical Standards and has significant measurable performance in saving energy, water, and other resources. Applying GB principles by function and classification at each implementation stage will reduce greenhouse gas emissions. This study aims to analyze the cost of improvements based on GB assessment, where these improvements are the factors affecting the implementation of the Ministry of Public Works and Public Housing (PUPR) regulations from the Indonesian government. The Technical Guidelines for GB Performance, through the Minister of PUPR No.1 of 2022 Republic of Indonesia, is the latest regulation used as the GB concept. Implement Blockchain-BIM and GB using Structural Equation Model - Partial Least Squares (SEM-PLS) for the analysis. By applying Blockchain-BIM to overcome cost constraints, it has been found that it is possible to increase GB's cost-performance ratio in the retail and commercial estate to 3-3.8% at the basic level, while compared with other ratings is higher up to 2.1%, at which the choice of renewable energy model has a great influence.

European Integration and Countering Hybrid Threats: Challenges and Prospects

The relevance of the article’s topic is determined by the non-standard nature of the challenges and threats of today. In the modern world, hybrid threats have become a major challenge for European countries, the European Union, and the world as a whole. Hybrid warfare encompasses various forms and types of aggression that are used to influence a country’s domestic politics, public opinion, and government activities. Hybrid threats are complex and multifaceted phenomena that require a comprehensive and systemic approach to counter them. They can target different spheres of life, such as politics, economy, culture, the information space, and others. Since they have an unpredictable nature, countering them requires the development and implementation of modern strategies and effective tools at both the national and supranational levels. The European Union must develop an effective strategy to counter hybrid threats that would allow it to protect its citizens and prevent the further expansion of these threats. Therefore, the process of Eurointegration is an important element in countering hybrid threats for countries and the region as a whole. The European Union provides significant support in combating hybrid threats, including through cooperation and coordination with member countries. One important element of Eurointegration is the alignment of legislation and security standards among countries. This helps reduce risks and enhance protection against hybrid threats. Collaboration in the field of cybersecurity is also a crucial component of Eurointegration. The development and implementation of joint strategies and tools enhance the effectiveness of countering hybrid threats at the regional level. Furthermore, Eurointegration can assist countries in developing and implementing new strategies and tools to counter hybrid threats, including through financial and technical support. This will enable more effective combat against these phenomena and ensure the security of countries and the region as a whole. The EU’s approach to defining and addressing hybrid threats is outlined in the «Joint Framework on Countering Hybrid Threats - European Union Response» (2016), «Increasing Resilience and Strengthening the Capacity to Address Hybrid Threats» (2018), and the EU Security Strategy (2020). The integrated system for countering hybrid threats encompasses a wide range of measures at both the member state and supranational EU levels, including early detection, analysis, raising awareness, building resilience, prevention, crisis response, and consequence management.

On the question of the electronic parliament essence: the ukrainian dimension

In view of the expediency and demand for the most effective ways to solve the challenges of globalization information processes, the determination of the foreign policy vector of our country's development in the direction of European and Euro-Atlantic integration, the need for high-quality modern tools for solving complex tasks faced by public authorities, Ukraine has determined the strategic development of electronic democracy and state policy of digital transformation of society. The article focuses attention on the main conceptual idea of e-democracy – the involvement of the public in the political processes of state formation, state administration, and local government through the wide application of information and communication technologies in democratic processes. certain topical problems of the implementation of the electronic parliament in Ukraine are clarified. It is emphasized that the e-parliament is among the strategically determined main components of the domestic process of establishing and developing electronic democracy. The relevance of the issue is primarily related to the expediency of a comprehensive constitutional and legal analysis of the activities of the Verkhovna Rada of Ukraine –the Parliament of Ukraine in the context of the introduction of forms and means of e-democracy, the implementation of digital transformation of state and social life, challenges and threats of today in the conditions of martial law for the development of Ukrainian parliamentarism as a whole. It is emphasized that the concept of e-parliament has become widespread, and the construction of such an institution has become an important trend in the development of modern world parliaments. The international legal principles of the studied phenomenon are analyzed from the point of view of its practical value and definition of the concept, essence. It was concluded that during the entire period of the existence of the Verkhovna Rada of Ukraine as a parliament, the only body of legislative power, the foundations of the development of the "e-parliament" were also laid (introduction and use ofmodern forms of ICT, information content of web resources, information support of various parliamentary activities, etc). After Ukraine's accession to the Declaration of the Open Parliament (2016), the intensity of the relevant processes is increasing. Emphasis is made on the fact that efforts to implement plans for the development of electronic parliamentarism are primarily aimed at improving the quality of the lawmaking process and the effective interaction of all its subjects and participants. Attention is payed to the fact that domestic constitutional and legal science has not yet formed a generally accepted concept of e-parliament as a legal category, a unified approach to understanding its essence, content. Various approaches to defining the concept, essence, content of the electronic parliament in the domestic literature are studied. Determining the essence of the definition, scientists consider it mainly from the point of view of technological aspects,the use of ICT in parliamentary activities. The author's definition of "E-parliament" is provided – it is information and communication, digital technologies for the implementation of parliamentary activities, the electronic infrastructure of the parliament, a condition for ensuring its open, transparent, accountable to voters functioning, expanding the development opportunities and strengthening democratic institutions, citizen participation in political processes. It is emphasized that the electronic parliament cannot be considered as a separate type of traditional democratic parliament, as well as the fact that it cannot be completely identified with the constitutionally defined parliament of Ukraine The conformity of the practical activities of the Verkhovna Rada of Ukraine with the concept of e-parliament is clarified. Key words: government reform, e-democracy, digital, form, mean, stools,information and communication technologies, e-parliament, e-parliamentarism, Declaration of the Open Parliament, Verkhovna Rada of Ukraine

Analysis on Cyber Crimes and Preventive Measures

Abstract: This paper is generally to analyse various cybercrimes and corresponding preventive measures. Cybercrimes refers to criminal activities carried out by means of computer systems or the internet. As Cybercrimes are considered as a great threat in today's world, to the security of nation, to someone's personal data and information, individual security, so there is the need of some basic awareness and security measures, by which people can safeguard themselves from such crime. Cybercrimes are considered as a major risk because they can have devastating effects like financial losses, breaches of sensitive data, failure of systems, and, it can affect an organization's reputation. In this paper, we will discuss more about cybercrimes, and how do they happen. Also, who are Cybercriminals and, the different types of cybercrimes and preventive measures.

Updating the Military Unique Curriculum for a Ready Medical Force.

Previous conflicts have demonstrated the impact of physician readiness on early battlefield mortality rates. To prepare for the lethal nature of today's threat environment and the rapid speed with which conflict develops, our medical force needs to sustain a high level of readiness in order to be ready to "fight tonight." Previous approaches that have relied on on-the-job training, just-in-time predeployment training, or follow-on courses after residency are unlikely to satisfy these readiness requirements. Sustaining the successes in battlefield care achieved in Iraq and Afghanistan requires the introduction of effective combat casualty care earlier and more often in physician training. This needs assessment seeks to better understand the requirements, challenges, and opportunities to include the Military Unique Curriculum (MUC) during graduate medical education. This needs assessment used a multifaceted methodology. First, a literature review was performed to assess how Military Unique Curricula have evolved since their initial conception in 1988. Next, to determine their current state, a needs-based assessment survey was designed for trainees and program directors (PDs), each consisting of 18 questions with a mixture of multiple choice, ranking, Likert scale, and free-text questions. Cognitive interviewing and expert review were employed to refine the survey before distribution. The Housestaff Survey was administered using an online format and deployed to Internal Medicine trainees at the Walter Reed National Military Medical Center (WRNMMC). The Program Director Survey was sent to all Army and Navy Internal Medicine Program Directors. This project was deemed to not meet the definition of research in accordance with 32 Code of Federal Regulation 219.102 and Department of Defense Instruction 3216.02 and was therefore registered with the WRNMMC Quality Management Division. Out of 64 Walter Reed Internal Medicine trainees who received the survey, 32 responses were received. Seven of nine PDs completed their survey. Only 12.5% of trainees felt significantly confident that they would be adequately prepared for a combat deployment upon graduation from residency with the current curriculum. Similarly, only 14.29% of PDs felt that no additional training was needed. A majority of trainees were not satisfied with the amount of training being received on any MUC topic. When incorporating additional training on MUC topics, respondents largely agreed that simulation and small group exercises were the most effective modalities to employ, with greater than 50% of both trainees and PDs rating these as most or second most preferred among seven options. Additionally, there was a consensus that training should be integrated into the existing curriculum/rotations as much as possible. Current Military Unique Curricula do not meet the expected requirements of future battlefields. Several solutions to incorporate more robust military unique training without creating any significant additional time burdens for trainees do exist. Despite the limitation of these results being limited to a single institution, this needs assessment provides a starting point for improvement to help ensure that we limit the impact of any "peacetime effect."

CyberNSOF – A CRUCIAL FORCE MULTIPLIER IN MODERN WARFARE

Cyber security and special operations (CyberSOF) in the 21st century are constantly evolving and changing to meet today's threats. CyberSOF are constantly evolving as allied countries, strategic partners and key players in the Black Sea discover new tactics to achieve strategic objectives. So far, the one that has remained below the threshold of armed conflict by operating in the grey zone is the Russian Federation. The annexation of Crimea by the Russian Federation is the first strong indicator that CyberSOF binomial operations have been executed. The Romanian Naval Special Operations Forces community is still developing specific guidelines or responses to deter or prevent a major cyber attack on Romania and its NATO partners. This research addresses an aspect of special operations and cyber community that has yet to be explained adequately. To achieve this goal, we will describe how the symbiotic relationship between Naval Special Operations Forces and Cyber Defense Command is crucial within the national military instrument of power at the strategic level and the impact of this binomial on the operational and tactical levels of hybrid conflict can be treated as both a force multiplier and force protection generator for Naval Forces and beyond. According to the specified causes to achieve our objectives, we will present the concept of Cyber Operations and Naval Forces for Special Operations (CyberNSOF), a novel concept that can produce strategic-level effects with minimal forces. Although the two entities presented above are services in the Romanian Military, used as a binomial (CyberNSOF) in support of the supported element, will be able to be used both as force multiplier, force protection element and last but not least as forces executing pre-emptive actions to deter the enemy. Taking these recommendations into account will increase the effectiveness of SOF maritime operations with the support of cyberoperations while ensuring the transition to a robust/ real joint capability in response to any emerging existing threats.

Analysis of Economic-Physical Resilience of Cities

Resilience is a new approach to assessing and enhancing the resilience and resilience of the foundations of development in cities. Explaining and recognizing its effective and promotional components can pave the way for many programs related to crisis management and passive urban defense, which is very necessary given the complexities of today's threats. Different dimensions of human society resilience are examined in the physical, social, economic, environmental-institutional fields. In fact, resilience as a framework goes back to a concept that can easily relate to all stages and sections of disaster and crisis management. In this regard, the present study has been compiled with the aim of evaluating the dimensions of economic-physical resilience of cities around the metropolis of Tehran in the Islamshahr region. In this study, first through library studies, indicators and factors affecting economic and institutional resilience were identified and operational defined, then using a questionnaire in the form of hierarchical analysis process, the final weight of indicators by domestic experts and External was determined. Descriptive and inferential statistics (one-sample t-test and Friedman test) were used to analyze the data. Institutional resilience with an average of 2.5325, infrastructure resilience with an average of 2.4377 and urban resilience with an average of 2.3786 is therefore urban resilience and components of urban resilience in Islamshahr city are at a low level.

Hermes Ransomware v2.1 Action Monitoring using Next Generation Security Operation Center (NGSOC) Complex Correlation Rules

A new malware is identified every fewer than five seconds in today's threat environment, which is changing at a rapid speed. As part of cybercrime, there is a lot of malware activity that can infect the system and make it problematic. Cybercrime is a rapidly growing field, allowing cyber thieves to engage in a wide range of damaging activities. Hacking, scams, child pornography, and identity theft are all examples of cybercrime. Cybercrime victims might be single entities or groups of persons who are being targeted for harm. Cybercrime and malware become more hazardous and damaging because of these factors. Subsequent to these factors, there is a need to construct Next Generation Security Operation Centers (NGSOCs). SOC consists of human resources, processes, and technology designed to deal with security events derived from the Security Incident Event Management (SIEM) log analysis. This research examines how Next Generation Security Operation Centers (NGSOCs) respond to malicious activity. This study develops a use case to detect the latest Hermes Ransomware v2.1 malware using complex correlation rules for the SIEM anomalies engine. This study aims to analyze and detect Hermes Ransomware v2.1. As a result, NGSOC distinguishes malware activities' initial stages by halting traffic attempts to download malware. By forwarding logs to SIEM, the use case can support Threat Analyst in finding other Indicators of Compromise (IOC) to assist organizations in developing a systematic and more preemptive approach for ransomware detection.

THEORIES OF WORLD ORDER TRANSITION AND THE CURRENT PHASE OF WORLD POLITICS

The article is devoted to the analysis of the benefits and challenges of public-private partnerships in the sphere of сybersecurity. Information technologies play a dominant role in the development of modern society. However, rapid progress in this area is closely linked to the emergence of more sophisticated, innovative threats. The information security system, which has developed within the framework of the modern world order, is one of the "pillars" of international stability. Therefore, it became necessary to distinguish cybersecurity as an important component of public life. The state has a particularly important role to play in the information and cybersecurity system, as it can take a number of organizational and technical measures to protect its information space. The article emphasizes that it is possible to reach significant success only by involving the private sector. There are many examples and confirmations of it in the world. Public-private partnership is one of the potential forms of effective cooperation between the representatives of public and private sectors. The overall goal of participating in PPPs, both private and public, is to increase cybersecurity. There is an obvious need to combine the capabilities, potential, experience, technical support, and funding of the public and private sectors to combat cyber threats. Each country is trying to find its own way in building a PPP, but such a partnership has already become a new effective mechanism to meet the challenges and threats in today's information society. The article explores the examples of public-private partnerships in the sphere of сybersecurity in the EU.

Effective control over ensuring human rights and freedoms as a dimension of a democratic society: Social context

This research aims to study the problem of ensuring effective control over the implementation and observance of human rights and freedoms, in particular, in the format of social rights. The relevance of the stated topic is determined by the expediency of rethinking the nature and significance of social human rights in the context of modern realities, recognising the fact that the quality of life of each individual depends on the possibility of timely implementation of these rights, and therefore special attention should be paid to ensuring effective control over the observance of social rights in the context of democratic legal development. The basis for the research were the following problems: ensuring a sufficient standard of living for citizens in today's challenges and threats, legal certainty as a prerequisite for a stable law and order, lack of clear guarantees to ensure effective control over human rights and freedoms and more. The purpose of this study is to analyse the role and importance of the nature of social human rights as a component of social policy in order to justify the need to improve control in all its forms and manifestations of the effectiveness of their observance, protection and provision in today's conditions. Important methodological tools in the study were the provisions of the dialectical approach, which provided an opportunity to reveal the nature and purpose of social human rights, as well as areas for improving control over their provision and protection. The main results obtained during the research were: coverage of the essence of social rights at the present stage; study of the nature, levels of manifestation and types of control over the implementation and observance of human rights, freedoms and legitimate interests. The value of this work lies in obtaining practical recommendations for finding ways to improve control over the provision and protection of human rights and freedoms in the context of modern democratic development

Branding Produk Sebagai Solusi UMKM di Masa Pandemi

One of the major threats in today's economic world is Corona Virus Disease 2019 (Covid-19). With this virus, of course, has a big impact and becomes an obstacle to various sectors of the Indonesian economy, especially MSMEs. Product branding is a solution for MSMEs to have economic resilience during the Covid-19 Pandemic. Based on the problems faced by partners, the solution proposed in the PKM Stimulus this time is to provide additional insight to partners (MSMEs) about product branding, so that it is hoped that MSMEs are easy to market products, right in ordering, easy to recognize, and loyal customers. The solutions provided are activities that provide knowledge and insight for MSMEs in knowing and understanding product branding as a solution for MSMEs, especially during the Covid-19 pandemic, so that MSMEs can survive the Covid-19 Pandemic. Participants participated in this activity enthusiastically. The event began with registration, followed by reading the curriculum vitae. Then the speaker gave a presentation on Product Branding for 30 minutes, followed by a discussion with the participants. After 2 question sessions, there were still those who wanted to ask questions, so there was another question session opening by giving the opportunity to 2 questioners. So that it can be indicated that the socialization participants welcomed the training activities positively.