Search

This paper examines the crucial subject of cyber security and its relevance in the current digital age. With the accelerated development of technology and interconnection, it is now more important than ever to guard against cyber attacks. The article gives a general overview of cyber security, including its meaning and value in protecting people, businesses, and societyat large. It explores a range of cyber threats, including insider threats, phishing scams, and malware assaults. The study then addresses crucial cyber security elements, such as identity and access management, network security, data protection, and application security. It looks at the techniques and recommendations used to improve cyber security, including encryption, firewalls, secure coding techniques, and incident response strategy. The study also examines recent developments in cyber security, such as IoT security, cloud security, and privacy laws. It addresses social engineering assaults and the significance of user education and awareness while emphasising the human element incyber security. The study also emphasizes the value of public-private partnerships, regulatory frameworks, and international collaboration in enhancing cyber security. Finally, it examines the field's potential future developments, including automation, threat intelligence, and ethical issues. In order to effectively address cyber threats, the study emphasizes the dynamic nature of cyber security and the necessity for continual awareness and agility. [ABSTRACT FROM AUTHOR]

Phishing is a type of attack that is often used to steal user data, including personal login credentials, debit cards, or credit card numbers. For hackers, phishing is an easy way to find and track any person's information or company data. In general, an effective phishing campaign requires a well-prepared cybercriminal with technical expertise and social engineering knowledge. However, with the rise of CaaS (Crime-as a-Service), anyone can become an expert in phishing for a little charge. CaaS vendor offer everything the amateur attacker needs to make their own effective phishing attack, from point-by-point target records to marked email formats. Intruders can even pay amount for access to compromised servers to conceal their tracks all the more without any problem. By eliminating large number of barriers to entry, this type of trend has made it simple to make a compelling phishing attack. And that is a major issue for the associations being targeted. [ABSTRACT FROM AUTHOR]

The plan to build a nuclear power plant (NPP) in West Kalimantan has generated various responses from the public. The biggest challenge in the NPP development plan is related to community acceptance of the benefits derived from the program. Information distortion may occur which will lead to negative perceptions in the community. Objective socialization efforts with various activities adapted to the conditions of the local community are needed so that people's understanding of the meaning of NPP development can be felt and the program benefits the community. A social engineering design of various forms of activity needs to be made to elaborate on the interests of the community and the objectives of the NPP development plan. Social engineering design is intended to design a process of social change toward the desired conditions, for the better. The people of West Kalimantan consist of various ethnic groups and are scattered to form community groups. Based on the real conditions in the community, research is carried out to overcome the social impacts that may arise by building the construction of a social engineering design based on active community involvement. The methodology used is through literature study, design making, sampling test, and focus group discussion related to understanding, opinion, and public acceptance of the NPP development plan in West Kalimantan Province. The identification results showed that the selected community groups for active involvement were 7 groups, namely the Village Apparatus of Bengkayang Regency, the Coastal Student Association of Bengkayang Regency, Indonesian Youth National Committee Mempawah, Indonesian Youth National Committee Bengkayang, Taklim Council of Bengkayang Regency, Dayak Youth of Bengkayang Regency, and the Association of Malays Bengkayang Regency. The results of the analysis show that the level of understanding of the majority of respondents in the Bengkayang Regency regarding nuclear science and technology is very good and has the potential to support the plan to develop NPP in West Kalimantan. [ABSTRACT FROM AUTHOR]

Ransomware has been a huge cyber threat and has gotten many organizations and individuals into trouble such as financial loss. The attacking pattern of encrypting the important data and files causes the daily operation of the organization is forced to be halted. Organization in the medical industry has been targeted badly as the cybercriminals understand the importance of medical data such as patient medical record which decides tons of humans' life. The only way to prevent from becoming the next victims is to understand the attacking pattern and method of the ransomware attack. The Internet has been a useful platform providing the public with free malware files to simulate different cyber-attacks in a virtual environment. By doing this, the public could have more understanding of various cyber threats and thus could practice the appropriate countermeasure to defend against the attacks. The purpose of this article is to demonstrate two methods of launching Wannacry ransomware attacks which include uploading ransomware files with Metasploit framework as well as serving the ransomware file via HTTP using Apache service. The tools needed for the attack are also specified. From the demonstration, both methods work well but the second method requires additional social engineering attacks such as phishing to complete the attack. The choosing of ransomware attack methods depends on a few elements such as locations, target devices, target networks, etc. The attackers use various methods or techniques to launch cyber-attacks, thus the users must always update with the latest cyber news to defend against the cyber-attacks. [ABSTRACT FROM AUTHOR]

Web applications play an imperative role in helping people to access Internet resources as well as performing all kinds of activities from anywhere and anytime. Individuals and enterprises have implemented and utilized various powerful web applications to maintain their daily life and business operations. Although web applications are widely used, the development of web application authentication system is significantly slower than authentication found in mobile and desktop devices, where most of the web applications nowadays are still applying traditional password authentication. Unlike biometric authentication system found in mobile devices, password authentication is less efficient in terms of security and performance. The inefficiency of password authentication in protecting and managing user access caused increasing cases of data breaches recently. The factors that cause such inefficiency can be the use of weak password, the lack of security awareness towards social engineering attacks, and so on. Although password authentication security can be enhanced by enforcing strong password policies, the memorization of several strong and random passwords across different web applications can be challenging. Therefore, Web-Based Biometric Authentication System for Web Applications is proposed to allow greater access control security and improve web application access performance at the same time. [ABSTRACT FROM AUTHOR]

Social Engineering refers to the set of activities that have the objective of manipulating human beings through deception with the sole purpose of obtaining private access or confidential information from the same people, companies. This study aims to determine in Social engineering, methodologies to counter computer attacks on the web in the Barrio 26 de Septiembre, Portoviejo, Ecuador. With the research carried out and what is currently experienced, it can be said that it is increasingly common to be a victim of computer attacks by Social Engineering, which is characterized by studying the exploitation of user trust to extract confidential information, The purpose of these techniques is to achieve the infiltration of people into organizations, homes, or any other place; also identity theft through deception, in order to seize information or data at your convenience. This research shows its importance within the branch of computer security, it is raised through a systematic review on Social Engineering. For the elaboration of this work, a Quantitative, Analytical, Descriptive and Bibliographical methodology was chosen; For the collection of information, a survey was applied to residents of the 26 de Septiembre neighborhood to find out what knowledge they have regarding Social Engineering, taking into consideration various aspects, such as: management of credentials, types of portals or applications that they use, information that is requested the most on web pages, configuration of smart equipment (laptops, mobile devices and desktop computers). As a result, it was possible to know that the majority of the people surveyed are unaware of Social Engineering techniques, therefore, they do not know what to do and how to act in case of an attack, therefore, a list with preventive methodologies that allow the user to identify malicious computer attacks. In conclusion, it was established that the methodologies that allow to mitigate and counteract computer attacks have to do with the development of security policies and plans, computer security training, Backup's or Security Copies of personal information, a correct authentication of the information when entering a website, as well as the periodic update of devices. [ABSTRACT FROM AUTHOR]

Phishing attacks have become one of the major concerns when it comes to huge social media platform such as Twitter. On this platform malicious social bots generate fake tweets and post shortened malicious URLs. Phishing attack is a cyber-attack which comes under the category of social engineering, this attack is commonly used to trick the victim into clicking a malicious URL whose main intension is to steal user's confidential information such as, e-mail ids, passwords, credit card pins, etc., and the phishing attack is even capable of infecting the victim's system with ransom ware. In this proposed system the suspicious behavior of participants is analyzed to detect whether the participant of twitter is legitimate user or a malicious bot. The system alerts the user in real time if the participant or the URL is malicious. The system performs analysis of participants and URLs by using machine learning algorithm to understand the lexical properties and redirections of URL and comparing them with previously known malicious attacks. [ABSTRACT FROM AUTHOR]

The basic network security issues have changed very little over the past decade. Protecting the confidential institutional information, preventing unauthorized access defending the network against SoE attacks remain primary concerns of network security professional toady. Widespread remote access by the high number of increasing sophisticated SoE attacks is making network security significantly more challenging in the institute. Confidential information can reside in two states on a network. It can reside on institutional physical storage media, such as a hard drive or memory, or it can reside in transit across the physical network wire in the form of packets. These two information states present multiple opportunities for SoE attacks from users in higher leaning institute internal network, as well as those users on the internet. Given the dramatic rise in external security threats, couples with the rising cost of network intrusions. Institution are more pressured than ever to define and protect their network perimeter. There is no choice for the institute but to keep abreast of large number of security issues confronting in today's world. [ABSTRACT FROM AUTHOR]