检索结果-南通市图书馆

Malware incident response(IR) informed by cyber threat intelligence(CTI)

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Science China(Information Sciences) 2022年第7期65卷 256-258页

作者： Ying HE Ellis INGLUT Cunjin LUO School of Computer Science and Informatics De Montfort University Key Lab of Medical Electrophysiology Ministry of Education The Health Informatics Group Institute of Cardiovascular Research Southwest Medical University School of Computer Science and Engineering Northeastern University

Dear editor, Security experts have been fighting against cybercriminals for many years and existing research shows that this battle will continue. Malicious software has no remorse when it targets different organizations, regardless of its forms [1]. Ransomware [2] has caused serious issues in different industries, especially in healthcare. The existing report shows that 34% of ransomware is targeting healthcare organizations. Nowadays, criminals prefer crypto-jacking over ransomware (which also relies on cryptocurrency for anonymous ransom payments).

关键词： Malware Analysis Cyber Threat Intelligence Crypto Jacking incident response Malware incident response

Cyber Resilience through Real-Time Threat Analysis in Information Security

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

International Journal of Communications, Network and System Sciences 2024年第4期17卷 51-67页

作者： Aparna Gadhi Ragha Madhavi Gondu Hitendra Chaudhary Olatunde Abiona Department of Computer Information Systems Indiana University Northwest Gary IN USA

This paper examines how cybersecurity is developing and how it relates to more conventional information security. Although information security and cyber security are sometimes used synonymously, this study contends that they are not the same. The concept of cyber security is explored, which goes beyond protecting information resources to include a wider variety of assets, including people [1]. Protecting information assets is the main goal of traditional information security, with consideration to the human element and how people fit into the security process. On the other hand, cyber security adds a new level of complexity, as people might unintentionally contribute to or become targets of cyberattacks. This aspect presents moral questions since it is becoming more widely accepted that society has a duty to protect weaker members of society, including children [1]. The study emphasizes how important cyber security is on a larger scale, with many countries creating plans and laws to counteract cyberattacks. Nevertheless, a lot of these sources frequently neglect to define the differences or the relationship between information security and cyber security [1]. The paper focus on differentiating between cybersecurity and information security on a larger scale. The study also highlights other areas of cybersecurity which includes defending people, social norms, and vital infrastructure from threats that arise from online in addition to information and technology protection. It contends that ethical issues and the human factor are becoming more and more important in protecting assets in the digital age, and that cyber security is a paradigm shift in this regard [1].

关键词： Cybersecurity Information Security Network Security Cyber Resilience Real-Time Threat Analysis Cyber Threats Cyberattacks Threat Intelligence Machine Learning Artificial Intelligence Threat Detection Threat Mitigation Risk Assessment Vulnerability Management incident response Security Orchestration Automation Threat Landscape Cyber-Physical Systems Critical Infrastructure Data Protection Privacy Compliance Regulations Policy Ethics Cybercrime Threat Actors Threat Modeling Security Architecture

ERAD: Enhanced Ransomware Attack Defense System for Healthcare Organizations

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Software Engineering and Applications 2024年第5期17卷 270-296页

作者： Xinyue Li Vijay K. Madisetti School of Cybersecurity and Privacy Georgia Institute of Technology Atlanta Georgia USA

Digital integration within healthcare systems exacerbates their vulnerability to sophisticated ransomware threats, leading to severe operational disruptions and data breaches. Current defenses are typically categorized into active and passive measures that struggle to achieve comprehensive threat mitigation and often lack real-time response effectiveness. This paper presents an innovative ransomware defense system, ERAD, designed for healthcare environments that apply the MITRE ATT&CK Matrix to coordinate dynamic, stage-specific countermeasures throughout the ransomware attack lifecycle. By systematically identifying and addressing threats based on indicators of compromise (IOCs), the proposed system proactively disrupts the attack chain before serious damage occurs. Validation is provided through a detailed analysis of a system deployment against LockBit 3.0 ransomware, illustrating significant enhancements in mitigating the impact of the attack, reducing the cost of recovery, and strengthening the cybersecurity framework of healthcare organizations, but also applicable to other non-health sectors of the business world.

关键词： Ransomware Healthcare Cybersecurity MITRE ATT&CK Matrix incident response Ransomware Attack Lifecycle Digital Health Safety

An emerging threat Fileless malware:a survey and research challenges

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Cybersecurity 2018年第1期1卷 668-679页

作者： Sudhakar Sushil Kumar School of Computer&Systems Sciences Jawaharlal Nehru University110067New DelhiIndia Indian Computer Emergency response Team Ministry of Electronics&Information Technology110003New DelhiIndia

With the evolution of cybersecurity countermeasures,the threat landscape has also evolved,especially in malware from traditional file-based malware to sophisticated and multifarious fileless *** malware does not use traditional executables to carry-out its ***,it does not use the file system,thereby evading signature-based detection *** fileless malware attack is catastrophic for any enterprise because of its persistence,and power to evade any anti-virus *** malware leverages the power of operating systems,trusted tools to accomplish its malicious *** analyze such malware,security professionals use forensic tools to trace the attacker,whereas the attacker might use anti-forensics tools to erase their *** survey makes a comprehensive analysis of fileless malware and their detection techniques that are available in the *** present a process model to handle fileless malware attacks in the incident response *** the end,the specific research gaps present in the proposed process model are identified,and associated challenges are highlighted.

关键词： Fileless malware Botnet incident response Memory forensics incident investigation Memory resident malware Rootkit