Cyber Threats Monitoring: Experimental Analysis of Malware Behavior in Cyberspace

Abstract

Abstract. Cyberspace is a borderless new universe in which all actors, including States, share information and communications technologies, now indispensable to the modern lifestyle. Starting from the beginning of the 21st century, the ability to leverage the cyberspace has become the most important source of power. Due to the proliferation of ICT systems into all aspects of life, the importance of information for political matters has increased awfully. State and non-State actors can use this power to achieve objectives into cyberspace and physical world. Low cost and high potential impact make cyber-power attractive to all actors. In fact, cyber threats have grown exponentially with the proliferation of the cyberspace infrastructures. Consequently, cyberspace has become a war-fighting domain with the potential to destroy or make useless logical, physical, technical, and virtual infrastructure, damaging in fact critical National capabilities.This scenario forces all national institutions to a review of their defense strategies, because of the difficulties to identify the actors of a cyber-attack. It then becomes necessary to gain a broader view of the problem to acquire more detailed information, useful to identify such sources of cyber-attacks. This new point of view can be achieved by using the analytical method developed by the authors and applied to data streams flowing across the cyberspace. In this way we can collect, detect, isolate and analyze the behavior of those malware that are acting as cyber weapons, through the implementation of an honeypot-based system such as the one presented in this paper.

Amplification DDoS Attacks: Emerging Threats and Defense Strategies

“…Honeypots serve to deflect attacks from hitting the systems they are protecting as well as serving as a means for gaining information about attackers by storing a record of their activity and learning what types of attacks and software tools the attacker is using. The goal of this type of honeypots is to lure an attacker to install either handler or agent code within the honeypot, thereby allowing the honeypot's [17] owner to track the handler or agent behavior and better understand how to defend against future DDoS installation attacks. Honeypots are also helpful because they can store event logfiles during a DDoS attack.…”

“…As we have explained in a previous paper [17] the analysis cycle takes place in 6 steps (see Figure 5) Step 1 -Identification of the target.…”

A cyber kill chain based taxonomy of banking Trojans for evolutionary computational intelligence

“…e-banking and e-payment systems) are becoming the norm in developing and developed nations. Such systems and services can and have been targeted by cyber criminals [1]- [6], and malware is a popular or common tool used by cyber criminals [7]- [9]. For example, a cyber-attack in South Korea reportedly saw 32,000 computers belonging to broadcasting organizations and banks infected with a malware that overwrote the Master Boot Record (MBR) [8].…”

Design of Password Guessing Prevention Protocol for Levelled-Security System

“…However, several threats have proven that many people's passwords are vulnerable to being cracked. Thus the security of user's information is threatened all the time [1].…”