The evolution of ransomware attacks in light of recent cyber threats. How can geopolitical conflicts influence the cyber climate?

Teichmann, Fabian; Boticiu, Sonia; Sergi, Bruno S.

doi:10.1365/s43439-023-00095-w

Cited by 20 publications

(6 citation statements)

References 32 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Groups are also professionalizing, with some even providing "customer service" to aid ransom payment and data recovery [31,1]. The development of anonymous cryptocurrencies like Bitcoin fueled ransomware growth by enabling difficultto-trace extortion payments [44,34].…”

Section: Ransomware Evolutionmentioning

confidence: 99%

“…Integrating such techniques with anomaly detection on document access patterns shows promise for early ransomware identification [62]. Nonetheless, generating sufficiently deceptive decoys across heterogenous enterprise data remains challenging [44]. Determining optimal decoy deployment strategies given infrastructure constraints also requires further study [15].…”

Section: Current Decoy File Techniquesmentioning

confidence: 99%

See 1 more Smart Citation

Mitigating Data Exfiltration Ransomware through Advanced Decoy File Strategies

Liu,

Chen

2023

Preprint

View full text Add to dashboard Cite

This study introduces an advanced decoy file strategy utilizing Generative Adversarial Networks (GANs) to combat data exfiltration ransomware threats. Focused on creating highly realistic decoy documents, the system embeds these across enterprise networks, engaging ransomware threats effectively. It includes real-time monitoring for abnormal interactions and proactive response mechanisms for threat containment. Rigorous testing against various ransomware samples demonstrated high engagement rates and rapid response times, confirming the system's effectiveness. Integration across diverse network types was achieved with minimal operational overhead. This study highlights the system's adaptability in the face of evolving ransomware tactics and underscores the balance between decoy realism and deployability.

show abstract

Section: Ransomware Evolutionmentioning

confidence: 99%

Section: Current Decoy File Techniquesmentioning

confidence: 99%

Mitigating Data Exfiltration Ransomware through Advanced Decoy File Strategies

Liu,

Chen

2023

Preprint

View full text Add to dashboard Cite

show abstract

“…This shift has been indicative of a change in the goals and tactics employed by cybercriminals, emphasizing the growing significance of data as a tool for cyber extortion [6,32]. Research has shown that this evolution in ransomware tactics has led to an increase in the complexity and severity of attacks [1,2]. Studies conducted over the past few years have demonstrated a notable rise in incidents where sensitive data was not just held hostage but also threatened with public release or sale [33].…”

Section: Ransomware Evolutionmentioning

confidence: 99%

“…In the dynamic and constantly evolving landscape of cyber threats, ransomware has persistently emerged as a formidable challenge [1,2]. Historically, ransomware attacks were primarily centered around crypto-ransomware, wherein attackers encrypted victims' data and demanded a ransom for its release [3,4,5].…”

Section: Introductionmentioning

confidence: 99%

Applying ChatGPT-Powered Game Theory in Ransomware Negotiations

Zhu,

Li,

Zhang

2023

Preprint

View full text Add to dashboard Cite

This study looks into the application of game theory and ChatGPT in the context of ransomware negotiations, providing a novel perspective on cyber threat management. Through a detailed examination of case studies, this research uncovers the intricate dynamics that govern the decision-making process in ransomware scenarios. Key findings highlight the significant role of ransomware group reputations and the strategic input provided by ChatGPT. The integration of game theory offers a structured analytical approach to predict attacker behavior and devise effective defense strategies. The study proposes the use of AI-driven tools to enhance negotiation outcomes and suggests the establishment of a database for tracking ransomware group behaviors. The exploration of these elements presents a comprehensive framework for understanding and addressing the challenges posed by ransomware, marking a significant step forward in cybersecurity strategy and preparedness.

show abstract

“…Key Cyber Attacks in the Banking Industries These attacks target the banks' data, networks, systems, and reputation, and can cause significant losses, fines, and customer dissatisfaction (Abou El Houda, 2024, Naveenan, andSuresh, 2023). Cybercriminals constantly develop new ways to infiltrate and exploit the banks' security defenses, using advanced techniques and tools (Gulyás, and Kiss, 2023 Boticiu, and Sergi, 2023). The rising regulatory and compliance requirements, such as the General Data Protection Regulation (GDPR) (Bertolaccini et al, 2023, Lukic, Miller, andSkiera, 2023), the Payment Services Directive 2 (PSD2), the Basel III Accord (Alvi, and Williamson, 2023), and the Cybersecurity Maturity Model Certification (CMMC) (Buzdugan, and Căpățână, 2023, Acosta, and Jahankhani, 2023, Okunade et al, 2023.…”

Section: Introductionmentioning

confidence: 99%

Iso 27001 in Banking: An Evaluation of Its Implementation and Effectiveness in Enhancing Information Security

Sarah Kuzankah Ewuga,

Zainab Efe Egieya,

Adedolapo Omotosho

et al. 2024

Financ. account. res. j.

View full text Add to dashboard Cite

As the banking industry becomes increasingly reliant on digital technologies and faces evolving cyber threats, the adoption of robust information security frameworks is imperative. ISO 27001, a globally recognized standard for information security management systems, has gained prominence as a comprehensive framework for safeguarding sensitive data. This study explores the implementation and effectiveness of ISO 27001 within the banking sector, evaluating its impact on enhancing information security. It delves into the specific challenges and considerations unique to the banking industry, where the confidentiality, integrity, and availability of financial information are paramount. It examines the motivations behind adopting ISO 27001, the process of implementation, and the associated organizational changes required to align with the standard's principles. A critical aspect of the evaluation involves assessing the tangible benefits and outcomes resulting from ISO 27001 implementation. This includes improvements in risk management, incident response capabilities, and the overall resilience of information security controls within banking environments. The study also investigates the role of ISO 27001 in fostering a culture of security awareness among banking employees and stakeholders. Ethical considerations, compliance challenges, and the balance between security and operational efficiency are examined to provide a holistic perspective on the standard's impact. It concludes with insights into the future of ISO 27001 adoption in the banking sector, considering emerging technologies, regulatory developments, and the evolving nature of cyber threats. This research contributes valuable insights into the effectiveness of ISO 27001 as a strategic framework for information security in banking, offering practical implications for industry practitioners, policymakers, and stakeholders invested in fortifying the digital resilience of financial institutions Keywords: ISO 27001, Banking, Information Security, Ethical, Financial Institution.

show abstract

The evolution of ransomware attacks in light of recent cyber threats. How can geopolitical conflicts influence the cyber climate?

Cited by 20 publications

References 32 publications

Mitigating Data Exfiltration Ransomware through Advanced Decoy File Strategies

Mitigating Data Exfiltration Ransomware through Advanced Decoy File Strategies

Applying ChatGPT-Powered Game Theory in Ransomware Negotiations

Iso 27001 in Banking: An Evaluation of Its Implementation and Effectiveness in Enhancing Information Security

Contact Info

Product

Resources

About