Search

Background: Given the pervasive connectivity and integration of the Internet of Things (IoT) devices into daily life, system security is of utmost significance in the modern era. The article examines escalating concerns regarding the security of the Internet of Things, its inherent vulnerabilities, and the necessary precautions required to safeguard our interconnected global environment. Objective: With forecasts indicating that the IoT ecosystem will comprise over 50 billion interconnected devices by 2030, the alarming 300% increase in IoT intrusions over the past year underscores the urgency of addressing this issue. Methodology: In this article, IoT security challenges are divided into three primary categories which include device vulnerabilities, network vulnerabilities, and data security vulnerabilities. Results: Our findings emphasize the necessity for end users, developers, and manufacturers to follow security best practices and take part in security training. The study discovered that successful DDoS attacks use infected IoT devices 65% of the time and there is still legacy firmware on 70% of those devices making them susceptible. Possible solutions that are currently under investigation include secure elements, machine learning anomaly detection intrusion detection systems, and blockchain-based device authentication. Most prominently, proactive IoT security solutions have reduced 85% of the security vulnerabilities for organizations; it is truly a remarkable achievement. Conclusion: Understanding the security dynamic of the IoT ecosystem is a very demandable job as it keeps on changing, and so does the knowledge about it. To ensure that the IoT remains powerful and transformative in a connected society, this article will take a look further into the increasing risks, vulnerabilities, scary stats as well as effective solutions. It underscores the need for strong measures to protect security and greater awareness.

As AI is deployed increasingly in defensive systems, hostile assaults have increased. AI-driven defensive systems are vulnerable to attacks that exploit flaws. This article examines the approaches used to resist AI-based cybersecurity systems and their effects on security. This paper examines existing literature and case studies to demonstrate how attackers modify AI models. These include avoidance, poisoning, and data-driven assaults. It also considers data breaches, system failures, and unauthorized access if a hostile effort succeeds. The report recommends adversarial training, model testing, and input sanitization to address these issues. It also stresses the need for monitoring and updating AI algorithms to adapt to changing opponent tactics. This paper emphasizes the need to limit hostile strike threats using real-life examples and statistics. To defend AI-driven cybersecurity systems from complex threats, cybersecurity specialists, AI researchers, and policymakers must collaborate across domains. This article provides full guidance for cybersecurity and AI professionals. It describes the complex issues adversarial assaults create and proposes a flexible and robust architecture to safeguard AI-driven cybersecurity systems from emerging threats. [ABSTRACT FROM AUTHOR]

Smart agriculture modifies traditional farming practices, and offers innovative approaches to boost production and sustainability by leveraging contemporary technologies. In today's world where technology is everything, these technologies are utilized to streamline regular tasks and procedures in agriculture, one of the largest and most significant industries in every nation. This research paper stands out from existing literature on smart agriculture security by providing a comprehensive analysis and examination of security issues within smart agriculture systems. Divided into three main sections--security analysis, system architecture and design and risk assessment of Cyber-Physical Systems (CPS) applications--the study delves into various elements crucial for smart farming, such as data sources, infrastructure components, communication protocols, and the roles of different stakeholders such as farmers, agricultural scientists and researchers, technology providers, government agencies, consumers and many others. In contrast to earlier research, this work analyzes the resilience of smart agriculture systems using approaches such as threat modeling, penetration testing, and vulnerability assessments. Important discoveries highlight the concerns connected to unsecured communication protocols, possible threats from malevolent actors, and vulnerabilities in IoT devices. Furthermore, the study suggests enhancements for CPS applications, such as strong access controls, intrusion detection systems, and encryption protocols. In addition, risk assessment techniques are applied to prioritize mitigation tactics and detect potential hazards, addressing issues like data breaches, system outages, and automated farming process sabotage. The research sets itself apart even more by presenting a prototype CPS application that makes use of a digital temperature sensor. This application was first created using a Tinkercad simulator and then using actual hardware with Arduino boards. The CPS application's defenses against potential threats and vulnerabilities are strengthened by this integrated approach, which distinguishes this research for its depth and usefulness in the field of smart agriculture security. [ABSTRACT FROM AUTHOR]

This study was done because there are more national, cross-border, and foreign threats at South Africa's Maritime Ports of Entry. The goal of the study was to make South Africa's Maritime Ports of Entry more secure. Two Maritime Ports of Entry, which will henceforth be referred to as Port of Entry 'A' and Port of Entry 'B', were purposively sampled for this study, based on specific criteria. Online interviews were used to collect data for this study. Data was analysed and interpreted using the thematic analysis process. Because of the pre-existing threats, vulnerabilities and security risks, it has been difficult for marine port of entry security personnel to reduce threats, prevent vulnerabilities and eliminate security risks. The study recommended enhancing human resources and physical protection systems (PPS) and establishing a centre for processing security information and intelligence to reduce the current security threats, prevent vulnerabilities and mitigate the risks at Maritime Ports of Entry. [ABSTRACT FROM AUTHOR]

The rapid evolution of 5G technology, while offering substantial benefits, concurrently presents complex cybersecurity challenges. Current cybersecurity systems often fall short in addressing challenges such as the lack of realism of the 5G network, the limited scope of attack scenarios, the absence of countermeasures, the lack of reproducible, and open-sourced cybersecurity training environments. Addressing these challenges necessitates innovative cybersecurity training systems, referred to as "cyber ranges". In response to filling these gaps, we propose the Cyber5Gym, an integrated cyber range that enhances the automation of virtualized cybersecurity training in 5G networks with cloud-based deployment. Our framework leverages open-source tools (i) Open5GS and UERANSIM for realistic emulation of 5G networks, (ii) Docker for efficient virtualization of the training infrastructure, (iii) 5Greply for emulating attack scenarios, and (iv) Shell scripts for automating complex training operations. This integration facilitates a dynamic learning environment where cybersecurity professionals can engage in real-time attack and countermeasure exercises, thus significantly improving their readiness against 5G-specific cyber threats. We evaluated it by deploying our framework on Naver Cloud with 20 trainees, each accessing an emulated 5G network and managing 100 user equipments (UEs), emulating three distinct attack scenarios (SMC-Reply, DoS, and DDoS attacks), and exercising countermeasures, to demonstrate the cybersecurity training. We assessed the effectiveness of our framework through specific metrics such as successfully establishing the 5G network for all trainees, accurate execution of attack scenarios, and their countermeasure implementation via centralized control of the master using automated shell scripts. The open-source foundation of our framework ensures replicability and adaptability, addressing a critical gap in current cybersecurity training methodologies and contributing significantly to the resilience and security of 5G infrastructures. [ABSTRACT FROM AUTHOR]

The Internet of Things (IoT) makes it possible to collect data from, and issue commands to, devices via the Internet, eliminating the need for humans in the process while increasing productivity, accuracy, and economic value. Therefore, the integration of IoT plays a crucial role in achieving high efficiency and sustainability in the production of renewable energy that could be used to meet future electricity needs. While this approach has many significant benefits, it also opens smart renewable energy to cyberattacks, giving hackers a new window of opportunity to take advantage of renewable energy's vulnerabilities. This obviously affects the financial and physical functioning of smart renewable energy. This article reviews the literature on cybersecurity threats and vulnerabilities in IoT-based smart renewable energy and cyberattacks on power systems. False data injection, replay, denial of service, and brute force credential attacks have been identified as the main threats to IoT-based smart renewable energy. These threats exploit IoT-based smart renewable energy's vulnerabilities such as the usage of insecure communication protocols, poor encryption techniques, poor hash algorithms, lack of access control, lack of parameter sanitization, and the inappropriate use of authentication alongside encryption. The findings of this review will assist researchers in better understanding the issues surrounding the cybersecurity of IoT-based smart renewable energy and the needs for grid security in light of the exponential growth in the number of renewable energy sources connected to the grid. [ABSTRACT FROM AUTHOR]

Driven by the rapid escalation of its utilization, as well as ramping commercialization, Internet of Things (IoT) devices increasingly face security threats. Apart from denial of service, privacy, and safety concerns, compromised devices can be used as enablers for committing a variety of crime and e-crime. Despite ongoing research and study, there remains a significant gap in the thorough analysis of security challenges, feasible solutions, and open secure problems for IoT. To bridge this gap, we provide a comprehensive overview of the state of the art in IoT security with a critical investigation-based approach. This includes a detailed analysis of vulnerabilities in IoT-based systems and potential attacks. We present a holistic review of the security properties required to be adopted by IoT devices, applications, and services to mitigate IoT vulnerabilities and, thus, successful attacks. Moreover, we identify challenges to the design of security protocols for IoT systems in which constituent devices vary markedly in capability (such as storage, computation speed, hardware architecture, and communication interfaces). Next, we review existing research and feasible solutions for IoT security. We highlight a set of open problems not yet addressed among existing security solutions. We provide a set of new perspectives for future research on such issues including secure service discovery, on-device credential security, and network anomaly detection. We also provide directions for designing a forensic investigation framework for IoT infrastructures to inspect relevant criminal cases, execute a cyber forensic process, and determine the facts about a given incident. This framework offers a means to better capture information on successful attacks as part of a feedback mechanism to thwart future vulnerabilities and threats. This systematic holistic review will both inform on current challenges in IoT security and ideally motivate their future resolution. [ABSTRACT FROM AUTHOR]

New technologies are constantly emerging in the modern world and changing the way we live our everyday lives. Although technology has many useful applications, there are various ways it can potentially be abused. Unmanned aerial vehicles (UAVs) are one of the most rapidly developing technologies, with potentially far-reaching consequences. A new focus on UAV applications has fueled rising concerns with regards to security, specifically around networked UAVs. UAVs may be managed from a remote place with relative ease. Essential operations involving the use of military tactics and weapons involve employing them in a variety of situations, such as reconnaissance, surveillance, and offensive, defensive, and civilian capacities. Message insertion, message manipulation, jamming, and GPS spoofing are the most commonly used cyber-attacks against these systems. Ensuring the security of electronics and communications in systems that employ several UAVs is of utmost importance to guarantee their safety and dependability in military and civilian activities. Many technological methods have been developed over the past decade for securing UAVs from cyber-attacks. This paper attempts to summaries the problems that can arise with unmanned aerial vehicles (UAVs), cyber-attacks, and the countermeasures used to protect against them. This is the first paper that details all of the past cyber-attacks on unmanned aerial vehicles (UAVs). [ABSTRACT FROM AUTHOR]

The subject of this study is to ensure the cybersecurity of systems of multifunctional UAV fleets (SMF UAV). The purpose of this study is to identify and analyze the risks associated with the cybersecurity of multi-functional UAV fleets, develop models of threats, vulnerabilities, and attacks, and conduct IMECA analysis of cyber-attacks. Tasks: 1) analyze threats that may affect the security of multifunctional UAV fleets; 2) identify system vulnerabilities and their possible consequences in case of exploitation; 3) develop models of the system infrastructure and threats, vulnerabilities, and attacks, considering the specifics of the functionality and communication between system elements; 4) perform a risk-based analysis, identifying and classifying potential threats and their impact. The following results were obtained. The following results were obtained. 1. Cybersecurity threats to multifunctional UAV fleets are described and classified. 2. Identified and analyzed system vulnerabilities and their potential consequences. 3. Developed models of threats, vulnerabilities, and cyberattacks, considering the specifics of the UAV fleet. 4. Conducted a risk-based analysis, determined the level of threat, and developed recommendations for improving the cybersecurity of the UAV fleet based on the results of the IMECA analysis. Conclusions. The research emphasizes the importance of the developed model and tool for the detection and analysis of cyber threats to the SMF UAV. This allows increasing the cybersecurity and reliability of the system and ensuring timely response to cyber threats. Areas for further research: development of a model and method to consider the specifics of cyber threats and the technological characteristics of the SMF infrastructure; development and implementation of proactive protection tools in the context of combined cyber-attacks; and expansion of the scope of these tools in various industries, including smart cities.

Societal security has become nowadays an important pair of lenses for discussing identity in a multilayered fashion within the context of an enlarged security concept. The complexity deriving from that engenders the necessity to identify and use new tools for reliably defining communities and their specific identities in order to better understand how state-wise strategies and policies can raise security risks when disregarding those communities’ needs and interests. In this respect, the goal of this article is to demonstrate the benefits of employing a gender-based perspective in defining societal security. Hence, it focuses on the possible correlations that can be conceptually identified between societal security and gender perspective. Then, the article exemplifies how a gender-based analysis can contribute to better societal security approaches by discussing Romania’s strategic approach to the Covid-19 pandemic and the possible observations deriving from that.

The subject of this study is to ensure the cybersecurity of systems of multifunctional UAV fleets (SMF UAV). The purpose of this study is to identify and analyze the risks associated with the cybersecurity of multi-functional UAV fleets, develop models of threats, vulnerabilities, and attacks, and conduct IMECA analysis of cyberattacks. Tasks: 1) analyze threats that may affect the security of multifunctional UAV fleets; 2) identify system vulnerabilities and their possible consequences in case of exploitation; 3) develop models of the system infrastructure and threats, vulnerabilities, and attacks, considering the specifics of the functionality and communication between system elements; 4) perform a risk-based analysis, identifying and classifying potential threats and their impact. The following results were obtained. The following results were obtained. 1. Cybersecurity threats to multifunctional UAV fleets are described and classified. 2. Identified and analyzed system vulnerabilities and their potential consequences. 3. Developed models of threats, vulnerabilities, and cyberattacks, considering the specifics of the UAV fleet. 4. Conducted a risk-based analysis, determined the level of threat, and developed recommendations for improving the cybersecurity of the UAV fleet based on the results of the IMECA analysis. Conclusions. The research emphasizes the importance of the developed model and tool for the detection and analysis of cyber threats to the SMF UAV. This allows increasing the cybersecurity and reliability of the system and ensuring timely response to cyber threats. Areas for further research: development of a model and method to consider the specifics of cyber threats and the technological characteristics of the SMF infrastructure; development and implementation of proactive protection tools in the context of combined cyberattacks; and expansion of the scope of these tools in various industries, including smart cities. [ABSTRACT FROM AUTHOR]

Societal security has become nowadays an important pair of lenses for discussing identity in a multilayered fashion within the context of an enlarged security concept. The complexity deriving from that engenders the necessity to identify and use new tools for reliably defining communities and their specific identities in order to better understand how state-wise strategies and policies can raise security risks when disregarding those communities' needs and interests. In this respect, the goal of this article is to demonstrate the benefits of employing a gender based perspective in defining societal security. Hence, it focuses on the possible correlations that can be conceptually identified between societal security and gender perspective. Then, the article exemplifies how a gender based analysis can contribute to better societal security approaches by discussing Romania's strategic approach to the Covid-19 pandemics and the possible observations deriving from that. [ABSTRACT FROM AUTHOR]

The article reports on the results of a strategic analysis of Ukraine's security environment based on a SWOT analysis. The focus is on the security environment as of the eve of the large-scale war launched by the Russian Federation against Ukraine in February 2022 as well as the changes it has undergone since then. The author prognosticates trends in the development of Ukraine's security environment in the post-war period based on the identified sources of the main threats to the national security of Ukraine, as well as vulnerabilities, advantages and opportunities for the development of the state and society in the new conditions. It is also predicted that sources of the main threats to the national security of Ukraine in the post-war period will undergo transformation. The author argues that a timely identification of existing and projected threats to national security, vulnerabilities, strengths of the state and society, and their opportunities to further protect national interests in the conditions of a certain security situation, when coupled with an account of trends in the development of the security environment, provide a foundation for determining the strategic goals and priorities of state policy in the area of national security. The research results give grounds to conclude that the main strategic goal for Ukraine in the area of national security is the development of sufficient domestic capabilities as a basis for ensuring its own security and resilience. The important vectors of state policy for ensuring the national security of Ukraine in the post-war period will include strengthening its defense capability, increasing the level of readiness to crises response, obtaining external security guarantees outside NATO, developing bilateral relations with strategic partners, restoring the economic and human development of Ukraine, and improving the efficiency of public administration.

Challenges faced in network security have significantly steered the deployment timeline of Fifth Generation (5G) communication at a global level; therefore, research in Sixth Generation (6G) security analysis is profoundly necessitated. The prerogative of this paper is to present a survey on the emerging 6G cellular communication paradigm to highlight symmetry with legacy security concepts along with asymmetric innovative aspects such Artificial Intelligence (AI), Quantum Computing, Federated Learning, etc. We present a taxonomy of the threat model in 6G communication in five security legacy concepts, including Confidentiality, Integrity, Availability, Authentication and Access control (CIA3). We also suggest categorization of threat-countering techniques specific to 6G communication into three types: cryptographic methods, entity attributes and Intrusion Detection System (IDS). Thus, with this premise, we distributed the authentication techniques in eight types, including handover authentication, mutual authentication, physical layer authentication, deniable authentication, token-based authentication, certificate-based authentication, key agreement-based authentication and multi-factor authentication. We specifically suggested a series of future research directions at the conclusive edge of this survey. [ABSTRACT FROM AUTHOR]

In humanitarian law, the terms public order or public security describe the general conditions that must exist for citizens to enjoy their rights and freedoms. States thus become responsible for the defense of public safety. The Republic of Moldova, like other countries around the world, remains influenced by events outside its borders, especially those that can trigger conflicts. Directly or indirectly, due to a strategic geopolitical positioning, the Republic of Moldova is forced to create mechanisms that are functional and appropriate to the real contexts in order to be able to deal with possible difficulties, which, moreover, continue to leave their mark on the citizens. In the present study we will refer to the threats, risks and vulnerabilities as they are understood in the controversy of researchers and specialists in security and public order, both on the internal and external (regional and international) dimensions. Thus, the definitions of the stated concepts do not belong to us, but we completely rely on the definitions of the notions invoked in the previous studies, with strict references. So, by Threat to security is an action or sequence of events that seriously threatens to degrade the quality of life of the citizens of a state, in a relatively short period of time, or constitutes a threat that cannot be ignored to the freedom of choice of the policy of a government or a private or non-governmental entity within a state [1, page 153]. Risks refer to possible but uncertain events that can cause harm. The impact of the risk depends on the evolving threats, plus the level of vulnerability to those threats, as well as the capacity available to deal with those threats. Plus, the risks affecting national security will be evaluated according to the fields of activity and their level of gravity and probability will be taken into account. Vulnerabilities are analyzed from a classical point of view. Vulnerability depends on the nature of the state’s situation: either the state of war/conflict, the «apparent» state of peace, or it depends on the objectives/ interests pursued by an actor/disturber in the region. In general, vulnerabilities are processes or phenomena in the internal life of a state (weaknesses), which reduce the ability to react to existing or potential risks or which favor their emergence and development. Specific to the Republic of Moldova, vulnerabilities can be evaluated from an internal and external perspective (depending on where they are generated). For example, the unilateral dependence of the Republic of Moldova on foreign systems in the energy field is a major vulnerability that, in the current security environment, turns into a threat to national security. It can also be a question of vulnerabilities characteristic of weak countries, as well as the emigration of highly qualified specialists and the weakening of the country’s development potential. Also, the Republic of Moldova can be affected not only by classic threats, such as international terrorism or cross-border organized crime. In this sense, the situation in Transnistria and the involvement of the Russian Federation as a hegemonic force should also be outlined.

Abstract —The literature on 5G design and architecture numbers in the hundreds of thousands, which makes analyzing this vast corpus of technical knowledge impossible within the scope of a single article. A rigorous literature scan has revealed investigations of various specific 5G components, or specific aspects of 5G design, architecture, or security, but none that are comprehensive in scope, encompassing all of the aforementioned categories, or that take into account the associated vulnerabilities, threats and risks to the basic 5G infrastructure. In this sense the 5G framework advocated by The European Union Agency for Cybersecurity (ENISA) in its comprehensive report is singular in relation to the extensive literature associated with the 5G domain and the fragmented character of scientific reporting related to 5G technology. It is the purpose of this article to go beyond the existing literature and examine in depth the details of the ENISA 5G Threat Landscape Report and reveal ENISA’s painstaking efforts to stand out among other leading-edge players in the 5G arena and achieve its strategic aims of integrating cybersecurity considerations with threats, risks, and vulnerabilities into an architecture of 5G right from the start of the design and development process. In formulating such a framework, ENISA has set the stage for standardization of cybersecurity considerations in relation to 5G design and architecture that may be considered a first approximation towards best practice in the field. ENISA’s role in the European Union as a leader in setting the pace of development of 5G networks is acknowledged in EU’s legislation and its directives. Significantly, its strategic direction targets future implementations of 5G networks by vendors, operators, and practitioners. This should equip EU with the necessary resilience to withstand hybrid threat onslaughts on its Pan-European network, a topic to be dealt with in full in a follow-on paper.

The article presents the assessment method of the risk situations emergence based on the analysis of the probability and frequency of threats emergence for automated control systems of the metallurgical industry companies (ACSMIC). The analysis of the risk dependency on vulnerabilities and threats to ACSMIC assets is carried out, and the relationship between risk, vulnerability, and threat is presented according to a three-level risk assessment scale. When identifying and assessing the risk, existing countermeasures against both external and internal attacks are taken into account, which, in turn, reduces the risk level for the protected organization. In the process of any organization functioning, there may be a need to reassess the risk associated with changes in the structure of the control organization or security policy in the system of the metallurgical industry companies. Therefore, the existing countermeasures are closely related to the concept of risk and require constant correction in the assessment process. Risk is related to the reliability of the functioning of the studied control structure of units and aggregates and their ability to function in accordance with the mode and goals of the production structure in various branches and levels of the hierarchy with an acceptable risk assessment. On the basis of the system concepts and assessment methods of the acceptable risk level, the system-oriented method of identifying the reliability of functioning of self-recovering complex hierarchical structures is proposed, the classification of the risk types of unforeseen situations in complex human-oriented systems that can be applied and implemented in hierarchical control systems is carried out. [ABSTRACT FROM AUTHOR]

Context. The analysis of the risk terminal flows in technogenic systems is carried out, which arise in the process of the impact of informational and cognitive threats in the automated document management system as part of the hierarchical production system. The object of the research is the process of functioning of complex systems with a hierarchical structure, in which automated document management systems with a high level of data flow protection for decision-making are used to provide the information quality control of technological processes. The subjects of the research are the methods and means of constructing an information protection system to ensure the reliable functioning of automated document management systems and making targeted decisions in hierarchical structures with minimal risk of exposure to external threats and attacks. Objective is to develop a complex model for assessing the risk of the document management system failure as part of a hierarchical production system under the active threats. Method. For the first time, the cause-and-effect diagram of the event formation with the active action of threat factors and attacks is substantiated and developed, the interpretation of risk in a technogenic system is defined, and the risk in the space of states is presented as a change in the trajectory in the system transitions to the limit operation mode. For the first time, a category diagram of the structure of risk generation under the threat factors and a system-category diagram of interaction in the system risk ↔ emergencyactive nature is constructed, a system-category scheme of risk formation under the active threat factors is suggested. For the first time, a cognitive diagram for assessing losses in the event of a risk situation arising from incorrect actions of the personnel is substantiated. Results. As a result of the research, a system-category diagram of the impact of a set of threats on the system functioning mode and process is constructed, a method is developed for calculating the level of system strategic security of energy-active hierarchical systems in the process of attacks and threats, and a complex model for assessing the risk of a system functioning failure under active threats is suggested. Conclusions. Under the action of active obstacles, cognitive and system factors at the operational and strategic levels of the control hierarchy, due to wrong decisions and informational disorientation, emergency situations and risks of the system function loss and its target-orientation arise. The analysis of a set of risks and the suggested category diagram of the risk generation structure under the impact of threat factors form the basis of the development of the probability structure of the risk concept based on the attack ↔ consequence model, as well as the construction of a system-category diagram of the interaction in the game active factor ↔ accident risk. This, in turn, makes it possible to construct a system-category scheme for the formation of risk terminal flows in technogenic systems that arise in the process of threat impact. A complex model for assessing the risk of system failure under threats can be used to construct protection systems for any hierarchical control structures of technogenic systems. [ABSTRACT FROM AUTHOR]

Abstract —The literature on 5G design and architecture numbers in the hundreds of thousands, which makes analyzing this vast corpus of technical knowledge impossible within the scope of a single article. A rigorous literature scan has revealed investigations of various specific 5G components, or specific aspects of 5G design, architecture, or security, but none that are comprehensive in scope, encompassing all of the aforementioned categories, or that take into account the associated vulnerabilities, threats and risks to the basic 5G infrastructure. In this sense the 5G framework advocated by The European Union Agency for Cybersecurity (ENISA) in its comprehensive report is singular in relation to the extensive literature associated with the 5G domain and the fragmented character of scientific reporting related to 5G technology. It is the purpose of this article to go beyond the existing literature and examine in depth the details of the ENISA 5G Threat Landscape Report and reveal ENISA’s painstaking efforts to stand out among other leading-edge players in the 5G arena and achieve its strategic aims of integrating cybersecurity considerations with threats, risks, and vulnerabilities into an architecture of 5G right from the start of the design and development process. In formulating such a framework, ENISA has set the stage for standardization of cybersecurity considerations in relation to 5G design and architecture that may be considered a first approximation towards best practice in the field. ENISA’s role in the European Union as a leader in setting the pace of development of 5G networks is acknowledged in EU’s legislation and its directives. Significantly, its strategic direction targets future implementations of 5G networks by vendors, operators, and practitioners. This should equip EU with the necessary resilience to withstand hybrid threat onslaughts on its Pan-European network, a topic to be dealt with in full in a follow-on paper.

Advanced persistent threats (APTs) pose a significant risk to nearly every organization. Due to the sophistication of these attacks, they can bypass existing security systems and largely infiltrate the target network. The prevention and detection of APT are challenging because attackers constantly change and evolve their attacking techniques and methods to stay undetected. As a result, APT often successfully compromises companies, organizations, or public authorities. This paper developed an adaptive security framework that continuously investigates the behavior of users of a network to protect it against threats. The framework constitutes of three main sections namely; Intrusion prevention, Intrusion detection, and Response to intrusions. The design model comprises the front end, middleware, and back end. The front end is implemented using HTML and Cascading Style Sheet (CSS) in Netbeans Integrated Development Environment (IDE) version 8.0.2. The middleware is implemented using Java Web of NetBeans IDE while the back end is implemented using MySQL server. The results show that the runtime security of the system is adapted according to the behavior patterns exhibited by the user hence, our system can detect zero day attacks which signature-based intrusion detection systems cannot detect, thus protecting against these attacks. The work is recommended as a countermeasure against emerging persistent attacks. [ABSTRACT FROM AUTHOR]

Welfare technology is expected to become a larger and more important part of the healthcare sector. This creates a need to understand, which information security risks welfare technology and affiliated devices are exposed to. In a scoping review, we present an extensive overview of relevant threats. Furthermore, some key vulnerabilities in health technologies like IoMTs and welfare technology devices are highlighted. In the conclusions, the risks relevant for welfare technology is discussed, where four top risks are emphasized as a result of the findings. [ABSTRACT FROM AUTHOR]

This paper examines the impact of the internet on dissemination of harmful content, with a specific focus on the issue of cyberterrorism. We define the term cyber "terrorist" within the context of violent followers of a particular ideology and emphasizes the importance of understanding the difference between legitimate selfdefense and violent extremist actions to effectively combat cyberterrorism. To address this growing threat, the paper discusses various measures taken by governments to counter cyberterrorism, including investing in research, securing critical infrastructure, enacting laws to criminalize cybercrime, and taking proactive measures to disrupt terrorist activity online. The paper also highlights the need for a multidisciplinary approach involving education, technology, and public awareness to combat this threat. [ABSTRACT FROM AUTHOR]

The frequency and scale of unauthorized access cases and misuses of data access privileges are a growing concern of many organizations. The protection of confidential data, such as social security numbers, financial information, etc., of the customers and/or employees is among the key responsibilities of any organization, and damage to such sensitive data can easily pose a threat to the future of a business and the security of the customers. Therefore, this paper proposes and implements some security mechanisms and techniques, such as secure authentication, secure authorization, and encryption, to assure the overall security of a big data analytic framework with MongoDB free community edition. This paper presents the fourth phase of our continuous research where in the first phase we proposed a data analytic framework with MongoDB and Linux Containers (LXCs) with basic security requirements. Next, in the second phase we proposed a vulnerability analysis testbed to find vulnerabilities associated with the system. Finally, in the third phase we discussed in detail root causes and some prevention techniques of vulnerabilities found in the system. In addition, this paper introduces a new security mechanism for privacy preserving data handling with MongoDB to ensure the privacy of the data before being processed. Our results show, with our initial model of the analytic framework, how well our newly introduced security mechanisms work and how these security mechanisms and techniques can be used to assure the confidentiality, integrity, and availability (CIA) of any data science project conducted on our proposed analytic framework. In addition, these security mechanisms and techniques help us to strengthen the current system against zero-day attacks where attacks on vulnerabilities that have not been patched or made public yet. Therefore, our vulnerability analysis testbed which is proposed in the second phase of this research will not be able to finds vulnerabilities related to zero-day attacks.

Challenges faced in network security have significantly steered the deployment timeline of Fifth Generation (5G) communication at a global level; therefore, research in Sixth Generation (6G) security analysis is profoundly necessitated. The prerogative of this paper is to present a survey on the emerging 6G cellular communication paradigm to highlight symmetry with legacy security concepts along with asymmetric innovative aspects such Artificial Intelligence (AI), Quantum Computing, Federated Learning, etc. We present a taxonomy of the threat model in 6G communication in five security legacy concepts, including Confidentiality, Integrity, Availability, Authentication and Access control (CIA3). We also suggest categorization of threat-countering techniques specific to 6G communication into three types: cryptographic methods, entity attributes and Intrusion Detection System (IDS). Thus, with this premise, we distributed the authentication techniques in eight types, including handover authentication, mutual authentication, physical layer authentication, deniable authentication, token-based authentication, certificate-based authentication, key agreement-based authentication and multi-factor authentication. We specifically suggested a series of future research directions at the conclusive edge of this survey.