Category: Cybersecurity

Introduction

The recent trend of increased exposure due to the access of extended financial and fraud concerns by social media and the internet has necessitated the need to curb the tendency. The matter has led to fraudulent financial reporting involving the violation of accounting principles. There is an urgent need to analyze the fraud occurrences and the perpetrators to solve the issue. Social media, including platforms such as Facebook, Twitter, and Instagram, have played a significant role in transforming how business is done, especially in the investment sector (Boiko et al., 2019). The internet is also an essential tool in entrepreneurship and economic growth.

However, both the internet and social media can have devastating effects on the business due to its misuse that can cause harm and security fraud operations. The increased exposure promotes this to financial and accounting information. Fraudsters use social networking platforms to note potential victims and seek their private information through the internet, which they use to organize phishing attacks. Cyber-attacks on businesses and organizations have become more sophisticated in the recent past (Boiko et al., 2019). The effects of such insecurities have made the organizations seek to promote data security and develop a strong defense against such threats.

As an organization, the concept of building bridges between cyber forensics and accounting investigations is of paramount salience in organization safety. Forensic accountants have a long history of assisting clients in revealing uncomfortable accounting facts. For decades, they have been helping corporations and the court system evaluate and analyze damages caused by fraud and other adverse occurrences. Cybercrime specialists, particularly forensic analysis and database security experts, are entrusted with tracking hackers’ trails or investigating their digital imprint with the hopes of finding data leakage and breaches caused by an attack. Forensic accounting and cyber security groups are working together to address the set of data breaches and exposure, as well as possible expenses and damages incurred as a result of the violation. Therefore, there are several advantages of building alignment between cyber forensics and accounting investigations.

Advantages

It is crucial to evaluate the overall price of a cybersecurity compromise as more of our world becomes digital and more data is provided at our disposal. A firm’s leakages and damages can be severe depending on the fraud extent. A third-party expert, including a forensic accountant, can assist firms in determining what has been lost and quantifying the financial losses connected with a cyberattack (Boiko et al.,2019). Taking precautions to prepare ahead and minimize errors before a crisis arises can benefit handsomely in the long run. The goal of creating alignment between cyber forensics and accounting investigation is to solely identify malware in the device’s software, leaving the physical component to one side. While reviewing the device’s entry and departure points, one can quickly discover well about personnel who connected the system and the conditions wherein the data were created, providing a jewel description of what occurred and when. In today’s fast, evolving, and digitally shifting world, cyberspace investigations are an inevitable phenomenon that is incredibly important.

Criminal intelligence experts have long realized the significance of graphic tools in aiding connection visualization. Analysts have been utilizing some cohesive social analysis for a long time, whether association under investigation is between individuals, enterprises, or events. During studies, several potential tools include matrices and link diagrams, social network diagrams, temporal analysis, transactions, common diagrams, PERT, and VIA charts (Alshurafat et al., 2020). Although no tool can replace thorough investigation, they can make the process easier and comprehend challenging issues. These tools can allow you to understand the route a specific billing went through the victim financial institution, whether you are attempting to depict the framework of an interrelated intelligence unit in an anticompetitive case or merely seeking to understand the direction a specific payment went (Nigrini, 2020). While these technologies vary, they all have one common trait: visualization. The following describes how these tools are applied during the investigation process.

Matrices and Link Diagrams

For displaying relationships, matrices and link diagrams are helpful tools. Both depict a tri-interaction across items in two dimensions. Developing a connection diagram without utilizing a linkage matrix is viable, but it becomes more challenging as the chart becomes more complex. The linkage matrix plays a significant a role at this point. An affiliation matrix is a method of representing associations between objects in a logical manner. A it can depict relationships between individuals, institutions, or individuals and entities, among other things. They are built on sophisticated computational foundations and, in the right hands, maybe modified and converted into pretty advanced forecasting tools (Okoe et al., 2018). Their forms take different shapes and sizes, but they are always simply a set of columns and rows. Matrixes, often known as tables, comprise an ordered set of a relational databases.

Designers can use the above square matrix to identify a specific entity under observation. We can examine the correlation among employees in an organization, for instance. The profiles of all the individuals we like to demonstrate a connection are listed along the left column. Then re-list everything in the same sequence anywhere along the front of the matrix. We insert an X in the field where the row variable for A and the horizontal vector for B overlap to denote an association.

Social Network Diagrams

The use of social network diagrams adds another layer of intricacy. Even though the basic theory remains the same, network theory begins to address the dynamics of social relationships and this adds a layer of complication to the equation. However, as the complexity grows, so does the utility of improved modeling tools. There are no easy ways to show relationship strength or directionality in simple link diagrams. These features are critical in understanding the structure of an organization in real life. Human relationships are better visualized and analyzed using social network diagrams. There are injustices in almost every connection; nodes and edges are the cornerstones of all structured analysis and represent the principal goal of investigation.

The components that constitute the topic of research are nodes, often referred as vertices and each node corresponds to a particular person. The node works as the placeholder for the entity in the graph, whether it’s a person, institution, or transaction. Edges represent entities, and we should link them when suitable since our research aims to portray the interactions between entities in visual terms, their vertex. The use of edges accomplishes this. As previously stated, there are numerous interactions that we can model. This is known as an unconsummated connection in graph theory, and it is represented by a directed edge, which is linear with a directing point.

Temporal Analysis

Tools for temporal analysis assist in the organization of occurrences or information while they emerge over time. Unlike transnational analysis tools, which allow us to model relationships between people, firms, or groups, temporal analysis tools allow us to express interactions between time and another thing. For example, a simple chronology is a temporal analytic tool that allows us to graphically arrange activities in a linear way. There are several applications in this category. Some devices, such as the time-event chart (TEC), are periodic performance measures, while others, such as the transactional flowcharts, are not (Quick et al., 2019). The capacity to assist researchers in organizing things inside a conceptual framework is a feature shared by all of the tools we have placed together in this category. Often, chronological time is the most popular frame of reference. TECs and basic timeline, program evaluation review technique (PERT) and VIA graphs, and acquisition data flow diagram are among the tools we have selected to be included in this area.

Conclusion

In conclusion, Investor faith and security have deteriorated in today’s modern time of economic crisis. Simultaneously, there is mounting pressure to achieve financial results that meet or exceed expectations. These issues have resulted in massive inspection and dispute of accounting records by shareholders, authorities, and other participants and an emphasis on accountants and their obligations. Unexpected financial outcomes, financial deception, missing assets, and fraud accusations are all prominent reasons of financial investigations, which demand going beyond the income accounts to show the facts. This concerns call upon the building of bridges between cyber security and financial accounting to be in a position to carry out all these investigations and identify the fraudsters.

References

Alshurafat, H., Beattie, C., Jones, G., & Sands, J. (2020). Perceptions of the usefulness of various teaching methods in forensic accounting education. Accounting Education, 29(2), 177-204.

Boiko, A., Shendryk, V., & Boiko, O. (2019). Information systems for supply chain management: Uncertainties, risks, and cyber security. Procedia Computer Science, 149, 65-70.

Nigrini, M. J. (2020). Forensic Analytics: Methods and techniques for forensic accounting investigations. John Wiley & Sons.

Okoe, M., Jianu, R., & Kobourov, S. (2018). Node-link or adjacency matrices: Old question, new insights. IEEE Transactions on Visualization and Computer Graphics, 25(10), 2940-2952. doi: 10.1109/TVCG.2018.2865940

Quick, M., Law, J., & Li, G. (2019). Time-varying relationships between land use and crime: A spatio-temporal analysis of small-area seasonal property crime trends. Environment and Planning B: Urban Analytics and City Science, 46(6), 1018-1035.

Introduction

Almost any business today is connected with technology in one way or another. Therefore, cyber threats are one of the most common problems for entrepreneurs. In a modern company, cybersecurity continuity and incident review process are the most important strategic direction. Its first stage should be an assessment of possible risks depending on the direction of the business and the programs most often used. It is important for companies to raise awareness in the field of cybersecurity. In this case, the actual solution will be to conduct a cyber audit, which is another stage of the cybersecurity continuity and incident review process. Next, it is necessary to implement various stages of digital transformation of cybersecurity, which include improving the maturity of enterprises in cybersecurity issues and the use of new solutions. In addition, it is important for the company to organize monitoring of network activity to detect traces of hacking.

Maturity Level

Approaches to Improvement

Cyber threats may arise due to a low level of awareness or a low level of maturity of the organization’s system. There are several approaches to solving this problem, the first of which is to strengthen the resilience of business in relation to cyber threats. It is carried out by developing a risk-oriented culture and increasing the maturity of the cyber risk management function. Another approach is to create a security infrastructure using modern integrated communication security solutions (Padilla & Freire, 2019). They consist not only in establishing transparent communication between the board of directors and the cyber defense service. This approach should also extend to interaction with business partners and third parties included in the company’s digital platform.

Technical Influences

Often companies build cyber defense, focusing primarily on technical attack vectors. Such systems can have a high level of maturity and be reliable. Therefore, when increasing the level of maturity, it is necessary to take into account some technical aspects (Essien & Aniefiok, 2022). The first priority is the specifics of the process of writing software and creating an information infrastructure. In addition, technical features that are important for the choice of an approach to increasing maturity can be identified during the audit of an already ready information infrastructure and in the process of developing tools in order to obtain unauthorized access. Digital transformation of the maturity level taking into account technical factors is a priority in the formation of the cybersecurity continuity and incident review process.

External Influences

When improving the level of maturity in an organization, it is necessary to take into account not only technical intra-organizational factors, but also external influences. This is due to the fact that cyber threats often come from the influence of external software products. For example, over-reliance on connections creates the potential for intentional Internet outages. Another significant external factor is deterioration, implying the rapid development of intelligent technologies plus conflicting requirements (Filho et al., 2022). They arise as a result of the development of national security rules and individual privacy rules and negatively affect the ability of organizations to control their own information. Moreover, organizations should take into account such an external factor as distortion. It involves the deliberate dissemination of disinformation, including through bots and automated sources, which undermines trust in the integrity of information.

Cybersecurity Contingency & Incident Review Changes

Current

Current cybersecurity contingency and incident review changes occur according to the zero-trust model. According to it, any office user and corporate device connected to the network have a zero level of trust. They need to prove all the time with the help of identification that they have the right to access the system. It does not matter where they connect from or to which network segment. Zero Trust assumes that the security service is obliged to monitor any suspicious signal when entering the network (Al-Mhiqani et al., 2019). Distributed accesses and multi-level identification are used for this. Distributed data access makes it possible to provide full or limited access for users. Zero Trust uses artificial intelligence to ensure that IT systems independently detect various vulnerabilities and suspicious activity, eliminating them.

Anticipated

The anticipated cybersecurity contingency and incident review changes should take place according to the threat hunting model. It is a process of proactive and interactive analysis of information that is collected from endpoints and sensors in order to detect threats that have bypassed the security tools used. Specialists use threat intelligence technologies to study in detail the tactics, techniques and procedures of attacking groups of cyber fraudsters. Receiving information about new techniques of attacks on the infrastructure, experts create a hypothesis about how they are applicable to the system in which it works (Padilla & Freire, 2019). If the primary hypothesis turns out to be unreliable, then it is modified and checked again. That is, hypothesis testing is constantly happening, so experts are getting more and more data on the tactics of cybercriminals, preventing their attacks.

Threats

Cybersecurity continuity and incident review changes should take into account new emerging threats. They are related to the fact that companies cannot check how secure the outsourcer is, and cannot share responsibility with him if an attack has occurred. Together with them, a technology such as deepfake will pose an increasing threat. In the next few years, it will become so perfect that it will bypass the biometric protection of systems. The security of the infrastructure is not the responsibility of the system owner, but of the cloud operator, who does not have sufficient resources for protection (Al-Mhiqani et al., 2019). An increase in the complexity of encryption viruses encoding data on software, demanding a ransom (most often in Bitcoins) for decryption and providing access to computer systems should also be expected.

Vulnerabilities

Vulnerabilities that should be considered when planning cybersecurity contingency and incident review changes represent flaws in software, firmware, or hardware. An attacker can use them to perform unauthorized actions in the system. They may be caused by software programming errors. Attackers use these errors to infect computers with malware or perform other malicious actions (Essien & Aniefiok, 2022). The most significant are programming errors, shortcomings that were allowed during the design of the system, and unreliable passwords. In general, vulnerability is created by any flaws in the computer system, the use of which leads to a violation of the integrity of the system and incorrect operation.

Global

Global cybersecurity continuity and incident review changes strategies include the main requirement – to protect important information resources through the introduction of privacy enhancement technologies. With the development of technologies such as blockchain, online transactions, digital file exchange platforms, the variety of cyber threats is constantly growing. In connection with the processes of digital globalization, the interdependence of cybersecurity of organizations is often rising. By components, the global cybersecurity market is divided into solutions and services (Filho et al., 2022). The solutions segment includes the categories’ identity, access, and risk management. According to the type of reliability, the global information security market has split into meeting the needs of small and medium-sized enterprises and large enterprises. Depending on the size of the organization, cybersecurity continuity and incident review changes represent the work of securing networks, endpoints, applications, clouds, and wireless networks.

Technical Adjustments

Technical adjustments applicable for cybersecurity continuity and incident review changes mainly consist in installing cryptography. It uses encryption to protect information by hiding its contents. When the information is encrypted, it is only available to those users who have the correct encryption key. If users do not have this key, then the information for it is not available. Security teams can use encryption to protect the confidentiality and integrity of information throughout its lifetime, including during storage and transmission (Essien & Aniefiok, 2022). However, as soon as the user decrypts the data, they become vulnerable to theft, exposure or modification. To encrypt information, security teams use technical adjustments such as encryption algorithms or technologies such as blockchain.

Conclusion

The level of cybercrime in the world continues to grow; most often, educational institutions, public administration bodies, Internet and IT service providers are subjected to hacker attacks. The attackers’ goals are profit—making, disabling infrastructure and cyber espionage. To achieve these goals, cybercriminals use various tools and methods, creating threats and exploiting the vulnerabilities of organizations. To improve security, it is necessary to improve the maturity level of the organization by launching the cybersecurity contingency and incident review changes process. Planning this process taking into account external and technological factors will allow to implement information security in the organization.

References

Al-Mhiqani, M. N., Ahmad, R., Abidin, Z. Z., Ali, N. S., & Abdulkareem, K. H. (2019). Review of cyber attacks classifications and threats analysis in cyber-physical systems. International Journal of Internet Technology and Secured Transactions, 9(3), 282–298.

Essien, N. P., & Aniefiok, E. U. (2022). Cyber security: Trends and challenges toward educational development in 21st century. Asia-Africa Journal of Education Research, 2(12), 141–156.

Filho, N. G., Rego, N., & Claro, J. (2022). A cybersecurity incident classification integrating the perspectives of perpetrators and target companies. Social Science Research Network Journal, 8(5), 41–61.

Padilla, V. S., & Freire, F. F. (2019). A contingency plan framework for cyber-attacks. Journal of Information Systems Engineering & Management, 4(2), 1–6.

Introduction

The article Digital Forensic Analysis of Fitbit examines how data is collected from the Fitbit devices, its extraction with the purpose of conducting a forensic analysis, and its examination using open-source tools. Thus, researchers have conducted the study with the hypothesis that open-source tools can be effective in forensic data investigation of Fitbit devices comparable to specialized tools commonly used in the domain of forensic science. For the research question to be addressed, Almogbil et al. [1] chose Autopsy Sleuth Kit and Bulk Extractor Viewer to gain access to Fitbit users’ information before scrutinizing it for a comprehensive conclusion. According to MacDermott et al. [2], Fitbits store data for 31 days, which allowed the authors of the study to have enough data. The importance of the hypothesis, as highlighted by Odom et al. [3], is highlighted by the lack of guidelines for investigators in regards to smartwatches in comparison to smartphones and laptops. Thus, the question examined by the authors of the article has practical significance.

Methodology

Supervised Learning to Detect DDoS Attacks is an article that examines how supervised learning techniques and detection systems explore backscatter darknet traffic in terms of effectiveness and timing. The question that Balkanli et al. [4] chose to analyze was which one of the classifiers (CART Decision Tree or Naïve Bayes) and NIDSs (Bro v2.2 or Corsaro v2.0.0 is more proficient in regards to their performances in effectively and quickly detecting attacks. The same question has been extensively analyzed in another research with similar motives by Kim [5]. Bindra and Sood [6] also concluded that machine-learning techniques are accurate in detecting such issues. The comparison of the results and the analyses of the data as a result of the research gave the authors of the article a conclusion in regards to the methodology that has evidence-based results in being more effective.

Both pieces of research rely on the methodology of using derived quantitative data compiled through existing databases. The study examining Fitbit in terms of forensic research used VMWare Workstation Pro to structurize the data population. Moreover, the Fitbit application itself was downloaded and synchronized on all user devices. The researchers used publicly available information from Autopsy 4.10.0 due to the fact that the aim was to investigate whether open sources are enough for a comprehensive forensic examination. MacDermott et al. [2], however, have pointed out that information available on Autopsy was often non-readable. Nonetheless, the authors of the article managed to gain access to enough data, illustrating the usefulness of using public platforms, which Dawson & Akinbi [7] mention to be easier to decode. The researchers who examined the detection of DDoS attacks also chose to rely on existing and publicly available data from CAIDA’s archive.

Controversial Findings

Instead of using newer information as the authors of the previous study, this research used information gathered from November 2008. This was the time when extensive internet attacks took place, now evident from the database that has been examined. Researchers used more than 1,000,000 packets to experiment. The tools studied were Decision Tree and Naive Baye Here, as well as Corsaro and Bro in regards to processing time, rules, features, and effectiveness. Polat et al. [8], however, highlight that Naïve Baye and Decision Tree, in particular, are often performing differently based on the subject that is being examined. For example, Yadav and Thareja [9] found Naïve Baye to be a more accurate tool. On the other hand, the findings of Rahmadani et al. [10] suggest that the Decision Tree is superior in terms of data analysis. The research in question found Decision Tree to be more accurate and time-effective to use. The study examining Fitbits is also controversial due to the ambiguous opinions on the efficacy of using data acquired from smartwatches as reliable forensic evidence. According to Feehan et al. [11], the devices are too often compromised, which is why the data is not accurate. This may limit the investigators in using Fitbits for data identification in the first place, which is also supported by Reid et al. [12]. Thus, the study becomes limited in having importance in the domain of forensic science.

Importance

Both researchers are important due to the problems that correlate with a lack of solutions to the problems assessed during the studies. For example, Khuphiran et al. [13] consider DDoS attacks as the most time and financially costly IT problems. Furthermore, Yoon and Karabiyik [14] refer to the importance of police officers being up-to-date with new devices for gathering evidence as being critical due to the fast technological advancement. Moreover, Sunde and Dror [15] suggest this minimizes the risk of human error since the extensive use of technology in forensics simplifies the investigation process. Both researchers rely on publicly available data. However, the one examining detection of DDoS attacks used relatively old information from 2009. This, however, does not compromise the research since the attacks that have remained in the database do not significantly differ from one’s occurring nowadays. The two studies, while similar in methodologies are different in regards to the design. While one provides a guideline for obtaining, storing, and using data obtained from Fitbits, the other observes the best ways to detect DDoS attacks by comparing the timing and accuracy of applying different techniques.

References

[1] A. Almogbil, A. Alghofaili, C. Deane, T. Leschke, A. Almogbil, and A. Alghofaili, “The accuracy of GPS-enabled Fitbit activities as evidence: A Digital Forensics Study,” 2020 7th IEEE International Conference on Cyber Security and Cloud Computing (CSCloud)/2020 6th IEEE International Conference on Edge Computing and Scalable Cloud (EdgeCom), 2020.

[2] A. MacDermott, S. Lea, F. Iqbal, I. Idowu, and B. Shah, “Forensic analysis of wearable devices: Fitbit, Garmin and HETP watches,” 2019 10th IFIP International Conference on New Technologies, Mobility and Security (NTMS), 2019.

[3] N. Odom, J. Lindmar, J. Hirt, and J. Brunty, “Forensic inspection of Sensitive User Data and artifacts from Smartwatch Wearable Devices,” Journal of Forensic Sciences, vol. 64, no. 6, pp. 1673–1686, 2019.

[4] E. Balkanli, J. Alves, and A. N. Zincir-Heywood, “Supervised learning to detect DDoS attacks,” 2014 IEEE Symposium on Computational Intelligence in Cyber Security (CICS), 2014.

[5] M. Kim, “Supervised learning‐based DDoS attacks detection: Tuning hyperparameters,” ETRI Journal, vol. 41, no. 5, pp. 560–573, 2019.

[6] N. Bindra and M. Sood, “Detecting DDoS attacks using machine learning techniques and contemporary Intrusion detection dataset,” Automatic Control and Computer Sciences, vol. 53, no. 5, pp. 419–428, 2019.

[7] L. Dawson and A. Akinbi, “Challenges and opportunities for wearable IOT forensics: Tomtom SPARK 3 as a case study,” Forensic Science International: Reports, vol. 3, p. 100198, 2021.

[8] H. Polat, O. Polat, and A. Cetin, “Detecting DDoS attacks in software-defined networks through feature selection methods and Machine Learning Models,” Sustainability, vol. 12, no. 3, p. 1035, 2020.

[9] K. Yadav and R. Thareja, “Comparing the performance of naive Bayes and decision tree classification using R,” International Journal of Intelligent Systems and Applications, vol. 11, no. 12, pp. 11–19, 2019.

[10] S. Rahmani, A. Dongoran, M. Zarlis, and Zakarias, “Comparison of naive Bayes and decision tree on feature selection using genetic algorithm for classification problem,” Journal of Physics: Conference Series, vol. 978, p. 012087, 2018.

[11] L. M. Feehan, J. Geldman, E. C. Sayre, C. Park, A. M. Ezzat, J. Y. Yoo, C. B. Hamilton, and L. C. Li, “Accuracy of Fitbit devices: Systematic review and narrative syntheses of quantitative data,” JMIR mHealth and uHealth, vol. 6, no. 8, 2018.

[12] R. E. R. Reid, J. A. Insogna, T. E. Carver, A. M. Comptour, N. A. Bewski, C. Sciortino, and R. E. Andersen, “Validity and reliability of Fitbit activity monitors compared to actigraph GT3X+ with female adults in a free-living environment,” Journal of Science and Medicine in Sport, vol. 20, no. 6, pp. 578–582, 2017.

[13] P. Khuphiran, P. Leelaprute, P. Uthayopas, K. Ichikawa, and W. Watanakeesuntorn, “Performance comparison of machine learning models for DDoS attacks detection,” 2018 22nd International Computer Science and Engineering Conference (ICSEC), 2018.

[14] Y. H. Yoon and U. Karabiyik, “Forensic analysis of Fitbit Versa 2 data on Android,” Electronics, vol. 9, no. 9, p. 1431, 2020.

[15] N. Sunde and I. E. Dror, “Cognitive and human factors in digital forensics: Problems, Challenges, and the way forward,” Digital Investigation, vol. 29, pp. 101–108, 2019.

Introduction

Bring-your-own-device (BYOD) is a convenient method for a company’s employees to utilize technological solutions in a workplace using familiar means. However, in its current state, BYOD introduces numerous cyber security threats to organizations that handle sensitive data. For example, many modern devices do not possess a sufficient level of protection against malware (Alotaibi & Almagwashi, 2018).

Discussion

Public networks that personnel uses for transferring private data often come with protocols that are susceptible to spoofing and sniffing data packets (Alotaibi & Almagwashi, 2018). Even private networks that operate on outdated software and hardware are prone to be hacked. Keeping one’s device clean of any possible viruses is a challenging task for a person without technical knowledge, making trusted antiviruses vital for all organizations (Alotaibi & Almagwashi, 2018). Policies must be set in place that refer to these issues, and IT teams must be available constantly to rapidly resolve any threats or breaches occurring within local frameworks.

Storing corporate information on private devices also comes with a slew of risks. Many users use services like Dropbox and Google Drive, leading to unsolicited data transfer to unprotected devices outside of a facility’s network (Alotaibi & Almagwashi, 2018). Free cloud storage services may utilize private, although depersonalized data for the analysis of users’ activities with the purposes of marketing or reselling to third parties (Alotaibi & Almagwashi, 2018). Cyber security relies heavily on knowledge of safety protocols by the personnel involved in BYOD. Companies must be urged to implement monitoring measures to detect and address their employees’ lacking attention to the privacy, security, and safety of corporate data.

Conclusion

In conclusion, these vulnerabilities caused by the insufficient regulation and general unpreparedness of organizational and public networks expose facilities that use BYOD to severe risks of data leaks and hacker attacks.

Reference

Alotaibi, B., & Almagwashi, H. (2018). A review of BYOD security challenges, solutions, and policy best practices. In the 2018 1st International Conference on Computer Applications & Information Security (ICCAIS). IEEE Xplore. Web.

Introduction

Cybersecurity is a practice that helps protect internet-connected systems from unauthorized access to private data. The popularization of information technology led to multiple cyber-attack issues. This is why the military has been taking action and implementing policies that would minimize the risk of cyber-attacks and make possible future updates easier. While the Army already protects its information and ensures confidentiality and data availability, there are always things that can improve the situation. This includes bringing awareness to the cybersecurity issue, involving more people to combat the problem of cyberattacks, and organizing the information based on specialty and tasks that must be completed. Regulation 25-2 is an excellent addition to an effective and practical cybersecurity policy. This structure provides the force with new strategies and guidelines that can upgrade the current system as well as minimize cyber attacks as much as possible.

Why it is Important

There have always been efforts when it comes to keeping the data safe. The Army has been improving the cybersecurity system for a long time since it affects every device, person, operation, and mission. The most significant upgrade is the updated 25-2 regulation, which provides guidance and a comprehensive policy that must be implemented. Its significance is highlighted by the establishment of the Army Cybersecurity Program and assigned responsibilities (Office of the Army Chief Information Officer). The importance lies in data confidentiality, availability of information, support of mission readiness on every single level.

This regulation targets every aspect of the Army. It includes leaders, commanders, and individuals who operate the IT that deals with missions and business processes (US Department of the Army). The regulation’s implementation in each department significantly improves the existing cybersecurity policy and enhances the level of security of every department’s system online data that must remain confidential and private. As long as the upgraded 25-2 regulation is integrated, all Army information in electronic format is safer. It is also beneficial for future updates since the new and updated AR 25-2 provides faster and more efficient modernizations and updates that will make the system even more systematic and structured.

Another significance is that this regulation applies to many different fields. It includes the Regular Army, the US Army Reserve, the Army National Guard, which means this regulation applies to many individuals, including authorized and privileged users. The fact that the rules are intended to protect so many people and so much information is essential for the overall safety issue that cybersecurity suppresses. When all departments work under the same set of rules and policies, the risk of cyber-attacks becomes less significant, which is a crucial part of keeping data, systems, devices, and private information under control.

What it Does

Cybersecurity is based on controlling and protecting the data, networks, and devices from cyber attacks. It minimizes the potential for unauthorized access and exploitation of systems that are used on a day-to-day basis. The US Army is particularly interested in keeping all the data safe from both foreign and domestic attacks that may potentially occur and create significant problems. With an efficient cybersecurity plan and strategy, the military networks can continue to function according to plan. The specialists who work in this field have to strengthen the existing security systems, assess the problems, and minimize the risk of unauthorized access on all degrees.

Army Regulation 25-2 ensures cybersecurity policies and guidance that help minimize the risks of cyberattacks. According to the Office of the Army Chief Information Officer, it is an updated approach that reflects up-to-date DOD policies. The other purpose is to assign responsibilities and roles so that every individual contributes to overall safety. The regulation includes many departments and the exact steps they will take to follow the policies and ensure a safe and secure system.

When the regulations are applied, each individual has a better chance of keeping the practice safe and secure. Regulation 25-2 also implies that every leader has to incorporate cybersecurity readiness in each report. This ensures the significance of cybersecurity at all levels. By including it, the commanders highlight the crucial part of cybersecurity and how it affects every field of work. It creates a level of awareness for each individual regarding keeping the information safe from outside attacks and access that can compromise the data, information, devices, and systems.

Why Breaking These Rules is Dangerous

Cybersecurity is a vital part of any field that uses technology as a primary source of information, communication, etc. It helps protect the data from theft, damage, and illegal access. Not following the basic rules of preventing this from happening can be dangerous. It can lead to information theft, unauthorized access of various documents and reports, and loss of crucial data. Moreover, a cyberattack can result in identity theft, publication of confidential information, and it can even cause nationwide distress in the case of terrorism.

Cybersecurity is especially significant for such a critical nation force as the Army. It includes weapon systems, scanning workstations, communication, plans, strategies, databases, private information, reports, etc. Not having a solid security system can have a devastating effect on the entire country. Furthermore, a cyber attack that can potentially result in a leak of confidential information can cause a lot of damage on an international level.

All Army IT that stores, processes, and transmits information works according to the 25-2 Regulations. This means that every individual should assume a role in cybersecurity. If this policy were not followed, the security level would be much lower. It can result in cyber attacks and unauthorized access and use of data. This outcome can become fatal for the Army force, the nation, and even international relationships. The dangers of having an unprotected system are detrimental, which is why the cybersecurity policy has to be implemented and followed on every level.

Conclusion

Cybersecurity is a significant aspect of every corporation, force, structure, or department that uses technology on a day-to-day basis. The Army is an organized force that has been improving when it comes to keeping its systems safe and secure. It and keeps modernizing the structure based on different forms of cyberattacks. The Army Regulation 25-2 is an excellent example of how existing measures are being upgraded to become more efficient. The updated policy ensures that the data will be secured, and every person will contribute to the overall safety of the cybersecurity system. Regulation 25-2 also allows for a more efficient update of the system in the future. The primary role is delegating different tasks and functions. Such strategy implies minimization of cyber attacks, lack of security problems, and intact data that stays private and confidential, which is crucial for the force to remain guarded and secure on every level.

Works Cited

“Army Regulation 25-2, Cybersecurity.”Army Mil, Office of the Army Chief Information Officer, 2019.

US Department of the Army. Army Cybersecurity: Army Regulation 25-2, 2019.

In order to better understand which advanced research methods can benefit a cybersecurity space, it is vital to recognize the core responsibilities of a cybersecurity project manager. The primary functions of a cyber security project manager revolve around the monitoring of information flows throughout a firm’s network (Tulane University, n.d.). Operations that occur within the network must pass through a functioning infrastructure that is facilitated by a manager and appropriate utilities. In more detail, this includes the maintenance and application of software upgrades, hardware systems, and network performance. A cybersecurity manager may also observe resource management within a firm. Critical operations within the firm must always have appropriate resources and a manager is often in the role of maintaining such necessary tools and materials. Cybersecurity managers may also allocate and use resources in an appropriate way to achieve tasks within the firm. Cybersecurity – specific resource management may include network bandwidth, employees that specialize in cybersecurity, and technological resources such as hardware or software.

These responsibilities indicate in which areas cybersecurity managers may require focused research. Areas that are especially relevant include risk assessment, cybersecurity market analysis, and performance measurements. Risk assessment revolves around testing current infrastructure and resources against common threats to cybersecurity in the workspace. These may reflect internal and external factors that contribute to increased risk for the firm’s operations and information network. The market analysis can refer to the ways in which cybersecurity is currently evolving and adapting within a larger industry in which the firm operates. This can allow managers to utilize gathered information to apply and upgrade their current infrastructure, software, and other utilized tools. Performance measurements refer to the internal functions of the company and ways in which cybersecurity management contributes to the accomplishment of critical tasks within the firm. There are other ways in which a cybersecurity manager may apply research methods to increase the productivity and quality of a firm’s cybersecurity presence, but these three functions are integral.

Advanced research methods include distinct skills such as categorization, description, comparison, explanation, evaluation, correlation, prediction, and validation. It also allows for the appropriate use of qualitative and quantitative studies and the understanding of which is relevant for what purpose (Benedetti, n.d.). Within the realm of cybersecurity, these elements can be usefully adapted in all three areas which are risk management, market analysis, and performance measurements While quantitative data may seem to be more prevalent, qualitative information is also important for a manager as it explores user experience within the firm. Advanced research methods that are specific within the area of cybersecurity include theoretical frameworks such as observational, mathematical, and experimental studies.

Observational studies include three distinct models for research which are exploratory, descriptive, and machine learning studies. All of these approaches center on the interpretation of collected observations regarding systems, models, theories, and designs of cybersecurity. Exploratory studies focus on the collection of cross-sectional, case-control, ecological, and longitudinal findings within the realm of cybersecurity (Edgar & Manz, 2017). Analysis bias is also an integral component of utilizing observational findings. Descriptive studies vary as they primarily focus on the in-depth understanding of specific cases of elements of cybersecurity. As such, they include case studies, surveys, and case reports. Their results often work as guides in regards to the selection of appropriate methods or models of cybersecurity for those working within the industry. Machine learning studies refer to purely quantitative approaches which implement computational algorithms in order to form usable models out of empirical data. This is especially beneficial in regard to performance measurement as it allows a firm to produce learning-based models that function within practical contexts.

Mathematical studies consist of theoretical research and the use of simulations to access findings. Theoretical studies are defined by definitions, propositions, predictions, interrelated concepts, and relationship and outcome models. As such, formal cybersecurity theoretical research frameworks develop existing and upcoming concepts specifically in relation to functioning cybersecurity. It is primarily focused on qualitative data. An adequate theory is testable, and as such, concepts developed within the theoretical research field must be provable within real-world contexts in order to remain relevant (Lu, 2018). With evolving technology, the use of simulation for research purposes has become more adept and influential in the translation of findings to developing real-life models. This is especially relevant for cybersecurity, which exists primarily within a digital world and is closely related to accurate simulations. Though all of the digital space cannot be mathematically modeled to create an accurate simulation, in regard to collecting accurate empirical data, simulations are likely the most appropriate choice.

Experimental research studies include experimental research methods, hypothetico-deductive research, and quasi-experimental research. Experimental models are the least applicable within the real-life contexts of cybersecurity but are still relevant within the sphere of findings that do not fit into prior research models (Benzel, 2021). Experimental methods may provide outcomes that address unfair or unexplored issues and components of current cybersecurity. As such, they may be prevalent within market research and risk management, especially as the capabilities of cybersecurity are continuously evolving.

References

Benedetti, A. (n.d.). Advanced research methods. UCLA. Web.

Benzel, T. (2021). Cybersecurity research for the future.Communications of the ACM, 64(1), 26-28. Web.

Edgar, T. W., & Manz, D. O. (2017). Research methods for cyber security. Elsevier.

Lu, Y. (2018). Cybersecurity research: A review of current research topics.Journal of Industrial Integration and Management, 3(4). Web.

Tulane University. (n.d.). What does a cybersecurity manager do? Tulane University. Web.

The field of cyber security is expanding and yet requires qualified personnel. Data protection is referred to by the more general phrase “information security.” Computer networks are shielded against hacker attacks and unauthorized access by cybersecurity experts. In order to achieve this, they work to foresee potential cyber risks, protect against them, and respond to actual security breaches. This paper analyzes the skills required to work in cybersecurity.

A Layer 2 network protocol called Spanning Tree Protocol (STP) guards against looping in a topology. STP was developed to prevent the issues when computers exchange data over redundant channels in a local area network (LAN) (Islam et al., 2021). A fundamental protocol called a spanning tree enables people to provide resilience to inter-switch communications. The problem can be when someone unintentionally connects things they should not, and this prevents catastrophic loops from occurring – a simple example of the understanding theory. During the interview, it is necessary to highlight the knowledge of working as a graph as a mathematical theory and the simple use of spanning trees in cybersecurity.

Cybersecurity analytics is viewed as a more sophisticated field straddling the border between security and statistics as data analysis methods are embraced more broadly. Cybersecurity data analytics demonstrates the ability to gather vast amounts of digital data (Sarker et al., 2020). It functions by extracting, displaying, and interpreting futuristic insights to enable early detection of catastrophic cyber threats and attacks. Utilizing Artificial Intelligence-based cyber-security algorithms that thwart these assaults using the same techniques and post-infiltration data analytics is the best way to deal with this emerging sophisticated security. The problem that the analyst has to deal with is, for example, when hackers try to steal a large amount of data, the data analyst must quickly fix this. In the interview, it is essential to mention what a data analyst is in the field of cybersecurity, as well as examples of the use of data analysis skills.

To summarize, IT professionals covering many aspects of cybersecurity may now have titles like cybersecurity engineer or specialist. Cybersecurity has been undergoing massive technological shifts and operations recently, and data science is driving the change. STP is essential since it prevents network loops and associated outages by blocking redundant links or paths. The concept of cybersecurity data science allows for making the computing process more actionable and intelligent compared to traditional ones in the cybersecurity domain. These skills are required in two areas: cloud software development and cybersecurity. An example would be working as a data analyst, requiring knowledge of network protocols and the ability to analyze data using the PYTHON language.

References

Islam, N., Shamim, S. M., Fazla Rabbi, M., Khan, S. I., & Abu Yousuf, M. (2021). Building Machine Learning Based Firewall on Spanning Tree Protocol over Software Defined Networking. In Proceedings of International Conference on Trends in Computational and Cognitive Engineering. Springer. 557-568. Web.

Sarker, I. H., Kayes, A. S. M., Badsha, S., Alqahtani, H., Watters, P., & Ng, A. (2020). Cybersecurity data science: an overview from a machine learning perspective. Journal of Big data, 7(1), 1-29. Web.

Introduction

Cybersecurity safeguards a business against the unlawful or illegal use of electronic information. It is also the technique of protecting essential systems and confidential material from data breaches. In addition, (Minaj 2021) states that cyber security is crucial because it encapsulates all aspects of safeguarding our confidential material, private details, proprietary information, data, and government and commercial data management from embezzlement and damage attempts by felons and adversaries. This paper discusses ransomware as a cybersecurity challenge for the financial services industry and possible solutions.

Ransomware

Ransomware is malicious code that hinders user privileges, clutching files or complete devices hostage through cryptography until the complainant pays a ransom. The complainant delivers a ransom return for decryption, allowing the user to access the encrypted information (Oz et al., 2022). Most ransomware attacks utilize social engineering techniques, such as emails, to enhance victim involvement. Emails are frequently the initial vertex of threat and a major vulnerability, as many subscribers lack the skills to recognize media manipulation. As a result of ransomware’s varying incidence with age, it has given rise to various variants of this attack.

Therefore Al-rimy (2018) suggested that the first ransomware attack occurred in 1989 when the Trojan AIDS was launched. Eventually, the advent of ransomware gave rise to a new sort of attack known as Denial-of-Resources.

Ransomware can also be used in computers, as O’Kane et al. (2018) insinuate that RSA encryption is commonly used to encrypt data on the user’s computer and connected devices. The second instance of ransomware from Joseph Popp in 1989 employed an encryption algorithm to seize users’ hard disks and extort payment. This was later studied to establish the decryption key and build mitigation to the encryption used by this threat (O’Kane et al., 2018). Encryption is more hazardous since once attackers gain access to a user’s data, neither security software nor a system restoration can retrieve them. In reaction to ransomware attacks, a business such as a bank may have to spend a substantial amount of money, which may cause customers to lose faith in the safety of their funds.

Other ransomware forms besides encryption include Scareware, screen locks, and mobile ransomware. First, there is Scareware, which consists of rogue antivirus software and technical support scams in which customers receive pop-up messages stating that a virus has been found and that the only way to eliminate it is to pay (Humayun et al., 2021). Therefore, Scareware employs fear to force users into paying. In most instances, if people do nothing, they will continue to receive pop-ups, but personal files will not be compromised.

Screen lockers, ransomware meant to lock a person out of their computer, come in second place. This text comes as a government official seal or the symbol of the police force or entity responsible for punishing cyber wrongdoing when the victim opens their computer. Often, it states that unlicensed software or illicit web content was discovered on the user’s computer and provides directions for paying an electronic fee (Richardson & North, 2017). Despite the appearance of the messages, it is well known that the government can never shut a user out of their device or demand money for criminal actions. If an individual is accused of copyright or other cybercrimes, the authorities will only take immediate action through the proper legal procedures and not pay a certain amount.

The third type of ransomware targets mobile devices explicitly, with attackers using mobile malware to steal information from a phone or block it from its victims. It is connected to encryption since the victim must pay a ransom to recover their data or open the device. Rajasekharaiah (2020) states that a recent RSA study discovered that in 2018, 80% of unauthorized mobile transactions surged dramatically with mobile app phishing or via email on the device. Accordingly, with mobile gadgets impacting each element of our existence and professional life, their danger perceptions likewise grow.

Solutions

It is possible to employ blockchain to address the ransomware outbreak and alter people’s perceptions about information storage and manipulation since it records transaction data in block-based architecture. Each block is produced by calculating the cryptographic password of the previous and merging it with the subsequent block of transaction code, which is also valuable for banks (Thamer & Alubady, 2021).

Suppose any unauthorized person attempts to alter the information in a partnership. In that case, the software and all other network participants will immediately detect the alteration, as it will consider all subsequent blocks invalid. The attacker cannot keep all the necessary files because the system is scattered across multiple users; even if they encrypt a node, administrators will close the metaphorical backdoor that the intruder entered and return the node to its former version (Information Resources Management Association, 2021).

Even for the most skilled cybercriminals, hacking a single blockchain server is very difficult since it requires access to each node in the network simultaneously. The same decentralized technology that acts as a firewall for the blockchain also creates trustworthy infrastructures for other kinds of assets (Information Resources Management Association, 2021).

Since blockchain technology improves payment security, it is gaining favor among financial professionals. By cutting out the middleman, blockchain technology has made money transfers more reliable and inexpensive. The time and cost associated with completing a money transfer may be reduced or eliminated using blockchain technology. Since no third parties are required to verify transactions with blockchain technology, the resulting payment solutions are far more expedient (Information Resources Management Association, 2021). The solution also provides greater reliability for institutions like banks and multinational corporations since there is no single source of failure.

Resources Required to Implement the Blockchain

The server and database are prerequisites for implementing blockchain. Initially, individuals must guarantee that all network servers operate efficiently. Servers play a crucial role in blockchain application maintenance (Information Resources Management Association, 2021). Secondly, documents are saved in databases, essential storage that must be appropriately maintained. The nodes are the third resource required to utilize the blockchain. This protocol works on a mentoring network whose design consists of nodes tasked with routinely maintaining these devices. Miners are an integral feature of a Solid evidence blockchain network. As they are frequently unaffiliated with the business, creating incentives that incentivize miners to maintain confirming transactions is essential.

Conclusion

In conclusion, numerous firms and the financial services industry face several issues, including cybersecurity assaults. Among these issues is ransomware, which restricts user privileges by holding files or entire devices hostage with cryptography until the victim pays a ransom. Staff and subscribers are educated on using blockchain to prevent ransomware, and ongoing security education programs must be implemented to combat cyber risks. Therefore, it is recommended that organizations and businesses have an excellent database to prevent any unauthorized access, thereby guaranteeing the money of their subscribers.

References

Al-rimy, B. A. S., Maarof, M. A., & Shaid, S. Z. M. (2018). Ransomware threat success factors, taxonomy, and countermeasures: A survey and research directions. Computers & Security, 74, 144-166. Web.

Humayun, M., Jhanjhi, N. Z., Alsayat, A., & Ponnusamy, V. (2021). Internet of things and ransomware: Evolution, mitigation and prevention. Egyptian Informatics Journal, 22(1), 105-117. Web.

Information Resources Management Association. (2021). Research anthology on blockchain technology in business healthcare education and government. IGI Global Engineering Science Reference (an imprint of IGI Global).

Manoj, K. S. (2021). Banks’ holistic approach to cybersecurity: Tools to mitigate cyber risk. Technology, 12(1), 902-910. Web.

O’Kane, P., Sezer, S., & Carlin, D. (2018). Evolution of ransomware. Let Networks, 7(5), 321-327. Web.

Oz, H., Aris, A., Levi, A., & Uluagac, A. S. (2022). A survey on ransomware: Evolution, taxonomy, and defense solutions. ACM Computing Surveys (CSUR), 54(11s), 1-37. Web.

Rajasekharaiah, K. M., Dule, C. S., & Sudarshan, E. (2020). Cyber security challenges and its emerging trends on the latest technologies. In IOP Conference Series: Materials Science and Engineering (Vol. 981, No. 2, p. 022062). IOP Publishing. Web.

Richardson, R., & North, M. M. (2017). Ransomware: Evolution, mitigation and prevention. International Management Review, 13(1), 10. Web.

Thamer, N., & Alubady, R. (2021). A Survey of Ransomware Attacks for Healthcare Systems: Risks, Challenges, Solutions and Opportunity of Research. In 2021 1st Babylon International Conference on Information Technology and Science (BISCUITS) (pp. 210-216). IEEE. Web.

Cybersecurity threats have become the unfortunate reality of the 21^st-century political landscape, and this issue requires a comprehensive response on behalf of all parties involved. Richards (2015) highlights the government’s leading role in the context of cyber threats while stating that the number of attacks is still on the increase (para. 2). This role must include decisive actions in terms of strict cybersecurity policy and legislation, as current measures have been insufficient so far.

Since it is the government’s duty to ensure the protection and well-being of citizens and organizations, this position seems reasonable. Richards (2015) says that electronic payment systems have been particularly vulnerable to hackers, which negatively affects related organizations and citizens who have trusted them with their money (para. 3). As a result, the American Transaction Processors Coalition addressed Congress calling for comprehensive measures in the field of cybersecurity (Richards, 2015, para. 6). This organization represents the interests of a large market and expresses common concerns for that sphere. Therefore, the government’s role would be to prepare an adequate response to cyber threats in light of the private sector’s interests.

At the same time, companies facing cybersecurity challenges have their own roles. Kurtz (2015) notes that most organizations attempt to cope with such issues on their own, whereas joint measures would possibly have more success (para. 2). The reasons for such a tendency stem from the companies’ unwillingness to engage in the information exchange process (Kurtz, 2015, para. 4). Accordingly, the private sector must demonstrate a certain level of transparency and communication to support the government’s cybersecurity efforts. As of now, the government considers a range of bills aiming at improving the United States cybersecurity framework, including the H.R.2331 SBA Cyber Awareness Act aims at supervising the cybersecurity of the Small Business administration (H.R.2331 – SBA Cyber Awareness Act, 2019). Overall, this issue remains topical and receives increasing attention on all levels, but additional efforts must be implemented to improve the results.

References

H.R.2331 – SBA Cyber Awareness Act. (2019). Library of Congress. Web.

Kurtz, P. (2015). Congress wants companies facing cyber attacks to share data, and it‘s not a moment too soon.Quartz. Web.

Richards, H. W. (2015). Congressional action on cybersecurity would send strong message to China.The Hill. Web.

Introduction

It is hard to disagree that the rapid and efficient development of technologies provides individuals and businesses with a vast number of new opportunities. Unfortunately, persons with harmful and unethical intentions also receive additional options and ways to steal or damage data, access secured networks, or perform other internet crimes. When a new trend or system gains popularity, more cyberattacks are expected to be attempted. The purpose of this research is to investigate the biggest cybersecurity threat facing companies over the next several years, attacks on the Internet of Things (IoT) systems and devices.

Discussion

Most organizations prefer to be modern and immediately adopt new technological advancements and options. However, corresponding security measures are not always considered, and the same is expected to happen with many businesses working with the IoT over the following several years. According to Marr (2022), “the more devices we connect together and network, the more potential doors and windows exist that attackers can use to get in and access our data” (para. 3). In 2023, 43 billion devices connected to the internet of things are predicted, and this number will be growing further, with many of these devices being used by major corporations (Marr, 2022).

The severity and significance of the identified threat cannot be overestimated. Being a huge network of interconnected devices, the IoT will contain a firm’s and its workers’ personal data, secret information, all operations and sales statistics, passwords, and other valuable data (Security Scorecard, 2021). Thus, if criminals get access to this system, the company will face extremely negative and harmful consequences, hoping they will not concern its clients, vendors, and partners (and they will).

Another aspect proving the scope of this threat in the upcoming years is the reduced possibility for organizations to avoid the implementation of the IoT. As indicated by Kulkarni (2021), the COVID-19 pandemic and the age of automation have made numerous minor and major businesses transform the way they work, adopting digitalization. Therefore, in 2023 and further, more firms will rush to adopt the IoT, fail to consider the best security measures and become the victims of skilled cybercriminals (Kulkarni, 2021). As a consequence, it is of vital importance to spread awareness of IoT safety tools and guidelines.

Overall, there are several ways for companies to reduce the identified threat. First of all, all employees who somehow use the Internet of Things devices and have access to the corporate IoT network are to be trained to utilize it correctly (Grammatikis et al., 2019). Unrequired functionality or devices should be disconnected, and workers who leave the firm should also immediately lose access to the network (Kulkarni, 2021). There should be regular changes of passwords and assessments of security (Grammatikis et al., 2019). Finally, all firmware, software, and devices have to be updated and verified by professionals.

Conclusion

To draw a conclusion, one may say that it is indeed likely that IoT attacks will become the most concerning and common cybersecurity threat over the following years. Since more and more companies are making the Internet of Things an integral part of their operations and communications, criminals will be tempted to take advantage of this tendency. Consequently, issues that may arise are insecure data transfer and storage, compromised information and networks, and other unpleasant or costly problems. Every business should take specific steps when implementing the IoT to avoid cyberattacks: train employees, follow safety measures, and trust professionals.

References

Grammatikis, P. I. R., Sarigiannidis, P. G., & Moscholios, I. D. (2019). Securing the Internet of Things: Challenges, threats and solutions. Internet of Things, 5, 41-70.

Kulkarni, S. (2021). How to secure IoT devices and protect them from cyber attacks. TechTarget. Web.

Marr, B. (2022). The top five cybersecurity trends in 2023. Forbes. Web.

Security Scorecard. (2021). 7 internet of things threats and risks to be aware of. Web.