Индустриски сајбер напади – Глобална безбедносна закана

Сајбер нападите за многу брзо време прераснаа во една од водечките закани врз комплетниот безбедносен систем како на национално, така и на глобално ниво. Полето на искористување на овие напади од ден на ден е сè поголемо, што е причинето пред сè од сè поголемата компјутеризираност на секоја гранка во индустријата. Сè поголема е свеста и кај најмалите познавачи на оваа проблематика дека сајбер закана може да предизвика огромни штети кои не би се разликувале од штетите нанесени со било каква воена операција, а сајбер оружјето, на многу посуптилен начин, може да одземе повеќе животи од било каков конвенционален напад. Владите низ целиот свет, како и сите големи светски организации, се подготвуваат да се справат со овој масивен технолошки повик за закани од глобални размери. Свеста за заканата и ризиците е висока, што условува, и покрај кризната економска ситуација во светски рамки, издвојување на голема сума на пари со цел подготовка за одговор на нови вонредни состојби кои би биле причинети од глобалните сајбер напади. Работата во овој труд се фокусира на сајбер нападите како глобална безбедносна закана со огромни импликации не само врз поединци или системите на една компанија, туку и врз комплетниот безбедносен систем на една држава, со можност за предизвикување на кризи од многу пошироки размери. Посебен акцент се става врз најновите индустриски напади, кои според најголем број истражувања од релевантни организации во оваа област, се ставени како најголеми моментални сајбер закани и меѓу најголемите глобални закани воопшто

Сајбер нападите како најсовремени закани врз воените операции и критичната инфраструктура

Овој труд се фокусира на сајбер нападите како една од најголемите загрижености во светот на глобалните безбедносни закани, со можности за импликации врз сите сфери, почнувајќи од поединците, индустриските системи, владините и државните институции, па сѐ до големите интернатионални организации. Сајбер нападите за многу брзо време прераснаа во една од водечките закани врз комплетниот безбедносен систем како на национално, така и на глобално ниво. Сè поголема е свеста и кај најмалите познавачи на оваа проблематика дека сајбер закана може да предизвика огромни штети кои не би се разликувале од штетите нанесени со било каква воена операција, а сајбер оружјето, на многу посуптилен начин, може да одземе повеќе животи од било каков конвенционален напад. Владите низ целиот свет, како и сите големи светски организации, се подготвуваат да се справат со овој масивен технолошки повик за закани од глобални размери. Свеста за заканата и ризиците е висока, што условува, и покрај кризната економска ситуација во светски рамки, издвојување на големи финансиски средства со цел подготовка за одговор на нови вонредни состојби кои би биле причинети од глобалните сајбер напади

A novel approach for mitigating the effects of the TCP SYN flood DDoS attacks

Today’s modern society greatly depends on computer systems. Security is a basic need for any computer system. This is more than acceptable if we consider that any disruption of the normal function of the computer and networks may lead to catastrophic consequences. The most frequently attacks conducting malicious activities against the networks and systems are the Distributed Denial of Service (DDoS) attacks. The paper concerns the TCP (Transmission Control Protocol) vulnerability that gives space for a type of DoS (Denial of Service) attack called TCP-SYN Flood DDoS attack which is well-known to the community for several years. It explains in more detail the TCP SYN Flood DDoS attacks and methods for preventing and mitigating the effects of these attacks. Furthermore, the paper proposes a novel method consisting of five modules which can be used for mitigation and protection against the considered TCP SYN Flood attack, as well as against other similar flooding based attacks

Computer Incidents Analysis based on Live Response Script

In the course of providing electronic evidence a number of commercial tools are used. The users of this tolls very often are not able to explain the way they are operating and the manner in which the report is generated. There is an increased need for developing and using of scripts and programs which can be used to provide information from information systems which are not switched off. At the same time the examiners must be able to explain the script functionality and generated result and information. In this paper we are presenting a developed script which can be used to perform a live forensics analysis used to analyze volatile data

Steganography in Support of the Global Terrorism

The way of conducting terrorism with the time is becoming more sophisticated. Namely, there are eight different ways in which contemporary terrorists use the Internet, ranging from psychological warfare and propaganda to highly instrumental uses such as fundraising, recruitment, data mining, and coordination of actions. Coordination of the terrorist activity is key for their success. However coordination of their global activity is going through global network controlled and often monitored by ISPs (Internet Service Providers), LEAs (Law Enforcement Agencies), and different security and intelligence agencies. The terrorists are aware that the messages sent to their perpetrators through the Internet can be intercepted very easily and thus their intentions can be detected. Therefore, they are using different methods to protect their information. The two most used techniques of information protection are cryptography and information hiding. This chapter will cover only one of the mentioned techniques which deals with information hiding, or more specific it will cover different steganography techniques and tools. It will give short review of several different steganographic tools. Furthermore, it will explain specific usage of some of these tools. The chapter also tends to explain the different steganalysis techniques that are striking a significant blow not only to the terrorist organizations, but also on any other individual or group that use steganographic techniques as a way for covert transmission of their malicious intents. The chapter will show not only practical usage of some specific steganalysis tools but also usage of some tools whose basic function are not connected with this technique but can give significant contribution in steganalysis process and determining the existence of hidden objects. $35.00 / €27.50 / £22.00 Add PDF to car

Cyber operations - a permanent part of the global conflict

It is more than obvious that the way of conducting operations with the time are becoming more sophisticated. The cyber operations through the most severe threats known as cyber attacks and cyber terrorism are major challenges to the fast technology development. Potential targets are systems which control the nation’s defences and critical infrastructure. The terrorist of the future will win the wars without firing a shot - just by destroying infrastructure that significantly relies on information technology. The fast grown of the Internet users and Internet dependence dramatically increased the security risks, unless there are appropriate security measures to help prevention. This book helps to understand the cyber operations conducted by terrorist organizations looking at their background, and seeing how these organizations or individuals are using the advantage of the new technology. Furthermore, the book explains the measures governments and multinational organizations are taking to help the fight against cyber terrorism

Novel First Responder Script as a Tool for Computer Forensics

The computer forensics as a branch of digital forensic pertaining to legal evidence found in computers and digital storage media. In order forensic acquisition to be more reliable it must be performed on computers that have been powered off. This type of forensics is known as ‘traditional’ or 'dead' forensic acquisition. However, this type of forensic cannot be used to collect and analyze the information which is not on the hard disk, or encrypted data. The disadvantages of the dead forensics can be overcome handling a live forensics acquisition process. There are many commercial and freeware tools which can be used to provide information based on live forensics acquisition. The problem with this tools is that in many cases the examiner cannot explain the script functionality and generated results and information. Because of this reason there is a increased need for developing and using script which can be easy explained and adapted to any analysis which should be made by the examiners. The paper presents a developed First Responder script which can be used to perform a live forensics analysis

Етиологија на семејното насилство

Апстракт: Насилството во семејството претставува сложен криминолошки, социолошки, виктимолошки и кривичноправен предизвик на современото општество. Високата зачестеност, сериозните последици, како на непосредните, така и на посредните жртви, тешкотиите при откривањето и процесуирањето на сторителите, прават да оваа појава бара неодложна општествена рекација. Самата проблематика на насилството во семејството упатува на комплексноста и опасноста, и потребата на интердисциплинарно проучување и дејствување на превентивен и репресивен план. Семејното насилство е сложена и повеќестепена условена појава која се развива на различни начини и има различни обележја. Со добро организирање на сите релевантни општествени фактори и нивни пристап во решавањето на овој сложен и тешко воочлив проблем би се намалила појавноста на насилството во семејството. Клучни зборови: семејство, семејни фактори, насилство, семејно насилств

Novel First Responder Digital Forensics Tool as a Support to Law Enforcement

There are many freeware and commercial tools which can be used to provide forensics information based on dead and live forensics acquisition. The main problem with these tools is that in many cases the investigator cannot explain the script functionality and generated results and information during the trial. Because of this reason there is an increased need for developing and using script which can be easy explained and adapted to any analysis which should be made by the examiners. The chapter presents a novel developed First Responder script which can be used to perform a live and dead forensics analysis in support of Law Enforcement during the investigation process

Cyber security issues of telecommunication infrastructure

We live in a well connected and technology dependent world. People, institutions, companies have increasing need for communication in everyday life. Global and seamless connectivity today is enabled by complex telecommunications infrastructure consisted of a large variety of different technologies which are in a continuous process of development and innovations. But, the global connectivity and easy access to modern technology also enables malicious users and their activities. These activities might be of different nature: starting from passive monitoring to destructive attacks disabling the normal operation of ICT (information and communication technology) infrastructure. Therefore, security issues of telecommunication infrastructure must be thoroughly addressed by all relevant stakeholders. Although each technology includes certain security mechanisms, it is necessary to create well designed security concept for the infrastructure as a whole, taking into consideration not only the technical issues, but also policy framework and legal aspects. The concept must be a subject of constant revision in order to be up to date to current threats. Therefore, the network infrastructure must be always monitored and analyzed, in order to create efficient measures against the security threats. The telecommunication infrastructure in the Republic of Macedonia is owned and operated by state institutions, telecom operators and providers, other companies and universities etc. All of them are faced with number of malicious activities and attacks exploiting vulnerabilities of the systems, which are well monitored and statistically analyzed. Also, all of them has defined more or less effective security concept including proactive and reactive measures. However, a common practice of cooperation and exchange of information and experience among the subjects is missing. A national strategy and policy framework are also missing. Their creation and devoted implementation would be beneficial for all stakeholders resulting in more effective and less expensive solutions as a response to cyber attack