• Title/Summary/Keyword: cyber behavior

Search Result 250, Processing Time 0.024 seconds

Behavioral Analysis Zero-Trust Architecture Relying on Adaptive Multifactor and Threat Determination

  • Chit-Jie Chew;Po-Yao Wang;Jung-San Lee
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.17 no.9
    • /
    • pp.2529-2549
    • /
    • 2023
  • For effectively lowering down the risk of cyber threating, the zero-trust architecture (ZTA) has been gradually deployed to the fields of smart city, Internet of Things, and cloud computing. The main concept of ZTA is to maintain a distrustful attitude towards all devices, identities, and communication requests, which only offering the minimum access and validity. Unfortunately, adopting the most secure and complex multifactor authentication has brought enterprise and employee a troublesome and unfriendly burden. Thus, authors aim to incorporate machine learning technology to build an employee behavior analysis ZTA. The new framework is characterized by the ability of adjusting the difficulty of identity verification through the user behavioral patterns and the risk degree of the resource. In particular, three key factors, including one-time password, face feature, and authorization code, have been applied to design the adaptive multifactor continuous authentication system. Simulations have demonstrated that the new work can eliminate the necessity of maintaining a heavy authentication and ensure an employee-friendly experience.

North Korea's Cyber Attack Patterns and Behaviors : An Analysis Based on Cyber Power and Coercion Theory (북한의 대남 사이버공격 양상과 행태 : 사이버파워와 강압이론을 통한 분석)

  • Yoon, Taeyoung;Woo, Jeongmin
    • Convergence Security Journal
    • /
    • v.18 no.1
    • /
    • pp.117-128
    • /
    • 2018
  • The purpose of this paper is to analyze the behavior of North Korea's cyber attack against South Korea since 2009 based on major international security theories and suggest South Korea's policy option. For this purpose, this paper applied the behavioral domain and characteristics of 'cyber power' and 'coercion dynamics' model, which are attracting attention in international security studies. The types of cyber attacks from North Korea are classified into the following categories: power-based incarceration, leadership attacks and intrusions, military operations interference, and social anxiety and confusion. In terms of types and means of cyber power, North Korean GPS disturbance, the Ministry of Defense server hacking and EMP are hard power with high retaliation and threat and cyber money cashing and ransomware are analyzed by force in the act of persuasion and incentive in the point of robbing or asking for a large amount of money with software pawns. North Korea 's cyber attack has the character of escape from realistic sanctions based on the second nuclear test. It is important for South Korea to clearly recognize that the aggressive cyberpower of North Korea is changing in its methods and capabilities, and to ensure that North Korea's actions result in far greater losses than can be achieved. To do this, it is necessary to strengthen the cyber security and competence to simultaneously attack and defend through institutional supplement and new establishment such as cyber psychological warfare, EMP attack preparation, and enhancement of security expertise against hacking.

  • PDF

Target Object Search Algorithm for Behavior-based Robot Using Direction Refinement (방향 보정올 통한 행동기반 로봇의 목표 탐색)

  • Min, Byeong-Jun;Sung, Joong-Gon;Won, Il-Young
    • Proceedings of the Korea Information Processing Society Conference
    • /
    • 2016.10a
    • /
    • pp.439-442
    • /
    • 2016
  • 제한된 환경에서 로봇이 동적 장애물들에 대해 능동적으로 대처하며 목표한 지점까지 도달하기 위한 알고리즘을 제안한다. 로봇은 행동기반 시스템으로 만들어져 주변 장애물들을 자율적으로 회피한다. ex-agent는 공중에서 주변 환경들을 modeling 한 뒤 cell-map을 만들어 $A^*$알고리즘을 통해 이동 경로를 설정한다. 이동 경로와 로봇의 진행방향을 비교하여 회전 방향을 조언해준다. 로봇은 ex-agent 로부터 받은 조언과 센서값들을 조율하여 장애물들을 능동적으로 회피하며 목표 위치를 찾아갈 수 있다. 실험은 시뮬레이터를 통해 이루어졌으며 장애물들에 대해 원반한 회피율을 보였다.

A Study on Analysis of Malicious Code Behavior Information for Predicting Security Threats in New Environments

  • Choi, Seul-Ki;Lee, Taejin;Kwak, Jin
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.13 no.3
    • /
    • pp.1611-1625
    • /
    • 2019
  • The emergence of new technologies and devices brings a new environment in the field of cyber security. It is not easy to predict possible security threats about new environment every time without special criteria. In other words, most malicious codes often reuse malicious code that has occurred in the past, such as bypassing detection from anti-virus or including additional functions. Therefore, we are predicting the security threats that can arise in a new environment based on the history of repeated malicious code. In this paper, we classify and define not only the internal information obtained from malicious code analysis but also the features that occur during infection and attack. We propose a method to predict and manage security threats in new environment by continuously managing and extending.

A Lifestyle-Routine Activity Theory (LRAT) Approach to Cybercrime Victimization: An Empirical Assessment of SNS Lifestyle Exposure Activities

  • Jihae Suh;Jiseon Choe;Jinsoo Park
    • Asia pacific journal of information systems
    • /
    • v.30 no.1
    • /
    • pp.53-71
    • /
    • 2020
  • The Internet and all of its possibilities and applications have changed individuals' lifestyles in relation to socializing, working, and how they spend their leisure time. Social networking sites (SNSs), such as Facebook or Instagram, are ideal settings for interacting with others but, unfortunately, they are also ideal settings for motivated offenders to commit cybercrimes. Thus SNS users may be more vulnerable to cybercrime. The purpose of this study is to investigate the occurrence of cybercrime victimization, specifically cyber-harassment, cyber-impersonation, and hacking. Self-report surveys collected from a sample of 147 respondents were examined using the moderated multiple regression analysis and a logistic regression analysis to determine possible relationships between SNS lifestyle exposure activities and cybercrime victimization. The results indicate moderate support for the application of lifestyle-routine activity theory (LRAT) to cybercrime victimization. Possible educational and managerial implications, as well as suggestions for future research, are discussed.

A Novel Abnormal Behavior Detection Framework to Maximize the Availability in Smart Grid

  • Shin, Incheol
    • Smart Media Journal
    • /
    • v.6 no.3
    • /
    • pp.95-102
    • /
    • 2017
  • A large volume of research has been devoted to the development of security tools for protecting the Smart Grid systems, however the most of them have not taken the Availability, Integrity, Confidentiality (AIC) security triad model, not like CIA triad model in traditional Information Technology (IT) systems, into account the security measures for the electricity control systems. Thus, this study would propose a novel security framework, an abnormal behavior detection system, to maximize the availability of the control systems by considering a unique set of characteristics of the systems.

A study on the psychosocial variables of the youth's addiction to internet and cyber sex and their problematic behavior (청소년의 인터넷 중독 및 사이버 성중독의 심리사회적 변인과 문제행동 연구)

  • Nam, Young-Ok
    • Korean Journal of Social Welfare
    • /
    • v.50
    • /
    • pp.173-207
    • /
    • 2002
  • The purpose of the study is to examine the impact of the youth's addiction to Internet and what behavior do they show depending on the extent of addiction, and further to analyze the reason of cyber sex addiction and the addiction level. The results are as following; First, 2% of the target students of the study was in severe internet addiction and 47% in the 'early addiction' which is in the risk of addiction. Second, the larger the youth's depression and impulsiveness was, the lower their self-esteem was, the poorer their parents' bringing-up attitude was, and the lower their satisfaction to school life was, the more deep they are addicted to internet. Third, the problem behavior due to Internet addiction were categorized into seven area of trouble; family, social, physical, psychological, public relation, cyber sex, and school life. It showed that 'heavily addicted group' had the most severe problems. Forth, as to the extent of cyber sex addiction, 0.7% of the youth was in severe 'heavy addiction' and about 7% was in the 'early addiction' which is in the range of addiction risk. Fifth, the higher the youth's personal depression and impulsiveness was, the lower their self-esteem was, the poorer their parents' couple relation and bringing-up attitude were, and the worse their relation with peers and teachers was, they got indulged into cyber addiction.

  • PDF

The Effects of Maternal Parenting Behavior and Preschoolers' Social Skills on Their Withdrawal Behavior (유아의 위축 행동에 영향을 주는 어머니 양육행동과 유아의 사회적 기술)

  • Kim, Ji-Hyun;Chung, Jee-Nha
    • Journal of the Korean Home Economics Association
    • /
    • v.49 no.9
    • /
    • pp.15-24
    • /
    • 2011
  • We investigated the effects of maternal parenting behavior and preschoolers' social skills on the children's withdrawal behavior. The participants were 92 mothers of five year-old preschoolers and their teachers from two day care centers and one kindergarten in Seoul and Gyeong-gi province. The data were analyzed by using descriptive statistics, correlation analysis, t-test and hierarchical regression. The major findings were summarized as follows: (1) there were no differences between the boys' and girls' withdrawal behavior. (2) the mothers' consistent parenting behavior and preschoolers' lack of assertive behavior explained the children's withdrawal behavior. In conclusion, maternal parenting behavior and preschoolers' social skills influence on the children's withdrawal behavior.

Securing a Cyber Physical System in Nuclear Power Plants Using Least Square Approximation and Computational Geometric Approach

  • Gawand, Hemangi Laxman;Bhattacharjee, A.K.;Roy, Kallol
    • Nuclear Engineering and Technology
    • /
    • v.49 no.3
    • /
    • pp.484-494
    • /
    • 2017
  • In industrial plants such as nuclear power plants, system operations are performed by embedded controllers orchestrated by Supervisory Control and Data Acquisition (SCADA) software. A targeted attack (also termed a control aware attack) on the controller/SCADA software can lead a control system to operate in an unsafe mode or sometimes to complete shutdown of the plant. Such malware attacks can result in tremendous cost to the organization for recovery, cleanup, and maintenance activity. SCADA systems in operational mode generate huge log files. These files are useful in analysis of the plant behavior and diagnostics during an ongoing attack. However, they are bulky and difficult for manual inspection. Data mining techniques such as least squares approximation and computational methods can be used in the analysis of logs and to take proactive actions when required. This paper explores methodologies and algorithms so as to develop an effective monitoring scheme against control aware cyber attacks. It also explains soft computation techniques such as the computational geometric method and least squares approximation that can be effective in monitor design. This paper provides insights into diagnostic monitoring of its effectiveness by attack simulations on a four-tank model and using computation techniques to diagnose it. Cyber security of instrumentation and control systems used in nuclear power plants is of paramount importance and hence could be a possible target of such applications.