A survey of emerging threats in cybersecurity
A survey of emerging threats in cybersecurity
复制标题
DOI：
10.1016/j.jcss.2014.02.005
复制
发表时间：
2014-08-01
影响因子：
1.1
通讯作者：
Nepal, Surya
中科院分区：
文献类型：
--
作者：
Jang-Jaccard, Julian;Nepal, Surya
互联网互联的指数级增长导致网络攻击事件显著增加，往往造成灾难性和严重后果。恶意软件是在网络空间实施恶意意图的主要武器，要么利用现有漏洞，要么利用新兴技术的独特特征。开发更具创新性和有效性的恶意软件防御机制已成为网络安全领域的迫切需求。为了帮助实现这一目标，我们首先概述了现有硬件、软件和网络层中最容易被利用的漏洞。接下来是对现有最先进的缓解技术的批评，说明它们为什么有效或不起作用。然后，我们讨论了新兴技术中的新攻击模式，如社交媒体、云计算、智能手机技术和关键基础设施。最后，对未来的研究方向进行了展望。爱思唯尔公司2014年版权所有版权所有。
The exponential growth of the Internet interconnections has led to a significant growth of cyber attack incidents often with disastrous and grievous consequences. Malware is the primary choice of weapon to carry out malicious intents in the cyberspace, either by exploitation into existing vulnerabilities or utilization of unique characteristics of emerging technologies. The development of more innovative and effective malware defense mechanisms has been regarded as an urgent requirement in the cybersecurity community. To assist in achieving this goal, we first present an overview of the most exploited vulnerabilities in existing hardware, software, and network layers. This is followed by critiques of existing state-of-the-art mitigation techniques as why they do or don't work. We then discuss new attack patterns in emerging technologies such as social media, cloud computing, smartphone technology, and critical infrastructure. Finally, we describe our speculative observations on future research directions. Crown Copyright (c) 2014 Published by Elsevier Inc. All rights reserved.