Comprehensive Analysis of IoT Malware Evasion Techniques

Al-Marghilani, Abdulsamad

doi:10.48084/etasr.4296

Cited by 19 publications

(14 citation statements)

References 52 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…1) Malware: Malware encompasses malicious code or malicious software, and it is essentially a program that is covertly implanted inside a system with the purpose of disrupting the data so that the data would lose their integrity, confidentiality, or accessibility [50]. Malware is regarded as a major external threat to systems as it can affect the systems' operation [40,43,50]. Malware can cause widespread damage and disruption, and significant efforts would be required to fix this malware problem.…”

Section: Cyber Attacksmentioning

confidence: 99%

“…Malware can cause widespread damage and disruption, and significant efforts would be required to fix this malware problem. Malware comes in various forms including Trojans, virus, worms, spyware and ransomware [40,43,50]. The details are as follows:…”

Section: Cyber Attacksmentioning

confidence: 99%

“…• Trojans: This type of malware is also known as Trojan horse, and encompasses a seemingly legitimate and safe file, program, or piece of code (but indeed a malware) [43,51]. Usually, Trojans are bundled and transported within an authentic software, and are created for spying on or for stealing data from victims.…”

Section: Cyber Attacksmentioning

confidence: 99%

“…• Worms: Worms encompass self-contained programs spreading across networks and computers [43,51,53].…”

Section: Cyber Attacksmentioning

confidence: 99%

See 3 more Smart Citations

Predictions of Cybersecurity Experts on Future Cyber-Attacks and Related Cybersecurity Measures

AL-Hawamleh¹

2023

IJACSA

View full text Add to dashboard Cite

The Internet interconnections' exponential growth has resulted in an increase in cyber-attack occurrences with mostly devastating consequences. Malware is a common tool for performing these attacks in cyberspace. The malefactors would either exploit the present weaknesses or employ the distinctive characteristics of the developing technologies. The cybersecurity community should increase their knowledge on the types and arsenals of cyber-attacks, and security measures against cyberattacks should be in place as well. Also, advanced and effective malware defense mechanisms should be established. Hence, this study reviews cyber-attack types, measures and security precautions, and professional extrapolations on cyber-attacks future and the associated security measures. Semi-structured interviews were performed, involving five IT managers and nine Cybersecurity Consultants, to obtain the data. The study findings demonstrate prevention as key for data breach risk prevention. Knowledge of common attack methods and the use of cybersecurity software can facilitate individuals and organizations in thwarting hackers and in preserving their data privacy. Two-factor authorization by consumers and new back-end security protocols and security methods, including Artificial intelligence (AI) application, will encumber hacking attempts.

show abstract

Section: Cyber Attacksmentioning

confidence: 99%

Section: Cyber Attacksmentioning

confidence: 99%

Section: Cyber Attacksmentioning

confidence: 99%

“…• Worms: Worms encompass self-contained programs spreading across networks and computers [43,51,53].…”

Section: Cyber Attacksmentioning

confidence: 99%

See 2 more Smart Citations

Predictions of Cybersecurity Experts on Future Cyber-Attacks and Related Cybersecurity Measures

AL-Hawamleh¹

2023

IJACSA

View full text Add to dashboard Cite

show abstract

“…However, cybercriminals are innovating new tactics and are refining their attack techniques. As a result, phishing attacks are becoming more sophisticated and evading detection even by advanced technical countermeasures [9][10][11]. The literature discusses several possible ways to identify phishing attempts based on various clues that are visible with the naked eye.…”

Section: Phishing Threat Challengesmentioning

confidence: 99%

Anti-Phishing Awareness Delivery Methods

Darem

2021

Eng. Technol. Appl. Sci. Res.

View full text Add to dashboard Cite

Phishing attacks are increasingly exploited by cybercriminals, they become more sophisticated and evade detection even by advanced technical countermeasures. With cybercriminals resorting to more sophisticated phishing techniques, strategies, and different channels such as social networks, phishing is becoming a hard problem to solve. Therefore, the main objective for any anti-phishing solution is to minimize phishing success and its consequences through complementary means to advanced technical countermeasures. Specifically, phishing threats cannot be controlled by technical controls alone, thus it is imperative to complement cybersecurity programs with cybersecurity awareness programs to successfully fight against phishing attacks. This paper provides a review of the delivery methods of cybersecurity training programs used to enhance personnel security awareness and behavior in terms of phishing threats. Although there are a wide variety of educational intervention methods against phishing, the differences between the cybersecurity awareness delivery methods are not always clear. To this end, we present a review of the most common methods of workforce cybersecurity training methods in order for them to be able to protect themselves from phishing threats.

show abstract

APKOWL: An Automatic Approach to Enhance the Malware Detection

et al. 2023

View full text Add to dashboard Cite

Malicious software (malware) can steal passwords, leak details, and generally cause havoc with users’ accounts. Most of the current malware detection techniques are designed to detect malware at the code level of the software, where it is actually infected and causes damage. Additionally, current malware detection techniques at the design level are done manually or semi-automatically. This research aims to enhance these methods to detect malware at the design level automatically with a big dataset. The proposed method presents an automatic system for detecting SMS (Short Message Service) malware at the design which is called APKOWL. It is based on reverse engineering of the mobile application and then automatically builds OWL (web ontology Language) ontology. The proposed system is implemented in python and Protégé, and its performance has been tested and evaluated on samples of android mobile applications including 3,904 malware and 3,200 benign samples. The experimental results successfully verify the effectiveness of the proposed method because it has good performance in detecting SMS malware at the software design level. The proposed method obtained an accuracy of 97%, precision of 97.5%, and recall of 99%, outperforming the compared model in all performance metrics.

show abstract

Comprehensive Analysis of IoT Malware Evasion Techniques

Cited by 19 publications

References 52 publications

Predictions of Cybersecurity Experts on Future Cyber-Attacks and Related Cybersecurity Measures

Predictions of Cybersecurity Experts on Future Cyber-Attacks and Related Cybersecurity Measures

Anti-Phishing Awareness Delivery Methods

APKOWL: An Automatic Approach to Enhance the Malware Detection

Contact Info

Product

Resources

About