Question

Do research on the current software vulnerabilities in cyberspace and the paramount to mitigate these vulnerabilities in the initial stages of software design.

write a paper (1250 to 2750 words) should include:

• A brief summary of the selected articles
• A clear description of cyber vulnerabilities you have identified from your research.
• Details on how these vulnerabilities had been exploited
• Any implications or problems you have identified for the affected environment.
• A summary section that provides any conclusions you have reached.

Answer 1

Answer-

The cyber vulnerabilities we identified from research. In the cyber security world, vulnerabilities are unexpected defects in software programs or operating systems. Weak computers can be the result of improper computer or security configuration and programming errors. If left unwell, vulnerabilities create security holes that cybercrime can exploit. In which hackers write code to target a specific security weakness. They package it into malware as an exploit. Malicious software takes advantage of vulnerabilities to compromise computer systems or cause unexpected behavior. In most cases, a patch from the software developer can easily fix this.

Exploitation of software vulnerabilities: A security vulnerability is a weakness, defect, or error found within a security system that is the ability to be leveraged by a threat agent to compromise a secure network. There are several security vulnerabilities, but some common examples are: Broken Authentication: When authentication credentials are compromised, user sessions and identities can be hijacked by malicious actors to hold them as the original user. Cross-site scripting: Much like SQL injection, a cross-site scripting (XSS) attack also injects malicious code into a website. However, a cross-site scripting attack targets website users and not the actual website itself, which puts the user's sensitive information at risk of theft. SQL injection: As one of the most prevalent security vulnerabilities, SQL injection attempts to gain access to database content through malicious code injection. A successful SQL injection can allow attackers to steal sensitive data, spoil identities, and participate in a collection of other harmful activities. Security Misconfiguration: Any component of a security system that is leveraged by attackers due to a configuration error can be considered a "security misconfiguration". Cross-site request forgery: The purpose of a cross-site request forum (CSRF) attack is to induce an authenticated user to perform an action that they do not intend to do. This, combined with social engineering, may accidentally provide users with malicious data with a malicious actor.

Conclusions: This survey focuses on two aspects of information systems: understanding emerging technologies and vulnerabilities in emerging technologies and emerging threats in telecommunications technologies and information technology. Emerging threats in emerging technologies, such as social media, cloud computing, smartphone technology, and critical infrastructure, have often been found to take advantage of their unique features. We described the characteristics of each of the emerging technologies and detected malware in various ways that spread to these new technologies. For example, since most of these emerging technologies provide services via online, some common attacks exploit browser security through malware hidden within rapid expansion or exist in scripting languages to access confidential data. Huh. Advisers are also switching their battleground from desktop to other platforms including mobile phones, tablet PCs and VoIP to avoid detection. The ensuing mobile malware has grown rapidly over the past few years with increasing numbers of mobile users and sophistication of mobile applications. Scams using social engineering are increasing. Popular social networking sites such as Facebook, Twitters, and others have been used as distribution mechanisms to get users to install or spread malware. More organized attacks have been reported through the use of botnets. Since the effect of such damage is much larger than that of personal attacks, there is growing concern to fail botnets. Recent statistics also suggest that an increasing number of cyber systems have grown for a specific system, for example using command and control systems, knowledge and personnel. As more and more people are connected on the Internet, understanding all levels of users, which includes both computing system experts and non-experts, and security mechanisms has been suggested to develop their level of confidence. The rapid expansion of the amount of personal information on the Internet in recent years has led to the emphasis on maintaining user privacy as an important future research by many security experts. Rather than trying to fix a specific problem on existing Internet and computing systems, more innovative approaches to thinking "a big picture" or "out of the box” have been suggested, as some evidence suggests that today's modern The efficiency of the technique is saturated. And not on any greater scale using traditional incremental approaches. The development of the next generation of secure Internet and reliable systems has been suggested as important areas of research for future viewing. The development of identity management and traceback techniques at the global level has enabled tracking adverse conditions so that an important issue can be addressed in the future.

Hope you liked the answer! ?