Dear Malik,

I don't know exactly your background in CyberSEcurity: are you an Engineer or a Lawyer or other.

As Cryptographer I could suggest something related Homomorphic Encryption or Q-Cryptography. Other interesting topics could be found in Blockchain and applications or its cryptographic implications...

Please let me know something more and maybe I can help you.

Massimo

Go through IoT security

Respected Dr. Massimo Bertaccini Ph.D,

Thank you for your response. About my background, I have worked 3 years in communication and surveillance department of police. I am now pursuing my MS in Information Security. I want my research to help me excel in my career (maybe as a private investigator for cyber crimes or a security expert). Please help me in this regard.

Thanking you,

Annas

IoT Security as our colleague suggested could be a good field of research for you.

For example the new techniques of detection and monitoring through camera or video-surveillance. You can also adding some cryptography inside if you are interested and AI recognition.

Thank you Massimo Bertaccini Ph.D and Md Alimul Haque for your valuable ideas.

IoT applications are very popular in almost all sectors. I suggest you to do research on cyber security in IoT Smart cities.

Dear Annas Malik,

we are working on network traffic analysis research and, from our point of view, encrypted traffic analysis is a current hot topic.

Best Regards,

Tomas

Dear Tomas Cejka,

Thank you for your response. Are you working on some model or framework regarding traffic analysis?

Regards,

Annas

We are working on IPFIX flow exporter: https://github.com/cesnet/ipfixprobe that we use to collect data&dataset preparation. The idea is to extend standard well-known "netflow"-like set of information (IP addresses, ports, etc.) with additional fields that allows to create various feature vectors for machine learning.

We are able to convert IPFIX into CSV format, which is the simplest way for offline experiments with machine learning in Jupyter notebooks.

Finally, it is possible to deploy a monitoring pipeline 1) IPFIX flow exporter, 2) IPFIX collector (https://github.com/cesnet/ipfixcol2), 3) NEMEA system (https://nemea.liberouter.org) - there we can create a prototype of the evaluated ML-based algorithm in form of NEMEA module that can process data coming through the IPFIX collector.

We have published some papers based on the mentioned technologies and there are many specific topics we are currently working on with our students: such as classification of (e.g., TLS) connections, recognition of DNS-over-HTTPS communication, ("more reliable") detection of bruteforce attacks. Thanks to the extended flow data with "per-packet information", it works much better than using simple "netflow".

The idea of per-packet information is known, as far as I know, it is originated by CISCO and their Joy flow exporter. However, we encounter some issues with Joy so we moved to our ipfixprobe. Anyway, CISCO published some interesting works about malware detection - I think it is a very good inspiration.

Annas Malik I am doing my Master's in Digital & Cyber Forensics and I have came across varied types of new fields relating to cyber security. This comprises of Internet of Things in Cybercrimes, Blockchain usages in network security and Artificial Intelligence as a tool for solving cyber crimes. I would recommend you the convergence or Integration of IoT, BC and AI in Network security or detecting of cyber crime as a topic of research.

I propose the following research topic on this issue: Improving cybercrime risk management, including data transfer on the Internet, with particular emphasis on protection against cybercriminal attacks using ransomware viruses and malware encrypting access to data contained on disks and memory media infecting the computer by mailing.

Have a nice day, Best wishes,

Dariusz Prokopowicz

Advanced Persistent Threat(APT) Is a hot topic in network security.

Read my recent article and share your feedback.

Paper title: Early Detection of the Advanced Persistent Threat Attack Using Performance Analysis of Deep Learning

Published in IEEE access journal

In the field of cybersecurity, I propose the following research topic: Analysis of the determinants of the increase in the risk of cybercriminal attacks on state administration institutions and corporations, enterprises, key public institutions, banks, etc., where ransomware viruses and malicious software distributed via e-mail are used.

Best regards,

Dariusz Prokopowicz

Hello Annas Malik .... some of the trending topics (not limited to) in cybersecurity field are:

1. Network intrusion and IoT security

2. Cyber / computer ethics and crime (w.r.t. to AWS, RW, AV and AI)

3. Web data mining and Online / data analytics

4. Malware detection and Cyber threats

5. BCT in networks and Cyber defense / counter measures

6. Cryptography and Information security

7. Encryption techniques and Cyber forensics

8. Cyber intelligence and Strategic operations

9. Online / cyber communication and vulnerabilities

10. Offloading algorithms and Security of smart devices

Hope this helps and best wishes for your upcoming academic journey !

Smart grid security

Today’s electrical utilities face the demands of a rapidly transforming industry, including increasingly stringent security regulations and power grid management requirements. On top of this, they must also assure 24x7 reliability and availability of power. To meet these needs, utilities are increasingly turning to smart grid technologies, which in turn introduce another set of challenges: the need for visibility and security controls. When building out a smart grid, electrical utilities must actively address security concerns. Security through obscurity is not going to cut it when it comes to protecting critical infrastructure. Its reliance on design or implementation secrecy as the main method of providing security actually makes the grid more vulnerable. A connected grid with a thoughtful defense-in-depth approach to connectivity, operations, and management is best practice. This paper provides a guide to smart grid security...

Identity and access management is pushing application security past single-factor authentication (a password) and even multi-factor authentication to a risk management model...

Identity and access management systems are making it easier for software developers to secure their applications, for employees and customers to access the tools and services they need and for companies to protect their systems and data...

https://www.techrepublic.com/article/identity-is-replacing-the-password-what-software-developers-and-it-pros-need-to-know/?ftag=TRE684d531&bhid=26515897512689358169344413145444&mid=13498352&cid=959017973

Hi Annas Malik . The hot topics are:

• Information Security
• Security Architecture .
• Cybersecurity Engineering
• Malware Analysis
• Penetration Testing
• Computer Forensics Analysis.
• See the link: https://www.simplilearn.com/tutorials/cyber-security-tutorial/cyber-security-jobs

An interesting cloud security research area is "Understanding cloud misbehavior":

Our initial findings are published here.

https://ieeexplore.ieee.org/abstract/document/9335812

With pressures on their time, an ever-changing research ecosystem to understand, and having to manage through a global pandemic, it’s perhaps no surprise librarians are not fully aware of the cyber-security threats sites like Sci-Hub pose. This makes the help organizations such as SNSI can provide that more important. By providing security checklists, training, information on risks, and opportunities for collaboration, librarians can increase their awareness of cyber security issues, the ‘flags’ to look out for, and build their knowledge in the actions they can take to protect their data and their network...

https://scholarlykitchen.sspnet.org/2022/03/21/guest-post-cybersecurity-and-academic-libraries-findings-from-a-recent-survey/?informz=1

Cybersecurity and AI: A new path for regional research and futures

“We share the ambition to embed human values into the heart and operation of digital systems for a variety of applications including agriculture and health. This includes establishing methods to verify their integrity, accountability and resilience thereby ensuring that these systems, and the data which feeds them, ultimately operate in the service of successful, democratic, digitally empowered yet human-centred communities. This can only be achieved through rigorous problem-oriented research, which goes hand-in-hand with practice.”

https://pacetoday.com.au/cybersecurity-ai-new-way-forward-regional-research-futures/

Cybersecurity for Smart Buildings

Smart buildings are changing the way we live and work. And with those changes come new challenges, such as protecting buildings, organizations and people from cyber attacks. The Internet of Things (IoT) and increased connectivity can make buildings vulnerable to cyberattacks, if not adequately protected. A holistic approach to building cybersecurity is essential for building owners and operators...

https://app.response.siemens.com/e/es?s=2033604275&e=2566751&elqTrackId=62d7b9f91d5a411693b2506548de2ddb&elq=9152ed63366d4a259ff046530b7290e4&elqaid=49548&elqat=1

Everything comes with risks. Cybersecurity attacks, vulnerability exploits, and digital espionage have crossed the boundaries into what were once considered off-limit targets...

This edition of AUTOMATION 2022: Cybersecurity & Connectivity shows you strategies and solutions for securing OT/ICS infrastructure. Discover the top 25 ICS vulnerabilities and how to counteract them, how to mitigate industrial network vulnerabilities, best practices for cybersecurity risk reduction, risk assessment strategies, and advice on how to build an appropriate cybersecurity plan...

https://www.automation.com/CMSPages/Newsletters/GetEmailBrowserContent.ashx?issueGuid=75db2117-1d20-472e-85da-83c8550d8860&recipientEmail=jacic%40mts.rs&hash=7cade2c6668d378e821475efd1b38fe91a77ef44d265b4bff15a99b0706c51c8

In the "zero trust access" (ZTA) network security model, no one inside or outside the network should be trusted until their identify has been verified. Zero trust functions under the presumption that threats, both inside and external to the network, are ever-present realities. Additionally, zero trust presupposes that any attempt to access a network or application poses a threat. Network administrators’ thinking is influenced by these presumptions, which leads them to develop strict, trustless security mechanisms. Controlling access to apps is the primary goal of zero trust network access (ZTNA), a component of the zero trust model. To ensure that users and devices comply with the organization’s policy for accessing an application, ZTNA extends ZTA principles to validate users and devices before to each application session. For the greatest levels of verification to be maintained, ZTNA supports multi-factor authentication...

https://www.automation.com/en-us/articles/november-2022/zero-trust-securing-industrial-control-systems

Testimony for 2023 Senate Energy Committee hearing on cyber security of the grid

The March hearing included the need for accurate industry incident sharing with the intelligence community through the Energy Threat Analysis Center (ETAC)...

https://www.controlglobal.com/blogs/unfettered/blog/33003368/testimony-for-2023-senate-energy-committee-hearing-on-cyber-security-of-the-grid?utm_source=CTRL+Control+Global+eNews&utm_medium=email&utm_campaign=CPS230414122&o_eid=4175B5775701D0Y&rdx.ident[pull]=omeda|4175B5775701D0Y&oly_enc_id=4175B5775701D0Y

A set of generative AI cyber tools designed to help security researchers in reverse engineering, debugging and other areas of work have been made available for the community to experiment with...

The security community is being invited to explore the potential of generative artificial intelligence (AI) to act as a useful tool in its research efforts, with the release of a number of prototype tools developed by Tenable, which are now available to check out on Github.

In an accompanying report titled How generative AI is changing security research, the firm’s research team shares how it has been experimenting with generative AI applications to create efficiencies in reverse engineering, code debugging, web application security and visibility into cloud-based tools...

https://www.computerweekly.com/news/365535664/Tenable-opens-playground-for-generative-AI-cyber-tools?utm_campaign=20230428_Microsoft+fails+to+get+CMA+thumbs-up+on+Activision+deal&utm_medium=email&utm_source=MDN&source_ad_id=365535664&asrc=EM_MDN_266210403&bt_ee=jEfg%2Bwb4PK8x%2BA8eUQc9VF0ij6zMerHoPNDfKNXezPeXz%2F9hYaXadmLcI8Ukk7JIQ33G1xUTjmBSr8lTnmlC%2BQ%3D%3D&bt_ts=1682850608979

Whether you’re an individual or a company, safeguarding your data is of utmost importance. One effective approach to protect sensitive information and systems is by utilising tools powered by artificial intelligence (AI). These tools can detect and prevent the spread of malicious software such as Trojans, viruses, and rootkits.

By employing AI tools, organisations can promptly identify malicious activities and acquire information about the source of the threat, allowing them to take appropriate action...

https://www.computerweekly.com/feature/Why-we-need-advanced-malware-detection-with-AI-powered-tools?utm_campaign=20230607_Europe%E2%80%99s+cellular+networks+viable+alternatives+to+broadband%2C+LEO+satellites&utm_medium=email&utm_source=MDN&source_ad_id=366536018&asrc=EM_MDN_269397845&bt_ee=M8hNv41z0HJf85tjCbnZid3fMGUZBS7l%2FEOcoAEavtnBhhEAgW%2BIBeuV6aVik%2FcGYjHRMnsnpLubSbUS5ekV3g%3D%3D&bt_ts=1686136060815

A large language model like ChatGPT reads everything that is on the public internet. The implication is that it will be reading people’s social media profiles, seeing who they interact with, their friends, what they like and do not like. Such AI systems have the ability to truly understand someone, based on the publicly available information that can be gleaned across the web...

Darktrace discovered that email attacks are becoming much more sophisticated and personalised. He says: “It's not just difficult for humans to spot these scams and attacks." It's becoming impossible, he warns: “What do you train people on if you tell them to look out for spelling mistakes and generic scams? Those days are over because there's so much contextual information now available on the internet.”

https://www.computerweekly.com/news/366539475/The-security-interviews-Exploiting-AI-for-good-and-for-bad?utm_campaign=20230622_Post+Office+will+not+oppose+potential+Horizon+conviction+appellants&utm_medium=email&utm_source=MDN&source_ad_id=366539475&asrc=EM_MDN_270485004&bt_ee=TDPRRjg6tZ6rZ1ADkbV%2B1cuW%2Fobrw4mMWNthPU%2F6sDoHzMzMUZq63U%2FYK9W8q%2F%2BV3%2B3QayGOhQqvQItPmFvvug%3D%3D&bt_ts=1687429743985

Hacking insecure process sensor systems may have affected the Chernobyl nuclear plant site

The compromise of Chernobyl’s process sensor readings reinforces the immediate need for the government and industry cybersecurity communities to address the cybersecurity gaps in control system field devices...

This is not the first time process sensor readings have been intentionally or unintentionally compromised, nor is it the first time process sensors readings have been compromised in a nuclear application. These cases demonstrate that the gamma sensing system being hacked causing the observed radiation spikes around Chernobyl is a technologically credible scenario...

https://www.controlglobal.com/blogs/unfettered/blog/33009669/hacking-insecure-process-sensor-systems-may-have-affected-the-chernobyl-nuclear-plant-site?utm_source=CTRL+Control+Global+eNews&utm_medium=email&utm_campaign=CPS230817045&o_eid=8360I8613690H9M&rdx.ident[pull]=omeda|8360I8613690H9M&oly_enc_id=8360I8613690H9M