Cyber Security
Cyber Security
A Research Paper
Presented to
Professor
In Partial Fulfillment
BY:
Capa, Jazzine C.
Miralles, Kc Matthew P.
INTRODUCTION
2017). In our modern, interconnected world, the digital landscape has become integral
to our lives. Almost all organizations using internet or computer connectivity, including
comes increased vulnerability to cyber security threats. Cyber security threats refer to
malicious activities that target digital systems and networks to gain unauthorized
access, disrupt operations, steal data, or cause harm. These threats can come in
various forms, including malware, phishing attacks, data breaches, ransomware, and
cyberbullying attacks. Their motives can range from financial gain to political or
their digital assets. This involves a combination of preventive, detective, and responsive
According to a report, 83% of the United States retailers are vulnerable and could easily
data, which is the most valuable asset in e-commerce. They can either steal the data
from the database of online stores, malware, ransomware, and e-skimming. Regularly
analyze logs and detect anomalies. However, even with preventive and detective
breaches. Immediate action in the event of a breach can minimize the damage and
recovery time.
The cyberattack on Windows software took user data hostage in exchange for Bitcoin
cryptocurrency (Smart 2018). The background of the study on cyber security focuses on
breaches. With the rapid advancements in technology and the growing reliance on
digital systems, the risk of cyber threats has become a critical concern for individuals,
organizations, and governments worldwide. The cyber-attack theory (CAT) believes that
information is the central part of any cyber-attack and states that the success of cyber-
attacks depends on the information owned by the attackers at the time of the attack and
the information modified or gained during the attack (Zhuang et al., 2015). Cyber
security refers to the practice of protecting computers, servers, networks, and digital
security protocols to safeguard data and systems against various cyber threats such as
viruses, malware, phishing attacks, ransomware, and unauthorized access. The study
aims to explore and analyze the evolving nature of cyber-attacks, the vulnerabilities
organizations, and society as a whole. It also seeks to identify and develop effective
strategies, tools, and frameworks to mitigate cyber risks and enhance security
General questions:
• How can cyber security maintain the discipline between users and creators?
Specific questions:
1. How can users be responsible and take action for their security through social
2. What changes can creators make to maintain good standards and provide cyber
Individual Users, the findings of this study will empower individual users to understand
and navigate the complex landscape of cybersecurity threats. It will provide them with
valuable insights on how to protect their personal information, privacy, and digital
Businesses and Organizations, Businesses and organizations will benefit from the
study by gaining a deeper understanding of the evolving cybersecurity threats that can
impact their operations. This knowledge will help them implement more effective
security measures, protect sensitive data, and maintain the trust of their customers and
stakeholders.
cybersecurity professionals, equipping them with the latest insights into emerging
threats and effective response strategies. It will aid them in staying at the forefront of
cybersecurity practices.
Educational institutions can use the study to enhance their cybersecurity curricula
and training programs. It will provide students with a foundational understanding of the
can draw upon the study's findings to shape informed policies and regulations that
bolster national and international cybersecurity efforts. It will aid in the development of
community will benefit from the study's insights and best practices for addressing
Research and Innovation, the research will contribute to the body of knowledge in the
field of cybersecurity, offering a foundation for future research and innovation. It will
solutions.
National Security, as cybersecurity threats have implications for national security, the
study's findings can help government agencies and security experts in safeguarding a
Protection of Digital Assets, With the increasing reliance on digital assets, the study
will aid in the protection of intellectual property, financial assets, and sensitive data. This
Prevention of Financial Losses, the research can assist in preventing financial losses
whole.
Public Awareness, the study will contribute to raising public awareness about
cybersecurity threats and the need for responsible online behavior. It will empower
Enhancing National Security, the digital landscape has become an arena for state-
sponsored cyber espionage, warfare, and influence campaigns. By studying threats and
responses in this context, countries can identify and address weaknesses in their
holds immense significance for a wide range of stakeholders by promoting digital safety,
Threats: in the context of cybersecurity are potential risks or vulnerabilities that can be
exploited by malicious actors to compromise digital security. These threats can include
can involve preventive measures, detection, incident response, and recovery efforts.
The contemporary digital landscape: refers to the current state and environment of
digital technology, including the internet, cloud computing, social media, and
data, software, intellectual property, online accounts, and digital currency. These assets
exploit digital systems. It includes viruses, worms, Trojans, ransomware, and other
harmful programs that can infiltrate and compromise computers and networks.
Phishing attacks: are deceptive attempts to trick individuals into revealing sensitive
information, such as login credentials or financial details. These attacks often involve
sensitive data, resulting in its exposure, theft, or misuse. Data breaches can have
Denial of Service (DoS) Attacks: are cyberattacks that aim to disrupt the availability of
digital services or networks. Attackers overwhelm a target system with a high volume of
Digital Privacy: refers to the protection of an individual's personal information and data
in the digital realm. It encompasses the right to control the collection, use, and sharing
Cyber Resilience: is the ability of digital systems and organizations to withstand, adapt
facilities required for the functioning of a business, region, or nation. This includes
water and sewage), energy grids, and essential public services (e.g., schools and
hospitals). It forms the backbone of a society's functionality and plays a vital role in its
computer system that can be exploited by cyber-attackers. These weaknesses can exist
security breaches.
ransom from the victim in exchange for the decryption key. Ransomware attacks have
the potential to cause severe data loss, financial harm, and operational disruptions for
critical factor in assessing the potential impact and defense strategies required against
cyber threats.
cybersecurity tool designed to monitor network traffic and devices for indicators of
policies. It plays a crucial role in early threat detection and incident response.
Phishing: is a fraudulent cyber practice where malicious actors send deceptive emails
messages are designed to trick individuals into revealing sensitive personal information,
such as passwords, credit card details, or confidential data. Phishing attacks exploit
created by cyber criminals with the intent to compromise the security, integrity, or
functionality of computers and computer systems. Malware can include viruses, worms,
Trojans, spyware, and ransomware, and is employed for purposes such as data theft,
CHAPTER 2
THEORETICAL FRAMEWORK
Human: Cyber security issues occur due to humans (employees, attackers, and
consumers) either lacking the proper knowledge and skills to use the e-commerce
technology or not following the protocols related to Cyber security (Zhuang et al., 2015).
damage, or theft of electronic data, software, or hardware (Schatz et al., 2017). One of
the most significant challenges e-commerce faces from the beginning is cyber security
threats (Kianpour et al., 2021). This theoretical framework delves into the fundamental
concepts, principles, and strategies that underpin cybersecurity, aiming to provide a
strategies and policies in an era where cyber threats are pervasive and constantly
evolving.
landscape continues to expand and evolve at an unprecedented pace. With the ubiquity
of the internet, the proliferation of connected devices, and the increasing dependence
strategies, and concepts that form the foundation of cybersecurity. They also need to
have information about the technology and organization and must know the
minimized as the employees and customers will always be alert where there is some
vulnerability. And to a greater extent, they are well aware of the attackers, and what and
how they attempt (Zwilling et al., 2022). In the age of information, where data is a
cybersecurity not only helps in securing digital assets but also in ensuring the privacy
confidentiality, integrity, and availability, often referred to as the CIA triad. It explores the
various layers of cybersecurity, from network security to application security, and from
endpoint security to cloud security. Understanding these layers is essential for building
a comprehensive security posture. Furthermore, the framework will delve into the
aspect of cybersecurity is not just preventing threats but also being prepared to respond
effectively when breaches occur. The study of ethical hacking, penetration testing, and
framework will also explore the legal and ethical aspects of information security. Privacy
handling cyber threats are all part of the broader context of cybersecurity.
navigate the complex and dynamic landscape of digital security. As cyber threats
is not only beneficial but essential for mitigating risks and safeguarding digital assets.
This framework is a stepping stone towards a safer and more secure digital future. The
The principles of confidentiality, integrity, and availability, along with the layers of
security that span networks, applications, endpoints, and the cloud, are fundamental to
significance of risk management, threat assessment, and incident response, as they are
and being prepared for potential breaches. In the ethical and legal realm, the framework
highlights the need for individuals and organizations to not only protect their data but
also do so in a manner that complies with the law and respects ethical boundaries.
As technology continues to advance, and cyber threats become more sophisticated, this
to navigate the digital world with confidence and resilience, making it more secure for
all.
REVIEW OF RELATED LITERATURE AND STUDIES
Digital Landscape," the review of related literature and studies provides valuable
insights into the various aspects of cyber threats, their implications, and the strategies
need to identify and analyze the causes of potential incidents and accidents within each
component of a system. By doing so, organizations can maximize their learning from
these incidents, ultimately leading to improved system safety and security. While this
identifying the root causes of incidents, thereby saving time and resources in the long
run.
as described by Thomas (2016), is an approach that takes into account the interaction
of each component within a system to enhance its safety and security. This
methodology is integral in making systems safer and more secure, as it allows for a
DDoS Attacks and Service Disruption: Distributed Denial of Service (DDoS) attacks, as
detailed by Anshari et al. (2022), are a prevalent cyber threat. In a DDoS attack,
overwhelm web resources, causing service disruption. In sectors like e-commerce, this
method is used to flood online stores with excessive traffic, rendering them temporarily
inaccessible to customers. These attacks often involve requests from multiple sources,
essential for safeguarding computer systems and electronic data from various threats,
particularly vulnerable due to the sensitive nature of online transactions and the critical
cybersecurity measures.
human factors. Metalidou et al. (2014) stress the importance of adequately training and
information systems. This training helps minimize behavioral risks associated with
human actions.
behavior can introduce security risks. Organizations must continually strive to prevent
and mitigate threats to information security arising from human actions. This involves
landscape.
understanding of the multifaceted nature of cybersecurity threats and the need for
If it ignores the need for something that should be done to address cybersecurity
threats, it may become a cause of potential damage in the future (Guembe et al., 2022).
addressing these concepts is crucial for safeguarding digital systems and networks.
In the modern, interconnected world, the digital landscape has become an integral part
of our lives. It has revolutionized the way we communicate, conduct business, and
access information. However, this increased reliance on digital technologies has also
can also cause high costs. Under the General Data Protection Regulation (GDPR),
companies are obliged to protect personal data and safeguard the data protection rights
of all individuals in the EU area. The GDPR allows data protection authorities in each
country to impose sanctions and fines on organizations they find in breach. “For data
breaches, the maximum fine can be €20 million or 4% of global turnover, whichever is
these threats, which encompass various malicious activities targeting digital systems
and networks. Cybersecurity threats range from malware and phishing attacks to data
breaches and cyberbullying incidents. The motives behind these threats can be diverse,
Detective measures include monitoring networks and systems for potential security
breaches, employing intrusion detection systems, and using security information and
incident response plans, play a crucial role in minimizing the damage and recovery time
suitable and safe technology, due to which cybersecurity risks increase (Guembe et al.,
2022). The research underscores the importance of continuous evolution in the field of
cybersecurity. As threats become more frequent and sophisticated, the need for cutting-
edge solutions and strategies is evident. Additionally, the human element cannot be
The study explores various related literature and studies, underlining the
interconnectedness between family dynamics and social behavior. The impact of family
threats we face. The paper underscores the need for a holistic approach, combining
technology, training, and an awareness of the human element to safeguard our digital
assets effectively.
CONCEPTUAL FRAMEWORK
al., 2021), assisting in academics and administration tasks (Ahmad et al., 2022) to
business (Ibrahim et al., 2014), from marketing to industry (Sayed et al., 2020), from
health to space sciences, etc. Trade and commerce are tremendously influenced by
electronic (den Hond and Moser, 2022). Information and communication technologies
(ICT) are the driving force behind the evolution of modern societies. They underpin the
alike. ICTs have become not only ubiquitous but essential for progress. Smart devices,
(Team, 2022). The statistics show that the investment to address the issue is increasing
each year, but the number of attacks is also growing. It means that the problem can’t be
resolved without advanced technology. Digital technology and internet connectivity are
being systematically integrated into all verticals of the private and public sectors
flexibility. As a result, ICTs are progressively being deployed in new platforms, such as
retail RFID systems and vehicular telematics for example. But more significantly, they
are being used to upgrade critical infrastructures, including energy grids, transport
ICT networks is a reality; these events constitute national security threats. Malicious
online agents are numerous, organized, and of diverse persuasions: political, criminal,
terrorist, and hacktivist. The tools at their disposal become more sophisticated and
complex over time and with experience; the growing number of connected platforms
only serves to offer new attack vectors. There is no going back to simpler times. In
part of that process. Unfortunately, cybersecurity is not yet at the core of many national
and industrial technology strategies. Although cybersecurity efforts are numerous, they
disparities exist between nation-states, public and private sectors, and across
successfully initiated from the top down. Information sharing and cooperation are key to
or a specific sector will have developed and adopted a highly effective cybersecurity
framework, the knowledge is rarely shared outside of that circle. 2 The primary obstacle
the discussion and sharing of threat information and best practices. Yet security through
obscurity is not a viable defense model against modern cyber threats. The answer is to
implement cybersecurity mechanisms in all layers of society. However, the drive and the
awareness. A first step towards remedying the situation lies in comparing the
status. A ranking system would reveal shortcomings and motivate states to intensify
their efforts in cybersecurity. It is only through comparison that the real value of a
nation’s cybersecurity capability can truly be weighed. The Global Cybersecurity Index
development. The ultimate goal is to help foster a global culture of cybersecurity and its
integration at the core of information and communication technologies. The project has
been launched by the International Telecommunication Union (ITU) and private sector
company ABI Research. The GCI project finds its basis in the current mandate of the
ITU and the related projects and activities of the ITU’s Telecommunication Development
Bureau, the BDT. The ITU is the lead facilitator for WSIS (World Summit on the
and security in the use of ICTs at national, regional, and international levels. The ITU’s
national computer incident response teams, particularly for developing countries, and
the role of ITU in building confidence and security in the use of information and
(GCA) was launched by the ITU Secretary-General as ITU’s framework for international
multi-stakeholder cooperation towards a safer and more secure information society and
• Legal Measures
• Technical Measures
• Organizational Measures
• Capacity Building
• Cooperation.
These five designated areas will form the basis of the indicators for the GCI. These five
form the inherent building blocks of a national culture. Cybersecurity has a field of
application that cuts across all industries, and all sectors, both vertically and
investment by political, economic, and social forces. This can be done by law
state cooperation.
framework for entities to align themselves to a common regulatory basis, whether on the
Legal measures also allow a nation-state to set down the basic response mechanisms
minimum standards of behavior across the board, applicable to all, and on which further
cybersecurity capabilities can be built. Ultimately, the goal is to enable all nation-states
2. Technical: Measures Technology is the first line of defense against cyber threats and
malicious online agents. Without adequate technical measures and the capabilities to
detect and respond to cyberattacks, nation-states, and their respective entities remain
vulnerable to cyber threats. The emergence and success of ICTs can only truly prosper
developing strategies for the establishment of accepted minimum security criteria and
accreditation schemes for software applications and systems. These efforts need to be
accompanied by the creation of a national entity focused on dealing with cyber incidents
at a national level, at the very least with a responsible government agency, and with an
the proper implementation of any type of national initiative. A broad strategic objective
place to put the strategy into effect and evaluate the success or failure of the plan.
Without a national strategy, governance model, and supervisory body, efforts in different
sectors and industries become disparate and unconnected, thwarting efforts to reach
4. Capacity Building Capacity building is intrinsic to the first three measures (legal,
technical, and organizational). Understanding the technology, the risk, and the
implications can help to develop better legislation, better policies and strategies, and
relatively new area, not much older than the internet itself. This area of study is most
political implications have applicability in this area. Human and institutional capacity
building is necessary to enhance knowledge and know-how across sectors, apply the
most appropriate solutions, and promote the development of the most competent
professionals.
5. Cooperation Cybersecurity requires input from all sectors and disciplines and for this
international level. However, the cybercrime problem is one of a global nature and is
information, attack scenarios, and 9 best practices in response and defense. Greater
CHAPTER 3
Researchers found out that cybersecurity threats are a growing concern in today's
digital landscape. The vulnerability and threat landscape is constantly evolving, and
organizations of all sizes face a growing number of cyber threats that are increasingly
complex. Cyber threats are circumstances or events that could potentially negatively
impact an organization's operations, and they can result in a threat actor being able to
successfully access important and sensitive data for an organization, which could be
destroyed, made public, changed, or result in a denial of service. There are many types
of cyber threats, and they are constantly changing and evolving. Cybersecurity
management is a framework that organizations can use to close security gaps and track
their entire threat landscape. Better cybersecurity requires the ability to make rigorous,
fact-based decisions about a company's most critical risks and which cybersecurity
decisive solution to the problem will not be found in the foreseeable future. Enhancing
CHAPTER 4
SUMMARY
This research began on September 19, 2023, and was completed on November 27,
2023.
CONCLUSION
1. The researchers found that; In conclusion of cyber threats, have become increasingly
systems. These threats include hacking, phishing, ransomware attacks, data breaches,
and more.
2. People involved in the field of cyber security Succeeds to combat these threats,
cybersecurity responses have also evolved. One of the key approaches is the
authentication, and regular security audits. Additionally, organizations are placing more
emphasis on employee education and awareness training to mitigate the risk of human
error. But it wasn't perfect, there are still flaws and holes in cybersecurity. But it will
RECOMMENDATION
physical harm and loss of life, especially for critical infrastructure like power grids and
transportation systems.
• Adapting to Emerging Trends: Stay informed about the latest cybersecurity trends,
• Regular Software Updates: Keep software and operating systems up-to-date to protect
• Proactive Measures: Operate under the assumption that a compromise has occurred
and take • proactive measures to detect, contain, and remove any malicious presence.
service.
• Staying Informed and Adapting: Continuously update, refine, and test cybersecurity