{"id":49721,"date":"2022-06-11T07:36:00","date_gmt":"2022-06-10T23:36:00","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=49721"},"modified":"2022-06-10T23:39:11","modified_gmt":"2022-06-10T15:39:11","slug":"more-than-90-of-cyberattacks-are-made-possible-by-human-error","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2022\/06\/11\/more-than-90-of-cyberattacks-are-made-possible-by-human-error\/","title":{"rendered":"More than 90% of cyberattacks are made possible by human error"},"content":{"rendered":"\n

In a ransomware attack, a company’s computer systems are locked, and the attacker demands a ransom in cryptocurrency in return for unlocking the system. Malware infects a network of objects connected to the Internet of Things to steal the personal data of its users. Talking about cybersecurity is talking about technology. However, it is increasingly common\u00a0to study cyber risk as part of an interdisciplinary approach. After all, threats are technological, but they also have to do with behavioral, social and ethical factors.<\/strong><\/p>\n\n\n\n

Addressing cybersecurity from this point of view is precisely the objective of the\u00a0European Interdisciplinary Cybersecurity Conference. The conference is being coordinated by two researchers from the Universitat Oberta de Catalunya (UOC): professor\u00a0David Meg\u00edas, director of the Internet Interdisciplinary Institute (IN3), and\u00a0Helena Rif\u00e0, a researcher at the IN3 and director of the Master’s Degree in\u00a0Cybersecurity and Privacy, of the Faculty of\u00a0Computer Science, Multimedia and Telecommunications.<\/p>\n\n\n\n

The cybersecurity situation in 2022<\/strong><\/h2>\n\n\n\n

The data are clear: cyberattacks have been on the rise in recent years and the\u00a0cybersecurity situation is increasingly complex<\/strong>. According to\u00a0the latest report from ENISA<\/a>, the European Union Agency for Cybersecurity, attacks increased in 2020 and 2021, not only in terms of vectors and number but also in terms of their impact. And according to\u00a0McAfee, ransomware-like attacks (attacks asking for a ransom in exchange for stopping or releasing the hijacked information) are the most common.<\/p>\n\n\n\n

“Over the past two years, we haven’t only had a health pandemic but there has been\u00a0a genuine pandemic of cyberattacks and cybercrime<\/strong>“, said David Meg\u00edas, leader of the K-riptography and Information Security for Open Networks (KISON) research group. “Cybercriminals have taken advantage of the pandemic in many ways. In addition, with the increase in teleworking, cybercriminals have had easier access to computers that weren’t as well protected as those of companies. And, undoubtedly, the most common form of attack during these two years was ransomware, affecting institutions of all kinds: banks, energy suppliers, telecommunications companies, universities and public services.”<\/p>\n\n\n\n

The big cybersecurity challenges in 2022<\/strong><\/h2>\n\n\n\n

“Cybersecurity is not just a technical discipline; it takes in many fields of knowledge and affects many different departments and practices in companies,” said Helena Rif\u00e0, also a researcher in the KISON group. This being the case,\u00a0the great challenges in the field of cybersecurity<\/strong>\u00a0are not only technical but transcend the frontiers of technology. According to UOC experts, these are the main challenges.<\/p>\n\n\n\n

1. Awareness-raising, the first line of defence<\/strong><\/h3>\n\n\n\n

More than 90% of cyberattacks are made possible, to a greater or lesser extent, by human error, according to IBM data<\/a>. Therefore, despite technological advances to minimize threats, the first major line of defence is the awareness and good practices<\/strong> of users. “Many of the cybersecurity issues companies face come about as a result of well-known vulnerabilities. If we all did our homework better, it’d be easier to reduce online threats. We all use electronic devices, and we all have to put in place a minimum of cybersecurity,” explained Helena Rif\u00e0.<\/p>\n\n\n\n

2. A new generation of hybrid threats<\/strong><\/h3>\n\n\n\n

Cyber-physical systems are increasingly present in our daily lives, from industrial control systems and energy infrastructure to home automation. The technological revolution they are fostering, which has generated multiple business opportunities, carries its own threats, combining both complex technological and human aspects<\/strong>. The rise of hybrid cyber threats will be the central theme of one of the two keynote presentations at the European Interdisciplinary Cybersecurity Conference, which will be given by Fulvio Valenza, an assistant professor at the Politecnico di Torino.<\/p>\n\n\n\n

3. And more sophisticated defence tools<\/strong><\/h3>\n\n\n\n

Faced with the increasing complexity of threats, artificial intelligence (AI) and machine learning are becoming increasingly important as protection tools. “The greatest scientific challenge today is trying to stay ahead<\/strong> of the increasingly sophisticated threats,” added Rif\u00e0. “AI is increasingly being used both to quickly identify attacks and vulnerabilities and to resolve them.”<\/p>\n\n\n\n

4. Towards sustainable cybersecurity<\/strong><\/h3>\n\n\n\n

We are all responsible for managing and protecting the resources in our environment for future generations. The basic definition of sustainability is also relevant in the field of cybersecurity. “In this sense, sustainability is understood as the mechanisms that allow the interactions of stakeholders (users, service providers and device manufacturers) with the technological ecosystem to be deliberate and with full knowledge of their consequences on the security and stability of the system,<\/strong>” said David Meg\u00edas.<\/p>\n\n\n\n

The Internet of Things is generating an unprecedented increase in the number of devices sharing users’ sensitive data and information. In addition, 5G and other telecommunications technologies allow broadband connectivity for an almost unlimited number of devices, multiplying the internet infrastructure<\/strong>. “As a result, technological infrastructure is becoming unsustainable due to various malicious threats and unintentional mistakes. It’s imperative to achieve a more sustainable ICT infrastructure by providing solutions that are secure and ensure privacy,” Meg\u00edas added.<\/p>\n\n\n\n

5. The Great Privacy Battle<\/strong><\/h3>\n\n\n\n

Cyberattacks are not the only way in which users’ personal data can be compromised. On many occasions, data are exposed by the architecture of the platforms themselves or by the ignorance of netizens. For Helena Rif\u00e0, there are still many problems for technology to solve in order to better protect data<\/strong>, such as being able to send only the precise information for each purpose, better anonymization of databases and ensuring privacy for all the data stored on the web.<\/p>\n\n\n\n

“At the social level, we also have to provide usability methodologies so that people know how to act on social media and the internet in general<\/strong>, what can be shared and what can’t,” she said. “In the end, the big challenge is to make data security and privacy compatible so that technology is usable, and we can work comfortably with it while protecting our systems and data.”<\/p>\n","protected":false},"excerpt":{"rendered":"

Talking about cybersecurity is talking about technology. However, it is increasingly common to study cyber risk as part of an interdisciplinary approach. After all, threats are technological, but they also have to do with behavioral, social and ethical factors.<\/p>\n","protected":false},"author":1,"featured_media":47558,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[286,54,2103,96,2727,1656],"class_list":["post-49721","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","tag-it-security","tag-security","tag-security-breach","tag-technology","tag-technology-adaption","tag-technology-investment"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/49721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=49721"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/49721\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/47558"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=49721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=49721"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=49721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}