April 23, 2023

What is SAVE from ICSS?

SAVE is designed to enhance an organization’s cybersecurity posture by providing real-time vulnerability assessments that are both accurate and actionable. With its AI capabilities, SAVE is able to analyze vast amounts of data and identify potential cyber threats, allowing organizations to quickly respond to and mitigate these risks. SAVE’s ability to prioritize vulnerabilities based on their potential impact to an organization also makes it an efficient solution, as it helps organizations focus their resources on the most pressing security concerns. Overall, SAVE is a valuable tool for enterprises looking to enhance their cybersecurity and better protect their sensitive information in the digital age.

Metaverse has security breaches?

Brands are striving to embrace metaverse. Indeed businesses are creating their own worlds reflecting their enterprise values, in such a sandbox. Leasing virtual space for their business while other companies yet, are announcing sandbox integration that includes large events such as theme parks and concert venues in the virtual world.

There will be a real world economic effect due to this as well, according to PWC’s virtual reality and augmented reality predictions; such technologies will increase 23 million jobs by 2030 leading to economic growth of $1.92 trillion, thereby providing net economic gain for any country.  Besides assisting business applications we’ve also improved the training and education experience for company employees by new interactive learning experiences in virtual and mixed realities, that can enable people to learn faster, retain information better and improve their cognitive processes using 3D environments- beyond reading, up to four times faster assimilation than in class learners.

Metarisk

What does metaverse imply when they are referring to a particular mobile based gaming application or a VR ecosystem like Oculus, or is it blockchain that is often involved for startups to promise solutions to create AI enabled digital avatars that can be minted and sold as well.

Has this complexity introduced cybersecurity and privacy implications where many of the fundamentals of cyber security and related attacks remain the same-there might be possible account takeover that leads to identity theft and fraud, and now they just business competitors giving access to personal or corporate classified information while phishing malware attack gaining access to personal data stored in metaverse archives from a corporate angle though humans are in weak link when it comes to cyber security one of the promises of metaverse is interoperability for example a pair of luxury virtual sneakers would be accessible on all platforms including the one to go to work at virtual office scenarios would create a single point of failure necessitating the need to protect one’s account

Interoperability based on a blockchain such as etherium would need further discussion this puts responsibility on the end user to keep their identity and digital properties safe as blockchains by definition lack central authority also trying identity and personal data to a blockchain wallet implies that cybercriminals are more eager to gain access to them

the question of trust such a platform is important many companies are using the cloud as their primary infrastructure and have distributed their workforce accordingly so moving the office to a VR world would be a logical next step even though the technology it still needs to evolve considerably to make the idea of being in VR for 8 hours a day appealing those whose operations involve handling personal data are classified information will continue relying on on premises solutions and not expose employee identities on a blockchain

Should meta verse herald a paradigm shift the basics of threat mitigation will be saved protect consumer accounts with password managers and multifactor authentication use a reliable cyber security solution to prevent malware and phishing attacks and educate yourself and your employees on best cyber security practices if you already use cryptocurrency do read these cybersecurity guidelines on how to keep your crypto safe

Metaverse is still in its early stages but when it does become a part of our working lives not all brands will grow in these competitive markets like the individuals who control them avatars will have limited time opportunity and energy to interact with companies enterprises that hope to thrive in the metaverse tomorrow need to explore its boundaries in the present address cyber security risks and make investments before there are no more virtual worlds that to conquer

Adapted rewritten and rewarded from May 6, 2022 security breaches in the metaverse Rob Cataldo, Kaspersky. Cybersecurity magazine.

 

Calibrating telecommunication fraud..

Telecommunication fraud causes financial loss to telecommunication customers in most large economies traditional means to detect telecommunication fraud rely on creating a database of fraud telephone numbers but cybercriminals can escape such detection by changing their phone numbers which is very easy to achieve through voice over IP. To solve this problem the study proposes frauds from the contents of a call, instead of simply through the callers telephone number the study collects descriptions of telecommunication frauds from news reports and social media, the study uses machine learning algorithms to analyze datasets to select the high quality descriptions from the data collected previously and constructs new datasets one can leverage-natural language processing to extract features from the textual data after the study builds rules to identify similar contexts within the exact call for further telecommunication fraud detection-to achieve online detection of telecommunication frauds, the study developed an Android application that can be installed on a customer’s phone when an incoming fraud call is answered. The application can dynamically analyze the contents of the call in order to identify frauds, this allows customers to be protected from deli attacks. It is possible to detect fraudulent calls by recording the content of calls. This study collected textual data of telecommunication fraud on the Internet the study then analyzed textual data using machine learning algorithms and selected robust data set from large telecom companies. On the next stage, the study designed a method to extract features of words from textual data by using natural language processing techniques. The authors built rules for telecommunication fraud detection, they finally developed an application for telecommunication fraud detection on Android platform. The method of telecommunication fraud detection put forward by the study proposes the limit of labeling call number used by most companies. Experimental results of this article show that the method proposed in this paper is directly applicable in the real world.

Reworded rephrased and readapted from detecting telecommunication fraud by understanding the contents of a call.

Qianqian Zhao, Kai Chen, Tongxin Li, Yi Yang and XiaoFeng Wang. Cybersecurity volume 1, Article number: 8 (2018)

What is the ICSS your trust model?