Cyber Attack

Cyber-attacks have become increasingly common in recent years. Capable of shutting down nuclear centrifuges, air defense systems, and electrical grids, cyber-attacks pose a serious threat to national security. As a result, some have suggested that cyber-attacks should be treated as acts of war. Yet the attacks look little like the armed attacks that the law of war has traditionally regulated. This Article examines how existing law may be applied—and adapted and amended—to meet the distinctive challenge posed by cyber-attacks. It begins by clarifying what cyber-attacks are and how they already are regulated by existing bodies of law, including the law of war, international treaties, and domestic criminal law. This review makes clear that existing law effectively addresses only a small fraction of potential cyber-attacks. The law of war, for example, provides a useful framework for only the very small number of cyber-attacks that amount to an armed attack or that take place in the con...

British Airways will face record-breaking GDPR fine for suffering financial data theft of hundreds of thousands of customers. Following an extensive investigation, the UK's data privacy authority announced that it intends to impose its largest ever fine against airline British Airways (BA), for infringements of the General Data Protection Regulation (GDPR). The proposed fine-1.5 per cent of British Airways' worldwide turnover for the financial year ended 31 December 2017-is the highest-ever that the Information Commissioner's Office (ICO) has leveled at a company over a data breach: the airline will have to pay £183.39 million (204 million euros) for failing to protect its customers' data.

The requirement for a collaborative effort to achieve a common set of security standards for use by entities that process, store or transport voter data. -More than 350,000 voting machines are used in the Unites States today in over 42 States (VerifiedVoting 2017). The rise in the use of electronic mediums has posed great concern for those voting and those running for office. In 2016, the State of Florida reported the targeted attempts by Russian hackers to infiltrate and manipulate electronic voting in as much as 67 elections offices. As well reporting from additional sources that as many as voter database compromises across 21 states and forensics discovery at attempts by hackers to infiltrate the networks of voting equipment vendors, local election boards, political parties and email and social media accounts for candidates.  The industry and cyber security community has not discovered a process to protect the most democratic process in the world to date – Voting remains a target held at risk. 2018 Elections are critical to moving the U.S. forward to recovery - Feel free to reach out if you need support or have any additional questions.

In recent years, NATO and the EU have taken greater responsibility for countering hybrid threats. This group of threats covers a wide range of hostile methods used by states and non-state actors. It includes both military and non-military activities, for instance special forces operations and irregular warfare, and also disinformation and cyberattacks. NATO and the EU are involved in facilitating international cooperation on countering hybrid threats and protecting their own structures and institutions against them. In this way, both organisations reinforce the efforts at the national level, since fighting hybrid threats is primarily a task of the member states. Nevertheless, NATO’s and the EU’s actions in this respect are constrained by insufficient financing, and by the member states’ unwillingness to enhance the sharing of intelligence and sensitive information related to, for example, critical infrastructure protection or cybersecurity. The recent spike in anti-Western COVID-19 disinformation campaigns clearly shows that both NATO and the EU could do more to counter hybrid threats.

This paper is an attempt to draw distinctive lines between the concepts of cybercrime, cyber-attack, and cyber warfare in the current information age, in which it has become difficult to separate the activities of transnational criminals from acts of belligerents using cyberspace. The paper considers the implications of transnational cyber threats in international humanitarian law (IHL) with a particular focus on cyber-attacks by non-state actors, the principles of state responsibility, and the implications of targeting non-state perpetrators under IHL. It concludes that current international law constructs are inadequate to address the implications of transnational cyber threats; the author recommends consequential amendments to the laws of war in order to address the challenges posed by transnational cyber threats.

A significant number of breaches in the security of electronic banking (e-Banking) system is reported each year, drawing attention to the need to protect and inform customers about the risk of exposure to malicious actions initiated by cyber-criminals. Financial institutions and consumers recognize the fact that attacks and financial frauds are becoming more complex and are perpetrated by a different class of criminal. This class is increasingly sophisticated and uses technology as part of their strategy. Furthermore, the specialists forecast that the current global recession is likely to increase the frequency of internal fraud and security breaches. The present research tries: (1) to analyze the potential dangers threatening the security of e- Banking services through a comprehensive investigation of the relevant literature; (2) to identify the tools and methods that can ensure the consumers’ protection in E-Banking, (3) to present the results of a pilot study regarding the Romani...

Cyber attack is an action that aims to harm someone’s computer and system, or to steal valuable information. Despite the complexity of systems and the security measures organizations deploy, satellites systems are vulnerable to malicious exploitation. The paper explains satellite systems, briefly discusses some of cyber attacks on them, and suggests some solutions or methods of prevention from cyber attacks.

With the growing internet services, cybersecurity becomes one of the major research problems of the modern digital era. Cybersecurity involves techniques to protect and control the systems, hardware, software, network, and electronic data from unauthorized access. It is necessary to build a cyber-security system to detect different types of attacks. Implementing various intelligent algorithms in cybersecurity led to detect and analyz attack actions occurring in field of computer networks. Cybersecurity uses artificial intelligence, machine learning, and deep learning algorithms capable of extracting optimal feature representation from the big data set. This has been applied to various cybersecurity cases, such as attacks detection, prediction, and analysis. This work aims to perform an analysis of cybersecurity attacks datasets by using intelligent approaches. It also provides a detailed comparison with the performance of algorithms, field implementation to describe network protection optimization technologies benefits.

The act of cyber stealing your right of privacy as an individual is growing every day. Cyber Espionage is emerging along with the expansion of the World Wide Web, which origins a gigantic impact either on heavy solid economic, politic, agency groups, or on individual people. In this paper, we will explore some kinds of Cyber Attacks focused on citizens, and give a few hints in how you can protect yourself, in order to avoid your Digital Privacy to be violated, trying to making you much safer. How hackers can may not be the main threat for a common citizen is also described and defended along this paper.

Applications of artificial intelligence in cyber warfare have been mainly postulated and studied in the context of defensive operations. This paper provides an introductory overview of the use of autonomous agents in offensive cyber warfare, drawing on available open literature. The study supplies an introduction to the taxonomy and science underlying intelligent agents and their strengths and weaknesses: the technological elements that autonomous agents should include are explained, as well as the economics involved. The paper also aims to explore possible legal implications of the use of autonomous agents and shows how they could fit into the legal context of warfare. The conclusion of the study is that the use of AI technologies will be an important part of cyber offensive operations, from both the technological and the economical aspects; however, the legal and doctrinal landscape is still uncertain and proper frameworks are still to be developed.

Cyber-attacks are often called non-violent or non-kinetic attacks, but the simple truth is that there is a credible capability to use cyber-attacks to achieve kinetic effects. Kinetic Cyber refers to a class of cyber-attacks that can cause direct or indirect physical damage, injury or death solely though the exploitation of vulnerable information systems and processes. Kinetic cyber-attacks are a real and growing threat that is generally being ignored as unrealistic or alarmist. These types of attacks have been validated experimentally in the laboratory environment, they have been used operationally in the context of espionage and sabotage, and they have been used criminally in a number of attacks throughout the world. While these types of attacks have thus far been statistically insignificant, the rapid growth and integration of cyber physical systems into everything from automobiles to SCADA systems implies a significant kinetic cyber threat in the near future. It is imperative that the security community begin to take these types of threats seriously and address vulnerabilities associated with cyber physical systems and other devices that could be utilized to cause kinetic effects through cyber-attacks.

This paper gives the introduction of cyber-attacks, their types, motives and consequences. But the main aim of this paper is to provide the insight of some of the major cyber-attacks that took place all over the world and their effects. The aim of this paper is to dig the history of the cyber-attacks to learn their nature and motive behind them so as to prevent and mitigate them in the future.

Günümüzde enerji, doğalgaz, ulaşım, sağlık, bankacılık nükleer ve iletişim gibi birçok kritik altyapımızın yönetilmesinde önemli bir yeri olan Endüstriyel Kontrol Sistemleri (EKS) uzun yıllardır siber korsanlar tarafından hedef alınmaktadır. Bu sistemlerin siber saldırlar sonucu zarar görmesi veya çalışmasının engellenmesi maddi ve manevi zararlar oluşturmaktadır. Bu çalışmada EKS’lerin genel güvenlik açıklıkları ve tehditleri ele alınmış ve bunlar ile ilgili alınması gereken önlemler hakkında bilgiler verilmiştir. Ayrıca çalışmada son beş yılda yaşanmış ve kamuya açıklanan önemli siber saldırlar işlenmiştir. İhlallerin sosyal mühendislik, kimlik avı sahtekârlığı ve kötücül yazılımlar gibi BT altyapılarına yönelik saldırı vektörlerine dayandığı, saldırganların BT altyapılarındaki zayıf kimlik doğrulama, enjeksiyon (SQL, Komut, Kod) ve zayıf mimarilerinin protokol açıklıklardan yaralanarak EKS ağlarına eriştikleri tespit edilmiştir. Sonuç olarak kritik altyapıları kontrol eden EKS’lere yönelik saldırıların etkilerinin arttığı, saldırganların endüstriyel protokoller üzerine geniş bilgi edindikleri, siber yeteneklerini geliştirdikleri, karmaşık saldırı vektörlerini kullanarak birçok ülkeye maddi ve manevi zarar verdikleri tespit edilmiştir. Bu çalışmanın EKS’lerin siber güvenliğinin önemi ile ilgili farkındalık yaratacağı değerlendirilmektedir.

In the present era of technology, cybercriminals are getting smarter day by day. From the past few years, the cybercrimes have increased to an extent that most of the big companies are finding it difficult to prevent cybercrimes. One such cyber-attack is phishing where the victims are lured in entering their sensitive information like usernames, passwords, bank details, etc. It's very easy for an attacker to get sensitive information through phishing. The attacker should know some information about the victim's profile so that the victims can be easily tricked. A phished URL that the victims receive is very tough to differentiate as looks similar to the original URL. In this paper, we have made use of the information in the URL to determine if the URL is phished or not. So, it is not necessary for the user to enter the website and expose themselves to the malicious code. We have also discussed the metadata that is present in the URL. In this paper, we also make use of metadata to classify a URL. Random forest and logistic regression are the two algorithms used to classify the URL present in the dataset as phished or not phished. After using the classification algorithm on the given datasets, we found that the random forest algorithm has better accuracy in classifying if a URL is legit.

Abstract
Cybersecurity in the maritime realm made headlines in 2017 following the spread of ransomware, a type of computer and network virus, in the systems of major shipping companies and providers.
Whilst there is extensive literature on maritime piracy in the traditional sense, i.e., an act of violence or depredation directed against the ship, its cargo or the persons aboard, cyber piracy targeting ships and maritime businesses remains a largely unexplored subject. What more, the law surrounding this phenomenon is marred with uncertainty.
The objective of this paper is to identify and comment on key legal texts in the international maritime and criminal law spheres that may be relied on by public law officials in preventing and sanctioning hackers targeting the maritime sector.

Nations and their citizens rely on infrastructures. Their incapacitation or destruction could prevent nations from protecting themselves from threats, cause substantial economic harm, and even result in the loss of life. Therefore, safeguarding these infrastructures is an obvious strategic task for any sovereign state. While the need to protect critical infrastructures (CIs) is far from novel, digitization brings new challenges as well as increased cyber-risks. This need is self-evident; yet, the optimal policy regime is debatable. The United States and other nations have thus far opted for very light regulation, merely encouraging voluntary steps while choosing to intervene only in a handful of sectors. Over the past few years, several novel laws and regulations addressing this emerging issue have been legislated. Yet, the overall trajectory of limited regulatory intervention has not changed. With that, the wisdom of such a limited regulatory framework must be revisited and possibly reconsidered. This Article fills an important gap in the legal literature by contributing to and promoting this debate on cyber-risk regulation of CIs, while mapping out the relevant rights, options, and interests this ‘critical’ debate entails and setting forth a regulatory blueprint that balances the relevant factors and considerations.

The Article begins in Part II by defining CIs and cyber risks and explaining why cyber risk requires a reassessment of CI protection strategies. Part III describes the means used by the United States and several other nations to address cyber risks of CIs. Part IV examines a market-based approach with minimal governmental intervention to critical infrastructure cyber-regulation, along with the various market failures, highlighting assorted minimal measures to correct these problems. It further examines these limited forms of regulation, which merely strive to bridge information and expertise barriers, assign ex post liability for security-related harms, or provide other specific incentives — and finds them all insufficient. Part V continues the normative evaluation of CI cyber-protection models, focusing on ex ante approaches, which require more intrusive government involvement in terms of setting and enforcing standards. It discusses several concerns with this regulatory strategy, including the lack of governmental expertise, regulatory capture, compromised rights, lack of transparency, and the centralization of authority. Finally, in Part VI, the Article proposes a blueprint for CI cyber protection that goes beyond the mere voluntary regulatory strategy applied today.

"L'accélération fulgurante des cyberattaques contre les infrastructures électriques est aujourd'hui une réalité préoccupante qui nécessite de prendre des mesures d'urgence pour se protéger. Et cela d'autant plus, lorsque leurs conséquences peuvent être catastrophiques pour l'ensemble de la population."

A smart grid system supports intelligent metering and monitoring functions spanning the areas of power generation, transmission and distribution. It has enormous benefits for meeting the energy demands and billing requirements through controls at the supply side rather than at the demand side. This departure from the traditional perspective makes it a very attractive transformation for both developing and developed economies. However, a major drawback is the increased vulnerability of the highly connected system and knock-on ramifications on various related sub systems and networks. With the connectivity emerge the associated dangers of exposed system entry points through nodes located at various geographical locations; making an easy target for a motivated hacker. Starting at the compromised node, the inner system can be penetrated and its core functionality can be compromised. There is thus a need for having a system wide resilience in the design and architecture to meet these cha...

With the increased dependence of organizations on technological solutions, the cyber threats have become some of the major concerns for the very existence of the businesses. Thus, the security measures to be implemented need to go beyond a simple presence of a firewall and anti-malware. In this work, an overview of two Intrusion Detection and Prevention systems (IDPS) was performed. Namely, the architecture of Snort and Suricata IDPS engines was discussed.

The emerging of new technology is making easier for people to access things in seconds just like the platform of the internet as it has become a crucial part of everyone's life. It enables people to share information worldwide very fast. But the most challenging here is the security of systems as cyber-crimes are increasing day by day. Cyber threats are now very complex and evasive. Though many organizations have come forward with various solutions using different tools as privacy is a major concern for the data amount is very large to handle nowadays and regular updates are required to confront such attacks. This paper focuses on an analysis of cybersecurity and its challenges with the application of different strategies implementations. keywordscybersecurity, cyber-crimes, attacks, IoT, block chain.

Abstract — Over the past few years, we have witnessed an ever-increasing rampant battle between network managers & computer criminals which led to many developments in the tools used by both parties i.e. " legitimate computer professionals & computer criminals". Recently, interruption exposure & avoidance systems have earned increasing appreciation due to their more frequent involvement in the security domain since they allow security analysts to make fast reactions and thus take quick decisions to prevent any possible damage. This underlines the significance of upgraded detection & prevention processes, taking into consideration the competitive and dynamic network environment these days. Most commercial and government information systems are connected through the internet, which will expose them to possibilities of spasms. The increasing number of computer users marks it precise, ever since computers have become a necessary device in our lives. This article covers the IDPS state of art and discusses the IDPS challenges.

Keywords- component; Network, IDS, IPS, Security, IDS Myths, IDS Alerts.

International Journal of Computer Science and Information Security (IJCSIS),
Vol. 13, No. 9, September 2015

https://sites.google.com/site/ijcsis/
ISSN 1947-5500

Abstract—Growing in cyber attacks has driven a growth in demand for network security. Cryptology is the science of secret communication systems including cryptography and cryptanalysis. Different heuristic and meta heuristic algorithms has been used for ...

With the growing internet services, cybersecurity becomes one of the major research problems of the modern digital era. Cybersecurity involves techniques to protect and control the systems, hardware, software, network, and electronic data from unauthorized access. It is necessary to build a cyber-security system to detect different types of attacks. Implementing various intelligent algorithms in cybersecurity led to detect and analyz attack actions occurring in field of computer networks. Cybersecurity uses artificial intelligence, machine learning, and deep learning algorithms capable of extracting optimal feature representation from the big data set. This has been applied to various cybersecurity cases, such as attacks detection, prediction, and analysis. This work aims to perform an analysis of cybersecurity attacks datasets by using intelligent approaches. It also provides a detailed comparison with the performance of algorithms, field implementation to describe network protecti...

Through the increasing amounts of data day by day, big data analytics has appeared as an important trend for many organizations. These collected data can have important information that possibly will be key to solving extensive problems, such as cybersecurity, healthcare, marketing, intrusion detection, and fraud. An intrusion detection system (IDS) work as observers and evaluates the data in order to detect at all intrusion that may occur in the network or system. The huge data that is a high speed, high volume, and variety of data produced through the network has prepared for the process of the data analysis to detect any attacks through traditional techniques that cause big challenges. Big data analytic uses in IDS to increase accuracy and more efficient for detecting the attacks. we present a survey of eight machine learning algorithms use for IDS, intrusion detection techniques, advantages and disadvantages of intrusion detection techniques, all types of an intrusion detection ...

Özet: Dijital dünya olarak adlandırılan günümüz dünyasında, artık insanoğlu teknolojiksiz bir hayatı düşünememektedir. İnsan, çoğunlukla geçmişine ya da alışkanlıklarına sıkı sıkıya bağlı olduğu için yeni fikirleri ve önemli icatları benimsemede tutucu davrandığı halde teknolojik alanındaki değişikliklere ani ve hızlı tepkiler verip benimsemiştir. Bilgisayarlar yoluyla işlenen suçların dünya'da gittikçe artması ve toplum hayatını olumsuz etkilemesi nedeniyle, bu suçlarla mücadele edebilmenin yolları aranmaya başlanmıştır. Bu çalışma üç ana bölümden oluşmaktadır. Birinci bölümde siber suç kavramı incelenecek, ikinci bölümde siber güvenlik ve siber güvenlikle ilgili yapılacak çalışmalarda bulunması gereken unsurlar incelenecek ve son bölümde ise siber saldırı türlerinden incelenecektir. Anahtar Kelimler: Siber suç, siber güvenlik, siber saldırı. Abstract: In today's world, which is called the digital world, human beings can not think of a technological life anymore. Because human beings are strictly tied to their past or habits, human beings have suddenly and quickly reacted to changes in the technological field as they embraced new ideas and important inventions. Since crimes committed through computers are increasing in the world and negatively affecting public life, ways of fighting these crimes have begun to be sought. This study consists of three main parts. In the first part, the concept of cybercrime will be examined. In the second part, the elements that should be found in studies related to cyber security and cyber security will be examined and in the last part will be examined from the cyber attack types.

In the present paper, we propose a novel cyber-attack detection model based on two multivariate-analysis methods to the audit data observed on a host machine. The statistical techniques used here are the well-known Hayashi's quantification method IV and cluster analysis method. We quantify the observed qualitative audit event sequence via the quantification method IV, and collect similar audit event sequence

Cyber attacks have become a grave threat to international peace and security. Northeast Asia is a critical point of many of these cyber operations. First, South Korea has been the target of cyber attacks from North Korea. Second, there are harsh debates on this matter between the US and China. While the United States have expressed their concerns about the growing threat of cyber intrusions from China, the People’s Republic of China has blamed the US for attacks against their respective computer networks. From the perspective of the jus ad bellum, potential cyber attacks raise a number of difficult and complex issues. The following article examines which cyber operations amount to the use of force as stipulated in Article 2(4) of the UN Charter and discusses the conditions under which type of cyber attacks could trigger the right to self-defense. In addition, other available remedies outside the framework of Article 51 of the UN Charter will be discussed.

Rusya Federasyonu (RF), siber uzay olarak adlandırılan alanda etkinliğini her geçen gün artırmaktadır. RF’nin siber uzaydaki etkinliğini artırmasının temel sebebi ise uluslararası sistemdeki en önemli siber güçlerden biri konumuna ulaşarak, sahip olduğu bu gücü dış politika sorunlarının çözülmesi noktasında bir baskı ve yaptırım aracı olarak kullanmak istemesidir.

Bu hedef kapsamında RF, mevcut siber saldırı kapasitesine ulaşmak amacıyla 2000’li yıllarda ciddi gayret göstermiştir. İzlediği stratejinin sonucunda kısa bir süre içinde sahip olduğu siber saldırı gücünü arttıran RF, günümüzde siber uzayı domine eden en önemli aktörlerden biri konumuna ulaşmıştır.

Bu bağlamda makalede RF’nin 2007 yılında Estonya’ya, 2008 yılında Gürcistan’a ve Litvanya’ya, 2009 yılında Kırgızistan’a ve 2014 yıllında Ukrayna’ya yönelik olarak gerçekleştirdiği iddia edilen siber saldırılar incelenerek, RF’nin dış politika sorunlarının çözümü kapsamında sahip olduğu siber saldırı kapasitesini ne şekilde kullanmakta olduğu analiz edilecektir.

Anahtar Kelimeler: RF, Siber Uzay, Siber Güç, Siber Saldırı, Dış Politika.

ANALYSIS OF ALLEGED CYBER ATTACKS FROM RUSSIAN FEDERATION
ABSTRACT

Russian Federation (RF) increases its activity in the field, called cyber space, day by day. The main reason why RF improves its efficiency in cyberspace is that it demands to be one of the most important cyber powers in the international system and needs to have power to use it as a means of pressure and sanction at the point of solving its foreign policy problems. Within this target, RF has made considerable efforts in the 2000s in order to reach the existing cyber attack capacity. As a result of the strategy it pursues, RF, which has increased its cyber attack power in a short period of time, is now one of the most important actors that dominate cyber space.
In this context, our article examines how RF uses its cyber attack capacity at the point of solving its foreign policy problems by analyzing on the alleged RF attacks on Estonia in 2007, Georgia and Lithuania in 2008, Kyrgyzstan in 2009 and Ukraine in 2014.

Keywords: RF, Cyber Space, Cyber Force, Cyber Attack, Foreign Policy.

China cyberattack has become aggressive, disruptive, stealthy, and sophisticated. Apparently, China’s advantage is more on the cognitive domain than technical domain since information systems security is art and science—in some case, it is more art than science. Knowledge is the best weapon for cyber warfare since one of the Sun Tze’s Art of War principles is “know your enemy”. Therefore, an analytic of China cyberattack must scrutinize the national interest, goals and philosophies, culture, worldview, and behavioral phenomena of China.

Artificial intelligence (AI) is one of the key technologies of the Fourth Industrial Revolution (or Industry 4.0), which can be used for the protection of Internet-connected systems from cyber threats, attacks, damage, or unauthorized access. To intelligently solve today's various cybersecurity issues, popular AI techniques involving machine learning and deep learning methods, the concept of natural language processing, knowledge representation and reasoning, as well as the concept of knowledge or rule-based expert systems modeling can be used. Based on these AI methods, in this paper, we present a comprehensive view on "AI-driven Cybersecurity" that can play an important role for intelligent cybersecurity services and management. The security intelligence modeling based on such AI methods can make the cybersecurity computing process automated and intelligent than the conventional security systems. We also highlight several research directions within the scope of our study, which can help researchers do future research in the area. Overall, this paper's ultimate objective is to serve as a reference point and guidelines for cybersecurity researchers as well as industry professionals in the area, especially from an intelligent computing or AI-based technical point of view.

يعد العالم حالياً على أعتاب مرحلة جديدة من الهجمات الإلكترونية، أكثر تعقيداً وسرعة وخطورة، تعجز الدول منفردة عن مواجهتها، فهي تنتشر في ثوان معدودة، وتصيب كافة القطاعات والمستويات، وتسبب في ضرب الاقتصاديات والجيوش والأفراد، تدمر البنى التحتية ونظم الاتصالات والمواصلات، تهدد الخدمات الحكوميات وتضع حياة الأفراد في خطر، يقودها مجموعات متفرقة من قراصنة المعلومات والعصابات الإجرامية والمافيا الدولية، وتتورط فيها الدول سواء بصورة مباشرة أو غير مباشرة، بصورة قد تؤدي في النهاية إلى حدوث فوضى كبرى عبر الفضاء الإلكتروني تصبح بمثابة يوم أسود في تاريخ البشرية.

Working in Cyberspace Operations from multiple aspects has led me to question the multiple methods and frameworks used to defend enterprises. This has also led to an effort of integrating military operational frameworks where focuses remain on small, yet focused, synchronized integrated teams. This is unfortunately a new concept for cyberspace teams. It has led to some heated discussions among my colleagues because we all know all frameworks are wrong, but some are useful and further every analytical operator has internal prejudices. I seek to present F3EAD as a framework for DCO-RA & possible Offensive Cyber Operations.

The Cyber risk landscape is developing rapidly in multitude areas. Report to cyber attacks dominates the headlines. It is seemingly becoming more frequent and more sophisticated than ever. Businesses across the wide spectrum of industries are exposing to potentially enormous losses as result of cyber attacks and data breaches. Banks, manufacturing companies, universities, the government even the US military have been attacked. In 2013 more than 600 organizations publically disclosed data breaches revealing that nearly 92 million records have been expose. Security researchers found the fact that technical security solutions alone will not result in robust cyberspace. So, some researchers proposed cyber insurance as an acceptable risk management technique to financially protect the cyber space after Cyber Attack. In this regard we theoretically investigate the following important questions (1) What are the Cyber Risks (2) How to prevent cyber attack (3) why we need cyber insurance when we have advanced technical solutions to protect out network and data, To address these questions we examine how cyber insurance plays an important role for making a robust cyberspace.

"Lorsque l’on évoque l’affaire « Pegasus », beaucoup l’associent immédiatement à la surveillance globale par les États de nos faits et gestes, aux actions d’espionnage adverse, mais également au non-respect de la législation en vigueur sur nos données personnelles. Ce logiciel offensif aurait été développé à l’origine, avec pour objectif prioritaire de faciliter la traque des criminels et des terroristes. Et à ce titre, il ne serait vendu qu’aux gouvernements comme l’affirme la société israélienne NSO Group."

Cyber Attack adalah jenis manuver ofensif yang digunakan oleh negara, individu, kelompok, masyarakat atau organisasi yang menargetkan sistem informasi komputer, infrastruktur, jaringan komputer, atau perangkat komputer pribadi dengan berbagai cara tindakan jahat yang biasanya berupa mencuri, mengubah, atau menghancurkan target tertentu dengan meretas ke sistem yang rentan.

Keamanan dunia maya, keamanan komputer atau keamanan TI adalah perlindungan sistem komputer dari pencurian, perusakan perangkat keras, perangkat lunak atau informasi mereka, serta dari gangguan atau salah arah layanan yang mereka sediakan.