محتوى المقال

Salem Alelyani Harish Kumar G R

الملخص

 The beginning of Twenty first century saw a new dimension of security, the cybersecurity. Developed countries have started exploiting the vulnerabilities of cybersecurity to gain supremacy and influence over the rival countries. Hence, over the past decade, malware, i.e., malicious software, has become a major security threat in regards to the cybersecurity. The Kingdom of Saudi Arabia (KSA) has become a major target of cyber conflicts due to increased economic activity, digital transformation, high rate of technology adoption between citizen and organizations and rise of the oil and gas industry. However, unfortunately, there is a lack of research or scientific investigation of cyberattacks on KSA. This fact motivated us in conducting this work. This paper presents, a case study of attacks on Saudi Organization by malwares. We concentrate on two particular malwares: Shamoon and Ransomware. The timeline of attacks by these malware, also presented, along with their structures and methodologies in order to shield ourselves against similar attacks in the future.

التنزيلات

تنزيل البيانات ليس متاحًا بعد.

المراجع

Text: Obama’s Remarks on Cybersecurity, May 29, 2009. [Online].Available: https://www.nytimes.com/2009/05/29/us/politics/29obama.text.html (accessed Sept. 16. 2017).

O. Adebayo, M. A. Mabayoje, A. Mishhra and O. Oluwafemi,“Malware Detection, Supportive Software Agents and Its Classification Schemes,” Int. J. Netw. Secur. & its Appl. (IJNSA), vol. 4,no. 6, pp. 33-49, Nov. 2012, doi: 10.5121/ijnsa.2012.4603.

M. Baezner, P. Robin, “Hotspot Analysis: Stuxnet,” Cent.Secur. Stud. (CSS), ETH Zürich , Switzerland, Oct. 2017.[Online]. Available: https://css.ethz.ch/content/dam/ethz/special-interest/gess/cis/center-for-securities-studies/pdfs/Cyber-Reports-2017-04.pdf

K. Zetter. “Kaspersky Finds New Nation-State Attack - in Its Own Network.” June 10, 2015. [Online]. Available: https://www.wired.com/2015/06/kaspersky-finds-new-nation-state-attacknetwork/(accessed Apr. 2, 2018).

T. Pattar. “Cyber Attacks in The Middle East.” July 29, 2013.[Online]. Available: http://thesigers.com/analysis/2013/7/29/cyber-attacks-in-the-middle-east.html (accessed Dec. 31, 2017).

J. Moubarak, M. Chamoun and E. Filiol, "Comparative studyof recent MEA malware phylogeny," in 2017 2nd Int. Conf.Comput. and Commun. Syst. (ICCCS), Krakow, pp. 16-20. doi:10.1109/CCOMS.2017.8075178.

C. Bronk and E. Tikk-Ringas, “The Cyber Attack on Saudi Aramco,” Survival, vol. 55, no. 2, pp. 81-96, Apr. 2013, doi:10.1080/00396338.2013.784468.

K. Zetter. “The NSA Acknowledges What We All Feared:Iran Learns From US Cyberattacks.” Fab. 10, 2015. [Online].Available: https://www.wired.com/2015/02/nsa-acknowledges-feared-iran-learns-us-cyberattacks/ (accessed Dec. 31, 2017).

C. Helman. “The World’s Biggest Oil Companies.” Mar. 19,2015. [Online]. Available: https://www.forbes.com/sites/christopherhelman/2015/03/19/the-worlds-biggest-oil-and-gas-companies/(accessed Dec. 31, 2017).

H. Cordesman, Saudi Arabia: national security in a troubled region,Washington, D.C., USA: ABC-CLIO, 2009.

B. Acohido, “Why the Shamoon virus looms as destructive threat.” May 16, 2013. [Online]. Available: https://www.usatoday.com/story/cybertruth/2013/05/16/shamoon-cyber-warfare-hackers-anti-american/2166147/ (accessed Feb. 6, 2018).

C. Raiu, M. Hasbini, S. Belov and S. Mineev. “From Shamoon to StoneDrill.” Mar. 06, 2017. [Online]. Available: https://securelist.com/from-shamoon-to-stonedrill/77725/ (accessed Sept. 14, 2017).

Kaspersky Team. “Double trouble: A pair of wipers in Saudi Arabia.”Mar. 06, 2017. [Online]. Available: https://www.kaspersky.com/blog/shamoon-stonedrill/15170/ (accessed Jan. 6, 2018).

P. Darren. “Shamoon malware returns to again wipe Saudi-owned computers.” Dec. 02, 2016. [Online]. Available: https://www.theregister.com/2016/12/02/accused_iranian_disk_wiper_returns_to_destroy_saudi_orgs_agencies/ (accessed Jan. 20, 2018).

A. Ivanov and O. Mamedov. “The return of Mamba ransomware.”Aug. 09, 2017. [Online]. Available: https://securelist.com/the-return-of-mamba-ransomware/79403/ (accessed Sept. 13, 2017).

A. Johnson. “The Shamoon Attacks.” Aug. 16, 2012. [Online].Available: https://community.broadcom.com/symantecenterprise/communities/community-home/librarydocuments/viewdocument?DocumentKey=281521ea-2d18-4bf9-9e88-8b1d-c41cfdb6&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=librarydocuments (accessed Sept. 14, 2017).

M. Mullen. “What Is Destructive Malware?” July 31, 2017.[Online]. Available: https://www.bluvector.io/what-is-destructive-malware/ (accessed Sept. 16, 2017).

A. Gupta. “Samas changes the way a Ransomware operates.”March 19, 2016. [Online]. Available: https://news.thewindowsclub.com/samas-ransomware-changes-way-ransomware-operates-82755/ (accessed Jan. 10, 2018).

A. Ivanov and O. Mamedov. “The return of Mamba ransomware.”Aug. 09, 2017. [Online]. Available: https://securelist.com/the-return-of-mamba-ransomware/79403/ (accessed Jan. 10, 2018).

A. Kharraz, W. Robertson, D. Balzarotti, L. Bilge and E. Kirda,“Cutting the Gordian Knot: A Look Under the Hood of Ransomware Attacks,” in Detection of Intrusions and Malware, and Vulnerability Assessment, M. Almgren, V. Gulisano and F. Maggi, Ed, Cham, CH: Springer, 2015, pp. 3-24.

G. Paul and Shaunak. “Detailed threat analysis of Shamoon 2.0 Malware.” Feb. 05, 2017. [Online]. Available: http://www.vinransomware.com/blog/detailed-threat-analysis-of-shamoon-2-0-malware (accessed Sept. 14, 2017).

C. Mercer. “StoneDrill – Shamoon & Shamoon 2.0 Variant.” Mar.13, 2017. [Online]. Available: https://nsfocusglobal.com/stonedrill-shammon-shammon-2-0-variant/ (accessed Sept. 16, 2017).

S. Gates and C. Mercer. “Shamoon2: Back on the Prowl.” Feb. 8,2017. [Online]. Available: https://nsfocusglobal.com/shamoon-2-back-on-the-prowl/

تفاصيل المقال

القسم
بحث أصلي
معلومات حقوق التأليف والنشر
Creative Commons License

هذا العمل مرخص بموجب Creative Commons Attribution-NonCommercial 4.0 International License.

 يجب عليك قراءة الشروط و الأحكام الخاصة بحقوق النشر ( لقراءة الشروط اضغط هنا )