Cyber Threats in the Digital Era: Challenges, Impacts, and Prevention Strategies

1. European Union Agency for Cybersecurity (ENISA), "ENISA Threat Landscape 2024," Sep. 2024.
2. M. Humayun, M. Niazi, N. Jhanjhi, M. Alshayeb, and S. Mahmood, "Cyber security threats and vulnerabilities: A systematic mapping study," Arab. J. Sci.Eng., vol. 45, pp. 3171–3189, 2020.
3. National Institute of Standards and Technology, "The NIST Cybersecurity Framework (CSF) 2.0," NIST CSWP 29, Feb. 2024.
4. W. Stallings, Cryptography and Network Security: Principles and Practice, 7th ed. Boston, MA, USA: Pearson, 2017.
5. R. von Solms and J. van Niekerk, "From information security to cyber security," Comput. Secur., vol. 38, pp. 97–102, Oct. 2013.
6. Z. Alkhalil, C. Hewage, L. Nawaf, and I. Khan, "Phishing attacks: A recent comprehensive study and a new anatomy," Front. Comput. Sci., vol. 3, Art. no.563060, Mar. 2021.
7. B. B. Gupta, A. Tewari, A. K. Jain, and D. P. Agrawal, "Fighting against phishing attacks: State of the art and future challenges," Neural Comput. Appl., vol. 28, no. 12, pp. 3629–3654, 2017.
8. K. Krombholz, H. Hobel, M. Huber, and E. Weippl, "Advanced social engineering attacks," J. Inf. Secur. Appl., vol. 22, pp. 113–122, Jun. 2015.
9. N. Idika and A. P. Mathur, "A survey of malware detection techniques," Dept. Comput. Sci., Purdue Univ., West Lafayette, IN, USA, Tech. Rep., Feb. 2007.
10. M. Egele, T. Scholte, E. Kirda, and C. Kruegel, "A survey on automated dynamic malware-analysis techniques and tools," ACM Comput. Surv., vol. 44, no. 2, Art. no. 6, Feb. 2012.
11. A. Kharraz, W. Robertson, D. Balzarotti, L. Bilge, and E. Kirda, "Cutting the Gordian knot: A look under the hood of ransomware attacks," in Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA). Cham, Switzerland: Springer, 2015, pp. 3–24.
12. H. Oz, A. Aris, A. Levi, and A. S. Uluagac, "A survey on ransomware: Evolution, taxonomy, and defense solutions," ACM Comput. Surv., vol. 54, no. 11s, Art. no. 238, 2022.
13. J. Mirkovic and P. Reiher, "A taxonomy of DDoS attack and DDoS defense mechanisms," ACM SIGCOMM Comput. Commun. Rev., vol. 34, no. 2, pp. 39–53, Apr. 2004.
14. S. T. Zargar, J. Joshi, and D. Tipper, "A survey of defense mechanisms against distributed denial of service (DDoS) flooding attacks," IEEE Commun.Surveys Tuts., vol. 15, no. 4, pp. 2046–2069, 4th Quart. 2013.
15. A. K. Sood and R. J. Enbody, "Targeted cyberattacks: A superset of advanced persistent threats," IEEE Security & Privacy, vol. 11, no. 1, pp. 54–61, Jan./Feb. 2013.
16. A. Alshamrani, S. Myneni, A. Chowdhary, and D. Huang, "A survey on advanced persistent threats: Techniques, solutions, challenges, and research opportunities," IEEE Commun. Surveys Tuts., vol. 21, no. 2, pp. 1851–1877, 2nd Quart. 2019.
17. H.-J. Liao, C.-H. R. Lin, Y.-C. Lin, and K.-Y. Tung, "Intrusion detection system: A comprehensive review," J. Netw. Comput. Appl., vol. 36, no. 1, pp.16–24, Jan. 2013.
18. A. L. Buczak and E. Guven, "A survey of data mining and machine learning methods for cyber security intrusion detection," IEEE Commun. Surveys Tuts., vol. 18, no. 2, pp. 1153–1176, 2nd Quart. 2016.
19. A. Khraisat, I. Gondal, P. Vamplew, and J. Kamruzzaman, "Survey of intrusion detection systems: Techniques, datasets and challenges," Cybersecurity, vol. 2, Art. no. 20, 2019.
20. E. M. Hutchins, M. J. Cloppert, and R. M. Amin, "Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains," Leading Issues in Information Warfare & Security Research, vol. 1, no. 1, p. 80, 2011.
21. Verizon, "2024 Data Breach Investigations Report," Verizon Business, 2024.
22. IBM Security, "Cost of a Data Breach Report 2024," IBM Corp., Armonk, NY, USA, 2024.
23. M. Akbanov, V. G. Vassilakis, and M. D. Logothetis, "WannaCry ransomware: Analysis of infection, persistence, recovery prevention and propagation mechanisms," J. Telecommun. Inf. Technol., no. 1, pp. 113–124, 2019.
24. Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation, "Alert (AA21-131A): DarkSide ransomware: Best practices for preventing business disruption from ransomware attacks," May 2021.
25. F. Cohen, "Computer viruses: Theory and experiments," Comput. Secur., vol. 6, no. 1, pp. 22–35, Feb. 1987.
26. M. Antonakakis et al., "Understanding the Mirai botnet," in Proc. 26th USENIX Secur. Symp., Vancouver, BC, Canada, 2017, pp.1093–1110.
27. N. Virvilis and D. Gritzalis, "The big four—What we did wrong in advanced persistent threat detection?," in Proc. Int. Conf. Availability, Reliab. Secur. (ARES), Regensburg, Germany, 2013, pp. 248–254.
28. Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation), Official J. Eur. Union, L 119, Apr.2016.
29. Digital Personal Data Protection Act, 2023, Act No. 22 of 2023, Government of India, Aug. 2023.
30. Cybersecurity and Infrastructure Security Agency (CISA), "Alert (AA20-352A): Advanced persistent threat compromise of government agencies, critical infrastructure, and private sector organizations," Dec. 2020.
31. K. Scarfone and P. Hoffman, "Guidelines on firewalls and firewall policy," NIST Special Publication 800-41 Rev. 1, Sep. 2009.
32. K. Scarfone and P. Mell, "Guide to intrusion detection and prevention systems (IDPS)," NIST Special Publication 800-94, Feb. 2007.
33. P. A. Grassi et al., "Digital identity guidelines: Authentication and lifecycle management," NIST Special Publication 800-63B, Jun. 2017.
34. J. Bonneau, C. Herley, P. C. van Oorschot, and F. Stajano, "The quest to replace passwords: A framework for comparative evaluation of web authentication schemes," in Proc. IEEE Symp. Secur. Privacy (SP), San Francisco, CA, USA, 2012, pp. 553–567.
35. A. Dmitrienko, C. Liebchen, C. Rossow, and A.-R. Sadeghi, "On the (in)security of mobile two-factor authentication," in Financial Cryptography and Data Security (FC), LNCS, vol. 8437. Berlin, Germany: Springer, 2014, pp. 365–383.
36. M. Souppaya and K. Scarfone, "Guide to enterprise patch management technologies," NIST Special Publication 800-40 Rev. 3, Jul. 2013.
37. P. Kumaraguru et al., "Protecting people from phishing: The design and evaluation of an embedded training email system," in Proc. SIGCHI Conf.Human Factors Comput. Syst. (CHI), San Jose, CA, USA, 2007, pp. 905–914.
38. P. Cichonski, T. Millar, T. Grance, and K. Scarfone, "Computer security incident handling guide," NIST Special Publication 800-61 Rev. 2, Aug. 2012.
39. J. H. Saltzer and M. D. Schroeder, "The protection of information in computer systems," Proc. IEEE, vol. 63, no. 9, pp. 1278–1308, Sep. 1975.
40. B. Biggio and F. Roli, "Wild patterns: Ten years after the rise of adversarial machine learning," Pattern Recognit., vol. 84, pp. 317–331, Dec. 2018.
41. R. Anderson, "Why information security is hard—An economic perspective," in Proc. 17th Annu. Comput. Secur. Appl. Conf. (ACSAC), New Orleans, LA, USA, 2001, pp. 358–365.
42. S. Rose, O. Borchert, S. Mitchell, and S. Connelly, "Zero trust architecture," NIST Special Publication 800-207, Aug. 2020.
43. National Institute of Standards and Technology, "Module-lattice-based key-encapsulation mechanism standard," FIPS 203, Aug. 2024.