Search for: All records

In recent years, ransomware has established itself as one of the most persistent and devastating threats in cybersecurity. Traditionally, these attacks have focused on data at rest, encrypting files and demanding a ransom for their recovery. However, an alarming trend has emerged: ransomware for attacks to data in motion. This data, which includes information transmitted over networks, is critical to the day-to-day operations of organizations and often receives less protection than stored data. This paper aims to explore and characterize these new ransomware threats for attacks to data in motion. It also aims to test the feasibility of these attacks through the creation and implementation of a laboratory environment, as well as to analyze the potential consequences (based on likelihood and impact assessments) of such attacks if they were to be carried out, providing a comprehensive view of the potential emerging risks and warning of the need to create tools for the prevention, detection and mitigation of these attacks. 

This article describes experiences and lessons learned from the Trusted CI project, funded by the US National Science Foundation (NSF) to serve the community as the NSF Cybersecurity Center of Excellence (CCoE). Trusted CI is an effort to address cybersecurity for the open science community through a single organization that provides leadership, training, consulting, and knowledge to that community. The article describes the experiences and lessons learned of Trusted CI regarding both cybersecurity for open science and managing the process of providing centralized services to a broad and diverse community.