National Common Vulnerabilities and Exposure

Thwarting cybercriminals is not an easy task. However, companies, governments, and organizations have started to take parallel action to limit and discourage cybercriminals. The following are actions thwarting cybercriminals.

• They are creating early warning system sensors and alert systems. The system is too costly, so, therefore, it is impossible to watch each network. Organizations only watch high-value targets because these high-value targets have more chances of experiencing cyber attacks.
• They are creating complete databases of identified system vulnerabilities and attack signatures. Organizations distribute these databases over the globe to help prepare for and keep away from many common attacks.
• We are establishing information security management standards for national and international organizations.
• Sharing of cyber intelligence information between the organization and nations. Government agencies and countries now work together to share critical information about severe attacks to prevent similar attacks in other places. Several countries have organized cyber intelligence agencies to work together worldwide in warfare, especially in major cyber attacks.
• They are making new laws to discourage cyber attacks and data breaches. These laws also have strict penalties for cyber criminals caught engaging in unlawful actions.

The following are the measures for thwarting cybercriminals and a brief explanation of each.

Vulnerability Database

The National Common Vulnerabilities and Exposure (CVE) was developed as a national database to give a publicly available database of all known vulnerabilities. CVE is a list of entries containing the identification number, description, and at least one public note for publicly known cybersecurity vulnerabilities.

Early Warning System

Cyber early warning systems (CEWS) aim to alert such attempts in their growing stages. The design and implementation of such systems involve many research challenges.

The Honeynet Project is an international security research organization investigating the latest attacks, developing open-source security tools to improve Internet security, and learning how hackers behave. It is an example of an Early Warning System. The project also provides a HoneyMap, which displays attacks in real time.

Share Cyber Intelligence

Sharing cyber information and intelligence is a technique to prevent hostile cyber-attacks. InfraGard is a partnership between the FBI and the private sector, which is an example of the widespread sharing of cyber intelligence.

ISM Standards

The ISO/IEC 2700 standards are an example of information security management standards. They are also called ISO 2700 standards. The ISO/IEC 2700 standards help organizations keep information assets secure, such as financial information, intellectual property, employee details, or information entrusted to them by third parties. They are the best-known standard in the family, providing requirements for an information security management system (ISMS).

New Laws

ISACA is a self-governing, nonprofit, global association that tracks laws related to cybersecurity. It is previously known as the Information Systems Audit and Control Association, ISACA now goes by its acronym only.

These laws address personal privacy for the protection of intellectual property. These laws include the Cybersecurity Act, the Data Breach Notification Act, the Federal Exchange, and the Data Accountability and Trust Act.