TIM-7030 v4

Lin, F., Zeng, W., Yang, L., Wang, Y., Lin, S., & Zeng, J. (2017). Cloud computing system risk estimation and service selection approach based on cloud focus theory. Neural Computing & Applications, 28(7), 1863–1876.
This paper proposes a cloud computing system risk assessment approach based on cloud theory and collected the risk value and four risk indicators from each virtual machine to produce the five property clouds.

Beskow, D. M., & Carley, K. M. (2019). Social Cybersecurity: An Emerging National Security Requirement. Military Review, 99(2), 117.
With the growth of online platforms that enabled individuals to gather and distribute information came the rise of online cybercrime aimed at exploiting single individuals and entire groups. As a result, researchers and practitioners started to investigate this digital playground and the ways in which socially and digitally embedded individuals could be exploited. Social cybersecurity is a modern science and engineering field that is gaining traction. This paper describes this emerging field, gives examples of research issues and resources required, and sets out a research agenda in this field.

Dupuis, M., & Renaud, K. (2020). Scoping the ethical principles of cybersecurity fear appeals. Ethics and Information Technology, 1.
This paper creates an effects-reasoning matrix for all stakeholders, outlining the possible benefits and drawbacks of cybersecurity fear appeals by developing six ethical standards to direct the implementation of cybersecurity fear appeals.

Humayun, M., Niazi, M., Jhanjhi, N., Alshayeb, M., & Mahmood, S. (2020). Cyber security threats and vulnerabilities: A systematic mapping study. Arabian Journal for Science & Engineering (Springer Science & Business Media BV), 45(4), 3171–3189.
This paper focuses on identifying key cybersecurity vulnerabilities, targeted/victimized applications, mitigation strategies, and infrastructures so that researchers and practitioners can gain a deeper understanding of the issue.

Santos, O. (2017). 2.2 Comparing traditional and next-generation intrusion prevention systems (IPS) (Lesson 2: Network security devices and cloud services) [Video]. In CCNA Cyber Ops SECFND 210-250. Pearson IT Certification.
There are different types of intrusion prevention systems. The first one is a traditional network-based IPS, and an example of that is the network IPS devices from Cisco, like the 4200 sensors, the Cali6500 IPS modules, and some others. These devices actually have been end-of-life for quite some time now. The next-generation IPS are replacing them, like the Cisco Firepower IPS systems and the Cisco ESA 5500 series Firepower Services. They provide intrusion prevention, firewall capabilities, and VPN services in a single unit and easy-to-deploy platform.

Greene, S. (2015). 6.8 Implementing information security continuous monitoring (ISCM) (Lesson 6: Security assessment and testing) [Video]. In CISSP. Pearson IT Certification.
The ISCM process was designed to support the NIST risk management framework for ongoing and iterative monitoring. The ISCM process was designed for federal agencies but is adaptable to any public or private sector organization. The objective of ISCM is to continually measure and report on the effectiveness of organizational security controls.

MITRE ATT&CK. (n.d.). MITRE ATT&CK.
MITRE ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community.

Mouzakitis, S., & Askounis, D. (2021). Assessing MITRE ATT&CK risk using a cyber-security culture framework. Sensors, 21(9), 3267.
This paper emphasizes the effort on the hybrid MITRE ATT&CK for Enterprise and Industrial Control Systems model as a broader and more holistic approach.