Ethical hacking and penetration testing strengthening cybersecurity posture through offensive security measures

Godbole, Aditee; Dhabliya, Ritika; Deshpande, Vivek; Sivakumar, S. A.; Shankar, B. Maruthi; Khetani, Vinit

doi:10.47974/JDMSC-1983

Open Access Research Article

Ethical hacking and penetration testing strengthening cybersecurity posture through offensive security measures

Aditee Godboleaditeegodbole@slsnagpur.edu.inSymbiosis Law School Nagpur Campus Symbiosis International (Deemed University)Pune, Maharashtra, IndiaView full profile → , Ritika Dhabliyaritikadhabalia@gmail.comYashika Journal Publications Pvt. LimitedWardha, Maharashtra, IndiaView full profile → , ^*Vivek DeshpandeCorresponding authorvivek.deshpande@vit.eduDepartment of Computer Engineering Vishwakarma Institute of Information TechnologyVishwakarma Institute of TechnologyPune, Maharashtra, 411037, IndiaView full profile → , S. A. Sivakumardrsasivakumar@gmail.comDepartment of Electronics and Communication Engineering Dr. N. G. P. Institute of TechnologyCoimbatore, Tamil Nadu, IndiaView full profile → , B. Maruthi Shankarmaruthishankar@gmail.comDepartment of Electronics and Communication Engineering Sri Krishna College of Engineering and TechnologyCoimbatore, Tamil Nadu, IndiaView full profile → , Vinit Khetanivinitkhetani@gmail.comCybrix TechnologiesNagpur, Maharashtra, 440027, IndiaView full profile →

* Corresponding author · click or hover a name for details

pp. 1295–1305Vol. 27Issue 4June 2024DOI: 10.47974/JDMSC-1983 Crossmark XML

Published Online:: 26 Jun 2024
Article type:: Research Article
Language:: EN
Article no.:: JDMSC-1983
Pages:: 1295–1305

Abstract

Strong cybersecurity measures are absolutely necessary, as evidenced by the growing sophistication and frequency of cyberattacks. An organization’s cybersecurity posture can be strengthened by implementing offensive and proactive security measures such as ethical hacking and penetration testing, with a particular emphasis on Internet of Things (IoT) devices. When carried out by knowledgeable experts, ethical hacking acts as a preventative measure to find and fix vulnerabilities, protecting private information and systems. An further strategy called penetration testing uses mock assaults to evaluate how resilient networks and apps are, helping to find and fix any vulnerabilities. The present study delves into the concepts, procedures, and instruments utilized in ethical hacking and penetration testing, with a particular focus on their utilization within the realm of Internet of Things devices. We demonstrate the critical role that these offensive security measures play in improving cybersecurity by looking at case studies from the real world and upcoming trends. In addition to providing useful insights for organizations looking to fortify their defenses in the dynamic and linked world of IoT cybersecurity, the study emphasizes the significance of incorporating results into security policy and cultivating a culture of continuous development.

Keywords

Cybersecurity Ethical hacking Penetration testing Offensive security measures Internet of Things (IoT)Continuous improvement

Subject Classifications

Primary 93A30Secondary 49K15

References

[1] Kumar, Ankit, et al. “An improved quantum key distribution protocol for verification.” Journal of Discrete Mathematical Sciences and Cryptography 22.4 : 491-498 (2019).
[2] Obaidat, M.A.; Obeidat, S.; Holst, J.; Al Hayajneh, A.; Brown, J. A comprehensive and systematic survey on the internet of things: Security and privacy challenges, security frameworks, enabling technologies, threats, vulnerabilities and countermeasures. Computers, 9, 44 (2002).
[3] Bekkali, A.; Essaaidi, M.; Boulmalf, M.; Majdoubi, D. Systematic Literature Review of Internet of Things (IoT) Security. Adv. Indynamical Syst. Appl. (ADSA), 21, 25–39 (2022).
[4] Kumar, Ankit, et al. “An enhanced quantum key distribution protocol for security authentication.” Journal of Discrete Mathematical Sciences and Cryptography 22.4 : 499-507 (2019).
[5] Ghazal, T.M.; Afifi, M.A.; Kalra, D. Security vulnerabilities, attacks, threats and the proposed countermeasures for the Internet of Things applications. Solid State Technol., 63, 31–45 (2020).
[6] Abdullahi, M.; Baashar, Y.; Alhussian, H.; Alwadain, A.; Aziz, N.; Capretz, L.F.; Abdulkadir, S.J. Detecting Cybersecurity Attacks in Internet of Things Using Artificial Intelligence Methods: A Systematic Literature Review. Electronics, 11, 198 (2022).
[7] Sethi, P.; Sarangi, S.R. Internet of things: Architectures, Protocols, and applications. J. Electr. Comput. Eng. 2017, 9324035 (2017).
[8] Yousuf, T.; Mahmoud, R.; Aloul, F.; Zualkernan, I. Internet of things (IOT) security: Current status, challenges and countermeasures. Int. J. Inf. Secur. Res., 5, 608–616 (2015).
[9] Deogirikar, J.; Vidhate, A. Security attacks in IoT: A survey. In Proceedings of the 2017 International Conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud)(I-SMAC), Palladam, India, 10–11 February; pp. 32–37 (2017).
[10] Hamid, G.H.; Alisa, Z.T. A survey on IOT Application Layer Protocols. Indones. J. Electr. Eng. Comput. Sci., 21, 1663 (2021).
[11] Nebbione, G.; Calzarossa, M.C. Security of IOT Application Layer Protocols: Challenges and findings. Future Internet, 12, 55 (2020).
[12] Bibi, N.; Iqbal, F.; Akhtar, S.; Anwar, R.; Bibi, S. A Survey of Application Layer Protocols of Internet of Things. Int. J. Comput. Sci. Netw. Secur., 21, 301–311 (2021).
[13] Mitra, D.; Goswami, S.; Hati, D.; Roy, S. Comparative Study Of Iot Protocols Pjaee. Smart Appl. Data Anal. Smart Cities (SADASC’18), 17, 2020 (2021).
[14] Ivan, C.; Vujic, M.; Husnjak, S. Classification of security risks in the IOT Environment. Ann. DAAAM Proc., 20, 731–740 (2016).

Views: 197Downloads: 14Citations: 0