Cyber Security Threats and Vulnerabilities: A Systematic Mapping Study

• Published in: Arabian journal for science and engineering (2011) Vol. 45; no. 4; pp. 3171 - 3189
• Main Authors: Humayun, Mamoona, Niazi, Mahmood, Jhanjhi, NZ, Alshayeb, Mohammad, Mahmood, Sajjad
• Format: Journal Article
• Language: English
• Published: Berlin/Heidelberg Springer Berlin Heidelberg 01.04.2020; Springer Nature B.V
• Subjects: Cybersecurity; Empirical analysis; Engineering; Humanities and Social Sciences; Malware; Mapping; multidisciplinary; Phishing; Research Article - Computer Engineering and Computer Science; Science; Threats; Attack; Vulnerabilities; Cyber security
• ISSN: 2193-567X; 1319-8025; 2191-4281
• DOI: 10.1007/s13369-019-04319-2

There has been a tremendous increase in research in the area of cyber security to support cyber applications and to avoid key security threats faced by these applications. The goal of this study is to identify and analyze the common cyber security vulnerabilities. To achieve this goal, a systematic mapping study was conducted, and in total, 78 primary studies were identified and analyzed. After a detailed analysis of the selected studies, we identified the important security vulnerabilities and their frequency of occurrence. Data were also synthesized and analyzed to present the venue of publication, country of publication, key targeted infrastructures and applications. The results show that the security approaches mentioned so far only target security in general, and the solutions provided in these studies need more empirical validation and real implementation. In addition, our results show that most of the selected studies in this review targeted only a few common security vulnerabilities such as phishing, denial-of-service and malware. However, there is a need, in future research, to identify the key cyber security vulnerabilities, targeted/victimized applications, mitigation techniques and infrastructures, so that researchers and practitioners could get a better insight into it.