THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗670 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- OpenAlex · Published · First archived
Quantifying OT/ICS Cyber Resilience: An Expert-Weighted Maturity Model and Empirical Field Validation ↗
Industrial organizations increasingly rely on maturity assessments to evaluate Operational Technology and Industrial Control Systems (OT/ICS) cyber resilience, yet such models are seldom validated against field data. This study examines the measurement layer of an expert-weighted OT/ICS maturity model incorporating 71 controls across nine domains, including a workforce and security culture domain. Aggregated expert-derived criticality weights were applied to an anonymized assessment dataset of 25 structured maturity assessment records containing control-level maturity ratings for all 71 contro…
- OpenAlex · Published · First archived
Security Analysis of NIST Key Derivation Using Pseudorandom Functions ↗
Abstract Key derivation functions can be used to derive variable-length random strings that serve as cryptographic keys. They are integral to many widely-used communication protocols such as TLS, IPsec and Signal. NIST SP 800-108 specifies several key derivation functions based on pseudorandom functions such as and , that can be used to derive additional keys from an existing cryptographic key. This standard either explicitly or implicitly requests their KDFs to be variable output length pseudorandom function, collision resistant, and preimage resistant, which are also demanded by practical ap…
- OpenAlex · Published · First archived
Critical Mineral Import Vulnerability and First-Round Supply-Loss Scenarios in China, 2015–2024: Implications for a Sustainable Low-Carbon Transition ↗
A sustainable low-carbon transition requires reliable supplies of minerals used in renewable energy, electric mobility, energy storage, and electricity grids. This study assesses China’s import vulnerability and hypothetical first-round supply losses for five selected mineral product groups during 2015–2024: lithium carbonate, cobalt intermediates and unwrought products, unwrought nickel, natural graphite powder and flakes, and copper cathodes. Using bilateral trade data and domestic supply proxies, we construct a Structural Vulnerability Index (SVI) and estimate Supply-Loss Ratio (SLR) scenar…
- OpenAlex · Published · First archived
Comparison of NIST Cybersecurity Framework Patterns and the Requirements of Federal Service For Technical and Export Control (FSTEC) Order No. 31: Compliance Matrices and Integration Methodology ↗
This study focuses on two of the most significant documents in the field of information security: the international standard NIST Cybersecurity Framework version 2.0 and the Russian regulatory act, FSTEC Order No. 31. The subject of the study is the conceptual and structural relationships between the NIST CSF functions and the groups of information security measures established by Order No. 31. The methodological basis consists of a comparative analysis of the original texts of the documents, Positive Technologies comparison tables, and the TOGAF architectural design methodology. The study res…
- OpenAlex · Published · First archived
Edge federated learning with adaptive optimization and lightweight design facilitates collaborative security situation awareness in the Industrial Internet of Things ↗
As the scale of the Industrial Internet of Things expands, its security issues become increasingly prominent. Traditional centralized security architecture faces challenges such as high data processing latency and easy privacy leaks. To solve the above problems, a collaborative security situation awareness model that integrates edge computing and federated learning is built to optimize the security protection capabilities. The federated learning is applied to implement distributed model training and complete cross-device knowledge sharing while protecting data privacy. Edge computing is used t…
- OpenAlex · Published · First archived
Classification of Educational Vulnerability Status Using Boosting Methods on Imbalanced Socioeconomic Data ↗
Extreme class imbalance in educational data causes classification models to favor the majority class and fail to identify vulnerable students who are not attending school, despite this group requiring the greatest intervention. This study aims to develop a classification model for identifying educational vulnerability status among school-age children. The positive class corresponds to out-of-school children (minority class), while the negative class represents children who are still attending school. The dataset exhibits an extreme imbalance ratio of approximately 1:48, making conventional cla…
- OpenAlex · Published · First archived
Enhanced chaotic active cryptography using metaheuristic optimization with image-dependent pixel displacement, bitwise operations, and chaotic key generation ↗
Abstract With the rapid expansion of digital images, the internet of things, and smart systems, the development of secure and efficient image encryption methods has become a necessity. In the meantime, the use of chaotic systems and metaheuristic algorithms can improve the security of images against statistical attacks and brute force searches by increasing randomization and optimizing encryption parameters. In this research, a chaotic encryption approach is presented both in the stage of generating the private key and in encrypting image information with system modifications under metaheurist…
- arXiv · Published · First archived
A Computer Vision Approach to Visual Fraud Detection in Phishing Websites Using YOLOv8 ↗
Phishing remains one of the most common vectors for financial and identity fraud, and most detection systems still rely on inspecting a page's URL, HTML markup, or domain registration history. These signals are easy for an attacker to rotate or obfuscate, and they say very little about what actually convinces a victim to hand over a password or a card number: the way the page looks. This paper describes a visual, image-based approach to phishing detection that treats a rendered webpage the same way a human eye would, as a picture that either matches a trusted brand or doesn't. A YOLOv8 convolu…
- arXiv · Published · First archived
The Privacy Fallacy of Crowdsourced Fine-Tuning: Extracting Proprietary Data via Topic-Based Poisoning ↗
Supervised fine-tuning (SFT) is widely used to adapt large language models to downstream tasks. Crowdsourcing user conversations is an established approach to collecting SFT data at scale while reducing the need for costly manual annotation. However, it also allows untrusted users to contribute data to the fine-tuning pipeline. We investigate an underexplored privacy risk arising from this setting: can a malicious user poison a small fraction of the crowdsourced data to amplify extraction of previously unseen instructions contributed by other users? We show that this is possible using only bla…
- GitHub · Repository created · First archived
caiovicentino/jev-risk-check-provider ↗
x402 risk-check provider: signed pre-payment verdicts — OFAC, phishing feeds, transaction simulation, drainer-kit code, and our own EIP-7702 kit watch (poisoners, sweepers). $0.001 per check with prepaid credits; per call via x402 from $0.0035.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.