Expected duration: 3 - 4 weeks Project Title: Analysis of Zero-Day Threats in 2023: Discovery, Response, and Patch Implementation
Abstract: Zero-day threats represent a significant challenge in cybersecurity, exploiting unknown vulnerabilities in software or hardware before vendors/developers are aware of the vulnerability and can issue a patch. This research aims to provide a comprehensive report on zero-day threats identified in 2023, focusing on three critical areas:
1. The number of zero-day vulnerabilities discovered in 2023 overall, 2. The duration these vulnerabilities remained active before they were discovered (essentially, the DWELL TIME afforded to the attackers before the exploits/vulnerabilities being used were known to the wider industry) 3. How long from their discovery by industry was it until patches were developed, and what was the average time organizations took to implement these patches?
By leveraging data from cybersecurity databases, industry reports, and direct responses from organizations, this paper seeks to offer valuable insights into the current state of cybersecurity readiness and the effectiveness of response strategies against zero-day threats.
Rationale: Understanding the lifecycle of zero-day threats from when they were first exploited by attackers (ZERO DAY DWELL TIME) to vendor/developer discovery of those vulnerabilities and then to patch implementation will be a key piece of industry research to better serve risk management outcomes and board level decisions in this field.
Objectives: 1. Quantify the number of zero-day threats identified in 2023. 2. Analyze the timeline from when those zero days were being exploited to the vendor/developer discovery of the zero-day vulnerabilities to the development and release of patches by vendors/developers. Extrapolate the averages from all data gathered. 3. Evaluate the patch adoption rate for those zero-day exploit patches among organizations.
Methodology: Data Collection: Utilize open-source intelligence (OSINT), cybersecurity databases (e.g., CVE databases, Mandiant, etc.), and surveys targeting IT security professionals to gather data.
Analysis: Employ quantitative methods to assess zero-day threats' frequency and response times. Statistical tools will be used to analyze the data, identifying patterns and trends.
Industry Consultation: Engage with cybersecurity reports and OSINT to validate findings.
Expected Findings: A detailed enumeration of zero-day threats discovered in 2023, categorized by industry, software, and severity. Insights into the average duration vulnerabilities were likely exploited before their discovery and then the length of time they remained unpatched, highlighting areas of concern and sectors most at risk.
Significance: This research should offer valuable benchmarks for cybersecurity professionals and organizations, facilitating a better understanding of current zero-day threat statistics and presenting detection and response efficiencies. It aims to contribute to strategic planning, resource allocation, and the development of policies that enhance organisations' cybersecurity posture against zero-day threats.
Conclusion: The study will conclude with averages for all data found in each key area. It will also suggest areas for further research, potentially paving the way for more resilient cybersecurity frameworks.
