Revisiting Cyber Threats in Government Sectors: A Systematic Review of Attacks, Challenges, and Policy-Level Defenses

Aisyah Nuraeni; Yudhistira Nugraha; Muhamad Erza Aminanto

doi:10.59395/ijadis.v6i2.1404

Authors

Aisyah Nuraeni Cyber Security and Digital Forensics, Telkom University, Indonesia
Yudhistira Nugraha Cyber Security and Digital Forensics, Telkom University, Indonesia
Muhamad Erza Aminanto Cyber Security Monash University, Indonesia

DOI:

https://doi.org/10.59395/ijadis.v6i2.1404

Keywords:

Systematic Literature Review , Cybersecurity Threats, Government Sector , Security Operations Center (SOC), Institutional limitations, SLR

Abstract

This paper presents a systematic literature review (SLR) based on the PRISMA framework, synthesizing 128 peer-reviewed studies published between 2020 and 2024, drawn from major scholarly databases. The review investigates cyber threats specifically targeting government institutions and identifies phishing, ransomware, malware, and denial-of-service (DoS) attacks as the most prevalent attack vectors affecting government sector environments. In addition to these threats, the study highlights persistent institutional limitations, such as outdated infrastructure, fragmented inter-agency coordination, limited technical capacity, and regulatory gaps, which hinder effective cybersecurity governance and response. To address these challenges, the review compiles both proactive and reactive mitigation strategies, emphasizing the need for SOC design principles such as scalability, interoperability, inter-agency coordination, and resilience in cyber operations. The paper synthesizes its findings into a taxonomy of threat profiles and contextual constraints, offering a foundational reference for building government-specific SOC models. It also outlines future research directions related to operational validation, capability maturity modeling, and institutional alignment in public-sector cybersecurity architectures.

2028 1089

Downloads

Download data is not yet available.

References

[1] Torvald F. Ask, Ricardo G. Lugo, Benjamin J. Knox, and Stefan Sütterlin, “Human-Human Communication in Cyber Threat Situations A Systematic Review,” Jul. 2021. [Online]. Available: http://www.springer.com/series/7409

[2] A. Ubowska and T. Królikowski, “Building a cybersecurity culture of public administration system in Poland,” in Procedia Computer Science, Elsevier B.V., 2022, pp. 1242–1250. doi: 10.1016/j.procs.2022.09.180. DOI: https://doi.org/10.1016/j.procs.2022.09.180

[3] F. R. Bechara and S. B. Schuch, “Cybersecurity and global regulatory challenges,” J Financ Crime, vol. 28, no. 2, pp. 359–374, 2020, doi: 10.1108/JFC-07-2020-0149. DOI: https://doi.org/10.1108/JFC-07-2020-0149

[4] M. Humayun, M. Niazi, N. Jhanjhi, M. Alshayeb, and S. Mahmood, “Cyber Security Threats and Vulnerabilities: A Systematic Mapping Study,” Arab J Sci Eng, vol. 45, no. 4, pp. 3171–3189, Apr. 2020, doi: 10.1007/s13369-019-04319-2. DOI: https://doi.org/10.1007/s13369-019-04319-2

[5] A. M. Al-Hawamleh, “Investigating the multifaceted dynamics of cybersecurity practices and their impact on the quality of e-government services: evidence from the KSA,” Digital Policy, Regulation and Governance , vol. 26, no. 3, pp. 317–336, Apr. 2024, doi: 10.1108/DPRG-11-2023-0168. DOI: https://doi.org/10.1108/DPRG-11-2023-0168

[6] H. I. Kure, S. Islam, and H. Mouratidis, “An integrated cyber security risk management framework and risk predication for the critical infrastructure protection,” Neural Comput Appl, vol. 34, no. 18, pp. 15241–15271, Sep. 2022, doi: 10.1007/s00521-022-06959-2. DOI: https://doi.org/10.1007/s00521-022-06959-2

[7] O. V. Syuntyurenko, “Predicting Potential Threats and Megarisks in Information Technology Development,” Scientific and Technical Information Processing, vol. 49, no. 1, pp. 48–59, Mar. 2022, doi: 10.3103/S0147688222010130. DOI: https://doi.org/10.3103/S0147688222010130

[8] V. E. Kulugh, U. M. Mbanaso, and G. Chukwudebe, “Cybersecurity Resilience Maturity Assessment Model for Critical National Information Infrastructure,” SN Comput Sci, vol. 3, no. 3, May 2022, doi: 10.1007/s42979-022-01108-x. DOI: https://doi.org/10.1007/s42979-022-01108-x

[9] S. Dutta, S. K. Sahu, S. Dutta, and B. Dey, “Leveraging a micro synchrophasor for fault detection in a renewable based smart grid—A machine learned sustainable solution with cyber-attack resiliency,” e-Prime - Advances in Electrical Engineering, Electronics and Energy, vol. 2, Jan. 2022, doi: 10.1016/j.prime.2022.100090. DOI: https://doi.org/10.1016/j.prime.2022.100090

[10] B. Sule, U. Sambo, and M. Yusuf, “Countering cybercrimes as the strategy of enhancing sustainable digital economy in Nigeria,” J Financ Crime, vol. 30, no. 6, pp. 1557–1574, Dec. 2023, doi: 10.1108/JFC-07-2022-0157. DOI: https://doi.org/10.1108/JFC-07-2022-0157

[11] A. S. Muhammad and T. Kaya, “Factors affecting the citizen’s intention to adopt e-government in Nigeria,” Journal of Information, Communication and Ethics in Society, vol. 21, no. 3, pp. 271–289, Jul. 2023, doi: 10.1108/JICES-05-2022-0054. DOI: https://doi.org/10.1108/JICES-05-2022-0054

[12] D. C. Le Nguyen and D. W. Golman, “Diffusion of the Budapest Convention on cybercrime and the development of cybercrime legislation in Pacific Island countries: ‘Law on the books’ vs ‘law in action,’” Computer Law and Security Review, vol. 40, Apr. 2021, doi: 10.1016/j.clsr.2020.105521. DOI: https://doi.org/10.1016/j.clsr.2020.105521

[13] S. Sarefo, B. Mphago, and M. Dawson, “An analysis of Botswana’s cybercrime legislation,” in Procedia Computer Science, Elsevier B.V., 2023, pp. 1023–1033. doi: 10.1016/j.procs.2023.01.380. DOI: https://doi.org/10.1016/j.procs.2023.01.380

[14] N. E. Park et al., “Performance evaluation of a fast and efficient intrusion detection framework for advanced persistent threat-based cyberattacks,” Computers and Electrical Engineering, vol. 105, Jan. 2023, doi: 10.1016/j.compeleceng.2022.108548. DOI: https://doi.org/10.1016/j.compeleceng.2022.108548

[15] S. T. Hossain, T. Yigitcanlar, K. Nguyen, and Y. Xu, “Cybersecurity in local governments: A systematic review and framework of key challenges,” 2025, Elsevier B.V. doi: 10.1016/j.ugj.2024.12.010. DOI: https://doi.org/10.1016/j.ugj.2024.12.010

[16] M. J. Page et al., “The PRISMA 2020 statement: An updated guideline for reporting systematic reviews,” Mar. 29, 2021, BMJ Publishing Group. doi: 10.1136/bmj.n71. DOI: https://doi.org/10.1136/bmj.n71

[17] B. Kitchenham and S. M. Charters, “Guidelines for performing Systematic Literature Reviews in Software Engineering,” 2007. [Online]. Available: https://www.researchgate.net/publication/302924724

[18] N. Bin Ali and M. Usman, “Reliability of search in systematic reviews: Towards a quality assessment framework for the automated-search strategy,” Inf Softw Technol, vol. 99, pp. 133–147, Jul. 2018, doi: 10.1016/j.infsof.2018.02.002. DOI: https://doi.org/10.1016/j.infsof.2018.02.002

[19] L. S. Nowell, J. M. Norris, D. E. White, and N. J. Moules, “Thematic Analysis: Striving to Meet the Trustworthiness Criteria,” Int J Qual Methods, vol. 16, no. 1, Sep. 2017, doi: 10.1177/1609406917733847. DOI: https://doi.org/10.1177/1609406917733847

[20] D. Gough, J. Thomas, and S. Oliver, “Clarifying differences between reviews within evidence ecosystems,” Jul. 15, 2019, BioMed Central Ltd. doi: 10.1186/s13643-019-1089-2. DOI: https://doi.org/10.1186/s13643-019-1089-2

[21] Cisa, “Recommendations to Mitigate Specific Attacker Capabilities Based Upon MITRE ATT&CK ® Tactics Mitigating Cyber Risks with MITRE ATT&CK | 2.”

[22] Nist, “The NIST Cybersecurity Framework (CSF) 2.0,” Feb. 2024. doi: 10.6028/NIST.CSWP.29. DOI: https://doi.org/10.6028/NIST.CSWP.29.ger

[23] O. Oriola, A. B. Adeyemo, M. Papadaki, and E. Kotzé, “A collaborative approach for national cybersecurity incident management,” Information and Computer Security, vol. 29, no. 3, pp. 457–484, 2021, doi: 10.1108/ICS-02-2020-0027. DOI: https://doi.org/10.1108/ICS-02-2020-0027

[24] K. Shaheen and A. H. Zolait, “The impacts of the cyber-trust program on the cybersecurity maturity of government entities in the Kingdom of Bahrain,” Information and Computer Security, vol. 31, no. 5, pp. 529–544, Nov. 2023, doi: 10.1108/ICS-06-2022-0108. DOI: https://doi.org/10.1108/ICS-06-2022-0108

[25] M. Dev and D. Saha, “Does e-government development moderate the impact of female labor participation on national cybersecurity maturity? An empirical investigation,” Information and Computer Security, vol. 32, no. 1, pp. 74–92, Jan. 2024, doi: 10.1108/ICS-03-2023-0042. DOI: https://doi.org/10.1108/ICS-03-2023-0042

[26] P. A. W. Putro, D. I. Sensuse, and W. S. S. Wibowo, “Framework for critical information infrastructure protection in smart government: a case study in Indonesia,” Information and Computer Security, vol. 32, no. 1, pp. 112–129, Jan. 2024, doi: 10.1108/ICS-03-2023-0031. DOI: https://doi.org/10.1108/ICS-03-2023-0031

[27] R. Goel, A. Kumar, and J. Haddow, “PRISM: a strategic decision framework for cybersecurity risk assessment,” Information and Computer Security, vol. 28, no. 4, pp. 591–625, Oct. 2020, doi: 10.1108/ICS-11-2018-0131. DOI: https://doi.org/10.1108/ICS-11-2018-0131

[28] J. A. Paul and M. Zhang, “Decision support model for cybersecurity risk planning: A two-stage stochastic programming framework featuring firms, government, and attacker,” Eur J Oper Res, vol. 291, no. 1, pp. 349–364, May 2021, doi: 10.1016/j.ejor.2020.09.013. DOI: https://doi.org/10.1016/j.ejor.2020.09.013

[29] A. Visvizi and M. D. Lytras, “Government at risk: between distributed risks and threats and effective policy-responses,” Transforming Government: People, Process and Policy, vol. 14, no. 3, pp. 333–336, Aug. 2020, doi: 10.1108/TG-06-2020-0137. DOI: https://doi.org/10.1108/TG-06-2020-0137

[30] R. Saylam and A. Ozdemir, “Military acceptance of the Internet of Things: a research model,” Digital Policy, Regulation and Governance , vol. 24, no. 1, pp. 1–16, Feb. 2022, doi: 10.1108/DPRG-03-2021-0045. DOI: https://doi.org/10.1108/DPRG-03-2021-0045

[31] H. Mouratidis, S. Islam, A. Santos-Olmo, L. E. Sanchez, and U. M. Ismail, “Modelling language for cyber security incident handling for critical infrastructures,” Comput Secur, vol. 128, May 2023, doi: 10.1016/j.cose.2023.103139. DOI: https://doi.org/10.1016/j.cose.2023.103139

[32] T. Gibbs, “Seeking economic cyber security: a Middle Eastern example,” Journal of Money Laundering Control, vol. 23, no. 2, pp. 493–507, May 2020, doi: 10.1108/JMLC-09-2019-0076. DOI: https://doi.org/10.1108/JMLC-09-2019-0076

[33] O. Gulyas and G. Kiss, “Impact of cyber-Attacks on the financial institutions,” in Procedia Computer Science, Elsevier B.V., 2023, pp. 84–90. doi: 10.1016/j.procs.2023.01.267. DOI: https://doi.org/10.1016/j.procs.2023.01.267

[34] T. N. Al-Tawil, “Ethical implications for teaching students to hack to combat cybercrime and money laundering,” Journal of Money Laundering Control, vol. 27, no. 1, pp. 21–33, Jan. 2024, doi: 10.1108/JMLC-01-2023-0014. DOI: https://doi.org/10.1108/JMLC-01-2023-0014

[35] F. Pathe Duarte, “Non-kinetic hybrid threats in Europe – the Portuguese case study (2017-18),” Transforming Government: People, Process and Policy, vol. 14, no. 3, pp. 433–451, Aug. 2020, doi: 10.1108/TG-01-2020-0011. DOI: https://doi.org/10.1108/TG-01-2020-0011

[36] B. Krishna and S. M.P, “Examining the relationship between e-government development, nation’s cyber-security commitment, business usage and economic prosperity: a cross-country analysis,” Information and Computer Security, vol. 29, no. 5, pp. 737–760, Nov. 2021, doi: 10.1108/ICS-12-2020-0205. DOI: https://doi.org/10.1108/ICS-12-2020-0205

[37] H. t. A. N. Abd Al Ghaffar, “Government Cloud Computing and National Security,” Review of Economics and Political Science, vol. 9, no. 2, pp. 116–133, Apr. 2024, doi: 10.1108/REPS-09-2019-0125. DOI: https://doi.org/10.1108/REPS-09-2019-0125

[38] L. Waller et al., “Woe is the dark Web: the main challenges that governments of the Commonwealth Caribbean will face in combating dark Web-facilitated criminal activities,” Transforming Government: People, Process and Policy, vol. 17, no. 1, pp. 87–100, Feb. 2023, doi: 10.1108/TG-06-2022-0082. DOI: https://doi.org/10.1108/TG-06-2022-0082

[39] S. Takavarasha Jr, R. Van Heerden, S. C. Thakur, and A. Jordaan, “Cyber-security in the era of the COVID-19 pandemic: a developing countries’ perspective,” International Journal of Industrial Engineering and Operations Management, vol. 5, no. 2, pp. 77–85, Jun. 2023, doi: 10.1108/ijieom-02-2023-0026. DOI: https://doi.org/10.1108/IJIEOM-02-2023-0026

[40] N. H. Chowdhury, M. T. P. Adam, and T. Teubner, “Rushing for security: a document analysis on the sources and effects of time pressure on organizational cybersecurity,” Information and Computer Security, vol. 31, no. 4, pp. 504–526, Oct. 2023, doi: 10.1108/ICS-01-2021-0013. DOI: https://doi.org/10.1108/ICS-01-2021-0013

[41] M. U. Rana, O. Ellahi, M. Alam, J. L. Webber, A. Mehbodniya, and S. Khan, “Offensive Security: Cyber Threat Intelligence Enrichment With Counterintelligence and Counterattack,” IEEE Access, vol. 10, pp. 108760–108774, 2022, doi: 10.1109/ACCESS.2022.3213644. DOI: https://doi.org/10.1109/ACCESS.2022.3213644

[42] S. A. Lone and A. H. Mir, “A novel OTP based tripartite authentication scheme,” International Journal of Pervasive Computing and Communications, vol. 18, no. 4, pp. 437–459, Jul. 2022, doi: 10.1108/IJPCC-04-2021-0097. DOI: https://doi.org/10.1108/IJPCC-04-2021-0097

[43] E. Heeren-Moon, “Risk, reputation and responsibility: Cybersecurity and centralized data in United States civilian federal agencies,” Telecomm Policy, vol. 47, no. 2, Mar. 2023, doi: 10.1016/j.telpol.2023.102502. DOI: https://doi.org/10.1016/j.telpol.2023.102502

[44] F. Skopik and T. Pahi, “Under false flag: using technical artifacts for cyber attack attribution,” Cybersecurity, vol. 3, no. 1, Dec. 2020, doi: 10.1186/s42400-020-00048-4. DOI: https://doi.org/10.1186/s42400-020-00048-4

[45] M. M. Salim, S. K. Singh, and J. H. Park, “Securing Smart Cities using LSTM algorithm and lightweight containers against botnet attacks,” Appl Soft Comput, vol. 113, Dec. 2021, doi: 10.1016/j.asoc.2021.107859. DOI: https://doi.org/10.1016/j.asoc.2021.107859

[46] R. Gafni and T. Pavel, “Cyberattacks against the health-care sectors during the COVID-19 pandemic,” Information and Computer Security, vol. 30, no. 1, pp. 137–150, Jan. 2022, doi: 10.1108/ICS-05-2021-0059. DOI: https://doi.org/10.1108/ICS-05-2021-0059

[47] S. Maesschalck, V. Giotsas, B. Green, and N. Race, “Don’t get stung, cover your ICS in honey: How do honeypots fit within industrial control system security,” Comput Secur, vol. 114, Mar. 2022, doi: 10.1016/j.cose.2021.102598. DOI: https://doi.org/10.1016/j.cose.2021.102598

[48] K. Zhao, “Construction of Network Culture Security Indicator System Based on Deep Learning Algorithm,” in Procedia Computer Science, Elsevier B.V., 2023, pp. 438–445. doi: 10.1016/j.procs.2023.11.050. DOI: https://doi.org/10.1016/j.procs.2023.11.050

[49] J. Navajas-Adán, E. Badia-Gelabert, L. Jiménez-Saurina, M. J. Marijuán-Martín, and R. Mayo-García, “Perceptions and dilemmas around cyber-security in a Spanish research center after a cyber-attack,” Int J Inf Secur, vol. 23, no. 3, pp. 2315–2331, Jun. 2024, doi: 10.1007/s10207-024-00847-7. DOI: https://doi.org/10.1007/s10207-024-00847-7

[50] D. Humphreys, A. Koay, D. Desmond, and E. Mealy, “AI hype as a cyber security risk: the moral responsibility of implementing generative AI in business,” AI and Ethics, vol. 4, no. 3, pp. 791–804, Aug. 2024, doi: 10.1007/s43681-024-00443-4. DOI: https://doi.org/10.1007/s43681-024-00443-4