2023 IEEE International Conference on Cyber Security and Resilience (CSR)最新文献_第5页

A New Fast and Side-Channel Resistant AES Hardware Architecture 一种新的快速抗侧信道AES硬件架构

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224984

Marco Macchetti, Hervé Pelletier, C. Groux

引用次数: 0

New Version, New Answer: Investigating Cybersecurity Static-Analysis Tool Findings 新版本，新答案:调查网络安全静态分析工具的发现

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224930

A. Reinhold, Travis Weber, Colleen Lemak, Derek Reimanis, C. Izurieta

{"title":"New Version, New Answer: Investigating Cybersecurity Static-Analysis Tool Findings","authors":"A. Reinhold, Travis Weber, Colleen Lemak, Derek Reimanis, C. Izurieta","doi":"10.1109/CSR57506.2023.10224930","DOIUrl":"https://doi.org/10.1109/CSR57506.2023.10224930","url":null,"abstract":"Automated detection of vulnerabilities and weaknesses in binary code is a critical need at the frontier of cybersecurity research. Cybersecurity static-analysis tools aim to detect and enumerate vulnerabilities and weaknesses. Two popular tools are CVE Binary Tool (cve-bin-tool) and cwe-checker. Cve-bin-tool reports vulnerabilities using Common Vulnerabilities and Exposures (CVE) whereas cwe-checker reports weaknesses using Common Weakness Enumeration (CWE). Despite widespread use, the consistency with which these tools report vulnerabilities and weaknesses (herein, “findings”) was unaddressed. We conducted a systematic investigation of 660 unique binaries taken from a Kali Linux distribution, evaluated each binary with multiple versions of the static-analysis tools, and investigated how the findings changed according to the version of the static-analysis tool used. We expected some variation in findings commensurate with the software-development life cycle. However, the number and magnitude of the changes in findings reported across versions were substantial. New versions gave new answers.","PeriodicalId":354918,"journal":{"name":"2023 IEEE International Conference on Cyber Security and Resilience (CSR)","volume":"6 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-07-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123823342","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

ML and Network Traces to M.A.R.S ML和网络追踪到M.A.R.S

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224950

Waldemar Cruz, L. Michel, Benjamin Drozdenko, S. Roodbeen

引用次数: 0

Threat intelligence using Digital Twin honeypots in Cybersecurity 网络安全中使用数字孪生蜜罐的威胁情报

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224997

Maria Nintsiou, Elisavet Grigoriou, P. Karypidis, Theocharis Saoulidis, Eleftherios Fountoukidis, P. Sarigiannidis

{"title":"Threat intelligence using Digital Twin honeypots in Cybersecurity","authors":"Maria Nintsiou, Elisavet Grigoriou, P. Karypidis, Theocharis Saoulidis, Eleftherios Fountoukidis, P. Sarigiannidis","doi":"10.1109/CSR57506.2023.10224997","DOIUrl":"https://doi.org/10.1109/CSR57506.2023.10224997","url":null,"abstract":"Digital Twins have been deployed for multiple purposes in Cybersecurity. Cyber-Physical Systems and similar systems are benefited from teaming with this technology. The goal of protecting the main systems or devices is easily reached as Digital Twins are known for their success and flexibility in multitasking and can provide adaptability to any device they clone. honeypots are excellent filtering and protection cyber tools capable of investigating and logging malicious activity around a network or device. This cyber tool mimics any network device or system and lures the attacker into a protected surveillance environment. It is not yet given the freedom, though, to act independently other than managing a few tasks and necessitates human intervention to change tactics or configuration. The framework proposed in this paper combines these two technologies, Digital Twins and honeypot, to fill this gap. The DiTwinIHon framework makes the physical honeypot easily adaptable in any network situation while enhancing its Threat Intelligence and providing additional features for detecting and investigating various threats, such as Advanced Persistent Threats.","PeriodicalId":354918,"journal":{"name":"2023 IEEE International Conference on Cyber Security and Resilience (CSR)","volume":"145 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-07-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123361481","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Hunting IoT Cyberattacks With AI - Powered Intrusion Detection 使用AI驱动的入侵检测来寻找物联网网络攻击

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224981

Sevasti Grigoriadou, Panagiotis I. Radoglou-Grammatikis, P. Sarigiannidis, Ioannis Makris, T. Lagkas, V. Argyriou, A. Lytos, Eleftherios Fountoukidis

{"title":"Hunting IoT Cyberattacks With AI - Powered Intrusion Detection","authors":"Sevasti Grigoriadou, Panagiotis I. Radoglou-Grammatikis, P. Sarigiannidis, Ioannis Makris, T. Lagkas, V. Argyriou, A. Lytos, Eleftherios Fountoukidis","doi":"10.1109/CSR57506.2023.10224981","DOIUrl":"https://doi.org/10.1109/CSR57506.2023.10224981","url":null,"abstract":"The rapid progression of the Internet of Things allows the seamless integration of cyber and physical environments, thus creating an overall hyper-connected ecosystem. It is evident that this new reality provides several capabilities and benefits, such as real-time decision-making and increased efficiency and productivity. However, it also raises crucial cybersecurity issues that can lead to disastrous consequences due to the vulnerable nature of the Internet model and the new cyber risks originating from the multiple and heterogeneous technologies involved in the loT. Therefore, intrusion detection and prevention are valuable and necessary mechanisms in the arsenal of the loT security. In light of the aforementioned remarks, in this paper, we introduce an Artificial Intelligence (AI)-powered Intrusion Detection and Prevention System (IDPS) that can detect and mitigate potential loT cyberattacks. For the detection process, Deep Neural Networks (DNNs) are used, while Software Defined Networking (SDN) and Q-Learning are combined for the mitigation procedure. The evaluation analysis demonstrates the detection efficiency of the proposed IDPS, while Q- Learning converges successfully in terms of selecting the appropriate mitigation action.","PeriodicalId":354918,"journal":{"name":"2023 IEEE International Conference on Cyber Security and Resilience (CSR)","volume":"85 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-07-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131740961","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Blockchain-Based Trustworthy O2O Interaction in the Next 6G Ecosystem 下一个6G生态系统中基于区块链的可信O2O互动

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224977

E. Bellini, E. Damiani, S. Marrone

引用次数: 0

Explaining Binary Obfuscation 解释二进制混淆

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224825

C. Greco, M. Ianni, A. Guzzo, G. Fortino

{"title":"Explaining Binary Obfuscation","authors":"C. Greco, M. Ianni, A. Guzzo, G. Fortino","doi":"10.1109/CSR57506.2023.10224825","DOIUrl":"https://doi.org/10.1109/CSR57506.2023.10224825","url":null,"abstract":"Binary obfuscation is a very broad set of techniques widely employed in the context of code protection from piracy. However, it is also used for malicious goals, e.g. virus writers often employ obfuscation in order to evade signature-based antivirus detection. Thus, the ability to detect if an executable has been obfuscated is of paramount importance, as it allows to thwart the execution of potentially malicious code. The task of detection, however, is not easy, since many different obfuscating transformations exist and the alteration of an original code is not always easily detectable. In this paper, we want to shed light on the blurry task of obfuscation detection. We will look at this task through the brand new lenses of explainable artificial intelligence (XAI), in order to finally sharpen the obscure landscape of obfuscated software. Thanks to XAI we will be able to identify the relevant features altered by the transformating obfuscation as well as the invariant ones, that can be used for obfuscation-resistant malware signatures. We show our findings thanks to an evaluation with a dataset of obfuscated and non-obfuscated binaries, explaining the important features that lead to the detection of obfuscating transformations.","PeriodicalId":354918,"journal":{"name":"2023 IEEE International Conference on Cyber Security and Resilience (CSR)","volume":"46 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-07-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123307931","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Trustworthiness-Related Risks in Autonomous Cyber-Physical Production Systems - A Survey 自主信息物理生产系统中与信任相关的风险——调查

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224955

Maryam Zahid, Alessio Bucaioni, Francesco Flammini

引用次数: 0

Optimizing AI for Mobile Malware Detection by Self-Built-Dataset GAN Oversampling and LGBM 基于自建数据集GAN过采样和LGBM的移动恶意软件检测优化

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224927

Ortal Dayan, L. Wolf, Fang Wang, Yaniv Harel

引用次数: 0

How to secure the IoT-based surveillance systems in an ELEGANT way 如何以优雅的方式保护基于物联网的监控系统

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224938

Aleksandra Pawlicka, Damian Puchalski, M. Pawlicki, R. Kozik, R. Choras

引用次数: 0