2023 IEEE International Conference on Cyber Security and Resilience (CSR)最新文献_第7页

Key Update for the IoT Security Standard OSCORE 物联网安全标准OSCORE密钥更新

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10225002

Rikard Höglund, Marco Tiloca, S. Bouget, S. Raza

引用次数: 0

A Semi-automatic Approach for Enhancing the Quality of Automatically Generated Inventories 一种提高自动生成库存质量的半自动方法

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10225003

Silvia Bonomi, Marco Cuoci, S. Lenti

引用次数: 0

Algorithm for simplifying the SHA-256 operations tree SHA-256操作树的简化算法

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224939

Andrey O. Plotnikov, A. Levina

引用次数: 0

Detecting Internal Reconnaissance Behavior Through Classification of Command Collections 通过命令集合分类检测内部侦察行为

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224951

Luke Vandenberghe, H. M. Koduvely, Maria Pospelova

{"title":"Detecting Internal Reconnaissance Behavior Through Classification of Command Collections","authors":"Luke Vandenberghe, H. M. Koduvely, Maria Pospelova","doi":"10.1109/CSR57506.2023.10224951","DOIUrl":"https://doi.org/10.1109/CSR57506.2023.10224951","url":null,"abstract":"Internal reconnaissance is the adversarial mechanism of obtaining information about an infiltrated system or network. A common method used by the adversary to acquire this information is through the execution command-line utilities. Presently, only rule-based techniques have been operationalized to directly detect this internal reconnaissance behavior. There is significant overlap between the commands entered by adversaries for this task and commands frequently issued by typical users for legitimate tasks. Deterministic detection approaches have difficulties distinguishing between internal reconnaissance and legitimate command-line behavior that fall in this overlap, resulting in high false positives rates. To more effectively distinguish the internal reconnaissance a behavior, stochastic techniques can be employed. This paper proposes a machine learning approach to detect internal reconnaissance through binary classification of command collections. It considers two learning methods namely latent Dirichlet allocation (LDA) and long short-term memory (LSTM) and shows that both outperforms state of the art methods.","PeriodicalId":354918,"journal":{"name":"2023 IEEE International Conference on Cyber Security and Resilience (CSR)","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-07-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126890503","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

Attacking a packet Analyzer: Caronte case study 攻击数据包分析器:Caronte案例研究

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224918

D. Granata, M. Rak, Francesco Grimaldi

{"title":"Attacking a packet Analyzer: Caronte case study","authors":"D. Granata, M. Rak, Francesco Grimaldi","doi":"10.1109/CSR57506.2023.10224918","DOIUrl":"https://doi.org/10.1109/CSR57506.2023.10224918","url":null,"abstract":"Nowadays it is common the adoption of network traffic analysis tools as a protection against possible cyberattacks, but Attackers have become increasingly skilled at building more and more complex attacks in order to avoid IDS/IPS action, typically through the adoption of evasion that hides attacks to the monitoring system. In this paper, we test an innovative idea to build attacks, that relies on the idea of carrying out attacks against a specific component of IDS/IPS, the packet analyzers, in order to make it (at least temporarily) unavailable, hiding possible attacks against the services. In order to explore the feasibility of the approach, we focused on a particular usage example: the network traffic analysis performed during the attack/defence Capture the Flag (CTF), a cybersecurity competition where different teams attempt to find vulnerabilities in services run by the opposing team, fix them and build exploits to perform attacks. It is worth noticing that such a scenario enabled us even to work in a protected context, avoiding producing attacks that can be exploited in a production environment. Accordingly, outlining that the state of the art shows a lack of results with respect to the proposed approach we performed a security assessment of the chosen tools and demonstrated the feasibility of the approach, concluding that these attack patterns should be taken into consideration when building a protection system.","PeriodicalId":354918,"journal":{"name":"2023 IEEE International Conference on Cyber Security and Resilience (CSR)","volume":"48 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-07-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133406609","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

A PUF Based on the Non-Linearity of Memristors 基于忆阻器非线性的PUF

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224980

Callum Aitchison, Basel Halak, Alexander Serb, T. Prodromakis

{"title":"A PUF Based on the Non-Linearity of Memristors","authors":"Callum Aitchison, Basel Halak, Alexander Serb, T. Prodromakis","doi":"10.1109/CSR57506.2023.10224980","DOIUrl":"https://doi.org/10.1109/CSR57506.2023.10224980","url":null,"abstract":"As autonomous devices are increasingly used in security and safety-critical applications the security of the systems they comprise is of increasing concern. In such situations it is important that devices can be securely identified and trusted. When an IC or device is in the supply chain, or in the field, the lack of control over actors who can obtain physical access can compromise the trust and overall security of a system. Counterfeit chips may be incorporated into the device, compromising reliability or security. Additionally, for implemented devices, keys stored on-device may be copied by a bad actor. To help improve the security of such devices this paper proposes a new physical unclonable function (PUF) architecture, based on a TiOx memristor-based resistive memory (RRAM), that exploits the inherent analogue non-linearity in resistance of some memristor technologies. By directly exploiting non-linearity of memristor cells, rather than relying on the devices' absolute resistance at a single test voltage, a multi-bit-per-comparison PUF is created. As the architecture directly exploits cells' non-linearity, an additional source of hard-to-clone entropy is incorporated.","PeriodicalId":354918,"journal":{"name":"2023 IEEE International Conference on Cyber Security and Resilience (CSR)","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-07-31","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130386931","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 0

RoG§: A Pipeline for Automated Sensitive Data Identification and Anonymisation 一种自动敏感数据识别和匿名化的管道

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224962

Sotirios Nikoletos, S. Vlachos, Efstathios Zaragkas, C. Vassilakis, Christos Tryfonopoulos, Paraskevi Raftopoulou

引用次数: 0

stealthML: Data-driven Malware for Stealthy Data Exfiltration stealthML:数据驱动的恶意软件，用于隐形数据泄露

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224946

Key-whan Chung, Phuong Cao, Z. Kalbarczyk, Ravishankar K. Iyer

引用次数: 0

An Open Sharing Method for Digital Heritage Assets Based on Self-Sovereign Identity Technology 基于自主权身份技术的数字遗产资产开放共享方法

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224909

Jiali Zhu, Zhenxin Wu

引用次数: 0

Small Satellite System Modeling for Vulnerability Analysis 基于脆弱性分析的小卫星系统建模

2023 IEEE International Conference on Cyber Security and Resilience (CSR) Pub Date : 2023-07-31 DOI: 10.1109/CSR57506.2023.10224948

Kyle Murbach, Tommy Morris, Fred Wiersig, Jeffery Golden

引用次数: 0