2022 IEEE Conference on Dependable and Secure Computing (DSC)最新文献_第5页

Discovering Exfiltration Paths Using Reinforcement Learning with Attack Graphs 使用攻击图的强化学习发现泄露路径

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-01-28 DOI: 10.1109/DSC54232.2022.9888919

Tyler Cody, Abdul Rahman, Christopher Redino, Lanxiao Huang, Ryan Clark, A. Kakkar, Deepak Kushwaha, Paul Park, P. Beling, E. Bowen

引用次数: 9

Graph Neural Network-based Android Malware Classification with Jumping Knowledge 基于跳知识的图神经网络Android恶意软件分类

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-01-19 DOI: 10.1109/DSC54232.2022.9888878

Wai Weng Lo, S. Layeghy, Mohanad Sarhan, Marcus Gallagher, Marius Portmann

引用次数: 7

Security Orchestration, Automation, and Response Engine for Deployment of Behavioural Honeypots 行为蜜罐部署的安全编排、自动化和响应引擎

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2022-01-14 DOI: 10.1109/DSC54232.2022.9888808

Upendra Bartwal, Subhasis Mukhopadhyay, R. Negi, S. Shukla

{"title":"Security Orchestration, Automation, and Response Engine for Deployment of Behavioural Honeypots","authors":"Upendra Bartwal, Subhasis Mukhopadhyay, R. Negi, S. Shukla","doi":"10.1109/DSC54232.2022.9888808","DOIUrl":"https://doi.org/10.1109/DSC54232.2022.9888808","url":null,"abstract":"Cyber Security is a critical topic for organizations with IT/ OT networks as they are always susceptible to attack, whether insider or outsider. Since the cyber landscape is an ever-evolving scenario, one must keep upgrading its security systems to enhance the security of the infrastructure. Tools like Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Threat Intelligence Platform (TIP), Information Technology Service Management (ITSM), along with other defensive techniques like Intrusion Detection System (IDS), Intrusion Protection System (IPS), and many others enhance the cyber security posture of the infrastructure. However, the proposed protection mechanisms have their limitations, they are insufficient to ensure security, and the attacker penetrates the network. Deception technology, along with Honeypots, provides a false sense of vulnerability in the target systems to the attackers. The attacker deceived reveals threat intel about their modus operandi. We have developed a Security Orchestration, Automation, and Response (SOAR) Engine that dynamically deploys custom honeypots inside the internal network infrastructure based on the attacker's behavior. The architecture is robust enough to support multiple VLANs connected to the system and used for orchestration. The presence of botnet traffic and DDoS attacks on the honeypots in the network is detected, along with a malware collection system. After being exposed to live traffic for four days, our engine dynamically orchestrated the honeypots 40 times, detected 7823 attacks, 965 DDoS attack packets, and three malicious samples. While our experiments with static honeypots show an average attacker engagement time of 102 seconds per instance, our SOAR Engine-based dynamic honeypots engage attackers on average 3148 seconds.","PeriodicalId":368903,"journal":{"name":"2022 IEEE Conference on Dependable and Secure Computing (DSC)","volume":"58 11","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-01-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131609420","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

A Hybrid Graph Neural Network Approach for Detecting PHP Vulnerabilities 基于混合图神经网络的PHP漏洞检测方法

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2020-12-16 DOI: 10.1109/DSC54232.2022.9888816

Rishi Rabheru, Hazim Hanif, S. Maffeis

引用次数: 6

Securing Password Authentication for Web-based Applications 保护基于web的应用程序的密码身份验证

2022 IEEE Conference on Dependable and Secure Computing (DSC) Pub Date : 2020-11-12 DOI: 10.1109/DSC54232.2022.9888923

Teik Guan Tan, Pawel Szalachowski, Jianying Zhou

引用次数: 1