ACNS WorkshopsPub Date : 2023-06-25DOI: 10.48550/arXiv.2306.14090
Aldin Vehabovic, H. Zanddizari, F. Shaikh, Nasir Ghani, Morteza Safaei Pour, E. Bou-Harb, J. Crichigno
{"title":"Federated Learning Approach for Distributed Ransomware Analysis","authors":"Aldin Vehabovic, H. Zanddizari, F. Shaikh, Nasir Ghani, Morteza Safaei Pour, E. Bou-Harb, J. Crichigno","doi":"10.48550/arXiv.2306.14090","DOIUrl":"https://doi.org/10.48550/arXiv.2306.14090","url":null,"abstract":"Researchers have proposed a wide range of ransomware detection and analysis schemes. However, most of these efforts have focused on older families targeting Windows 7/8 systems. Hence there is a critical need to develop efficient solutions to tackle the latest threats, many of which may have relatively fewer samples to analyze. This paper presents a machine learning (ML) framework for early ransomware detection and attribution. The solution pursues a data-centric approach which uses a minimalist ransomware dataset and implements static analysis using portable executable (PE) files. Results for several ML classifiers confirm strong performance in terms of accuracy and zero-day threat detection.","PeriodicalId":406001,"journal":{"name":"ACNS Workshops","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-06-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127326625","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
ACNS WorkshopsPub Date : 2023-05-06DOI: 10.48550/arXiv.2305.04102
Mahender Kumar, G. Epiphaniou, C. Maple
{"title":"Leveraging Semantic Relationships to Prioritise Indicators of Compromise in Additive Manufacturing Systems","authors":"Mahender Kumar, G. Epiphaniou, C. Maple","doi":"10.48550/arXiv.2305.04102","DOIUrl":"https://doi.org/10.48550/arXiv.2305.04102","url":null,"abstract":"Additive manufacturing (AM) offers numerous benefits, such as manufacturing complex and customised designs quickly and cost-effectively, reducing material waste, and enabling on-demand production. However, several security challenges are associated with AM, making it increasingly attractive to attackers ranging from individual hackers to organised criminal gangs and nation-state actors. This paper addresses the cyber risk in AM to attackers by proposing a novel semantic-based threat prioritisation system for identifying, extracting and ranking indicators of compromise (IOC). The system leverages the heterogeneous information networks (HINs) that automatically extract high-level IOCs from multi-source threat text and identifies semantic relations among the IOCs. It models IOCs with a HIN comprising different meta-paths and meta-graphs to depict semantic relations among diverse IOCs. We introduce a domain-specific recogniser that identifies IOCs in three domains: organisation-specific, regional source-specific, and regional target-specific. A threat assessment uses similarity measures based on meta-paths and meta-graphs to assess semantic relations among IOCs. It prioritises IOCs by measuring their severity based on the frequency of attacks, IOC lifetime, and exploited vulnerabilities in each domain.","PeriodicalId":406001,"journal":{"name":"ACNS Workshops","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126419904","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
ACNS WorkshopsPub Date : 2023-05-01DOI: 10.48550/arXiv.2305.00690
Francesco Intoci, Sinem Sav, Apostolos Pyrgelis, Jean-Philippe Bossuat, J. Troncoso-Pastoriza, Jean-Pierre Hubaux
{"title":"slytHErin: An Agile Framework for Encrypted Deep Neural Network Inference","authors":"Francesco Intoci, Sinem Sav, Apostolos Pyrgelis, Jean-Philippe Bossuat, J. Troncoso-Pastoriza, Jean-Pierre Hubaux","doi":"10.48550/arXiv.2305.00690","DOIUrl":"https://doi.org/10.48550/arXiv.2305.00690","url":null,"abstract":"Homomorphic encryption (HE), which allows computations on encrypted data, is an enabling technology for confidential cloud computing. One notable example is privacy-preserving Prediction-as-a-Service (PaaS), where machine-learning predictions are computed on encrypted data. However, developing HE-based solutions for encrypted PaaS is a tedious task which requires a careful design that predominantly depends on the deployment scenario and on leveraging the characteristics of modern HE schemes. Prior works on privacy-preserving PaaS focus solely on protecting the confidentiality of the client data uploaded to a remote model provider, e.g., a cloud offering a prediction API, and assume (or take advantage of the fact) that the model is held in plaintext. Furthermore, their aim is to either minimize the latency of the service by processing one sample at a time, or to maximize the number of samples processed per second, while processing a fixed (large) number of samples. In this work, we present slytHErin, an agile framework that enables privacy-preserving PaaS beyond the application scenarios considered in prior works. Thanks to its hybrid design leveraging HE and its multiparty variant (MHE), slytHErin enables novel PaaS scenarios by encrypting the data, the model or both. Moreover, slytHErin features a flexible input data packing approach that allows processing a batch of an arbitrary number of samples, and several computation optimizations that are model-and-setting-agnostic. slytHErin is implemented in Go and it allows end-users to perform encrypted PaaS on custom deep learning models comprising fully-connected, convolutional, and pooling layers, in a few lines of code and without having to worry about the cumbersome implementation and optimization concerns inherent to HE.","PeriodicalId":406001,"journal":{"name":"ACNS Workshops","volume":"18 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2023-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133307772","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
ACNS WorkshopsPub Date : 2022-03-27DOI: 10.1007/978-3-031-16815-4_22
Allon Adir, E. Aharoni, Nir Drucker, Eyal Kushnir, Ramy Masalha, Michael Mirkin, Omri Soceanu
{"title":"Privacy-preserving record linkage using local sensitive hash and private set intersection","authors":"Allon Adir, E. Aharoni, Nir Drucker, Eyal Kushnir, Ramy Masalha, Michael Mirkin, Omri Soceanu","doi":"10.1007/978-3-031-16815-4_22","DOIUrl":"https://doi.org/10.1007/978-3-031-16815-4_22","url":null,"abstract":"","PeriodicalId":406001,"journal":{"name":"ACNS Workshops","volume":"115 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2022-03-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121477327","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
ACNS WorkshopsPub Date : 2021-11-05DOI: 10.1007/978-3-031-16815-4_29
Moran Baruch, Nir Drucker, L. Greenberg, Guy Moshkowich
{"title":"A Methodology for Training Homomorphic Encryption Friendly Neural Networks","authors":"Moran Baruch, Nir Drucker, L. Greenberg, Guy Moshkowich","doi":"10.1007/978-3-031-16815-4_29","DOIUrl":"https://doi.org/10.1007/978-3-031-16815-4_29","url":null,"abstract":"","PeriodicalId":406001,"journal":{"name":"ACNS Workshops","volume":"22 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-11-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123884825","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
ACNS WorkshopsPub Date : 2021-07-13DOI: 10.1007/978-3-031-16815-4_19
A. C. Chan, Jianying Zhou
{"title":"Toward Safe Integration of Legacy SCADA Systems in the Smart Grid","authors":"A. C. Chan, Jianying Zhou","doi":"10.1007/978-3-031-16815-4_19","DOIUrl":"https://doi.org/10.1007/978-3-031-16815-4_19","url":null,"abstract":"","PeriodicalId":406001,"journal":{"name":"ACNS Workshops","volume":"121 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-07-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127606256","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
ACNS WorkshopsPub Date : 2021-06-21DOI: 10.1007/978-3-030-81645-2_23
Niusen Chen, Wenxue Xie, Bo Chen
{"title":"Combating the OS-Level Malware in Mobile Devices by Leveraging Isolation and Steganography","authors":"Niusen Chen, Wenxue Xie, Bo Chen","doi":"10.1007/978-3-030-81645-2_23","DOIUrl":"https://doi.org/10.1007/978-3-030-81645-2_23","url":null,"abstract":"","PeriodicalId":406001,"journal":{"name":"ACNS Workshops","volume":"287 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2021-06-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115892539","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
ACNS WorkshopsPub Date : 2020-10-19DOI: 10.1007/978-3-030-61638-0_22
Weijing You, Bo Chen
{"title":"Proofs of Ownership on Encrypted Cloud Data via Intel SGX","authors":"Weijing You, Bo Chen","doi":"10.1007/978-3-030-61638-0_22","DOIUrl":"https://doi.org/10.1007/978-3-030-61638-0_22","url":null,"abstract":"","PeriodicalId":406001,"journal":{"name":"ACNS Workshops","volume":"140 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-10-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133315857","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}