539 citations
- Massachusetts Institute of TechnologyUS15 papers
- Sandia National LaboratoriesUS11 papers
- Harvard UniversityUS8 papers
- Brookhaven National LaboratoryUS7 papers
- Eaton (United States)US7 papers
- University of Maryland, College ParkUS7 papers
- University of ArizonaUS6 papers
- George Mason UniversityUS5 papers
- University of VermontUS5 papers
- University of WashingtonUS4 papers
- California Institute of TechnologyUS3 papers
- Center for Astrophysics Harvard & SmithsonianUS3 papers
8 papers · 1 filter
Automated Repeatable Adversary Threat Emulation with Effects Language (EL)
Suresh K. Damodaran, Paul D. Rowe
The emulation of multi-step attacks attributed to advanced persistent threats is valuable for training defenders and evaluating defense tools. In this paper, we discuss the numerou…
Slowly Scaling Per-Record Differential Privacy
Brian Finley, Anthony M Caruso, Justin C Doty +5
We develop formal privacy mechanisms for releasing statistics from data with many outlying values, such as income data. These mechanisms ensure that a per-record differential priva…
Towards Causal Models for Adversary Distractions
Ron Alford, Andy Applebaum
Automated adversary emulation is becoming an indispensable tool of network security operators in testing and evaluating their cyber defenses. At the same time, it has exposed how q…
Beyond the Hype: A Real-World Evaluation of the Impact and Cost of Machine Learning-Based Malware Detection
Robert A. Bridges, Sean Oesch, Miki E. Verma +12
In this paper, we present a scientific evaluation of four prominent malware detection tools to assist an organization with two primary questions: To what extent do ML-based tools a…
Intrusion Detection System for Applications using Linux Containers
Amr S. Abed, Charles Clancy, David S. Levy
Linux containers are gaining increasing traction in both individual and industrial use, and as these containers get integrated into mission-critical systems, real-time detection of…
Principles of Layered Attestation
Paul D. Rowe
Systems designed with measurement and attestation in mind are often layered, with the lower layers measuring the layers above them. Attestations of such systems, which we call laye…