activity
20172023
most citedTesting SOAR Tools in Use

34 citations · 50 across the 5 of their papers we have counts for

collaborators

6 papers

cs.CR2023★ 1 cited

AI ATAC 1: An Evaluation of Prominent Commercial Malware Detectors

Robert A. Bridges, Brian Weber, Justin M. Beaver +11

This work presents an evaluation of six prominent commercial endpoint malware detectors, a network malware detector, and a file-conviction algorithm from a cyber technology vendor.…

cs.CR2022★ 34 cited

Testing SOAR Tools in Use

Robert A. Bridges, Ashley E. Rice, Sean Oesch +11

Modern security operation centers (SOCs) rely on operators and a tapestry of logging and alerting tools with large scale collection and query abilities. SOC investigations are tedi…

cs.CR2022

Assembling a Cyber Range to Evaluate Artificial Intelligence / Machine Learning (AI/ML) Security Tools

Jeffrey A. Nichols, Kevin D. Spakes, Cory L. Watson +1

In this case study, we describe the design and assembly of a cyber security testbed at Oak Ridge National Laboratory in Oak Ridge, TN, USA. The range is designed to provide agile r…

cs.CR2020★ 5 cited

Beyond the Hype: A Real-World Evaluation of the Impact and Cost of Machine Learning-Based Malware Detection

Robert A. Bridges, Sean Oesch, Miki E. Verma +12

In this paper, we present a scientific evaluation of four prominent malware detection tools to assist an organization with two primary questions: To what extent do ML-based tools a…

cs.CR2018★ 2 cited

Towards Malware Detection via CPU Power Consumption: Data Collection Design and Analytics (Extended Version)

Robert Bridges, Jarilyn Hernandez Jimenez, Jeffrey Nichols +2

This paper presents an experimental design and data analytics approach aimed at power-based malware detection on general-purpose computers. Leveraging the fact that malware executi…

cs.CR2017★ 8 cited

Malware Detection on General-Purpose Computers Using Power Consumption Monitoring: A Proof of Concept and Case Study

Jarilyn M. Hernández Jiménez, Jeffrey A. Nichols, Katerina Goseva-Popstojanova +2

Malware detection is challenging when faced with automatically generated and polymorphic malware, as well as with rootkits, which are exceptionally hard to detect. In an attempt to…