3 citations · 7 across the 7 of their papers we have counts for
7 papers
Building an Open Source Operational Technology Pentesting Platform: Lessons from LINICS
Awais Rashid, Joseph Gardiner, Louise Evans
Information Technology (IT) security professionals have ready access to open-source platforms such as Kali Linux. But no such platform exists for Operational Technology (OT) that u…
Decisions & Disruptions 2: Decide Harder
Benjamin Shreeve, Joseph Gardiner, Joseph Hallett +2
Cyber incident response is critical to business continuity -- we describe a new exercise that challenges professionals to play the role of Chief Information Security Officer (CISO)…
Threat Models over Space and Time: A Case Study of E2EE Messaging Applications
Partha Das Chowdhury, Maria Sameen, Jenny Blessing +5
Threat modelling is foundational to secure systems engineering and should be done in consideration of the context within which systems operate. On the other hand, the continuous ev…
A Taxonomy for Contrasting Industrial Control Systems Asset Discovery Tools
Emmanouil Samanis, Joseph Gardiner, Awais Rashid
Asset scanning and discovery is the first and foremost step for organizations to understand what assets they have and what to protect. There is currently a plethora of free and com…
Technical Report: Gone in 20 Seconds -- Overview of a Password Vulnerability in Siemens HMIs
Joseph Gardiner, Awais Rashid
Siemens produce a range of industrial human machine interface (HMI) screens which allow operators to both view information about and control physical processes. For scenarios where…
Blindspot: Indistinguishable Anonymous Communications
Joseph Gardiner, Shishir Nagaraja
Communication anonymity is a key requirement for individuals under targeted surveillance. Practical anonymous communications also require indistinguishability - an adversary should…
Command & Control: Understanding, Denying and Detecting - A review of malware C2 techniques, detection and defences
Joseph Gardiner, Marco Cova, Shishir Nagaraja
In this survey, we first briefly review the current state of cyber attacks, highlighting significant recent changes in how and why such attacks are performed. We then investigate t…