681 citations · 771 across the 23 of their papers we have counts for
20 papers · 1 filter
Nosy Layers, Noisy Fixes: Tackling DRAs in Federated Learning Systems using Explainable AI
Meghali Nandi, Arash Shaghaghi, Nazatul Haque Sultan +3
Federated Learning (FL) has emerged as a powerful paradigm for collaborative model training while keeping client data decentralized and private. However, it is vulnerable to Data R…
SoK: Decoding the Enigma of Encrypted Network Traffic Classifiers
Nimesha Wickramasinghe, Arash Shaghaghi, Gene Tsudik +1
The adoption of modern encryption protocols such as TLS 1.3 has significantly challenged traditional network traffic classification (NTC) methods. As a consequence, researchers are…
Beyond Life: A Digital Will Solution for Posthumous Data Management
Xinzhang Chen, Arash Shaghaghi, Jesse Laeuchli +1
In the digital era, managing posthumous data presents a growing challenge, with current technical solutions often falling short in practicality. Existing tools are typically closed…
Predicting IoT Device Vulnerability Fix Times with Survival and Failure Time Models
Carlos A Rivera A, Xinzhang Chen, Arash Shaghaghi +2
The rapid integration of Internet of Things (IoT) devices into enterprise environments presents significant security challenges. Many IoT devices are released to the market with mi…
Towards Weaknesses and Attack Patterns Prediction for IoT Devices
Carlos A. Rivera A., Arash Shaghaghi, Gustavo Batista +1
As the adoption of Internet of Things (IoT) devices continues to rise in enterprise environments, the need for effective and efficient security measures becomes increasingly critic…
Towards Threat Modelling of IoT Context-Sharing Platforms
Mohammad Goudarzi, Arash Shaghaghi, Simon Finn +2
The Internet of Things (IoT) involves complex, interconnected systems and devices that depend on context-sharing platforms for interoperability and information exchange. These plat…
Towards Detecting IoT Event Spoofing Attacks Using Time-Series Classification
Uzma Maroof, Gustavo Batista, Arash Shaghaghi +1
Internet of Things (IoT) devices have grown in popularity since they can directly interact with the real world. Home automation systems automate these interactions. IoT events are…
AuditNet: A Conversational AI-based Security Assistant [DEMO]
Shohreh Deldari, Mohammad Goudarzi, Aditya Joshi +4
In the age of information overload, professionals across various fields face the challenge of navigating vast amounts of documentation and ever-evolving standards. Ensuring complia…
Lack of Systematic Approach to Security of IoT Context Sharing Platforms
Mohammad Goudarzi, Arash Shaghaghi, Simon Finn +1
IoT context-sharing platforms are an essential component of today's interconnected IoT deployments with their security affecting the entire deployment and the critical infrastructu…
Is this IoT Device Likely to be Secure? Risk Score Prediction for IoT Devices Using Gradient Boosting Machines
Carlos A. Rivera Alvarez, Arash Shaghaghi, David D. Nguyen +1
Security risk assessment and prediction are critical for organisations deploying Internet of Things (IoT) devices. An absolute minimum requirement for enterprises is to verify the…
Towards Decentralized IoT Updates Delivery Leveraging Blockchain and Zero-Knowledge Proofs
Edoardo Puggioni, Arash Shaghaghi, Robin Doss +1
We propose CrowdPatching, a blockchain-based decentralized protocol, allowing Internet of Things (IoT) manufacturers to delegate the delivery of software updates to self-interested…
Towards a Lightweight Continuous Authentication Protocol for Device-to-Device Communication
Syed W. Shah, Naeem F. Syed, Arash Shaghaghi +3
Continuous Authentication (CA) has been proposed as a potential solution to counter complex cybersecurity attacks that exploit conventional static authentication mechanisms that au…
Health Access Broker: Secure, Patient-Controlled Management of Personal Health Records in the Cloud
Zainab Abaid, Arash Shaghaghi, Ravin Gunawardena +3
Secure and privacy-preserving management of Personal Health Records (PHRs) has proved to be a major challenge in modern healthcare. Current solutions generally do not offer patient…
Attacking with bitcoin: Using Bitcoin to Build Resilient Botnet Armies
Dimitri Kamenski, Arash Shaghaghi, Matthew Warren +1
We focus on the problem of botnet orchestration and discuss how attackers can leverage decentralised technologies to dynamically control botnets with the goal of having botnets tha…
Gwardar: Towards Protecting a Software-Defined Network from Malicious Network Operating Systems
Arash Shaghaghi, Salil S. Kanhere, Mohamed Ali Kaafar +1
A Software-Defined Network (SDN) controller (aka. Network Operating System or NOS) is regarded as the brain of the network and is the single most critical element responsible to ma…
Gargoyle: A Network-based Insider Attack Resilient Framework for Organizations
Arash Shaghaghi, Salil S. Kanhere, Mohamed Ali Kaafar +2
`Anytime, Anywhere' data access model has become a widespread IT policy in organizations making insider attacks even more complicated to model, predict and deter. Here, we propose…
Software-Defined Network (SDN) Data Plane Security: Issues, Solutions and Future Directions
Arash Shaghaghi, Mohamed Ali Kaafar, Rajkumar Buyya +1
Software-Defined Network (SDN) radically changes the network architecture by decoupling the network logic from the underlying forwarding devices. This architectural change rejuvena…
WedgeTail: An Intrusion Prevention System for the Data Plane of Software Defined Networks
Arash Shaghaghi, Mohamed Ali Kaafar, Sanjay Jha
Networks are vulnerable to disruptions caused by malicious forwarding devices. The situation is likely to worsen in Software Defined Networks (SDNs) with the incompatibility of exi…
Towards Policy Enforcement Point as a Service (PEPS)
Arash Shaghaghi, Mohamed Ali, Kaafar +3
In this paper, we coin the term Policy Enforcement as a Service (PEPS), which enables the provision of innovative inter-layer and inter-domain Access Control. We leverage the archi…
Function-Based Access Control (FBAC): From Access Control Matrix to Access Control Tensor
Yvo Desmedt, Arash Shaghaghi
Security researchers have stated that the core concept behind current implementations of access control predates the Internet. These assertions are made to pinpoint that there is a…