activity
20132023
most citedAutomatic Labeling for Entity Extraction in Cyber Security

73 citations · 204 across the 12 of their papers we have counts for

collaborators

12 papers

cs.CR2023★ 1 cited

AI ATAC 1: An Evaluation of Prominent Commercial Malware Detectors

Robert A. Bridges, Brian Weber, Justin M. Beaver +11

This work presents an evaluation of six prominent commercial endpoint malware detectors, a network malware detector, and a file-conviction algorithm from a cyber technology vendor.…

cs.CR2023

Developing and Deploying Security Applications for In-Vehicle Networks

Samuel C Hollifield, Pablo Moriano, William L Lambert +3

Radiological material transportation is primarily facilitated by heavy-duty on-road vehicles. Modern vehicles have dozens of electronic control units or ECUs, which are small, embe…

cs.CR2022★ 11 cited

Detecting CAN Masquerade Attacks with Signal Clustering Similarity

Pablo Moriano, Robert A. Bridges, Michael D. Iannacone

Vehicular Controller Area Networks (CANs) are susceptible to cyber attacks of different levels of sophistication. Fabrication attacks are the easiest to administer -- an adversary…

cs.CR2021★ 16 cited

Time-Based CAN Intrusion Detection Benchmark

Deborah H. Blevins, Pablo Moriano, Robert A. Bridges +3

Modern vehicles are complex cyber-physical systems made of hundreds of electronic control units (ECUs) that communicate over controller area networks (CANs). This inherited complex…

cs.CR2020★ 70 cited

A Comprehensive Guide to CAN IDS Data & Introduction of the ROAD Dataset

Miki E. Verma, Robert A. Bridges, Michael D. Iannacone +5

Although ubiquitous in modern vehicles, Controller Area Networks (CANs) lack basic security properties and are easily exploitable. A rapidly growing field of CAN security research…

cs.CR2020★ 5 cited

Beyond the Hype: A Real-World Evaluation of the Impact and Cost of Machine Learning-Based Malware Detection

Robert A. Bridges, Sean Oesch, Miki E. Verma +12

In this paper, we present a scientific evaluation of four prominent malware detection tools to assist an organization with two primary questions: To what extent do ML-based tools a…

cs.OH2020★ 1 cited

CAN-D: A Modular Four-Step Pipeline for Comprehensively Decoding Controller Area Network Data

Miki E. Verma, Robert A. Bridges, Jordan J. Sosnowski +2

CANs are a broadcast protocol for real-time communication of critical vehicle subsystems. Original equipment manufacturers of passenger vehicles hold secret their mappings of CAN d…

cs.CR2019

Quantifiable & Comparable Evaluations of Cyber Defensive Capabilities: A Survey & Novel, Unified Approach

Michael D. Iannacone, Robert A. Bridges

Metrics and frameworks to quantifiably assess security measures have arisen from needs of three distinct research communities - statistical measures from the intrusion detection an…

cs.HC2018★ 10 cited

How do information security workers use host data? A summary of interviews with security analysts

Robert A. Bridges, Michael D. Iannacone, John R. Goodall +1

Modern security operations centers (SOCs) employ a variety of tools for intrusion detection, prevention, and widespread log aggregation and analysis. While research efforts are qui…

cs.CR2018★ 17 cited

A Survey of Intrusion Detection Systems Leveraging Host Data

Tarrah R. Glass-Vanderlan, Michael D. Iannacone, Maria S. Vincent +3

This survey focuses on intrusion detection systems (IDS) that leverage host-based data sources for detecting attacks on enterprise network. The host-based IDS (HIDS) literature is…

cs.IR2013★ 73 cited

Automatic Labeling for Entity Extraction in Cyber Security

Robert A. Bridges, Corinne L. Jones, Michael D. Iannacone +2

Timely analysis of cyber-security information necessitates automated information extraction from unstructured text. While state-of-the-art extraction methods produce extremely accu…

cs.IR2013

PACE: Pattern Accurate Computationally Efficient Bootstrapping for Timely Discovery of Cyber-Security Concepts

Nikki McNeil, Robert A. Bridges, Michael D. Iannacone +3

Public disclosure of important security information, such as knowledge of vulnerabilities or exploits, often occurs in blogs, tweets, mailing lists, and other online sources months…