18 citations · 48 across the 18 of their papers we have counts for
18 papers · 1 filter
A Bulletproof Business? Towards Detecting Infrastructure-as-a-Service Offerings on Telegram
Roy Ricaldi, Kristiyan Kyurkchiev, Irdin Pekaric
Cybercriminal operations increasingly depend on reusable digital infrastructure---including hosting, proxies, and virtual private networks (VPNs)---rented through Cybercrime-as-a-S…
Topical Shifts in the Dark Web: A Longitudinal Analysis of Content from the Cybercrime Ecosystem
Roy Ricaldi, Maximilian Schafer, Philipp Zech +3
The dark web hosts a dynamic ecosystem of cybercrime forums and marketplaces that adapt to law enforcement pressure, technological change, and economic incentives. Prior research h…
Can SOC Operators Explain their Decisions while Triaging Alarms? A Real-World Study
Jessica Moosmann, Irdin Pekaric, Giovanni Apruzzese
Security Operations Centers (SOCs) are pivotal in modern enterprises. Tasked to monitor complex network environments constantly under attack, SOCs can be active 24/7 and can includ…
"bot lane noob" Towards Deployment of NLP-based Toxicity Detectors in Video Games
Jonas Ave, Irdin Pekaric, Matthias Frohner +1
Toxicity and harassment are widespread in the video-gaming context. Especially in competitive online multiplayer scenarios, gamers oftentimes send harmful messages to other players…
Bridging Safety and Security in Complex Systems: A Model-Based Approach with SAFT-GT Toolchain
Irdin Pekaric, Raffaela Groner, Alexander Raschke +4
In the rapidly evolving landscape of software engineering, the demand for robust and secure systems has become increasingly critical. This is especially true for self-adaptive syst…
Security Barriers to Trustworthy AI-Driven Cyber Threat Intelligence in Finance: Evidence from Practitioners
Emir Karaosman, Advije Rizvani, Irdin Pekaric
Financial institutions face increasing cyber risk while operating under strict regulatory oversight. To manage this risk, they rely heavily on Cyber Threat Intelligence (CTI) to in…
Department-Specific Security Awareness Campaigns: A Cross-Organizational Study of HR and Accounting
Matthias Pfister, Giovanni Apruzzese, Irdin Pekaric
Many cyberattacks succeed because they exploit flaws at the human level. To address this problem, organizations rely on security awareness programs, which aim to make employees mor…
LLMs in Cybersecurity: Friend or Foe in the Human Decision Loop?
Irdin Pekaric, Philipp Zech, Tom Mattson
Large Language Models (LLMs) are transforming human decision-making by acting as cognitive collaborators. Yet, this promise comes with a paradox: while LLMs can improve accuracy, t…
The Dark Side of the Web: Towards Understanding Various Data Sources in Cyber Threat Intelligence
Saskia Laura Schröer, Noé Canevascini, Irdin Pekaric +2
Cyber threats have become increasingly prevalent and sophisticated. Prior work has extracted actionable cyber threat intelligence (CTI), such as indicators of compromise, tactics,…
How Do Mobile Applications Enhance Security? An Exploratory Analysis of Use Cases and Provided Information
Irdin Pekaric, Clemens Sauerwein, Simon Laichner +1
The ubiquity of mobile applications has increased dramatically in recent years, opening up new opportunities for cyber attackers and heightening security concerns in the mobile eco…
Understanding the Process of Data Labeling in Cybersecurity
Tobias Braun, Irdin Pekaric, Giovanni Apruzzese
Many domains now leverage the benefits of Machine Learning (ML), which promises solutions that can autonomously learn to solve complex tasks by training over some data. Unfortunate…
Streamlining Attack Tree Generation: A Fragment-Based Approach
Irdin Pekaric, Markus Frick, Jubril Gbolahan Adigun +5
Attack graphs are a tool for analyzing security vulnerabilities that capture different and prospective attacks on a system. As a threat modeling tool, it shows possible paths that…
Model-Based Generation of Attack-Fault Trees
Raffaela Groner, Thomas Witte, Alexander Raschke +5
Joint safety and security analysis of cyber-physical systems is a necessary step to correctly capture inter-dependencies between these properties. Attack-Fault Trees represent a co…
Towards Model Co-evolution Across Self-Adaptation Steps for Combined Safety and Security Analysis
Thomas Witte, Raffaela Groner, Alexander Raschke +3
Self-adaptive systems offer several attack surfaces due to the communication via different channels and the different sensors required to observe the environment. Often, attacks ca…
VULNERLIZER: Cross-analysis Between Vulnerabilities and Software Libraries
Irdin Pekaric, Michael Felderer, Philipp Steinmüller
The identification of vulnerabilities is a continuous challenge in software projects. This is due to the evolution of methods that attackers employ as well as the constant updates…
Simulation of Sensor Spoofing Attacks on Unmanned Aerial Vehicles Using the Gazebo Simulator
Irdin Pekaric, David Arnold, Michael Felderer
Conducting safety simulations in various simulators, such as the Gazebo simulator, became a very popular means of testing vehicles against potential safety risks (i.e. crashes). Ho…
Applying Security Testing Techniques to Automotive Engineering
Irdin Pekaric, Clemens Sauerwein, Michael Felderer
The openness of modern IT systems and their permanent change make it challenging to keep these systems secure. A combination of regression and security testing called security regr…
Towards Understanding the Skill Gap in Cybersecurity
Francois Goupil, Pavel Laskov, Irdin Pekaric +3
Given the ongoing "arms race" in cybersecurity, the shortage of skilled professionals in this field is one of the strongest in computer science. The currently unmet staffing demand…