5 citations · 11 across the 12 of their papers we have counts for
9 papers · 1 filter
Synthetic APTs: the Collapse of TTP-Based Attribution
Francesco Balassone, Víctor Mayoral-Vilches, María Sanz-Gómez +8
Cyber Threat Intelligence CTI attribution relies on identifying the Tactics, Techniques, and Procedures TTPs that distinguish one threat actor from another. This approach presuppos…
Security Incentivization: An Empirical Study of how Micropayments Impact Code Security
Stefan Rass, Martin Pinzger, Rainer W. Alexandrowicz +5
Security often receives insufficient developer attention because it does not directly generate visible value, leading to underinvestment in practice. We evaluate a countermeasure b…
Towards Cybersecurity Superintelligence: from AI-guided humans to human-guided AI
Víctor Mayoral-Vilches, Stefan Rass, Martin Pinzger +14
Cybersecurity superintelligence -- artificial intelligence exceeding the best human capability in both speed and strategic reasoning -- represents the next frontier in security. Th…
Cybersecurity AI: A Game-Theoretic AI for Guiding Attack and Defense
Víctor Mayoral-Vilches, María Sanz-Gómez, Francesco Balassone +6
AI-driven penetration testing now executes thousands of actions per hour but still lacks the strategic intuition humans apply in competitive security. To build cybersecurity superi…
Cybersecurity AI: Evaluating Agentic Cybersecurity in Attack/Defense CTFs
Francesco Balassone, Víctor Mayoral-Vilches, Stefan Rass +4
We empirically evaluate whether AI systems are more effective at attacking or defending in cybersecurity. Using CAI (Cybersecurity AI)'s parallel execution framework, we deployed a…
Koney: A Cyber Deception Orchestration Framework for Kubernetes
Mario Kahlhofer, Matteo Golinelli, Stefan Rass
System operators responsible for protecting software applications remain hesitant to implement cyber deception technology, including methods that place traps to catch attackers, de…
CAI: An Open, Bug Bounty-Ready Cybersecurity AI
Víctor Mayoral-Vilches, Luis Javier Navarrete-Lozano, María Sanz-Gómez +10
By 2028 most cybersecurity actions will be autonomous, with humans teleoperating. We present the first classification of autonomy levels in cybersecurity and introduce Cybersecurit…
Honeyquest: Rapidly Measuring the Enticingness of Cyber Deception Techniques with Code-based Questionnaires
Mario Kahlhofer, Stefan Achleitner, Stefan Rass +1
Fooling adversaries with traps such as honeytokens can slow down cyber attacks and create strong indicators of compromise. Unfortunately, cyber deception techniques are often poorl…
Application Layer Cyber Deception without Developer Interaction
Mario Kahlhofer, Stefan Rass
Cyber deception techniques that are tightly intertwined with applications pose significant technical challenges in production systems. Security measures are usually the responsibil…