97 citations · 315 across the 31 of their papers we have counts for
32 papers
Game-Theoretic Modeling of Stealthy Intrusion Defense against MDP-Based Attackers
Willie Kouam, Stefan Rass
The rapid expansion of Internet use has increased system exposure to cyber threats, with advanced persistent threats (APTs) being especially challenging due to their stealth, prolo…
Post-Quantum Sanitizable Signatures from McEliece-Based Chameleon Hashing
Shahzad Ahmad, Stefan Rass, Zahra Seyedi
We introduce a novel post-quantum sanitizable signature scheme constructed upon a chameleon hash function derived from the McEliece cryptosystem. In this design, the designated san…
On Unique Neighborhoods in Bipartite and Expander Graphs
Stefan Rass
An undirected graph is said to have \emph{unique neighborhoods} if any two distinct nodes have also distinct sets of neighbors. In this way, the connections of a node to other node…
Statistically Testing Training Data for Unwanted Error Patterns using Rule-Oriented Regression
Stefan Rass, Martin Dallinger
Artificial intelligence models trained from data can only be as good as the underlying data is. Biases in training data propagating through to the output of a machine learning mode…
ExploitFlow, cyber security exploitation routes for Game Theory and AI research in robotics
Víctor Mayoral-Vilches, Gelei Deng, Yi Liu +2
This paper addresses the prevalent lack of tools to facilitate and empower Game Theory and Artificial Intelligence (AI) research in cybersecurity. The primary contribution is the i…
PentestGPT: An LLM-empowered Automatic Penetration Testing Tool
Gelei Deng, Yi Liu, Víctor Mayoral-Vilches +7
Penetration testing, a crucial industrial practice for ensuring system security, has traditionally resisted automation due to the extensive expertise required by human professional…
Metricizing the Euclidean Space towards Desired Distance Relations in Point Clouds
Stefan Rass, Sandra König, Shahzad Ahmad +1
Given a set of points in the Euclidean space with , the pairwise distances between the points are determined by their spatial location and the metric …
Decisions with Uncertain Consequences -- A Total Ordering on Loss-Distributions
Stefan Rass, Sandra König, Stefan Schauer
Decisions are often based on imprecise, uncertain or vague information. Likewise, the consequences of an action are often equally unpredictable, thus putting the decision maker int…
Defending Against Advanced Persistent Threats using Game-Theory
Stefan Rass, Sandra König, Stefan Schauer
Advanced persistent threats (APT) combine a variety of different attack forms ranging from social engineering to technical exploits. The diversity and usual stealthiness of APT tur…
HoneyCar: A Framework to Configure Honeypot Vulnerabilities on the Internet of Vehicles
Sakshyam Panda, Stefan Rass, Sotiris Moschoyiannis +3
The Internet of Vehicles (IoV), whereby interconnected vehicles communicate with each other and with road infrastructure on a common network, has promising socio-economic benefits…
On Game Theory Using Stochastic Tail Orders
Stefan Rass, Sandra König, Stefan Schauer +3
We consider a family of distributions on which natural tail orders can be constructed upon a representation of a distribution by a (single) hyper-real number. Past research reveale…
Supervised Machine Learning with Plausible Deniability
Stefan Rass, Sandra König, Jasmin Wachter +2
We study the question of how well machine learning (ML) models trained on a certain data set provide privacy for the training data, or equivalently, whether it is possible to rever…
Cybersecurity in Robotics: Challenges, Quantitative Modeling, and Practice
Quanyan Zhu, Stefan Rass, Bernhard Dieber +1
Robotics is becoming more and more ubiquitous, but the pressure to bring systems to market occasionally goes at the cost of neglecting security mechanisms during the development, d…
alurity, a toolbox for robot cybersecurity
Víctor Mayoral-Vilches, Irati Abad-Fernández, Martin Pinzger +8
The reuse of technologies and inherent complexity of most robotic systems is increasingly leading to robots with wide attack surfaces and a variety of potential vulnerabilities. Gi…
Can ROS be used securely in industry? Red teaming ROS-Industrial
Víctor Mayoral-Vilches, Martin Pinzger, Stefan Rass +2
With its growing use in industry, ROS is rapidly becoming a standard in robotics. While developments in ROS 2 show promise, the slow adoption cycles in industry will push widesprea…
Computing mixed strategies equilibria in presence of switching costs by the solution of nonconvex QP problems
Giampaolo Liuzzi, Marco Locatelli, Veronica Piccialli +1
In this paper we address game theory problems arising in the context of network security. In traditional game theory problems, given a defender and an attacker, one searches for mi…
A Novel Approach to Quality of Service Provisioning in Trusted Relay Quantum Key Distribution Networks
Miralem Mehic, Peppino Fazio, Stefan Rass +6
In recent years, noticeable progress has been made in the development of quantum equipment, reflected through the number of successful demonstrations of Quantum Key Distribution (Q…
Perfectly Secure Communication, based on Graph-Topological Addressing in Unique-Neighborhood Networks
Stefan Rass
We consider network graphs in which adjacent nodes share common secrets. In this setting, certain techniques for perfect end-to-end security (in the sense of confidential…
Community-Based Security for the Internet of Things
Quanyan Zhu, Stefan Rass, Peter Schartner
With more and more devices becoming connectable to the internet, the number of services but also a lot of threats increases dramatically. Security is often a secondary matter behin…
Game Theory Meets Network Security: A Tutorial at ACM CCS
Quanyan Zhu, Stefan Rass
The increasingly pervasive connectivity of today's information systems brings up new challenges to security. Traditional security has accomplished a long way toward protecting well…
Uncertainty in Cyber Security Investments
Andrew Fielder, Sandra Konig, Emmanouil Panaousis +2
When undertaking cyber security risk assessments, we must assign numeric values to metrics to compute the final expected loss that represents the risk that an organization is expos…
On Game-Theoretic Risk Management (Part Three) - Modeling and Applications
Stefan Rass
The game-theoretic risk management framework put forth in the precursor reports "Towards a Theory of Games with Payoffs that are Probability-Distributions" (arXiv:1506.07368 [q-fin…
Towards a Physical Oracle for the Partition Problem using Analogue Computing
Stefan Rass
Despite remarkable achievements in its practical tractability, the notorious class of NP-complete problems has been escaping all attempts to find a worst-case polynomial time-bound…
On the Existence of Weak One-Way Functions
Stefan Rass
This note is an attempt to unconditionally prove the existence of weak one way functions (OWF). Starting from a provably intractable decision problem (whose existence is nonc…