4 papers
DeepWeave: Weaving Neural and Symbolic Evidence for ML-Based Network Intrusion Detection System
Raoul Saad, Enkeleda Bardhi, Andrea Agiollo +1
Machine learning-based network intrusion detection systems can recognize complex traffic patterns, but often require substantial labelled attack data, degrade under deployment shif…
Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?
Lorenzo di Filippo, Enkeleda Bardhi, Andrea Agiollo +3
As network threats evolve, manual NIDS rule engineering has become a critical operational bottleneck. While Large Language Models (LLMs) show promise for automating this process, t…
Securing the Web with HSTS-Enforced
Aaron van Diepen, Adrian Zapletal, Fernando Kuipers
TLS stripping attacks expose sensitive web traffic by forcing secure HTTPS connections to fall back to unencrypted HTTP. At present, protection against these attacks relies on webs…
SoK: Harmonizing Attack Graphs and Intrusion Detection Systems
Andrea Agiollo, Enkeleda Bardhi, Alessandro Palma +3
Detecting and responding to cyber attacks is increasingly difficult as high-volume, complex network traffic allows threats to remain concealed. While Intrusion Detection Systems (I…