27 citations · 43 across the 5 of their papers we have counts for
6 papers
TagZilla: Automated Owner and Abuse Type Tagging for Indicators of Compromise in Threat Reports
Gibran Gomez, Juan Caballero
Cyber Threat Intelligence (CTI) reports often describe Indicators of Compromise (IoCs) such as IP addresses, URLs, file hashes, and cryptocurrency wallets involved in cyberattacks.…
Clean Up the Mess: Addressing Data Pollution in Cryptocurrency Abuse Reporting Services
Gibran Gomez, Kevin van Liebergen, Davide Sanvito +3
Cryptocurrency abuse reporting services are a valuable data source about abusive blockchain addresses, prevalent types of cryptocurrency abuse, and their financial impact on victim…
Cybercrime Bitcoin Revenue Estimations: Quantifying the Impact of Methodology and Coverage
Gibran Gomez, Kevin van Liebergen, Juan Caballero
Multiple works have leveraged the public Bitcoin ledger to estimate the revenue cybercriminals obtain from their victims. Estimations focusing on the same target often do not agree…
The Rise of GoodFATR: A Novel Accuracy Comparison Methodology for Indicator Extraction Tools
Juan Caballero, Gibran Gomez, Srdjan Matic +3
To adapt to a constantly evolving landscape of cyber threats, organizations actively need to collect Indicators of Compromise (IOCs), i.e., forensic artifacts that signal that a ho…
Watch Your Back: Identifying Cybercrime Financial Relationships in Bitcoin through Back-and-Forth Exploration
Gibran Gomez, Pedro Moreno-Sanchez, Juan Caballero
Cybercriminals often leverage Bitcoin for their illicit activities. In this work, we propose back-and-forth exploration, a novel automated Bitcoin transaction tracing technique to…
Unsupervised Detection and Clustering of Malicious TLS Flows
Gibran Gomez, Platon Kotzias, Matteo Dell'Amico +2
Malware abuses TLS to encrypt its malicious traffic, preventing examination by content signatures and deep packet inspection. Network detection of malicious TLS flows is an importa…