61 citations · 108 across the 13 of their papers we have counts for
13 papers
Challenges in Designing Exploit Mitigations for Deeply Embedded Systems
Ali Abbasi, Jos Wetzels, Thorsten Holz +1
Memory corruption vulnerabilities have been around for decades and rank among the most prevalent vulnerabilities in embedded systems. Yet this constrained environment poses unique…
Network intrusion detection systems for in-vehicle network - Technical report
Guillaume Dupont, Jerry den Hartog, Sandro Etalle +1
Modern vehicles are complex safety critical cyber physical systems, that are connected to the outside world, with all security implications that brings. To enhance vehicle security…
Towards Realistic Threat Modeling: Attack Commodification, Irrelevant Vulnerabilities, and Unrealistic Assumptions
Luca Allodi, Sandro Etalle
Current threat models typically consider all possible ways an attacker can penetrate a system and assign probabilities to each path according to some metric (e.g. time-to-compromis…
APHRODITE: an Anomaly-based Architecture for False Positive Reduction
Damiano Bolzoni, Sandro Etalle
We present APHRODITE, an architecture designed to reduce false positives in network intrusion detection systems. APHRODITE works by detecting anomalies in the output traffic, and b…
Poseidon: a 2-tier Anomaly-based Intrusion Detection System
Damiano Bolzoni, Emmanuele Zambon, Sandro Etalle +1
We present Poseidon, a new anomaly based intrusion detection system. Poseidon is payload-based, and presents a two-tier architecture: the first stage consists of a Self-Organizing…
Nonmonotonic Trust Management for P2P Applications
M. Czenko, H. Tran, J. Doumen +3
Community decisions about access control in virtual communities are non-monotonic in nature. This means that they cannot be expressed in current, monotonic trust management languag…