61 citations · 108 across the 13 of their papers we have counts for
9 papers · 1 filter
Challenges in Designing Exploit Mitigations for Deeply Embedded Systems
Ali Abbasi, Jos Wetzels, Thorsten Holz +1
Memory corruption vulnerabilities have been around for decades and rank among the most prevalent vulnerabilities in embedded systems. Yet this constrained environment poses unique…
Network intrusion detection systems for in-vehicle network - Technical report
Guillaume Dupont, Jerry den Hartog, Sandro Etalle +1
Modern vehicles are complex safety critical cyber physical systems, that are connected to the outside world, with all security implications that brings. To enhance vehicle security…
Towards Realistic Threat Modeling: Attack Commodification, Irrelevant Vulnerabilities, and Unrealistic Assumptions
Luca Allodi, Sandro Etalle
Current threat models typically consider all possible ways an attacker can penetrate a system and assign probabilities to each path according to some metric (e.g. time-to-compromis…
APHRODITE: an Anomaly-based Architecture for False Positive Reduction
Damiano Bolzoni, Sandro Etalle
We present APHRODITE, an architecture designed to reduce false positives in network intrusion detection systems. APHRODITE works by detecting anomalies in the output traffic, and b…
Poseidon: a 2-tier Anomaly-based Intrusion Detection System
Damiano Bolzoni, Emmanuele Zambon, Sandro Etalle +1
We present Poseidon, a new anomaly based intrusion detection system. Poseidon is payload-based, and presents a two-tier architecture: the first stage consists of a Self-Organizing…
Integrity Constraints in Trust Management
Sandro Etalle, William H. Winsborough
We introduce the use, monitoring, and enforcement of integrity constraints in trust management-style authorization systems. We consider what portions of the policy state must be mo…
Timed Analysis of Security Protocols
R. Corin, S. Etalle, P. H. Hartel +1
We propose a method for engineering security protocols that are aware of timing aspects. We study a simplified version of the well-known Needham Schroeder protocol and the complete…
An Audit Logic for Accountability
J. G. Cederquist, R. Corin, M. A. C. Dekker +2
We describe and implement a policy language. In our system, agents can distribute data along with usage policies in a decentralized architecture. Our language supports the specific…
A Trace Logic for Local Security Properties
Ricardo Corin, Antonio Durante, Sandro Etalle +1
We propose a new simple \emph{trace} logic that can be used to specify \emph{local security properties}, i.e. security properties that refer to a single participant of the protocol…