634 citations · 1.5k across the 51 of their papers we have counts for
51 papers
Towards Automated Cyber Range Design: Characterizing and Matching Demands to Supplies
Ekzhin Ear, Jose L. C. Remy, Shouhuai Xu
Cyber ranges mimic real-world cyber environments and are in high demand. Before building their own cyber ranges, organizations need to deeply understand what construction supplies…
Analysis of Contagion Dynamics with Active Cyber Defenders
Keith Paarporn, Shouhuai Xu
In this paper, we analyze the infection spreading dynamics of malware in a population of cyber nodes (i.e., computers or devices). Unlike most prior studies where nodes are reactiv…
PAD: Towards Principled Adversarial Malware Detection Against Evasion Attacks
Deqiang Li, Shicheng Cui, Yun Li +3
Machine Learning (ML) techniques can facilitate the automation of malicious software (malware for short) detection, but suffer from evasion attacks. Many studies counter such attac…
A Coupling Approach to Analyzing Games with Dynamic Environments
Brandon C. Collins, Shouhuai Xu, Philip N. Brown
The theory of learning in games has extensively studied situations where agents respond dynamically to each other by optimizing a fixed utility function. However, in real situation…
Social Engineering Attacks and Defenses in the Physical World vs. Cyberspace: A Contrast Study
Rosana Montañez Rodriguez, Adham Atyabi, Shouhuai
Social engineering attacks are phenomena that are equally applicable to both the physical world and cyberspace. These attacks in the physical world have been studied for a much lon…
Internet-based Social Engineering Attacks, Defenses and Psychology: A Survey
Theodore Longtchi, Rosana Montañez Rodriguez, Laith Al-Shawaf +2
Social engineering attacks are a major cyber threat because they often serve as a first step for an attacker to break into an otherwise well-defended network, steal victims' creden…
RoPGen: Towards Robust Code Authorship Attribution via Automatic Coding Style Transformation
Zhen Li, Guenevere, Chen +3
Source code authorship attribution is an important problem often encountered in applications such as software forensics, bug fixing, and software quality analysis. Recent studies s…
Quantifying Cybersecurity Effectiveness of Dynamic Network Diversity
Huashan Chen, Hasan Cam, Shouhuai Xu
The deployment of monoculture software stacks can have devastating consequences because a single attack can compromise all of the vulnerable computers in cyberspace. This one-vulne…
Quantifying Cybersecurity Effectiveness of Software Diversity
Huashan Chen, Richard B. Garcia-Lebron, Zheyuan Sun +2
The deployment of monoculture software stacks can cause a devastating damage even by a single exploit against a single vulnerability. Inspired by the resilience benefit of biologic…
Can We Leverage Predictive Uncertainty to Detect Dataset Shift and Adversarial Examples in Android Malware Detection?
Deqiang Li, Tian Qiu, Shuo Chen +2
The deep learning approach to detecting malicious software (malware) is promising but has yet to tackle the problem of dataset shift, namely that the joint distribution of examples…
Towards Making Deep Learning-based Vulnerability Detectors Robust
Zhen Li, Jing Tang, Deqing Zou +5
Automatically detecting software vulnerabilities in source code is an important problem that has attracted much attention. In particular, deep learning-based vulnerability detector…
Data-Driven Characterization and Detection of COVID-19 Themed Malicious Websites
Mir Mehedi Ahsan Pritom, Kristin M. Schweitzer, Raymond M. Bateman +2
COVID-19 has hit hard on the global community, and organizations are working diligently to cope with the new norm of "work from home". However, the volume of remote work is unprece…
Characterizing the Landscape of COVID-19 Themed Cyberattacks and Defenses
Mir Mehedi Ahsan Pritom, Kristin M. Schweitzer, Raymond M. Bateman +2
COVID-19 (Coronavirus) hit the global society and economy with a big surprise. In particular, work-from-home has become a new norm for employees. Despite the fact that COVID-19 can…
On the Security of Group Communication Schemes
Shouhuai Xu
Secure group communications are a mechanism facilitating protected transmission of messages from a sender to multiple receivers, and many emerging applications in both wired and wi…
Cybersecurity Dynamics: A Foundation for the Science of Cybersecurity
Shouhuai Xu
Cybersecurity Dynamics is new concept that aims to achieve the modeling, analysis, quantification, and management of cybersecurity from a holistic perspective, rather than from a b…
Human Cognition through the Lens of Social Engineering Cyberattacks
Rosana Montanez Rodriguez, Edward Golob, Shouhuai Xu
Social engineering cyberattacks are a major threat because they often prelude sophisticated and devastating cyberattacks. Social engineering cyberattacks are a kind of psychologica…
Computational Complexity Characterization of Protecting Elections from Bribery
Lin Chen, Ahmed Sunny, Lei Xu +5
The bribery problem in election has received considerable attention in the literature, upon which various algorithmic and complexity results have been obtained. It is thus natural…
Arms Race in Adversarial Malware Detection: A Survey
Deqiang Li, Qianmu Li, Yanfang Ye +1
Malicious software (malware) is a major cyber threat that has to be tackled with Machine Learning (ML) techniques because millions of new malware examples are injected into cybersp…
A Framework for Enhancing Deep Neural Networks Against Adversarial Malware
Deqiang Li, Qianmu Li, Yanfang Ye +1
Machine learning-based malware detection is known to be vulnerable to adversarial evasion attacks. The state-of-the-art is that there are no effective defenses against these attack…
Preventive and Reactive Cyber Defense Dynamics with Ergodic Time-dependent Parameters Is Globally Attractive
Yujuan Han, Wenlian Lu, Shouhuai Xu
Cybersecurity dynamics is a mathematical approach to modeling and analyzing cyber attack-defense interactions in networks. In this paper, we advance the state-of-the-art in charact…
VulDeeLocator: A Deep Learning-based Fine-grained Vulnerability Detector
Zhen Li, Deqing Zou, Shouhuai Xu +3
Automatically detecting software vulnerabilities is an important problem that has attracted much attention from the academic research community. However, existing vulnerability det…
A Case Study on Using Deep Learning for Network Intrusion Detection
Gabriel C. Fernandez, Shouhuai Xu
Deep Learning has been very successful in many application domains. However, its usefulness in the context of network intrusion detection has not been systematically investigated.…
Analyzing Root Causes of Intrusion Detection False-Negatives: Methodology and Case Study
Eric Ficke, Kristin M. Schweitzer, Raymond M. Bateman +1
Intrusion Detection Systems (IDSs) are a necessary cyber defense mechanism. Unfortunately, their capability has fallen behind that of attackers. This motivates us to improve our un…
A Survey on Ethereum Systems Security: Vulnerabilities, Attacks and Defenses
Huashan Chen, Marcus Pendleton, Laurent Njilla +1
The blockchain technology is believed by many to be a game changer in many application domains, especially financial applications. While the first generation of blockchain technolo…