238 citations · 538 across the 13 of their papers we have counts for
16 papers
Threat Modeling and Security Analysis of Containers: A Survey
Ann Yi Wong, Eyasu Getahun Chekole, Martin Ochoa +1
Traditionally, applications that are used in large and small enterprises were deployed on "bare metal" servers installed with operating systems. Recently, the use of multiple virtu…
FooBaR: Fault Fooling Backdoor Attack on Neural Network Training
Jakub Breier, Xiaolu Hou, Martín Ochoa +1
Neural network implementations are known to be vulnerable to physical attack vectors such as fault injection attacks. As of now, these attacks were only utilized during the inferen…
Scanning the Cycle: Timing-based Authentication on PLCs
Chuadhry Mujeeb Ahmed, Martin Ochoa, Jianying Zhou +1
Programmable Logic Controllers (PLCs) are a core component of an Industrial Control System (ICS). However, if a PLC is compromised or the commands sent across a network from the PL…
SCOPE: Secure Compiling of PLCs in Cyber-Physical Systems
Eyasu Getahun Chekole, Martin Ochoa, Sudipta Chattopadhyay
Cyber-Physical Systems (CPS) are being widely adopted in critical infrastructures, such as smart grids, nuclear plants, water systems, transportation systems, manufacturing and hea…
Taming the War in Memory: A Resilient Mitigation Strategy Against Memory Safety Attacks in CPS
Eyasu Getahun Chekole, Unnikrishnan Cheramangalath, Sudipta Chattopadhyay +2
Memory-safety attacks have been one of the most critical threats against computing systems. Although a wide-range of defense techniques have been developed against these attacks, t…
Improving Network Intrusion Detection Classifiers by Non-payload-Based Exploit-Independent Obfuscations: An Adversarial Approach
Ivan Homoliak, Martin Teknos, Martín Ochoa +3
Machine-learning based intrusion detection classifiers are able to detect unknown attacks, but at the same time, they may be susceptible to evasion by obfuscation techniques. An ad…
Insight into Insiders and IT: A Survey of Insider Threat Taxonomies, Analysis, Modeling, and Countermeasures
Ivan Homoliak, Flavio Toffalini, Juan Guarnizo +2
Insider threats are one of today's most challenging cybersecurity issues that are not well addressed by commonly employed security solutions. Despite several scientific works publi…
NoiSense: Detecting Data Integrity Attacks on Sensor Measurements using Hardware based Fingerprints
Chuadhry Mujeeb Ahmed, Aditya Mathur, Martin Ochoa
In recent years fingerprinting of various physical and logical devices has been proposed with the goal of uniquely identifying users or devices of mainstream IT systems such as PCs…
Detection of Unauthorized IoT Devices Using Machine Learning Techniques
Yair Meidan, Michael Bohadana, Asaf Shabtai +4
Security experts have demonstrated numerous risks imposed by Internet of Things (IoT) devices on organizations. Due to the widespread adoption of such devices, their diversity, sta…
Design-Time Quantification of Integrity in Cyber-Physical-Systems
Eric Rothstein Morris, Carlos G. Murguia, Martín Ochoa
In a software system it is possible to quantify the amount of information that is leaked or corrupted by analysing the flows of information present in the source code. In a cyber-p…
Reasoning about Probabilistic Defense Mechanisms against Remote Attacks
Martín Ochoa, Sebastian Banescu, Cynthia Disenfeld +2
Despite numerous countermeasures proposed by practitioners and researchers, remote control-flow alteration of programs with memory-safety vulnerabilities continues to be a realisti…
Gamifying Education and Research on ICS Security: Design, Implementation and Results of S3
Daniele Antonioli, Hamid Reza Ghaeini, Sridhar Adepu +2
In this work, we consider challenges relating to security for Industrial Control Systems (ICS) in the context of ICS security education and research targeted both to academia and i…
SIPHON: Towards Scalable High-Interaction Physical Honeypots
Juan Guarnizo, Amit Tambe, Suman Sankar Bhunia +4
In recent years, the emerging Internet-of-Things (IoT) has led to rising concerns about the security of networked embedded devices. In this work, we focus on the adaptation of Hone…
FEEBO: An Empirical Evaluation Framework for Malware Behavior Obfuscation
Sebastian Banescu, Tobias Wüchner, Marius Guggenmos +2
Program obfuscation is increasingly popular among malware creators. Objectively comparing different malware detection approaches with respect to their resilience against obfuscatio…
Robust and Effective Malware Detection through Quantitative Data Flow Graph Metrics
Tobias Wüchner, Martín Ochoa, Alexander Pretschner
We present a novel malware detection approach based on metrics over quantitative data flow graphs. Quantitative data flow graphs (QDFGs) model process behavior by interpreting issu…
The Meaning of Attack-Resistant Systems
Vijay Ganesh, Sebastian Banescu, Martín Ochoa
In this paper, we introduce a formal notion of partial compliance, called Attack-resistance, of a computer program running together with a defense mechanism w.r.t a non-exploitabil…