143 citations · 185 across the 5 of their papers we have counts for
8 papers
Active TLS Stack Fingerprinting: Characterizing TLS Server Deployments at Scale
Markus Sosnowski, Johannes Zirngibl, Patrick Sattler +4
Active measurements can be used to collect server characteristics on a large scale. This kind of metadata can help discovering hidden relations and commonalities among server deplo…
Alexa versus Alexa: Controlling Smart Speakers by Self-Issuing Voice Commands
Sergio Esposito, Daniele Sgandurra, Giampaolo Bella
We present Alexa versus Alexa (AvA), a novel attack that leverages audio files containing voice commands and audio reproduction methods in an offensive fashion, to gain control of…
RansomClave: Ransomware Key Management using SGX
Alpesh Bhudia, Daniel O'Keeffe, Daniele Sgandurra +1
Modern ransomware often generate and manage cryptographic keys on the victim's machine, giving defenders an opportunity to capture exposed keys and recover encrypted data without p…
Identifying Authorship Style in Malicious Binaries: Techniques, Challenges & Datasets
Jason Gray, Daniele Sgandurra, Lorenzo Cavallaro
Attributing a piece of malware to its creator typically requires threat intelligence. Binary attribution increases the level of difficulty as it mostly relies upon the ability to d…
Lightweight Classification of IoT Malware based on Image Recognition
Jiawei Su, Danilo Vasconcellos Vargas, Sanjiva Prasad +3
The Internet of Things (IoT) is an extension of the traditional Internet, which allows a very large number of smart devices, such as home appliances, network cameras, sensors and c…
Automated Dynamic Analysis of Ransomware: Benefits, Limitations and use for Detection
Daniele Sgandurra, Luis Muñoz-González, Rabih Mohsen +1
Recent statistics show that in 2015 more than 140 millions new malware samples have been found. Among these, a large portion is due to ransomware, the class of malware whose specif…
Efficient Attack Graph Analysis through Approximate Inference
Luis Muñoz-González, Daniele Sgandurra, Andrea Paudice +1
Attack graphs provide compact representations of the attack paths that an attacker can follow to compromise network resources by analysing network vulnerabilities and topology. The…
Exact Inference Techniques for the Analysis of Bayesian Attack Graphs
Luis Muñoz-González, Daniele Sgandurra, Martín Barrère +1
Attack graphs are a powerful tool for security risk assessment by analysing network vulnerabilities and the paths attackers can use to compromise network resources. The uncertainty…