92 citations · 148 across the 18 of their papers we have counts for
19 papers
HTTP REST API Structure Learning
Ran Dubin, Amit Dvir
Application Programming Interfaces (APIs) are essential in software development, enabling web services, mobile apps, and microservices. However, their widespread use introduces sig…
Cloudy with a Chance of Anomalies: Dynamic Graph Neural Network for Early Detection of Cloud Services' User Anomalies
Revital Marbel, Yanir Cohen, Ran Dubin +2
Ensuring the security of cloud environments is imperative for sustaining organizational growth and operational efficiency. As the ubiquity of cloud services continues to rise, the…
Enhancing Encrypted Internet Traffic Classification Through Advanced Data Augmentation Techniques
Yehonatan Zion, Porat Aharon, Ran Dubin +2
The increasing popularity of online services has made Internet Traffic Classification a critical field of study. However, the rapid development of internet protocols and encryption…
RoBERTa-Augmented Synthesis for Detecting Malicious API Requests
Udi Aharon, Revital Marbel, Ran Dubin +2
Web applications and APIs face constant threats from malicious actors seeking to exploit vulnerabilities for illicit gains. To defend against these threats, it is essential to have…
A Classification-by-Retrieval Framework for Few-Shot Anomaly Detection to Detect API Injection Attacks
Udi Aharon, Ran Dubin, Amit Dvir +1
Application Programming Interface (API) Injection attacks refer to the unauthorized or malicious use of APIs, which are often exploited to gain access to sensitive data or manipula…
CBR -- Boosting Adaptive Classification By Retrieval of Encrypted Network Traffic with Out-of-distribution
Amir Lukach, Ran Dubin, Amit Dvir +1
Encrypted network traffic Classification tackles the problem from different approaches and with different goals. One of the common approaches is using Machine learning or Deep Lear…
Open Image Content Disarm And Reconstruction
Eli Belkind, Ran Dubin, Amit Dvir
With the advance in malware technology, attackers create new ways to hide their malicious code from antivirus services. One way to obfuscate an attack is to use common files as cov…
Open-Source Framework for Encrypted Internet and Malicious Traffic Classification
Ofek Bader, Adi Lichy, Amit Dvir +2
Internet traffic classification plays a key role in network visibility, Quality of Services (QoS), intrusion detection, Quality of Experience (QoE) and traffic-trend analyses. In o…
Problem-Space Evasion Attacks in the Android OS: a Survey
Harel Berger, Chen Hajaj, Amit Dvir
Android is the most popular OS worldwide. Therefore, it is a target for various kinds of malware. As a countermeasure, the security community works day and night to develop appropr…
When a RF Beats a CNN and GRU, Together -- A Comparison of Deep Learning and Classical Machine Learning Approaches for Encrypted Malware Traffic Classification
Adi Lichy, Ofek Bader, Ran Dubin +2
Internet traffic classification is widely used to facilitate network management. It plays a crucial role in Quality of Services (QoS), Quality of Experience (QoE), network visibili…
Do You Think You Can Hold Me? The Real Challenge of Problem-Space Evasion Attacks
Harel Berger, Amit Dvir, Chen Hajaj +1
Android malware is a spreading disease in the virtual world. Anti-virus and detection systems continuously undergo patches and updates to defend against these threats. Most of the…
MaMaDroid2.0 -- The Holes of Control Flow Graphs
Harel Berger, Chen Hajaj, Enrico Mariconti +1
Android malware is a continuously expanding threat to billions of mobile users around the globe. Detection systems are updated constantly to address these threats. However, a backl…
Less is More: Robust and Novel Features for Malicious Domain Detection
Chen Hajaj, Nitay Hason, Nissim Harel +1
Malicious domains are increasingly common and pose a severe cybersecurity threat. Specifically, many types of current cyber attacks use URLs for attack communications (e.g., C\&C,…
When the Guard failed the Droid: A case study of Android malware
Harel Berger, Chen Hajaj, Amit Dvir
Android malware is a persistent threat to billions of users around the world. As a countermeasure, Android malware detection systems are occasionally implemented. However, these sy…
A wrinkle in time: A case study in DNS poisoning
Harel Berger, Amit Z. Dvir, Moti Geva
The Domain Name System (DNS) provides a translation between readable domain names and IP addresses. The DNS is a key infrastructure component of the Internet and a prime target for…
Robust Machine Learning for Encrypted Traffic Classification
Amit Dvir, Yehonatan Zion, Jonathan Muehlstein +3
Desktops and laptops can be maliciously exploited to violate privacy. In this paper, we consider the daily battle between the passive attacker who is targeting a specific user agai…
Real Time Video Quality Representation Classification of Encrypted HTTP Adaptive Video Streaming - the Case of Safari
Ran Dubin, Amit Dvir, Ofir Pele +3
The increasing popularity of HTTP adaptive video streaming services has dramatically increased bandwidth requirements on operator networks, which attempt to shape their traffic thr…
Adaptation Logic for HTTP Dynamic Adaptive Streaming using Geo-Predictive Crowdsourcing
Ran Dubin, Amit Dvir, Ofir Pele +3
The increasing demand for video streaming services with high Quality of Experience (QoE) has prompted a lot of research on client-side adaptation logic approaches. However, most al…
I Know What You Saw Last Minute - Encrypted HTTP Adaptive Video Streaming Title Classification
Ran Dubin, Amit Dvir, Ofir Pele +1
Desktops and laptops can be maliciously exploited to violate privacy. There are two main types of attack scenarios: active and passive. In this paper, we consider the passive scena…