Giovanni Vigna

Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security, 2016

Drammer: Deterministic Rowhammer Attacks on Mobile Platforms.

[BibT_eX]

[DOI]

Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016

2015

Portrait of a Privacy Invasion.

[BibT_eX]

[DOI]

Yan Shoshitaishvili

Proc. Priv. Enhancing Technol., 2015

Evaluating Cybersecurity Education Interventions: Three Case Studies.

[BibT_eX]

[DOI]

IEEE Secur. Priv., 2015

Framing Dependencies Introduced by Underground Commoditization.

[BibT_eX]

[DOI]

Proceedings of the 14th Annual Workshop on the Economics of Information Security, 2015

ZigZag: Automatically Hardening Web Applications Against Client-side Validation Vulnerabilities.

[BibT_eX]

[DOI]

Proceedings of the 24th USENIX Security Symposium, 2015

EVILCOHORT: Detecting Communities of Malicious Accounts on Online Services.

[BibT_eX]

[DOI]

Proceedings of the 24th USENIX Security Symposium, 2015

How the ELF Ruined Christmas.

[BibT_eX]

[DOI]

Alessandro Di Federico

Proceedings of the 24th USENIX Security Symposium, 2015

Meerkat: Detecting Website Defacements through Image-based Object Recognition.

[BibT_eX]

[DOI]

Kevin Borgolte

Proceedings of the 24th USENIX Security Symposium, 2015

What the App is That? Deception and Countermeasures in the Android User Interface.

[BibT_eX]

[DOI]

Proceedings of the 2015 IEEE Symposium on Security and Privacy, 2015

CLAPP: characterizing loops in Android applications (invited talk).

[BibT_eX]

[DOI]

Proceedings of the 3rd International Workshop on Software Development Lifecycle for Mobile, 2015

CLAPP: characterizing loops in Android applications.

[BibT_eX]

[DOI]

Proceedings of the 2015 10th Joint Meeting on Foundations of Software Engineering, 2015

Firmalice - Automatic Detection of Authentication Bypass Vulnerabilities in Binary Firmware.

[BibT_eX]

[DOI]

Proceedings of the 22nd Annual Network and Distributed System Security Symposium, 2015

EdgeMiner: Automatically Detecting Implicit Control Flow Transitions through the Android Framework.

[BibT_eX]

[DOI]

Proceedings of the 22nd Annual Network and Distributed System Security Symposium, 2015

Prison: Tracking Process Interactions to Contain Malware.

[BibT_eX]

[DOI]

Proceedings of the 17th IEEE International Conference on High Performance Computing and Communications, 2015

On the Security and Engineering Implications of Finer-Grained Access Controls for Android Developers and Users.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2015

MalGene: Automatic Extraction of Malware Analysis Evasion Signature.

[BibT_eX]

[DOI]

Dhilung Kirat

Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, 2015

Drops for Stuff: An Analysis of Reshipping Mule Scams.

[BibT_eX]

[DOI]

Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, 2015

NJAS: Sandboxing Unmodified Applications in non-rooted Devices Running stock Android.

[BibT_eX]

[DOI]

Proceedings of the 5th Annual ACM CCS Workshop on Security and Privacy in Smartphones and Mobile Devices, 2015

Know Your Achilles' Heel: Automatic Detection of Network Critical Services.

[BibT_eX]

[DOI]

Proceedings of the 31st Annual Computer Security Applications Conference, 2015

BareDroid: Large-Scale Analysis of Android Apps on Real Devices.

[BibT_eX]

[DOI]

Proceedings of the 31st Annual Computer Security Applications Conference, 2015

Grab 'n Run: Secure and Practical Dynamic Code Loading for Android Applications.

[BibT_eX]

[DOI]

Proceedings of the 31st Annual Computer Security Applications Conference, 2015

2014

On the Workings and Current Practices of Web-Based Device Fingerprinting.

[BibT_eX]

[DOI]

Nick Nikiforakis

IEEE Secur. Priv., 2014

Stranger danger: exploring the ecosystem of ad-based URL shortening services.

[BibT_eX]

[DOI]

Proceedings of the 23rd International World Wide Web Conference, 2014

Relevant change detection: a framework for the precise extraction of modified and novel web-based content as a filtering technique for analysis engines.

[BibT_eX]

[DOI]

Kevin Borgolte

Proceedings of the 23rd International World Wide Web Conference, 2014

Ten Years of iCTF: The Good, The Bad, and The Ugly.

[BibT_eX]

[DOI]

Proceedings of the 2014 USENIX Summit on Gaming, 2014

BareCloud: Bare-metal Analysis-based Evasive Malware Detection.

[BibT_eX]

[DOI]

Dhilung Kirat

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

Hulk: Eliciting Malicious Behavior in Browser Extensions.

[BibT_eX]

[DOI]

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

The Tricks of the Trade: What Makes Spam Campaigns Successful?

[BibT_eX]

[DOI]

Proceedings of the 35. IEEE Security and Privacy Workshops, 2014

Extracting probable command and control signatures for detecting botnets.

[BibT_eX]

[DOI]

Proceedings of the Symposium on Applied Computing, 2014

Do you feel lucky?: a large-scale analysis of risk-rewards trade-offs in cyber security.

[BibT_eX]

[DOI]

Proceedings of the Symposium on Applied Computing, 2014

Eyes of a Human, Eyes of a Program: Leveraging Different Views of the Web for Analysis and Detection.

[BibT_eX]

[DOI]

Proceedings of the Research in Attacks, Intrusions and Defenses, 2014

Protecting Web-Based Single Sign-on Protocols against Relying Party Impersonation Attacks through a Dedicated Bi-directional Authenticated Secure Channel.

[BibT_eX]

[DOI]

Proceedings of the Research in Attacks, Intrusions and Defenses, 2014

Execute This! Analyzing Unsafe and Malicious Dynamic Code Loading in Android Applications.

[BibT_eX]

[DOI]

Proceedings of the 21st Annual Network and Distributed System Security Symposium, 2014

Nazca: Detecting Malware Distribution in Large-Scale Networks.

[BibT_eX]

[DOI]

Proceedings of the 21st Annual Network and Distributed System Security Symposium, 2014

Rippler: Delay injection for service dependency detection.

[BibT_eX]

[DOI]

Proceedings of the 2014 IEEE Conference on Computer Communications, 2014

The Dark Alleys of Madison Avenue: Understanding Malicious Advertisements.

[BibT_eX]

[DOI]

Apostolis Zarras

Proceedings of the 2014 Internet Measurement Conference, 2014

PExy: The Other Side of Exploit Kits.

[BibT_eX]

[DOI]

Giancarlo De Maio

Yan Shoshitaishvili

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2014

The harvester, the botmaster, and the spammer: on the relations between the different actors in the spam landscape.

[BibT_eX]

[DOI]

Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security, 2014

2013

Two years of short URLs internet measurement: security threats and countermeasures.

[BibT_eX]

[DOI]

Proceedings of the 22nd International World Wide Web Conference, 2013

Steal This Movie: Automatically Bypassing DRM Protection in Streaming Media Services.

[BibT_eX]

[DOI]

Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA, August 14-16, 2013, 2013

Revolver: An Automated Approach to the Detection of Evasive Web-based Malware.

[BibT_eX]

[DOI]

Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA, August 14-16, 2013, 2013

Cookieless Monster: Exploring the Ecosystem of Web-Based Device Fingerprinting.

[BibT_eX]

[DOI]

Nick Nikiforakis

Proceedings of the 2013 IEEE Symposium on Security and Privacy, 2013

EARs in the wild: large-scale analysis of execution after redirect vulnerabilities.

[BibT_eX]

[DOI]

Proceedings of the 28th Annual ACM Symposium on Applied Computing, 2013

Practical Attacks against the I2P Network.

[BibT_eX]

[DOI]

Christoph Egger

Johannes Schlumberger

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2013

COMPA: Detecting Compromised Accounts on Social Networks.

[BibT_eX]

[DOI]

Proceedings of the 20th Annual Network and Distributed System Security Symposium, 2013

Follow the green: growth and dynamics in twitter follower markets.

[BibT_eX]

[DOI]

Proceedings of the 2013 Internet Measurement Conference, 2013

Formulating Cyber-Security as Convex Optimization Problems.

[BibT_eX]

[DOI]

Kyriakos G. Vamvoudakis

João P. Hespanha

Proceedings of the Control of Cyber-Physical Systems, 2013

Shady paths: leveraging surfing crowds to detect malicious web pages.

[BibT_eX]

[DOI]

Gianluca Stringhini

Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, 2013

deDacota: toward preventing server-side XSS via automatic code and data separation.

[BibT_eX]

[DOI]

Adam Doupé

Weidong Cui

Mariusz H. Jakubowski

Marcus Peinado

Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, 2013

Delta: automatic identification of unknown web-based infection campaigns.

[BibT_eX]

[DOI]

Kevin Borgolte

Proceedings of the 2013 ACM SIGSAC Conference on Computer and Communications Security, 2013

SigMal: a static signal processing based malware triage.

[BibT_eX]

[DOI]

Proceedings of the Annual Computer Security Applications Conference, 2013

Message in a bottle: sailing past censorship.

[BibT_eX]

[DOI]

Luca Invernizzi

Proceedings of the Annual Computer Security Applications Conference, 2013

2012

Poultry markets: on the underground economy of twitter followers.

[BibT_eX]

[DOI]

Comput. Commun. Rev., 2012

B@bel: Leveraging Email Delivery for Spam Mitigation.

[BibT_eX]

[DOI]

Proceedings of the 21th USENIX Security Symposium, Bellevue, WA, USA, August 8-10, 2012, 2012

PUBCRAWL: Protecting Users and Businesses from CRAWLers.

[BibT_eX]

[DOI]

Proceedings of the 21th USENIX Security Symposium, Bellevue, WA, USA, August 8-10, 2012, 2012

Enemy of the State: A State-Aware Black-Box Web Vulnerability Scanner.

[BibT_eX]

[DOI]

Proceedings of the 21th USENIX Security Symposium, Bellevue, WA, USA, August 8-10, 2012, 2012

EvilSeed: A Guided Approach to Finding Malicious Web Pages.

[BibT_eX]

[DOI]

Luca Invernizzi

Paolo Milani Comparetti

Proceedings of the IEEE Symposium on Security and Privacy, 2012

Malware Riding Badware: Challenges in Analyzing (Malicious/Benign) Web Applications.

[BibT_eX]

[DOI]

Proceedings of the Runtime Verification, Third International Conference, 2012

FlashDetect: ActionScript 3 Malware Detection.

[BibT_eX]

[DOI]

Timon Van Overveldt

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2012

A Static, Packer-Agnostic Filter to Detect Similar Malware Samples.

[BibT_eX]

[DOI]

Grégoire Jacob

Paolo Milani Comparetti

Matthias Neugschwandtner

André Ricardo Abed Grégio

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2012

Tracking Memory Writes for Malware Classification and Code Reuse Identification.

[BibT_eX]

[DOI]

Paulo Lício de Geus

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2012

BotFinder: finding bots in network traffic without deep packet inspection.

[BibT_eX]

[DOI]

Proceedings of the Conference on emerging Networking Experiments and Technologies, 2012

You are what you include: large-scale evaluation of remote javascript inclusions.

[BibT_eX]

[DOI]

Nick Nikiforakis

Luca Invernizzi

Proceedings of the ACM Conference on Computer and Communications Security, 2012

Blacksheep: detecting compromised hosts in homogeneous crowds.

[BibT_eX]

[DOI]

Proceedings of the ACM Conference on Computer and Communications Security, 2012

Jarhead analysis and detection of malicious Java applets.

[BibT_eX]

[DOI]

Johannes Schlumberger

Proceedings of the 28th Annual Computer Security Applications Conference, 2012

2011

The 2010 International Capture the Flag Competition.

[BibT_eX]

[DOI]

IEEE Secur. Priv., 2011

Analysis of a Botnet Takeover.

[BibT_eX]

[DOI]

IEEE Secur. Priv., 2011

Prophiler: a fast filter for the large-scale detection of malicious web pages.

[BibT_eX]

[DOI]

Proceedings of the 20th International Conference on World Wide Web, 2011

The Underground Economy of Fake Antivirus Software.

[BibT_eX]

[DOI]

Douglas G. Steigerwald

Proceedings of the Economics of Information Security and Privacy III [papers from the Tenth Workshop on Economics and Information Security, 2011

BOTMAGNIFIER: Locating Spambots on the Internet.

[BibT_eX]

[DOI]

Proceedings of the 20th USENIX Security Symposium, 2011

Getting the Face Behind the Squares: Reconstructing Pixelized Video Streams.

[BibT_eX]

[DOI]

Ludovico Cavedon

Luca Foschini

Proceedings of the 5th USENIX Workshop on Offensive Technologies, 2011

Dymo: Tracking Dynamic Code Identity.

[BibT_eX]

[DOI]

Proceedings of the Recent Advances in Intrusion Detection - 14th International Symposium, 2011

Shellzer: A Tool for the Dynamic Analysis of Malicious Shellcode.

[BibT_eX]

[DOI]

Yanick Fratantonio

Proceedings of the Recent Advances in Intrusion Detection - 14th International Symposium, 2011

PiOS: Detecting Privacy Leaks in iOS Applications.

[BibT_eX]

[DOI]

Proceedings of the Network and Distributed System Security Symposium, 2011

The Underground Economy of Spam: A Botmaster's Perspective of Coordinating Large-Scale Spam Campaigns.

[BibT_eX]

[DOI]

Proceedings of the 4th USENIX Workshop on Large-Scale Exploits and Emergent Threats, 2011

Peering through the iframe.

[BibT_eX]

[DOI]

Proceedings of the INFOCOM 2011. 30th IEEE International Conference on Computer Communications, 2011

Understanding fraudulent activities in online ad exchanges.

[BibT_eX]

[DOI]

Proceedings of the 11th ACM SIGCOMM Internet Measurement Conference, 2011

Challenges for Dynamic Analysis of iOS Applications.

[BibT_eX]

[DOI]

Proceedings of the Open Problems in Network Security - IFIP WG 11.4 International Workshop, 2011

Escape from Monkey Island: Evading High-Interaction Honeyclients.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2011

MISHIMA: Multilateration of Internet Hosts Hidden Using Malicious Fast-Flux Agents (Short Paper).

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2011

Fear the EAR: discovering and mitigating execution after redirect vulnerabilities.

[BibT_eX]

[DOI]

Proceedings of the 18th ACM Conference on Computer and Communications Security, 2011

BareBox: efficient malware analysis on bare-metal.

[BibT_eX]

[DOI]

Dhilung Kirat

Proceedings of the Twenty-Seventh Annual Computer Security Applications Conference, 2011

Hit 'em where it hurts: a live security exercise on cyber situational awareness.

[BibT_eX]

[DOI]

Proceedings of the Twenty-Seventh Annual Computer Security Applications Conference, 2011

Nexat: a history-based approach to predict attacker actions.

[BibT_eX]

[DOI]

Proceedings of the Twenty-Seventh Annual Computer Security Applications Conference, 2011

2010

An Experience in Testing the Security of Real-World Electronic Voting Systems.

[BibT_eX]

[DOI]

IEEE Trans. Software Eng., 2010

Detection and analysis of drive-by-download attacks and malicious JavaScript code.

[BibT_eX]

[DOI]

Proceedings of the 19th International Conference on World Wide Web, 2010

Toward Automated Detection of Logic Vulnerabilities in Web Applications.

[BibT_eX]

[DOI]

Proceedings of the 19th USENIX Security Symposium, 2010

Effective Anomaly Detection with Scarce Training Data.

[BibT_eX]

[DOI]

Proceedings of the Network and Distributed System Security Symposium, 2010

Efficient Detection of Split Personalities in Malware.

[BibT_eX]

[DOI]

Proceedings of the Network and Distributed System Security Symposium, 2010

Are BGP Routers Open to Attack? An Experiment.

[BibT_eX]

[DOI]

Ludovico Cavedon

Proceedings of the Open Research Problems in Network Security, 2010

Why Johnny Can't Pentest: An Analysis of Black-Box Web Vulnerability Scanners.

[BibT_eX]

[DOI]

Adam Doupé

Proceedings of the Detection of Intrusions and Malware, 2010

Organizing Large Scale Hacking Competitions.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware, 2010

Network intrusion detection: dead or alive?

[BibT_eX]

[DOI]

Proceedings of the Twenty-Sixth Annual Computer Security Applications Conference, 2010

Detecting spammers on social networks.

[BibT_eX]

[DOI]

Gianluca Stringhini

Proceedings of the Twenty-Sixth Annual Computer Security Applications Conference, 2010

2009

Reducing errors in the anomaly-based detection of web-based attacks through the combined analysis of web requests and SQL queries.

[BibT_eX]

[DOI]

J. Comput. Secur., 2009

Client-side cross-site scripting protection.

[BibT_eX]

[DOI]

Comput. Secur., 2009

Static Enforcement of Web Application Integrity Through Strong Typing.

[BibT_eX]

[DOI]

Proceedings of the 18th USENIX Security Symposium, 2009

Protecting a Moving Target: Addressing Web Application Concept Drift.

[BibT_eX]

[DOI]

Proceedings of the Recent Advances in Intrusion Detection, 12th International Symposium, 2009

Automated Spyware Collection and Analysis.

[BibT_eX]

[DOI]

Proceedings of the Information Security, 12th International Conference, 2009

Your botnet is my botnet: analysis of a botnet takeover.

[BibT_eX]

[DOI]

Proceedings of the 2009 ACM Conference on Computer and Communications Security, 2009

Analyzing and Detecting Malicious Flash Advertisements.

[BibT_eX]

[DOI]

Proceedings of the Twenty-Fifth Annual Computer Security Applications Conference, 2009

2008

There Is No Free Phish: An Analysis of "Free" and Live Phishing Kits.

[BibT_eX]

[DOI]

Proceedings of the 2nd USENIX Workshop on Offensive Technologies, 2008

ClearShot: Eavesdropping on Keyboard Input from Video.

[BibT_eX]

[DOI]

Davide Balzarotti

Proceedings of the 2008 IEEE Symposium on Security and Privacy (SP 2008), 2008

Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications.

[BibT_eX]

[DOI]

Proceedings of the 2008 IEEE Symposium on Security and Privacy (SP 2008), 2008

Are your votes <i>really</i> counted?: testing the security of real-world electronic voting systems.

[BibT_eX]

[DOI]

Proceedings of the ACM/SIGSOFT International Symposium on Software Testing and Analysis, 2008

A Parallel Architecture for Stateful, High-Speed Intrusion Detection.

[BibT_eX]

[DOI]

Proceedings of the Information Systems Security, 4th International Conference, 2008

2007

Static Disassembly and Code Analysis.

[BibT_eX]

[DOI]

Proceedings of the Malware Detection, 2007

Using a virtual security testbed for digital forensic reconstruction.

[BibT_eX]

[DOI]

J. Comput. Virol., 2007

Extending .NET security to unmanaged code.

[BibT_eX]

[DOI]

Int. J. Inf. Sec., 2007

Catch Me, If You Can: Evading Network Signatures with Web-based Polymorphic Worms.

[BibT_eX]

[DOI]

Matthew Van Gundy

Davide Balzarotti

Proceedings of the First USENIX Workshop on Offensive Technologies, 2007

Vulnerability Analysis of Web-based Applications.

[BibT_eX]

[DOI]

Viktoria Felmetsger

Proceedings of the Test and Analysis of Web Services, 2007

Exploiting Execution Context for the Detection of Anomalous System Calls.

[BibT_eX]

[DOI]

Proceedings of the Recent Advances in Intrusion Detection, 10th International Symposium, 2007

Swaddler: An Approach for the Anomaly-Based Detection of State Violations in Web Applications.

[BibT_eX]

[DOI]

Proceedings of the Recent Advances in Intrusion Detection, 10th International Symposium, 2007

Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis.

[BibT_eX]

[DOI]

Proceedings of the Network and Distributed System Security Symposium, 2007

Is Code Still Moving Around? Looking Back at a Decade of Code Mobility.

[BibT_eX]

[DOI]

Antonio Carzaniga

Proceedings of the 29th International Conference on Software Engineering (ICSE 2007), 2007

Multi-module vulnerability analysis of web-based applications.

[BibT_eX]

[DOI]

Proceedings of the 2007 ACM Conference on Computer and Communications Security, 2007

Improving Signature Testing through Dynamic Data Flow Analysis.

[BibT_eX]

[DOI]

Proceedings of the 23rd Annual Computer Security Applications Conference (ACSAC 2007), 2007

Feature Omission Vulnerabilities: Thwarting Signature Generation for Polymorphic Worms.

[BibT_eX]

[DOI]

Proceedings of the 23rd Annual Computer Security Applications Conference (ACSAC 2007), 2007

2006

Anomalous system call detection.

[BibT_eX]

[DOI]

ACM Trans. Inf. Syst. Secur., 2006

An anomaly-driven reverse proxy for web applications.

[BibT_eX]

[DOI]

Proceedings of the 2006 ACM Symposium on Applied Computing (SAC), 2006

Noxes: a client-side solution for mitigating cross-site scripting attacks.

[BibT_eX]

[DOI]

Proceedings of the 2006 ACM Symposium on Applied Computing (SAC), 2006

Using Hidden Markov Models to Evaluate the Risks of Intrusions.

[BibT_eX]

[DOI]

Proceedings of the Recent Advances in Intrusion Detection, 9th International Symposium, 2006

Using Generalization and Characterization Techniques in the Anomaly-based Detection of Web Attacks.

[BibT_eX]

[DOI]

Proceedings of the Network and Distributed System Security Symposium, 2006

SNOOZE: Toward a Stateful NetwOrk prOtocol fuzZEr.

[BibT_eX]

[DOI]

Proceedings of the Information Security, 9th International Conference, 2006

Using Labeling to Prevent Cross-Service Attacks Against Smart Phones.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware & Vulnerability Assessment, 2006

Digital Forensic Reconstruction and the Virtual Security Testbed ViSe.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware & Vulnerability Assessment, 2006

Vulnerability Analysis of MMS User Agents.

[BibT_eX]

[DOI]

Collin Mulliner

Proceedings of the 22nd Annual Computer Security Applications Conference (ACSAC 2006), 2006

Static Detection of Vulnerabilities in x86 Executables.

[BibT_eX]

[DOI]

Proceedings of the 22nd Annual Computer Security Applications Conference (ACSAC 2006), 2006

2005

Hi-DRA: Intrusion Detection for Internet Security.

[BibT_eX]

[DOI]

Proc. IEEE, 2005

A multi-model approach to the detection of web-based attacks.

[BibT_eX]

[DOI]

Comput. Networks, 2005

Automating Mimicry Attacks Using Static Binary Analysis.

[BibT_eX]

[DOI]

Proceedings of the 14th USENIX Security Symposium, Baltimore, MD, USA, July 31, 2005

Polymorphic Worm Detection Using Structural Information of Executables.

[BibT_eX]

[DOI]

Proceedings of the Recent Advances in Intrusion Detection, 8th International Symposium, 2005

Detecting Malicious JavaScript Code in Mozilla.

[BibT_eX]

[DOI]

Oystein Hallaraker

Proceedings of the 10th International Conference on Engineering of Complex Computer Systems (ICECCS 2005), 2005

Exploiting OS-Level Mechanisms to Implement Mobile Code Security.

[BibT_eX]

[DOI]

Viktoria Felmetsger

Proceedings of the 10th International Conference on Engineering of Complex Computer Systems (ICECCS 2005), 2005

A Learning-Based Approach to the Detection of SQL Attacks.

[BibT_eX]

[DOI]

Fredrik Valeur

Darren Mutz

Proceedings of the Detection of Intrusions and Malware, 2005

Intrusion Detection and Correlation - Challenges and Solutions

[BibT_eX]

[DOI]

Fredrik Valeur

Advances in Information Security 14, Springer, ISBN: 978-0-387-23398-7, 2005

2004

A Comprehensive Approach to Intrusion Detection Alert Correlation.

[BibT_eX]

[DOI]

IEEE Trans. Dependable Secur. Comput., 2004

Using Alert Verification to Identify Successful Intrusion Attempts.

[BibT_eX]

[DOI]

Prax. Inf.verarb. Kommun., 2004

Static Disassembly of Obfuscated Binaries.

[BibT_eX]

[DOI]

Proceedings of the 13th USENIX Security Symposium, August 9-13, 2004, San Diego, CA, USA, 2004

Mobile Agents: Ten Reasons For Failure.

[BibT_eX]

[DOI]

Proceedings of the 5th IEEE International Conference on Mobile Data Management (MDM 2004), 2004

Testing network-based intrusion detection signatures using mutant exploits.

[BibT_eX]

[DOI]

Davide Balzarotti

Proceedings of the 11th ACM Conference on Computer and Communications Security, 2004

Detecting Attacks That Exploit Application-Logic Errors Through Application-Level Auditing.

[BibT_eX]

[DOI]

Jingyu Zhou

Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC 2004), 2004

An Intrusion Detection Tool for AODV-Based Ad hoc Wireless Networks.

[BibT_eX]

[DOI]

Elizabeth M. Belding-Royer

Sumit Gwalani

Kavitha Srinivasan

Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC 2004), 2004

Detecting Kernel-Level Rootkits Through Binary Analysis.

[BibT_eX]

[DOI]

Proceedings of the 20th Annual Computer Security Applications Conference (ACSAC 2004), 2004

2003

Detecting Malicious Java Code Using Virtual Machine Auditing.

[BibT_eX]

[DOI]

Sunil Soman

Chandra Krintz

Proceedings of the 12th USENIX Security Symposium, Washington, D.C., USA, August 4-8, 2003, 2003

Designing and implementing a family of intrusion detection systems.

[BibT_eX]

[DOI]

Fredrik Valeur

Proceedings of the 11th ACM SIGSOFT Symposium on Foundations of Software Engineering 2003 held jointly with 9th European Software Engineering Conference, 2003

Teaching Network Security Through Live Exercises.

[BibT_eX]

Proceedings of the Security Education and Critical Infrastructures, 2003

Internet Security and Intrusion Detection.

[BibT_eX]

[DOI]

Proceedings of the 25th International Conference on Software Engineering, 2003

A Topological Characterization of TCP/IP Security.

[BibT_eX]

[DOI]

Proceedings of the FME 2003: Formal Methods, 2003

On the Detection of Anomalous System Call Arguments.

[BibT_eX]

[DOI]

Proceedings of the Computer Security, 2003

Anomaly detection of web-based attacks.

[BibT_eX]

[DOI]

Proceedings of the 10th ACM Conference on Computer and Communications Security, 2003

A Stateful Intrusion Detection System for World-Wide Web Servers.

[BibT_eX]

[DOI]

Proceedings of the 19th Annual Computer Security Applications Conference (ACSAC 2003), 2003

An Experience Developing an IDS Stimulator for the Black-Box Testing of Network Intrusion Detection Systems.

[BibT_eX]

[DOI]

Darren Mutz

Proceedings of the 19th Annual Computer Security Applications Conference (ACSAC 2003), 2003

2002

STATL: An Attack Language for State-Based Intrusion Detection.

[BibT_eX]

[DOI]

Steven T. Eckmann

J. Comput. Secur., 2002

Stateful Intrusion Detection for High-Speed Networks.

[BibT_eX]

[DOI]

Proceedings of the 2002 IEEE Symposium on Security and Privacy, 2002

An Intrusion Detection System for Aglets.

[BibT_eX]

[DOI]

Bryan Cassell

Dave Fayram

Proceedings of the Mobile Agents, 6th International Conference, 2002

Mnemosyne: Designing and Implementing Network Short-Term Memory.

[BibT_eX]

[DOI]

Andrew Mitchel

Proceedings of the 8th International Conference on Engineering of Complex Computer Systems (ICECCS 2002), 2002

Sensor-based intrusion detection for intra-domain distance-vector routing.

[BibT_eX]

[DOI]

Vishal Mittal

Proceedings of the 9th ACM Conference on Computer and Communications Security, 2002

Composable Tools For Network Discovery and Security Analysis.

[BibT_eX]

[DOI]

Proceedings of the 18th Annual Computer Security Applications Conference (ACSAC 2002), 2002

2001

Security Testing of an Online Banking Service.

[BibT_eX]

[DOI]

André L. M. dos Santos

Proceedings of the E-Commerce Security and Privacy, 2001

Designing a Web of Highly-Configurable Intrusion Detection Sensors.

[BibT_eX]

[DOI]

Per Blix

Proceedings of the Recent Advances in Intrusion Detection, 4th International Symposium, 2001

Evaluating the Security of Three Java-Based Mobile Agent Systems.

[BibT_eX]

[DOI]

Sebastian Fischmeister

Proceedings of the Mobile Agents, 5th International Conference, 2001

1999

NetSTAT: A Network-based Intrusion Detection System.

[BibT_eX]

[DOI]

J. Comput. Secur., 1999

1998

Understanding Code Mobility.

[BibT_eX]

[DOI]

Alfonso Fuggetta

IEEE Trans. Software Eng., 1998

Cryptographic Traces for Mobile Agents.

[BibT_eX]

[DOI]

Proceedings of the Mobile Agents and Security, 1998

Towards a Software Engineering Approach to Web Site Development.

[BibT_eX]

[DOI]

Proceedings of the 9th International Workshop on Software Specification and Design, 1998

NetSTAT: A Network-Based Intrusion Detection Approach.

[BibT_eX]

[DOI]

Proceedings of the 14th Annual Computer Security Applications Conference (ACSAC 1998), 1998

1997

Software Engineering Issues for Network Computing.

[BibT_eX]

[DOI]

Carlo Ghezzi

Proceedings of the Requirements Targeting Software and Systems Engineering, 1997

Mobile Code Paradigms and Technologies: A Case Study.

[BibT_eX]

[DOI]

Carlo Ghezzi

Proceedings of the Mobile Agents, First International Workshop, 1997

Designing Distributed Applications with Mobile Code Paradigms.

[BibT_eX]

[DOI]

Antonio Carzaniga

Proceedings of the Pulling Together, 1997

1996

Analyzing Mobile Code Languages.

[BibT_eX]

[DOI]

Proceedings of the Mobile Object Systems, 1996

1994

Designing and Implementing Inter-Client Communication in the O2 Object-Oriented Database Management System.

[BibT_eX]

[DOI]

Antonio Carzaniga