Lorenzo Cavallaro

Konrad Rieck

Commun. ACM, November, 2024

Identifying Authorship in Malicious Binaries: Features, Challenges & Datasets.

[BibT_eX]

[DOI]

ACM Comput. Surv., August, 2024

Context is the Key: Backdoor Attacks for In-Context Learning with Vision Transformers.

[BibT_eX]

[DOI]

CoRR, 2024

Demystifying Behavior-Based Malware Detection at Endpoints.

[BibT_eX]

[DOI]

CoRR, 2024

Unraveling the Key of Machine Learning Solutions for Android Malware Detection.

[BibT_eX]

[DOI]

CoRR, 2024

TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time (Extended Version).

[BibT_eX]

[DOI]

CoRR, 2024

ChainReactor: Automated Privilege Escalation Chain Discovery via AI Planning.

[BibT_eX]

[DOI]

Proceedings of the 33rd USENIX Security Symposium, 2024

How to Train your Antivirus: RL-based Hardening through the Problem Space.

[BibT_eX]

[DOI]

Proceedings of the 27th International Symposium on Research in Attacks, 2024

ADAPT it! Automating APT Campaign and Group Attribution by Leveraging and Linking Heterogeneous Files.

[BibT_eX]

[DOI]

Proceedings of the 27th International Symposium on Research in Attacks, 2024

Exploiting Code Symmetries for Learning Program Semantics.

[BibT_eX]

[DOI]

Proceedings of the Forty-first International Conference on Machine Learning, 2024

EmbedWatch: Fat Pointer Solution for Detecting Spatial Memory Errors in Embedded Systems.

[BibT_eX]

[DOI]

Proceedings of the Sixth Workshop on CPS&IoT Security and Privacy, 2024

2023

Are Machine Learning Models for Malware Detection Ready for Prime Time?

[BibT_eX]

[DOI]

IEEE Secur. Priv., 2023

Lessons Learned on Machine Learning for Computer Security.

[BibT_eX]

[DOI]

Christian Wressnegger

Konrad Rieck

IEEE Secur. Priv., 2023

Adversarial Markov Games: On Adaptive Decision-Based Attacks and Defenses.

[BibT_eX]

[DOI]

CoRR, 2023

Symmetry-Preserving Program Representations for Learning Code Semantics.

[BibT_eX]

[DOI]

CoRR, 2023

Do you still need a manual smart contract audit?

[BibT_eX]

[DOI]

CoRR, 2023

Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers.

[BibT_eX]

[DOI]

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

ROPfuscator: Robust Obfuscation with ROP.

[BibT_eX]

[DOI]

Proceedings of the 2023 IEEE Security and Privacy Workshops (SPW), 2023

Is It Overkill? Analyzing Feature-Space Concept Drift in Malware Detectors.

[BibT_eX]

[DOI]

Proceedings of the 2023 IEEE Security and Privacy Workshops (SPW), 2023

Locate and Verify: A Two-Stream Network for Improved Deepfake Detection.

[BibT_eX]

[DOI]

Proceedings of the 31st ACM International Conference on Multimedia, 2023

DFIL: Deepfake Incremental Learning by Exploiting Domain-invariant Forgery Clues.

[BibT_eX]

[DOI]

Proceedings of the 31st ACM International Conference on Multimedia, 2023

Cross-Modal and Multi-Attribute Face Recognition: A Benchmark.

[BibT_eX]

[DOI]

Proceedings of the 31st ACM International Conference on Multimedia, 2023

Poster: RPAL-Recovering Malware Classifiers from Data Poisoning using Active Learning.

[BibT_eX]

[DOI]

Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 2023

Drift Forensics of Malware Classifiers.

[BibT_eX]

[DOI]

Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security, 2023

2022

Dos and Don'ts of Machine Learning in Computer Security.

[BibT_eX]

[DOI]

Christian Wressnegger

Konrad Rieck

Proceedings of the 31st USENIX Security Symposium, 2022

Transcending TRANSCEND: Revisiting Malware Classification in the Presence of Concept Drift.

[BibT_eX]

[DOI]

Proceedings of the 43rd IEEE Symposium on Security and Privacy, 2022

Designing a Provenance Analysis for SGX Enclaves.

[BibT_eX]

[DOI]

Proceedings of the Annual Computer Security Applications Conference, 2022

2021

User-Centered Design and Development of the Modular TWIN Lower Limb Exoskeleton.

[BibT_eX]

[DOI]

Frontiers Neurorobotics, 2021

Universal Adversarial Perturbations for Malware.

[BibT_eX]

[DOI]

Raphael Labaca Castro

CoRR, 2021

Identifying Authorship Style in Malicious Binaries: Techniques, Challenges & Datasets.

[BibT_eX]

[DOI]

Jason Gray

Daniele Sgandurra

CoRR, 2021

Investigating Labelless Drift Adaptation for Malware Detection.

[BibT_eX]

[DOI]

Proceedings of the AISec@CCS 2021: Proceedings of the 14th ACM Workshop on Artificial Intelligence and Security, 2021

INSOMNIA: Towards Concept-Drift Robustness in Network Intrusion Detection.

[BibT_eX]

[DOI]

Proceedings of the AISec@CCS 2021: Proceedings of the 14th ACM Workshop on Artificial Intelligence and Security, 2021

2020

On the Dissection of Evasive Malware.

[BibT_eX]

[DOI]

IEEE Trans. Inf. Forensics Secur., 2020

Intertwining ROP Gadgets and Opaque Predicates for Robust Obfuscation.

[BibT_eX]

[DOI]

CoRR, 2020

Transcending Transcend: Revisiting Malware Classification with Conformal Evaluation.

[BibT_eX]

[DOI]

CoRR, 2020

Intriguing Properties of Adversarial ML Attacks in the Problem Space.

[BibT_eX]

[DOI]

Proceedings of the 2020 IEEE Symposium on Security and Privacy, 2020

Probabilistic Naming of Functions in Stripped Binaries.

[BibT_eX]

[DOI]

James Patrick-Evans

Proceedings of the ACSAC '20: Annual Computer Security Applications Conference, 2020

2019

Catch Me (On Time) If You Can: Understanding the Effectiveness of Twitter URL Blacklists.

[BibT_eX]

[DOI]

Simon Bell

Kenny Paterson

CoRR, 2019

TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Time.

[BibT_eX]

[DOI]

Proceedings of the 28th USENIX Security Symposium, 2019

SoK: Using Dynamic Binary Instrumentation for Security (And How You May Get Caught Red Handed).

[BibT_eX]

[DOI]

Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security, 2019

2018

Anomaly-based exploratory analysis and detection of exploits in android mediaserver.

[BibT_eX]

[DOI]

Konstantinos Markantonakis

IET Inf. Secur., 2018

Reprint of "You can't touch this: Consumer-centric android application repackaging detection".

[BibT_eX]

[DOI]

Iakovos Gurulian

Keith Mayes

Future Gener. Comput. Syst., 2018

BabelView: Evaluating the Impact of Code Injection Attacks in Mobile Webviews.

[BibT_eX]

[DOI]

Claudio Rizzo

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2018

Enabling Fair ML Evaluations for Security.

[BibT_eX]

[DOI]

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018

2017

Understanding Android App Piggybacking: A Systematic Study of Malicious Code Grafting.

[BibT_eX]

[DOI]

Li Li

Daoyuan Li

Tegawendé F. Bissyandé

IEEE Trans. Inf. Forensics Secur., 2017

The Evolution of Android Malware and Android Analysis Techniques.

[BibT_eX]

[DOI]

ACM Comput. Surv., 2017

Flipping 419 Cybercrime Scams: Targeting the Weak and the Vulnerable.

[BibT_eX]

[DOI]

Proceedings of the 26th International Conference on World Wide Web Companion, 2017

POTUS: Probing Off-The-Shelf USB Drivers with Symbolic Fault Injection.

[BibT_eX]

[DOI]

James Patrick-Evans

Proceedings of the 11th USENIX Workshop on Offensive Technologies, 2017

Transcend: Detecting Concept Drift in Malware Classification Models.

[BibT_eX]

[DOI]

Proceedings of the 26th USENIX Security Symposium, 2017

Stack Bounds Protection with Low Fat Pointers.

[BibT_eX]

[DOI]

Gregory J. Duck

Roland H. C. Yap

Proceedings of the 24th Annual Network and Distributed System Security Symposium, 2017

Euphony: harmonious unification of cacophonous anti-virus vendor labels for Android malware.

[BibT_eX]

[DOI]

Médéric Hurier

Santanu Kumar Dash

Tegawendé F. Bissyandé

Yves Le Traon

Jacques Klein

Proceedings of the 14th International Conference on Mining Software Repositories, 2017

Understanding Android app piggybacking.

[BibT_eX]

[DOI]

Li Li

Daoyuan Li

Tegawendé F. Bissyandé

Proceedings of the 39th International Conference on Software Engineering, 2017

DroidSieve: Fast and Accurate Classification of Obfuscated Android Malware.

[BibT_eX]

[DOI]

Proceedings of the Seventh ACM Conference on Data and Application Security and Privacy, 2017

Modular Synthesis of Heap Exploits.

[BibT_eX]

[DOI]

Dusan Repel

Konstantinos Markantonakis

Proceedings of the 2017 Workshop on Programming Languages and Analysis for Security, 2017

2016

You can't touch this: Consumer-centric android application repackaging detection.

[BibT_eX]

[DOI]

Iakovos Gurulian

Keith Mayes

Future Gener. Comput. Syst., 2016

DroidScribe: Classifying Android Malware Based on Runtime Behavior.

[BibT_eX]

[DOI]

Santanu Kumar Dash

Proceedings of the 2016 IEEE Security and Privacy Workshops, 2016

Prescience: Probabilistic Guidance on the Retraining Conundrum for Malware Detection.

[BibT_eX]

[DOI]

Amit Deo

Santanu Kumar Dash

Volodya Vovk

Proceedings of the 2016 ACM Workshop on Artificial Intelligence and Security, 2016

2015

Conformal Clustering and Its Application to Botnet Traffic.

[BibT_eX]

[DOI]

Proceedings of the Statistical Learning and Data Sciences - Third International Symposium, 2015

CopperDroid: Automatic Reconstruction of Android Malware Behaviors.

[BibT_eX]

[DOI]

Proceedings of the 22nd Annual Network and Distributed System Security Symposium, 2015

2014

PuppetDroid: A User-Centric UI Exerciser for Automatic Dynamic Analysis of Similar Android Applications.

[BibT_eX]

[DOI]

CoRR, 2014

Phoenix: DGA-Based Botnet Tracking and Intelligence.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware, and Vulnerability Assessment, 2014

2013

Tracking and Characterizing Botnets Using Automatically Generated Domains.

[BibT_eX]

[DOI]

CoRR, 2013

Practical automated vulnerability monitoring using program state invariants.

[BibT_eX]

[DOI]

Cristiano Giuffrida

Andrew S. Tanenbaum

Proceedings of the 2013 43rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), 2013

2012

Peering into the Muddy Waters of Pastebin.

[BibT_eX]

[DOI]

ERCIM News, 2012

Memory Errors: The Past, the Present, and the Future.

[BibT_eX]

[DOI]

Proceedings of the Research in Attacks, Intrusions, and Defenses, 2012

When hardware meets software: a bulletproof solution to forensic memory acquisition.

[BibT_eX]

[DOI]

Proceedings of the 28th Annual Computer Security Applications Conference, 2012

2011

Taint-Enhanced Anomaly Detection.

[BibT_eX]

[DOI]

R. Sekar

Proceedings of the Information Systems Security - 7th International Conference, 2011

Systems Security at VU University Amsterdam.

[BibT_eX]

[DOI]

Herbert Bos

Andrew S. Tanenbaum

Proceedings of the First SysSec Workshop 2011, 2011

Sandnet: network traffic analysis of malicious software.

[BibT_eX]

[DOI]

Christian Rossow

Christian J. Dietrich

Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security, 2011

2010

MINIX 3: Status Report and Current Research.

[BibT_eX]

[DOI]

David C. van Moolenbroek

Live and Trustworthy Forensic Analysis of Commodity Production Systems.

[BibT_eX]

[DOI]

Proceedings of the Recent Advances in Intrusion Detection, 13th International Symposium, 2010

We Crashed, Now What?

[BibT_eX]

[DOI]

Cristiano Giuffrida

Andrew S. Tanenbaum

Proceedings of the Sixth Workshop on Hot Topics in System Dependability, 2010

Take a Deep Breath: A Stealthy, Resilient and Cost-Effective Botnet Using Skype.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware, 2010

Organizing Large Scale Hacking Competitions.

[BibT_eX]

[DOI]

Proceedings of the Detection of Intrusions and Malware, 2010

PAriCheck: an efficient pointer arithmetic checker for C programs.

[BibT_eX]

[DOI]

Proceedings of the 5th ACM Symposium on Information, 2010

2009

Your botnet is my botnet: analysis of a botnet takeover.

[BibT_eX]

[DOI]

Proceedings of the 2009 ACM Conference on Computer and Communications Security, 2009

2008

Anomalous Taint Detection.

[BibT_eX]

[DOI]

R. Sekar

Proceedings of the Recent Advances in Intrusion Detection, 11th International Symposium, 2008

LISABETH: automated content-based signature generator for zero-day polymorphic worms.

[BibT_eX]

[DOI]

Proceedings of the Fourth International Workshop on Software Engineering for Secure Systems, 2008

A Parallel Architecture for Stateful, High-Speed Intrusion Detection.

[BibT_eX]

[DOI]

Proceedings of the Information Systems Security, 4th International Conference, 2008

On the Limits of Information Flow Techniques for Malware Analysis and Containment.

[BibT_eX]

[DOI]

Prateek Saxena

R. Sekar

Proceedings of the Detection of Intrusions and Malware, 2008

2007

Diversified Process Replicæ for Defeating Memory Error Exploits.

[BibT_eX]

[DOI]

Andrea Lanzi

Proceedings of the 26th IEEE International Performance Computing and Communications Conference, 2007

An Efficient Technique for Preventing Mimicry and Impossible Paths Execution Attacks.

[BibT_eX]

[DOI]

Andrea Lanzi

Proceedings of the 26th IEEE International Performance Computing and Communications Conference, 2007

Static Analysis on x86 Executables for Preventing Automatic Mimicry Attacks.

[BibT_eX]

[DOI]

Andrea Lanzi

Proceedings of the Detection of Intrusions and Malware, 2007

2005

Replay Attack in TCG Specification and Solution.

[BibT_eX]

[DOI]

Proceedings of the 21st Annual Computer Security Applications Conference (ACSAC 2005), 2005

2000

Less Harm, Less Worry or How to Improve Network Security by Bounding System Offensiveness.

[BibT_eX]

[DOI]