Secure Intelligent Methods for Advanced RecoGnition of malware and stegomalware

Livrables

This deliverable will report dissemination activities done through the project with the reference to initially set goals and indicators

User interface

The result of Task 5.2 is an intuitive user interface for the SIMARGL toolkit, which delivers relevant information based on context and preferences in an intelligent and efficient manner to the end-user.

Machine Learning algorithms contextualisation

This document will describe the global principles of each Machine Learning algorithm implemented in SIMARGL, to help readers to understand what kind of detection is looked for. Information on the datasets necessary to train the algorithms may be given, as well as the information that will be associated to the detection for the end users.

SIMARGL Roadmap

Plan for future successful deployment of SIMARGL its impact and needed improvements beyond the project

Report to the EU how it should lead global cyber security policy

In this general recommendation we will develop a global strategy for EU

Ex-post Impact Assessment and Sustainability Measures

This deliverable will provide an assessment of the impact of the project and the measure to ensure the sustainability of the platform

Final version of the SIMARGL toolkit architecture

This deliverable will provide the full specification of the SIMARGL toolkit architecture to be implemented in WP4 and WP5.

Nexus of cyberspace actors

A nexus of actors operating in cyber space describing their intentions, methods, objectives and implications including a substantial analysis of their interactions enabled by the dynamics of technology invention. This deliverable is an analysis of activities and lacks any normative assessments.

Model of cyberspace dynamics

Based on the nexus of actors, this model will serve to identify malicious activities to the society and its values. This is a normative assessment of the activities identified in the nexus of cyber space actors.

Website and online presence strategy

The output will be the collection of the dissemination material to assure online presence of the project (logotypes, templates, created social media channels) and the project website.

Design for secure, fairness and explainable machine learning

This deliverable will provide guidelines for Machine Learning-based methods for the analysis of security-relevant information to improve effectiveness of malware detection.

Exploitation plan

This deliverable will provide the exploitation plan for the SIMARGL platform.

SIMAGRL full solution release

Technical specification and SIMAGRL prototype for the fully integrated services and toolkits provided by the partners

Publications

The stray sheep of cyberspace a.k.a. the actors who claim they break the law for the greater good

Auteurs: Aleksandra Pawlicka, Michał Choraś, Marek Pawlicki
Publié dans: Personal and Ubiquitous Computing, 2021, ISSN 1617-4909
Éditeur: Springer Verlag
DOI: 10.1007/s00779-021-01568-7

Guidelines for Stego/Malware Detection Tools: Achieving GDPR Compliance

Auteurs: Aleksandra Pawlicka, Dagmara Jaroszewska-Choras, Michal Choras, Marek Pawlicki
Publié dans: IEEE Technology and Society Magazine, Numéro 39/4, 2020, Page(s) 60-70, ISSN 0278-0097
Éditeur: Institute of Electrical and Electronics Engineers
DOI: 10.1109/mts.2020.3031848

Cyber reconnaissance techniques

Auteurs: Wojciech Mazurczyk, Luca Caviglione
Publié dans: Communications of the ACM, Numéro 64/3, 2021, Page(s) 86-95, ISSN 0001-0782
Éditeur: Association for Computing Machinary, Inc.
DOI: 10.1145/3418293

Detection of Image Steganography Using Deep Learning and Ensemble Classifiers

Auteurs: Mikołaj Płachta , Marek Krzemien, Krzysztof Szczypiorski and Artur Janicki
Publié dans: Electronics, Numéro 11,1565, 2022, ISSN 2079-9292
Éditeur: MDPI
DOI: 10.3390/electronics11101565

Trends and Challenges in Network Covert Channels Countermeasures

Auteurs: Luca Caviglione
Publié dans: Applied Sciences, Numéro 11/4, 2021, Page(s) 1641, ISSN 2076-3417
Éditeur: Applied Sciences
DOI: 10.3390/app11041641

Intrusion detection approach based on optimised artificial neural network

Auteurs: Michał Choraś, Marek Pawlicki
Publié dans: Neurocomputing, 2020, ISSN 0925-2312
Éditeur: Elsevier BV
DOI: 10.1016/j.neucom.2020.07.138

Covert Channels in Transport Layer Security: Performance and Security Assessment

Auteurs: Corinna Heinz and Marco Zuppelli and Luca Caviglione
Publié dans: Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications (JoWUA), Numéro 12(4), 2021, Page(s) 22-36, ISSN 2093-5382
Éditeur: JoWUA
DOI: 10.22667/jowua.2021.12.31.022

Kernel-level tracing for detecting stegomalware and covert channels in Linux environments

Auteurs: Luca Caviglione, Wojciech Mazurczyk, Matteo Repetto, Andreas Schaffhauser, Marco Zuppelli
Publié dans: Computer Networks, Numéro 191, 2021, Page(s) 108010, ISSN 1389-1286
Éditeur: Elsevier BV
DOI: 10.1016/j.comnet.2021.108010

Tight Arms Race: Overview of Current Malware Threats and Trends in Their Detection

Auteurs: Luca Caviglione, Michal Choras, Igino Corona, Artur Janicki, Wojciech Mazurczyk, Marek Pawlicki, Katarzyna Wasielewska
Publié dans: IEEE Access, Numéro 9, 2021, Page(s) 5371-5396, ISSN 2169-3536
Éditeur: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2020.3048319

Analysis of Reversible Network Covert Channels

Auteurs: Szary, P., Mazurczyk, W., Wendzel, S., Caviglione, L.
Publié dans: IEEE Access, Numéro 10, 2022, Page(s) 41226 - 41238, ISSN 2169-3536
Éditeur: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2022.3168018

Context-Aware Software Vulnerability Classification Using Machine Learning

Auteurs: Grzegorz Siewruk, Wojciech Mazurczyk
Publié dans: IEEE Access, Numéro 9, 2021, Page(s) 88852-88867, ISSN 2169-3536
Éditeur: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2021.3075385

Replication Study Challenges and New Number Formats for Chaotic Pseudo Random Number Generators

Auteurs: Carina Heßeling, Jörg Keller
Publié dans: it - Information Technology, Numéro vol. 64, no. 1-2, 2022, 2022, Page(s) 5-13, ISSN 2196-7032
Éditeur: De Gruyter Oldenbourg
DOI: 10.1515/itit-2021-0065

Machine Learning Based Approach to Anomaly and Cyberattack Detection in Streamed Network Traffic Data

Auteurs: Mikołaj Komisarek, Marek Pawlicki, Rafał Kozik, and Michał Choraś
Publié dans: Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications (JoWUA), Numéro 12(1), 2021, Page(s) 3-19, ISSN 2093-5382
Éditeur: Innovative Information Science & Technology Research Group (ISYOU)
DOI: 10.22667/jowua.2021.03.31.003

How to Effectively Collect and Process Network Data for Intrusion Detection?

Auteurs: Mikołaj Komisarek, Marek Pawlicki, Rafał Kozik, Witold Hołubowicz, Michał Choraś
Publié dans: Entropy, Numéro 23/11, 2021, Page(s) 1532, ISSN 1099-4300
Éditeur: Multidisciplinary Digital Publishing Institute (MDPI)
DOI: 10.3390/e23111532

The Proposition and Evaluation of the RoEduNet-SIMARGL2021 Network Intrusion Detection Dataset

Auteurs: Maria-Elena Mihailescu, Darius Mihai, Mihai Carabas, Mikołaj Komisarek, Marek Pawlicki, Witold Hołubowicz, Rafał Kozik
Publié dans: Sensors, Numéro 21/13, 2021, Page(s) 4319, ISSN 1424-8220
Éditeur: Multidisciplinary Digital Publishing Institute (MDPI)
DOI: 10.3390/s21134319

Comparison of Hash Functions for Network Traffic Acquisition Using a Hardware-Accelerated Probe

Auteurs: Mateusz Korona, Paweł Szumełda, Mariusz Rawski, Artur Janicki
Publié dans: Electronics, Numéro 11, 1688, 2022, ISSN 2079-9292
Éditeur: MDPI
DOI: 10.3390/electronics11111688

Traffic Fingerprinting Attacks on Internet of Things Using Machine Learning

Auteurs: Monika Skowron, Artur Janicki, Wojciech Mazurczyk
Publié dans: IEEE Access, Numéro 8, 2020, Page(s) 20386-20400, ISSN 2169-3536
Éditeur: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2020.2969015

Code Layering for the Detection of Network Covert Channels in Agentless Systems

Auteurs: Marco Zuppelli, Matteo Repetto, Andreas Schaffhauser, Wojciech Mazurczyk, Luca Caviglione
Publié dans: Transactions on Network and Service Management, 2022, ISSN 1932-4537
Éditeur: Institute of Electrical and Electronics Engineers
DOI: 10.1109/tnsm.2022.3176752

Anomaly Detection in Log Files Using Selected Natural Language Processing Methods

Auteurs: Piotr Ryciak, Katarzyna Wasielewska, Artur Janicki
Publié dans: Applied Sciences, Numéro 12, 5089, 2022, ISSN 2076-3417
Éditeur: MDPI
DOI: 10.3390/app12105089

Unsupervised packet-based anomaly detection in virtual networks

Auteurs: Daniel Spiekermann, Jörg Keller
Publié dans: Computer Networks, Numéro 192, 2021, Page(s) 108017, ISSN 1389-1286
Éditeur: Elsevier BV
DOI: 10.1016/j.comnet.2021.108017

An Effective and Efficient Approach to Improve Visibility Over Network Communications

Auteurs: Marco Zuppelli, Alessandro Carrega, and Matteo Repetto
Publié dans: Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications (JoWUA), Numéro 12(4), 2021, Page(s) 89-108, ISSN 2093-5382
Éditeur: JoWUA
DOI: 10.22667/jowua.2021.12.31.089

VoIP network covert channels to enhance privacy and information sharing

Auteurs: Jens Saenger, Wojciech Mazurczyk, Jörg Keller, Luca Caviglione
Publié dans: Future Generation Computer Systems, Numéro 111, 2020, Page(s) 96-106, ISSN 0167-739X
Éditeur: Elsevier BV
DOI: 10.1016/j.future.2020.04.032

A Survey on Neural Networks for (Cyber-)Security and (Cyber-)Security of Neural Networks

Auteurs: Marek Pawlicki, Rafał Kozik, Michał Choraś,
Publié dans: Neurocomputing, 2022, ISSN 0925-2312
Éditeur: Elsevier BV
DOI: 10.1016/j.neucom.2022.06.002

Reversible and Plausibly Deniable Covert Channels in One-Time Passwords Based on Hash Chains

Auteurs: Jörg Keller, Steffen Wendzel
Publié dans: Applied Sciences, Numéro 11/2, 2021, Page(s) 731, ISSN 2076-3417
Éditeur: MDPI
DOI: 10.3390/app11020731

Test environment for security toolkit

Auteurs: Maria-Elena Mihailescu, Darius Mihai, Mihai Barbulescu, Mihai Carabas
Publié dans: World Congress on Internet Security (WorldCIS-2020), 2020, Page(s) 31-34, ISBN 978-1-913572-24-2
Éditeur: Infonomics Society
DOI: 10.20533/worldcis.2020.0004

Kleptography in Authentication Protocols: Why is it Still Possible?

Auteurs: Carina Heßeling, Jörg Keller, Sebastian Litzinger
Publié dans: European Interdisciplinary Cybersecurity Conference (EICC), 2022
Éditeur: ACM

Network Intrusion Detection in the Wild - the Orange use case in the SIMARGL project

Auteurs: Mikołaj Komisarek, Marek Pawlicki, Mikołaj Kowalski, Adrian Marzecki, Rafał Kozik, Michał Choraś
Publié dans: The 16th International Conference on Availability, Reliability and Security, 2021, Page(s) 1-7, ISBN 9781450390514
Éditeur: ACM
DOI: 10.1145/3465481.3470091

Covert Channels in Transport Layer Security

Auteurs: Corinna Heinz, Wojciech Mazurczyk, Luca Caviglione
Publié dans: Proceedings of the European Interdisciplinary Cybersecurity Conference, 2020, Page(s) 1-6, ISBN 9781450375993
Éditeur: ACM
DOI: 10.1145/3424954.3424962

bccstego: A Framework for Investigating Network Covert Channels

Auteurs: Repetto, Matteo; Caviglione, Luca; Zuppelli, Marco
Publié dans: Numéro 1, 2021
Éditeur: ACM
DOI: 10.5281/zenodo.4967437

Cyberspace threats - not only hackers and criminals. Raising the awareness of selected unusual cyberspace actors - cybersecurity researchers' perspective

Auteurs: Aleksandra Pawlicka, Michał Choraś, Marek Pawlicki
Publié dans: Proceedings of the 15th International Conference on Availability, Reliability and Security, 2020, Page(s) 1-11, ISBN 9781450388337
Éditeur: ACM
DOI: 10.1145/3407023.3409181

How to Make an Intrusion Detection SystemAware of Steganographic Transmission.

Auteurs: Koziak, Tomasz and Wasielewska, Katarzyna and Janicki, Artur
Publié dans: European Interdisciplinary Cybersecurity Conference, 2021, Page(s) 77–82, ISBN 9781450390491
Éditeur: Association for Computing Machinery
DOI: 10.1145/3487405.3487421

Covert Channels in One-Time Passwords Based on Hash Chains

Auteurs: Jörg Keller, Steffen Wendzel
Publié dans: Proceedings of the European Interdisciplinary Cybersecurity Conference, 2020, Page(s) 1-2, ISBN 9781450375993
Éditeur: ACM
DOI: 10.1145/3424954.3424966

Impact of Virtual Networks on Anomaly Detection with Machine Learning

Auteurs: Daniel Spiekermann, Jorg Keller
Publié dans: 2020 6th IEEE Conference on Network Softwarization (NetSoft), 2020, Page(s) 430-436, ISBN 978-1-7281-5684-2
Éditeur: IEEE
DOI: 10.1109/netsoft48620.2020.9165325

Adaptive Warden Strategy for Countering Network Covert Storage Channels

Auteurs: Mehdi Chourib, Steffen Wendzel, Wojciech Mazurczyk
Publié dans: 2021 IEEE 46th Conference on Local Computer Networks (LCN), 2021, Page(s) 148-153, ISBN 978-1-6654-1886-7
Éditeur: IEEE
DOI: 10.1109/lcn52139.2021.9524939

Encapcap: Transforming Network Traces to Virtual Networks

Auteurs: Daniel Spiekermann, Jorg Keller
Publié dans: 2021 IEEE 7th International Conference on Network Softwarization (NetSoft), 2021, Page(s) 437-442, ISBN 978-1-6654-0522-5
Éditeur: IEEE
DOI: 10.1109/netsoft51509.2021.9492602

Real-time stream processing tool for detecting suspicious network patterns using machine learning

Auteurs: Mikolaj Komisarek, Michal Choras, Rafal Kozik, Marek Pawlicki
Publié dans: ARES '20: Proceedings of the 15th International Conference on Availability, Reliability and Security, 2020, Page(s) 1-7, ISBN 978-1-4503-8833-7
Éditeur: ACM Press
DOI: 10.1145/3407023.3409189

Multilevel Network Steganography in Fountain Codes

Auteurs: Jörg Keller
Publié dans: European Interdisciplinary Cybersecurity Conference (EICC),, Numéro 10-11, 2021, 2021
Éditeur: ACM
DOI: 10.1145/3487405.3487420

Pareto-Optimal Covert Channels in Sensor Data Transmission

Auteurs: Carina Heßeling, Jörg Keller
Publié dans: Proceedings European Interdisciplinary Cybersecurity Conference 2022, 2022
Éditeur: ACM
DOI: 10.1145/1122445.1122

IPv6 Covert Channels in the Wild

Auteurs: Wojciech Mazurczyk, Krystian Powójski, Luca Caviglione
Publié dans: Proceedings of the Third Central European Cybersecurity Conference on - CECC 2019, 2019, Page(s) 1-6, ISBN 9781-450372961
Éditeur: ACM Press
DOI: 10.1145/3360664.3360674

Towards Reversible Storage Network Covert Channels

Auteurs: Wojciech Mazurczyk, Przemysław Szary, Steffen Wendzel, Luca Caviglione
Publié dans: Proceedings of the 14th International Conference on Availability, Reliability and Security - ARES '19, 2019, Page(s) 1-8, ISBN 9781-450371643
Éditeur: ACM Press
DOI: 10.1145/3339252.3341493

Design and performance evaluation of reversible network covert channels

Auteurs: P. Szary, W. Mazurczyk, S. Wendzel, L. Caviglione
Publié dans: Proc. of the 15th International Conference on Availability, Reliability and Security (ARES 2020), 2020, Page(s) 1-8
Éditeur: ACM Press
DOI: 10.1145/3407023.3409215

Wiretapping Pods and Nodes - Lawful Interception in Kubernetes

Auteurs: Daniel Spiekermann, J¨org Keller
Publié dans: Electronic Communications of the EASST, Numéro 80, 2021, Page(s) 1-4
Éditeur: EASST
DOI: 10.14279/tuj.eceasst.80.1148

Code Augmentation for Detecting Covert Channels Targeting the IPv6 Flow Label

Auteurs: Caviglione, Luca; Zuppelli, Marco; Mazurczyk, Wojciech; Shaffhauser, Andreas; Repetto, Matteo
Publié dans: IEEE International Conference on Network Softwarization, Numéro 5, 2021
Éditeur: IEEE
DOI: 10.5281/zenodo.4967418

Stegomalware detection through structural analysis of media files

Auteurs: Damian Puchalski, Luca Caviglione, Rafal Kozik, Adrian Marzecki, Slawomir Krawczyk, Michał Choraś
Publié dans: Proc. of the 15th International Conference on Availability, Reliability and Security (ARES 2020), 2020, Page(s) 1-6, ISSN 978-1-4503-8833
Éditeur: ACM Press
DOI: 10.1145/3407023.3409187

PowerDecode: a PowerShell Script Decoder Dedicated toMalware Analysis

Auteurs: Giuseppe Mario Malandrone, Giovanni Virdis, Giorgio Giacinto, Davide Maiorca
Publié dans: Proceedings of the Italian Conference on Cybersecurity (ITASEC 2021), Numéro Vol. 2940, 2019, Page(s) 219-232
Éditeur: CEUR-WS

Programmable Data Gathering for Detecting Stegomalware

Auteurs: A. Carrega, L. Caviglione, M. Repetto, M. Zuppelli
Publié dans: Proc. of the 6th IEEE Conference on Network Softwarization, Ghent, Belgium, 2020, July 3, 2020, 2020, Page(s) 422 - 429
Éditeur: IEEE
DOI: 10.1109/netsoft48620.2020.9165537

Detecting Covert Channels Through Code Augmentation

Auteurs: Marco Zuppelli, Luca Caviglione and Matteo Repetto
Publié dans: Proceedings of the Italian Conference on Cybersecurity (ITASEC 2021), Numéro 2940, 2021, Page(s) 133-144
Éditeur: CEUR-WS.org

A Revised Taxonomy of Steganography Embedding Patterns

Auteurs: Steffen Wendzel, Luca Caviglione, Wojciech Mazurczyk, Aleksandra Mileva, Jana Dittmann, Christian Krätzer, Kevin Lamshöft, Claus Vielhauer, Laura Hartmann, Jörg Keller, Tom Neubert
Publié dans: The 16th International Conference on Availability, Reliability and Security, 2021, Page(s) 1-12, ISBN 9781450390514
Éditeur: ACM
DOI: 10.1145/3465481.3470069

PcapStego: A Tool for Generating Traffic Traces for Experimenting with Network Covert Channels

Auteurs: Zuppelli, Marco and Caviglione, Luca
Publié dans: The 16th International Conference on Availability, Reliability and Security, 2021
Éditeur: Association for Computing Machinery
DOI: 10.1145/3465481.3470067

Sanitization of Images Containing Stegomalware via Machine Learning Approaches

Auteurs: Marco Zuppelli, Giuseppe Manco, Luca Caviglione and Massimo Guarascio
Publié dans: CEUR Workshop Proceedings, Numéro Vol. 2940, 2019, Page(s) 374-386
Éditeur: CEUR-WS

SIMARGL - Faster discovery of malware

Auteurs: Adrian Marzecki, Michał Choraś
Publié dans: CERT Orange Polska Report 2020, 2020, Page(s) 90-92
Éditeur: Orange Polska S.A.

SIMARGL – a new European project with Orange Polska participation

Auteurs: Adrian Marzecki
Publié dans: CERT Orange Polska Report 2019, 2019, Page(s) 59-60
Éditeur: Orange Polska S.A.

Modification of Pitch Parameters in Speech Coding for Information Hiding

Auteurs: Adrian Radej, Artur Janicki
Publié dans: Text, Speech, and Dialogue - 23rd International Conference, TSD 2020, Brno, Czech Republic, September 8–11, 2020, Proceedings, Numéro 12284, 2020, Page(s) 513-523, ISBN 978-3-030-58322-4
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-58323-1_55

Privacy-Leaking and Steganographic Threats in Wireless Connected Environments

Auteurs: Luca Caviglione
Publié dans: Towards a Wireless Connected World: Achievements and New Technologies, 2022, Page(s) 17-34, ISBN 978-3-031-04320-8
Éditeur: Springer, Cham
DOI: 10.1007/978-3-031-04321-5_2

Machine Learning – The Results Are Not the only Thing that Matters! What About Security, Explainability and Fairness?

Auteurs: Michał Choraś, Marek Pawlicki, Damian Puchalski, Rafał Kozik
Publié dans: Computational Science – ICCS 2020 - 20th International Conference, Amsterdam, The Netherlands, June 3–5, 2020, Proceedings, Part IV, Numéro 12140, 2020, Page(s) 615-628, ISBN 978-3-030-50422-9
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-50423-6_46

The Proposition of Balanced and Explainable Surrogate Method for Network Intrusion Detection in Streamed Real Difficult Data

Auteurs: Mateusz Szczepanski, Mikołaj Komisarek, Marek Pawlicki, Rafał Kozik, Michał Choraś
Publié dans: Advances in Computational Collective Intelligence - 13th International Conference, ICCCI 2021, Kallithea, Rhodes, Greece, September 29 – October 1, 2021, Proceedings, Numéro 1463, 2021, Page(s) 241-252, ISBN 978-3-030-88112-2
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-88113-9_19

Recherche de données OpenAIRE...

Livrables

Publications

Partager cette page

Télécharger