Practical Autonomous Cyberhealth for resilient SMEs & Microenterprises

Resultado final

Hybrid Threat Intelligence Framework- First release

D51 The integrated data analytics engine based on ML and DL for threat detection and classification first release accompanied by reports describing the implementation and usage guidelines All WP5 tasks contribute to this deliverable T53 and T52 for threat detection and classification T54 for remediation activities and T51 for traffic accumulation and preprocessing

PALANTIR Secure Services Ecosystem - First release

A set of software prototypes of the trusted virtualised security services to be used in PALANTIR First release accompanied by reports describing the implementation and usage guidelines Linked with all WP3 tasks mainly with T32 services orchestration T31 individual security services T34 service catalogue and T33 risk calculation mechanisms

Dashboard, Reporting and Threat Sharing Platform - First release

D41 A set of software prototypes of the Security Dashboard for interacting with the PALANTIR framework reporting and sharing threat intelligence information First release accompanied by reports describing the implementation and usage guidelinesPrimarily linked with T41 for the dashboard functionalities and also with T43 service matching and accounting

Integration & Validation Report: Use case results and playbook (first prototype)

D61 Report describing the integrated Prototype of the PALANTIR framework as well as the evaluationverification results on the use cases first prototypeLinked with T61 integration and testing but also with the 3 UCs T62 T63 T64

Trust, Attestation and Verification Framework -Specifications of first release

D42 The set of reports describing the implementation and usage guidelines for attesting the integrity of hardware and software modulesSpecifications of first release Linked mainly with T44 different attestation mechanisms and with T42 fault management

Integration & Validation Report: Use case results and playbook (final prototype)

D62 Report describing the integrated Prototype of the PALANTIR framework as well as the evaluationverification results on the use cases final prototype Linked with T61 integration and testing but also with the 3 UCs T62 T63 T64

Trust, Attestation and Verification Framework -Specifications of second release

D44 The set of reports describing the implementation and usage guidelines for attesting the integrity of hardware and software modules Linked mainly with T44 different attestation mechanisms and with T42 fault management

Threat analysis & AS-based risk assessment

D22 Comprehensive definition of the relevant attack classes entryexit points channels data stores etc in SDNNFV and cloudnative deploymentsLinked with T24

Risk Reduction measures

D24 Highlevel identification of measures to reduce security risks in service oriented infrastructures Linked with T24

Requirements & high-level design - Final

D23 Systemlevel requirements for the PALANTIR framework and highlevel technical design and specifications Final version Primarily linked with T21 functional requirements also with T22 business and legal requirements T23 UC requirements

Requirements & high-level design - Interim

D21 System level requirements for PALANTIR framework highlevel designs and specifications interim version Primarily linked with T21 functional requirements also with T22 business and legal requirements T23 UC requirements

Project website & social media accounts

D72 The project public website and the established projects accounts on the selected social media platforms Linked with T73 Digital presence

Publicaciones

syslrn: Learning What to Monitor for Efficient Anomaly Detection

Autores: Davide Sanvito; Giuseppe Siracusano; Sharan Santhanam; Roberto Gonzalez; Roberto Bifulco
Publicado en: ACM EuroMLSys 2022, Edición 28, 2022, ISBN 978-1-4503-9254-9
Editor: ACM EuroMLSys 2022
DOI: 10.1145/3517207.3526979

A data infrastructure for heterogeneous telemetry adaptation. Application to Netflow-based cryptojacking detection.

Autores: Alejandro A. Moreno-Sancho, Antonio Pastor, Ignacio D. Martinez-Casanueva, Daniel González-Sánchez, Luis Bellido Triana
Publicado en: International Conference on Intelligence in Next Generation Networks (ICIN), 2023, Página(s) 105-112, ISBN 979-8-3503-9804-5
Editor: IEEE
DOI: 10.1109/icin56760.2023.10073490

Prediphant: Short Term Heavy User Prediction

Autores: Davide Sanvito; Giuseppe Siracusano; Roberto Gonzalez; Roberto Bifulco
Publicado en: IEEE/IET CSNDSP 2022, Edición 26, 2022, ISBN 978-1-6654-1044-1
Editor: IEEE/IET
DOI: 10.1109/csndsp54353.2022.9907909

A Cost-Effective Security Framework to protect micro enterprises: PALANTIR e-commerce use case

Autores: Izidor Mlakar; Primož Jeran; Valentino Šafran; Vangelis Logothetis
Publicado en: Edición 1, 2021
Editor: IEEE
DOI: 10.1109/ISDFS52919.2021.9486359

Model-Driven Network Monitoring Using NetFlow Applied to Threat Detection

Autores: Daniel González-Sánchez, Ignacio D. Martinez-Casanueva, Antonio Pastor, Luis Bellido Triana, Cristina Pinar Muñoz Zamarro, Alejandro Antonio Moreno Sancho, David Fernández Cabronero, Diego Lopez
Publicado en: IEEE Netsoft (SecSoft workshop), 2022, Página(s) 450-455, ISBN 978-1-6654-0694-9
Editor: IEEE
DOI: 10.1109/netsoft54395.2022.9844107

Re-architecting Traffic Analysis with Neural Network Interface Cards

Autores: Giuseppe Siracusano; Salvator Galea; Davide Sanvito; Mohammad Malekzadeh; Gianni Antichi; Paolo Costa; Hamed Haddadi; Roberto Bifulco
Publicado en: USENIX NSDI 2022, Edición 32, 2022, ISBN 978-1-939133-27-4
Editor: USENIX
DOI: 10.5281/zenodo.6446562

Provision of Security-as-a-Service (SecaaS) in Lightweight Scenarios

Autores: Antonio López Martínez; Mattia Zago; Manuel Gil Pérez
Publicado en: VII Jornadas Nacionales en Investigación en Ciberseguridad (JNIC), Edición 12, 2022, Página(s) 327-330, ISBN 978-84-88734-13-6
Editor: Fundación Tecnalia Research and Innovation
DOI: 10.5281/zenodo.6856500

PALANTIR: Zero-Trust Architecture for Managed Security Service Provider

Autores: Maxime Compastié; Silvia Sisinni; Supreshna Gurung; Carolina Fernández; Ludovic Jacquin; Izidor Mlakar; Valentino Šafran; Antonio Lioy; Ignazio Pedone
Publicado en: Proceedings of the 29th Computer & Electronics Security Application Rendezvous (C&ESAR): Ensuring Trust in a Decentralized World, Edición 16, 2023, ISSN 1613-0073
Editor: CEUR Workshop Proceedings
DOI: 10.5281/zenodo.7545474

A cost-effective security framework to protect micro enterprises: PALANTIR e-commerce use case

Autores: Izidor Mlakar, Primož Jeran, Valentino Šafran, Vangelis Logothetis
Publicado en: ISDFS 2021, 2021, ISBN 978-1-6654-4481-1
Editor: IEEE
DOI: 10.1109/isdfs52919.2021.9486359

AISGA: Multi-Objective Parameters Optimization for Countermeasures Selection through Genetic Algorithm

Autores: Pantaleone Nespoli; Félix Gómez Mármol; Georgios kambourakis
Publicado en: Edición 3, 2021
Editor: ACM
DOI: 10.1145/3465481.3470074

Practical Autonomous Cyberhealth for resilient Micro, Small and Medium-sized Enterprises

Autores: Evangelos Mantas, Dimitris Papadopoulos, Carolina Fernandez, Nil Ortiz, Maxime Compastie, Antonio López Martínez, Manuel Gil Pérez, Akis Kourtis, George Xylouris, Izidor Mlakar, Stylianos Tsarsitalidis, Dimitrios Klonidis, Ignazio Pedone, Daniele Canavese, Gregorio Martínez Pérez, Davide Sanvito, Vangelis Logothetis, Diego Lopez, Antonio Pastor, Antonio Lioy, Ludovic Jacquin, Roberto Bifulco,
Publicado en: IEEE Meditcom, 2021, ISBN 978-1-6654-4505-4
Editor: IEEE
DOI: 10.1109/meditcom49071.2021.9647609

Using Anomaly Detection Techniques for Securing 5G Infrastructure and Applications

Autores: Athanasios Priovolos; Dimitrios Lioprasitis; Georgios Gardikis; Socrates Costicoglou
Publicado en: IEEE Meditcom, Edición 3, 2021
Editor: IEEE
DOI: 10.1109/MeditCom49071.2021.9647668

PALANTIR demo: leveraging SecaaS model for managing threats in industrial environments

Autores: Carolina Fernández, Davide Sanvito, Orestis Kompougias, Valentino Safran, Maxime Compastié, Ignazio Pedone, Antonio López Martínez, Manuel Gil Pérez, Akis Kourtis, George Xylouris, Izidor Mlakar, Stylianos Tsarsitalidis, Dimitrios Klonidis, Daniele Canavese, Vangelis Logothetis, Diego Lopez, Antonio Pastor, Antonio Lioy, Ludovic Jacquin, Supreshna Gurung, Roberto Bifulco, Athanasios Priovolos
Publicado en: IEEE Meditcom, 2022, Página(s) 82-85, ISBN 978-1-6654-9825-8
Editor: IEEE
DOI: 10.1109/meditcom55741.2022.9928648

Poster: MUSTARD - Adaptive Behavioral Analysis for Ransomware Detection

Autores: Davide Sanvito; Giuseppe Siracusano; Roberto González; Roberto Bifulco
Publicado en: ACM CCS 2022, Edición 25, 2022, Página(s) 3455–3457, ISBN 978-1-4503-9450-5
Editor: ACM
DOI: 10.1145/3548606.3563529

A Model for Automated Cybersecurity Threat Remediation and Sharing

Autores: Francesco Settanni; Leonardo Regano; Cataldo Basile; Antonio Lioy
Publicado en: 2023 IEEE 9th International Conference on Network Softwarization (NetSoft), Edición 20, 2023
Editor: IEEE
DOI: 10.1109/NetSoft57336.2023.10175486

IoT Botnet Detection on Flow Data using Autoencoders

Autores: Orestis Kompougias, Dimitris Papadopoulos, Evangelos Mantas, Antonis Litke, Nikolaos Papadakis, Dimitris Paraschos, Akis Kourtis, George Xylouris
Publicado en: IEEE Meditcom, 2021
Editor: IEEE
DOI: 10.1109/meditcom49071.2021.9647639

A Review of SSH Botnet Detection in Initial Stages of Infection: A Machine Learning-Based Approach

Autores: J.T. Martínez Garre, M. Gil Pérez, A. Ruiz Martínez
Publicado en: Jornadas Nacionales de Investigación en Ciberseguridad (JNIC), 2021, ISBN 978-84-9044-463-4
Editor: Ediciones de la Universidad de Castilla-La Mancha
DOI: 10.18239/jornadas_2021.34.02

A Novel Machine Learning-Based Approach for the Detection of SSH Botnet Infection

Autores: J.T. Martínez Garre, M. Gil Pérez, A. Ruiz Martínez
Publicado en: Future Generation Computer Systems, 2021, ISSN 0167-739X
Editor: Elsevier BV
DOI: 10.1016/j.future.2020.09.004

PALANTIR: An NFV-Based Security-as-a-Service Approach for Automating Threat Mitigation

Autores: Maxime Compastié, Antonio López Martínez, Carolina Fernández, Manuel Gil Pérez, Stylianos Tsarsitalidis, George Xylouris, Izidor Mlakar, Michail Alexandros Kourtis, and Valentino Šafran
Publicado en: "MDPI Sensors, Special Edición ""Security and Privacy in Cloud Computing Environment""", 2023, ISSN 1424-8220
Editor: Multidisciplinary Digital Publishing Institute (MDPI)
DOI: 10.3390/s23031658

A novel architecture to virtualise a hardware-bound trusted platform module

Autores: Marco De Benedictis, Ludovic Jacquin, Ignazio Pedone, Andrea Atzeni, Antonio Lioy
Publicado en: Future Generation Computer Systems, 2023, ISSN 0167-739X
Editor: Elsevier BV
DOI: 10.1016/j.future.2023.08.012

Early DGA-based botnet identification: pushing detection to the edges

Autores: Mattia Zago; Manuel Gil Pérez; Gregorio Martínez Pérez
Publicado en: Future Generation Computer Systems, Edición 1, 2021, ISSN 1386-7857
Editor: Baltzer Science Publishers B.V.
DOI: 10.1007/s10586-020-03213-z

Data set and machine learning models for the classification of network traffic originators

Autores: Canavese, Daniele; Regano, Leonardo; Basile, Cataldo; Ciravegna, Gabriele; Lioy, Antonio
Publicado en: Computers & Electrical Engineering, Edición 25, 2022, ISSN 2352-3409
Editor: Elsevier BV
DOI: 10.1016/j.dib.2022.107968

Early DGA-Based Botnet Identification: Pushing Detection to the Edges

Autores: M. Zago, M. Gil Pérez, G. Martínez Pérez
Publicado en: Cluster Computing, 2021, ISSN 1386-7857
Editor: Baltzer Science Publishers B.V.
DOI: 10.1007/s10586-020-03213-z

Adaptive Vulnerability-Based Risk Identification Software with Virtualization Functions for Dynamic Management

Autores: A. García Pérez, A. López Martínez, M. Gil Pérez
Publicado en: Journal of Network and Computer Applications, 2023, ISSN 1084-8045
Editor: Academic Press
DOI: 10.1016/j.jnca.2023.103728

A novel Machine Learning-based approach for the detection of SSH botnet infection

Autores: José Tomás Martínez Garre; Manuel Gil Pérez; Antonio Ruiz-Martínez
Publicado en: Future Generation Computer Systems, Edición 3, 2021, ISSN 0167-739X
Editor: Elsevier BV
DOI: 10.1016/j.future.2020.09.004

A comprehensive review of the state of the art on security and privacy issues in Healthcare

Autores: Antonio López Martínez, Manuel Gil Pérez, Antonio Ruiz Martínez
Publicado en: ACM Computer Surveys, 2022, ISSN 0360-0300
Editor: Association for Computing Machinary, Inc.
DOI: 10.1145/3571156

A Bio-Inspired Reaction Against Cyberattacks: AIS-Powered Optimal Countermeasures Selection

Autores: P. Nespoli, F. Gómez Mármol, J. Maestre Vidal
Publicado en: IEEE Access, 2021, ISSN 2169-3536
Editor: Institute of Electrical and Electronics Engineers Inc.
DOI: 10.1109/access.2021.3074021

Encryption-agnostic classifiers of traffic originators and their application to anomaly detection

Autores: Canavese, Daniele; Regano, Leonardo; Basile, Cataldo; Ciravegna, Gabriele; Lioy, Antonio
Publicado en: Data in Brief, Edición 30, 2022, ISSN 0045-7906
Editor: Pergamon Press Ltd.
DOI: 10.1016/j.compeleceng.2021.107621

Resultado final

Publicaciones

Compartir esta página

Descargar