Towards a Reliable and Automated Analysis of Compromised Systems

Project Information

BITCRUMBS

Grant agreement ID: 771844

DOI 10.3030/771844

Project closed

EC signature date 19 March 2018

Start date 1 April 2018

End date 31 August 2023

Funded under

• EXCELLENT SCIENCE - European Research Council (ERC)

Total cost € 1 991 504,00

EU contribution € 1 991 504,00

Coordinated by

EURECOM GIE
France

Deliverables

Open Research Data Pilot (1)

Data Management Plan

The document presents a plan for the management and sharing of the datasets collected and used during the project.

Publications

Peer reviewed articles (7)

In the Land of MMUs: Multiarchitecture OS-Agnostic Virtual Memory Forensics

Author(s): Andrea Oliveri, Davide Balzarotti
Published in: ACM Transactions on Privacy and Security, Issue Volume 25Issue 4, 2022, ISSN 2471-2574
Publisher: ACM

AUTOPROFILE: TOWARDS AUTOMATED PROFILE GENERATION FOR MEMORY ANALYSIS

Author(s): Fabio Pagani, Davide Balzarotti
Published in: ACM Transactions on Privacy and Security (TOPS), Issue Volume 25 Issue 1, 2022, ISSN 2471-2566
Publisher: ACM
DOI: 10.1145/3485471

A Comparison of Systemic and Systematic Risks of Malware Encounters in Consumer and Enterprise Environments

Author(s): Savino Dambra, Leyla Bilge, Davide Balzarotti
Published in: ACM Transactions on Privacy and Security, 2022, ISSN 2471-2566
Publisher: ACM

The evidence beyond the wall: Memory forensics in SGX environments

Author(s): Flavio Toffalini, Andrea Oliveri, Mariano Graziano, Jianying Zhou, Davide Balzarotti
Published in: Elsevier Forensic Science International: Digital Investigation, 2021, ISSN 2666-2817
Publisher: Elsevier

Pre-processing Memory Dumps to Improve Similarity Score of Windows Modules

Author(s): Miguel Martín-Pérez, Ricardo J.Rodríguez, Davide Balzarotti
Published in: Elsevier Computers & Security, 2021, ISSN 0167-4048
Publisher: Pergamon Press Ltd.
DOI: 10.1016/j.cose.2020.102119

Introducing the Temporal Dimension to Memory Forensics

Author(s): Fabio Pagani, Oleksii Fedorov, Davide Balzarotti
Published in: ACM Transactions on Privacy and Security, Issue 22/2, 2019, Page(s) 1-21, ISSN 2471-2566
Publisher: ACM
DOI: 10.1145/3310355

A Close Look at a Daily Dataset of Malware Samples

Author(s): Xabier Ugarte-Pedrero, Mariano Graziano, Davide Balzarotti
Published in: ACM Transactions on Privacy and Security, Issue 22/1, 2019, Page(s) 1-30, ISSN 2471-2566
Publisher: ACM
DOI: 10.1145/3291061

Conference proceedings (14)

The Tangled Genealogy of IoT Malware

Author(s): Emanuele Cozzi, Pierre-antoine Vervier, Matteo dell'Amico, Leyla Bilge, Davide Balzarotti
Published in: Proceedings of the Annual Computer Security Applications Conference (ACSAC), Issue 2020, 2020
Publisher: ACM

An OS-agnostic Approach to Memory Forensics

Author(s): Andrea Oliveri, Matteo Dell'Amico, Davide Balzarotti
Published in: Network and Distributed System Security (NDSS) Symposium, Issue 2023, 2023, ISBN 1-891562-83-5
Publisher: ISOC
DOI: 10.14722/ndss.2023.23398

Decoding the Secrets of Machine Learning in Malware Classification: A Deep Dive into Datasets, Feature Extraction, and Model Performance

Author(s): Savino Dambra, Yufei Han, Simone Aonzo, Platon Kotzias, Antonino Vitale, Juan Caballero, Davide Balzarotti, Leyla Bilge
Published in: ACM conference on Computer and communications security (CCS), Issue 11/2023, 2023
Publisher: ACM

How Machine Learning Is Solving the Binary Function Similarity Problem

Author(s): Andrea Marcelli, Mariano Graziano, Xabier Ugarte-Pedrero, Yanick Fratantonio, Mohamad Mansouri, Davide Balzarotti
Published in: USENIX Security Symposium, 2022
Publisher: Usenix

When Malware Changed Its Mind: An Empirical Study of Variable Program Behaviors in the Real World

Author(s): Erin Avllazagaj, Ziyun Zhu, Leyla Bilge, Davide Balzarotti, Tudor Dumitras
Published in: USENIX Security Symposium, Issue 30th, 2021
Publisher: Usenix

RE-Mind: a First Look Inside the Mind of a Reverse Engineer

Author(s): Alessandro Mantovani, Simone Aonzo, Yanick Fratantonio, Davide Balzarotti
Published in: USENIX Security Symposium, 2022
Publisher: Usenix

Lost in the Loader: The Many Faces of the Windows PE File Format

Author(s): Dario Nisi, Mariano Graziano, Yanick Fratantonio, Davide Balzarotti
Published in: 24th International Symposium on Research in Attacks, Intrusions and Defenses, 2021
Publisher: ACM
DOI: 10.1145/3471621.3471848

SoK: Cyber Insurance – Technical Challenges and a System Security Roadmap

Author(s): Savino Dambra, Leyla Bilge, Davide Balzarotti
Published in: 2020 IEEE Symposium on Security and Privacy (SP), Issue 2020, 2020, Page(s) 1367-1383, ISBN 978-1-7281-3497-0
Publisher: IEEE
DOI: 10.1109/sp40000.2020.00019

When Malware is Packin' Heat; Limits of Machine Learning Classifiers Based on Static Analysis Features

Author(s): Hojjat Aghakhani, Fabio Gritti, Francesco Mecca, Martina Lindorfer, Stefano Ortolani, Davide Balzarotti, Giovanni Vigna, Christopher Kruegel
Published in: Proceedings 2020 Network and Distributed System Security Symposium, 2020, ISBN 1-891562-61-4
Publisher: Internet Society
DOI: 10.14722/ndss.2020.24310

Does Every Second Count? Time-based Evolution of Malware Behavior in Sandboxes

Author(s): Alexander Küchler, Alessandro Mantovani, Yufei Han, Leyla Bilge, Davide Balzarotti
Published in: Network and Distributed System Security (NDSS) Symposium, 2021
Publisher: Internet Society

Prevalence and Impact of Low-Entropy Packing Schemes in the Malware Ecosystem

Author(s): Alessandro Mantovani, Simone Aonzo, Xabier Ugarte-Pedrero, Alessio Merlo, Davide Balzarotti
Published in: Proceedings 2020 Network and Distributed System Security Symposium, 2020, ISBN 1-891562-61-4
Publisher: Internet Society
DOI: 10.14722/ndss.2020.24297

Back to the Whiteboard: a Principled Approach for the Assessment and Design of Memory Forensic Techniques

Author(s): Fabio Pagani, Davide Balzarotti
Published in: Proceedings of the 28th USENIX Conference on Security Symposium, Issue 2019, 2019, Page(s) 1751-1768, ISBN 978-1-939133-06-9
Publisher: USENIX Association Berkeley

Trust, But Verify: A Longitudinal Analysis Of Android OEM Compliance and Customization

Author(s): Andrea Possemato, Simone Aonzo, Davide Balzarotti, Yanick Fratantonio
Published in: IEEE Symposium on Security and Privacy, Issue 2022, 2022
Publisher: IEEE
DOI: 10.1109/sp40001.2021.00074

Humans vs. Machines in Malware Classification

Author(s): Simone Aonzo, Yufei Han,Alessandro Mantovani, Davide Balzarotti
Published in: Usenix Security Symposium, Issue 2023, 2023, ISBN 978-1-939133-37-3
Publisher: Usenix