var bibbase_data = {"data":"<img src=\"//bibbase.org/img/ajax-loader.gif\" id=\"spinner\"\n  style=\"display: none;\" alt=\"Loading..\" />\n\n<div id=\"bibbase\">\n\n  <script type=\"text/javascript\">\n    var bibbase = {\n      params: {\"bib\":\"https://bibbase.org/zotero-group/hweffers/4530785\",\"jsonp\":\"1\",\"host\":\"bibbase.org\",\"ssl\":false},\n      data: [{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"Cyber Resilience for the Internet of Things: Implementations with Resilience Engines and Attack Classifications\",\"issn\":\"2168-6750, 2376-4562\",\"shorttitle\":\"Cyber Resilience for the Internet of Things\",\"url\":\"https://ieeexplore.ieee.org/document/10003259/\",\"doi\":\"10.1109/TETC.2022.3231692\",\"abstract\":\"Recently, the number of publicized attacks on IoT devices has noticeably grown. This is in part due to the increasing deployment of embedded systems into various domains, including critical infrastructure, which makes them a valuable asset and a compromise can cause significant damages. In this case, it is often required to send an engineer to manually recover the devices, as the attack leaves them out of reach of standard remote management solutions. To avoid this costly process, the concept of cyber resilience has gained traction in recent years in both academia and industry. Its core idea is to enable compromised devices to recover themselves to a trusted state without human intervention. Initial guidelines and architectures to realize cyber resilience have been published by standardization entities like NIST and TCG, and in multiple academic papers. While the initial works focused on guaranteed recovery, recent proposals included attack detection to speed up the recovery process. In this work, we build on top of these ideas and present an extended resilience architecture. We present new implementations of resilience engines with a focus on secure and reliable data acquisition for attack detection and classification. Our attack classification engine enables tailored, more efficient recovery responses.\",\"urldate\":\"2024-02-03\",\"journal\":\"IEEE Transactions on Emerging Topics in Computing\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Alvarenga\"],\"firstnames\":[\"Eduardo\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Brands\"],\"firstnames\":[\"Jan\",\"R.\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Doliwa\"],\"firstnames\":[\"Peter\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Den\",\"Hartog\"],\"firstnames\":[\"Jerry\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Kraft\"],\"firstnames\":[\"Erik\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Medwed\"],\"firstnames\":[\"Marcel\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Nikov\"],\"firstnames\":[\"Ventzislav\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Renes\"],\"firstnames\":[\"Joost\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Rosso\"],\"firstnames\":[\"Martin\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Schneider\"],\"firstnames\":[\"Tobias\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Veshchikov\"],\"firstnames\":[\"Nikita\"],\"suffixes\":[]}],\"year\":\"2022\",\"pages\":\"1–16\",\"bibtex\":\"@article{alvarenga_cyber_2022,\\n\\ttitle = {Cyber {Resilience} for the {Internet} of {Things}: {Implementations} with {Resilience} {Engines} and {Attack} {Classifications}},\\n\\tissn = {2168-6750, 2376-4562},\\n\\tshorttitle = {Cyber {Resilience} for the {Internet} of {Things}},\\n\\turl = {https://ieeexplore.ieee.org/document/10003259/},\\n\\tdoi = {10.1109/TETC.2022.3231692},\\n\\tabstract = {Recently, the number of publicized attacks on IoT devices has noticeably grown. This is in part due to the increasing deployment of embedded systems into various domains, including critical infrastructure, which makes them a valuable asset and a compromise can cause significant damages. In this case, it is often required to send an engineer to manually recover the devices, as the attack leaves them out of reach of standard remote management solutions. To avoid this costly process, the concept of cyber resilience has gained traction in recent years in both academia and industry. Its core idea is to enable compromised devices to recover themselves to a trusted state without human intervention. Initial guidelines and architectures to realize cyber resilience have been published by standardization entities like NIST and TCG, and in multiple academic papers. While the initial works focused on guaranteed recovery, recent proposals included attack detection to speed up the recovery process. In this work, we build on top of these ideas and present an extended resilience architecture. We present new implementations of resilience engines with a focus on secure and reliable data acquisition for attack detection and classification. Our attack classification engine enables tailored, more efficient recovery responses.},\\n\\turldate = {2024-02-03},\\n\\tjournal = {IEEE Transactions on Emerging Topics in Computing},\\n\\tauthor = {Alvarenga, Eduardo and Brands, Jan R. and Doliwa, Peter and Den Hartog, Jerry and Kraft, Erik and Medwed, Marcel and Nikov, Ventzislav and Renes, Joost and Rosso, Martin and Schneider, Tobias and Veshchikov, Nikita},\\n\\tyear = {2022},\\n\\tpages = {1--16},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Alvarenga, E.\",\"Brands, J. R.\",\"Doliwa, P.\",\"Den Hartog, J.\",\"Kraft, E.\",\"Medwed, M.\",\"Nikov, V.\",\"Renes, J.\",\"Rosso, M.\",\"Schneider, T.\",\"Veshchikov, N.\"],\"key\":\"alvarenga_cyber_2022\",\"id\":\"alvarenga_cyber_2022\",\"bibbaseid\":\"alvarenga-brands-doliwa-denhartog-kraft-medwed-nikov-renes-etal-cyberresiliencefortheinternetofthingsimplementationswithresilienceenginesandattackclassifications-2022\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://ieeexplore.ieee.org/document/10003259/\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"incollection\",\"type\":\"incollection\",\"address\":\"Cham\",\"title\":\"An IoT Attack Detection Framework Leveraging Graph Neural Networks\",\"volume\":\"188\",\"isbn\":\"978-3-031-46748-6 978-3-031-46749-3\",\"url\":\"https://link.springer.com/10.1007/978-3-031-46749-3_22\",\"language\":\"en\",\"urldate\":\"2024-02-02\",\"booktitle\":\"Intelligence of Things: Technologies and Applications\",\"publisher\":\"Springer Nature Switzerland\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Bibi\"],\"firstnames\":[\"Iram\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Ozcelebi\"],\"firstnames\":[\"Tanir\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Meratnia\"],\"firstnames\":[\"Nirvana\"],\"suffixes\":[]}],\"editor\":[{\"propositions\":[],\"lastnames\":[\"Dao\"],\"firstnames\":[\"Nhu-Ngoc\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Thinh\"],\"firstnames\":[\"Tran\",\"Ngoc\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Nguyen\"],\"firstnames\":[\"Ngoc\",\"Thanh\"],\"suffixes\":[]}],\"year\":\"2023\",\"doi\":\"10.1007/978-3-031-46749-3_22\",\"note\":\"Series Title: Lecture Notes on Data Engineering and Communications Technologies\",\"pages\":\"225–236\",\"bibtex\":\"@incollection{dao_iot_2023,\\n\\taddress = {Cham},\\n\\ttitle = {An {IoT} {Attack} {Detection} {Framework} {Leveraging} {Graph} {Neural} {Networks}},\\n\\tvolume = {188},\\n\\tisbn = {978-3-031-46748-6 978-3-031-46749-3},\\n\\turl = {https://link.springer.com/10.1007/978-3-031-46749-3_22},\\n\\tlanguage = {en},\\n\\turldate = {2024-02-02},\\n\\tbooktitle = {Intelligence of {Things}: {Technologies} and {Applications}},\\n\\tpublisher = {Springer Nature Switzerland},\\n\\tauthor = {Bibi, Iram and Ozcelebi, Tanir and Meratnia, Nirvana},\\n\\teditor = {Dao, Nhu-Ngoc and Thinh, Tran Ngoc and Nguyen, Ngoc Thanh},\\n\\tyear = {2023},\\n\\tdoi = {10.1007/978-3-031-46749-3_22},\\n\\tnote = {Series Title: Lecture Notes on Data Engineering and Communications Technologies},\\n\\tpages = {225--236},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Bibi, I.\",\"Ozcelebi, T.\",\"Meratnia, N.\"],\"editor_short\":[\"Dao, N.\",\"Thinh, T. N.\",\"Nguyen, N. T.\"],\"key\":\"dao_iot_2023\",\"id\":\"dao_iot_2023\",\"bibbaseid\":\"bibi-ozcelebi-meratnia-aniotattackdetectionframeworkleveraginggraphneuralnetworks-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://link.springer.com/10.1007/978-3-031-46749-3_22\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"address\":\"Hong Kong China\",\"title\":\"Shimware: Toward Practical Security Retrofitting for Monolithic Firmware Images\",\"isbn\":\"9798400707650\",\"shorttitle\":\"Shimware\",\"url\":\"https://dl.acm.org/doi/10.1145/3607199.3607217\",\"doi\":\"10.1145/3607199.3607217\",\"language\":\"en\",\"urldate\":\"2024-02-02\",\"booktitle\":\"Proceedings of the 26th International Symposium on Research in Attacks, Intrusions and Defenses\",\"publisher\":\"ACM\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Gustafson\"],\"firstnames\":[\"Eric\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Grosen\"],\"firstnames\":[\"Paul\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Redini\"],\"firstnames\":[\"Nilo\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Jha\"],\"firstnames\":[\"Saagar\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Continella\"],\"firstnames\":[\"Andrea\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Wang\"],\"firstnames\":[\"Ruoyu\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Fu\"],\"firstnames\":[\"Kevin\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Rampazzi\"],\"firstnames\":[\"Sara\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Kruegel\"],\"firstnames\":[\"Christopher\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Vigna\"],\"firstnames\":[\"Giovanni\"],\"suffixes\":[]}],\"month\":\"October\",\"year\":\"2023\",\"pages\":\"32–45\",\"bibtex\":\"@inproceedings{gustafson_shimware_2023,\\n\\taddress = {Hong Kong China},\\n\\ttitle = {Shimware: {Toward} {Practical} {Security} {Retrofitting} for {Monolithic} {Firmware} {Images}},\\n\\tisbn = {9798400707650},\\n\\tshorttitle = {Shimware},\\n\\turl = {https://dl.acm.org/doi/10.1145/3607199.3607217},\\n\\tdoi = {10.1145/3607199.3607217},\\n\\tlanguage = {en},\\n\\turldate = {2024-02-02},\\n\\tbooktitle = {Proceedings of the 26th {International} {Symposium} on {Research} in {Attacks}, {Intrusions} and {Defenses}},\\n\\tpublisher = {ACM},\\n\\tauthor = {Gustafson, Eric and Grosen, Paul and Redini, Nilo and Jha, Saagar and Continella, Andrea and Wang, Ruoyu and Fu, Kevin and Rampazzi, Sara and Kruegel, Christopher and Vigna, Giovanni},\\n\\tmonth = oct,\\n\\tyear = {2023},\\n\\tpages = {32--45},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Gustafson, E.\",\"Grosen, P.\",\"Redini, N.\",\"Jha, S.\",\"Continella, A.\",\"Wang, R.\",\"Fu, K.\",\"Rampazzi, S.\",\"Kruegel, C.\",\"Vigna, G.\"],\"key\":\"gustafson_shimware_2023\",\"id\":\"gustafson_shimware_2023\",\"bibbaseid\":\"gustafson-grosen-redini-jha-continella-wang-fu-rampazzi-etal-shimwaretowardpracticalsecurityretrofittingformonolithicfirmwareimages-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://dl.acm.org/doi/10.1145/3607199.3607217\"},\"metadata\":{\"authorlinks\":{}},\"downloads\":1,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"HoneyKube: Designing and Deploying a Microservices-based Web Honeypot\",\"url\":\"https://ris.utwente.nl/ws/portalfiles/portal/303815192/main.pdf\",\"booktitle\":\"Proceedings of the SecWeb Workshop (SecWeb)\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Gupta\"],\"firstnames\":[\"Chakshu\"],\"suffixes\":[]},{\"propositions\":[\"van\"],\"lastnames\":[\"Ede\"],\"firstnames\":[\"Thijs\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Continella\"],\"firstnames\":[\"Andrea\"],\"suffixes\":[]}],\"year\":\"2023\",\"bibtex\":\"@inproceedings{gupta_honeykube_2023,\\n\\ttitle = {{HoneyKube}: {Designing} and {Deploying} a {Microservices}-based {Web} {Honeypot}},\\n\\turl = {https://ris.utwente.nl/ws/portalfiles/portal/303815192/main.pdf},\\n\\tbooktitle = {Proceedings of the {SecWeb} {Workshop} ({SecWeb})},\\n\\tauthor = {Gupta, Chakshu and van Ede, Thijs and Continella, Andrea},\\n\\tyear = {2023},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Gupta, C.\",\"van Ede, T.\",\"Continella, A.\"],\"key\":\"gupta_honeykube_2023\",\"id\":\"gupta_honeykube_2023\",\"bibbaseid\":\"gupta-vanede-continella-honeykubedesigninganddeployingamicroservicesbasedwebhoneypot-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://ris.utwente.nl/ws/portalfiles/portal/303815192/main.pdf\"},\"metadata\":{\"authorlinks\":{}},\"downloads\":1,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"PRM - Private Interference Discovery for IEEE 802.15. 4 Networks\",\"url\":\"https://doi.org/10.1109/CNS56114.2022.9947236\",\"doi\":\"10.1109/CNS56114.2022.9947236\",\"abstract\":\"Due to the mobile and pervasive nature of IoT networks, even more frequently, multiple IoT networks managed by different network administrators share the same spectrum and operate in the same area, leading to packet losses and degradation of the Quality of Service (QoS). Assuming the use of the widespread IEEE 802.15.4 communication technology, the most straightforward solution would be to allow the networks to share the local Radio Scheduling Table (RST) to optimize channel access. However, exchanging the RST can leak several key information, such as the topology of the network, the number of devices, and the channel access patterns. To address such problems, we present PRM, the first scheme for discovering in advance potential interferences among IEEE 802.15.4 networks, without exposing the whole RST to untrusted parties. Our solution adapts a protocol for Private Set Intersection, while combining it with an innovative iterative set division algorithm, making the whole solution feasible on constrained devices of the IoT domain. Our experimental performance assessment, carried out on heterogeneous devices, shows that PRM can discover colliding channel assignments in less than 1 sec. on more capable embedded devices (e.g., the Raspberry PI), while also being feasible for more constrained platforms (e.g., the ESPCopter), depending on the amount of used radio resources.\",\"booktitle\":\"2022 IEEE Conference on Communications and Network Security (CNS)\",\"author\":[{\"propositions\":[],\"lastnames\":[\"George\"],\"firstnames\":[\"Dominik\",\"Roy\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Sciancalepore\"],\"firstnames\":[\"Savio\"],\"suffixes\":[]}],\"year\":\"2022\",\"keywords\":\"IEEE 802.15 Standard, Interference, IoT Security, Network topology, Packet loss, Performance evaluation, Privacy-Enhancing Technologies, Private Set Intersection, Protocols, Quality of service\",\"pages\":\"136–144\",\"bibtex\":\"@inproceedings{george_prm_2022,\\n\\ttitle = {{PRM} - {Private} {Interference} {Discovery} for {IEEE} 802.15. 4 {Networks}},\\n\\turl = {https://doi.org/10.1109/CNS56114.2022.9947236},\\n\\tdoi = {10.1109/CNS56114.2022.9947236},\\n\\tabstract = {Due to the mobile and pervasive nature of IoT networks, even more frequently, multiple IoT networks managed by different network administrators share the same spectrum and operate in the same area, leading to packet losses and degradation of the Quality of Service (QoS). Assuming the use of the widespread IEEE 802.15.4 communication technology, the most straightforward solution would be to allow the networks to share the local Radio Scheduling Table (RST) to optimize channel access. However, exchanging the RST can leak several key information, such as the topology of the network, the number of devices, and the channel access patterns. To address such problems, we present PRM, the first scheme for discovering in advance potential interferences among IEEE 802.15.4 networks, without exposing the whole RST to untrusted parties. Our solution adapts a protocol for Private Set Intersection, while combining it with an innovative iterative set division algorithm, making the whole solution feasible on constrained devices of the IoT domain. Our experimental performance assessment, carried out on heterogeneous devices, shows that PRM can discover colliding channel assignments in less than 1 sec. on more capable embedded devices (e.g., the Raspberry PI), while also being feasible for more constrained platforms (e.g., the ESPCopter), depending on the amount of used radio resources.},\\n\\tbooktitle = {2022 {IEEE} {Conference} on {Communications} and {Network} {Security} ({CNS})},\\n\\tauthor = {George, Dominik Roy and Sciancalepore, Savio},\\n\\tyear = {2022},\\n\\tkeywords = {IEEE 802.15 Standard, Interference, IoT Security, Network topology, Packet loss, Performance evaluation, Privacy-Enhancing Technologies, Private Set Intersection, Protocols, Quality of service},\\n\\tpages = {136--144},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"George, D. R.\",\"Sciancalepore, S.\"],\"key\":\"george_prm_2022\",\"id\":\"george_prm_2022\",\"bibbaseid\":\"george-sciancalepore-prmprivateinterferencediscoveryforieee802154networks-2022\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://doi.org/10.1109/CNS56114.2022.9947236\"},\"keyword\":[\"IEEE 802.15 Standard\",\"Interference\",\"IoT Security\",\"Network topology\",\"Packet loss\",\"Performance evaluation\",\"Privacy-Enhancing Technologies\",\"Private Set Intersection\",\"Protocols\",\"Quality of service\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"AoT - Attack on Things: A security analysis of IoT firmware updates\",\"url\":\"https://research.utwente.nl/files/303815289/main.pdf\",\"abstract\":\"IoT devices implement firmware update mechanisms to fix security issues and deploy new features. These mechanisms are often triggered and mediated by mobile companion apps running on the users’ smartphones. While it is crucial to update devices, these mechanisms may cause critical security flaws if they are not implemented correctly. Given their relevance, in this paper, we perform a systematic security analysis of the firmware update mechanisms adopted by IoT devices via their companion apps. First, we define a threat model for IoT firmware updates, and we categorize the different potential security issues affecting them. Then, we analyze 23 popular IoT devices (and corresponding companion apps) to identify vulnerable devices and the SDKs that such devices use to implement the update functionality. Our analysis reveals that 6 popular SDKs present dangerous security flaws. Additionally, we fingerprint each vulnerable SDK and we leverage our fingerprints to perform a largescale analysis of companion apps from the Google Play Store. Our results show that 61 popular devices and 1,356 apps rely on vulnerable SDKs, thus, they potentially adopt an insecure firmware update mechanism.\",\"language\":\"en\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Ibrahim\"],\"firstnames\":[\"Muhammad\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Continella\"],\"firstnames\":[\"Andrea\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Bianchi\"],\"firstnames\":[\"Antonio\"],\"suffixes\":[]}],\"year\":\"2023\",\"bibtex\":\"@inproceedings{ibrahim_aot_2023,\\n\\ttitle = {{AoT} - {Attack} on {Things}: {A} security analysis of {IoT} firmware updates},\\n\\turl = {https://research.utwente.nl/files/303815289/main.pdf},\\n\\tabstract = {IoT devices implement firmware update mechanisms to fix security issues and deploy new features. These mechanisms are often triggered and mediated by mobile companion apps running on the users’ smartphones. While it is crucial to update devices, these mechanisms may cause critical security flaws if they are not implemented correctly. Given their relevance, in this paper, we perform a systematic security analysis of the firmware update mechanisms adopted by IoT devices via their companion apps. First, we define a threat model for IoT firmware updates, and we categorize the different potential security issues affecting them. Then, we analyze 23 popular IoT devices (and corresponding companion apps) to identify vulnerable devices and the SDKs that such devices use to implement the update functionality. Our analysis reveals that 6 popular SDKs present dangerous security flaws. Additionally, we fingerprint each vulnerable SDK and we leverage our fingerprints to perform a largescale analysis of companion apps from the Google Play Store. Our results show that 61 popular devices and 1,356 apps rely on vulnerable SDKs, thus, they potentially adopt an insecure firmware update mechanism.},\\n\\tlanguage = {en},\\n\\tauthor = {Ibrahim, Muhammad and Continella, Andrea and Bianchi, Antonio},\\n\\tyear = {2023},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Ibrahim, M.\",\"Continella, A.\",\"Bianchi, A.\"],\"key\":\"ibrahim_aot_2023\",\"id\":\"ibrahim_aot_2023\",\"bibbaseid\":\"ibrahim-continella-bianchi-aotattackonthingsasecurityanalysisofiotrmwareupdates-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://research.utwente.nl/files/303815289/main.pdf\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"address\":\"Trento Italy\",\"title\":\"Privacy-Preserving Multi-Party Access Control for Third-Party UAV Services\",\"isbn\":\"9798400701733\",\"url\":\"https://dl.acm.org/doi/10.1145/3589608.3593837\",\"doi\":\"10.1145/3589608.3593837\",\"language\":\"en\",\"urldate\":\"2023-05-31\",\"booktitle\":\"Proceedings of the 28th ACM Symposium on Access Control Models and Technologies\",\"publisher\":\"ACM\",\"author\":[{\"propositions\":[],\"lastnames\":[\"George\"],\"firstnames\":[\"Dominik\",\"Roy\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Sciancalepore\"],\"firstnames\":[\"Savio\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Zannone\"],\"firstnames\":[\"Nicola\"],\"suffixes\":[]}],\"month\":\"May\",\"year\":\"2023\",\"pages\":\"19–30\",\"bibtex\":\"@inproceedings{george_privacy-preserving_2023,\\n\\taddress = {Trento Italy},\\n\\ttitle = {Privacy-{Preserving} {Multi}-{Party} {Access} {Control} for {Third}-{Party} {UAV} {Services}},\\n\\tisbn = {9798400701733},\\n\\turl = {https://dl.acm.org/doi/10.1145/3589608.3593837},\\n\\tdoi = {10.1145/3589608.3593837},\\n\\tlanguage = {en},\\n\\turldate = {2023-05-31},\\n\\tbooktitle = {Proceedings of the 28th {ACM} {Symposium} on {Access} {Control} {Models} and {Technologies}},\\n\\tpublisher = {ACM},\\n\\tauthor = {George, Dominik Roy and Sciancalepore, Savio and Zannone, Nicola},\\n\\tmonth = may,\\n\\tyear = {2023},\\n\\tpages = {19--30},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"George, D. R.\",\"Sciancalepore, S.\",\"Zannone, N.\"],\"key\":\"george_privacy-preserving_2023\",\"id\":\"george_privacy-preserving_2023\",\"bibbaseid\":\"george-sciancalepore-zannone-privacypreservingmultipartyaccesscontrolforthirdpartyuavservices-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://dl.acm.org/doi/10.1145/3589608.3593837\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Privacy-Preserving Trajectory Matching on Autonomous Unmanned Aerial Vehicles\",\"doi\":\"https://doi.org/10.1145/3564625.3564626\",\"booktitle\":\"Proceedings of the 38th Annual Computer Security Applications Conference\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Sciancalepore\"],\"firstnames\":[\"Savio\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"George\"],\"firstnames\":[\"Dominik\",\"Roy\"],\"suffixes\":[]}],\"year\":\"2022\",\"bibtex\":\"@inproceedings{sciancalepore_privacy-preserving_2022,\\n\\ttitle = {Privacy-{Preserving} {Trajectory} {Matching} on {Autonomous} {Unmanned} {Aerial} {Vehicles}},\\n\\tdoi = {https://doi.org/10.1145/3564625.3564626},\\n\\tbooktitle = {Proceedings of the 38th {Annual} {Computer} {Security} {Applications} {Conference}},\\n\\tauthor = {Sciancalepore, Savio and George, Dominik Roy},\\n\\tyear = {2022},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Sciancalepore, S.\",\"George, D. R.\"],\"key\":\"sciancalepore_privacy-preserving_2022\",\"id\":\"sciancalepore_privacy-preserving_2022\",\"bibbaseid\":\"sciancalepore-george-privacypreservingtrajectorymatchingonautonomousunmannedaerialvehicles-2022\",\"role\":\"author\",\"urls\":{},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Stepping out of the MUD: Contextual threat information for IoT devices with manufacturer-provided behaviour profiles\",\"url\":\"https://vm-thijs.ewi.utwente.nl/static/homepage/papers/mudscope.pdf\",\"publisher\":\"Association for Computing Machinery\",\"author\":[{\"firstnames\":[],\"propositions\":[],\"lastnames\":[\"Luca Morgese Zangrandi\"],\"suffixes\":[]},{\"firstnames\":[],\"propositions\":[],\"lastnames\":[\"Thijs van Ede\"],\"suffixes\":[]},{\"firstnames\":[],\"propositions\":[],\"lastnames\":[\"Tim Booij\"],\"suffixes\":[]},{\"firstnames\":[],\"propositions\":[],\"lastnames\":[\"Savio Sciancalepore\"],\"suffixes\":[]},{\"firstnames\":[],\"propositions\":[],\"lastnames\":[\"Luca Allodi\"],\"suffixes\":[]},{\"firstnames\":[],\"propositions\":[],\"lastnames\":[\"Andrea Continella\"],\"suffixes\":[]}],\"year\":\"2022\",\"bibtex\":\"@inproceedings{luca_morgese_zangrandi_stepping_2022,\\n\\ttitle = {Stepping out of the {MUD}: {Contextual} threat information for {IoT} devices with manufacturer-provided behaviour profiles},\\n\\turl = {https://vm-thijs.ewi.utwente.nl/static/homepage/papers/mudscope.pdf},\\n\\tpublisher = {Association for Computing Machinery},\\n\\tauthor = {{Luca Morgese Zangrandi} and {Thijs van Ede} and {Tim Booij} and {Savio Sciancalepore} and {Luca Allodi} and {Andrea Continella}},\\n\\tyear = {2022},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Luca Morgese Zangrandi\",\"Thijs van Ede\",\"Tim Booij\",\"Savio Sciancalepore\",\"Luca Allodi\",\"Andrea Continella\"],\"key\":\"luca_morgese_zangrandi_stepping_2022\",\"id\":\"luca_morgese_zangrandi_stepping_2022\",\"bibbaseid\":\"lucamorgesezangrandi-thijsvanede-timbooij-saviosciancalepore-lucaallodi-andreacontinella-steppingoutofthemudcontextualthreatinformationforiotdeviceswithmanufacturerprovidedbehaviourprofiles-2022\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://vm-thijs.ewi.utwente.nl/static/homepage/papers/mudscope.pdf\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"On proportionality in the data protection jurisprudence of the CJEU\",\"issn\":\"2044-3994\",\"url\":\"https://doi.org/10.1093/idpl/ipac014\",\"doi\":\"10.1093/idpl/ipac014\",\"urldate\":\"2022-07-27\",\"journal\":\"International Data Privacy Law\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Dalla\",\"Corte\"],\"firstnames\":[\"Lorenzo\"],\"suffixes\":[]}],\"month\":\"July\",\"year\":\"2022\",\"pages\":\"ipac014\",\"bibtex\":\"@article{dalla_corte_proportionality_2022,\\n\\ttitle = {On proportionality in the data protection jurisprudence of the {CJEU}},\\n\\tissn = {2044-3994},\\n\\turl = {https://doi.org/10.1093/idpl/ipac014},\\n\\tdoi = {10.1093/idpl/ipac014},\\n\\turldate = {2022-07-27},\\n\\tjournal = {International Data Privacy Law},\\n\\tauthor = {Dalla Corte, Lorenzo},\\n\\tmonth = jul,\\n\\tyear = {2022},\\n\\tpages = {ipac014},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Dalla Corte, L.\"],\"key\":\"dalla_corte_proportionality_2022\",\"id\":\"dalla_corte_proportionality_2022\",\"bibbaseid\":\"dallacorte-onproportionalityinthedataprotectionjurisprudenceofthecjeu-2022\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://doi.org/10.1093/idpl/ipac014\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"Cybercrime on the menu? Examining cafeteria-style offending among financially motivated cybercriminals\",\"volume\":\"126\",\"issn\":\"0747-5632\",\"shorttitle\":\"Cybercrime on the menu?\",\"url\":\"https://www.sciencedirect.com/science/article/pii/S0747563221003022\",\"doi\":\"10.1016/j.chb.2021.106979\",\"abstract\":\"Criminologists have frequently debated whether offenders are specialists, in that they consistently perform either one offense or similar offenses, or versatile by performing any crime based on opportunities and situational provocations. Such foundational research has yet to be developed regarding cybercrimes, or offenses enabled by computer technology and the Internet. This study address this issue using a sample of 37 offender networks. The results show variations in the offending behaviors of those involved in cybercrime. Almost half of the offender networks in this sample appeared to be cybercrime specialists, in that they only performed certain forms of cybercrime. The other half performed various types of crimes on and offline. The relative equity in specialization relative to versatility, particularly in both on and offline activities, suggests that there may be limited value in treating cybercriminals as a distinct offender group. Furthermore, this study calls to question what factors influence an offender's pathway into cybercrime, whether as a specialized or versatile offender. The actors involved in cybercrime networks, whether as specialists or generalists, were enmeshed into broader online offender networks who may have helped recognize and act on opportunities to engage in phishing, malware, and other economic offenses.\",\"language\":\"en\",\"urldate\":\"2022-01-26\",\"journal\":\"Computers in Human Behavior\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Leukfeldt\"],\"firstnames\":[\"Eric\",\"Rutger\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Holt\"],\"firstnames\":[\"Thomas\",\"J.\"],\"suffixes\":[]}],\"month\":\"January\",\"year\":\"2022\",\"keywords\":\"Cafeteria-style offending, Criminal network, Cybercrime, Malware, Organized crime, Phishing\",\"pages\":\"106979\",\"bibtex\":\"@article{leukfeldt_cybercrime_2022,\\n\\ttitle = {Cybercrime on the menu? {Examining} cafeteria-style offending among financially motivated cybercriminals},\\n\\tvolume = {126},\\n\\tissn = {0747-5632},\\n\\tshorttitle = {Cybercrime on the menu?},\\n\\turl = {https://www.sciencedirect.com/science/article/pii/S0747563221003022},\\n\\tdoi = {10.1016/j.chb.2021.106979},\\n\\tabstract = {Criminologists have frequently debated whether offenders are specialists, in that they consistently perform either one offense or similar offenses, or versatile by performing any crime based on opportunities and situational provocations. Such foundational research has yet to be developed regarding cybercrimes, or offenses enabled by computer technology and the Internet. This study address this issue using a sample of 37 offender networks. The results show variations in the offending behaviors of those involved in cybercrime. Almost half of the offender networks in this sample appeared to be cybercrime specialists, in that they only performed certain forms of cybercrime. The other half performed various types of crimes on and offline. The relative equity in specialization relative to versatility, particularly in both on and offline activities, suggests that there may be limited value in treating cybercriminals as a distinct offender group. Furthermore, this study calls to question what factors influence an offender's pathway into cybercrime, whether as a specialized or versatile offender. The actors involved in cybercrime networks, whether as specialists or generalists, were enmeshed into broader online offender networks who may have helped recognize and act on opportunities to engage in phishing, malware, and other economic offenses.},\\n\\tlanguage = {en},\\n\\turldate = {2022-01-26},\\n\\tjournal = {Computers in Human Behavior},\\n\\tauthor = {Leukfeldt, Eric Rutger and Holt, Thomas J.},\\n\\tmonth = jan,\\n\\tyear = {2022},\\n\\tkeywords = {Cafeteria-style offending, Criminal network, Cybercrime, Malware, Organized crime, Phishing},\\n\\tpages = {106979},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Leukfeldt, E. R.\",\"Holt, T. J.\"],\"key\":\"leukfeldt_cybercrime_2022\",\"id\":\"leukfeldt_cybercrime_2022\",\"bibbaseid\":\"leukfeldt-holt-cybercrimeonthemenuexaminingcafeteriastyleoffendingamongfinanciallymotivatedcybercriminals-2022\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://www.sciencedirect.com/science/article/pii/S0747563221003022\"},\"keyword\":[\"Cafeteria-style offending\",\"Criminal network\",\"Cybercrime\",\"Malware\",\"Organized crime\",\"Phishing\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"series\":\"Proceedings of the 17th Symposium on Usable Privacy and Security, SOUPS 2021\",\"title\":\"The thing doesn't have a name\",\"shorttitle\":\"“The thing doesn't have a name”\",\"url\":\"http://www.scopus.com/inward/record.url?scp=85114464267&partnerID=8YFLogxK\",\"abstract\":\"Many consumer Internet-of-Things (IoT) devices are, and will remain, subject to compromise, often without the owner's knowledge. Internet Service Providers (ISPs) are among the actors best-placed to coordinate the remediation of these problems. They receive infection data and can notify customers of recommended remediation actions. There is insufficient understanding of what happens in peoples' homes and businesses during attempts to remediate infected IoT devices. We coordinate with an ISP and conduct remote think-aloud observations with 17 customers who have an infected device, capturing their initial efforts to follow best-practice remediation steps. We identify real, personal consequences from wide-scale interventions which lack situated guidance for applying advice. Combining observations and thematic analysis, we synthesize the personal stories of the successes and struggles of these customers. Most participants think they were able to pinpoint the infected device; however, there were common issues such as not knowing how to comply with the recommended actions, remediations regarded as requiring excessive effort, a lack of feedback on success, and a perceived lack of support from device manufacturers. Only 4 of 17 participants were able to successfully complete all remediation steps. We provide recommendations relevant to various stakeholders, to focus where emergent interventions can be improved.\",\"urldate\":\"2022-01-26\",\"journal\":\"Proceedings of the 17th Symposium on Usable Privacy and Security, SOUPS 2021\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Bouwmeester\"],\"firstnames\":[\"Brennen\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Turcios\",\"Rodriguez\"],\"firstnames\":[\"E.R.\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Gañán\"],\"firstnames\":[\"Carlos\"],\"suffixes\":[]},{\"propositions\":[\"van\"],\"lastnames\":[\"Eeten\"],\"firstnames\":[\"Michel\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Parkin\"],\"firstnames\":[\"Simon\"],\"suffixes\":[]}],\"year\":\"2021\",\"note\":\"Publisher: USENIX Association\",\"pages\":\"493–512\",\"bibtex\":\"@article{bouwmeester_thing_2021,\\n\\tseries = {Proceedings of the 17th {Symposium} on {Usable} {Privacy} and {Security}, {SOUPS} 2021},\\n\\ttitle = {The thing doesn't have a name},\\n\\tshorttitle = {“{The} thing doesn't have a name”},\\n\\turl = {http://www.scopus.com/inward/record.url?scp=85114464267&partnerID=8YFLogxK},\\n\\tabstract = {Many consumer Internet-of-Things (IoT) devices are, and will remain, subject to compromise, often without the owner's knowledge. Internet Service Providers (ISPs) are among the actors best-placed to coordinate the remediation of these problems. They receive infection data and can notify customers of recommended remediation actions. There is insufficient understanding of what happens in peoples' homes and businesses during attempts to remediate infected IoT devices. We coordinate with an ISP and conduct remote think-aloud observations with 17 customers who have an infected device, capturing their initial efforts to follow best-practice remediation steps. We identify real, personal consequences from wide-scale interventions which lack situated guidance for applying advice. Combining observations and thematic analysis, we synthesize the personal stories of the successes and struggles of these customers. Most participants think they were able to pinpoint the infected device; however, there were common issues such as not knowing how to comply with the recommended actions, remediations regarded as requiring excessive effort, a lack of feedback on success, and a perceived lack of support from device manufacturers. Only 4 of 17 participants were able to successfully complete all remediation steps. We provide recommendations relevant to various stakeholders, to focus where emergent interventions can be improved.},\\n\\turldate = {2022-01-26},\\n\\tjournal = {Proceedings of the 17th Symposium on Usable Privacy and Security, SOUPS 2021},\\n\\tauthor = {Bouwmeester, Brennen and Turcios Rodriguez, E.R. and Gañán, Carlos and van Eeten, Michel and Parkin, Simon},\\n\\tyear = {2021},\\n\\tnote = {Publisher: USENIX Association},\\n\\tpages = {493--512},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Bouwmeester, B.\",\"Turcios Rodriguez, E.\",\"Gañán, C.\",\"van Eeten, M.\",\"Parkin, S.\"],\"key\":\"bouwmeester_thing_2021\",\"id\":\"bouwmeester_thing_2021\",\"bibbaseid\":\"bouwmeester-turciosrodriguez-gan-vaneeten-parkin-thethingdoesnthaveaname-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://www.scopus.com/inward/record.url?scp=85114464267&partnerID=8YFLogxK\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"Superspreaders: Quantifying the Role of IoT Manufacturers in Device Infections\",\"url\":\"https://weis2021.econinfosec.org/wp-content/uploads/sites/9/2021/06/weis21-rodriguez.pdf\",\"abstract\":\"The influx of insecure IoT devices into the consumer market can only be stemmed if manufacturers adopt more secure practices. It is unlikely that this will happen without government involvement. Developing effective regulation takes years. In the meantime, governments have an urgent need to engage manufacturers directly to stop the damage from getting worse. The problem is that there are many thousands of companies that produce IoT devices. Where to start? In this paper, we focus on identifying the most urgent class: the manufacturers of IoT devices that get compromised in the wild. To identify the manufacturers of infected IoT, we conducted active scanning of Mirai-infected devices. Over a period of 2 months, we collected Web-UI images and banners to identify device types and manufacturers. We identified 31,950 infected IoT devices in 68 countries produced by 70 unique manufacturers. We found that 9 vendors share almost 50% of the infections. This pattern is remarkably consistent across countries, notwithstanding the enormous variety of devices across markets. In terms of supporting customers, 53% of the 70 identified manufacturers offer firmware or software downloads on their websites, 43% provide some password changing procedure, and 26% of the manufacturers offer some advice to protect devices from attacks. Our findings suggest that targeting a small number of manufacturers can have a major impact on overall IoT security and that governments can join forces in these efforts, as they are often confronted with the same manufacturers.\",\"language\":\"en\",\"journal\":\"Annual Workshop on the Economics on Information Security\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Rodríguez\"],\"firstnames\":[\"Elsa\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Noroozian\"],\"firstnames\":[\"Arman\"],\"suffixes\":[]},{\"propositions\":[\"van\"],\"lastnames\":[\"Eeten\"],\"firstnames\":[\"Michel\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Gañán\"],\"firstnames\":[\"Carlos\"],\"suffixes\":[]}],\"year\":\"2021\",\"pages\":\"18\",\"bibtex\":\"@article{rodriguez_superspreaders_2021,\\n\\ttitle = {Superspreaders: {Quantifying} the {Role} of {IoT} {Manufacturers} in {Device} {Infections}},\\n\\turl = {https://weis2021.econinfosec.org/wp-content/uploads/sites/9/2021/06/weis21-rodriguez.pdf},\\n\\tabstract = {The influx of insecure IoT devices into the consumer market can only be stemmed if manufacturers adopt more secure practices. It is unlikely that this will happen without government involvement. Developing effective regulation takes years. In the meantime, governments have an urgent need to engage manufacturers directly to stop the damage from getting worse. The problem is that there are many thousands of companies that produce IoT devices. Where to start? In this paper, we focus on identifying the most urgent class: the manufacturers of IoT devices that get compromised in the wild. To identify the manufacturers of infected IoT, we conducted active scanning of Mirai-infected devices. Over a period of 2 months, we collected Web-UI images and banners to identify device types and manufacturers. We identified 31,950 infected IoT devices in 68 countries produced by 70 unique manufacturers. We found that 9 vendors share almost 50\\\\% of the infections. This pattern is remarkably consistent across countries, notwithstanding the enormous variety of devices across markets. In terms of supporting customers, 53\\\\% of the 70 identified manufacturers offer firmware or software downloads on their websites, 43\\\\% provide some password changing procedure, and 26\\\\% of the manufacturers offer some advice to protect devices from attacks. Our findings suggest that targeting a small number of manufacturers can have a major impact on overall IoT security and that governments can join forces in these efforts, as they are often confronted with the same manufacturers.},\\n\\tlanguage = {en},\\n\\tjournal = {Annual Workshop on the Economics on Information Security},\\n\\tauthor = {Rodríguez, Elsa and Noroozian, Arman and van Eeten, Michel and Gañán, Carlos},\\n\\tyear = {2021},\\n\\tpages = {18},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Rodríguez, E.\",\"Noroozian, A.\",\"van Eeten, M.\",\"Gañán, C.\"],\"key\":\"rodriguez_superspreaders_2021\",\"id\":\"rodriguez_superspreaders_2021\",\"bibbaseid\":\"rodrguez-noroozian-vaneeten-gan-superspreadersquantifyingtheroleofiotmanufacturersindeviceinfections-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://weis2021.econinfosec.org/wp-content/uploads/sites/9/2021/06/weis21-rodriguez.pdf\"},\"metadata\":{\"authorlinks\":{}},\"downloads\":1,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Architecting System of Systems Solutions with Security and Data-Protection Principles\",\"url\":\"https://ieeexplore.ieee.org/document/9497461\",\"doi\":\"10.1109/SOSE52739.2021.9497461\",\"abstract\":\"The rapid advancement of communication technology realized the dream of interconnected systems. In addition to enabling scalability and flexibility of solutions, this paradigm created new system design challenges. One such challenge is to holistically address security and privacy concerns of solutions early in design while respecting the system of systems context. This paper proposes a method for the concept design phase on how to create design alternatives with the help of security and data-protection principles. The outcome is a set of design concepts that reflect stakeholders' concerns and best practices.\",\"booktitle\":\"2021 16th International Conference of System of Systems Engineering (SoSE)\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Khashooei\"],\"firstnames\":[\"Behnam\",\"Asadi\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Vasenev\"],\"firstnames\":[\"Alexandr\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Kocademir\"],\"firstnames\":[\"Hasan\",\"Alper\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Mathijssen\"],\"firstnames\":[\"Roland\"],\"suffixes\":[]}],\"month\":\"June\",\"year\":\"2021\",\"keywords\":\"Best practices, Communications technology, Interconnected systems, Privacy, Scalability, Security, System of systems, security engineering, system architecting, system of systems\",\"pages\":\"43–48\",\"bibtex\":\"@inproceedings{khashooei_architecting_2021,\\n\\ttitle = {Architecting {System} of {Systems} {Solutions} with {Security} and {Data}-{Protection} {Principles}},\\n\\turl = {https://ieeexplore.ieee.org/document/9497461},\\n\\tdoi = {10.1109/SOSE52739.2021.9497461},\\n\\tabstract = {The rapid advancement of communication technology realized the dream of interconnected systems. In addition to enabling scalability and flexibility of solutions, this paradigm created new system design challenges. One such challenge is to holistically address security and privacy concerns of solutions early in design while respecting the system of systems context. This paper proposes a method for the concept design phase on how to create design alternatives with the help of security and data-protection principles. The outcome is a set of design concepts that reflect stakeholders' concerns and best practices.},\\n\\tbooktitle = {2021 16th {International} {Conference} of {System} of {Systems} {Engineering} ({SoSE})},\\n\\tauthor = {Khashooei, Behnam Asadi and Vasenev, Alexandr and Kocademir, Hasan Alper and Mathijssen, Roland},\\n\\tmonth = jun,\\n\\tyear = {2021},\\n\\tkeywords = {Best practices, Communications technology, Interconnected systems, Privacy, Scalability, Security, System of systems, security engineering, system architecting, system of systems},\\n\\tpages = {43--48},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Khashooei, B. A.\",\"Vasenev, A.\",\"Kocademir, H. A.\",\"Mathijssen, R.\"],\"key\":\"khashooei_architecting_2021\",\"id\":\"khashooei_architecting_2021\",\"bibbaseid\":\"khashooei-vasenev-kocademir-mathijssen-architectingsystemofsystemssolutionswithsecurityanddataprotectionprinciples-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://ieeexplore.ieee.org/document/9497461\"},\"keyword\":[\"Best practices\",\"Communications technology\",\"Interconnected systems\",\"Privacy\",\"Scalability\",\"Security\",\"System of systems\",\"security engineering\",\"system architecting\",\"system of systems\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"address\":\"Cham\",\"series\":\"Lecture Notes in Computer Science\",\"title\":\"Structured Traceability of Security and Privacy Principles for Designing Safe Automated Systems\",\"isbn\":\"978-3-030-83906-2\",\"url\":\"https://link.springer.com/chapter/10.1007/978-3-030-83906-2_4\",\"doi\":\"10.1007/978-3-030-83906-2_4\",\"abstract\":\"Creating modern safe automated systems like vehicles demands making them secure. With many diverse components addressing different needs, it is hard to trace and ensure the contributions of components to the overall security of systems. Principles, as high-level statements, can be used to reason how components contribute to security (and privacy) needs. This would help to design systems and products by aligning security and privacy concerns. The structure proposed in this positioning paper helps to make traceable links from stakeholders to specific technologies and system components. It aims at informing holistic discussions and reasoning on security approaches with stakeholders involved in the system development process. Ultimately, the traceable links can help to assist in aligning developers, create test cases, and provide certification claims - essential activities to ensure the final system is secure and safe.\",\"language\":\"en\",\"booktitle\":\"Computer Safety, Reliability, and Security. SAFECOMP 2021 Workshops\",\"publisher\":\"Springer International Publishing\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Asadi\",\"Khashooei\"],\"firstnames\":[\"Behnam\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Vasenev\"],\"firstnames\":[\"Alexandr\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Kocademir\"],\"firstnames\":[\"Hasan\",\"Alper\"],\"suffixes\":[]}],\"editor\":[{\"propositions\":[],\"lastnames\":[\"Habli\"],\"firstnames\":[\"Ibrahim\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Sujan\"],\"firstnames\":[\"Mark\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Gerasimou\"],\"firstnames\":[\"Simos\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Schoitsch\"],\"firstnames\":[\"Erwin\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Bitsch\"],\"firstnames\":[\"Friedemann\"],\"suffixes\":[]}],\"year\":\"2021\",\"keywords\":\"Design traceability, Security analysis, System architecture, System security\",\"pages\":\"52–62\",\"bibtex\":\"@inproceedings{asadi_khashooei_structured_2021,\\n\\taddress = {Cham},\\n\\tseries = {Lecture {Notes} in {Computer} {Science}},\\n\\ttitle = {Structured {Traceability} of {Security} and {Privacy} {Principles} for {Designing} {Safe} {Automated} {Systems}},\\n\\tisbn = {978-3-030-83906-2},\\n\\turl = {https://link.springer.com/chapter/10.1007/978-3-030-83906-2_4},\\n\\tdoi = {10.1007/978-3-030-83906-2_4},\\n\\tabstract = {Creating modern safe automated systems like vehicles demands making them secure. With many diverse components addressing different needs, it is hard to trace and ensure the contributions of components to the overall security of systems. Principles, as high-level statements, can be used to reason how components contribute to security (and privacy) needs. This would help to design systems and products by aligning security and privacy concerns. The structure proposed in this positioning paper helps to make traceable links from stakeholders to specific technologies and system components. It aims at informing holistic discussions and reasoning on security approaches with stakeholders involved in the system development process. Ultimately, the traceable links can help to assist in aligning developers, create test cases, and provide certification claims - essential activities to ensure the final system is secure and safe.},\\n\\tlanguage = {en},\\n\\tbooktitle = {Computer {Safety}, {Reliability}, and {Security}. {SAFECOMP} 2021 {Workshops}},\\n\\tpublisher = {Springer International Publishing},\\n\\tauthor = {Asadi Khashooei, Behnam and Vasenev, Alexandr and Kocademir, Hasan Alper},\\n\\teditor = {Habli, Ibrahim and Sujan, Mark and Gerasimou, Simos and Schoitsch, Erwin and Bitsch, Friedemann},\\n\\tyear = {2021},\\n\\tkeywords = {Design traceability, Security analysis, System architecture, System security},\\n\\tpages = {52--62},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Asadi Khashooei, B.\",\"Vasenev, A.\",\"Kocademir, H. A.\"],\"editor_short\":[\"Habli, I.\",\"Sujan, M.\",\"Gerasimou, S.\",\"Schoitsch, E.\",\"Bitsch, F.\"],\"key\":\"asadi_khashooei_structured_2021\",\"id\":\"asadi_khashooei_structured_2021\",\"bibbaseid\":\"asadikhashooei-vasenev-kocademir-structuredtraceabilityofsecurityandprivacyprinciplesfordesigningsafeautomatedsystems-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://link.springer.com/chapter/10.1007/978-3-030-83906-2_4\"},\"keyword\":[\"Design traceability\",\"Security analysis\",\"System architecture\",\"System security\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Can ISPs Help Mitigate IoT Malware? A Longitudinal Study of Broadband ISP Security Efforts\",\"shorttitle\":\"Can ISPs Help Mitigate IoT Malware?\",\"url\":\"https://ieeexplore.ieee.org/document/9581172\",\"doi\":\"10.1109/EuroSP51992.2021.00031\",\"abstract\":\"For the mitigation of compromised Internet of Things (IoT) devices we rely on Internet Service Providers (ISPs) and their users. Given that devices are in the hands of their subscribers, what can ISPs realistically do? This study examines the effects of ISP countermeasures on infections caused by variants of the notorious Mirai family of IoT malware, still among the dominant families. We collect and analyze more than 4 years of longitudinal darknet data tracking Mirai-like infections in conjunction with threat intelligence data on various other IoT and non-IoT botnets across the globe from January 2016 to May 2020. We measure the effect of two ISP countermeasures on Mirai variant infection numbers: (i) reducing the attack surface (i.e., closing ports that are used by the malware for propagation) and (ii) ISPs increasing their general network hygiene and malware removal efforts (as observed by proxy of the remediation of infections of other families of IoT and non-IoT malware and reductions in the number of DDoS amplifiers in their networks). We map our infection data to 342 broadband providers that have the bulk of the broadband market share in their respective 83 countries. We find that the number of infections correlates strongly with the number of ISP subscribers ($R{\\\\textasciicircum}2=0.55$). Yet, infection numbers can still vary by three orders of magnitude even for ISPs with comparable subscriber numbers. We observe that many ISPs, together with their subscribers, have reduced their attack surface for IoT compromise by blocking traffic to commonly-exploited infection vectors such as Telnet and FTP. We statistically estimate the impact of these reductions on infection levels and, counter-intuitively, find no significant impact. In contrast, we do find a significant impact for improving general network hygiene and best malware mitigation practices. ISPs that were more successful in reducing DDoS amplifiers and non-Mirai malware infections in their networks also end up with significantly lower Mirai infection rates. In other words, rather than investing in IoT-specific countermeasures like reducing the attack surface, our findings suggest that ISPs might be better off investing in general security efforts to improve network hygiene and clean up abuse.\",\"booktitle\":\"2021 IEEE European Symposium on Security and Privacy (EuroS P)\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Noroozian\"],\"firstnames\":[\"Arman\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Rodriguez\"],\"firstnames\":[\"Elsa\",\"Turcios\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Lastdrager\"],\"firstnames\":[\"Elmer\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Kasama\"],\"firstnames\":[\"Takahiro\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Van\",\"Eeten\"],\"firstnames\":[\"Michel\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Gañán\"],\"firstnames\":[\"Carlos\",\"H.\"],\"suffixes\":[]}],\"year\":\"2021\",\"keywords\":\"Botnet, Broadband amplifiers, Countermeasure, ISP, Internet of Things, IoT, Malware, Mirai, Remediation, Security, Surface cleaning, Web and internet services\",\"pages\":\"337–352\",\"bibtex\":\"@inproceedings{noroozian_can_2021,\\n\\ttitle = {Can {ISPs} {Help} {Mitigate} {IoT} {Malware}? {A} {Longitudinal} {Study} of {Broadband} {ISP} {Security} {Efforts}},\\n\\tshorttitle = {Can {ISPs} {Help} {Mitigate} {IoT} {Malware}?},\\n\\turl = {https://ieeexplore.ieee.org/document/9581172},\\n\\tdoi = {10.1109/EuroSP51992.2021.00031},\\n\\tabstract = {For the mitigation of compromised Internet of Things (IoT) devices we rely on Internet Service Providers (ISPs) and their users. Given that devices are in the hands of their subscribers, what can ISPs realistically do? This study examines the effects of ISP countermeasures on infections caused by variants of the notorious Mirai family of IoT malware, still among the dominant families. We collect and analyze more than 4 years of longitudinal darknet data tracking Mirai-like infections in conjunction with threat intelligence data on various other IoT and non-IoT botnets across the globe from January 2016 to May 2020. We measure the effect of two ISP countermeasures on Mirai variant infection numbers: (i) reducing the attack surface (i.e., closing ports that are used by the malware for propagation) and (ii) ISPs increasing their general network hygiene and malware removal efforts (as observed by proxy of the remediation of infections of other families of IoT and non-IoT malware and reductions in the number of DDoS amplifiers in their networks). We map our infection data to 342 broadband providers that have the bulk of the broadband market share in their respective 83 countries. We find that the number of infections correlates strongly with the number of ISP subscribers (\\\\$R{\\\\textasciicircum}2=0.55\\\\$). Yet, infection numbers can still vary by three orders of magnitude even for ISPs with comparable subscriber numbers. We observe that many ISPs, together with their subscribers, have reduced their attack surface for IoT compromise by blocking traffic to commonly-exploited infection vectors such as Telnet and FTP. We statistically estimate the impact of these reductions on infection levels and, counter-intuitively, find no significant impact. In contrast, we do find a significant impact for improving general network hygiene and best malware mitigation practices. ISPs that were more successful in reducing DDoS amplifiers and non-Mirai malware infections in their networks also end up with significantly lower Mirai infection rates. In other words, rather than investing in IoT-specific countermeasures like reducing the attack surface, our findings suggest that ISPs might be better off investing in general security efforts to improve network hygiene and clean up abuse.},\\n\\tbooktitle = {2021 {IEEE} {European} {Symposium} on {Security} and {Privacy} ({EuroS} {P})},\\n\\tauthor = {Noroozian, Arman and Rodriguez, Elsa Turcios and Lastdrager, Elmer and Kasama, Takahiro and Van Eeten, Michel and Gañán, Carlos H.},\\n\\tyear = {2021},\\n\\tkeywords = {Botnet, Broadband amplifiers, Countermeasure, ISP, Internet of Things, IoT, Malware, Mirai, Remediation, Security, Surface cleaning, Web and internet services},\\n\\tpages = {337--352},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Noroozian, A.\",\"Rodriguez, E. T.\",\"Lastdrager, E.\",\"Kasama, T.\",\"Van Eeten, M.\",\"Gañán, C. H.\"],\"key\":\"noroozian_can_2021\",\"id\":\"noroozian_can_2021\",\"bibbaseid\":\"noroozian-rodriguez-lastdrager-kasama-vaneeten-gan-canispshelpmitigateiotmalwarealongitudinalstudyofbroadbandispsecurityefforts-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://ieeexplore.ieee.org/document/9581172\"},\"keyword\":[\"Botnet\",\"Broadband amplifiers\",\"Countermeasure\",\"ISP\",\"Internet of Things\",\"IoT\",\"Malware\",\"Mirai\",\"Remediation\",\"Security\",\"Surface cleaning\",\"Web and internet services\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"Dark and Bright Patterns in Cookie Consent Requests\",\"volume\":\"3\",\"copyright\":\"Copyright (c) 2021 Paul Graßl, Hanna Schraffenberger, Frederik Zuiderveen Borgesius, Moniek Buijzen\",\"issn\":\"2003-1998\",\"url\":\"https://jdsr.se/ojs/index.php/jdsr/article/view/54\",\"doi\":\"10.33621/jdsr.v3i1.54\",\"abstract\":\"Dark patterns are (evil) design nudges that steer people’s behaviour through persuasive interface design. Increasingly found in cookie consent requests, they possibly undermine principles of EU privacy law. In two preregistered online experiments we investigated the effects of three common design nudges (default, aesthetic manipulation, obstruction) on users’ consent decisions and their perception of control over their personal data in these situations. In the first experiment (N = 228) we explored the effects of design nudges towards the privacy-unfriendly option (dark patterns). The experiment revealed that most participants agreed to all consent requests regardless of dark design nudges. Unexpectedly, despite generally low levels of perceived control, obstructing the privacy-friendly option led to more rather than less perceived control. In the second experiment (N = 255) we reversed the direction of the design nudges towards the privacy-friendly option, which we title “bright patterns”. This time the obstruction and default nudges swayed people effectively towards the privacy-friendly option, while the result regarding perceived control stayed the same compared to Experiment 1. Overall, our findings suggest that many current implementations of cookie consent requests do not enable meaningful choices by internet users, and are thus not in line with the intention of the EU policymakers. We also explore how policymakers could address the problem.\",\"language\":\"en\",\"number\":\"1\",\"urldate\":\"2022-01-26\",\"journal\":\"Journal of Digital Social Research\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Graßl\"],\"firstnames\":[\"Paul\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Schraffenberger\"],\"firstnames\":[\"Hanna\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Borgesius\"],\"firstnames\":[\"Frederik\",\"Zuiderveen\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Buijzen\"],\"firstnames\":[\"Moniek\"],\"suffixes\":[]}],\"month\":\"August\",\"year\":\"2021\",\"note\":\"Number: 1\",\"keywords\":\"ePrivacy Regulation\",\"pages\":\"1–38\",\"bibtex\":\"@article{grasl_dark_2021,\\n\\ttitle = {Dark and {Bright} {Patterns} in {Cookie} {Consent} {Requests}},\\n\\tvolume = {3},\\n\\tcopyright = {Copyright (c) 2021 Paul Graßl, Hanna Schraffenberger, Frederik Zuiderveen Borgesius, Moniek Buijzen},\\n\\tissn = {2003-1998},\\n\\turl = {https://jdsr.se/ojs/index.php/jdsr/article/view/54},\\n\\tdoi = {10.33621/jdsr.v3i1.54},\\n\\tabstract = {Dark patterns are (evil) design nudges that steer people’s behaviour through persuasive interface design. Increasingly found in cookie consent requests, they possibly undermine principles of EU privacy law. In two preregistered online experiments we investigated the effects of three common design nudges (default, aesthetic manipulation, obstruction) on users’ consent decisions and their perception of control over their personal data in these situations. In the first experiment (N = 228) we explored the effects of design nudges towards the privacy-unfriendly option (dark patterns). The experiment revealed that most participants agreed to all consent requests regardless of dark design nudges. Unexpectedly, despite generally low levels of perceived control, obstructing the privacy-friendly option led to more rather than less perceived control. In the second experiment (N = 255) we reversed the direction of the design nudges towards the privacy-friendly option, which we title “bright patterns”. This time the obstruction and default nudges swayed people effectively towards the privacy-friendly option, while the result regarding perceived control stayed the same compared to Experiment 1. Overall, our findings suggest that many current implementations of cookie consent requests do not enable meaningful choices by internet users, and are thus not in line with the intention of the EU policymakers. We also explore how policymakers could address the problem.},\\n\\tlanguage = {en},\\n\\tnumber = {1},\\n\\turldate = {2022-01-26},\\n\\tjournal = {Journal of Digital Social Research},\\n\\tauthor = {Graßl, Paul and Schraffenberger, Hanna and Borgesius, Frederik Zuiderveen and Buijzen, Moniek},\\n\\tmonth = aug,\\n\\tyear = {2021},\\n\\tnote = {Number: 1},\\n\\tkeywords = {ePrivacy Regulation},\\n\\tpages = {1--38},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Graßl, P.\",\"Schraffenberger, H.\",\"Borgesius, F. Z.\",\"Buijzen, M.\"],\"key\":\"grasl_dark_2021\",\"id\":\"grasl_dark_2021\",\"bibbaseid\":\"gral-schraffenberger-borgesius-buijzen-darkandbrightpatternsincookieconsentrequests-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://jdsr.se/ojs/index.php/jdsr/article/view/54\"},\"keyword\":[\"ePrivacy Regulation\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Toward a Secure Crowdsourced Location Tracking System\",\"url\":\"https://research.utwente.nl/en/publications/toward-a-secure-crowdsourced-location-tracking-system\",\"doi\":\"10.1145/3448300.3467821\",\"language\":\"English\",\"urldate\":\"2022-01-26\",\"booktitle\":\"14th ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec)\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Garg\"],\"firstnames\":[\"Chinmay\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Machiry\"],\"firstnames\":[\"Aravind\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Continella\"],\"firstnames\":[\"Andrea\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Kruegel\"],\"firstnames\":[\"Christopher\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Vigna\"],\"firstnames\":[\"Giovanni\"],\"suffixes\":[]}],\"month\":\"June\",\"year\":\"2021\",\"pages\":\"311–322\",\"bibtex\":\"@inproceedings{garg_toward_2021,\\n\\ttitle = {Toward a {Secure} {Crowdsourced} {Location} {Tracking} {System}},\\n\\turl = {https://research.utwente.nl/en/publications/toward-a-secure-crowdsourced-location-tracking-system},\\n\\tdoi = {10.1145/3448300.3467821},\\n\\tlanguage = {English},\\n\\turldate = {2022-01-26},\\n\\tbooktitle = {14th {ACM} {Conference} on {Security} and {Privacy} in {Wireless} and {Mobile} {Networks} ({WiSec})},\\n\\tauthor = {Garg, Chinmay and Machiry, Aravind and Continella, Andrea and Kruegel, Christopher and Vigna, Giovanni},\\n\\tmonth = jun,\\n\\tyear = {2021},\\n\\tpages = {311--322},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Garg, C.\",\"Machiry, A.\",\"Continella, A.\",\"Kruegel, C.\",\"Vigna, G.\"],\"key\":\"garg_toward_2021\",\"id\":\"garg_toward_2021\",\"bibbaseid\":\"garg-machiry-continella-kruegel-vigna-towardasecurecrowdsourcedlocationtrackingsystem-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://research.utwente.nl/en/publications/toward-a-secure-crowdsourced-location-tracking-system\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Modelling Disruptive APTs targeting Critical Infrastructure using Military Theory\",\"isbn\":\"978-1-66541-012-0\",\"url\":\"https://www.computer.org/csdl/proceedings-article/euros&pw/2021/999900a178/1y63lcSC3qU\",\"doi\":\"10.1109/EuroSPW54576.2021.00026\",\"abstract\":\"Disruptive Advanced Persistent Threats (D-APTs) are a new sophisticated class of cyberattacks targeting critical infrastructures. Whereas regular APTs are well-described in the literature, no existing APT kill chain model incorporates the disruptive actions of D-APTs and can be used to represent DAPTs in data. To this aim, the contribution of this paper is twofold: first, we review the evolution of existing APT kill chain models. Second, we present a novel D-APT model based on existing ATP models and military theory. The model describes the strategic objective setting, the operational kill chain and the tactics of the attacker, as well as the defender&#x2019;s critical infrastructure, processes and societal function.\",\"language\":\"English\",\"urldate\":\"2022-01-26\",\"publisher\":\"IEEE Computer Society\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Meijaard\"],\"firstnames\":[\"Yoram\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Meiler\"],\"firstnames\":[\"Peter-Paul\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Allodi\"],\"firstnames\":[\"Luca\"],\"suffixes\":[]}],\"year\":\"2021\",\"pages\":\"178–190\",\"bibtex\":\"@inproceedings{meijaard_modelling_2021,\\n\\ttitle = {Modelling {Disruptive} {APTs} targeting {Critical} {Infrastructure} using {Military} {Theory}},\\n\\tisbn = {978-1-66541-012-0},\\n\\turl = {https://www.computer.org/csdl/proceedings-article/euros&pw/2021/999900a178/1y63lcSC3qU},\\n\\tdoi = {10.1109/EuroSPW54576.2021.00026},\\n\\tabstract = {Disruptive Advanced Persistent Threats (D-APTs) are a new sophisticated class of cyberattacks targeting critical infrastructures. Whereas regular APTs are well-described in the literature, no existing APT kill chain model incorporates the disruptive actions of D-APTs and can be used to represent DAPTs in data. To this aim, the contribution of this paper is twofold: first, we review the evolution of existing APT kill chain models. Second, we present a novel D-APT model based on existing ATP models and military theory. The model describes the strategic objective setting, the operational kill chain and the tactics of the attacker, as well as the defender\\\\&\\\\#x2019;s critical infrastructure, processes and societal function.},\\n\\tlanguage = {English},\\n\\turldate = {2022-01-26},\\n\\tpublisher = {IEEE Computer Society},\\n\\tauthor = {Meijaard, Yoram and Meiler, Peter-Paul and Allodi, Luca},\\n\\tyear = {2021},\\n\\tpages = {178--190},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Meijaard, Y.\",\"Meiler, P.\",\"Allodi, L.\"],\"key\":\"meijaard_modelling_2021\",\"id\":\"meijaard_modelling_2021\",\"bibbaseid\":\"meijaard-meiler-allodi-modellingdisruptiveaptstargetingcriticalinfrastructureusingmilitarytheory-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://www.computer.org/csdl/proceedings-article/euros&pw/2021/999900a178/1y63lcSC3qU\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Dissecting Social Engineering Attacks Through the Lenses of Cognition\",\"isbn\":\"978-1-66541-012-0\",\"url\":\"https://www.computer.org/csdl/proceedings-article/euros&pw/2021/999900a149/1y63kTlpFpC\",\"doi\":\"10.1109/EuroSPW54576.2021.00024\",\"abstract\":\"In this paper we present, showcase, and analize a novel framework to dissect Social Engineering (SE) attacks. The framework is based on extant theories in the cognitive sciences, and is meant as an instrument for researchers and practitioners alike to structure and analyze SE attacks of varying sophistication, isolating specific features and their effects at the cognitive level, and providing a common structure for comparisons across different attacks. We showcase the framework against attacks reproduced in the academic literature as well as against real (highly-targeted) SE attacks reported in the wild, isolating and relating effects and techniques adopted by the attackers to the target&#x2019;s cognitive process. We discuss implications for research and practice of the proposed framework.\",\"language\":\"English\",\"urldate\":\"2022-01-26\",\"publisher\":\"IEEE Computer Society\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Burda\"],\"firstnames\":[\"Pavlo\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Allodi\"],\"firstnames\":[\"Luca\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Zannone\"],\"firstnames\":[\"Nicola\"],\"suffixes\":[]}],\"year\":\"2021\",\"pages\":\"149–160\",\"bibtex\":\"@inproceedings{burda_dissecting_2021,\\n\\ttitle = {Dissecting {Social} {Engineering} {Attacks} {Through} the {Lenses} of {Cognition}},\\n\\tisbn = {978-1-66541-012-0},\\n\\turl = {https://www.computer.org/csdl/proceedings-article/euros&pw/2021/999900a149/1y63kTlpFpC},\\n\\tdoi = {10.1109/EuroSPW54576.2021.00024},\\n\\tabstract = {In this paper we present, showcase, and analize a novel framework to dissect Social Engineering (SE) attacks. The framework is based on extant theories in the cognitive sciences, and is meant as an instrument for researchers and practitioners alike to structure and analyze SE attacks of varying sophistication, isolating specific features and their effects at the cognitive level, and providing a common structure for comparisons across different attacks. We showcase the framework against attacks reproduced in the academic literature as well as against real (highly-targeted) SE attacks reported in the wild, isolating and relating effects and techniques adopted by the attackers to the target\\\\&\\\\#x2019;s cognitive process. We discuss implications for research and practice of the proposed framework.},\\n\\tlanguage = {English},\\n\\turldate = {2022-01-26},\\n\\tpublisher = {IEEE Computer Society},\\n\\tauthor = {Burda, Pavlo and Allodi, Luca and Zannone, Nicola},\\n\\tyear = {2021},\\n\\tpages = {149--160},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Burda, P.\",\"Allodi, L.\",\"Zannone, N.\"],\"key\":\"burda_dissecting_2021\",\"id\":\"burda_dissecting_2021\",\"bibbaseid\":\"burda-allodi-zannone-dissectingsocialengineeringattacksthroughthelensesofcognition-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://www.computer.org/csdl/proceedings-article/euros&pw/2021/999900a149/1y63kTlpFpC\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"address\":\"New York, NY, USA\",\"series\":\"ARES 2021\",\"title\":\"Combining Text and Visual Features to Improve the Identification of Cloned Webpages for Early Phishing Detection\",\"isbn\":\"978-1-4503-9051-4\",\"url\":\"https://doi.org/10.1145/3465481.3470112\",\"doi\":\"10.1145/3465481.3470112\",\"abstract\":\"Phishing attacks arrive in high numbers and often spread quickly, meaning that after-the-fact countermeasures such as domain blacklisting are limited in efficacy. Visual similarity-based approaches have the potential of detecting previously unseen phishing webpages. These approaches, however, require identifying the legitimate webpage(s) they reproduce. Existing approaches rely on textual feature analysis for target identification, with misclassification rates of approximately 1%; however, as most websites a user might visit are legitimate, additional research is needed to further reduce classification errors. In this work, we propose a novel method for target identification that relies on both visual features (extracted from a screenshot of the web page) and textual features (extracted from the DOM of the web page) to identify which website a phishing web page is replicating, and assess its effectiveness in detecting phishing websites using data from phishing aggregators such as OpenPhish, PhishTank and PhishStats. Compared to state-of-the-art text-based classifiers, our method reduces the phishing misclassification rate by 67% (from 1.02% to 0.34%), for an accuracy of 99.66%. This work provides a further step forwards toward semi-automated decision support systems for phishing detection.\",\"urldate\":\"2022-01-26\",\"booktitle\":\"The 16th International Conference on Availability, Reliability and Security\",\"publisher\":\"Association for Computing Machinery\",\"author\":[{\"propositions\":[\"van\"],\"lastnames\":[\"Dooremaal\"],\"firstnames\":[\"Bram\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Burda\"],\"firstnames\":[\"Pavlo\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Allodi\"],\"firstnames\":[\"Luca\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Zannone\"],\"firstnames\":[\"Nicola\"],\"suffixes\":[]}],\"month\":\"August\",\"year\":\"2021\",\"keywords\":\"Phishing Detection, Target Identification, Visual Features\",\"pages\":\"1–10\",\"bibtex\":\"@inproceedings{van_dooremaal_combining_2021,\\n\\taddress = {New York, NY, USA},\\n\\tseries = {{ARES} 2021},\\n\\ttitle = {Combining {Text} and {Visual} {Features} to {Improve} the {Identification} of {Cloned} {Webpages} for {Early} {Phishing} {Detection}},\\n\\tisbn = {978-1-4503-9051-4},\\n\\turl = {https://doi.org/10.1145/3465481.3470112},\\n\\tdoi = {10.1145/3465481.3470112},\\n\\tabstract = {Phishing attacks arrive in high numbers and often spread quickly, meaning that after-the-fact countermeasures such as domain blacklisting are limited in efficacy. Visual similarity-based approaches have the potential of detecting previously unseen phishing webpages. These approaches, however, require identifying the legitimate webpage(s) they reproduce. Existing approaches rely on textual feature analysis for target identification, with misclassification rates of approximately 1\\\\%; however, as most websites a user might visit are legitimate, additional research is needed to further reduce classification errors. In this work, we propose a novel method for target identification that relies on both visual features (extracted from a screenshot of the web page) and textual features (extracted from the DOM of the web page) to identify which website a phishing web page is replicating, and assess its effectiveness in detecting phishing websites using data from phishing aggregators such as OpenPhish, PhishTank and PhishStats. Compared to state-of-the-art text-based classifiers, our method reduces the phishing misclassification rate by 67\\\\% (from 1.02\\\\% to 0.34\\\\%), for an accuracy of 99.66\\\\%. This work provides a further step forwards toward semi-automated decision support systems for phishing detection.},\\n\\turldate = {2022-01-26},\\n\\tbooktitle = {The 16th {International} {Conference} on {Availability}, {Reliability} and {Security}},\\n\\tpublisher = {Association for Computing Machinery},\\n\\tauthor = {van Dooremaal, Bram and Burda, Pavlo and Allodi, Luca and Zannone, Nicola},\\n\\tmonth = aug,\\n\\tyear = {2021},\\n\\tkeywords = {Phishing Detection, Target Identification, Visual Features},\\n\\tpages = {1--10},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"van Dooremaal, B.\",\"Burda, P.\",\"Allodi, L.\",\"Zannone, N.\"],\"key\":\"van_dooremaal_combining_2021\",\"id\":\"van_dooremaal_combining_2021\",\"bibbaseid\":\"vandooremaal-burda-allodi-zannone-combiningtextandvisualfeaturestoimprovetheidentificationofclonedwebpagesforearlyphishingdetection-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://doi.org/10.1145/3465481.3470112\"},\"keyword\":[\"Phishing Detection\",\"Target Identification\",\"Visual Features\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"Heterogeneity in trajectories of cybercriminals: A longitudinal analyses of web defacements\",\"volume\":\"4\",\"issn\":\"2451-9588\",\"shorttitle\":\"Heterogeneity in trajectories of cybercriminals\",\"url\":\"https://www.sciencedirect.com/science/article/pii/S2451958821000610\",\"doi\":\"10.1016/j.chbr.2021.100113\",\"abstract\":\"Longitudinal criminological studies greatly improved our understanding of the longitudinal patterns of criminality. These studies, however, focused almost exclusively on traditional types of offending and it is therefore unclear whether results are generalizable to online types of offending. This study attempted to identify the developmental trajectories of active hackers who perform web defacements. The data for this study consisted of 2,745,311 attacks performed by 66,553 hackers and reported to Zone-H between January 2010 and March 2017. Semi-parametric group-based trajectory models were used to distinguish six different groups of hackers based on the timing and frequency of their defacements. The results demonstrated some common relationships to traditional types of crime, as a small population of defacers accounted for the majority of defacements against websites. Additionally, the methods and targeting practices of defacers differed based on the frequency with which they performed defacements generally.\",\"language\":\"en\",\"urldate\":\"2022-01-26\",\"journal\":\"Computers in Human Behavior Reports\",\"author\":[{\"propositions\":[\"van\",\"de\"],\"lastnames\":[\"Weijer\"],\"firstnames\":[\"Steve\",\"G.\",\"A.\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Holt\"],\"firstnames\":[\"Thomas\",\"J.\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Leukfeldt\"],\"firstnames\":[\"E.\",\"Rutger\"],\"suffixes\":[]}],\"month\":\"August\",\"year\":\"2021\",\"keywords\":\"Cybercrime, Hacking, Trajectories, Web defacements, Zone-H\",\"pages\":\"100113\",\"bibtex\":\"@article{van_de_weijer_heterogeneity_2021,\\n\\ttitle = {Heterogeneity in trajectories of cybercriminals: {A} longitudinal analyses of web defacements},\\n\\tvolume = {4},\\n\\tissn = {2451-9588},\\n\\tshorttitle = {Heterogeneity in trajectories of cybercriminals},\\n\\turl = {https://www.sciencedirect.com/science/article/pii/S2451958821000610},\\n\\tdoi = {10.1016/j.chbr.2021.100113},\\n\\tabstract = {Longitudinal criminological studies greatly improved our understanding of the longitudinal patterns of criminality. These studies, however, focused almost exclusively on traditional types of offending and it is therefore unclear whether results are generalizable to online types of offending. This study attempted to identify the developmental trajectories of active hackers who perform web defacements. The data for this study consisted of 2,745,311 attacks performed by 66,553 hackers and reported to Zone-H between January 2010 and March 2017. Semi-parametric group-based trajectory models were used to distinguish six different groups of hackers based on the timing and frequency of their defacements. The results demonstrated some common relationships to traditional types of crime, as a small population of defacers accounted for the majority of defacements against websites. Additionally, the methods and targeting practices of defacers differed based on the frequency with which they performed defacements generally.},\\n\\tlanguage = {en},\\n\\turldate = {2022-01-26},\\n\\tjournal = {Computers in Human Behavior Reports},\\n\\tauthor = {van de Weijer, Steve G. A. and Holt, Thomas J. and Leukfeldt, E. Rutger},\\n\\tmonth = aug,\\n\\tyear = {2021},\\n\\tkeywords = {Cybercrime, Hacking, Trajectories, Web defacements, Zone-H},\\n\\tpages = {100113},\\n}\\n\\n\\n\\n\",\"author_short\":[\"van de Weijer, S. G. A.\",\"Holt, T. J.\",\"Leukfeldt, E. R.\"],\"key\":\"van_de_weijer_heterogeneity_2021\",\"id\":\"van_de_weijer_heterogeneity_2021\",\"bibbaseid\":\"vandeweijer-holt-leukfeldt-heterogeneityintrajectoriesofcybercriminalsalongitudinalanalysesofwebdefacements-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://www.sciencedirect.com/science/article/pii/S2451958821000610\"},\"keyword\":[\"Cybercrime\",\"Hacking\",\"Trajectories\",\"Web defacements\",\"Zone-H\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"incollection\",\"type\":\"incollection\",\"address\":\"New York, NY, USA\",\"title\":\"SoK: Enabling Security Analyses of Embedded Systems via Rehosting\",\"isbn\":\"978-1-4503-8287-8\",\"shorttitle\":\"SoK\",\"url\":\"https://doi.org/10.1145/3433210.3453093\",\"abstract\":\"Closely monitoring the behavior of a software system during its execution enables developers and analysts to observe, and ultimately understand, how it works. This kind of dynamic analysis can be instrumental to reverse engineering, vulnerability discovery, exploit development, and debugging. While these analyses are typically well-supported for homogeneous desktop platforms (e.g., x86 desktop PCs), they can rarely be applied in the heterogeneous world of embedded systems. One approach to enable dynamic analyses of embedded systems is to move software stacks from physical systems into virtual environments that sufficiently model hardware behavior. This process which we call \\\"rehosting\\\" poses a significant research challenge with major implications for security analyses. Although rehosting has traditionally been an unscientific and ad-hoc endeavor undertaken by domain experts with varying time and resources at their disposal, researchers are beginning to address rehosting challenges systematically and in earnest. In this paper, we establish that emulation is insufficient to conduct large-scale dynamic analysis of real-world hardware systems and present rehosting as a firmware-centric alternative. Furthermore, we taxonomize preliminary rehosting efforts, identify the fundamental components of the rehosting process, and propose directions for future research.\",\"urldate\":\"2022-01-26\",\"booktitle\":\"Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security\",\"publisher\":\"Association for Computing Machinery\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Fasano\"],\"firstnames\":[\"Andrew\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Ballo\"],\"firstnames\":[\"Tiemoko\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Muench\"],\"firstnames\":[\"Marius\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Leek\"],\"firstnames\":[\"Tim\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Bulekov\"],\"firstnames\":[\"Alexander\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Dolan-Gavitt\"],\"firstnames\":[\"Brendan\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Egele\"],\"firstnames\":[\"Manuel\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Francillon\"],\"firstnames\":[\"Aurélien\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Lu\"],\"firstnames\":[\"Long\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Gregory\"],\"firstnames\":[\"Nick\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Balzarotti\"],\"firstnames\":[\"Davide\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Robertson\"],\"firstnames\":[\"William\"],\"suffixes\":[]}],\"month\":\"May\",\"year\":\"2021\",\"keywords\":\"dynamic program analysis, embedded systems, emulation, firmware security, internet of things, rehosting, virtualization\",\"pages\":\"687–701\",\"bibtex\":\"@incollection{fasano_sok_2021,\\n\\taddress = {New York, NY, USA},\\n\\ttitle = {{SoK}: {Enabling} {Security} {Analyses} of {Embedded} {Systems} via {Rehosting}},\\n\\tisbn = {978-1-4503-8287-8},\\n\\tshorttitle = {{SoK}},\\n\\turl = {https://doi.org/10.1145/3433210.3453093},\\n\\tabstract = {Closely monitoring the behavior of a software system during its execution enables developers and analysts to observe, and ultimately understand, how it works. This kind of dynamic analysis can be instrumental to reverse engineering, vulnerability discovery, exploit development, and debugging. While these analyses are typically well-supported for homogeneous desktop platforms (e.g., x86 desktop PCs), they can rarely be applied in the heterogeneous world of embedded systems. One approach to enable dynamic analyses of embedded systems is to move software stacks from physical systems into virtual environments that sufficiently model hardware behavior. This process which we call \\\"rehosting\\\" poses a significant research challenge with major implications for security analyses. Although rehosting has traditionally been an unscientific and ad-hoc endeavor undertaken by domain experts with varying time and resources at their disposal, researchers are beginning to address rehosting challenges systematically and in earnest. In this paper, we establish that emulation is insufficient to conduct large-scale dynamic analysis of real-world hardware systems and present rehosting as a firmware-centric alternative. Furthermore, we taxonomize preliminary rehosting efforts, identify the fundamental components of the rehosting process, and propose directions for future research.},\\n\\turldate = {2022-01-26},\\n\\tbooktitle = {Proceedings of the 2021 {ACM} {Asia} {Conference} on {Computer} and {Communications} {Security}},\\n\\tpublisher = {Association for Computing Machinery},\\n\\tauthor = {Fasano, Andrew and Ballo, Tiemoko and Muench, Marius and Leek, Tim and Bulekov, Alexander and Dolan-Gavitt, Brendan and Egele, Manuel and Francillon, Aurélien and Lu, Long and Gregory, Nick and Balzarotti, Davide and Robertson, William},\\n\\tmonth = may,\\n\\tyear = {2021},\\n\\tkeywords = {dynamic program analysis, embedded systems, emulation, firmware security, internet of things, rehosting, virtualization},\\n\\tpages = {687--701},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Fasano, A.\",\"Ballo, T.\",\"Muench, M.\",\"Leek, T.\",\"Bulekov, A.\",\"Dolan-Gavitt, B.\",\"Egele, M.\",\"Francillon, A.\",\"Lu, L.\",\"Gregory, N.\",\"Balzarotti, D.\",\"Robertson, W.\"],\"key\":\"fasano_sok_2021\",\"id\":\"fasano_sok_2021\",\"bibbaseid\":\"fasano-ballo-muench-leek-bulekov-dolangavitt-egele-francillon-etal-sokenablingsecurityanalysesofembeddedsystemsviarehosting-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://doi.org/10.1145/3433210.3453093\"},\"keyword\":[\"dynamic program analysis\",\"embedded systems\",\"emulation\",\"firmware security\",\"internet of things\",\"rehosting\",\"virtualization\"],\"metadata\":{\"authorlinks\":{}},\"downloads\":24,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Rage Against the Machine Clear: A Systematic Analysis of Machine Clears and Their Implications for Transient Execution Attacks\",\"isbn\":\"978-1-939133-24-3\",\"shorttitle\":\"Rage Against the Machine Clear\",\"url\":\"https://www.usenix.org/conference/usenixsecurity21/presentation/ragab\",\"language\":\"en\",\"urldate\":\"2022-01-26\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Ragab\"],\"firstnames\":[\"Hany\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Barberis\"],\"firstnames\":[\"Enrico\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Bos\"],\"firstnames\":[\"Herbert\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Giuffrida\"],\"firstnames\":[\"Cristiano\"],\"suffixes\":[]}],\"year\":\"2021\",\"pages\":\"1451–1468\",\"bibtex\":\"@inproceedings{ragab_rage_2021,\\n\\ttitle = {Rage {Against} the {Machine} {Clear}: {A} {Systematic} {Analysis} of {Machine} {Clears} and {Their} {Implications} for {Transient} {Execution} {Attacks}},\\n\\tisbn = {978-1-939133-24-3},\\n\\tshorttitle = {Rage {Against} the {Machine} {Clear}},\\n\\turl = {https://www.usenix.org/conference/usenixsecurity21/presentation/ragab},\\n\\tlanguage = {en},\\n\\turldate = {2022-01-26},\\n\\tauthor = {Ragab, Hany and Barberis, Enrico and Bos, Herbert and Giuffrida, Cristiano},\\n\\tyear = {2021},\\n\\tpages = {1451--1468},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Ragab, H.\",\"Barberis, E.\",\"Bos, H.\",\"Giuffrida, C.\"],\"key\":\"ragab_rage_2021\",\"id\":\"ragab_rage_2021\",\"bibbaseid\":\"ragab-barberis-bos-giuffrida-rageagainstthemachineclearasystematicanalysisofmachineclearsandtheirimplicationsfortransientexecutionattacks-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://www.usenix.org/conference/usenixsecurity21/presentation/ragab\"},\"metadata\":{\"authorlinks\":{}},\"downloads\":338,\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"The right to compensation of a competitor for a violation of the GDPR\",\"volume\":\"10\",\"issn\":\"2044-3994\",\"url\":\"https://doi.org/10.1093/idpl/ipaa018\",\"doi\":\"10.1093/idpl/ipaa018\",\"abstract\":\"Key PointsAlthough the General Data Protection Regulation (GDPR) is primarily aimed at the protection of data subjects, competitors of the controller may also suffer damage due to an infringement.Article 82(1) of the GDPR stipulates that ‘any person’ shall have the right to receive compensation. It does not clarify whether a competitor can also invoke this right.At first sight, a right to compensation for competitors does not match the primary purpose of the GDPR.However, the GDPR also intends to advance the free movement of personal data, strengthen the protection of personal data, and harmonize data protection law. The right to compensation of competitors can make a meaningful contribution to these objectives.Furthermore, other provisions of European origin also allow enforcement by competitors.\",\"number\":\"4\",\"urldate\":\"2022-01-26\",\"journal\":\"International Data Privacy Law\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Walree\"],\"firstnames\":[\"Tim\",\"F\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Wolters\"],\"firstnames\":[\"Pieter\",\"T\",\"J\"],\"suffixes\":[]}],\"month\":\"November\",\"year\":\"2020\",\"pages\":\"346–355\",\"bibtex\":\"@article{walree_right_2020,\\n\\ttitle = {The right to compensation of a competitor for a violation of the {GDPR}},\\n\\tvolume = {10},\\n\\tissn = {2044-3994},\\n\\turl = {https://doi.org/10.1093/idpl/ipaa018},\\n\\tdoi = {10.1093/idpl/ipaa018},\\n\\tabstract = {Key PointsAlthough the General Data Protection Regulation (GDPR) is primarily aimed at the protection of data subjects, competitors of the controller may also suffer damage due to an infringement.Article 82(1) of the GDPR stipulates that ‘any person’ shall have the right to receive compensation. It does not clarify whether a competitor can also invoke this right.At first sight, a right to compensation for competitors does not match the primary purpose of the GDPR.However, the GDPR also intends to advance the free movement of personal data, strengthen the protection of personal data, and harmonize data protection law. The right to compensation of competitors can make a meaningful contribution to these objectives.Furthermore, other provisions of European origin also allow enforcement by competitors.},\\n\\tnumber = {4},\\n\\turldate = {2022-01-26},\\n\\tjournal = {International Data Privacy Law},\\n\\tauthor = {Walree, Tim F and Wolters, Pieter T J},\\n\\tmonth = nov,\\n\\tyear = {2020},\\n\\tpages = {346--355},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Walree, T. F\",\"Wolters, P. T J\"],\"key\":\"walree_right_2020\",\"id\":\"walree_right_2020\",\"bibbaseid\":\"walree-wolters-therighttocompensationofacompetitorforaviolationofthegdpr-2020\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://doi.org/10.1093/idpl/ipaa018\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"incollection\",\"type\":\"incollection\",\"title\":\"A Toolkit for Security Awareness Training Against Targeted Phishing\",\"isbn\":\"978-3-030-65609-6\",\"url\":\"https://www.researchgate.net/publication/347625933_A_Toolkit_for_Security_Awareness_Training_Against_Targeted_Phishing\",\"abstract\":\"The attack landscape is evolving, and attackers are employing new techniques to launch increasingly targeted and sophisticated social engineering attacks that exploit human vulnerabilities. Many organizations provide their employees with security awareness training to counter and mitigate such threats. However, recent studies have shown that current embedded phishing training programs and tools are often ineffective or incapable of addressing modern, tailored social engineering attacks. This paper presents a toolkit for the deployment of sophisticated, tailored phishing campaigns at scale (e.g., to deploy specific training within an organization). We enable the use of highly customizable phishing email templates that can be instantiated with a large range of information about the specific target and a semi-automated process for the selection of the phishing domain name. We demonstrate our tool by showing how tailored phishing campaigns proposed in previous studies can be enhanced to increase the credibility of the phishing email, effectively addressing the very limitations identified in those studies.\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Pirocca\"],\"firstnames\":[\"Simone\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Allodi\"],\"firstnames\":[\"Luca\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Zannone\"],\"firstnames\":[\"Nicola\"],\"suffixes\":[]}],\"month\":\"December\",\"year\":\"2020\",\"doi\":\"10.1007/978-3-030-65610-2_9\",\"pages\":\"137–159\",\"bibtex\":\"@incollection{pirocca_toolkit_2020,\\n\\ttitle = {A {Toolkit} for {Security} {Awareness} {Training} {Against} {Targeted} {Phishing}},\\n\\tisbn = {978-3-030-65609-6},\\n\\turl = {https://www.researchgate.net/publication/347625933_A_Toolkit_for_Security_Awareness_Training_Against_Targeted_Phishing},\\n\\tabstract = {The attack landscape is evolving, and attackers are employing new techniques to launch increasingly targeted and sophisticated social engineering attacks that exploit human vulnerabilities. Many organizations provide their employees with security awareness training to counter and mitigate such threats. However, recent studies have shown that current embedded phishing training programs and tools are often ineffective or incapable of addressing modern, tailored social engineering attacks. This paper presents a toolkit for the deployment of sophisticated, tailored phishing campaigns at scale (e.g., to deploy specific training within an organization). We enable the use of highly customizable phishing email templates that can be instantiated with a large range of information about the specific target and a semi-automated process for the selection of the phishing domain name. We demonstrate our tool by showing how tailored phishing campaigns proposed in previous studies can be enhanced to increase the credibility of the phishing email, effectively addressing the very limitations identified in those studies.},\\n\\tauthor = {Pirocca, Simone and Allodi, Luca and Zannone, Nicola},\\n\\tmonth = dec,\\n\\tyear = {2020},\\n\\tdoi = {10.1007/978-3-030-65610-2_9},\\n\\tpages = {137--159},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Pirocca, S.\",\"Allodi, L.\",\"Zannone, N.\"],\"key\":\"pirocca_toolkit_2020\",\"id\":\"pirocca_toolkit_2020\",\"bibbaseid\":\"pirocca-allodi-zannone-atoolkitforsecurityawarenesstrainingagainsttargetedphishing-2020\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://www.researchgate.net/publication/347625933_A_Toolkit_for_Security_Awareness_Training_Against_Targeted_Phishing\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"address\":\"New York, NY, USA\",\"series\":\"ACSAC '20\",\"title\":\"SAIBERSOC: Synthetic Attack Injection to Benchmark and Evaluate the Performance of Security Operation Centers\",\"isbn\":\"978-1-4503-8858-0\",\"shorttitle\":\"SAIBERSOC\",\"url\":\"https://doi.org/10.1145/3427228.3427233\",\"doi\":\"10.1145/3427228.3427233\",\"abstract\":\"In this paper we introduce SAIBERSOC, a tool and methodology enabling security researchers and operators to evaluate the performance of deployed and operational Security Operation Centers (SOCs) (or any other security monitoring infrastructure). The methodology relies on the MITRE ATT&CK Framework to define a procedure to generate and automatically inject synthetic attacks in an operational SOC to evaluate any output metric of interest (e.g., detection accuracy, time-to-investigation, etc.). To evaluate the effectiveness of the proposed methodology, we devise an experiment with n = 124 students playing the role of SOC analysts. The experiment relies on a real SOC infrastructure and assigns students to either a BADSOC or a GOODSOC experimental condition. Our results show that the proposed methodology is effective in identifying variations in SOC performance caused by (minimal) changes in SOC configuration. We release the SAIBERSOC tool implementation as free and open source software.\",\"urldate\":\"2022-01-26\",\"booktitle\":\"Annual Computer Security Applications Conference\",\"publisher\":\"Association for Computing Machinery\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Rosso\"],\"firstnames\":[\"Martin\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Campobasso\"],\"firstnames\":[\"Michele\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Gankhuyag\"],\"firstnames\":[\"Ganduulga\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Allodi\"],\"firstnames\":[\"Luca\"],\"suffixes\":[]}],\"month\":\"December\",\"year\":\"2020\",\"keywords\":\"Cyber Security Operations Center, Evaluation, Performance, SOC\",\"pages\":\"141–153\",\"bibtex\":\"@inproceedings{rosso_saibersoc_2020,\\n\\taddress = {New York, NY, USA},\\n\\tseries = {{ACSAC} '20},\\n\\ttitle = {{SAIBERSOC}: {Synthetic} {Attack} {Injection} to {Benchmark} and {Evaluate} the {Performance} of {Security} {Operation} {Centers}},\\n\\tisbn = {978-1-4503-8858-0},\\n\\tshorttitle = {{SAIBERSOC}},\\n\\turl = {https://doi.org/10.1145/3427228.3427233},\\n\\tdoi = {10.1145/3427228.3427233},\\n\\tabstract = {In this paper we introduce SAIBERSOC, a tool and methodology enabling security researchers and operators to evaluate the performance of deployed and operational Security Operation Centers (SOCs) (or any other security monitoring infrastructure). The methodology relies on the MITRE ATT\\\\&CK Framework to define a procedure to generate and automatically inject synthetic attacks in an operational SOC to evaluate any output metric of interest (e.g., detection accuracy, time-to-investigation, etc.). To evaluate the effectiveness of the proposed methodology, we devise an experiment with n = 124 students playing the role of SOC analysts. The experiment relies on a real SOC infrastructure and assigns students to either a BADSOC or a GOODSOC experimental condition. Our results show that the proposed methodology is effective in identifying variations in SOC performance caused by (minimal) changes in SOC configuration. We release the SAIBERSOC tool implementation as free and open source software.},\\n\\turldate = {2022-01-26},\\n\\tbooktitle = {Annual {Computer} {Security} {Applications} {Conference}},\\n\\tpublisher = {Association for Computing Machinery},\\n\\tauthor = {Rosso, Martin and Campobasso, Michele and Gankhuyag, Ganduulga and Allodi, Luca},\\n\\tmonth = dec,\\n\\tyear = {2020},\\n\\tkeywords = {Cyber Security Operations Center, Evaluation, Performance, SOC},\\n\\tpages = {141--153},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Rosso, M.\",\"Campobasso, M.\",\"Gankhuyag, G.\",\"Allodi, L.\"],\"key\":\"rosso_saibersoc_2020\",\"id\":\"rosso_saibersoc_2020\",\"bibbaseid\":\"rosso-campobasso-gankhuyag-allodi-saibersocsyntheticattackinjectiontobenchmarkandevaluatetheperformanceofsecurityoperationcenters-2020\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://doi.org/10.1145/3427228.3427233\"},\"keyword\":[\"Cyber Security Operations Center\",\"Evaluation\",\"Performance\",\"SOC\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"address\":\"New York, NY, USA\",\"series\":\"CCS '20\",\"title\":\"Impersonation-as-a-Service: Characterizing the Emerging Criminal Infrastructure for User Impersonation at Scale\",\"isbn\":\"978-1-4503-7089-9\",\"shorttitle\":\"Impersonation-as-a-Service\",\"url\":\"https://doi.org/10.1145/3372297.3417892\",\"doi\":\"10.1145/3372297.3417892\",\"abstract\":\"In this paper we provide evidence of an emerging criminal infrastructure enabling impersonation attacks at scale. Impersonation-as-a-Service (IMPaaS) allows attackers to systematically collect and enforce user profiles (consisting of user credentials, cookies, device and behavioural fingerprints, and other metadata) to circumvent risk-based authentication system and effectively bypass multi-factor authentication mechanisms. We present the IMPaaS model and evaluate its implementation by analysing the operation of a large, invite-only, Russian IMPaaS platform providing user profiles for more than 260,000 Internet users worldwide. Our findings suggest that the IMPaaS model is growing, and provides the mechanisms needed to systematically evade authentication controls across multiple platforms, while providing attackers with a reliable, up-to-date, and semi-automated environment enabling target selection and user impersonation against Internet users as scale.\",\"urldate\":\"2022-01-26\",\"booktitle\":\"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security\",\"publisher\":\"Association for Computing Machinery\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Campobasso\"],\"firstnames\":[\"Michele\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Allodi\"],\"firstnames\":[\"Luca\"],\"suffixes\":[]}],\"month\":\"October\",\"year\":\"2020\",\"keywords\":\"impersonation attacks, impersonation-as-a-service, threat modeling, user profiling\",\"pages\":\"1665–1680\",\"bibtex\":\"@inproceedings{campobasso_impersonation-as--service_2020,\\n\\taddress = {New York, NY, USA},\\n\\tseries = {{CCS} '20},\\n\\ttitle = {Impersonation-as-a-{Service}: {Characterizing} the {Emerging} {Criminal} {Infrastructure} for {User} {Impersonation} at {Scale}},\\n\\tisbn = {978-1-4503-7089-9},\\n\\tshorttitle = {Impersonation-as-a-{Service}},\\n\\turl = {https://doi.org/10.1145/3372297.3417892},\\n\\tdoi = {10.1145/3372297.3417892},\\n\\tabstract = {In this paper we provide evidence of an emerging criminal infrastructure enabling impersonation attacks at scale. Impersonation-as-a-Service (IMPaaS) allows attackers to systematically collect and enforce user profiles (consisting of user credentials, cookies, device and behavioural fingerprints, and other metadata) to circumvent risk-based authentication system and effectively bypass multi-factor authentication mechanisms. We present the IMPaaS model and evaluate its implementation by analysing the operation of a large, invite-only, Russian IMPaaS platform providing user profiles for more than 260,000 Internet users worldwide. Our findings suggest that the IMPaaS model is growing, and provides the mechanisms needed to systematically evade authentication controls across multiple platforms, while providing attackers with a reliable, up-to-date, and semi-automated environment enabling target selection and user impersonation against Internet users as scale.},\\n\\turldate = {2022-01-26},\\n\\tbooktitle = {Proceedings of the 2020 {ACM} {SIGSAC} {Conference} on {Computer} and {Communications} {Security}},\\n\\tpublisher = {Association for Computing Machinery},\\n\\tauthor = {Campobasso, Michele and Allodi, Luca},\\n\\tmonth = oct,\\n\\tyear = {2020},\\n\\tkeywords = {impersonation attacks, impersonation-as-a-service, threat modeling, user profiling},\\n\\tpages = {1665--1680},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Campobasso, M.\",\"Allodi, L.\"],\"key\":\"campobasso_impersonation-as--service_2020\",\"id\":\"campobasso_impersonation-as--service_2020\",\"bibbaseid\":\"campobasso-allodi-impersonationasaservicecharacterizingtheemergingcriminalinfrastructureforuserimpersonationatscale-2020\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://doi.org/10.1145/3372297.3417892\"},\"keyword\":[\"impersonation attacks\",\"impersonation-as-a-service\",\"threat modeling\",\"user profiling\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"PICO: Privacy-Preserving Access Control in IoT Scenarios through Incomplete Information\",\"url\":\"https://intersct.nl/wp-content/uploads/2022/01/iot_ac_uncertainty-1.pdf\",\"abstract\":\"Internet of Things (IoT) platforms typically require IoT devices and users to provide fine-grained information to determine whether access to resources and services can be granted. However, this information can be sensitive for users and its disclosure can lead to severe privacy threats, forcing users to decide between receiving a service or protecting their privacy. To close this gap, this work proposes PICO, a framework for privacy-preserving access control in IoT scenarios through incomplete information. PICO allows IoT devices to evaluate the privacy risks of disclosing the information needed to access a service and determine at which level of granularity such information can be disclosed. At the same time, PICO empowers IoT platforms to evaluate access control policies even when incomplete information is provided and possibly grant access to services based on a customized service-dependent risk factor. Through simulations using data from real IoT devices, we show the existence of a trade-off between privacy and energy consumption on IoT devices running PICO, and that more privacy can be achieved for such devices only by sacrificing a consistent portion of the overall energy capacity.\",\"language\":\"en\",\"journal\":\"The 37th ACM/SIGAPP Symposium on Applied Computing (SAC ’22)\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Sciancalepore\"],\"firstnames\":[\"Savio\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Zannone\"],\"firstnames\":[\"Nicola\"],\"suffixes\":[]}],\"month\":\"January\",\"year\":\"2022\",\"pages\":\"10\",\"bibtex\":\"@article{sciancalepore_pico_2022,\\n\\ttitle = {{PICO}: {Privacy}-{Preserving} {Access} {Control} in {IoT} {Scenarios} through {Incomplete} {Information}},\\n\\turl = {https://intersct.nl/wp-content/uploads/2022/01/iot_ac_uncertainty-1.pdf},\\n\\tabstract = {Internet of Things (IoT) platforms typically require IoT devices and users to provide fine-grained information to determine whether access to resources and services can be granted. However, this information can be sensitive for users and its disclosure can lead to severe privacy threats, forcing users to decide between receiving a service or protecting their privacy. To close this gap, this work proposes PICO, a framework for privacy-preserving access control in IoT scenarios through incomplete information. PICO allows IoT devices to evaluate the privacy risks of disclosing the information needed to access a service and determine at which level of granularity such information can be disclosed. At the same time, PICO empowers IoT platforms to evaluate access control policies even when incomplete information is provided and possibly grant access to services based on a customized service-dependent risk factor. Through simulations using data from real IoT devices, we show the existence of a trade-off between privacy and energy consumption on IoT devices running PICO, and that more privacy can be achieved for such devices only by sacrificing a consistent portion of the overall energy capacity.},\\n\\tlanguage = {en},\\n\\tjournal = {The 37th ACM/SIGAPP Symposium on Applied Computing (SAC ’22)},\\n\\tauthor = {Sciancalepore, Savio and Zannone, Nicola},\\n\\tmonth = jan,\\n\\tyear = {2022},\\n\\tpages = {10},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Sciancalepore, S.\",\"Zannone, N.\"],\"key\":\"sciancalepore_pico_2022\",\"id\":\"sciancalepore_pico_2022\",\"bibbaseid\":\"sciancalepore-zannone-picoprivacypreservingaccesscontroliniotscenariosthroughincompleteinformation-2022\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://intersct.nl/wp-content/uploads/2022/01/iot_ac_uncertainty-1.pdf\"},\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"address\":\"Virtual\",\"title\":\"Out of Sight, Out of Mind: Detecting Orphaned Web Pages at Internet-Scale\",\"url\":\"https://dl.acm.org/doi/abs/10.1145/3460120.3485367\",\"doi\":\"https://doi.org/10.1145/3460120.3485367\",\"abstract\":\"Security misconfigurations and neglected updates commonly lead to systems being vulnerable. Especially in the context of websites, we often find pages that were forgotten, that is, they were left online after they served their purpose and never updated thereafter. In this paper, we introduce new methodology to detect such forgotten or orphaned web pages. We combine historic data from the Internet Archive with active measurements to identify pages no longer reachable via a path from the index page, yet stay accessible through their specific URL. We show the efficacy of our approach and the real-world relevance of orphaned web-pages by applying it to a sample of 100,000 domains from the Tranco Top 1M. Leveraging our methodology, we find 1,953 pages on 907 unique domains that are orphaned, some of which are 20 years old. Analyzing their security posture, we find that these pages are significantly (𝑝 \\\\textless 0.01 using 𝜒 2 ) more likely to be vulnerable to crosssite scripting (XSS) and SQL injection (SQLi) vulnerabilities than maintained pages. In fact, orphaned pages are almost ten times as likely to suffer from XSS (19.3%) than maintained pages from a random Internet crawl (2.0%), and maintained pages of websites with some orphans are almost three times as vulnerable (5.9%). Concerning SQLi, maintained pages on websites with some orphans are almost as vulnerable (9.5%) as orphans (10.8%), and both are significantly more likely to be vulnerable than other maintained pages (2.7%). Overall, we see a clear hierarchy: Orphaned pages are the most vulnerable, followed by maintained pages on websites with orphans, with fully maintained sites being least vulnerable. We share an open source implementation of our methodology to enable the reproduction and application of our results in practice.\",\"booktitle\":\"Proc. of ACM Computer and Communication Security\",\"publisher\":\"ACM\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Pletinckx\"],\"firstnames\":[\"Stijn\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Borgolte\"],\"firstnames\":[\"Kevin\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Fiebig\"],\"firstnames\":[\"Tobias\"],\"suffixes\":[]}],\"month\":\"November\",\"year\":\"2021\",\"keywords\":\"INTERSCT\",\"pages\":\"21–35\",\"bibtex\":\"@inproceedings{pletinckx_out_2021,\\n\\taddress = {Virtual},\\n\\ttitle = {Out of {Sight}, {Out} of {Mind}: {Detecting} {Orphaned} {Web} {Pages} at {Internet}-{Scale}},\\n\\turl = {https://dl.acm.org/doi/abs/10.1145/3460120.3485367},\\n\\tdoi = {https://doi.org/10.1145/3460120.3485367},\\n\\tabstract = {Security misconfigurations and neglected updates commonly lead\\nto systems being vulnerable. Especially in the context of websites,\\nwe often find pages that were forgotten, that is, they were left online after they served their purpose and never updated thereafter.\\nIn this paper, we introduce new methodology to detect such forgotten or orphaned web pages. We combine historic data from the\\nInternet Archive with active measurements to identify pages no\\nlonger reachable via a path from the index page, yet stay accessible\\nthrough their specific URL. We show the efficacy of our approach\\nand the real-world relevance of orphaned web-pages by applying\\nit to a sample of 100,000 domains from the Tranco Top 1M.\\nLeveraging our methodology, we find 1,953 pages on 907 unique\\ndomains that are orphaned, some of which are 20 years old. Analyzing their security posture, we find that these pages are significantly (𝑝 {\\\\textless} 0.01 using 𝜒\\n2\\n) more likely to be vulnerable to crosssite scripting (XSS) and SQL injection (SQLi) vulnerabilities than\\nmaintained pages. In fact, orphaned pages are almost ten times as\\nlikely to suffer from XSS (19.3\\\\%) than maintained pages from a random Internet crawl (2.0\\\\%), and maintained pages of websites with\\nsome orphans are almost three times as vulnerable (5.9\\\\%). Concerning SQLi, maintained pages on websites with some orphans\\nare almost as vulnerable (9.5\\\\%) as orphans (10.8\\\\%), and both are\\nsignificantly more likely to be vulnerable than other maintained\\npages (2.7\\\\%). Overall, we see a clear hierarchy: Orphaned pages\\nare the most vulnerable, followed by maintained pages on websites\\nwith orphans, with fully maintained sites being least vulnerable.\\nWe share an open source implementation of our methodology to\\nenable the reproduction and application of our results in practice.},\\n\\tbooktitle = {Proc. of {ACM} {Computer} and {Communication} {Security}},\\n\\tpublisher = {ACM},\\n\\tauthor = {Pletinckx, Stijn and Borgolte, Kevin and Fiebig, Tobias},\\n\\tmonth = nov,\\n\\tyear = {2021},\\n\\tkeywords = {INTERSCT},\\n\\tpages = {21--35},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Pletinckx, S.\",\"Borgolte, K.\",\"Fiebig, T.\"],\"key\":\"pletinckx_out_2021\",\"id\":\"pletinckx_out_2021\",\"bibbaseid\":\"pletinckx-borgolte-fiebig-outofsightoutofminddetectingorphanedwebpagesatinternetscale-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://dl.acm.org/doi/abs/10.1145/3460120.3485367\"},\"keyword\":[\"INTERSCT\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"address\":\"Virtual\",\"title\":\"Mitigating Energy Depletion Attacks in IoT via Random Time-Slotted Channel Access\",\"url\":\"https://intersct.nl/wp-content/uploads/2021/11/2021_Sciancalepore_CNS.pdf\",\"abstract\":\"Energy depletion attacks represent a challenging threat towards the secure and reliable deployment of low-power Internet of Things (IoT) networks. Indeed, by simply transmitting canning standard-compliant packets to a target IoT device, an adversary can quickly exhaust target devices’ available energy and reduce network lifetime, leading to extensive Denial-ofService (DoS). Current solutions to tackle energy depletion attacks mainly rely on ex-post detection of the attack and the adoption of follow-up countermeasures. Still, the cited approaches cannot prevent external adversaries from sending wireless packets to target devices and draining down their energy budget. In this paper, we present RTSCA, a novel countermeasure to energy depletion attacks in IoT networks, that leverages Random Time-Slotted Channel Access. RTSCA randomizes channel access operations executed by a couple of directly-connected IoT devices operating through the IEEE 802.15.4 MAC, significantly reducing the time window of opportunity for the attacker, with little-to-none energy cost on legitimate IoT devices. RTSCA also includes a detection mechanism targeted to the recently-introduced Truncateafter-Preamble (TaP) energy depletion attacks, that leverages the observation of error patterns in the received packets. We carried out an extensive performance assessment campaign on real Openmote-b IoT nodes, showing that RTSCA forces the adversary to behave as a (sub-optimal) reactive jammer to achieve energy depletion attacks. In such a setting, the adversary has to spend between 42.5% and 55% more energy to carry out the attack, while at the same time having no deterministic chances of success\",\"booktitle\":\"Proc. of IEEE Conference on Computer and Communications Security\",\"publisher\":\"IEEE\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Sciancalepore\"],\"firstnames\":[\"Savio\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Tedeschi\"],\"firstnames\":[\"Pietro\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Riasat\"],\"firstnames\":[\"Usman\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Di\",\"Pietro\"],\"firstnames\":[\"Roberto\"],\"suffixes\":[]}],\"month\":\"October\",\"year\":\"2021\",\"keywords\":\"INTERSCT, WP3\",\"bibtex\":\"@inproceedings{sciancalepore_mitigating_2021,\\n\\taddress = {Virtual},\\n\\ttitle = {Mitigating {Energy} {Depletion} {Attacks} in {IoT} via {Random} {Time}-{Slotted} {Channel} {Access}},\\n\\turl = {https://intersct.nl/wp-content/uploads/2021/11/2021_Sciancalepore_CNS.pdf},\\n\\tabstract = {Energy depletion attacks represent a challenging\\nthreat towards the secure and reliable deployment of low-power\\nInternet of Things (IoT) networks. Indeed, by simply transmitting\\ncanning standard-compliant packets to a target IoT device, an\\nadversary can quickly exhaust target devices’ available energy\\nand reduce network lifetime, leading to extensive Denial-ofService (DoS). Current solutions to tackle energy depletion attacks\\nmainly rely on ex-post detection of the attack and the adoption\\nof follow-up countermeasures. Still, the cited approaches cannot\\nprevent external adversaries from sending wireless packets to\\ntarget devices and draining down their energy budget.\\nIn this paper, we present RTSCA, a novel countermeasure to\\nenergy depletion attacks in IoT networks, that leverages Random\\nTime-Slotted Channel Access. RTSCA randomizes channel access\\noperations executed by a couple of directly-connected IoT devices\\noperating through the IEEE 802.15.4 MAC, significantly reducing\\nthe time window of opportunity for the attacker, with little-to-none\\nenergy cost on legitimate IoT devices. RTSCA also includes a detection mechanism targeted to the recently-introduced Truncateafter-Preamble (TaP) energy depletion attacks, that leverages\\nthe observation of error patterns in the received packets. We\\ncarried out an extensive performance assessment campaign on\\nreal Openmote-b IoT nodes, showing that RTSCA forces the\\nadversary to behave as a (sub-optimal) reactive jammer to achieve\\nenergy depletion attacks. In such a setting, the adversary has to\\nspend between 42.5\\\\% and 55\\\\% more energy to carry out the\\nattack, while at the same time having no deterministic chances\\nof success},\\n\\tbooktitle = {Proc. of {IEEE} {Conference} on {Computer} and {Communications} {Security}},\\n\\tpublisher = {IEEE},\\n\\tauthor = {Sciancalepore, Savio and Tedeschi, Pietro and Riasat, Usman and Di Pietro, Roberto},\\n\\tmonth = oct,\\n\\tyear = {2021},\\n\\tkeywords = {INTERSCT, WP3},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Sciancalepore, S.\",\"Tedeschi, P.\",\"Riasat, U.\",\"Di Pietro, R.\"],\"key\":\"sciancalepore_mitigating_2021\",\"id\":\"sciancalepore_mitigating_2021\",\"bibbaseid\":\"sciancalepore-tedeschi-riasat-dipietro-mitigatingenergydepletionattacksiniotviarandomtimeslottedchannelaccess-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://intersct.nl/wp-content/uploads/2021/11/2021_Sciancalepore_CNS.pdf\"},\"keyword\":[\"INTERSCT\",\"WP3\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"address\":\"Virtual\",\"title\":\"ARID – Anonymous Remote Identication of Unmanned Aerial Vehicles\",\"url\":\"https://intersct.nl/wp-content/uploads/2021/11/2021_Tedeschi_ACSAC.pdf\",\"abstract\":\"To enable enhanced accountability of Unmanned Aerial Vehicles (UAVs) operations, the US-based Federal Avionics Administration (FAA) recently published a new dedicated regulation, namely RemoteID, requiring UAV operators to broadcast messages reporting their identity and location. The enforcement of such a rule, mandatory by 2022, generated significant concerns on UAV operators, primarily because of privacy issues derived by the indiscriminate broadcast of the plain-text identity of the UAV on the wireless channel. In this paper, we propose ARID, a solution enabling RemoteIDcompliant Anonymous Remote Identification of UAVs. The adoption of ARID allows UAVs to broadcast RemoteID-compliant messages using ephemeral pseudonyms that only a Trusted Authority, such as the FAA, can link to the long-term identifier of the UAV and its operator. Moreover, ARID also enforces UAV message authenticity, to protect UAVs against impersonation and spoofed reporting, while requiring an overall minimal toll on the battery budget. Furthermore, ARID generates negligible overhead on the Trusted Authority, not requiring the secure maintenance of any private database. While the security properties of ARID are thoroughly discussed and formally verified with ProVerif, we also implemented a prototype of ARID on a real UAV, i.e., the 3DR-Solo drone, integrating our solution within the popular Poky Operating System, on top of the widespread MAVLink protocol. Our experimental performance evaluation shows that the most demanding configuration of ARID takes only ≈ 11.23 ms to generate a message and requires a mere 4.72 mJ of energy. Finally, we also released the source code of ARID to foster further investigations and development by Academia, Industry, and practitioners\",\"booktitle\":\"Proc. of ACM Annual Computer Security Applications Conference (ACSAC)\",\"publisher\":\"ACM\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Tedeschi\"],\"firstnames\":[\"Pietro\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Sciancalepore\"],\"firstnames\":[\"Savio\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Di\",\"Pietro\"],\"firstnames\":[\"Roberto\"],\"suffixes\":[]}],\"month\":\"December\",\"year\":\"2021\",\"keywords\":\"INTERSCT, WP3, WP56\",\"bibtex\":\"@inproceedings{tedeschi_arid_2021,\\n\\taddress = {Virtual},\\n\\ttitle = {{ARID} – {Anonymous} {Remote} {Identication} of {Unmanned} {Aerial} {Vehicles}},\\n\\turl = {https://intersct.nl/wp-content/uploads/2021/11/2021_Tedeschi_ACSAC.pdf},\\n\\tabstract = {To enable enhanced accountability of Unmanned Aerial Vehicles\\n(UAVs) operations, the US-based Federal Avionics Administration\\n(FAA) recently published a new dedicated regulation, namely RemoteID, requiring UAV operators to broadcast messages reporting\\ntheir identity and location. The enforcement of such a rule, mandatory by 2022, generated significant concerns on UAV operators,\\nprimarily because of privacy issues derived by the indiscriminate\\nbroadcast of the plain-text identity of the UAV on the wireless\\nchannel.\\nIn this paper, we propose ARID, a solution enabling RemoteIDcompliant Anonymous Remote Identification of UAVs. The adoption\\nof ARID allows UAVs to broadcast RemoteID-compliant messages\\nusing ephemeral pseudonyms that only a Trusted Authority, such\\nas the FAA, can link to the long-term identifier of the UAV and its\\noperator. Moreover, ARID also enforces UAV message authenticity,\\nto protect UAVs against impersonation and spoofed reporting, while\\nrequiring an overall minimal toll on the battery budget. Furthermore, ARID generates negligible overhead on the Trusted Authority,\\nnot requiring the secure maintenance of any private database.\\nWhile the security properties of ARID are thoroughly discussed\\nand formally verified with ProVerif, we also implemented a prototype of ARID on a real UAV, i.e., the 3DR-Solo drone, integrating our\\nsolution within the popular Poky Operating System, on top of the\\nwidespread MAVLink protocol. Our experimental performance evaluation shows that the most demanding configuration of ARID takes\\nonly ≈ 11.23 ms to generate a message and requires a mere 4.72 mJ\\nof energy. Finally, we also released the source code of ARID to foster\\nfurther investigations and development by Academia, Industry, and practitioners},\\n\\tbooktitle = {Proc. of {ACM} {Annual} {Computer} {Security} {Applications} {Conference} ({ACSAC})},\\n\\tpublisher = {ACM},\\n\\tauthor = {Tedeschi, Pietro and Sciancalepore, Savio and Di Pietro, Roberto},\\n\\tmonth = dec,\\n\\tyear = {2021},\\n\\tkeywords = {INTERSCT, WP3, WP56},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Tedeschi, P.\",\"Sciancalepore, S.\",\"Di Pietro, R.\"],\"key\":\"tedeschi_arid_2021\",\"id\":\"tedeschi_arid_2021\",\"bibbaseid\":\"tedeschi-sciancalepore-dipietro-aridanonymousremoteidenticationofunmannedaerialvehicles-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://intersct.nl/wp-content/uploads/2021/11/2021_Tedeschi_ACSAC.pdf\"},\"keyword\":[\"INTERSCT\",\"WP3\",\"WP56\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"address\":\"Virtual\",\"series\":\"LNICST\",\"title\":\"Compromised through Compression – Privacy Implications of Smart Meter Traffic Analysis\",\"volume\":\"399\",\"url\":\"https://link.springer.com/chapter/10.1007%2F978-3-030-90022-9_16\",\"doi\":\"10.1007/978-3-030-90022-9_16\",\"abstract\":\"Smart metering comes with risks to privacy. One concern is the possibility of an attacker seeing the traffic that reports the energy use of a household and deriving private information from that. Encryption helps to mask the actual energy measurements, but is not sufficient to cover all risks. One aspect which has yet gone unexplored – and where encryption does not help – is traffic analysis, i.e. whether the length of messages communicating energy measurements can leak privacy-sensitive information to an observer. In this paper we examine whether using encodings or compression for smart metering data could potentially leak information about household energy use. Our analysis is based on the real-world energy use data of ±80 Dutch households. We find that traffic analysis could reveal information about the energy use of individual households if compression is used. As a result, when messages are sent daily, an attacker performing traffic analysis would be able to determine when all the members of a household are away or not using electricity for an entire day. We demonstrate this issue by recognizing when households from our dataset were on holiday. If messages are sent more often, more granular living patterns could likely be determined. We propose a method of encoding the data that is nearly as effective as compression at reducing message size, but does not leak the information that compression leaks. By not requiring compression to achieve the best possible data savings, the risk of traffic analysis is eliminated.\",\"booktitle\":\"Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering 2021\",\"publisher\":\"Springer\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Van\",\"Aubel\"],\"firstnames\":[\"Pol\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Poll\"],\"firstnames\":[\"Erik\"],\"suffixes\":[]}],\"year\":\"2021\",\"keywords\":\"INTERSCT, WP3, WP56\",\"pages\":\"317–337\",\"bibtex\":\"@inproceedings{van_aubel_compromised_2021,\\n\\taddress = {Virtual},\\n\\tseries = {{LNICST}},\\n\\ttitle = {Compromised through {Compression} – {Privacy} {Implications} of {Smart} {Meter} {Traffic} {Analysis}},\\n\\tvolume = {399},\\n\\turl = {https://link.springer.com/chapter/10.1007%2F978-3-030-90022-9_16},\\n\\tdoi = {10.1007/978-3-030-90022-9_16},\\n\\tabstract = {Smart metering comes with risks to privacy. One concern is\\nthe possibility of an attacker seeing the traffic that reports the energy use\\nof a household and deriving private information from that. Encryption\\nhelps to mask the actual energy measurements, but is not sufficient to\\ncover all risks. One aspect which has yet gone unexplored – and where\\nencryption does not help – is traffic analysis, i.e. whether the length of\\nmessages communicating energy measurements can leak privacy-sensitive\\ninformation to an observer. In this paper we examine whether using\\nencodings or compression for smart metering data could potentially leak\\ninformation about household energy use. Our analysis is based on the\\nreal-world energy use data of ±80 Dutch households.\\nWe find that traffic analysis could reveal information about the energy\\nuse of individual households if compression is used. As a result, when\\nmessages are sent daily, an attacker performing traffic analysis would\\nbe able to determine when all the members of a household are away\\nor not using electricity for an entire day. We demonstrate this issue by\\nrecognizing when households from our dataset were on holiday. If messages are sent more often, more granular living patterns could likely be\\ndetermined.\\nWe propose a method of encoding the data that is nearly as effective as\\ncompression at reducing message size, but does not leak the information\\nthat compression leaks. By not requiring compression to achieve the best\\npossible data savings, the risk of traffic analysis is eliminated.},\\n\\tbooktitle = {Lecture {Notes} of the {Institute} for {Computer} {Sciences}, {Social} {Informatics} and {Telecommunications} {Engineering} 2021},\\n\\tpublisher = {Springer},\\n\\tauthor = {Van Aubel, Pol and Poll, Erik},\\n\\tyear = {2021},\\n\\tkeywords = {INTERSCT, WP3, WP56},\\n\\tpages = {317--337},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Van Aubel, P.\",\"Poll, E.\"],\"key\":\"van_aubel_compromised_2021\",\"id\":\"van_aubel_compromised_2021\",\"bibbaseid\":\"vanaubel-poll-compromisedthroughcompressionprivacyimplicationsofsmartmetertrafficanalysis-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://link.springer.com/chapter/10.1007%2F978-3-030-90022-9_16\"},\"keyword\":[\"INTERSCT\",\"WP3\",\"WP56\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Similarity-Based Clustering For IoT Device Classification\",\"doi\":\"10.1109/COINS51742.2021.9524201\",\"abstract\":\"Classifying devices connected to an enterprise network is a fundamental security control that is nevertheless challenging due to the limitations of fingerprint-based classification and black-box machine learning. In this paper, we address such limitations by proposing a similarity-based clustering method. We evaluate our solution and compare it to a state-of-the-art fingerprint-based classification engine using data from 20,000 devices. The results show that we can successfully classify around half of the unclassified devices with a high accuracy. We also validate our approach with domain experts to demonstrate its usability in producing new fingerprinting rules.\",\"booktitle\":\"2021 IEEE International Conference on Omni-Layer Intelligent Systems (COINS)\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Dupont\"],\"firstnames\":[\"Guillaume\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Leite\"],\"firstnames\":[\"Cristoffer\"],\"suffixes\":[]},{\"propositions\":[\"dos\"],\"lastnames\":[\"Santos\"],\"firstnames\":[\"Daniel\",\"Ricardo\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Costante\"],\"firstnames\":[\"Elisa\"],\"suffixes\":[]},{\"propositions\":[\"den\"],\"lastnames\":[\"Hartog\"],\"firstnames\":[\"Jerry\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Etalle\"],\"firstnames\":[\"Sandro\"],\"suffixes\":[]}],\"year\":\"2021\",\"keywords\":\"Classification, Clustering, Fingerprint recognition, INTERSCT, Internet of Things, Machine learning, Manuals, Performance evaluation, Process control, Reliability engineering, Semantics\",\"pages\":\"1–7\",\"bibtex\":\"@inproceedings{dupont_similarity-based_2021,\\n\\ttitle = {Similarity-{Based} {Clustering} {For} {IoT} {Device} {Classification}},\\n\\tdoi = {10.1109/COINS51742.2021.9524201},\\n\\tabstract = {Classifying devices connected to an enterprise network is a fundamental security control that is nevertheless challenging due to the limitations of fingerprint-based classification and black-box machine learning. In this paper, we address such limitations by proposing a similarity-based clustering method. We evaluate our solution and compare it to a state-of-the-art fingerprint-based classification engine using data from 20,000 devices. The results show that we can successfully classify around half of the unclassified devices with a high accuracy. We also validate our approach with domain experts to demonstrate its usability in producing new fingerprinting rules.},\\n\\tbooktitle = {2021 {IEEE} {International} {Conference} on {Omni}-{Layer} {Intelligent} {Systems} ({COINS})},\\n\\tauthor = {Dupont, Guillaume and Leite, Cristoffer and dos Santos, Daniel Ricardo and Costante, Elisa and den Hartog, Jerry and Etalle, Sandro},\\n\\tyear = {2021},\\n\\tkeywords = {Classification, Clustering, Fingerprint recognition, INTERSCT, Internet of Things, Machine learning, Manuals, Performance evaluation, Process control, Reliability engineering, Semantics},\\n\\tpages = {1--7},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Dupont, G.\",\"Leite, C.\",\"dos Santos, D. R.\",\"Costante, E.\",\"den Hartog, J.\",\"Etalle, S.\"],\"key\":\"dupont_similarity-based_2021\",\"id\":\"dupont_similarity-based_2021\",\"bibbaseid\":\"dupont-leite-dossantos-costante-denhartog-etalle-similaritybasedclusteringforiotdeviceclassification-2021\",\"role\":\"author\",\"urls\":{},\"keyword\":[\"Classification\",\"Clustering\",\"Fingerprint recognition\",\"INTERSCT\",\"Internet of Things\",\"Machine learning\",\"Manuals\",\"Performance evaluation\",\"Process control\",\"Reliability engineering\",\"Semantics\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Understanding the Knowledge Gap: How Security Awareness Influences the Adoption of Industrial IoT\",\"url\":\"https://weis2020.econinfosec.org/wp-content/uploads/sites/8/2020/06/weis20-final23.pdf\",\"abstract\":\"The Internet-of-Things is no longer confined to endusers and private homes. Industrial IoT (IIoT) is supposed to improve industrial processes and make them more efficient. However, IIoT technologies may also pose (significant) security threats. Therefore, it is important to understand the balance between security awareness and willingness to adopt IIoT among manufacturing companies.\",\"language\":\"en\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Schrama\"],\"firstnames\":[\"Verena\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Gañán\"],\"firstnames\":[\"Carlo\",\"H\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Aschenbrenner\"],\"firstnames\":[\"Doris\"],\"suffixes\":[]},{\"propositions\":[\"de\"],\"lastnames\":[\"Reuver\"],\"firstnames\":[\"Mark\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Borgolte\"],\"firstnames\":[\"Kevin\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Fiebig\"],\"firstnames\":[\"Tobias\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Delft\"],\"firstnames\":[\"TU\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Schrama\"],\"firstnames\":[\"V\",\"C\",\"M\"],\"suffixes\":[]}],\"year\":\"2020\",\"keywords\":\"INTERSCT\",\"pages\":\"17\",\"bibtex\":\"@inproceedings{schrama_understanding_2020,\\n\\ttitle = {Understanding the {Knowledge} {Gap}: {How} {Security} {Awareness} {Influences} the {Adoption} of {Industrial} {IoT}},\\n\\turl = {https://weis2020.econinfosec.org/wp-content/uploads/sites/8/2020/06/weis20-final23.pdf},\\n\\tabstract = {The Internet-of-Things is no longer confined to endusers and private homes. Industrial IoT (IIoT) is supposed to improve industrial processes and make them more efficient. However, IIoT technologies may also pose (significant) security threats. Therefore, it is important to understand the balance between security awareness and willingness to adopt IIoT among manufacturing companies.},\\n\\tlanguage = {en},\\n\\tauthor = {Schrama, Verena and Gañán, Carlo H and Aschenbrenner, Doris and de Reuver, Mark and Borgolte, Kevin and Fiebig, Tobias and Delft, TU and Schrama, V C M},\\n\\tyear = {2020},\\n\\tkeywords = {INTERSCT},\\n\\tpages = {17},\\n}\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\\n\",\"author_short\":[\"Schrama, V.\",\"Gañán, C. H\",\"Aschenbrenner, D.\",\"de Reuver, M.\",\"Borgolte, K.\",\"Fiebig, T.\",\"Delft, T.\",\"Schrama, V C M\"],\"key\":\"schrama_understanding_2020\",\"id\":\"schrama_understanding_2020\",\"bibbaseid\":\"schrama-gan-aschenbrenner-dereuver-borgolte-fiebig-delft-schrama-understandingtheknowledgegaphowsecurityawarenessinfluencestheadoptionofindustrialiot-2020\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://weis2020.econinfosec.org/wp-content/uploads/sites/8/2020/06/weis20-final23.pdf\"},\"keyword\":[\"INTERSCT\"],\"metadata\":{\"authorlinks\":{}},\"html\":\"\"}],\n      metadata: {\"authorlinks\":{}},\n      ownerID: undefined\n    };\n  </script>\n\n  <script type=\"text/javascript\">\n  var site$;\n  if (typeof $ != 'undefined') {\n    console.log('existing jquery: storing and then restoring');\n    site$ = $;\n    $ = null;\n  }\n  </script>\n\n  <script src=\"https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js\">\n  </script>\n  <script type=\"text/javascript\">\n  if (site$) {\n    console.log('existing jquery: avoiding conflict and restoring');\n    bb$ = $.noConflict(true);\n    $ = site$;\n  } else {\n    bb$ = $;\n  }\n  </script>\n\n  <script src=\"//bibbase.org/js/bibbase.min.js\"\n          type=\"text/javascript\">\n  </script>\n\n  <script type=\"text/javascript\"\n          src=\"https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.1/MathJax.js?config=TeX-AMS-MML_HTMLorMML\">\n  </script>\n  <script type=\"text/x-mathjax-config\">\n    MathJax.Hub.Config({tex2jax: {inlineMath: [['$','$'], ['\\\\(','\\\\)']]},\n                        skipTags: [\"body\"],\n                        processClass: \"bibbase_paper\"});\n  </script>\n\n  <style>\n  @media print {\n    .dontprint {\n        display: none !important;\n    }\n\n  .bibbase_group {\n    background-color: #E0E0E0;\n    font-style: italic;\n    font-size: larger;\n    text-shadow: 0px 0px 3px #FFFFFF;\n    border-radius: 4px 4px 4px 4px;\n    -moz-border-radius: 4px 4px 4px 4px;\n    -webkit-border-radius: 4px;\n    padding: 5px 40px 5px;\n    margin-top: 10px;\n    margin-bottom: 5px;\n    cursor: pointer;\n  }\n\n  .bibbase_paper {\n    margin-bottom: 5px;\n  }\n\n  }\n  </style>\n\n  \n  <div style=\"float: right; margin-right: 10px; margin-top: 10px; text-align: right; font-size: 12px\">\n    generated by\n    <a href=\"//bibbase.org\"\n       onclick=\"trackOutboundLink('bibbase', 'logo clicked', window.location.href, '//bibbase.org'); return false;\">\n      <img src=\"//bibbase.org/img/logo.svg\"\n           style=\"vertical-align: middle; margin-left: 3px; height: 16px;\"/\n           alt=\"bibbase.org\"\n           title=\"BibBase – The easiest way to maintain your publications page.\"\n        ></a>\n    \n  </div>\n  \n\n  <div id=\"bibbase_header\" class=\"dontprint\" style=\"\">\n\n    <ul class=\"nav nav-pills\" style=\"margin: 0px;\">\n\n      <li class=\"dropdown\" id=\"groupby_dropdown\">\n      <a class=\"dropdown-toggle\"\n         data-toggle=\"dropdown\"\n         href=\"#\">\n          Group by\n          <b class=\"caret\"></b>\n      </a>\n      <ul class=\"dropdown-menu\">\n        <li class=\"groupby year\"><a onclick=\"groupby('year')\">\n            Year</a>\n        </li>\n        <li class=\"groupby author\"><a onclick=\"groupby('author_short')\">\n            Author</a>\n        </li>\n        <li class=\"groupby type\"><a onclick=\"groupby('type')\">\n            Type</a>\n        </li>\n        <li class=\"groupby keyword\"><a onclick=\"groupby('keyword')\">\n            Keyword</a>\n        </li>\n        <li class=\"groupby downloads\"><a onclick=\"groupby('downloads')\">\n            Downloads</a>\n        </li>\n      </ul>\n      </li>\n\n\n      <li class=\"dropdown\" id=\"menu_dropdown\">\n      <a class=\"dropdown-toggle\"\n         data-toggle=\"dropdown\"\n         href=\"#\" alt=\"controls\">\n          <i class=\"fa fa-reorder\" alt=\"controls\"></i>\n          <b class=\"caret\"></b>\n      </a>\n      <ul class=\"dropdown-menu\">\n        <li>\n          <a onclick=\"toggleAll()\">\n            <i class=\"fa fa-chevron-down fa-fw\"></i> Expand/Collapse All\n          </a>\n        </li>\n        <li>\n          <a download=\"4530785\" href=\"data:text/bibtex;base64,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\">\n            <i class=\"fa fa-download fa-fw\"></i> Download BibTeX\n          </a>\n        </li>\n        <li>\n          <a href=\"//bibbase.org/rss?bib=https://bibbase.org/zotero-group/hweffers/4530785\">\n            <i class=\"fa fa-rss fa-fw\"></i> RSS Feed\n          </a>\n          </li>\n      </ul>\n      </li>\n\n      \n\n\n      \n    </ul>\n\n\n    <div class=\"alert alert-success bibbase_msg\" id=\"bibbase_msg_embed\"\n         style=\"display: none;\">\n\n      Excellent! Next you can\n      <a href=\"/network/register?next=/network/newSiteFromTemplate%3Fbiburl=https://bibbase.org/zotero-group/hweffers/4530785\"\n      >create a new website with this list</a>, or\n      embed it in an existing web page by copying &amp; pasting\n      any of the following snippets.\n\n      <div style=\"text-align: left; margin-top: 1em;\">\n        <strong>JavaScript</strong>\n        <span class=\"comment recommended\">(easiest)</span>\n        <div class=\"well well-small\">\n          <code>\n            &lt;script src=\"https://bibbase.org/show?bib=https%3A%2F%2Fbibbase.org%2Fzotero-group%2Fhweffers%2F4530785&amp;jsonp=1&amp;jsonp=1\"&gt;&lt;/script&gt;\n          </code>\n        </div>\n\n        <strong>PHP</strong>\n        <div class=\"well well-small\">\n          <code>\n            &lt;?php\n            $contents = file_get_contents(\"https://bibbase.org/show?bib=https%3A%2F%2Fbibbase.org%2Fzotero-group%2Fhweffers%2F4530785&amp;jsonp=1\");\n            print_r($contents);\n            ?&gt;\n          </code>\n        </div>\n\n        <strong>iFrame</strong>\n        <span class=\"comment\">(not recommended)</span>\n        <div class=\"well well-small\">\n          <code>\n            &lt;iframe src=\"https://bibbase.org/show?bib=https%3A%2F%2Fbibbase.org%2Fzotero-group%2Fhweffers%2F4530785&amp;jsonp=1\"&gt;&lt;/iframe&gt;\n          </code>\n        </div>\n\n        <p>\n          For more details see the <a href=\"//bibbase.org/help\">documention</a>.\n        </p>\n      </div>\n    </div>\n\n    <div class=\"alert alert-success bibbase_msg\" id=\"bibbase_msg_preview\"\n         style=\"display: none;\">\n\n      This is a preview! To use this list on your own web site\n      or create a new web site from it,\n      <a href=\"/network/register?next=/network/newAccountWithFile%3FfileId=\"\n      >create a free account</a>. The file will be added\n      and you will be able to edit it in the File Manager.\n      We will show you instructions once you've created your account.\n    </div>\n\n    <div class=\"alert alert-warning bibbase_msg\" id=\"bibbase_msg_mendeley1\"\n         style=\"display: none;\">\n\n      <p>To the site owner:</p>\n\n      <p><strong>Action required!</strong> Mendeley is changing its\n        API. In order to keep using Mendeley with BibBase past April\n        14th, you need to:\n        <ol>\n          <li>renew the authorization for BibBase on Mendeley, and</li>\n          <li>update the BibBase URL\n            in your page the same way you did when you initially set up\n            this page.\n          </li>\n        </ol>\n      </p>\n\n      <p>\n        <a href=\"http://bibbase.org/cgi-bin/mendeley2/get.py\">\n          <i class=\"fa fa-angle-double-right\"></i>\n          Fix it now</a>\n      </p>\n    </div>\n\n  </div>\n\n\n  <div id=\"bibbase_body\">\n    \n  \n  <div class=\"bibbase_group_whole\" id=\"group_2023\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2023')\"\n      onkeypress=\"toggleGroup('group_2023')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2023</span>\n      <span class=\"bibbase_group_count\">\n        \n        (5)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"bibi-ozcelebi-meratnia-aniotattackdetectionframeworkleveraginggraphneuralnetworks-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://link.springer.com/10.1007/978-3-031-46749-3_22\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'bibi-ozcelebi-meratnia-aniotattackdetectionframeworkleveraginggraphneuralnetworks-2023', 'https://link.springer.com/10.1007/978-3-031-46749-3_22', event);\">\n    An IoT Attack Detection Framework Leveraging Graph Neural Networks.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Bibi, I.; Ozcelebi, T.;  and Meratnia, N.\n</span>\n\n  \n\n</span>\n\n  In Dao, N.; Thinh, T. N.;  and Nguyen, N. T., editor(s), <i>Intelligence of Things: Technologies and Applications</i>, volume 188, pages 225–236. Springer Nature Switzerland, Cham,  2023.\n  <span class=\"note\">Series Title: Lecture Notes on Data Engineering and Communications Technologies</span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://link.springer.com/10.1007/978-3-031-46749-3_22\"\n     onclick=\"log_download('bibi-ozcelebi-meratnia-aniotattackdetectionframeworkleveraginggraphneuralnetworks-2023', 'https://link.springer.com/10.1007/978-3-031-46749-3_22', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"An IoT Attack Detection Framework Leveraging Graph Neural Networks [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1007/978-3-031-46749-3_22\"\n     onclick=\"log_download('bibi-ozcelebi-meratnia-aniotattackdetectionframeworkleveraginggraphneuralnetworks-2023', 'http://doi.org/10.1007/978-3-031-46749-3_22', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/bibi-ozcelebi-meratnia-aniotattackdetectionframeworkleveraginggraphneuralnetworks-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('bibi-ozcelebi-meratnia-aniotattackdetectionframeworkleveraginggraphneuralnetworks-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@incollection{dao_iot_2023,\n\taddress = {Cham},\n\ttitle = {An {IoT} {Attack} {Detection} {Framework} {Leveraging} {Graph} {Neural} {Networks}},\n\tvolume = {188},\n\tisbn = {978-3-031-46748-6 978-3-031-46749-3},\n\turl = {https://link.springer.com/10.1007/978-3-031-46749-3_22},\n\tlanguage = {en},\n\turldate = {2024-02-02},\n\tbooktitle = {Intelligence of {Things}: {Technologies} and {Applications}},\n\tpublisher = {Springer Nature Switzerland},\n\tauthor = {Bibi, Iram and Ozcelebi, Tanir and Meratnia, Nirvana},\n\teditor = {Dao, Nhu-Ngoc and Thinh, Tran Ngoc and Nguyen, Ngoc Thanh},\n\tyear = {2023},\n\tdoi = {10.1007/978-3-031-46749-3_22},\n\tnote = {Series Title: Lecture Notes on Data Engineering and Communications Technologies},\n\tpages = {225--236},\n}\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"gustafson-grosen-redini-jha-continella-wang-fu-rampazzi-etal-shimwaretowardpracticalsecurityretrofittingformonolithicfirmwareimages-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://dl.acm.org/doi/10.1145/3607199.3607217\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'gustafson-grosen-redini-jha-continella-wang-fu-rampazzi-etal-shimwaretowardpracticalsecurityretrofittingformonolithicfirmwareimages-2023', 'https://dl.acm.org/doi/10.1145/3607199.3607217', event);\">\n    Shimware: Toward Practical Security Retrofitting for Monolithic Firmware Images.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Gustafson, E.; Grosen, P.; Redini, N.; Jha, S.; Continella, A.; Wang, R.; Fu, K.; Rampazzi, S.; Kruegel, C.;  and Vigna, G.\n</span>\n\n  \n\n</span>\n\n  In <i>Proceedings of the 26th International Symposium on Research in Attacks, Intrusions and Defenses</i>, pages 32–45, Hong Kong China, October 2023. ACM\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://dl.acm.org/doi/10.1145/3607199.3607217\"\n     onclick=\"log_download('gustafson-grosen-redini-jha-continella-wang-fu-rampazzi-etal-shimwaretowardpracticalsecurityretrofittingformonolithicfirmwareimages-2023', 'https://dl.acm.org/doi/10.1145/3607199.3607217', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Shimware: Toward Practical Security Retrofitting for Monolithic Firmware Images [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1145/3607199.3607217\"\n     onclick=\"log_download('gustafson-grosen-redini-jha-continella-wang-fu-rampazzi-etal-shimwaretowardpracticalsecurityretrofittingformonolithicfirmwareimages-2023', 'http://doi.org/10.1145/3607199.3607217', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/gustafson-grosen-redini-jha-continella-wang-fu-rampazzi-etal-shimwaretowardpracticalsecurityretrofittingformonolithicfirmwareimages-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>1 download</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('gustafson-grosen-redini-jha-continella-wang-fu-rampazzi-etal-shimwaretowardpracticalsecurityretrofittingformonolithicfirmwareimages-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{gustafson_shimware_2023,\n\taddress = {Hong Kong China},\n\ttitle = {Shimware: {Toward} {Practical} {Security} {Retrofitting} for {Monolithic} {Firmware} {Images}},\n\tisbn = {9798400707650},\n\tshorttitle = {Shimware},\n\turl = {https://dl.acm.org/doi/10.1145/3607199.3607217},\n\tdoi = {10.1145/3607199.3607217},\n\tlanguage = {en},\n\turldate = {2024-02-02},\n\tbooktitle = {Proceedings of the 26th {International} {Symposium} on {Research} in {Attacks}, {Intrusions} and {Defenses}},\n\tpublisher = {ACM},\n\tauthor = {Gustafson, Eric and Grosen, Paul and Redini, Nilo and Jha, Saagar and Continella, Andrea and Wang, Ruoyu and Fu, Kevin and Rampazzi, Sara and Kruegel, Christopher and Vigna, Giovanni},\n\tmonth = oct,\n\tyear = {2023},\n\tpages = {32--45},\n}\n\n\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"gupta-vanede-continella-honeykubedesigninganddeployingamicroservicesbasedwebhoneypot-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://ris.utwente.nl/ws/portalfiles/portal/303815192/main.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'gupta-vanede-continella-honeykubedesigninganddeployingamicroservicesbasedwebhoneypot-2023', 'https://ris.utwente.nl/ws/portalfiles/portal/303815192/main.pdf', event);\">\n    HoneyKube: Designing and Deploying a Microservices-based Web Honeypot.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Gupta, C.; van Ede, T.;  and Continella, A.\n</span>\n\n  \n\n</span>\n\n  In <i>Proceedings of the SecWeb Workshop (SecWeb)</i>,  2023. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://ris.utwente.nl/ws/portalfiles/portal/303815192/main.pdf\"\n     onclick=\"log_download('gupta-vanede-continella-honeykubedesigninganddeployingamicroservicesbasedwebhoneypot-2023', 'https://ris.utwente.nl/ws/portalfiles/portal/303815192/main.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"HoneyKube: Designing and Deploying a Microservices-based Web Honeypot [pdf]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/gupta-vanede-continella-honeykubedesigninganddeployingamicroservicesbasedwebhoneypot-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>1 download</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('gupta-vanede-continella-honeykubedesigninganddeployingamicroservicesbasedwebhoneypot-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{gupta_honeykube_2023,\n\ttitle = {{HoneyKube}: {Designing} and {Deploying} a {Microservices}-based {Web} {Honeypot}},\n\turl = {https://ris.utwente.nl/ws/portalfiles/portal/303815192/main.pdf},\n\tbooktitle = {Proceedings of the {SecWeb} {Workshop} ({SecWeb})},\n\tauthor = {Gupta, Chakshu and van Ede, Thijs and Continella, Andrea},\n\tyear = {2023},\n}\n\n\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"ibrahim-continella-bianchi-aotattackonthingsasecurityanalysisofiotrmwareupdates-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://research.utwente.nl/files/303815289/main.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'ibrahim-continella-bianchi-aotattackonthingsasecurityanalysisofiotrmwareupdates-2023', 'https://research.utwente.nl/files/303815289/main.pdf', event);\">\n    AoT - Attack on Things: A security analysis of IoT firmware updates.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Ibrahim, M.; Continella, A.;  and Bianchi, A.\n</span>\n\n  \n\n</span>\n\n  In  2023. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://research.utwente.nl/files/303815289/main.pdf\"\n     onclick=\"log_download('ibrahim-continella-bianchi-aotattackonthingsasecurityanalysisofiotrmwareupdates-2023', 'https://research.utwente.nl/files/303815289/main.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"AoT - Attack on Things: A security analysis of IoT firmware updates [pdf]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/ibrahim-continella-bianchi-aotattackonthingsasecurityanalysisofiotrmwareupdates-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('ibrahim-continella-bianchi-aotattackonthingsasecurityanalysisofiotrmwareupdates-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{ibrahim_aot_2023,\n\ttitle = {{AoT} - {Attack} on {Things}: {A} security analysis of {IoT} firmware updates},\n\turl = {https://research.utwente.nl/files/303815289/main.pdf},\n\tabstract = {IoT devices implement firmware update mechanisms to fix security issues and deploy new features. These mechanisms are often triggered and mediated by mobile companion apps running on the users’ smartphones. While it is crucial to update devices, these mechanisms may cause critical security flaws if they are not implemented correctly. Given their relevance, in this paper, we perform a systematic security analysis of the firmware update mechanisms adopted by IoT devices via their companion apps. First, we define a threat model for IoT firmware updates, and we categorize the different potential security issues affecting them. Then, we analyze 23 popular IoT devices (and corresponding companion apps) to identify vulnerable devices and the SDKs that such devices use to implement the update functionality. Our analysis reveals that 6 popular SDKs present dangerous security flaws. Additionally, we fingerprint each vulnerable SDK and we leverage our fingerprints to perform a largescale analysis of companion apps from the Google Play Store. Our results show that 61 popular devices and 1,356 apps rely on vulnerable SDKs, thus, they potentially adopt an insecure firmware update mechanism.},\n\tlanguage = {en},\n\tauthor = {Ibrahim, Muhammad and Continella, Andrea and Bianchi, Antonio},\n\tyear = {2023},\n}\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  IoT devices implement firmware update mechanisms to fix security issues and deploy new features. These mechanisms are often triggered and mediated by mobile companion apps running on the users’ smartphones. While it is crucial to update devices, these mechanisms may cause critical security flaws if they are not implemented correctly. Given their relevance, in this paper, we perform a systematic security analysis of the firmware update mechanisms adopted by IoT devices via their companion apps. First, we define a threat model for IoT firmware updates, and we categorize the different potential security issues affecting them. Then, we analyze 23 popular IoT devices (and corresponding companion apps) to identify vulnerable devices and the SDKs that such devices use to implement the update functionality. Our analysis reveals that 6 popular SDKs present dangerous security flaws. Additionally, we fingerprint each vulnerable SDK and we leverage our fingerprints to perform a largescale analysis of companion apps from the Google Play Store. Our results show that 61 popular devices and 1,356 apps rely on vulnerable SDKs, thus, they potentially adopt an insecure firmware update mechanism.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"george-sciancalepore-zannone-privacypreservingmultipartyaccesscontrolforthirdpartyuavservices-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://dl.acm.org/doi/10.1145/3589608.3593837\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'george-sciancalepore-zannone-privacypreservingmultipartyaccesscontrolforthirdpartyuavservices-2023', 'https://dl.acm.org/doi/10.1145/3589608.3593837', event);\">\n    Privacy-Preserving Multi-Party Access Control for Third-Party UAV Services.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  George, D. R.; Sciancalepore, S.;  and Zannone, N.\n</span>\n\n  \n\n</span>\n\n  In <i>Proceedings of the 28th ACM Symposium on Access Control Models and Technologies</i>, pages 19–30, Trento Italy, May 2023. ACM\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://dl.acm.org/doi/10.1145/3589608.3593837\"\n     onclick=\"log_download('george-sciancalepore-zannone-privacypreservingmultipartyaccesscontrolforthirdpartyuavservices-2023', 'https://dl.acm.org/doi/10.1145/3589608.3593837', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Privacy-Preserving Multi-Party Access Control for Third-Party UAV Services [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1145/3589608.3593837\"\n     onclick=\"log_download('george-sciancalepore-zannone-privacypreservingmultipartyaccesscontrolforthirdpartyuavservices-2023', 'http://doi.org/10.1145/3589608.3593837', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/george-sciancalepore-zannone-privacypreservingmultipartyaccesscontrolforthirdpartyuavservices-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('george-sciancalepore-zannone-privacypreservingmultipartyaccesscontrolforthirdpartyuavservices-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{george_privacy-preserving_2023,\n\taddress = {Trento Italy},\n\ttitle = {Privacy-{Preserving} {Multi}-{Party} {Access} {Control} for {Third}-{Party} {UAV} {Services}},\n\tisbn = {9798400701733},\n\turl = {https://dl.acm.org/doi/10.1145/3589608.3593837},\n\tdoi = {10.1145/3589608.3593837},\n\tlanguage = {en},\n\turldate = {2023-05-31},\n\tbooktitle = {Proceedings of the 28th {ACM} {Symposium} on {Access} {Control} {Models} and {Technologies}},\n\tpublisher = {ACM},\n\tauthor = {George, Dominik Roy and Sciancalepore, Savio and Zannone, Nicola},\n\tmonth = may,\n\tyear = {2023},\n\tpages = {19--30},\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2022\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2022')\"\n      onkeypress=\"toggleGroup('group_2022')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2022</span>\n      <span class=\"bibbase_group_count\">\n        \n        (7)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"alvarenga-brands-doliwa-denhartog-kraft-medwed-nikov-renes-etal-cyberresiliencefortheinternetofthingsimplementationswithresilienceenginesandattackclassifications-2022\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://ieeexplore.ieee.org/document/10003259/\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'alvarenga-brands-doliwa-denhartog-kraft-medwed-nikov-renes-etal-cyberresiliencefortheinternetofthingsimplementationswithresilienceenginesandattackclassifications-2022', 'https://ieeexplore.ieee.org/document/10003259/', event);\">\n    Cyber Resilience for the Internet of Things: Implementations with Resilience Engines and Attack Classifications.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Alvarenga, E.; Brands, J. R.; Doliwa, P.; Den Hartog, J.; Kraft, E.; Medwed, M.; Nikov, V.; Renes, J.; Rosso, M.; Schneider, T.;  and Veshchikov, N.\n</span>\n\n  \n\n</span>\n\n  <i>IEEE Transactions on Emerging Topics in Computing</i>,1–16.  2022.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://ieeexplore.ieee.org/document/10003259/\"\n     onclick=\"log_download('alvarenga-brands-doliwa-denhartog-kraft-medwed-nikov-renes-etal-cyberresiliencefortheinternetofthingsimplementationswithresilienceenginesandattackclassifications-2022', 'https://ieeexplore.ieee.org/document/10003259/', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Cyber Resilience for the Internet of Things: Implementations with Resilience Engines and Attack Classifications [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1109/TETC.2022.3231692\"\n     onclick=\"log_download('alvarenga-brands-doliwa-denhartog-kraft-medwed-nikov-renes-etal-cyberresiliencefortheinternetofthingsimplementationswithresilienceenginesandattackclassifications-2022', 'http://doi.org/10.1109/TETC.2022.3231692', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/alvarenga-brands-doliwa-denhartog-kraft-medwed-nikov-renes-etal-cyberresiliencefortheinternetofthingsimplementationswithresilienceenginesandattackclassifications-2022\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('alvarenga-brands-doliwa-denhartog-kraft-medwed-nikov-renes-etal-cyberresiliencefortheinternetofthingsimplementationswithresilienceenginesandattackclassifications-2022')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{alvarenga_cyber_2022,\n\ttitle = {Cyber {Resilience} for the {Internet} of {Things}: {Implementations} with {Resilience} {Engines} and {Attack} {Classifications}},\n\tissn = {2168-6750, 2376-4562},\n\tshorttitle = {Cyber {Resilience} for the {Internet} of {Things}},\n\turl = {https://ieeexplore.ieee.org/document/10003259/},\n\tdoi = {10.1109/TETC.2022.3231692},\n\tabstract = {Recently, the number of publicized attacks on IoT devices has noticeably grown. This is in part due to the increasing deployment of embedded systems into various domains, including critical infrastructure, which makes them a valuable asset and a compromise can cause significant damages. In this case, it is often required to send an engineer to manually recover the devices, as the attack leaves them out of reach of standard remote management solutions. To avoid this costly process, the concept of cyber resilience has gained traction in recent years in both academia and industry. Its core idea is to enable compromised devices to recover themselves to a trusted state without human intervention. Initial guidelines and architectures to realize cyber resilience have been published by standardization entities like NIST and TCG, and in multiple academic papers. While the initial works focused on guaranteed recovery, recent proposals included attack detection to speed up the recovery process. In this work, we build on top of these ideas and present an extended resilience architecture. We present new implementations of resilience engines with a focus on secure and reliable data acquisition for attack detection and classification. Our attack classification engine enables tailored, more efficient recovery responses.},\n\turldate = {2024-02-03},\n\tjournal = {IEEE Transactions on Emerging Topics in Computing},\n\tauthor = {Alvarenga, Eduardo and Brands, Jan R. and Doliwa, Peter and Den Hartog, Jerry and Kraft, Erik and Medwed, Marcel and Nikov, Ventzislav and Renes, Joost and Rosso, Martin and Schneider, Tobias and Veshchikov, Nikita},\n\tyear = {2022},\n\tpages = {1--16},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Recently, the number of publicized attacks on IoT devices has noticeably grown. This is in part due to the increasing deployment of embedded systems into various domains, including critical infrastructure, which makes them a valuable asset and a compromise can cause significant damages. In this case, it is often required to send an engineer to manually recover the devices, as the attack leaves them out of reach of standard remote management solutions. To avoid this costly process, the concept of cyber resilience has gained traction in recent years in both academia and industry. Its core idea is to enable compromised devices to recover themselves to a trusted state without human intervention. Initial guidelines and architectures to realize cyber resilience have been published by standardization entities like NIST and TCG, and in multiple academic papers. While the initial works focused on guaranteed recovery, recent proposals included attack detection to speed up the recovery process. In this work, we build on top of these ideas and present an extended resilience architecture. We present new implementations of resilience engines with a focus on secure and reliable data acquisition for attack detection and classification. Our attack classification engine enables tailored, more efficient recovery responses.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"george-sciancalepore-prmprivateinterferencediscoveryforieee802154networks-2022\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://doi.org/10.1109/CNS56114.2022.9947236\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'george-sciancalepore-prmprivateinterferencediscoveryforieee802154networks-2022', 'https://doi.org/10.1109/CNS56114.2022.9947236', event);\">\n    PRM - Private Interference Discovery for IEEE 802.15. 4 Networks.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  George, D. R.;  and Sciancalepore, S.\n</span>\n\n  \n\n</span>\n\n  In <i>2022 IEEE Conference on Communications and Network Security (CNS)</i>, pages 136–144,  2022. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://doi.org/10.1109/CNS56114.2022.9947236\"\n     onclick=\"log_download('george-sciancalepore-prmprivateinterferencediscoveryforieee802154networks-2022', 'https://doi.org/10.1109/CNS56114.2022.9947236', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"PRM - Private Interference Discovery for IEEE 802.15. 4 Networks [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1109/CNS56114.2022.9947236\"\n     onclick=\"log_download('george-sciancalepore-prmprivateinterferencediscoveryforieee802154networks-2022', 'http://doi.org/10.1109/CNS56114.2022.9947236', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/george-sciancalepore-prmprivateinterferencediscoveryforieee802154networks-2022\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('george-sciancalepore-prmprivateinterferencediscoveryforieee802154networks-2022')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{george_prm_2022,\n\ttitle = {{PRM} - {Private} {Interference} {Discovery} for {IEEE} 802.15. 4 {Networks}},\n\turl = {https://doi.org/10.1109/CNS56114.2022.9947236},\n\tdoi = {10.1109/CNS56114.2022.9947236},\n\tabstract = {Due to the mobile and pervasive nature of IoT networks, even more frequently, multiple IoT networks managed by different network administrators share the same spectrum and operate in the same area, leading to packet losses and degradation of the Quality of Service (QoS). Assuming the use of the widespread IEEE 802.15.4 communication technology, the most straightforward solution would be to allow the networks to share the local Radio Scheduling Table (RST) to optimize channel access. However, exchanging the RST can leak several key information, such as the topology of the network, the number of devices, and the channel access patterns. To address such problems, we present PRM, the first scheme for discovering in advance potential interferences among IEEE 802.15.4 networks, without exposing the whole RST to untrusted parties. Our solution adapts a protocol for Private Set Intersection, while combining it with an innovative iterative set division algorithm, making the whole solution feasible on constrained devices of the IoT domain. Our experimental performance assessment, carried out on heterogeneous devices, shows that PRM can discover colliding channel assignments in less than 1 sec. on more capable embedded devices (e.g., the Raspberry PI), while also being feasible for more constrained platforms (e.g., the ESPCopter), depending on the amount of used radio resources.},\n\tbooktitle = {2022 {IEEE} {Conference} on {Communications} and {Network} {Security} ({CNS})},\n\tauthor = {George, Dominik Roy and Sciancalepore, Savio},\n\tyear = {2022},\n\tkeywords = {IEEE 802.15 Standard, Interference, IoT Security, Network topology, Packet loss, Performance evaluation, Privacy-Enhancing Technologies, Private Set Intersection, Protocols, Quality of service},\n\tpages = {136--144},\n}\n\n\n\n\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Due to the mobile and pervasive nature of IoT networks, even more frequently, multiple IoT networks managed by different network administrators share the same spectrum and operate in the same area, leading to packet losses and degradation of the Quality of Service (QoS). Assuming the use of the widespread IEEE 802.15.4 communication technology, the most straightforward solution would be to allow the networks to share the local Radio Scheduling Table (RST) to optimize channel access. However, exchanging the RST can leak several key information, such as the topology of the network, the number of devices, and the channel access patterns. To address such problems, we present PRM, the first scheme for discovering in advance potential interferences among IEEE 802.15.4 networks, without exposing the whole RST to untrusted parties. Our solution adapts a protocol for Private Set Intersection, while combining it with an innovative iterative set division algorithm, making the whole solution feasible on constrained devices of the IoT domain. Our experimental performance assessment, carried out on heterogeneous devices, shows that PRM can discover colliding channel assignments in less than 1 sec. on more capable embedded devices (e.g., the Raspberry PI), while also being feasible for more constrained platforms (e.g., the ESPCopter), depending on the amount of used radio resources.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"sciancalepore-george-privacypreservingtrajectorymatchingonautonomousunmannedaerialvehicles-2022\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  Privacy-Preserving Trajectory Matching on Autonomous Unmanned Aerial Vehicles.\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Sciancalepore, S.;  and George, D. R.\n</span>\n\n  \n\n</span>\n\n  In <i>Proceedings of the 38th Annual Computer Security Applications Conference</i>,  2022. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n\n  \n  <a href=\"http://doi.org/https://doi.org/10.1145/3564625.3564626\"\n     onclick=\"log_download('sciancalepore-george-privacypreservingtrajectorymatchingonautonomousunmannedaerialvehicles-2022', 'http://doi.org/https://doi.org/10.1145/3564625.3564626', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/sciancalepore-george-privacypreservingtrajectorymatchingonautonomousunmannedaerialvehicles-2022\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('sciancalepore-george-privacypreservingtrajectorymatchingonautonomousunmannedaerialvehicles-2022')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{sciancalepore_privacy-preserving_2022,\n\ttitle = {Privacy-{Preserving} {Trajectory} {Matching} on {Autonomous} {Unmanned} {Aerial} {Vehicles}},\n\tdoi = {https://doi.org/10.1145/3564625.3564626},\n\tbooktitle = {Proceedings of the 38th {Annual} {Computer} {Security} {Applications} {Conference}},\n\tauthor = {Sciancalepore, Savio and George, Dominik Roy},\n\tyear = {2022},\n}\n\n\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"lucamorgesezangrandi-thijsvanede-timbooij-saviosciancalepore-lucaallodi-andreacontinella-steppingoutofthemudcontextualthreatinformationforiotdeviceswithmanufacturerprovidedbehaviourprofiles-2022\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://vm-thijs.ewi.utwente.nl/static/homepage/papers/mudscope.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'lucamorgesezangrandi-thijsvanede-timbooij-saviosciancalepore-lucaallodi-andreacontinella-steppingoutofthemudcontextualthreatinformationforiotdeviceswithmanufacturerprovidedbehaviourprofiles-2022', 'https://vm-thijs.ewi.utwente.nl/static/homepage/papers/mudscope.pdf', event);\">\n    Stepping out of the MUD: Contextual threat information for IoT devices with manufacturer-provided behaviour profiles.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Luca Morgese Zangrandi; Thijs van Ede; Tim Booij; Savio Sciancalepore; Luca Allodi;  and Andrea Continella\n</span>\n\n  \n\n</span>\n\n  In  2022. Association for Computing Machinery\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://vm-thijs.ewi.utwente.nl/static/homepage/papers/mudscope.pdf\"\n     onclick=\"log_download('lucamorgesezangrandi-thijsvanede-timbooij-saviosciancalepore-lucaallodi-andreacontinella-steppingoutofthemudcontextualthreatinformationforiotdeviceswithmanufacturerprovidedbehaviourprofiles-2022', 'https://vm-thijs.ewi.utwente.nl/static/homepage/papers/mudscope.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"Stepping out of the MUD: Contextual threat information for IoT devices with manufacturer-provided behaviour profiles [pdf]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/lucamorgesezangrandi-thijsvanede-timbooij-saviosciancalepore-lucaallodi-andreacontinella-steppingoutofthemudcontextualthreatinformationforiotdeviceswithmanufacturerprovidedbehaviourprofiles-2022\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('lucamorgesezangrandi-thijsvanede-timbooij-saviosciancalepore-lucaallodi-andreacontinella-steppingoutofthemudcontextualthreatinformationforiotdeviceswithmanufacturerprovidedbehaviourprofiles-2022')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{luca_morgese_zangrandi_stepping_2022,\n\ttitle = {Stepping out of the {MUD}: {Contextual} threat information for {IoT} devices with manufacturer-provided behaviour profiles},\n\turl = {https://vm-thijs.ewi.utwente.nl/static/homepage/papers/mudscope.pdf},\n\tpublisher = {Association for Computing Machinery},\n\tauthor = {{Luca Morgese Zangrandi} and {Thijs van Ede} and {Tim Booij} and {Savio Sciancalepore} and {Luca Allodi} and {Andrea Continella}},\n\tyear = {2022},\n}\n\n\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"dallacorte-onproportionalityinthedataprotectionjurisprudenceofthecjeu-2022\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://doi.org/10.1093/idpl/ipac014\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'dallacorte-onproportionalityinthedataprotectionjurisprudenceofthecjeu-2022', 'https://doi.org/10.1093/idpl/ipac014', event);\">\n    On proportionality in the data protection jurisprudence of the CJEU.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Dalla Corte, L.\n</span>\n\n  \n\n</span>\n\n  <i>International Data Privacy Law</i>,ipac014. July 2022.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://doi.org/10.1093/idpl/ipac014\"\n     onclick=\"log_download('dallacorte-onproportionalityinthedataprotectionjurisprudenceofthecjeu-2022', 'https://doi.org/10.1093/idpl/ipac014', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"On proportionality in the data protection jurisprudence of the CJEU [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1093/idpl/ipac014\"\n     onclick=\"log_download('dallacorte-onproportionalityinthedataprotectionjurisprudenceofthecjeu-2022', 'http://doi.org/10.1093/idpl/ipac014', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/dallacorte-onproportionalityinthedataprotectionjurisprudenceofthecjeu-2022\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('dallacorte-onproportionalityinthedataprotectionjurisprudenceofthecjeu-2022')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{dalla_corte_proportionality_2022,\n\ttitle = {On proportionality in the data protection jurisprudence of the {CJEU}},\n\tissn = {2044-3994},\n\turl = {https://doi.org/10.1093/idpl/ipac014},\n\tdoi = {10.1093/idpl/ipac014},\n\turldate = {2022-07-27},\n\tjournal = {International Data Privacy Law},\n\tauthor = {Dalla Corte, Lorenzo},\n\tmonth = jul,\n\tyear = {2022},\n\tpages = {ipac014},\n}\n\n\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"leukfeldt-holt-cybercrimeonthemenuexaminingcafeteriastyleoffendingamongfinanciallymotivatedcybercriminals-2022\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://www.sciencedirect.com/science/article/pii/S0747563221003022\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'leukfeldt-holt-cybercrimeonthemenuexaminingcafeteriastyleoffendingamongfinanciallymotivatedcybercriminals-2022', 'https://www.sciencedirect.com/science/article/pii/S0747563221003022', event);\">\n    Cybercrime on the menu? Examining cafeteria-style offending among financially motivated cybercriminals.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Leukfeldt, E. R.;  and Holt, T. J.\n</span>\n\n  \n\n</span>\n\n  <i>Computers in Human Behavior</i>, 126: 106979. January 2022.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://www.sciencedirect.com/science/article/pii/S0747563221003022\"\n     onclick=\"log_download('leukfeldt-holt-cybercrimeonthemenuexaminingcafeteriastyleoffendingamongfinanciallymotivatedcybercriminals-2022', 'https://www.sciencedirect.com/science/article/pii/S0747563221003022', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Cybercrime on the menu? Examining cafeteria-style offending among financially motivated cybercriminals [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1016/j.chb.2021.106979\"\n     onclick=\"log_download('leukfeldt-holt-cybercrimeonthemenuexaminingcafeteriastyleoffendingamongfinanciallymotivatedcybercriminals-2022', 'http://doi.org/10.1016/j.chb.2021.106979', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/leukfeldt-holt-cybercrimeonthemenuexaminingcafeteriastyleoffendingamongfinanciallymotivatedcybercriminals-2022\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('leukfeldt-holt-cybercrimeonthemenuexaminingcafeteriastyleoffendingamongfinanciallymotivatedcybercriminals-2022')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{leukfeldt_cybercrime_2022,\n\ttitle = {Cybercrime on the menu? {Examining} cafeteria-style offending among financially motivated cybercriminals},\n\tvolume = {126},\n\tissn = {0747-5632},\n\tshorttitle = {Cybercrime on the menu?},\n\turl = {https://www.sciencedirect.com/science/article/pii/S0747563221003022},\n\tdoi = {10.1016/j.chb.2021.106979},\n\tabstract = {Criminologists have frequently debated whether offenders are specialists, in that they consistently perform either one offense or similar offenses, or versatile by performing any crime based on opportunities and situational provocations. Such foundational research has yet to be developed regarding cybercrimes, or offenses enabled by computer technology and the Internet. This study address this issue using a sample of 37 offender networks. The results show variations in the offending behaviors of those involved in cybercrime. Almost half of the offender networks in this sample appeared to be cybercrime specialists, in that they only performed certain forms of cybercrime. The other half performed various types of crimes on and offline. The relative equity in specialization relative to versatility, particularly in both on and offline activities, suggests that there may be limited value in treating cybercriminals as a distinct offender group. Furthermore, this study calls to question what factors influence an offender&#x27;s pathway into cybercrime, whether as a specialized or versatile offender. The actors involved in cybercrime networks, whether as specialists or generalists, were enmeshed into broader online offender networks who may have helped recognize and act on opportunities to engage in phishing, malware, and other economic offenses.},\n\tlanguage = {en},\n\turldate = {2022-01-26},\n\tjournal = {Computers in Human Behavior},\n\tauthor = {Leukfeldt, Eric Rutger and Holt, Thomas J.},\n\tmonth = jan,\n\tyear = {2022},\n\tkeywords = {Cafeteria-style offending, Criminal network, Cybercrime, Malware, Organized crime, Phishing},\n\tpages = {106979},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Criminologists have frequently debated whether offenders are specialists, in that they consistently perform either one offense or similar offenses, or versatile by performing any crime based on opportunities and situational provocations. Such foundational research has yet to be developed regarding cybercrimes, or offenses enabled by computer technology and the Internet. This study address this issue using a sample of 37 offender networks. The results show variations in the offending behaviors of those involved in cybercrime. Almost half of the offender networks in this sample appeared to be cybercrime specialists, in that they only performed certain forms of cybercrime. The other half performed various types of crimes on and offline. The relative equity in specialization relative to versatility, particularly in both on and offline activities, suggests that there may be limited value in treating cybercriminals as a distinct offender group. Furthermore, this study calls to question what factors influence an offender's pathway into cybercrime, whether as a specialized or versatile offender. The actors involved in cybercrime networks, whether as specialists or generalists, were enmeshed into broader online offender networks who may have helped recognize and act on opportunities to engage in phishing, malware, and other economic offenses.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"sciancalepore-zannone-picoprivacypreservingaccesscontroliniotscenariosthroughincompleteinformation-2022\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://intersct.nl/wp-content/uploads/2022/01/iot_ac_uncertainty-1.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'sciancalepore-zannone-picoprivacypreservingaccesscontroliniotscenariosthroughincompleteinformation-2022', 'https://intersct.nl/wp-content/uploads/2022/01/iot_ac_uncertainty-1.pdf', event);\">\n    PICO: Privacy-Preserving Access Control in IoT Scenarios through Incomplete Information.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Sciancalepore, S.;  and Zannone, N.\n</span>\n\n  \n\n</span>\n\n  <i>The 37th ACM/SIGAPP Symposium on Applied Computing (SAC ’22)</i>,10. January 2022.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://intersct.nl/wp-content/uploads/2022/01/iot_ac_uncertainty-1.pdf\"\n     onclick=\"log_download('sciancalepore-zannone-picoprivacypreservingaccesscontroliniotscenariosthroughincompleteinformation-2022', 'https://intersct.nl/wp-content/uploads/2022/01/iot_ac_uncertainty-1.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"PICO: Privacy-Preserving Access Control in IoT Scenarios through Incomplete Information [pdf]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/sciancalepore-zannone-picoprivacypreservingaccesscontroliniotscenariosthroughincompleteinformation-2022\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('sciancalepore-zannone-picoprivacypreservingaccesscontroliniotscenariosthroughincompleteinformation-2022')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{sciancalepore_pico_2022,\n\ttitle = {{PICO}: {Privacy}-{Preserving} {Access} {Control} in {IoT} {Scenarios} through {Incomplete} {Information}},\n\turl = {https://intersct.nl/wp-content/uploads/2022/01/iot_ac_uncertainty-1.pdf},\n\tabstract = {Internet of Things (IoT) platforms typically require IoT devices and users to provide fine-grained information to determine whether access to resources and services can be granted. However, this information can be sensitive for users and its disclosure can lead to severe privacy threats, forcing users to decide between receiving a service or protecting their privacy. To close this gap, this work proposes PICO, a framework for privacy-preserving access control in IoT scenarios through incomplete information. PICO allows IoT devices to evaluate the privacy risks of disclosing the information needed to access a service and determine at which level of granularity such information can be disclosed. At the same time, PICO empowers IoT platforms to evaluate access control policies even when incomplete information is provided and possibly grant access to services based on a customized service-dependent risk factor. Through simulations using data from real IoT devices, we show the existence of a trade-off between privacy and energy consumption on IoT devices running PICO, and that more privacy can be achieved for such devices only by sacrificing a consistent portion of the overall energy capacity.},\n\tlanguage = {en},\n\tjournal = {The 37th ACM/SIGAPP Symposium on Applied Computing (SAC ’22)},\n\tauthor = {Sciancalepore, Savio and Zannone, Nicola},\n\tmonth = jan,\n\tyear = {2022},\n\tpages = {10},\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Internet of Things (IoT) platforms typically require IoT devices and users to provide fine-grained information to determine whether access to resources and services can be granted. However, this information can be sensitive for users and its disclosure can lead to severe privacy threats, forcing users to decide between receiving a service or protecting their privacy. To close this gap, this work proposes PICO, a framework for privacy-preserving access control in IoT scenarios through incomplete information. PICO allows IoT devices to evaluate the privacy risks of disclosing the information needed to access a service and determine at which level of granularity such information can be disclosed. At the same time, PICO empowers IoT platforms to evaluate access control policies even when incomplete information is provided and possibly grant access to services based on a customized service-dependent risk factor. Through simulations using data from real IoT devices, we show the existence of a trade-off between privacy and energy consumption on IoT devices running PICO, and that more privacy can be achieved for such devices only by sacrificing a consistent portion of the overall energy capacity.\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2021\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2021')\"\n      onkeypress=\"toggleGroup('group_2021')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2021</span>\n      <span class=\"bibbase_group_count\">\n        \n        (18)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"bouwmeester-turciosrodriguez-gan-vaneeten-parkin-thethingdoesnthaveaname-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://www.scopus.com/inward/record.url?scp=85114464267&amp;partnerID=8YFLogxK\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'bouwmeester-turciosrodriguez-gan-vaneeten-parkin-thethingdoesnthaveaname-2021', 'http://www.scopus.com/inward/record.url?scp=85114464267&amp;partnerID=8YFLogxK', event);\">\n    The thing doesn't have a name.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Bouwmeester, B.; Turcios Rodriguez, E.; Gañán, C.; van Eeten, M.;  and Parkin, S.\n</span>\n\n  \n\n</span>\n\n  <i>Proceedings of the 17th Symposium on Usable Privacy and Security, SOUPS 2021</i>,493–512.  2021.\n  <span class=\"note\">Publisher: USENIX Association</span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://www.scopus.com/inward/record.url?scp=85114464267&amp;partnerID=8YFLogxK\"\n     onclick=\"log_download('bouwmeester-turciosrodriguez-gan-vaneeten-parkin-thethingdoesnthaveaname-2021', 'http://www.scopus.com/inward/record.url?scp=85114464267&amp;partnerID=8YFLogxK', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"The thing doesn&#x27;t have a name [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/bouwmeester-turciosrodriguez-gan-vaneeten-parkin-thethingdoesnthaveaname-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('bouwmeester-turciosrodriguez-gan-vaneeten-parkin-thethingdoesnthaveaname-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{bouwmeester_thing_2021,\n\tseries = {Proceedings of the 17th {Symposium} on {Usable} {Privacy} and {Security}, {SOUPS} 2021},\n\ttitle = {The thing doesn&#x27;t have a name},\n\tshorttitle = {“{The} thing doesn&#x27;t have a name”},\n\turl = {http://www.scopus.com/inward/record.url?scp=85114464267&amp;partnerID=8YFLogxK},\n\tabstract = {Many consumer Internet-of-Things (IoT) devices are, and will remain, subject to compromise, often without the owner&#x27;s knowledge. Internet Service Providers (ISPs) are among the actors best-placed to coordinate the remediation of these problems. They receive infection data and can notify customers of recommended remediation actions. There is insufficient understanding of what happens in peoples&#x27; homes and businesses during attempts to remediate infected IoT devices. We coordinate with an ISP and conduct remote think-aloud observations with 17 customers who have an infected device, capturing their initial efforts to follow best-practice remediation steps. We identify real, personal consequences from wide-scale interventions which lack situated guidance for applying advice. Combining observations and thematic analysis, we synthesize the personal stories of the successes and struggles of these customers. Most participants think they were able to pinpoint the infected device; however, there were common issues such as not knowing how to comply with the recommended actions, remediations regarded as requiring excessive effort, a lack of feedback on success, and a perceived lack of support from device manufacturers. Only 4 of 17 participants were able to successfully complete all remediation steps. We provide recommendations relevant to various stakeholders, to focus where emergent interventions can be improved.},\n\turldate = {2022-01-26},\n\tjournal = {Proceedings of the 17th Symposium on Usable Privacy and Security, SOUPS 2021},\n\tauthor = {Bouwmeester, Brennen and Turcios Rodriguez, E.R. and Gañán, Carlos and van Eeten, Michel and Parkin, Simon},\n\tyear = {2021},\n\tnote = {Publisher: USENIX Association},\n\tpages = {493--512},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Many consumer Internet-of-Things (IoT) devices are, and will remain, subject to compromise, often without the owner's knowledge. Internet Service Providers (ISPs) are among the actors best-placed to coordinate the remediation of these problems. They receive infection data and can notify customers of recommended remediation actions. There is insufficient understanding of what happens in peoples' homes and businesses during attempts to remediate infected IoT devices. We coordinate with an ISP and conduct remote think-aloud observations with 17 customers who have an infected device, capturing their initial efforts to follow best-practice remediation steps. We identify real, personal consequences from wide-scale interventions which lack situated guidance for applying advice. Combining observations and thematic analysis, we synthesize the personal stories of the successes and struggles of these customers. Most participants think they were able to pinpoint the infected device; however, there were common issues such as not knowing how to comply with the recommended actions, remediations regarded as requiring excessive effort, a lack of feedback on success, and a perceived lack of support from device manufacturers. Only 4 of 17 participants were able to successfully complete all remediation steps. We provide recommendations relevant to various stakeholders, to focus where emergent interventions can be improved.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"rodrguez-noroozian-vaneeten-gan-superspreadersquantifyingtheroleofiotmanufacturersindeviceinfections-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://weis2021.econinfosec.org/wp-content/uploads/sites/9/2021/06/weis21-rodriguez.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'rodrguez-noroozian-vaneeten-gan-superspreadersquantifyingtheroleofiotmanufacturersindeviceinfections-2021', 'https://weis2021.econinfosec.org/wp-content/uploads/sites/9/2021/06/weis21-rodriguez.pdf', event);\">\n    Superspreaders: Quantifying the Role of IoT Manufacturers in Device Infections.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Rodríguez, E.; Noroozian, A.; van Eeten, M.;  and Gañán, C.\n</span>\n\n  \n\n</span>\n\n  <i>Annual Workshop on the Economics on Information Security</i>,18.  2021.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://weis2021.econinfosec.org/wp-content/uploads/sites/9/2021/06/weis21-rodriguez.pdf\"\n     onclick=\"log_download('rodrguez-noroozian-vaneeten-gan-superspreadersquantifyingtheroleofiotmanufacturersindeviceinfections-2021', 'https://weis2021.econinfosec.org/wp-content/uploads/sites/9/2021/06/weis21-rodriguez.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"Superspreaders: Quantifying the Role of IoT Manufacturers in Device Infections [pdf]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/rodrguez-noroozian-vaneeten-gan-superspreadersquantifyingtheroleofiotmanufacturersindeviceinfections-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>1 download</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('rodrguez-noroozian-vaneeten-gan-superspreadersquantifyingtheroleofiotmanufacturersindeviceinfections-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{rodriguez_superspreaders_2021,\n\ttitle = {Superspreaders: {Quantifying} the {Role} of {IoT} {Manufacturers} in {Device} {Infections}},\n\turl = {https://weis2021.econinfosec.org/wp-content/uploads/sites/9/2021/06/weis21-rodriguez.pdf},\n\tabstract = {The influx of insecure IoT devices into the consumer market can only be stemmed if manufacturers adopt more secure practices. It is unlikely that this will happen without government involvement. Developing effective regulation takes years. In the meantime, governments have an urgent need to engage manufacturers directly to stop the damage from getting worse. The problem is that there are many thousands of companies that produce IoT devices. Where to start? In this paper, we focus on identifying the most urgent class: the manufacturers of IoT devices that get compromised in the wild. To identify the manufacturers of infected IoT, we conducted active scanning of Mirai-infected devices. Over a period of 2 months, we collected Web-UI images and banners to identify device types and manufacturers. We identified 31,950 infected IoT devices in 68 countries produced by 70 unique manufacturers. We found that 9 vendors share almost 50\\% of the infections. This pattern is remarkably consistent across countries, notwithstanding the enormous variety of devices across markets. In terms of supporting customers, 53\\% of the 70 identified manufacturers offer firmware or software downloads on their websites, 43\\% provide some password changing procedure, and 26\\% of the manufacturers offer some advice to protect devices from attacks. Our findings suggest that targeting a small number of manufacturers can have a major impact on overall IoT security and that governments can join forces in these efforts, as they are often confronted with the same manufacturers.},\n\tlanguage = {en},\n\tjournal = {Annual Workshop on the Economics on Information Security},\n\tauthor = {Rodríguez, Elsa and Noroozian, Arman and van Eeten, Michel and Gañán, Carlos},\n\tyear = {2021},\n\tpages = {18},\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  The influx of insecure IoT devices into the consumer market can only be stemmed if manufacturers adopt more secure practices. It is unlikely that this will happen without government involvement. Developing effective regulation takes years. In the meantime, governments have an urgent need to engage manufacturers directly to stop the damage from getting worse. The problem is that there are many thousands of companies that produce IoT devices. Where to start? In this paper, we focus on identifying the most urgent class: the manufacturers of IoT devices that get compromised in the wild. To identify the manufacturers of infected IoT, we conducted active scanning of Mirai-infected devices. Over a period of 2 months, we collected Web-UI images and banners to identify device types and manufacturers. We identified 31,950 infected IoT devices in 68 countries produced by 70 unique manufacturers. We found that 9 vendors share almost 50% of the infections. This pattern is remarkably consistent across countries, notwithstanding the enormous variety of devices across markets. In terms of supporting customers, 53% of the 70 identified manufacturers offer firmware or software downloads on their websites, 43% provide some password changing procedure, and 26% of the manufacturers offer some advice to protect devices from attacks. Our findings suggest that targeting a small number of manufacturers can have a major impact on overall IoT security and that governments can join forces in these efforts, as they are often confronted with the same manufacturers.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"khashooei-vasenev-kocademir-mathijssen-architectingsystemofsystemssolutionswithsecurityanddataprotectionprinciples-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://ieeexplore.ieee.org/document/9497461\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'khashooei-vasenev-kocademir-mathijssen-architectingsystemofsystemssolutionswithsecurityanddataprotectionprinciples-2021', 'https://ieeexplore.ieee.org/document/9497461', event);\">\n    Architecting System of Systems Solutions with Security and Data-Protection Principles.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Khashooei, B. A.; Vasenev, A.; Kocademir, H. A.;  and Mathijssen, R.\n</span>\n\n  \n\n</span>\n\n  In <i>2021 16th International Conference of System of Systems Engineering (SoSE)</i>, pages 43–48, June 2021. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://ieeexplore.ieee.org/document/9497461\"\n     onclick=\"log_download('khashooei-vasenev-kocademir-mathijssen-architectingsystemofsystemssolutionswithsecurityanddataprotectionprinciples-2021', 'https://ieeexplore.ieee.org/document/9497461', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Architecting System of Systems Solutions with Security and Data-Protection Principles [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1109/SOSE52739.2021.9497461\"\n     onclick=\"log_download('khashooei-vasenev-kocademir-mathijssen-architectingsystemofsystemssolutionswithsecurityanddataprotectionprinciples-2021', 'http://doi.org/10.1109/SOSE52739.2021.9497461', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/khashooei-vasenev-kocademir-mathijssen-architectingsystemofsystemssolutionswithsecurityanddataprotectionprinciples-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('khashooei-vasenev-kocademir-mathijssen-architectingsystemofsystemssolutionswithsecurityanddataprotectionprinciples-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{khashooei_architecting_2021,\n\ttitle = {Architecting {System} of {Systems} {Solutions} with {Security} and {Data}-{Protection} {Principles}},\n\turl = {https://ieeexplore.ieee.org/document/9497461},\n\tdoi = {10.1109/SOSE52739.2021.9497461},\n\tabstract = {The rapid advancement of communication technology realized the dream of interconnected systems. In addition to enabling scalability and flexibility of solutions, this paradigm created new system design challenges. One such challenge is to holistically address security and privacy concerns of solutions early in design while respecting the system of systems context. This paper proposes a method for the concept design phase on how to create design alternatives with the help of security and data-protection principles. The outcome is a set of design concepts that reflect stakeholders&#x27; concerns and best practices.},\n\tbooktitle = {2021 16th {International} {Conference} of {System} of {Systems} {Engineering} ({SoSE})},\n\tauthor = {Khashooei, Behnam Asadi and Vasenev, Alexandr and Kocademir, Hasan Alper and Mathijssen, Roland},\n\tmonth = jun,\n\tyear = {2021},\n\tkeywords = {Best practices, Communications technology, Interconnected systems, Privacy, Scalability, Security, System of systems, security engineering, system architecting, system of systems},\n\tpages = {43--48},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  The rapid advancement of communication technology realized the dream of interconnected systems. In addition to enabling scalability and flexibility of solutions, this paradigm created new system design challenges. One such challenge is to holistically address security and privacy concerns of solutions early in design while respecting the system of systems context. This paper proposes a method for the concept design phase on how to create design alternatives with the help of security and data-protection principles. The outcome is a set of design concepts that reflect stakeholders' concerns and best practices.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"asadikhashooei-vasenev-kocademir-structuredtraceabilityofsecurityandprivacyprinciplesfordesigningsafeautomatedsystems-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://link.springer.com/chapter/10.1007/978-3-030-83906-2_4\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'asadikhashooei-vasenev-kocademir-structuredtraceabilityofsecurityandprivacyprinciplesfordesigningsafeautomatedsystems-2021', 'https://link.springer.com/chapter/10.1007/978-3-030-83906-2_4', event);\">\n    Structured Traceability of Security and Privacy Principles for Designing Safe Automated Systems.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Asadi Khashooei, B.; Vasenev, A.;  and Kocademir, H. A.\n</span>\n\n  \n\n</span>\n\n  In Habli, I.; Sujan, M.; Gerasimou, S.; Schoitsch, E.;  and Bitsch, F., editor(s), <i>Computer Safety, Reliability, and Security. SAFECOMP 2021 Workshops</i>, of <i>Lecture Notes in Computer Science</i>, pages 52–62, Cham,  2021. Springer International Publishing\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://link.springer.com/chapter/10.1007/978-3-030-83906-2_4\"\n     onclick=\"log_download('asadikhashooei-vasenev-kocademir-structuredtraceabilityofsecurityandprivacyprinciplesfordesigningsafeautomatedsystems-2021', 'https://link.springer.com/chapter/10.1007/978-3-030-83906-2_4', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Structured Traceability of Security and Privacy Principles for Designing Safe Automated Systems [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1007/978-3-030-83906-2_4\"\n     onclick=\"log_download('asadikhashooei-vasenev-kocademir-structuredtraceabilityofsecurityandprivacyprinciplesfordesigningsafeautomatedsystems-2021', 'http://doi.org/10.1007/978-3-030-83906-2_4', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/asadikhashooei-vasenev-kocademir-structuredtraceabilityofsecurityandprivacyprinciplesfordesigningsafeautomatedsystems-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('asadikhashooei-vasenev-kocademir-structuredtraceabilityofsecurityandprivacyprinciplesfordesigningsafeautomatedsystems-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{asadi_khashooei_structured_2021,\n\taddress = {Cham},\n\tseries = {Lecture {Notes} in {Computer} {Science}},\n\ttitle = {Structured {Traceability} of {Security} and {Privacy} {Principles} for {Designing} {Safe} {Automated} {Systems}},\n\tisbn = {978-3-030-83906-2},\n\turl = {https://link.springer.com/chapter/10.1007/978-3-030-83906-2_4},\n\tdoi = {10.1007/978-3-030-83906-2_4},\n\tabstract = {Creating modern safe automated systems like vehicles demands making them secure. With many diverse components addressing different needs, it is hard to trace and ensure the contributions of components to the overall security of systems. Principles, as high-level statements, can be used to reason how components contribute to security (and privacy) needs. This would help to design systems and products by aligning security and privacy concerns. The structure proposed in this positioning paper helps to make traceable links from stakeholders to specific technologies and system components. It aims at informing holistic discussions and reasoning on security approaches with stakeholders involved in the system development process. Ultimately, the traceable links can help to assist in aligning developers, create test cases, and provide certification claims - essential activities to ensure the final system is secure and safe.},\n\tlanguage = {en},\n\tbooktitle = {Computer {Safety}, {Reliability}, and {Security}. {SAFECOMP} 2021 {Workshops}},\n\tpublisher = {Springer International Publishing},\n\tauthor = {Asadi Khashooei, Behnam and Vasenev, Alexandr and Kocademir, Hasan Alper},\n\teditor = {Habli, Ibrahim and Sujan, Mark and Gerasimou, Simos and Schoitsch, Erwin and Bitsch, Friedemann},\n\tyear = {2021},\n\tkeywords = {Design traceability, Security analysis, System architecture, System security},\n\tpages = {52--62},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Creating modern safe automated systems like vehicles demands making them secure. With many diverse components addressing different needs, it is hard to trace and ensure the contributions of components to the overall security of systems. Principles, as high-level statements, can be used to reason how components contribute to security (and privacy) needs. This would help to design systems and products by aligning security and privacy concerns. The structure proposed in this positioning paper helps to make traceable links from stakeholders to specific technologies and system components. It aims at informing holistic discussions and reasoning on security approaches with stakeholders involved in the system development process. Ultimately, the traceable links can help to assist in aligning developers, create test cases, and provide certification claims - essential activities to ensure the final system is secure and safe.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"noroozian-rodriguez-lastdrager-kasama-vaneeten-gan-canispshelpmitigateiotmalwarealongitudinalstudyofbroadbandispsecurityefforts-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://ieeexplore.ieee.org/document/9581172\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'noroozian-rodriguez-lastdrager-kasama-vaneeten-gan-canispshelpmitigateiotmalwarealongitudinalstudyofbroadbandispsecurityefforts-2021', 'https://ieeexplore.ieee.org/document/9581172', event);\">\n    Can ISPs Help Mitigate IoT Malware? A Longitudinal Study of Broadband ISP Security Efforts.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Noroozian, A.; Rodriguez, E. T.; Lastdrager, E.; Kasama, T.; Van Eeten, M.;  and Gañán, C. H.\n</span>\n\n  \n\n</span>\n\n  In <i>2021 IEEE European Symposium on Security and Privacy (EuroS P)</i>, pages 337–352,  2021. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://ieeexplore.ieee.org/document/9581172\"\n     onclick=\"log_download('noroozian-rodriguez-lastdrager-kasama-vaneeten-gan-canispshelpmitigateiotmalwarealongitudinalstudyofbroadbandispsecurityefforts-2021', 'https://ieeexplore.ieee.org/document/9581172', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Can ISPs Help Mitigate IoT Malware? A Longitudinal Study of Broadband ISP Security Efforts [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1109/EuroSP51992.2021.00031\"\n     onclick=\"log_download('noroozian-rodriguez-lastdrager-kasama-vaneeten-gan-canispshelpmitigateiotmalwarealongitudinalstudyofbroadbandispsecurityefforts-2021', 'http://doi.org/10.1109/EuroSP51992.2021.00031', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/noroozian-rodriguez-lastdrager-kasama-vaneeten-gan-canispshelpmitigateiotmalwarealongitudinalstudyofbroadbandispsecurityefforts-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('noroozian-rodriguez-lastdrager-kasama-vaneeten-gan-canispshelpmitigateiotmalwarealongitudinalstudyofbroadbandispsecurityefforts-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{noroozian_can_2021,\n\ttitle = {Can {ISPs} {Help} {Mitigate} {IoT} {Malware}? {A} {Longitudinal} {Study} of {Broadband} {ISP} {Security} {Efforts}},\n\tshorttitle = {Can {ISPs} {Help} {Mitigate} {IoT} {Malware}?},\n\turl = {https://ieeexplore.ieee.org/document/9581172},\n\tdoi = {10.1109/EuroSP51992.2021.00031},\n\tabstract = {For the mitigation of compromised Internet of Things (IoT) devices we rely on Internet Service Providers (ISPs) and their users. Given that devices are in the hands of their subscribers, what can ISPs realistically do? This study examines the effects of ISP countermeasures on infections caused by variants of the notorious Mirai family of IoT malware, still among the dominant families. We collect and analyze more than 4 years of longitudinal darknet data tracking Mirai-like infections in conjunction with threat intelligence data on various other IoT and non-IoT botnets across the globe from January 2016 to May 2020. We measure the effect of two ISP countermeasures on Mirai variant infection numbers: (i) reducing the attack surface (i.e., closing ports that are used by the malware for propagation) and (ii) ISPs increasing their general network hygiene and malware removal efforts (as observed by proxy of the remediation of infections of other families of IoT and non-IoT malware and reductions in the number of DDoS amplifiers in their networks). We map our infection data to 342 broadband providers that have the bulk of the broadband market share in their respective 83 countries. We find that the number of infections correlates strongly with the number of ISP subscribers (\\$R{\\textasciicircum}2=0.55\\$). Yet, infection numbers can still vary by three orders of magnitude even for ISPs with comparable subscriber numbers. We observe that many ISPs, together with their subscribers, have reduced their attack surface for IoT compromise by blocking traffic to commonly-exploited infection vectors such as Telnet and FTP. We statistically estimate the impact of these reductions on infection levels and, counter-intuitively, find no significant impact. In contrast, we do find a significant impact for improving general network hygiene and best malware mitigation practices. ISPs that were more successful in reducing DDoS amplifiers and non-Mirai malware infections in their networks also end up with significantly lower Mirai infection rates. In other words, rather than investing in IoT-specific countermeasures like reducing the attack surface, our findings suggest that ISPs might be better off investing in general security efforts to improve network hygiene and clean up abuse.},\n\tbooktitle = {2021 {IEEE} {European} {Symposium} on {Security} and {Privacy} ({EuroS} {P})},\n\tauthor = {Noroozian, Arman and Rodriguez, Elsa Turcios and Lastdrager, Elmer and Kasama, Takahiro and Van Eeten, Michel and Gañán, Carlos H.},\n\tyear = {2021},\n\tkeywords = {Botnet, Broadband amplifiers, Countermeasure, ISP, Internet of Things, IoT, Malware, Mirai, Remediation, Security, Surface cleaning, Web and internet services},\n\tpages = {337--352},\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  For the mitigation of compromised Internet of Things (IoT) devices we rely on Internet Service Providers (ISPs) and their users. Given that devices are in the hands of their subscribers, what can ISPs realistically do? This study examines the effects of ISP countermeasures on infections caused by variants of the notorious Mirai family of IoT malware, still among the dominant families. We collect and analyze more than 4 years of longitudinal darknet data tracking Mirai-like infections in conjunction with threat intelligence data on various other IoT and non-IoT botnets across the globe from January 2016 to May 2020. We measure the effect of two ISP countermeasures on Mirai variant infection numbers: (i) reducing the attack surface (i.e., closing ports that are used by the malware for propagation) and (ii) ISPs increasing their general network hygiene and malware removal efforts (as observed by proxy of the remediation of infections of other families of IoT and non-IoT malware and reductions in the number of DDoS amplifiers in their networks). We map our infection data to 342 broadband providers that have the bulk of the broadband market share in their respective 83 countries. We find that the number of infections correlates strongly with the number of ISP subscribers ($R{\\textasciicircum}2=0.55$). Yet, infection numbers can still vary by three orders of magnitude even for ISPs with comparable subscriber numbers. We observe that many ISPs, together with their subscribers, have reduced their attack surface for IoT compromise by blocking traffic to commonly-exploited infection vectors such as Telnet and FTP. We statistically estimate the impact of these reductions on infection levels and, counter-intuitively, find no significant impact. In contrast, we do find a significant impact for improving general network hygiene and best malware mitigation practices. ISPs that were more successful in reducing DDoS amplifiers and non-Mirai malware infections in their networks also end up with significantly lower Mirai infection rates. In other words, rather than investing in IoT-specific countermeasures like reducing the attack surface, our findings suggest that ISPs might be better off investing in general security efforts to improve network hygiene and clean up abuse.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"gral-schraffenberger-borgesius-buijzen-darkandbrightpatternsincookieconsentrequests-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://jdsr.se/ojs/index.php/jdsr/article/view/54\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'gral-schraffenberger-borgesius-buijzen-darkandbrightpatternsincookieconsentrequests-2021', 'https://jdsr.se/ojs/index.php/jdsr/article/view/54', event);\">\n    Dark and Bright Patterns in Cookie Consent Requests.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Graßl, P.; Schraffenberger, H.; Borgesius, F. Z.;  and Buijzen, M.\n</span>\n\n  \n\n</span>\n\n  <i>Journal of Digital Social Research</i>, 3(1): 1–38. August 2021.\n  <span class=\"note\">Number: 1</span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://jdsr.se/ojs/index.php/jdsr/article/view/54\"\n     onclick=\"log_download('gral-schraffenberger-borgesius-buijzen-darkandbrightpatternsincookieconsentrequests-2021', 'https://jdsr.se/ojs/index.php/jdsr/article/view/54', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Dark and Bright Patterns in Cookie Consent Requests [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.33621/jdsr.v3i1.54\"\n     onclick=\"log_download('gral-schraffenberger-borgesius-buijzen-darkandbrightpatternsincookieconsentrequests-2021', 'http://doi.org/10.33621/jdsr.v3i1.54', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/gral-schraffenberger-borgesius-buijzen-darkandbrightpatternsincookieconsentrequests-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('gral-schraffenberger-borgesius-buijzen-darkandbrightpatternsincookieconsentrequests-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{grasl_dark_2021,\n\ttitle = {Dark and {Bright} {Patterns} in {Cookie} {Consent} {Requests}},\n\tvolume = {3},\n\tcopyright = {Copyright (c) 2021 Paul Graßl, Hanna Schraffenberger, Frederik Zuiderveen Borgesius, Moniek Buijzen},\n\tissn = {2003-1998},\n\turl = {https://jdsr.se/ojs/index.php/jdsr/article/view/54},\n\tdoi = {10.33621/jdsr.v3i1.54},\n\tabstract = {Dark patterns are (evil) design nudges that steer people’s behaviour through persuasive interface design. Increasingly found in cookie consent requests, they possibly undermine principles of EU privacy law. In two preregistered online experiments we investigated the effects of three common design nudges (default, aesthetic manipulation, obstruction) on users’ consent decisions and their perception of control over their personal data in these situations. In the first experiment (N = 228) we explored the effects of design nudges towards the privacy-unfriendly option (dark patterns). The experiment revealed that most participants agreed to all consent requests regardless of dark design nudges. Unexpectedly, despite generally low levels of perceived control, obstructing the privacy-friendly option led to more rather than less perceived control. In the second experiment (N = 255) we reversed the direction of the design nudges towards the privacy-friendly option, which we title “bright patterns”. This time the obstruction and default nudges swayed people effectively towards the privacy-friendly option, while the result regarding perceived control stayed the same compared to Experiment 1. Overall, our findings suggest that many current implementations of cookie consent requests do not enable meaningful choices by internet users, and are thus not in line with the intention of the EU policymakers. We also explore how policymakers could address the problem.},\n\tlanguage = {en},\n\tnumber = {1},\n\turldate = {2022-01-26},\n\tjournal = {Journal of Digital Social Research},\n\tauthor = {Graßl, Paul and Schraffenberger, Hanna and Borgesius, Frederik Zuiderveen and Buijzen, Moniek},\n\tmonth = aug,\n\tyear = {2021},\n\tnote = {Number: 1},\n\tkeywords = {ePrivacy Regulation},\n\tpages = {1--38},\n}\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Dark patterns are (evil) design nudges that steer people’s behaviour through persuasive interface design. Increasingly found in cookie consent requests, they possibly undermine principles of EU privacy law. In two preregistered online experiments we investigated the effects of three common design nudges (default, aesthetic manipulation, obstruction) on users’ consent decisions and their perception of control over their personal data in these situations. In the first experiment (N = 228) we explored the effects of design nudges towards the privacy-unfriendly option (dark patterns). The experiment revealed that most participants agreed to all consent requests regardless of dark design nudges. Unexpectedly, despite generally low levels of perceived control, obstructing the privacy-friendly option led to more rather than less perceived control. In the second experiment (N = 255) we reversed the direction of the design nudges towards the privacy-friendly option, which we title “bright patterns”. This time the obstruction and default nudges swayed people effectively towards the privacy-friendly option, while the result regarding perceived control stayed the same compared to Experiment 1. Overall, our findings suggest that many current implementations of cookie consent requests do not enable meaningful choices by internet users, and are thus not in line with the intention of the EU policymakers. We also explore how policymakers could address the problem.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"garg-machiry-continella-kruegel-vigna-towardasecurecrowdsourcedlocationtrackingsystem-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://research.utwente.nl/en/publications/toward-a-secure-crowdsourced-location-tracking-system\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'garg-machiry-continella-kruegel-vigna-towardasecurecrowdsourcedlocationtrackingsystem-2021', 'https://research.utwente.nl/en/publications/toward-a-secure-crowdsourced-location-tracking-system', event);\">\n    Toward a Secure Crowdsourced Location Tracking System.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Garg, C.; Machiry, A.; Continella, A.; Kruegel, C.;  and Vigna, G.\n</span>\n\n  \n\n</span>\n\n  In <i>14th ACM Conference on Security and Privacy in Wireless and Mobile Networks (WiSec)</i>, pages 311–322, June 2021. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://research.utwente.nl/en/publications/toward-a-secure-crowdsourced-location-tracking-system\"\n     onclick=\"log_download('garg-machiry-continella-kruegel-vigna-towardasecurecrowdsourcedlocationtrackingsystem-2021', 'https://research.utwente.nl/en/publications/toward-a-secure-crowdsourced-location-tracking-system', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Toward a Secure Crowdsourced Location Tracking System [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1145/3448300.3467821\"\n     onclick=\"log_download('garg-machiry-continella-kruegel-vigna-towardasecurecrowdsourcedlocationtrackingsystem-2021', 'http://doi.org/10.1145/3448300.3467821', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/garg-machiry-continella-kruegel-vigna-towardasecurecrowdsourcedlocationtrackingsystem-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('garg-machiry-continella-kruegel-vigna-towardasecurecrowdsourcedlocationtrackingsystem-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{garg_toward_2021,\n\ttitle = {Toward a {Secure} {Crowdsourced} {Location} {Tracking} {System}},\n\turl = {https://research.utwente.nl/en/publications/toward-a-secure-crowdsourced-location-tracking-system},\n\tdoi = {10.1145/3448300.3467821},\n\tlanguage = {English},\n\turldate = {2022-01-26},\n\tbooktitle = {14th {ACM} {Conference} on {Security} and {Privacy} in {Wireless} and {Mobile} {Networks} ({WiSec})},\n\tauthor = {Garg, Chinmay and Machiry, Aravind and Continella, Andrea and Kruegel, Christopher and Vigna, Giovanni},\n\tmonth = jun,\n\tyear = {2021},\n\tpages = {311--322},\n}\n\n\n\n\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"meijaard-meiler-allodi-modellingdisruptiveaptstargetingcriticalinfrastructureusingmilitarytheory-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://www.computer.org/csdl/proceedings-article/euros&amp;pw/2021/999900a178/1y63lcSC3qU\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'meijaard-meiler-allodi-modellingdisruptiveaptstargetingcriticalinfrastructureusingmilitarytheory-2021', 'https://www.computer.org/csdl/proceedings-article/euros&amp;pw/2021/999900a178/1y63lcSC3qU', event);\">\n    Modelling Disruptive APTs targeting Critical Infrastructure using Military Theory.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Meijaard, Y.; Meiler, P.;  and Allodi, L.\n</span>\n\n  \n\n</span>\n\n  In pages 178–190,  2021. IEEE Computer Society\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://www.computer.org/csdl/proceedings-article/euros&amp;pw/2021/999900a178/1y63lcSC3qU\"\n     onclick=\"log_download('meijaard-meiler-allodi-modellingdisruptiveaptstargetingcriticalinfrastructureusingmilitarytheory-2021', 'https://www.computer.org/csdl/proceedings-article/euros&amp;pw/2021/999900a178/1y63lcSC3qU', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Modelling Disruptive APTs targeting Critical Infrastructure using Military Theory [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1109/EuroSPW54576.2021.00026\"\n     onclick=\"log_download('meijaard-meiler-allodi-modellingdisruptiveaptstargetingcriticalinfrastructureusingmilitarytheory-2021', 'http://doi.org/10.1109/EuroSPW54576.2021.00026', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/meijaard-meiler-allodi-modellingdisruptiveaptstargetingcriticalinfrastructureusingmilitarytheory-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('meijaard-meiler-allodi-modellingdisruptiveaptstargetingcriticalinfrastructureusingmilitarytheory-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{meijaard_modelling_2021,\n\ttitle = {Modelling {Disruptive} {APTs} targeting {Critical} {Infrastructure} using {Military} {Theory}},\n\tisbn = {978-1-66541-012-0},\n\turl = {https://www.computer.org/csdl/proceedings-article/euros&amp;pw/2021/999900a178/1y63lcSC3qU},\n\tdoi = {10.1109/EuroSPW54576.2021.00026},\n\tabstract = {Disruptive Advanced Persistent Threats (D-APTs) are a new sophisticated class of cyberattacks targeting critical infrastructures. Whereas regular APTs are well-described in the literature, no existing APT kill chain model incorporates the disruptive actions of D-APTs and can be used to represent DAPTs in data. To this aim, the contribution of this paper is twofold: first, we review the evolution of existing APT kill chain models. Second, we present a novel D-APT model based on existing ATP models and military theory. The model describes the strategic objective setting, the operational kill chain and the tactics of the attacker, as well as the defender\\&amp;\\#x2019;s critical infrastructure, processes and societal function.},\n\tlanguage = {English},\n\turldate = {2022-01-26},\n\tpublisher = {IEEE Computer Society},\n\tauthor = {Meijaard, Yoram and Meiler, Peter-Paul and Allodi, Luca},\n\tyear = {2021},\n\tpages = {178--190},\n}\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Disruptive Advanced Persistent Threats (D-APTs) are a new sophisticated class of cyberattacks targeting critical infrastructures. Whereas regular APTs are well-described in the literature, no existing APT kill chain model incorporates the disruptive actions of D-APTs and can be used to represent DAPTs in data. To this aim, the contribution of this paper is twofold: first, we review the evolution of existing APT kill chain models. Second, we present a novel D-APT model based on existing ATP models and military theory. The model describes the strategic objective setting, the operational kill chain and the tactics of the attacker, as well as the defender&#x2019;s critical infrastructure, processes and societal function.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"burda-allodi-zannone-dissectingsocialengineeringattacksthroughthelensesofcognition-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://www.computer.org/csdl/proceedings-article/euros&amp;pw/2021/999900a149/1y63kTlpFpC\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'burda-allodi-zannone-dissectingsocialengineeringattacksthroughthelensesofcognition-2021', 'https://www.computer.org/csdl/proceedings-article/euros&amp;pw/2021/999900a149/1y63kTlpFpC', event);\">\n    Dissecting Social Engineering Attacks Through the Lenses of Cognition.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Burda, P.; Allodi, L.;  and Zannone, N.\n</span>\n\n  \n\n</span>\n\n  In pages 149–160,  2021. IEEE Computer Society\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://www.computer.org/csdl/proceedings-article/euros&amp;pw/2021/999900a149/1y63kTlpFpC\"\n     onclick=\"log_download('burda-allodi-zannone-dissectingsocialengineeringattacksthroughthelensesofcognition-2021', 'https://www.computer.org/csdl/proceedings-article/euros&amp;pw/2021/999900a149/1y63kTlpFpC', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Dissecting Social Engineering Attacks Through the Lenses of Cognition [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1109/EuroSPW54576.2021.00024\"\n     onclick=\"log_download('burda-allodi-zannone-dissectingsocialengineeringattacksthroughthelensesofcognition-2021', 'http://doi.org/10.1109/EuroSPW54576.2021.00024', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/burda-allodi-zannone-dissectingsocialengineeringattacksthroughthelensesofcognition-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('burda-allodi-zannone-dissectingsocialengineeringattacksthroughthelensesofcognition-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{burda_dissecting_2021,\n\ttitle = {Dissecting {Social} {Engineering} {Attacks} {Through} the {Lenses} of {Cognition}},\n\tisbn = {978-1-66541-012-0},\n\turl = {https://www.computer.org/csdl/proceedings-article/euros&amp;pw/2021/999900a149/1y63kTlpFpC},\n\tdoi = {10.1109/EuroSPW54576.2021.00024},\n\tabstract = {In this paper we present, showcase, and analize a novel framework to dissect Social Engineering (SE) attacks. The framework is based on extant theories in the cognitive sciences, and is meant as an instrument for researchers and practitioners alike to structure and analyze SE attacks of varying sophistication, isolating specific features and their effects at the cognitive level, and providing a common structure for comparisons across different attacks. We showcase the framework against attacks reproduced in the academic literature as well as against real (highly-targeted) SE attacks reported in the wild, isolating and relating effects and techniques adopted by the attackers to the target\\&amp;\\#x2019;s cognitive process. We discuss implications for research and practice of the proposed framework.},\n\tlanguage = {English},\n\turldate = {2022-01-26},\n\tpublisher = {IEEE Computer Society},\n\tauthor = {Burda, Pavlo and Allodi, Luca and Zannone, Nicola},\n\tyear = {2021},\n\tpages = {149--160},\n}\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  In this paper we present, showcase, and analize a novel framework to dissect Social Engineering (SE) attacks. The framework is based on extant theories in the cognitive sciences, and is meant as an instrument for researchers and practitioners alike to structure and analyze SE attacks of varying sophistication, isolating specific features and their effects at the cognitive level, and providing a common structure for comparisons across different attacks. We showcase the framework against attacks reproduced in the academic literature as well as against real (highly-targeted) SE attacks reported in the wild, isolating and relating effects and techniques adopted by the attackers to the target&#x2019;s cognitive process. We discuss implications for research and practice of the proposed framework.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"vandooremaal-burda-allodi-zannone-combiningtextandvisualfeaturestoimprovetheidentificationofclonedwebpagesforearlyphishingdetection-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://doi.org/10.1145/3465481.3470112\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'vandooremaal-burda-allodi-zannone-combiningtextandvisualfeaturestoimprovetheidentificationofclonedwebpagesforearlyphishingdetection-2021', 'https://doi.org/10.1145/3465481.3470112', event);\">\n    Combining Text and Visual Features to Improve the Identification of Cloned Webpages for Early Phishing Detection.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  van Dooremaal, B.; Burda, P.; Allodi, L.;  and Zannone, N.\n</span>\n\n  \n\n</span>\n\n  In <i>The 16th International Conference on Availability, Reliability and Security</i>, of <i>ARES 2021</i>, pages 1–10, New York, NY, USA, August 2021. Association for Computing Machinery\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://doi.org/10.1145/3465481.3470112\"\n     onclick=\"log_download('vandooremaal-burda-allodi-zannone-combiningtextandvisualfeaturestoimprovetheidentificationofclonedwebpagesforearlyphishingdetection-2021', 'https://doi.org/10.1145/3465481.3470112', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Combining Text and Visual Features to Improve the Identification of Cloned Webpages for Early Phishing Detection [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1145/3465481.3470112\"\n     onclick=\"log_download('vandooremaal-burda-allodi-zannone-combiningtextandvisualfeaturestoimprovetheidentificationofclonedwebpagesforearlyphishingdetection-2021', 'http://doi.org/10.1145/3465481.3470112', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/vandooremaal-burda-allodi-zannone-combiningtextandvisualfeaturestoimprovetheidentificationofclonedwebpagesforearlyphishingdetection-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('vandooremaal-burda-allodi-zannone-combiningtextandvisualfeaturestoimprovetheidentificationofclonedwebpagesforearlyphishingdetection-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{van_dooremaal_combining_2021,\n\taddress = {New York, NY, USA},\n\tseries = {{ARES} 2021},\n\ttitle = {Combining {Text} and {Visual} {Features} to {Improve} the {Identification} of {Cloned} {Webpages} for {Early} {Phishing} {Detection}},\n\tisbn = {978-1-4503-9051-4},\n\turl = {https://doi.org/10.1145/3465481.3470112},\n\tdoi = {10.1145/3465481.3470112},\n\tabstract = {Phishing attacks arrive in high numbers and often spread quickly, meaning that after-the-fact countermeasures such as domain blacklisting are limited in efficacy. Visual similarity-based approaches have the potential of detecting previously unseen phishing webpages. These approaches, however, require identifying the legitimate webpage(s) they reproduce. Existing approaches rely on textual feature analysis for target identification, with misclassification rates of approximately 1\\%; however, as most websites a user might visit are legitimate, additional research is needed to further reduce classification errors. In this work, we propose a novel method for target identification that relies on both visual features (extracted from a screenshot of the web page) and textual features (extracted from the DOM of the web page) to identify which website a phishing web page is replicating, and assess its effectiveness in detecting phishing websites using data from phishing aggregators such as OpenPhish, PhishTank and PhishStats. Compared to state-of-the-art text-based classifiers, our method reduces the phishing misclassification rate by 67\\% (from 1.02\\% to 0.34\\%), for an accuracy of 99.66\\%. This work provides a further step forwards toward semi-automated decision support systems for phishing detection.},\n\turldate = {2022-01-26},\n\tbooktitle = {The 16th {International} {Conference} on {Availability}, {Reliability} and {Security}},\n\tpublisher = {Association for Computing Machinery},\n\tauthor = {van Dooremaal, Bram and Burda, Pavlo and Allodi, Luca and Zannone, Nicola},\n\tmonth = aug,\n\tyear = {2021},\n\tkeywords = {Phishing Detection, Target Identification, Visual Features},\n\tpages = {1--10},\n}\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Phishing attacks arrive in high numbers and often spread quickly, meaning that after-the-fact countermeasures such as domain blacklisting are limited in efficacy. Visual similarity-based approaches have the potential of detecting previously unseen phishing webpages. These approaches, however, require identifying the legitimate webpage(s) they reproduce. Existing approaches rely on textual feature analysis for target identification, with misclassification rates of approximately 1%; however, as most websites a user might visit are legitimate, additional research is needed to further reduce classification errors. In this work, we propose a novel method for target identification that relies on both visual features (extracted from a screenshot of the web page) and textual features (extracted from the DOM of the web page) to identify which website a phishing web page is replicating, and assess its effectiveness in detecting phishing websites using data from phishing aggregators such as OpenPhish, PhishTank and PhishStats. Compared to state-of-the-art text-based classifiers, our method reduces the phishing misclassification rate by 67% (from 1.02% to 0.34%), for an accuracy of 99.66%. This work provides a further step forwards toward semi-automated decision support systems for phishing detection.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"vandeweijer-holt-leukfeldt-heterogeneityintrajectoriesofcybercriminalsalongitudinalanalysesofwebdefacements-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://www.sciencedirect.com/science/article/pii/S2451958821000610\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'vandeweijer-holt-leukfeldt-heterogeneityintrajectoriesofcybercriminalsalongitudinalanalysesofwebdefacements-2021', 'https://www.sciencedirect.com/science/article/pii/S2451958821000610', event);\">\n    Heterogeneity in trajectories of cybercriminals: A longitudinal analyses of web defacements.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  van de Weijer, S. G. A.; Holt, T. J.;  and Leukfeldt, E. R.\n</span>\n\n  \n\n</span>\n\n  <i>Computers in Human Behavior Reports</i>, 4: 100113. August 2021.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://www.sciencedirect.com/science/article/pii/S2451958821000610\"\n     onclick=\"log_download('vandeweijer-holt-leukfeldt-heterogeneityintrajectoriesofcybercriminalsalongitudinalanalysesofwebdefacements-2021', 'https://www.sciencedirect.com/science/article/pii/S2451958821000610', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Heterogeneity in trajectories of cybercriminals: A longitudinal analyses of web defacements [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1016/j.chbr.2021.100113\"\n     onclick=\"log_download('vandeweijer-holt-leukfeldt-heterogeneityintrajectoriesofcybercriminalsalongitudinalanalysesofwebdefacements-2021', 'http://doi.org/10.1016/j.chbr.2021.100113', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/vandeweijer-holt-leukfeldt-heterogeneityintrajectoriesofcybercriminalsalongitudinalanalysesofwebdefacements-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('vandeweijer-holt-leukfeldt-heterogeneityintrajectoriesofcybercriminalsalongitudinalanalysesofwebdefacements-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{van_de_weijer_heterogeneity_2021,\n\ttitle = {Heterogeneity in trajectories of cybercriminals: {A} longitudinal analyses of web defacements},\n\tvolume = {4},\n\tissn = {2451-9588},\n\tshorttitle = {Heterogeneity in trajectories of cybercriminals},\n\turl = {https://www.sciencedirect.com/science/article/pii/S2451958821000610},\n\tdoi = {10.1016/j.chbr.2021.100113},\n\tabstract = {Longitudinal criminological studies greatly improved our understanding of the longitudinal patterns of criminality. These studies, however, focused almost exclusively on traditional types of offending and it is therefore unclear whether results are generalizable to online types of offending. This study attempted to identify the developmental trajectories of active hackers who perform web defacements. The data for this study consisted of 2,745,311 attacks performed by 66,553 hackers and reported to Zone-H between January 2010 and March 2017. Semi-parametric group-based trajectory models were used to distinguish six different groups of hackers based on the timing and frequency of their defacements. The results demonstrated some common relationships to traditional types of crime, as a small population of defacers accounted for the majority of defacements against websites. Additionally, the methods and targeting practices of defacers differed based on the frequency with which they performed defacements generally.},\n\tlanguage = {en},\n\turldate = {2022-01-26},\n\tjournal = {Computers in Human Behavior Reports},\n\tauthor = {van de Weijer, Steve G. A. and Holt, Thomas J. and Leukfeldt, E. Rutger},\n\tmonth = aug,\n\tyear = {2021},\n\tkeywords = {Cybercrime, Hacking, Trajectories, Web defacements, Zone-H},\n\tpages = {100113},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Longitudinal criminological studies greatly improved our understanding of the longitudinal patterns of criminality. These studies, however, focused almost exclusively on traditional types of offending and it is therefore unclear whether results are generalizable to online types of offending. This study attempted to identify the developmental trajectories of active hackers who perform web defacements. The data for this study consisted of 2,745,311 attacks performed by 66,553 hackers and reported to Zone-H between January 2010 and March 2017. Semi-parametric group-based trajectory models were used to distinguish six different groups of hackers based on the timing and frequency of their defacements. The results demonstrated some common relationships to traditional types of crime, as a small population of defacers accounted for the majority of defacements against websites. Additionally, the methods and targeting practices of defacers differed based on the frequency with which they performed defacements generally.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"fasano-ballo-muench-leek-bulekov-dolangavitt-egele-francillon-etal-sokenablingsecurityanalysesofembeddedsystemsviarehosting-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://doi.org/10.1145/3433210.3453093\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'fasano-ballo-muench-leek-bulekov-dolangavitt-egele-francillon-etal-sokenablingsecurityanalysesofembeddedsystemsviarehosting-2021', 'https://doi.org/10.1145/3433210.3453093', event);\">\n    SoK: Enabling Security Analyses of Embedded Systems via Rehosting.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Fasano, A.; Ballo, T.; Muench, M.; Leek, T.; Bulekov, A.; Dolan-Gavitt, B.; Egele, M.; Francillon, A.; Lu, L.; Gregory, N.; Balzarotti, D.;  and Robertson, W.\n</span>\n\n  \n\n</span>\n\n  In <i>Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security</i>, pages 687–701. Association for Computing Machinery, New York, NY, USA, May 2021.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://doi.org/10.1145/3433210.3453093\"\n     onclick=\"log_download('fasano-ballo-muench-leek-bulekov-dolangavitt-egele-francillon-etal-sokenablingsecurityanalysesofembeddedsystemsviarehosting-2021', 'https://doi.org/10.1145/3433210.3453093', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"SoK: Enabling Security Analyses of Embedded Systems via Rehosting [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/fasano-ballo-muench-leek-bulekov-dolangavitt-egele-francillon-etal-sokenablingsecurityanalysesofembeddedsystemsviarehosting-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>24 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('fasano-ballo-muench-leek-bulekov-dolangavitt-egele-francillon-etal-sokenablingsecurityanalysesofembeddedsystemsviarehosting-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@incollection{fasano_sok_2021,\n\taddress = {New York, NY, USA},\n\ttitle = {{SoK}: {Enabling} {Security} {Analyses} of {Embedded} {Systems} via {Rehosting}},\n\tisbn = {978-1-4503-8287-8},\n\tshorttitle = {{SoK}},\n\turl = {https://doi.org/10.1145/3433210.3453093},\n\tabstract = {Closely monitoring the behavior of a software system during its execution enables developers and analysts to observe, and ultimately understand, how it works. This kind of dynamic analysis can be instrumental to reverse engineering, vulnerability discovery, exploit development, and debugging. While these analyses are typically well-supported for homogeneous desktop platforms (e.g., x86 desktop PCs), they can rarely be applied in the heterogeneous world of embedded systems. One approach to enable dynamic analyses of embedded systems is to move software stacks from physical systems into virtual environments that sufficiently model hardware behavior. This process which we call &quot;rehosting&quot; poses a significant research challenge with major implications for security analyses. Although rehosting has traditionally been an unscientific and ad-hoc endeavor undertaken by domain experts with varying time and resources at their disposal, researchers are beginning to address rehosting challenges systematically and in earnest. In this paper, we establish that emulation is insufficient to conduct large-scale dynamic analysis of real-world hardware systems and present rehosting as a firmware-centric alternative. Furthermore, we taxonomize preliminary rehosting efforts, identify the fundamental components of the rehosting process, and propose directions for future research.},\n\turldate = {2022-01-26},\n\tbooktitle = {Proceedings of the 2021 {ACM} {Asia} {Conference} on {Computer} and {Communications} {Security}},\n\tpublisher = {Association for Computing Machinery},\n\tauthor = {Fasano, Andrew and Ballo, Tiemoko and Muench, Marius and Leek, Tim and Bulekov, Alexander and Dolan-Gavitt, Brendan and Egele, Manuel and Francillon, Aurélien and Lu, Long and Gregory, Nick and Balzarotti, Davide and Robertson, William},\n\tmonth = may,\n\tyear = {2021},\n\tkeywords = {dynamic program analysis, embedded systems, emulation, firmware security, internet of things, rehosting, virtualization},\n\tpages = {687--701},\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Closely monitoring the behavior of a software system during its execution enables developers and analysts to observe, and ultimately understand, how it works. This kind of dynamic analysis can be instrumental to reverse engineering, vulnerability discovery, exploit development, and debugging. While these analyses are typically well-supported for homogeneous desktop platforms (e.g., x86 desktop PCs), they can rarely be applied in the heterogeneous world of embedded systems. One approach to enable dynamic analyses of embedded systems is to move software stacks from physical systems into virtual environments that sufficiently model hardware behavior. This process which we call \"rehosting\" poses a significant research challenge with major implications for security analyses. Although rehosting has traditionally been an unscientific and ad-hoc endeavor undertaken by domain experts with varying time and resources at their disposal, researchers are beginning to address rehosting challenges systematically and in earnest. In this paper, we establish that emulation is insufficient to conduct large-scale dynamic analysis of real-world hardware systems and present rehosting as a firmware-centric alternative. Furthermore, we taxonomize preliminary rehosting efforts, identify the fundamental components of the rehosting process, and propose directions for future research.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"ragab-barberis-bos-giuffrida-rageagainstthemachineclearasystematicanalysisofmachineclearsandtheirimplicationsfortransientexecutionattacks-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://www.usenix.org/conference/usenixsecurity21/presentation/ragab\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'ragab-barberis-bos-giuffrida-rageagainstthemachineclearasystematicanalysisofmachineclearsandtheirimplicationsfortransientexecutionattacks-2021', 'https://www.usenix.org/conference/usenixsecurity21/presentation/ragab', event);\">\n    Rage Against the Machine Clear: A Systematic Analysis of Machine Clears and Their Implications for Transient Execution Attacks.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Ragab, H.; Barberis, E.; Bos, H.;  and Giuffrida, C.\n</span>\n\n  \n\n</span>\n\n  In pages 1451–1468,  2021. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://www.usenix.org/conference/usenixsecurity21/presentation/ragab\"\n     onclick=\"log_download('ragab-barberis-bos-giuffrida-rageagainstthemachineclearasystematicanalysisofmachineclearsandtheirimplicationsfortransientexecutionattacks-2021', 'https://www.usenix.org/conference/usenixsecurity21/presentation/ragab', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Rage Against the Machine Clear: A Systematic Analysis of Machine Clears and Their Implications for Transient Execution Attacks [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/ragab-barberis-bos-giuffrida-rageagainstthemachineclearasystematicanalysisofmachineclearsandtheirimplicationsfortransientexecutionattacks-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>338 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('ragab-barberis-bos-giuffrida-rageagainstthemachineclearasystematicanalysisofmachineclearsandtheirimplicationsfortransientexecutionattacks-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{ragab_rage_2021,\n\ttitle = {Rage {Against} the {Machine} {Clear}: {A} {Systematic} {Analysis} of {Machine} {Clears} and {Their} {Implications} for {Transient} {Execution} {Attacks}},\n\tisbn = {978-1-939133-24-3},\n\tshorttitle = {Rage {Against} the {Machine} {Clear}},\n\turl = {https://www.usenix.org/conference/usenixsecurity21/presentation/ragab},\n\tlanguage = {en},\n\turldate = {2022-01-26},\n\tauthor = {Ragab, Hany and Barberis, Enrico and Bos, Herbert and Giuffrida, Cristiano},\n\tyear = {2021},\n\tpages = {1451--1468},\n}\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"pletinckx-borgolte-fiebig-outofsightoutofminddetectingorphanedwebpagesatinternetscale-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://dl.acm.org/doi/abs/10.1145/3460120.3485367\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'pletinckx-borgolte-fiebig-outofsightoutofminddetectingorphanedwebpagesatinternetscale-2021', 'https://dl.acm.org/doi/abs/10.1145/3460120.3485367', event);\">\n    Out of Sight, Out of Mind: Detecting Orphaned Web Pages at Internet-Scale.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Pletinckx, S.; Borgolte, K.;  and Fiebig, T.\n</span>\n\n  \n\n</span>\n\n  In <i>Proc. of ACM Computer and Communication Security</i>, pages 21–35, Virtual, November 2021. ACM\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://dl.acm.org/doi/abs/10.1145/3460120.3485367\"\n     onclick=\"log_download('pletinckx-borgolte-fiebig-outofsightoutofminddetectingorphanedwebpagesatinternetscale-2021', 'https://dl.acm.org/doi/abs/10.1145/3460120.3485367', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Out of Sight, Out of Mind: Detecting Orphaned Web Pages at Internet-Scale [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/https://doi.org/10.1145/3460120.3485367\"\n     onclick=\"log_download('pletinckx-borgolte-fiebig-outofsightoutofminddetectingorphanedwebpagesatinternetscale-2021', 'http://doi.org/https://doi.org/10.1145/3460120.3485367', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/pletinckx-borgolte-fiebig-outofsightoutofminddetectingorphanedwebpagesatinternetscale-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('pletinckx-borgolte-fiebig-outofsightoutofminddetectingorphanedwebpagesatinternetscale-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{pletinckx_out_2021,\n\taddress = {Virtual},\n\ttitle = {Out of {Sight}, {Out} of {Mind}: {Detecting} {Orphaned} {Web} {Pages} at {Internet}-{Scale}},\n\turl = {https://dl.acm.org/doi/abs/10.1145/3460120.3485367},\n\tdoi = {https://doi.org/10.1145/3460120.3485367},\n\tabstract = {Security misconfigurations and neglected updates commonly lead\nto systems being vulnerable. Especially in the context of websites,\nwe often find pages that were forgotten, that is, they were left online after they served their purpose and never updated thereafter.\nIn this paper, we introduce new methodology to detect such forgotten or orphaned web pages. We combine historic data from the\nInternet Archive with active measurements to identify pages no\nlonger reachable via a path from the index page, yet stay accessible\nthrough their specific URL. We show the efficacy of our approach\nand the real-world relevance of orphaned web-pages by applying\nit to a sample of 100,000 domains from the Tranco Top 1M.\nLeveraging our methodology, we find 1,953 pages on 907 unique\ndomains that are orphaned, some of which are 20 years old. Analyzing their security posture, we find that these pages are significantly (𝑝 {\\textless} 0.01 using 𝜒\n2\n) more likely to be vulnerable to crosssite scripting (XSS) and SQL injection (SQLi) vulnerabilities than\nmaintained pages. In fact, orphaned pages are almost ten times as\nlikely to suffer from XSS (19.3\\%) than maintained pages from a random Internet crawl (2.0\\%), and maintained pages of websites with\nsome orphans are almost three times as vulnerable (5.9\\%). Concerning SQLi, maintained pages on websites with some orphans\nare almost as vulnerable (9.5\\%) as orphans (10.8\\%), and both are\nsignificantly more likely to be vulnerable than other maintained\npages (2.7\\%). Overall, we see a clear hierarchy: Orphaned pages\nare the most vulnerable, followed by maintained pages on websites\nwith orphans, with fully maintained sites being least vulnerable.\nWe share an open source implementation of our methodology to\nenable the reproduction and application of our results in practice.},\n\tbooktitle = {Proc. of {ACM} {Computer} and {Communication} {Security}},\n\tpublisher = {ACM},\n\tauthor = {Pletinckx, Stijn and Borgolte, Kevin and Fiebig, Tobias},\n\tmonth = nov,\n\tyear = {2021},\n\tkeywords = {INTERSCT},\n\tpages = {21--35},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Security misconfigurations and neglected updates commonly lead to systems being vulnerable. Especially in the context of websites, we often find pages that were forgotten, that is, they were left online after they served their purpose and never updated thereafter. In this paper, we introduce new methodology to detect such forgotten or orphaned web pages. We combine historic data from the Internet Archive with active measurements to identify pages no longer reachable via a path from the index page, yet stay accessible through their specific URL. We show the efficacy of our approach and the real-world relevance of orphaned web-pages by applying it to a sample of 100,000 domains from the Tranco Top 1M. Leveraging our methodology, we find 1,953 pages on 907 unique domains that are orphaned, some of which are 20 years old. Analyzing their security posture, we find that these pages are significantly (𝑝 \\textless 0.01 using 𝜒 2 ) more likely to be vulnerable to crosssite scripting (XSS) and SQL injection (SQLi) vulnerabilities than maintained pages. In fact, orphaned pages are almost ten times as likely to suffer from XSS (19.3%) than maintained pages from a random Internet crawl (2.0%), and maintained pages of websites with some orphans are almost three times as vulnerable (5.9%). Concerning SQLi, maintained pages on websites with some orphans are almost as vulnerable (9.5%) as orphans (10.8%), and both are significantly more likely to be vulnerable than other maintained pages (2.7%). Overall, we see a clear hierarchy: Orphaned pages are the most vulnerable, followed by maintained pages on websites with orphans, with fully maintained sites being least vulnerable. We share an open source implementation of our methodology to enable the reproduction and application of our results in practice.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"sciancalepore-tedeschi-riasat-dipietro-mitigatingenergydepletionattacksiniotviarandomtimeslottedchannelaccess-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://intersct.nl/wp-content/uploads/2021/11/2021_Sciancalepore_CNS.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'sciancalepore-tedeschi-riasat-dipietro-mitigatingenergydepletionattacksiniotviarandomtimeslottedchannelaccess-2021', 'https://intersct.nl/wp-content/uploads/2021/11/2021_Sciancalepore_CNS.pdf', event);\">\n    Mitigating Energy Depletion Attacks in IoT via Random Time-Slotted Channel Access.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Sciancalepore, S.; Tedeschi, P.; Riasat, U.;  and Di Pietro, R.\n</span>\n\n  \n\n</span>\n\n  In <i>Proc. of IEEE Conference on Computer and Communications Security</i>, Virtual, October 2021. IEEE\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://intersct.nl/wp-content/uploads/2021/11/2021_Sciancalepore_CNS.pdf\"\n     onclick=\"log_download('sciancalepore-tedeschi-riasat-dipietro-mitigatingenergydepletionattacksiniotviarandomtimeslottedchannelaccess-2021', 'https://intersct.nl/wp-content/uploads/2021/11/2021_Sciancalepore_CNS.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"Mitigating Energy Depletion Attacks in IoT via Random Time-Slotted Channel Access [pdf]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/sciancalepore-tedeschi-riasat-dipietro-mitigatingenergydepletionattacksiniotviarandomtimeslottedchannelaccess-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('sciancalepore-tedeschi-riasat-dipietro-mitigatingenergydepletionattacksiniotviarandomtimeslottedchannelaccess-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{sciancalepore_mitigating_2021,\n\taddress = {Virtual},\n\ttitle = {Mitigating {Energy} {Depletion} {Attacks} in {IoT} via {Random} {Time}-{Slotted} {Channel} {Access}},\n\turl = {https://intersct.nl/wp-content/uploads/2021/11/2021_Sciancalepore_CNS.pdf},\n\tabstract = {Energy depletion attacks represent a challenging\nthreat towards the secure and reliable deployment of low-power\nInternet of Things (IoT) networks. Indeed, by simply transmitting\ncanning standard-compliant packets to a target IoT device, an\nadversary can quickly exhaust target devices’ available energy\nand reduce network lifetime, leading to extensive Denial-ofService (DoS). Current solutions to tackle energy depletion attacks\nmainly rely on ex-post detection of the attack and the adoption\nof follow-up countermeasures. Still, the cited approaches cannot\nprevent external adversaries from sending wireless packets to\ntarget devices and draining down their energy budget.\nIn this paper, we present RTSCA, a novel countermeasure to\nenergy depletion attacks in IoT networks, that leverages Random\nTime-Slotted Channel Access. RTSCA randomizes channel access\noperations executed by a couple of directly-connected IoT devices\noperating through the IEEE 802.15.4 MAC, significantly reducing\nthe time window of opportunity for the attacker, with little-to-none\nenergy cost on legitimate IoT devices. RTSCA also includes a detection mechanism targeted to the recently-introduced Truncateafter-Preamble (TaP) energy depletion attacks, that leverages\nthe observation of error patterns in the received packets. We\ncarried out an extensive performance assessment campaign on\nreal Openmote-b IoT nodes, showing that RTSCA forces the\nadversary to behave as a (sub-optimal) reactive jammer to achieve\nenergy depletion attacks. In such a setting, the adversary has to\nspend between 42.5\\% and 55\\% more energy to carry out the\nattack, while at the same time having no deterministic chances\nof success},\n\tbooktitle = {Proc. of {IEEE} {Conference} on {Computer} and {Communications} {Security}},\n\tpublisher = {IEEE},\n\tauthor = {Sciancalepore, Savio and Tedeschi, Pietro and Riasat, Usman and Di Pietro, Roberto},\n\tmonth = oct,\n\tyear = {2021},\n\tkeywords = {INTERSCT, WP3},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Energy depletion attacks represent a challenging threat towards the secure and reliable deployment of low-power Internet of Things (IoT) networks. Indeed, by simply transmitting canning standard-compliant packets to a target IoT device, an adversary can quickly exhaust target devices’ available energy and reduce network lifetime, leading to extensive Denial-ofService (DoS). Current solutions to tackle energy depletion attacks mainly rely on ex-post detection of the attack and the adoption of follow-up countermeasures. Still, the cited approaches cannot prevent external adversaries from sending wireless packets to target devices and draining down their energy budget. In this paper, we present RTSCA, a novel countermeasure to energy depletion attacks in IoT networks, that leverages Random Time-Slotted Channel Access. RTSCA randomizes channel access operations executed by a couple of directly-connected IoT devices operating through the IEEE 802.15.4 MAC, significantly reducing the time window of opportunity for the attacker, with little-to-none energy cost on legitimate IoT devices. RTSCA also includes a detection mechanism targeted to the recently-introduced Truncateafter-Preamble (TaP) energy depletion attacks, that leverages the observation of error patterns in the received packets. We carried out an extensive performance assessment campaign on real Openmote-b IoT nodes, showing that RTSCA forces the adversary to behave as a (sub-optimal) reactive jammer to achieve energy depletion attacks. In such a setting, the adversary has to spend between 42.5% and 55% more energy to carry out the attack, while at the same time having no deterministic chances of success\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"tedeschi-sciancalepore-dipietro-aridanonymousremoteidenticationofunmannedaerialvehicles-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://intersct.nl/wp-content/uploads/2021/11/2021_Tedeschi_ACSAC.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'tedeschi-sciancalepore-dipietro-aridanonymousremoteidenticationofunmannedaerialvehicles-2021', 'https://intersct.nl/wp-content/uploads/2021/11/2021_Tedeschi_ACSAC.pdf', event);\">\n    ARID – Anonymous Remote Identication of Unmanned Aerial Vehicles.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Tedeschi, P.; Sciancalepore, S.;  and Di Pietro, R.\n</span>\n\n  \n\n</span>\n\n  In <i>Proc. of ACM Annual Computer Security Applications Conference (ACSAC)</i>, Virtual, December 2021. ACM\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://intersct.nl/wp-content/uploads/2021/11/2021_Tedeschi_ACSAC.pdf\"\n     onclick=\"log_download('tedeschi-sciancalepore-dipietro-aridanonymousremoteidenticationofunmannedaerialvehicles-2021', 'https://intersct.nl/wp-content/uploads/2021/11/2021_Tedeschi_ACSAC.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"ARID – Anonymous Remote Identication of Unmanned Aerial Vehicles [pdf]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/tedeschi-sciancalepore-dipietro-aridanonymousremoteidenticationofunmannedaerialvehicles-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('tedeschi-sciancalepore-dipietro-aridanonymousremoteidenticationofunmannedaerialvehicles-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{tedeschi_arid_2021,\n\taddress = {Virtual},\n\ttitle = {{ARID} – {Anonymous} {Remote} {Identication} of {Unmanned} {Aerial} {Vehicles}},\n\turl = {https://intersct.nl/wp-content/uploads/2021/11/2021_Tedeschi_ACSAC.pdf},\n\tabstract = {To enable enhanced accountability of Unmanned Aerial Vehicles\n(UAVs) operations, the US-based Federal Avionics Administration\n(FAA) recently published a new dedicated regulation, namely RemoteID, requiring UAV operators to broadcast messages reporting\ntheir identity and location. The enforcement of such a rule, mandatory by 2022, generated significant concerns on UAV operators,\nprimarily because of privacy issues derived by the indiscriminate\nbroadcast of the plain-text identity of the UAV on the wireless\nchannel.\nIn this paper, we propose ARID, a solution enabling RemoteIDcompliant Anonymous Remote Identification of UAVs. The adoption\nof ARID allows UAVs to broadcast RemoteID-compliant messages\nusing ephemeral pseudonyms that only a Trusted Authority, such\nas the FAA, can link to the long-term identifier of the UAV and its\noperator. Moreover, ARID also enforces UAV message authenticity,\nto protect UAVs against impersonation and spoofed reporting, while\nrequiring an overall minimal toll on the battery budget. Furthermore, ARID generates negligible overhead on the Trusted Authority,\nnot requiring the secure maintenance of any private database.\nWhile the security properties of ARID are thoroughly discussed\nand formally verified with ProVerif, we also implemented a prototype of ARID on a real UAV, i.e., the 3DR-Solo drone, integrating our\nsolution within the popular Poky Operating System, on top of the\nwidespread MAVLink protocol. Our experimental performance evaluation shows that the most demanding configuration of ARID takes\nonly ≈ 11.23 ms to generate a message and requires a mere 4.72 mJ\nof energy. Finally, we also released the source code of ARID to foster\nfurther investigations and development by Academia, Industry, and practitioners},\n\tbooktitle = {Proc. of {ACM} {Annual} {Computer} {Security} {Applications} {Conference} ({ACSAC})},\n\tpublisher = {ACM},\n\tauthor = {Tedeschi, Pietro and Sciancalepore, Savio and Di Pietro, Roberto},\n\tmonth = dec,\n\tyear = {2021},\n\tkeywords = {INTERSCT, WP3, WP56},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  To enable enhanced accountability of Unmanned Aerial Vehicles (UAVs) operations, the US-based Federal Avionics Administration (FAA) recently published a new dedicated regulation, namely RemoteID, requiring UAV operators to broadcast messages reporting their identity and location. The enforcement of such a rule, mandatory by 2022, generated significant concerns on UAV operators, primarily because of privacy issues derived by the indiscriminate broadcast of the plain-text identity of the UAV on the wireless channel. In this paper, we propose ARID, a solution enabling RemoteIDcompliant Anonymous Remote Identification of UAVs. The adoption of ARID allows UAVs to broadcast RemoteID-compliant messages using ephemeral pseudonyms that only a Trusted Authority, such as the FAA, can link to the long-term identifier of the UAV and its operator. Moreover, ARID also enforces UAV message authenticity, to protect UAVs against impersonation and spoofed reporting, while requiring an overall minimal toll on the battery budget. Furthermore, ARID generates negligible overhead on the Trusted Authority, not requiring the secure maintenance of any private database. While the security properties of ARID are thoroughly discussed and formally verified with ProVerif, we also implemented a prototype of ARID on a real UAV, i.e., the 3DR-Solo drone, integrating our solution within the popular Poky Operating System, on top of the widespread MAVLink protocol. Our experimental performance evaluation shows that the most demanding configuration of ARID takes only ≈ 11.23 ms to generate a message and requires a mere 4.72 mJ of energy. Finally, we also released the source code of ARID to foster further investigations and development by Academia, Industry, and practitioners\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"vanaubel-poll-compromisedthroughcompressionprivacyimplicationsofsmartmetertrafficanalysis-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://link.springer.com/chapter/10.1007%2F978-3-030-90022-9_16\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'vanaubel-poll-compromisedthroughcompressionprivacyimplicationsofsmartmetertrafficanalysis-2021', 'https://link.springer.com/chapter/10.1007%2F978-3-030-90022-9_16', event);\">\n    Compromised through Compression – Privacy Implications of Smart Meter Traffic Analysis.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Van Aubel, P.;  and Poll, E.\n</span>\n\n  \n\n</span>\n\n  In <i>Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering 2021</i>, volume 399, of <i>LNICST</i>, pages 317–337, Virtual,  2021. Springer\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://link.springer.com/chapter/10.1007%2F978-3-030-90022-9_16\"\n     onclick=\"log_download('vanaubel-poll-compromisedthroughcompressionprivacyimplicationsofsmartmetertrafficanalysis-2021', 'https://link.springer.com/chapter/10.1007%2F978-3-030-90022-9_16', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Compromised through Compression – Privacy Implications of Smart Meter Traffic Analysis [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1007/978-3-030-90022-9_16\"\n     onclick=\"log_download('vanaubel-poll-compromisedthroughcompressionprivacyimplicationsofsmartmetertrafficanalysis-2021', 'http://doi.org/10.1007/978-3-030-90022-9_16', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/vanaubel-poll-compromisedthroughcompressionprivacyimplicationsofsmartmetertrafficanalysis-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('vanaubel-poll-compromisedthroughcompressionprivacyimplicationsofsmartmetertrafficanalysis-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{van_aubel_compromised_2021,\n\taddress = {Virtual},\n\tseries = {{LNICST}},\n\ttitle = {Compromised through {Compression} – {Privacy} {Implications} of {Smart} {Meter} {Traffic} {Analysis}},\n\tvolume = {399},\n\turl = {https://link.springer.com/chapter/10.1007%2F978-3-030-90022-9_16},\n\tdoi = {10.1007/978-3-030-90022-9_16},\n\tabstract = {Smart metering comes with risks to privacy. One concern is\nthe possibility of an attacker seeing the traffic that reports the energy use\nof a household and deriving private information from that. Encryption\nhelps to mask the actual energy measurements, but is not sufficient to\ncover all risks. One aspect which has yet gone unexplored – and where\nencryption does not help – is traffic analysis, i.e. whether the length of\nmessages communicating energy measurements can leak privacy-sensitive\ninformation to an observer. In this paper we examine whether using\nencodings or compression for smart metering data could potentially leak\ninformation about household energy use. Our analysis is based on the\nreal-world energy use data of ±80 Dutch households.\nWe find that traffic analysis could reveal information about the energy\nuse of individual households if compression is used. As a result, when\nmessages are sent daily, an attacker performing traffic analysis would\nbe able to determine when all the members of a household are away\nor not using electricity for an entire day. We demonstrate this issue by\nrecognizing when households from our dataset were on holiday. If messages are sent more often, more granular living patterns could likely be\ndetermined.\nWe propose a method of encoding the data that is nearly as effective as\ncompression at reducing message size, but does not leak the information\nthat compression leaks. By not requiring compression to achieve the best\npossible data savings, the risk of traffic analysis is eliminated.},\n\tbooktitle = {Lecture {Notes} of the {Institute} for {Computer} {Sciences}, {Social} {Informatics} and {Telecommunications} {Engineering} 2021},\n\tpublisher = {Springer},\n\tauthor = {Van Aubel, Pol and Poll, Erik},\n\tyear = {2021},\n\tkeywords = {INTERSCT, WP3, WP56},\n\tpages = {317--337},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Smart metering comes with risks to privacy. One concern is the possibility of an attacker seeing the traffic that reports the energy use of a household and deriving private information from that. Encryption helps to mask the actual energy measurements, but is not sufficient to cover all risks. One aspect which has yet gone unexplored – and where encryption does not help – is traffic analysis, i.e. whether the length of messages communicating energy measurements can leak privacy-sensitive information to an observer. In this paper we examine whether using encodings or compression for smart metering data could potentially leak information about household energy use. Our analysis is based on the real-world energy use data of ±80 Dutch households. We find that traffic analysis could reveal information about the energy use of individual households if compression is used. As a result, when messages are sent daily, an attacker performing traffic analysis would be able to determine when all the members of a household are away or not using electricity for an entire day. We demonstrate this issue by recognizing when households from our dataset were on holiday. If messages are sent more often, more granular living patterns could likely be determined. We propose a method of encoding the data that is nearly as effective as compression at reducing message size, but does not leak the information that compression leaks. By not requiring compression to achieve the best possible data savings, the risk of traffic analysis is eliminated.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"dupont-leite-dossantos-costante-denhartog-etalle-similaritybasedclusteringforiotdeviceclassification-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  Similarity-Based Clustering For IoT Device Classification.\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Dupont, G.; Leite, C.; dos Santos, D. R.; Costante, E.; den Hartog, J.;  and Etalle, S.\n</span>\n\n  \n\n</span>\n\n  In <i>2021 IEEE International Conference on Omni-Layer Intelligent Systems (COINS)</i>, pages 1–7,  2021. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n\n  \n  <a href=\"http://doi.org/10.1109/COINS51742.2021.9524201\"\n     onclick=\"log_download('dupont-leite-dossantos-costante-denhartog-etalle-similaritybasedclusteringforiotdeviceclassification-2021', 'http://doi.org/10.1109/COINS51742.2021.9524201', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/dupont-leite-dossantos-costante-denhartog-etalle-similaritybasedclusteringforiotdeviceclassification-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('dupont-leite-dossantos-costante-denhartog-etalle-similaritybasedclusteringforiotdeviceclassification-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{dupont_similarity-based_2021,\n\ttitle = {Similarity-{Based} {Clustering} {For} {IoT} {Device} {Classification}},\n\tdoi = {10.1109/COINS51742.2021.9524201},\n\tabstract = {Classifying devices connected to an enterprise network is a fundamental security control that is nevertheless challenging due to the limitations of fingerprint-based classification and black-box machine learning. In this paper, we address such limitations by proposing a similarity-based clustering method. We evaluate our solution and compare it to a state-of-the-art fingerprint-based classification engine using data from 20,000 devices. The results show that we can successfully classify around half of the unclassified devices with a high accuracy. We also validate our approach with domain experts to demonstrate its usability in producing new fingerprinting rules.},\n\tbooktitle = {2021 {IEEE} {International} {Conference} on {Omni}-{Layer} {Intelligent} {Systems} ({COINS})},\n\tauthor = {Dupont, Guillaume and Leite, Cristoffer and dos Santos, Daniel Ricardo and Costante, Elisa and den Hartog, Jerry and Etalle, Sandro},\n\tyear = {2021},\n\tkeywords = {Classification, Clustering, Fingerprint recognition, INTERSCT, Internet of Things, Machine learning, Manuals, Performance evaluation, Process control, Reliability engineering, Semantics},\n\tpages = {1--7},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Classifying devices connected to an enterprise network is a fundamental security control that is nevertheless challenging due to the limitations of fingerprint-based classification and black-box machine learning. In this paper, we address such limitations by proposing a similarity-based clustering method. We evaluate our solution and compare it to a state-of-the-art fingerprint-based classification engine using data from 20,000 devices. The results show that we can successfully classify around half of the unclassified devices with a high accuracy. We also validate our approach with domain experts to demonstrate its usability in producing new fingerprinting rules.\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2020\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2020')\"\n      onkeypress=\"toggleGroup('group_2020')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2020</span>\n      <span class=\"bibbase_group_count\">\n        \n        (5)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"walree-wolters-therighttocompensationofacompetitorforaviolationofthegdpr-2020\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://doi.org/10.1093/idpl/ipaa018\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'walree-wolters-therighttocompensationofacompetitorforaviolationofthegdpr-2020', 'https://doi.org/10.1093/idpl/ipaa018', event);\">\n    The right to compensation of a competitor for a violation of the GDPR.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Walree, T. F;  and Wolters, P. T J\n</span>\n\n  \n\n</span>\n\n  <i>International Data Privacy Law</i>, 10(4): 346–355. November 2020.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://doi.org/10.1093/idpl/ipaa018\"\n     onclick=\"log_download('walree-wolters-therighttocompensationofacompetitorforaviolationofthegdpr-2020', 'https://doi.org/10.1093/idpl/ipaa018', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"The right to compensation of a competitor for a violation of the GDPR [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1093/idpl/ipaa018\"\n     onclick=\"log_download('walree-wolters-therighttocompensationofacompetitorforaviolationofthegdpr-2020', 'http://doi.org/10.1093/idpl/ipaa018', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/walree-wolters-therighttocompensationofacompetitorforaviolationofthegdpr-2020\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('walree-wolters-therighttocompensationofacompetitorforaviolationofthegdpr-2020')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{walree_right_2020,\n\ttitle = {The right to compensation of a competitor for a violation of the {GDPR}},\n\tvolume = {10},\n\tissn = {2044-3994},\n\turl = {https://doi.org/10.1093/idpl/ipaa018},\n\tdoi = {10.1093/idpl/ipaa018},\n\tabstract = {Key PointsAlthough the General Data Protection Regulation (GDPR) is primarily aimed at the protection of data subjects, competitors of the controller may also suffer damage due to an infringement.Article 82(1) of the GDPR stipulates that ‘any person’ shall have the right to receive compensation. It does not clarify whether a competitor can also invoke this right.At first sight, a right to compensation for competitors does not match the primary purpose of the GDPR.However, the GDPR also intends to advance the free movement of personal data, strengthen the protection of personal data, and harmonize data protection law. The right to compensation of competitors can make a meaningful contribution to these objectives.Furthermore, other provisions of European origin also allow enforcement by competitors.},\n\tnumber = {4},\n\turldate = {2022-01-26},\n\tjournal = {International Data Privacy Law},\n\tauthor = {Walree, Tim F and Wolters, Pieter T J},\n\tmonth = nov,\n\tyear = {2020},\n\tpages = {346--355},\n}\n\n\n\n\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Key PointsAlthough the General Data Protection Regulation (GDPR) is primarily aimed at the protection of data subjects, competitors of the controller may also suffer damage due to an infringement.Article 82(1) of the GDPR stipulates that ‘any person’ shall have the right to receive compensation. It does not clarify whether a competitor can also invoke this right.At first sight, a right to compensation for competitors does not match the primary purpose of the GDPR.However, the GDPR also intends to advance the free movement of personal data, strengthen the protection of personal data, and harmonize data protection law. The right to compensation of competitors can make a meaningful contribution to these objectives.Furthermore, other provisions of European origin also allow enforcement by competitors.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"pirocca-allodi-zannone-atoolkitforsecurityawarenesstrainingagainsttargetedphishing-2020\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://www.researchgate.net/publication/347625933_A_Toolkit_for_Security_Awareness_Training_Against_Targeted_Phishing\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'pirocca-allodi-zannone-atoolkitforsecurityawarenesstrainingagainsttargetedphishing-2020', 'https://www.researchgate.net/publication/347625933_A_Toolkit_for_Security_Awareness_Training_Against_Targeted_Phishing', event);\">\n    A Toolkit for Security Awareness Training Against Targeted Phishing.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Pirocca, S.; Allodi, L.;  and Zannone, N.\n</span>\n\n  \n\n</span>\n\n  In pages 137–159. December 2020.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://www.researchgate.net/publication/347625933_A_Toolkit_for_Security_Awareness_Training_Against_Targeted_Phishing\"\n     onclick=\"log_download('pirocca-allodi-zannone-atoolkitforsecurityawarenesstrainingagainsttargetedphishing-2020', 'https://www.researchgate.net/publication/347625933_A_Toolkit_for_Security_Awareness_Training_Against_Targeted_Phishing', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"A Toolkit for Security Awareness Training Against Targeted Phishing [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1007/978-3-030-65610-2_9\"\n     onclick=\"log_download('pirocca-allodi-zannone-atoolkitforsecurityawarenesstrainingagainsttargetedphishing-2020', 'http://doi.org/10.1007/978-3-030-65610-2_9', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/pirocca-allodi-zannone-atoolkitforsecurityawarenesstrainingagainsttargetedphishing-2020\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('pirocca-allodi-zannone-atoolkitforsecurityawarenesstrainingagainsttargetedphishing-2020')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@incollection{pirocca_toolkit_2020,\n\ttitle = {A {Toolkit} for {Security} {Awareness} {Training} {Against} {Targeted} {Phishing}},\n\tisbn = {978-3-030-65609-6},\n\turl = {https://www.researchgate.net/publication/347625933_A_Toolkit_for_Security_Awareness_Training_Against_Targeted_Phishing},\n\tabstract = {The attack landscape is evolving, and attackers are employing new techniques to launch increasingly targeted and sophisticated social engineering attacks that exploit human vulnerabilities. Many organizations provide their employees with security awareness training to counter and mitigate such threats. However, recent studies have shown that current embedded phishing training programs and tools are often ineffective or incapable of addressing modern, tailored social engineering attacks. This paper presents a toolkit for the deployment of sophisticated, tailored phishing campaigns at scale (e.g., to deploy specific training within an organization). We enable the use of highly customizable phishing email templates that can be instantiated with a large range of information about the specific target and a semi-automated process for the selection of the phishing domain name. We demonstrate our tool by showing how tailored phishing campaigns proposed in previous studies can be enhanced to increase the credibility of the phishing email, effectively addressing the very limitations identified in those studies.},\n\tauthor = {Pirocca, Simone and Allodi, Luca and Zannone, Nicola},\n\tmonth = dec,\n\tyear = {2020},\n\tdoi = {10.1007/978-3-030-65610-2_9},\n\tpages = {137--159},\n}\n\n\n\n\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  The attack landscape is evolving, and attackers are employing new techniques to launch increasingly targeted and sophisticated social engineering attacks that exploit human vulnerabilities. Many organizations provide their employees with security awareness training to counter and mitigate such threats. However, recent studies have shown that current embedded phishing training programs and tools are often ineffective or incapable of addressing modern, tailored social engineering attacks. This paper presents a toolkit for the deployment of sophisticated, tailored phishing campaigns at scale (e.g., to deploy specific training within an organization). We enable the use of highly customizable phishing email templates that can be instantiated with a large range of information about the specific target and a semi-automated process for the selection of the phishing domain name. We demonstrate our tool by showing how tailored phishing campaigns proposed in previous studies can be enhanced to increase the credibility of the phishing email, effectively addressing the very limitations identified in those studies.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"rosso-campobasso-gankhuyag-allodi-saibersocsyntheticattackinjectiontobenchmarkandevaluatetheperformanceofsecurityoperationcenters-2020\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://doi.org/10.1145/3427228.3427233\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'rosso-campobasso-gankhuyag-allodi-saibersocsyntheticattackinjectiontobenchmarkandevaluatetheperformanceofsecurityoperationcenters-2020', 'https://doi.org/10.1145/3427228.3427233', event);\">\n    SAIBERSOC: Synthetic Attack Injection to Benchmark and Evaluate the Performance of Security Operation Centers.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Rosso, M.; Campobasso, M.; Gankhuyag, G.;  and Allodi, L.\n</span>\n\n  \n\n</span>\n\n  In <i>Annual Computer Security Applications Conference</i>, of <i>ACSAC '20</i>, pages 141–153, New York, NY, USA, December 2020. Association for Computing Machinery\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://doi.org/10.1145/3427228.3427233\"\n     onclick=\"log_download('rosso-campobasso-gankhuyag-allodi-saibersocsyntheticattackinjectiontobenchmarkandevaluatetheperformanceofsecurityoperationcenters-2020', 'https://doi.org/10.1145/3427228.3427233', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"SAIBERSOC: Synthetic Attack Injection to Benchmark and Evaluate the Performance of Security Operation Centers [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1145/3427228.3427233\"\n     onclick=\"log_download('rosso-campobasso-gankhuyag-allodi-saibersocsyntheticattackinjectiontobenchmarkandevaluatetheperformanceofsecurityoperationcenters-2020', 'http://doi.org/10.1145/3427228.3427233', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/rosso-campobasso-gankhuyag-allodi-saibersocsyntheticattackinjectiontobenchmarkandevaluatetheperformanceofsecurityoperationcenters-2020\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('rosso-campobasso-gankhuyag-allodi-saibersocsyntheticattackinjectiontobenchmarkandevaluatetheperformanceofsecurityoperationcenters-2020')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{rosso_saibersoc_2020,\n\taddress = {New York, NY, USA},\n\tseries = {{ACSAC} &#x27;20},\n\ttitle = {{SAIBERSOC}: {Synthetic} {Attack} {Injection} to {Benchmark} and {Evaluate} the {Performance} of {Security} {Operation} {Centers}},\n\tisbn = {978-1-4503-8858-0},\n\tshorttitle = {{SAIBERSOC}},\n\turl = {https://doi.org/10.1145/3427228.3427233},\n\tdoi = {10.1145/3427228.3427233},\n\tabstract = {In this paper we introduce SAIBERSOC, a tool and methodology enabling security researchers and operators to evaluate the performance of deployed and operational Security Operation Centers (SOCs) (or any other security monitoring infrastructure). The methodology relies on the MITRE ATT\\&amp;CK Framework to define a procedure to generate and automatically inject synthetic attacks in an operational SOC to evaluate any output metric of interest (e.g., detection accuracy, time-to-investigation, etc.). To evaluate the effectiveness of the proposed methodology, we devise an experiment with n = 124 students playing the role of SOC analysts. The experiment relies on a real SOC infrastructure and assigns students to either a BADSOC or a GOODSOC experimental condition. Our results show that the proposed methodology is effective in identifying variations in SOC performance caused by (minimal) changes in SOC configuration. We release the SAIBERSOC tool implementation as free and open source software.},\n\turldate = {2022-01-26},\n\tbooktitle = {Annual {Computer} {Security} {Applications} {Conference}},\n\tpublisher = {Association for Computing Machinery},\n\tauthor = {Rosso, Martin and Campobasso, Michele and Gankhuyag, Ganduulga and Allodi, Luca},\n\tmonth = dec,\n\tyear = {2020},\n\tkeywords = {Cyber Security Operations Center, Evaluation, Performance, SOC},\n\tpages = {141--153},\n}\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  In this paper we introduce SAIBERSOC, a tool and methodology enabling security researchers and operators to evaluate the performance of deployed and operational Security Operation Centers (SOCs) (or any other security monitoring infrastructure). The methodology relies on the MITRE ATT&CK Framework to define a procedure to generate and automatically inject synthetic attacks in an operational SOC to evaluate any output metric of interest (e.g., detection accuracy, time-to-investigation, etc.). To evaluate the effectiveness of the proposed methodology, we devise an experiment with n = 124 students playing the role of SOC analysts. The experiment relies on a real SOC infrastructure and assigns students to either a BADSOC or a GOODSOC experimental condition. Our results show that the proposed methodology is effective in identifying variations in SOC performance caused by (minimal) changes in SOC configuration. We release the SAIBERSOC tool implementation as free and open source software.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"campobasso-allodi-impersonationasaservicecharacterizingtheemergingcriminalinfrastructureforuserimpersonationatscale-2020\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://doi.org/10.1145/3372297.3417892\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'campobasso-allodi-impersonationasaservicecharacterizingtheemergingcriminalinfrastructureforuserimpersonationatscale-2020', 'https://doi.org/10.1145/3372297.3417892', event);\">\n    Impersonation-as-a-Service: Characterizing the Emerging Criminal Infrastructure for User Impersonation at Scale.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Campobasso, M.;  and Allodi, L.\n</span>\n\n  \n\n</span>\n\n  In <i>Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security</i>, of <i>CCS '20</i>, pages 1665–1680, New York, NY, USA, October 2020. Association for Computing Machinery\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://doi.org/10.1145/3372297.3417892\"\n     onclick=\"log_download('campobasso-allodi-impersonationasaservicecharacterizingtheemergingcriminalinfrastructureforuserimpersonationatscale-2020', 'https://doi.org/10.1145/3372297.3417892', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Impersonation-as-a-Service: Characterizing the Emerging Criminal Infrastructure for User Impersonation at Scale [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"http://doi.org/10.1145/3372297.3417892\"\n     onclick=\"log_download('campobasso-allodi-impersonationasaservicecharacterizingtheemergingcriminalinfrastructureforuserimpersonationatscale-2020', 'http://doi.org/10.1145/3372297.3417892', event.ctrlKey)\"\n     class=\"bibbase doi link\">\n    <span>doi</span></a>\n  &nbsp;\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/campobasso-allodi-impersonationasaservicecharacterizingtheemergingcriminalinfrastructureforuserimpersonationatscale-2020\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('campobasso-allodi-impersonationasaservicecharacterizingtheemergingcriminalinfrastructureforuserimpersonationatscale-2020')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n  \n  \n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{campobasso_impersonation-as--service_2020,\n\taddress = {New York, NY, USA},\n\tseries = {{CCS} &#x27;20},\n\ttitle = {Impersonation-as-a-{Service}: {Characterizing} the {Emerging} {Criminal} {Infrastructure} for {User} {Impersonation} at {Scale}},\n\tisbn = {978-1-4503-7089-9},\n\tshorttitle = {Impersonation-as-a-{Service}},\n\turl = {https://doi.org/10.1145/3372297.3417892},\n\tdoi = {10.1145/3372297.3417892},\n\tabstract = {In this paper we provide evidence of an emerging criminal infrastructure enabling impersonation attacks at scale. Impersonation-as-a-Service (IMPaaS) allows attackers to systematically collect and enforce user profiles (consisting of user credentials, cookies, device and behavioural fingerprints, and other metadata) to circumvent risk-based authentication system and effectively bypass multi-factor authentication mechanisms. We present the IMPaaS model and evaluate its implementation by analysing the operation of a large, invite-only, Russian IMPaaS platform providing user profiles for more than 260,000 Internet users worldwide. Our findings suggest that the IMPaaS model is growing, and provides the mechanisms needed to systematically evade authentication controls across multiple platforms, while providing attackers with a reliable, up-to-date, and semi-automated environment enabling target selection and user impersonation against Internet users as scale.},\n\turldate = {2022-01-26},\n\tbooktitle = {Proceedings of the 2020 {ACM} {SIGSAC} {Conference} on {Computer} and {Communications} {Security}},\n\tpublisher = {Association for Computing Machinery},\n\tauthor = {Campobasso, Michele and Allodi, Luca},\n\tmonth = oct,\n\tyear = {2020},\n\tkeywords = {impersonation attacks, impersonation-as-a-service, threat modeling, user profiling},\n\tpages = {1665--1680},\n}\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  In this paper we provide evidence of an emerging criminal infrastructure enabling impersonation attacks at scale. Impersonation-as-a-Service (IMPaaS) allows attackers to systematically collect and enforce user profiles (consisting of user credentials, cookies, device and behavioural fingerprints, and other metadata) to circumvent risk-based authentication system and effectively bypass multi-factor authentication mechanisms. We present the IMPaaS model and evaluate its implementation by analysing the operation of a large, invite-only, Russian IMPaaS platform providing user profiles for more than 260,000 Internet users worldwide. Our findings suggest that the IMPaaS model is growing, and provides the mechanisms needed to systematically evade authentication controls across multiple platforms, while providing attackers with a reliable, up-to-date, and semi-automated environment enabling target selection and user impersonation against Internet users as scale.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"schrama-gan-aschenbrenner-dereuver-borgolte-fiebig-delft-schrama-understandingtheknowledgegaphowsecurityawarenessinfluencestheadoptionofindustrialiot-2020\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://weis2020.econinfosec.org/wp-content/uploads/sites/8/2020/06/weis20-final23.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'schrama-gan-aschenbrenner-dereuver-borgolte-fiebig-delft-schrama-understandingtheknowledgegaphowsecurityawarenessinfluencestheadoptionofindustrialiot-2020', 'https://weis2020.econinfosec.org/wp-content/uploads/sites/8/2020/06/weis20-final23.pdf', event);\">\n    Understanding the Knowledge Gap: How Security Awareness Influences the Adoption of Industrial IoT.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n  Schrama, V.; Gañán, C. H; Aschenbrenner, D.; de Reuver, M.; Borgolte, K.; Fiebig, T.; Delft, T.;  and Schrama, V C M\n</span>\n\n  \n\n</span>\n\n  In pages 17,  2020. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://weis2020.econinfosec.org/wp-content/uploads/sites/8/2020/06/weis20-final23.pdf\"\n     onclick=\"log_download('schrama-gan-aschenbrenner-dereuver-borgolte-fiebig-delft-schrama-understandingtheknowledgegaphowsecurityawarenessinfluencestheadoptionofindustrialiot-2020', 'https://weis2020.econinfosec.org/wp-content/uploads/sites/8/2020/06/weis20-final23.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"Understanding the Knowledge Gap: How Security Awareness Influences the Adoption of Industrial IoT [pdf]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/schrama-gan-aschenbrenner-dereuver-borgolte-fiebig-delft-schrama-understandingtheknowledgegaphowsecurityawarenessinfluencestheadoptionofindustrialiot-2020\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('schrama-gan-aschenbrenner-dereuver-borgolte-fiebig-delft-schrama-understandingtheknowledgegaphowsecurityawarenessinfluencestheadoptionofindustrialiot-2020')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{schrama_understanding_2020,\n\ttitle = {Understanding the {Knowledge} {Gap}: {How} {Security} {Awareness} {Influences} the {Adoption} of {Industrial} {IoT}},\n\turl = {https://weis2020.econinfosec.org/wp-content/uploads/sites/8/2020/06/weis20-final23.pdf},\n\tabstract = {The Internet-of-Things is no longer confined to endusers and private homes. Industrial IoT (IIoT) is supposed to improve industrial processes and make them more efficient. However, IIoT technologies may also pose (significant) security threats. Therefore, it is important to understand the balance between security awareness and willingness to adopt IIoT among manufacturing companies.},\n\tlanguage = {en},\n\tauthor = {Schrama, Verena and Gañán, Carlo H and Aschenbrenner, Doris and de Reuver, Mark and Borgolte, Kevin and Fiebig, Tobias and Delft, TU and Schrama, V C M},\n\tyear = {2020},\n\tkeywords = {INTERSCT},\n\tpages = {17},\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  The Internet-of-Things is no longer confined to endusers and private homes. Industrial IoT (IIoT) is supposed to improve industrial processes and make them more efficient. However, IIoT technologies may also pose (significant) security threats. Therefore, it is important to understand the balance between security awareness and willingness to adopt IIoT among manufacturing companies.\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n\n\n\n  </div>\n\n\n  <!-- Modal -->\n\n  <!-- <iframe id=\"bibbase_network_frame\" -->\n  <!--         src=\"//bibbase.org/network/control\" -->\n  <!--         style=\"display: none;\"> -->\n  <!-- </iframe> -->\n\n</div>\n"}; document.write(bibbase_data.data);