- Bodies.dissemination-committee

[SPARTA - bodies.dissemination-committee] Request for SPARTA acknowledgment in paper

by Sebastien Dupont

Dear all, We submitted the paper "Incremental Common Criteria Certification Processes using DevSecOps Practices" to EuroSPW 2021. We request to acknowledge SPARTA if the paper is accepted. Abstract: The growing digitalisation of our economies and societies is driving the need for increased connectivity of critical applications and infrastructures to the point where failures can lead to important disruptions and consequences to our lives. One growing source of failures for critical applications and infrastructures originates from cybersecurity threats and vulnerabilities that can be exploited in attacks. One approach to mitigating these risks is verifying that critical applications and infrastructures are sufficiently protected by certification of products and services. However, reaching sufficient assurance levels for product certification may require detailed evaluation of product properties. An important challenge for product certification is dealing with product evolution: now that critical applications and infrastructures are connected they are being updated on a more frequent basis. To ensure continuity of certification, updates must be analysed to verify the impact on certified cybersecurity properties. Impacted properties need to be re-certified. This paper proposes a lightweight and flexible incremental certification process that can be integrated with DevSecOps practices to automate as much as possible evidence gathering and certification activities. The approach is illustrated on the Common Criteria product certification scheme and a firewall update on an automotive case study. Only the impact analysis phase of the incremental certification process is illustrated. Best Regards, -- Sebastien Dupont Expert Research Engineer Model-Based Engineering and Distributed Systems CETIC Avenue Jean Mermoz 28 B-6041 Charleroi Tel: +32 488 237 483

3 years, 8 months

2
1
0 0

[SPARTA - bodies.dissemination-committee] new SPARTA (SAFAIR) paper published

by mchoras＠itti.com.pl

Dear All, I am pleased to inform that our new Open Acces paper is now published in journal 'Scientific Reports' (IF=4,379): Szczepański, M., Pawlicki, M., Kozik, R. et al. New explainability method for BERT-based model in fake news detection. Sci Rep 11, 23705 (2021). https://doi.org/10.1038/s41598-021-03100-6 Available at: https://www.nature.com/articles/s41598-021-03100-6 https://www.nature.com/articles/s41598-021-03100-6.pdf It addresses explainability for fake detection based on machine learning (in cooperation with project H2020 SocialTruth) Kind Regards, Prof. Michal Choras

3 years, 10 months

1
0
0 0

[SPARTA - bodies.dissemination-committee] Papers from IMT in WP6

by Jean-Luc Danger

Dear members of SPARTA dissemination WP, I would like to inform you that the below list SPARTA papers have been published or under publication: The DOI is indicated for the access of the published journal and I will give you the DOI of the paper under publication soon. They will be in the WP6 publications directory. Best regards, Jean-Luc Danger Papers already published in 2021: * V. Khuat, J. -M. Dutertre and J. -L. Danger, "Analysis of a Laser-induced Instructions Replay Fault Model in a 32-bit Microcontroller," 2021 24th Euromicro Conference on Digital System Design (DSD) , 2021, pp. 363-370, DOI: 10.1109/DSD53832.2021.00061 * V. Khuat, J. -L. Danger and J. -M. Dutertre, "Laser Fault Injection in a 32-bit Microcontroller: from the Flash Interface to the Execution Pipeline," 2021 Workshop on Fault Detection and Tolerance in Cryptography (FDTC) , 2021, pp. 74-85, DOI: 10.1109/FDTC53659.2021.00020 * J.-M. Dutertre, A. Menu, O. Potin, J.-B. Rigaud, and J.-L. Danger, "Experimental analysis of the electro-magnetic instruction skip fault model and consequences for software countermeasures."cMicroelectronics Reliability, 121, 2021. [ https://doi.org/10.1016/j.microrel.2021.114133 ] DOI:10.1016/j.microrel.2021.114133 Papers under publication in 2021: * V. Khuat, O. Trabelsi, L. Sauvage, J-L. Danger. "Multiple and Reproducible Fault Models on Micro-Controller using Electromagnetic Fault Injection". 2021 JOINT IEEE INTERNATIONAL SYMPOSIUM ON ELECTROMAGNETIC COMPATIBILITY, SIGNAL & POWER INTEGRITY, AND EMC EUROPE , Jul 2021 , Virtuel, France. * Tebelmann, L., Kühne, U., Danger, J. L., & Pehl, M. (2021). Analysis and Protection of the Two-metric Helper Data Scheme. COSADE Workshop, oct 2021 , Lugano -- [ https://www.telecom-paris.fr/ ] Jean-Luc DANGER Enseignant-Chercheur 01 75 31 93 19 Nouvelle adresse : 19 place Marguerite Perey CS 20031 91123 Palaiseau Cedex [ https://www.telecom-paris.fr/ ] [ https://twitter.com/TelecomParis_ ] [ https://www.facebook.com/TelecomParis ] [ https://www.linkedin.com/school/telecom-paris/ ] [ https://www.instagram.com/telecom_paris/ ] [ https://blogrecherche.wp.imt.fr/ ] Une école de [ https://www.imt.fr/ | l'IMT ]

3 years, 11 months

2
1
0 0

[SPARTA - bodies.dissemination-committee] new SPARTA (SAFAIR, ELSA) paper published by ITTI

by mchoras＠itti.com.pl

Dear All, New OA paper (announced some time ago) is now published by ITTI - it results and acknowledges SPARTA and it is relevant to SAFAIR and ELSA (as requested by reviewers): Choraś, M., Woźniak, M. The double-edged sword of AI: Ethical Adversarial Attacks to counter artificial intelligence for crime. AI Ethics (2021). It is available online here: https://doi.org/10.1007/s43681-021-00113-9 or as a PDF here: https://link.springer.com/content/pdf/10.1007/s43681-021-00113-9.pdf. Kind Regards, Prof. Michal Choras

3 years, 11 months

1
0
0 0

[SPARTA - bodies.dissemination-committee] Paper submission

by dutertre＠emse.fr

Dear colleagues, I would like to let you know that a new SPARTA paper have been accepted to the Microelectronics Reliability journal. It acknowledges the support of SPARTA. With my best regards, Jean-Max J.-M. Dutertre, A. Menu, O. Potin, J.-B. Rigaud, and J.-L. Danger Experimental analysis of the electromagnetic instruction skip fault model and consequences for software countermeasures Microelectronics Reliability, 121, 2021. https://doi.org/10.1016/j.microrel.2021.114133 <https://doi.org/10.1016/j.microrel.2021.114133> Also available in open access from 2021-12-01. https://hal.archives-ouvertes.fr/hal-03360628/ <https://hal.archives-ouvertes.fr/hal-03360628/> And in SPARTA SVN: https://sparta.technikon.com/03-WPs/WP6-Program-3-HAII-T/Management/Publica… <https://sparta.technikon.com/03-WPs/WP6-Program-3-HAII-T/Management/Publica…> -------------------------------------------------------------- Jean-Max Dutertre Responsable département SAS Professeur Département Systèmes et Architectures Sécurisés - SAS Ecole Nationale Supérieure des Mines de Saint-Etienne Centre Microélectronique de Provence - Campus Georges Charpak Provence 880, av. de Mimet 13541 Gardanne Bureau A.2.23 Tel : +33 (0)4 42 61 67 36 Fax : +33 (0)4 42 61 65 92 E-mail: dutertre(a)emse.fr <mailto:dutertre@emse.fr> Web : www.emse.fr/~dutertre <http://www.emse.fr/~dutertre> --------------------------------------------------------------

3 years, 11 months

1
0
0 0

[SPARTA - bodies.dissemination-committee] new published papers by ITTI

by mchoras＠itti.com.pl

Dear All, Two new papers by ITTI resulting from SPARTA (SAFAIR programme) are now published: 1. The proposition of balanced and explainable surrogate method for network intrusion detection in streamed real difficult data By: Szczepanski, Komisarek, Pawlicki, Kozik, Choras. Venue: ICCCI 2021 conference (core B) Link: https://link.springer.com/chapter/10.1007/978-3-030-88113-9_19 2. paper in JCR journal ENTROPY: Preprocessing Pipelines Including Block-Matching Convolutional Neural Network for Image Denoising to Robustify Deep Reidentification against Evasion Attacks Link: https://www.mdpi.com/1099-4300/23/10/1304 Kind Regards, Prof. Michal Choras

4 years

1
0
0 0

[SPARTA - bodies.dissemination-committee] Paper Accepted

by Mohammad Reza Norouzian

Dear all, I would like to inform you that our paper is accepted in "ISC 2021" and it should appear online in December. We acknowledged SPARTA. Title: Hybroid: Toward Android Malware Detection and Categorization with Program Code and Network Traffic Authors: Mohammad Reza Norouzian, Peng Xu, Claudia Eckert, Apostolis Zarras Abstract: Android malicious applications have become so sophisticated that they can bypass endpoint protection measures. Therefore, it is safe to admit that traditional anti-malware techniques have become cumbersome, thereby raising the need to develop efficient ways to detect Android malware. In this paper, we present Hybroid, a hybrid Android malware detection and categorization solution that utilizes program code structures as static behavioral features and network traffic as dynamic behavioral features for detection (binary classification) and categorization (multi-label classification). For static analysis, we introduce a natural language processing-inspired technique based on function call graph embeddings and design a graph neural network-based approach to convert the whole graph structure of an Android app to a vector. In dynamic analysis, we extract network flow features from the raw network traffic by capturing each application's network flow. Finally, Hybroid utilizes the network flow features combined with the graphs' vectors to detect and categorize the malware. Our solution gets 99.6% accuracy on average for malware detection and 97.6% accuracy for malware categorization. Best regards, Mohammad Norouzian -- Mohammad Reza Norouzian Lehrstuhl für Sicherheit in der Informatik I20 Institut für Informatik TU München Boltzmannstr. 3 85748 Garching Tel. +49 89 289 18584 Fax +49 89 289 18579 e-mail: norouzian(a)sec.in.tum.de http://www.sec.in.tum.de

4 years

1
0
0 0

[SPARTA - bodies.dissemination-committee] Request for SPARTA acknowledgment in paper

by Eren Cakmak

Dear All, we submitted the paper "VulnEx: Exploring Open-Source Software Vulnerabilities in Large Development Organizations to Understand Risk Exposure" to the IEEE Symposium on Visualization for Cyber Security (at IEEE VIS 2021). We request to acknowledge SPARTA if the paper is accepted. * Abstract: "The prevalent usage of open-source software (OSS) has led to an increased interest in resolving potential third-party security risks by fixing common vulnerabilities and exposures (CVEs). However, even with automated code analysis tools in place, security analysts often lack the means to obtain an overview of vulnerable OSS reuse in large software organizations. In this design study, we propose VulnEx (Vulnerability Explorer), a tool to audit entire software development organizations. We introduce three complementary table-based representations to identify and assess vulnerability exposures due to OSS, which we designed in collaboration with security analysts. The presented tool allows examining problematic projects and applications (repositories), third-party libraries, and vulnerabilities across a software organization. We show the applicability of our tool through a use case and preliminary expert feedback." Best Regards, Eren Cakmak -- Research Associate Department of Computer and Information Science Data Analysis and Visualization Group 78457 Konstanz, Germany Website: http://infovis.uni.kn/~cakmak Phone: +49 (0)7531 88 2507 Room: ZT1107

4 years, 1 month

1
1
0 0

[SPARTA - bodies.dissemination-committee] article publishing

by Algimantas Venckauskas

Dear all, I would like to inform you that the following SPARTA paper has been published: Damaševičius, Robertas; Venčkauskas, Algimantas; Toldinas, Jevgenijus; Grigaliūnas, Šarūnas. 2021. "Ensemble-Based Classification Using Neural Networks and Machine Learning Models for Windows PE Malware Detection" Electronics 10, no. 4: 485. https://doi.org/10.3390/electronics10040485 https://www.mdpi.com/2079-9292/10/4/485 All the best, Algimantas Venčkauskas ______________________________________________________ Abstract The security of information is among the greatest challenges facing organizations and institutions. Cybercrime has risen in frequency and magnitude in recent years, with new ways to steal, change and destroy information or disable information systems appearing every day. Among the types of penetration into the information systems where confidential information is processed is malware. An attacker injects malware into a computer system, after which he has full or partial access to critical information in the information system. This paper proposes an ensemble classification-based methodology for malware detection. The first-stage classification is performed by a stacked ensemble of dense (fully connected) and convolutional neural networks (CNN), while the final stage classification is performed by a meta-learner. For a meta-learner, we explore and compare 14 classifiers. For a baseline comparison, 13 machine learning methods are used: K-Nearest Neighbors, Linear Support Vector Machine (SVM), Radial basis function (RBF) SVM, Random Forest, AdaBoost, Decision Tree, ExtraTrees, Linear Discriminant Analysis, Logistic, Neural Net, Passive Classifier, Ridge Classifier and Stochastic Gradient Descent classifier. We present the results of experiments performed on the Classification of Malware with PE headers (ClaMP) dataset. The best performance is achieved by an ensemble of five dense and CNN neural networks, and the ExtraTrees classifier as a meta-learner.

4 years, 2 months

1
3
0 0

[SPARTA - bodies.dissemination-committee] New paper at ISSRE21 Conference (core-A)

by Pedro Adao

Dear all, I would like to inform you that the following paper A Comparative Study of Automatic Software Repair Techniques for Security Vulnerabilities Eduard Pinconschi, Rui Abreu, and Pedro Adão will be published in the conference (core-A ranking) The 32nd International Symposium on Software Reliability Engineering (ISSRE 2021) http://2021.issre.net/ <http://2021.issre.net/> Oct 25 - 28, 2021, Wuhan, China and will acknowledge SPARTA. I will make the paper available as soon as we have the camera ready version (28th of August). Do let me know if you need a draft in advance. Best regards, Pedro Abstract: In the past years, research on automatic program repair (APR), in particular on test-suite-based approaches, has significantly attracted the attention of researchers. Despite the advances in the field, it remains unclear how these techniques fare in the context of security---most approaches are evaluated using benchmarks of bugs that do not (\textit{only}) contain security vulnerabilities. In this paper, we present our observations using 10 state-of-the-art test-suite-based automatic program repair tools on the DARPA Cyber Grand Challenge benchmark of vulnerabilities in C/C++. Our intention is to have a better understanding of the current state of automatic program repair tools when addressing security issues. In particular, our study is guided by the hypothesis that the efficiency of repair tools may not generalize to security vulnerabilities. We found that the 10 analyzed tools can only fix 30 out of 55 vulnerable programs---54.5\% of the considered issues. In particular, we found that APR tools with atomic change operators and brute-force search strategy (\emph{AE} and \emph{GenProg}) and brute-force functionality deletion (\emph{Kali}) overall perform better at repairing security vulnerabilities (considering both efficiency and effectiveness). \emph{AE} is the tool that individually repairs most programs with 20 out of 55 programs (36.4\%). The causes for failing to repair are discussed in the paper, which can help repair tool designers to improve their techniques and tools.

4 years, 2 months

1
0
0 0

2025

2024

2023

2022

2021

2020

2019

Bodies.dissemination-committee