research
∙
06/09/2023
You Can Tell a Cybercriminal by the Company they Keep: A Framework to Infer the Relevance of Underground Communities to the Threat Landscape
The criminal underground is populated with forum marketplaces where, all...
share
research
∙
03/06/2023
Know Your Cybercriminal: Evaluating Attacker Preferences by Measuring Profile Sales on an Active, Leading Criminal Market for User Impersonation at Scale
In this paper we exploit market features proper of a leading Russian cyb...
research
∙
12/07/2022
THREAT/crawl: a Trainable, Highly-Reusable, and Extensible Automated Method and Tool to Crawl Criminal Underground Forums
Collecting data on underground criminal communities is highly valuable b...
research
∙
10/16/2020
SAIBERSOC: Synthetic Attack Injection to Benchmark and Evaluate the Performance of Security Operation Centers
In this paper we introduce SAIBERSOC, a tool and methodology enabling se...
research
∙
09/17/2020
CARONTE: Crawling Adversarial Resources Over Non-Trusted, High-Profile Environments
The monitoring of underground criminal activities is often automated to ...
research
∙
09/09/2020
Impersonation-as-a-Service: Characterizing the Emerging Criminal Infrastructure for User Impersonation at Scale
In this paper we provide evidence of an emerging criminal infrastructure...
research
∙
05/06/2019
Cognitive Triaging of Phishing Attacks
In this paper we employ quantitative measurements of cognitive vulnerabi...
research
∙
08/20/2018
The Effect of Security Education and Expertise on Security Assessments: the Case of Software Vulnerabilities
In spite of the growing importance of software security and the industry...
research
∙
05/24/2018
A Bug Bounty Perspective on the Disclosure of Web Vulnerabilities
Bug bounties have become increasingly popular in recent years. This pape...
research
∙
03/20/2018
Identifying Relevant Information Cues for Vulnerability Assessment Using CVSS
The assessment of new vulnerabilities is an activity that accounts for i...
research
∙
01/15/2018
Attack Potential in Impact and Complexity
Vulnerability exploitation is reportedly one of the main attack vectors ...
research
∙
01/14/2018