000 06079nam a22006615i 4500
001 978-3-031-64171-8
003 DE-He213
005 20251030112623.0
007 cr nn 008mamaa
008 240711s2024 sz | s |||| 0|eng d
020 _a9783031641718
_9978-3-031-64171-8
024 7 _a10.1007/978-3-031-64171-8
_2doi
050 4 _aQA76.9.A25
072 7 _aUR
_2bicssc
072 7 _aUTN
_2bicssc
072 7 _aCOM053000
_2bisacsh
072 7 _aUR
_2thema
072 7 _aUTN
_2thema
245 1 0 _aDetection of Intrusions and Malware, and Vulnerability Assessment
_h[electronic resource] :
_b21st International Conference, DIMVA 2024, Lausanne, Switzerland, July 17–19, 2024, Proceedings /
_cedited by Federico Maggi, Manuel Egele, Mathias Payer, Michele Carminati.
250 _a1st ed. 2024.
264 1 _aCham :
_bSpringer Nature Switzerland :
_bImprint: Springer,
_c2024.
300 _aXIV, 558 p. 151 illus., 120 illus. in color.
_bonline resource.
336 _atext
_btxt
_2rdacontent
337 _acomputer
_bc
_2rdamedia
338 _aonline resource
_bcr
_2rdacarrier
347 _atext file
_bPDF
_2rda
490 1 _aLecture Notes in Computer Science,
_x1611-3349 ;
_v14828
505 0 _a -- Vulnerability Detection and Defense. -- Exceptional Interprocedural Control Flow Graphs for x86-64 Binaries. -- S2malloc: Statistically Secure Allocator for Use-After-Free Protection And More. -- Acoustic Side-Channel Attacks on a Computer Mouse. -- Using Semgrep OSS to Find OWASP Top 10 Weaknesses in PHP Applications: A Case Study. -- Modularized Directed Greybox Fuzzing for Binaries over Multiple CPU Architectures. -- Malware and Threats. -- Constructs of Deceit: Exploring Nuances in Modern Social Engineering Attacks. -- Tarallo: Evading Behavioral Malware Detectors in the Problem Space. -- Evading Userland API Hooking, Again: Novel Attacks and a Principled Defense Method. -- Extended Abstract: Evading Packing Detection: Breaking Heuristic-Based Static Detectors. -- Listening between the Bits: Privacy Leaks in Audio Fingerprints. -- Mobile and Web Application Security. -- Bringing UFUs Back into the Air With FUEL: A Framework for Evaluating the Effectiveness of Unrestricted File Upload Vulnerability Scanners. -- SandPuppy: Deep-state fuzzing guided by automatic detection of state-representative variables. -- Extended Abstract - Tracking Manifests - Persistent Identifiers in Progressive Web Apps. -- PayRide: Secure Transport e-Ticketing with Untrusted Smartphone Location. -- Knocking on Admin’s Door: Protecting Critical Web Applications with Deception. -- AI for Security. -- Approach for the Optimization of Machine Learning Models for Calculating Binary Function Similarity. -- Inferring Recovery Steps from Cyber Threat Intelligence Reports. -- Pairing Security Advisories with Vulnerable Functions Using Open-Source LLMs. -- Extended Abstract: Assessing Language Models for Semantic Textual Similarity in Cybersecurity. -- Extended Abstract: A Transfer Learning-based Training Approach for DGA Classification. -- Hardware and Firmware Security. -- Seum Spread: Discerning Security Flaws in IoT Firmware Via Call Sequence Semantics. -- Gluezilla: Efficient and Scalable Software to Hardware Binding using Rowhammer. -- SmmPack: Obfuscation for SMM Modules. -- Presshammer: Rowhammer and Rowpress without Physical Address Information. -- Cyber Physical Systems and IoT. -- SecMonS: A Security Monitoring Framework for IEC 61850 Substations Based on Configuration Files and Logs. -- FaultGuard: A Generative Approach to Resilient Fault Prediction in Smart Electrical Grids. -- Wireless Modulation Identification: filling the gap in IoT networks security audit. -- Extended Abstract: Assessing GNSS Vulnerabilities in Smart Grids.
520 _aThis book constitutes the proceedings of the 21st International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, DIMVA 2024, held in Lausanne, Switzerland, during July 17–19, 2024. The 22 full papers and 6 short paper presented in this volume were carefully reviewed and selected from 110 submissions. The papers are organized in thematical sections named: vulnerability detection and defense; malware and threats; mobile and web application security; AI for security; hardware and firmware security; cyber physical systems and IoT.
650 0 _aData protection.
650 0 _aComputer engineering.
650 0 _aComputer networks .
_960157
650 0 _aComputers.
_965793
650 0 _aCriminology.
_958246
650 0 _aQuantum physics.
_966608
650 1 4 _aData and Information Security.
_966492
650 2 4 _aComputer Engineering and Networks.
650 2 4 _aComputing Milieux.
_966530
650 2 4 _aCrime Control and Security.
_967070
650 2 4 _aQuantum Physics.
_966608
700 1 _aMaggi, Federico.
_eeditor.
_0(orcid)0000-0003-1073-8036
_1https://orcid.org/0000-0003-1073-8036
_4edt
_4http://id.loc.gov/vocabulary/relators/edt
_980351
700 1 _aEgele, Manuel.
_eeditor.
_0(orcid)0000-0001-5038-2682
_1https://orcid.org/0000-0001-5038-2682
_4edt
_4http://id.loc.gov/vocabulary/relators/edt
_980352
700 1 _aPayer, Mathias.
_eeditor.
_0(orcid)0000-0001-5054-7547
_1https://orcid.org/0000-0001-5054-7547
_4edt
_4http://id.loc.gov/vocabulary/relators/edt
_980353
700 1 _aCarminati, Michele.
_eeditor.
_0(orcid)0000-0001-8284-6074
_1https://orcid.org/0000-0001-8284-6074
_4edt
_4http://id.loc.gov/vocabulary/relators/edt
_980354
710 2 _aSpringerLink (Online service)
773 0 _tSpringer Nature eBook
776 0 8 _iPrinted edition:
_z9783031641701
776 0 8 _iPrinted edition:
_z9783031641725
830 0 _aLecture Notes in Computer Science,
_x1611-3349 ;
_v14828
856 4 0 _uhttps://doi.org/10.1007/978-3-031-64171-8
912 _aZDB-2-SCS
912 _aZDB-2-SXCS
912 _aZDB-2-LNC
999 _c61502
_d61502