Anomaly Detection (AD) sensors have become an invaluable tool for forensic analysis and
intrusion detection. Unfortunately, the detection accuracy of all learning-based ADs depends …

Embedding malcode within documents provides a convenient means of attacking systems.
Such attacks can be very targeted and difficult to detect to stop due to the multitude of …

Spurred by the ever growing availability of online services and resources, threat models are
constantly evolving. As a result, the same security techniques that were sufficient a decade …

In this thesis, we address the problem of modeling and detecting polymorphic engines
shellcode. By polymorphic engines, we mean programs having the ability to transform any …

В статье рассматривается проблема обнаружения вредоносного исполни мого кода в
сетевом трафике на основе выявления NOP эквивалентных участков инструкций IA32 …

ABSTRACT The efficacy of Anomaly Detection (AD) sensors depends heavily on the quality
of the data used to train them. Artificial or contrived training data may not provide a realistic …

In this paper, we introduce novel techniques that enhance the training phase of Anomaly
Detection (AD) sensors. Our aim is to both improve the detection performance and protect …