Cyber attacks are currently blooming, as the attackers reap significant profits from them and
face a limited risk when compared to committing the “classical” crimes. One of the major …

Network covert channels are increasingly used to endow malware with stealthy behaviors,
for instance to exfiltrate data or to orchestrate nodes of a botnet in a cloaked manner …

Modern malware is becoming hard to spot since attackers are increasingly adopting new
techniques to elude signature-and rule-based detection mechanisms. Among the others …

The extended Berkeley Packet Filter (eBPF) is a lightweight and fast 64-bit RISC-like virtual
machine (VM) inside the Linux kernel. eBPF has emerged as the most promising and de …

Malware distribution to the victim network is commonly performed through file attachments in
phishing email or from the internet, when the victim interacts with the source of infection. To …

Modern malware increasingly exploits information hiding to remain undetected while
attacking. To this aim, network covert channels, ie, hidden communication paths established …

The increasing diffusion of malware endowed with steganographic and cloaking capabilities
requires tools and techniques for conducting research activities, testing real deployments …

Information hiding is at the basis of a new-wave of malware able to elude common detection
mechanisms or remain unnoticed for long periods. To this aim, a key approach exploits …

Steganography, a data hiding technique has trended into hiding the malware within digital
media, giving rise to stegomalware. Specifically, digital images pose a potential threat due to …

Network covert channels embedded within network conversations are becoming widely
adopted to enforce privacy of users or bypass censorship attempts as well as by malware to …