Security Issues in Language-based Software Ecosystems

1 code implementation • 6 Mar 2019 • Ruturaj K. Vaidya, Lorenzo De Carli, Drew Davidson, Vaibhav Rastogi

These issues are inherent to the ways these ecosystems work and cannot be resolved by fixing software vulnerabilities in either the packages or the utilities, e. g., package manager tools, that build these ecosystems.

Cryptography and Security

The Naked Sun: Malicious Cooperation Between Benign-Looking Processes

no code implementations • 6 Nov 2019 • Fabio De Gaspari, Dorjan Hitaj, Giulio Pagnotta, Lorenzo De Carli, Luigi V. Mancini

Recent progress in machine learning has generated promising results in behavioral malware detection.

Behavioral Malware Detection Malware Detection

EnCoD: Distinguishing Compressed and Encrypted File Fragments

no code implementations • 15 Oct 2020 • Fabio De Gaspari, Dorjan Hitaj, Giulio Pagnotta, Lorenzo De Carli, Luigi V. Mancini

To address this issue, we design EnCoD, a learning-based classifier which can reliably distinguish compressed and encrypted data, starting with fragments as small as 512 bytes.

Reliable Detection of Compressed and Encrypted Data

no code implementations • 31 Mar 2021 • Fabio De Gaspari, Dorjan Hitaj, Giulio Pagnotta, Lorenzo De Carli, Luigi V. Mancini

We evaluate EnCoD on a dataset of 16 different file types and fragment sizes ranging from 512B to 8KB.

Binary Classification

Minerva: A File-Based Ransomware Detector

no code implementations • 26 Jan 2023 • Dorjan Hitaj, Giulio Pagnotta, Fabio De Gaspari, Lorenzo De Carli, Luigi V. Mancini

Ransomware is a rapidly evolving type of malware designed to encrypt user files on a device, making them inaccessible in order to exact a ransom.