Výsledky vyhledávání - "Spring, Jonathan M."

Report

An Analysis of How Many Undiscovered Vulnerabilities Remain in Information Systems

Autor: Spring, Jonathan M

Vulnerability management strategy, from both organizational and public policy perspectives, hinges on an understanding of the supply of undiscovered vulnerabilities. If the number of undiscovered vulnerabilities is small enough, then a reasonable inv

Externí odkaz: http://arxiv.org/abs/2304.09259

Zobrazit plný text záznamu

Report

On managing vulnerabilities in AI/ML systems

Autor: Spring, Jonathan M., Galyardt, April, Householder, Allen D., VanHoudnos, Nathan

This paper explores how the current paradigm of vulnerability management might adapt to include machine learning systems through a thought experiment: what if flaws in machine learning (ML) were assigned Common Vulnerabilities and Exposures (CVE) ide

Externí odkaz: http://arxiv.org/abs/2101.10865

Zobrazit plný text záznamu

Report

Learning the Associations of MITRE ATT&CK Adversarial Techniques

Autor: Al-Shaer, Rawan, Spring, Jonathan M., Christou, Eliana

The MITRE ATT&CK Framework provides a rich and actionable repository of adversarial tactics, techniques, and procedures (TTP). However, this information would be highly useful for attack diagnosis (i.e., forensics) and mitigation (i.e., intrusion res

Externí odkaz: http://arxiv.org/abs/2005.01654

Zobrazit plný text záznamu

Report

Review of human decision-making during computer security incident analysis

Autor: Spring, Jonathan M., Illari, Phyllis

We review practical advice on decision-making during computer security incident response. Scope includes standards from the IETF, ISO, FIRST, and the US intelligence community. To focus on human decision-making, the scope is the evidence collection,

Externí odkaz: http://arxiv.org/abs/1903.10080

Zobrazit plný text záznamu

Dissertation/ Thesis

Large Scale DNS Traffic Analysis of Malicious Internet Activity with a Focus on Evaluating the Response Time of Blocking Phishing Sites

Autor: Spring, Jonathan M.

This thesis explores four research areas that are examined using DNS traffic analysis. The tools used for this analysis are presented first. The four topics examined are domain mapping, response time of anti-phishing block lists to find the phishing

Externí odkaz: http://etd.library.pitt.edu/ETD/available/etd-04282010-234303/

Zobrazit plný text záznamu