Tiffany Bao

TL;DR: This study conducted 18 semi-structured interviews with SOC analysts and managers and found inherent disagreements between SOC managers and their analysts that, if not addressed, could entail a risk to SOC efficiency and effectiveness.

TL;DR: CrawlPhish as discussed by the authors is a framework for automatically detecting and categorizing client-side cloaking used by known phishing websites, which can be used to not only improve the ecosystem's ability to mitigate phishing website with client side cloaking, but also continuously identify emerging cloaking techniques as they are launched by attackers.

TL;DR: HoneyPLC is presented, a high-interaction, extensible, and malware collecting honeypot supporting a broad spectrum of PLCs models and vendors, showing not only that attackers are in fact targeting ICS systems, but also that HoneyPLC can effectively engage and deceive them while collecting data samples for future analysis.

TL;DR: ShellSwap is presented, a system that uses symbolic tracing, with a combination of shellcode layout remediation and path kneading to achieve shellcode transplant, which successfully generated 88% of the exploits.