Mostrando ítems 1-2 de 2

Open source intelligence (OSINT) as support of cybersecurity operations. Use of OSINT in a colombian context and sentiment Analysis

Hernandez Mediná, Martin Jose; Pinzón Hernández, Cristian Camilo; Díaz López, Daniel Orlando; Garcia Ruiz, Juan Carlos; Pinto Rico, Ricardo Andrés (Universidad Distrital Francisco José de Caldas-Facultad TecnológicaColombia, 2018)

Open source intelligence (OSINT) is used to obtain and analyze information related to adversaries, so it can support risk assessments aimed to prevent damages against critical assets. This paper presents a research about ...
Using Reverse Engineering to Handle Malware

Sánchez Venegas, Carlos Andrés; Aguado Bedoya, Camilo; Díaz López, Daniel Orlando; García Ruíz, Juan Carlos Camilo (EDICIONES UCC PRODUCTSBogotá, 2019)

Introduction: This paper is a product of the research Project “Cyber Security Architecture for Incident Management” developed in the Colombian School of Engineering Julio Garavito in the year 2018. Objetive: Reverse ...

Envíos recientes

Open source intelligence (OSINT) as support of cybersecurity operations. Use of OSINT in a colombian context and sentiment Analysis
...
Hernandez Mediná, Martin Jose | 2018

Open source intelligence (OSINT) is used to obtain and analyze information related to adversaries, so it can support risk assessments aimed to prevent damages against critical assets. This paper presents a research about different OSINT technologies and how these can be used to perform cyber intelligence tasks. One of the key components in the operation of OSINT tools are the “transforms”, which are used to establish relations between entities of information from queries to different open sources. A set of transforms addressed to the Colombian context are presented, which were implemented and contributed to the community allowing to the law enforcement agencies to develop information gathering process from Colombian open sources. Additionally, this paper shows the implementation of three machine learning models used to perform sentiment analysis over the information obtained from an adversary. Sentiment analysis can be extremely useful to understand the motivation that an adversary can have and, in this way, define proper cyber defense strategies. Finally, some challenges related to the application of OSINT techniques are identified and described.

LEER
Using Reverse Engineering to Handle Malware
...
Sánchez Venegas, Carlos Andrés | 2019

Introduction: This paper is a product of the research Project “Cyber Security Architecture for Incident Management” developed in the Colombian School of Engineering Julio Garavito in the year 2018. Objetive: Reverse engineering involves deconstructing and extracting knowledge about objects. The use of reverse engineering in malware analysis is extremely useful in understanding the functionalities and purposes of a suspicious sample. Methods: This paper makes use of Radare which is one of the most popular open source tools for reverse engineering, with the aim of dealing with malware. Results: A use case related to hacking of anti-sandbox malware is presented, in such a way that it is possible to analyze the behavior of the sample using a sandbox. Additionally, another use case is presented, where an in-depth analysis of a malicious Android application aimed to the audience of a popular event (FIFA World Cup 2018) is developed, making it possible to demonstrate the relevance of reverse engineering techniques in end-user protection strategies. Conclusions: This paper shows how the results of a reverse engineering process can be integrated with Yara rules, allowing for the detection of malware on the fly, and it also shows an alternative to automatically generating Yara rules through the yarGen generator. Originality: Use of Open Source reversing solutions by Colombian Law Enforcement Agencies has not been discussed previously, making this paper a notable element toward the modernization of the Army. Limitation: Different approaches and perspectives about the limitations in the use of reverse engineering by Law Enforcement Agencies are also shared.

LEER

‹›

Repositorio Digital

Listar AD - CTG – Informática por autor "a6116efa385deb85832ad5a8a801ab68"

Open source intelligence (OSINT) as support of cybersecurity operations. Use of OSINT in a colombian context and sentiment Analysis

Using Reverse Engineering to Handle Malware

Envíos recientes

Open source intelligence (OSINT) as support of cybersecurity operations. Use of OSINT in a colombian context and sentiment Analysis

Using Reverse Engineering to Handle Malware

Listar AD - CTG – Informática por autor "a6116efa385deb85832ad5a8a801ab68"

Open source intelligence (OSINT) as support of cybersecurity operations. Use of OSINT in a colombian context and sentiment Analysis ﻿

Using Reverse Engineering to Handle Malware ﻿

Envíos recientes

Open source intelligence (OSINT) as support of cybersecurity operations. Use of OSINT in a colombian context and sentiment Analysis

Using Reverse Engineering to Handle Malware

Open source intelligence (OSINT) as support of cybersecurity operations. Use of OSINT in a colombian context and sentiment Analysis

Using Reverse Engineering to Handle Malware