Author Publications

Article

Hadžiosmanović, Dina and Bolzoni, Damiano and Hartel, Pieter (2012) A Log Mining Approach for Process Monitoring in SCADA. International Journal of Information Security, 11 . ISSN 1615-5262

Book Section

Bolzoni, D. and Etalle, S. (2008) Approaches in Anomaly-based Network Intrusion Detection Systems. In: Intrusion Detection Systems. Advances in Information Security, 38 . Springer Verlag, London, pp. 1-15. ISBN 9780387772653

Conference or Workshop Item

Bolzoni, D. and Etalle, S. (2008) Boosting Web Intrusion Detection Systems by Inferring Positive Signatures. In: Confederated International Conferences On the Move to Meaningful Internet Systems (OTM), November 9-14, 2008, Monterrey, Mexico.

Bolzoni, D. and Etalle, S. and Hartel, P.H. (2009) Panacea: Automating Attack Classification for Anomaly-based Network Intrusion Detection Systems. In: Recent Advances in Intrusion Detection.

Bolzoni, Damiano and Crispo, Bruno and Etalle, Sandro (2007) ATLANTIDES: An Architecture for Alert Verification in Network Intrusion Detection Systems. In: 21st Large Installation System Administration Conference, LISA 2007, 11-16 November 2007, Dallas, TX, USA.

Bolzoni, Damiano and Schade, Christiaan and Etalle, Sandro (2011) A Cuckoo's Egg in the Malware Nest: On-the-fly Signature-less Malware Analysis, Detection, and Containment for Large Networks. In: 25th Large Installation System Administration Conference, LISA 2011, 4-9 December 2011, Boston, MA, USA.

Bolzoni, Damiano and Zambon, Emmanuele and Etalle, Sandro and Hartel, Pieter (2006) Poseidon: a 2-tier Anomaly-based Network Intrusion Detection System. In: Fourth IEEE International Workshop on Information Assurance, IWIA 2006, 13-14 Apr 2006, London, UK.

Hadziosmanovic, Dina and Bolzoni, Damiano and Etalle, Sandro and Hartel, Pieter (2012) Challenges and opportunities in securing industrial control systems. In: IEEE Workshop on Complexity in Engineering, COMPENG 2012, 11-13 June 2012, Aachen, Germany.

Hadziosmanovic, Dina and Bolzoni, Damiano and Hartel, Pieter (2010) MEDUSA: Mining Events to Detect Undesirable uSer Actions in SCADA. In: 13th International Symposium on Recent Advances in Intrusion Detection, RAID 2010, 15-17 Sep 2010, Ottawa, Canada.

Hadziosmanovic, Dina and Bolzoni, Damiano and Hartel, Pieter (2011) Smart Device Profiling for Smart SCADA. In: 14th International Symposium on Recent Advances in Intrusion Detection, RAID 2011, 20-21 Sept 2011, Menlo Park, California, USA.

Hadziosmanovic, Dina and Bolzoni, Damiano and Hartel, Pieter and Etalle, Sandro (2011) MELISSA: Towards Automated Detection of Undesirable User Actions in Critical Infrastructures. In: European Conference on Computer Network Defense, EC2ND 2011, 6-8 Sept 2011, Gothenburg, Sweden.

Hadžiosmanović, Dina and Simionato, Lorenzo and Bolzoni, Damiano and Zambon, Emmanuele and Etalle, Sandro (2012) N-gram Against the Machine: On the Feasibility of the N-gram Network Analysis for Binary Protocols. In: 15th International Symposium on Research in Attacks, Intrusions and Defenses, RAID 2012, 12-14 September 2012, Amsterdam, The Netherlands.

Su, X. and Bolzoni, D. and van Eck, P.A.T. (2006) A Business Goal Driven Approach for Understanding and Specifying Information Security Requirements. In: 11th International Workshop on Exploring Modeling Methods in Systems Analysis and Design (EMMSAD2006), 5-9 Jun 2006, Luxembourg.

Su, Xiaomeng and Bolzoni, Damiano and Eck van, Pascal (2007) Understanding and Specifying Information Security Needs to Support the Delivery of High Quality Security Services. In: International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2007, October 14-20, 2007, Valencia, Spain.

Su, Xiaomeng and Bolzoni, Damiano and Eck van, Pascal (2007) Specifying Information Security Needs for the Delivery of High Quality Security Services. In: 2nd IEEE/IFIP International Workshop on Business-Driven IT Management, BDIM '07, 21-23 May 2007, Munich, Germany.

Zambon, Emmanuele and Bolzoni, Damiano and Etalle, Sandro and Salvato, Marco (2007) A model supporting Business Continuity auditing & planning in Information Systems. In: Second International Conference on Internet Monitoring and Protection, ICIMP 2007, 1-5 July 2007, San Jose, CA, USA.

Zambon, Emmanuele and Bolzoni, Damiano and Etalle, Sandro and Salvato, Marco (2007) Model-Based Mitigation of Availability Risks. In: Second IEEE/IFIP International Workshop on Business-Driven IT Management, 21 May 2007, Munich, Germany.

Report

Bolzoni, D. and Crispo, B. and Etalle, S. (2008) ATLANTIDES: Automatic Configuration for Alert Verification in Network Intrusion Detection Systems. [Report]

Bolzoni, D. and Etalle, S. (2006) APHRODITE: an Anomaly-based Architecture for False Positive Reduction. [Report]

Bolzoni, D. and Etalle, S. (2008) Boosting Web Intrusion Detection Systems by Inferring Positive Signatures. [Report]

Bolzoni, Damiano and Etalle, Sandro and Hartel, Pieter (2009) Panacea: Automating Attack Classification for Anomaly-based Network Intrusion Detection Systems. [Report]

Bolzoni, Damiano and Zambon, Emmanuele and Etalle, Sandro and Hartel, Pieter (2005) Poseidon: A 2-tier Anomaly-based Intrusion Detection System. [Report]

Hadziosmanovic, Dina and Bolzoni, Damiano and Hartel, Pieter (2010) Towards securing SCADA systems against process-related threats. [Report]

Su, X. and Bolzoni, D. and van Eck, P.A.T. (2006) A Business Goal Driven Approach for Understanding and Specifying Information Security Requirements. [Report]

Su, X. and Bolzoni, D. and van Eck, P.A.T. (2006) Understanding and Specifying Information Security Needs to Support the Delivery of High Quality Security Services. [Report]

Zambon, Emmanuele and Bolzoni, Damiano and Etalle, Sandro and Salvato, Marco (2007) Model-Based Mitigation of Availability Risks. [Report]

Zambon, Emmanuele and Bolzoni, Damiano and Etalle, Sandro and Salvato, Marco (2007) A model supporting Business Continuity auditing & planning in Information Systems. [Report]

Thesis

Bolzoni, Damiano (2009) Revisiting anomaly-based network intrusion detection systems. thesis.