Building resilience in critical infrastructures for smart and connected cities requires consideration
of different types of interdependencies. Previous research has mainly conceptualized …

To determine the security impact software vulnerabilities have on a particular network, one
must consider interactions among multiple network elements. For a vulnerability analysis tool …

Attack graphs are important tools for analyzing security vulnerabilities in enterprise networks.
Previous work on attack graphs has not provided an account of the scalability of the graph …

We present a new approach to static analysis for security vetting of Android apps and a general
framework called Amandroid. Amandroid determines points-to information for all objects …

To build effective malware analysis techniques and to evaluate new detection tools, up-to-date
datasets reflecting the current Android malware landscape are essential. For such …

Capturing the uncertain aspects in cyber security is important for security analysis in
enterprise networks. However, there has been insufficient effort in studying what modeling …

The static nature of cyber systems gives attackers the advantage of time. Fortunately, a new
approach, called the Moving Target Defense (MTD) has emerged as a potential solution to …

Attack graphs have been proposed as useful tools for analyzing security vulnerabilities in
network systems. Even when they are produced efficiently, the size and complexity of attack …

Software vulnerabilities represent a major cause of cyber-security problems. The National
Vulnerability Database (NVD) is a public data source that maintains standardized information …

Today’s information systems face sophisticated attackers who combine multiple vulnerabilities
to penetrate networks with devastating impact. The overall security of an enterprise …