The Experts below are selected from a list of 132 Experts worldwide ranked by ideXlab platform

Mathias Ekstedt - One of the best experts on this subject based on the ideXlab platform.

  • Success Rate of Remote Code Execution Attacks Expert Assessments and Observations
    Journal of Universal Computer Science, 2012
    Co-Authors: Hannes Holm, U. Franke, Teodor Sommestad, Mathias Ekstedt
    Abstract:

    This paper describes a study on how cyber security experts assess the\nimportance of three variables related to the probability of successful\nRemote Code Execution attacks: (i) non-executable memory, (ii) access\nand (iii) exploits for High or Medium vulnerabilities as defined by the\nCommon Vulnerability Scoring System. The rest of the relevant variables\nwere fixed by the environment of a cyber defense exercise where the\nrespondents participated. The questionnaire was fully completed by\nfifteen experts. These experts perceived access as the most important\nvariable and availability of exploits for High vulnerabilities as more\nimportant than Medium vulnerabilities. Non-executable memory was not\nseen as significant. Estimates by the experts are compared to\nobservations of actual attacks carried out during the cyber defense\nexercise. These comparisons show that experts' in general provide fairly\ninaccurate advice on an abstraction level such as in the present study.\nHowever, results also show a prediction model constructed through expert\njudgment likely is of better quality if the experts' estimates are\nweighted according to their expertise.

  • expert assessment on the probability of successful Remote Code Execution attacks
    International Workshop on Security, 2011
    Co-Authors: Hannes Holm, U. Franke, Teodor Sommestad, Mathias Ekstedt
    Abstract:

    This paper describes a study on how cyber security experts assess the importance of three variables related to the probability of successful Remote Code Execution attacks – presence of: (i) non-executable memory, (ii) access and (iii) exploits for High or Medium vulnerabilities as defined by the Common Vulnerability Scoring System. The rest of the relevant variables were fixed by the environment of a cyber defense exercise where the respondents participated. The questionnaire was fully completed by fifteen experts. These experts perceived access as the most important variable and availability of exploits for High vulnerabilities as more important than Medium vulnerabilities. Non-executable memory was not seen as significant, however, presumably due to lack of address space layout randomization and canaries in the network architecture of the cyber defense exercise scenario.

Hannes Holm - One of the best experts on this subject based on the ideXlab platform.

  • Success Rate of Remote Code Execution Attacks Expert Assessments and Observations
    Journal of Universal Computer Science, 2012
    Co-Authors: Hannes Holm, U. Franke, Teodor Sommestad, Mathias Ekstedt
    Abstract:

    This paper describes a study on how cyber security experts assess the\nimportance of three variables related to the probability of successful\nRemote Code Execution attacks: (i) non-executable memory, (ii) access\nand (iii) exploits for High or Medium vulnerabilities as defined by the\nCommon Vulnerability Scoring System. The rest of the relevant variables\nwere fixed by the environment of a cyber defense exercise where the\nrespondents participated. The questionnaire was fully completed by\nfifteen experts. These experts perceived access as the most important\nvariable and availability of exploits for High vulnerabilities as more\nimportant than Medium vulnerabilities. Non-executable memory was not\nseen as significant. Estimates by the experts are compared to\nobservations of actual attacks carried out during the cyber defense\nexercise. These comparisons show that experts' in general provide fairly\ninaccurate advice on an abstraction level such as in the present study.\nHowever, results also show a prediction model constructed through expert\njudgment likely is of better quality if the experts' estimates are\nweighted according to their expertise.

  • expert assessment on the probability of successful Remote Code Execution attacks
    International Workshop on Security, 2011
    Co-Authors: Hannes Holm, U. Franke, Teodor Sommestad, Mathias Ekstedt
    Abstract:

    This paper describes a study on how cyber security experts assess the importance of three variables related to the probability of successful Remote Code Execution attacks – presence of: (i) non-executable memory, (ii) access and (iii) exploits for High or Medium vulnerabilities as defined by the Common Vulnerability Scoring System. The rest of the relevant variables were fixed by the environment of a cyber defense exercise where the respondents participated. The questionnaire was fully completed by fifteen experts. These experts perceived access as the most important variable and availability of exploits for High vulnerabilities as more important than Medium vulnerabilities. Non-executable memory was not seen as significant, however, presumably due to lack of address space layout randomization and canaries in the network architecture of the cyber defense exercise scenario.

Jeonghun Cho - One of the best experts on this subject based on the ideXlab platform.

  • area efficient Remote Code Execution platform with on demand instruction manager for cloud connected Code executable iot devices
    Simulation Modelling Practice and Theory, 2017
    Co-Authors: Daejin Park, Minwoo Jung, Jeonghun Cho
    Abstract:

    Abstract An energy-area efficient cloud-connected software Execution architecture in IoT sensor processor is proposed. A Remotely installed sensor device such as an environmental activity monitor is commonly implemented using the conventional embedded processor only providing the fixed services, which includes statically compiled embedded software in on-chip flash memory. Instead of conventional on-chip flash memory for an instruction Code area, we adopt an virtually mapped internal memory concept to realize cloud-connected software Execution, in where the Remote storage area via the IoT platform is indirectly mapped onto the physical address space of the instruction memory using a dynamic address translation technique. The proposed cloud-connected architecture of the system enables on-demand Code Execution for the instructions, which are fetched from the cloud-side Remote storage area in the runtime, instead of using a directly-connected on-chip instruction bus. The proposed storage-less approach may be adopted to reduce the high access current and large chip area overhead by eliminating the on-chip Code flash memory. To reduce the access current overhead in order to retrieve the requested instruction, a small-sized RAM scratch pad is adopted for retaining the hot-spot instruction Code and early filled with pre-estimated instruction sector. The experimental results show that the proposed technique reduces the energy consumption and packet delay of an IoT device for executing the Remote embedded software, as well as the reduced chip area by realizing a storage-less sensor architecture.

U. Franke - One of the best experts on this subject based on the ideXlab platform.

  • Success Rate of Remote Code Execution Attacks Expert Assessments and Observations
    Journal of Universal Computer Science, 2012
    Co-Authors: Hannes Holm, U. Franke, Teodor Sommestad, Mathias Ekstedt
    Abstract:

    This paper describes a study on how cyber security experts assess the\nimportance of three variables related to the probability of successful\nRemote Code Execution attacks: (i) non-executable memory, (ii) access\nand (iii) exploits for High or Medium vulnerabilities as defined by the\nCommon Vulnerability Scoring System. The rest of the relevant variables\nwere fixed by the environment of a cyber defense exercise where the\nrespondents participated. The questionnaire was fully completed by\nfifteen experts. These experts perceived access as the most important\nvariable and availability of exploits for High vulnerabilities as more\nimportant than Medium vulnerabilities. Non-executable memory was not\nseen as significant. Estimates by the experts are compared to\nobservations of actual attacks carried out during the cyber defense\nexercise. These comparisons show that experts' in general provide fairly\ninaccurate advice on an abstraction level such as in the present study.\nHowever, results also show a prediction model constructed through expert\njudgment likely is of better quality if the experts' estimates are\nweighted according to their expertise.

  • expert assessment on the probability of successful Remote Code Execution attacks
    International Workshop on Security, 2011
    Co-Authors: Hannes Holm, U. Franke, Teodor Sommestad, Mathias Ekstedt
    Abstract:

    This paper describes a study on how cyber security experts assess the importance of three variables related to the probability of successful Remote Code Execution attacks – presence of: (i) non-executable memory, (ii) access and (iii) exploits for High or Medium vulnerabilities as defined by the Common Vulnerability Scoring System. The rest of the relevant variables were fixed by the environment of a cyber defense exercise where the respondents participated. The questionnaire was fully completed by fifteen experts. These experts perceived access as the most important variable and availability of exploits for High vulnerabilities as more important than Medium vulnerabilities. Non-executable memory was not seen as significant, however, presumably due to lack of address space layout randomization and canaries in the network architecture of the cyber defense exercise scenario.

Teodor Sommestad - One of the best experts on this subject based on the ideXlab platform.

  • Success Rate of Remote Code Execution Attacks Expert Assessments and Observations
    Journal of Universal Computer Science, 2012
    Co-Authors: Hannes Holm, U. Franke, Teodor Sommestad, Mathias Ekstedt
    Abstract:

    This paper describes a study on how cyber security experts assess the\nimportance of three variables related to the probability of successful\nRemote Code Execution attacks: (i) non-executable memory, (ii) access\nand (iii) exploits for High or Medium vulnerabilities as defined by the\nCommon Vulnerability Scoring System. The rest of the relevant variables\nwere fixed by the environment of a cyber defense exercise where the\nrespondents participated. The questionnaire was fully completed by\nfifteen experts. These experts perceived access as the most important\nvariable and availability of exploits for High vulnerabilities as more\nimportant than Medium vulnerabilities. Non-executable memory was not\nseen as significant. Estimates by the experts are compared to\nobservations of actual attacks carried out during the cyber defense\nexercise. These comparisons show that experts' in general provide fairly\ninaccurate advice on an abstraction level such as in the present study.\nHowever, results also show a prediction model constructed through expert\njudgment likely is of better quality if the experts' estimates are\nweighted according to their expertise.

  • expert assessment on the probability of successful Remote Code Execution attacks
    International Workshop on Security, 2011
    Co-Authors: Hannes Holm, U. Franke, Teodor Sommestad, Mathias Ekstedt
    Abstract:

    This paper describes a study on how cyber security experts assess the importance of three variables related to the probability of successful Remote Code Execution attacks – presence of: (i) non-executable memory, (ii) access and (iii) exploits for High or Medium vulnerabilities as defined by the Common Vulnerability Scoring System. The rest of the relevant variables were fixed by the environment of a cyber defense exercise where the respondents participated. The questionnaire was fully completed by fifteen experts. These experts perceived access as the most important variable and availability of exploits for High vulnerabilities as more important than Medium vulnerabilities. Non-executable memory was not seen as significant, however, presumably due to lack of address space layout randomization and canaries in the network architecture of the cyber defense exercise scenario.