Security assessment of organization's information systems is becoming increasingly
complex due to their growing sizes and underlying architectures, eg, cloud. Analyzing …

A Cyber Reasoning System (CRS) is designed to automatically find and exploit software
vulnerabilities in complex software. To be effective, CRSs integrate multiple vulnerability …

Operationalizing machine learning based security detections is extremely challenging,
especially in a continuously evolving cloud environment. Conventional anomaly detection …

Attack classification does represent a crucial activity in different security areas. During
security assessment, it makes it easier to define which attacks must be performed. When …

Web applications in widespread use have always been the target of large-scale attacks,
leading to massive disruption of services and financial loss, as in the Equifax data breach. It …

Algorithmic Complexity (AC) Denial-of-Service attacks have been a threat for over twenty
years. Attackers craft particular input vectors to trigger the worst-case logic of some code …

Software vulnerabilities can have serious consequences, which is why many techniques
have been proposed to defend against them. Among these, vulnerability detection …

While security experts, firms, security providers, threat analysts all around the globe are
working hard to provide ironclad security for information system softwares, vulnerabilities in …

Code injection attacks, like the one used in the high-profile 2017 Equifax breach, have
become increasingly common, now ranking# 1 on OWASP's list of critical web application …

Context: Managing technical debt (TD) associated with external cybersecurity attacks on an
organization can significantly improve decisions made when prioritizing which security …