The field of cysec is evolving fast. Security professionals are in need of intelligence on past,
current and—ideally—upcoming threats, because attacks are becoming more advanced and …

Cyber-threat attribution is the identification of attacker responsible for a cyber-attack. It is a
challenging task as attacker uses different obfuscation and deception techniques to hide its …

A vast majority of cyber security information is in the form of unstructured text. A much-
needed task is to have a machine-assisted analysis of such information. Named Entity …

Most of the damage done by web application attacks comes from SQL injection attacks, in
which the attacker (s) can change, remove, and read data from the database servers. All …

Container Orchestrator (CO) is a vital technology for managing clusters of containers, which
may form a virtualized infrastructure for developing and operating software systems. Like …

Capture-the-flag (CTF) competitions have become highly successful in security education,
and heap corruption is considered one of the most difficult and rewarding challenges due to …

Extracting knowledge from cyber threat intelligence is essential for understanding cyber
threats and implementing proactive defense measures. However, there is a lack of open …

Abstract Application Programming Interface (API) is a core technology that facilitates
developers' productivity by enabling the reuse of software components. Understanding APIs …

The daily activities of cybersecurity experts and software engineers—code reviews, issue
tracking, vulnerability reporting—are constantly contributing to a massive wealth of security …

With the rapid integration of different technologies such as IoT, cloud computing, and big
data in complex and safety-critical systems, security attacks have become a common …