Publications

Publications by João Marco

2023

An Expert System as an Awareness Tool to Prevent Social Engineering Attacks in Public Organizations

Authors
Cardoso, WR; Silva, JM; Ribeiro, AdRL;

Publication
SSRN Electronic Journal

Abstract

2023

CRIBA: A Tool for Comprehensive Analysis of Cryptographic Ransomware's I/O Behavior

Authors
Esteves, T; Pereira, B; Oliveira, RP; Marco, J; Paulo, J;

Publication
2023 42ND INTERNATIONAL SYMPOSIUM ON RELIABLE DISTRIBUTED SYSTEMS, SRDS 2023

Abstract
Cryptographic ransomware attacks are constantly evolving by obfuscating their distinctive features (e.g., I/O patterns) to bypass detection mechanisms and to run unnoticed at infected servers. Thus, efficiently exploring the I/O behavior of ransomware families is crucial so that security analysts and engineers can better understand these and, with such knowledge, enhance existing detection methods. In this paper, we propose CRIBA, an open-source framework that simplifies the exploration, analysis, and comparison of I/O patterns for Linux cryptographic ransomware. Our solution combines the collection of comprehensive information about system calls issued by ransomware samples, with a customizable and automated analysis and visualization pipeline, including tailored correlation algorithms and visualizations. Our study, including 5 Linux ransomware families, shows that CRIBA provides comprehensive insights about the I/O patterns of these attacks while aiding in exploring common and differentiating traits across families.

CloseRead Abstract

2013

Enhancing Traffic Sampling scope and efficiency

Authors
Silva, JMC; Carvalho, P; Lima, SR;

Publication
2013 Proceedings IEEE INFOCOM Workshops, Turin, Italy, April 14-19, 2013

Abstract

2013

Enhancing traffic sampling scope and efficiency

Authors
Silva, JMC; Carvalho, P; Lima, SR;

Publication
Proceedings of the IEEE INFOCOM 2013, Turin, Italy, April 14-19, 2013

Abstract

2014

Computational weight of network traffic sampling techniques

Authors
Silva, JMC; Carvalho, P; Lima, SR;

Publication
IEEE Symposium on Computers and Communications, ISCC 2014, Funchal, Madeira, Portugal, June 23-26, 2014

Abstract

2014

A Modular Architecture for Deploying Self-adaptive Traffic Sampling

Authors
Silva, JMC; Carvalho, P; Lima, SR;

Publication
Monitoring and Securing Virtualized Networks and Services - 8th IFIP WG 6.6 International Conference on Autonomous Infrastructure, Management, and Security, AIMS 2014, Brno, Czech Republic, June 30 - July 3, 2014. Proceedings

Abstract