Florian Skopik

AttackMate: Realistic Emulation and Automation of Cyber Attack Scenarios Across the Kill Chain

Adversary emulation tools facilitate scripting and automated execution of cyber attack chains, thereby reducing costs and manual expert effort required for security testing, cyber exercises, and intrusion detection research. However, due to the fact that existing tools typically...

CAM-LDS: cyber attack manifestations for automatic interpretation of system logs and security alerts

Abstract Log data are essential for intrusion detection and forensic investigations. However, manual log analysis is tedious due to high data volumes, heterogeneous event formats, and unstructured messages. Although many automated log-analysis methods exist, they usually still re...