A small security research group with solid background.     We do research to solve real problems with real solutions.

Publications
Full list of publications, newest first. A selected subset is shown on the home page.

2024
Provisioning the external infrastructure for Cyberspace Operations. A spotlight on Russian APT groups [DOI]International Journal of Information Security Science
2023
A survey and characterization of Close Access Cyberspace Operations [DOI]International Journal of Information Security
FROM INTELLIGENCE GATHERING TO CYBER THREAT DETECTION [DOI]Romanian Intelligence Studies Review
2022
A Taxonomy for Threat Actors’ Delivery Techniques [DOI]Applied Sciences
A Taxonomy for Threat Actors’ Persistence Techniques [DOI]Computers & Security
Key Requirements for the Detection and Sharing of Behavioral Indicators of Compromise [DOI]Electronics
SOC Critical Path: A Defensive Kill Chain Model [DOI]IEEE Access
2021
CNA Tactics and Techniques: A Structure Proposal [DOI]Journal of Sensor and Actuator Networks
2020
A Review of Memory Errors Exploitation in x86-64 [DOI]Computers
A Study on the Security of Authentication SystemsUBICOMM 2020 (IARIA)
An Info-Leak Resistant Kernel Randomization for Virtualized Systems [DOI]IEEE Access
E-BOOT: Preventing Boot-Time Entropy Starvation in Cloud Systems [DOI]IEEE Access
KASLR-MT: Kernel Address Space Layout Randomization for Multi-Tenant cloud systems [DOI]Journal of Parallel and Distributed Computing
Mitigating Webshell Attacks through Machine Learning Techniques [DOI]Future Internet
Proof of Adjourn (PoAj): A Novel Approach to Mitigate Blockchain Attacks [DOI]Applied Sciences
Security of Blockchain Consensus ProtocolsUBICOMM 2020 (IARIA)
Smart Contract: Attacks and Protections [DOI]IEEE Access
2019
Address Space Layout Randomization Next Generation [URL]Applied Sciences
Assessing Blockchain Consensus and Security Mechanisms against the 51% Attack [DOI]Applied Sciences
Control-Flow Integrity: Attacks and Protections [DOI]Applied Sciences
DNS-IdM: A Blockchain Identity Management System to Secure Personal Data Sharing in a Network [DOI]Applied Sciences
On the Effectiveness of Control-Flow Integrity Against Modern Attack Techniques [DOI]IFIP Advances in Information and Communication Technology
SSPFA: effective stack smashing protection for Android OS [DOI]International Journal of Information Security
2018
Detección de copiones con pinganillos magnéticos y experimentos sobre magnetismoIN-RED 2018 (docente)
How Kernel Randomization is Canceling Memory Deduplication in Cloud Computing Systems [DOI]IEEE International Symposium on Network Computing and Applications
On the effectiveness of blockchain against cryptocurrency attacksUBICOMM 2018 (IARIA)
Slicedup: a tenant-aware memory deduplication for cloud computingUBICOMM 2018 (IARIA)
return-to-csu: a new method to bypass 64-bit Linux ASLR [URL]Black Hat Asia 2018
2016
Abusing LUKS to Hack the System [URL]DeepSec 2016 (Viena)
Exploiting Linux and PaX ASLR's Weaknesses on 32-bit and 64-bit Systems [URL]Black Hat Asia 2016
2015
Bypassing Trusted Code: Hacking GRUB [URL]IX Jornadas STIC CCN-CERT
Cyber-security protection techniques to mitigate memory errors exploitation [DOI]PhD thesis, UPV
Prevención de explotación de vulnerabilidades mediante diversificación por emulaciónJNIC 2015
Robusteciendo Apache frente a ataques de desbordamiento de pilaJNIC 2015
2014
On the Effectiveness of Full-ASLR on 64-bit Linux [URL]In-depth security conference, DeepSec
On the effectiveness of NX, SSP, RenewSSP and ASLR against stack buffer overflows [DOI]13th International Symposium on Network Computing and Applications
2013
Emerging trends in ICT security [DOI]Elsevier (book)
Preventing Brute Force Attacks Against Stack Canary Protection on Networking Servers [DOI]12th International Symposium on Network Computing and Applications
Preventing Memory Errors in Networked Vehicle Services Through DiversificationSAFECOMP 2013 - Workshop CARS (2nd Workshop on Critical Automotive applications : Robustness & Safety) of the 32nd International Conference on Computer Safety, Reliability and Security
Security through Emulation-Based Processor Diversificationcapítulo, Emerging Trends in ICT Security (Elsevier)
2011
Seguridad en sistemas particionados (STP) [URL]Master thesis, UPV
2010
Seguridad en sistemas empotrados de tiempo realCEDI 2010
  Contact us Home