scholarly journals Tactical Provenance Analysis for Endpoint Detection and Response Systems

Author(s):  
Wajih Ul Hassan ◽  
Adam Bates ◽  
Daniel Marino
2021 ◽  
Vol 1 (3) ◽  
pp. 387-421
Author(s):  
George Karantzas ◽  
Constantinos Patsakis

Advanced persistent threats pose a significant challenge for blue teams as they apply various attacks over prolonged periods, impeding event correlation and their detection. In this work, we leverage various diverse attack scenarios to assess the efficacy of EDRs against detecting and preventing APTs. Our results indicate that there is still a lot of room for improvement as state-of-the-art EDRs fail to prevent and log the bulk of the attacks that are reported in this work. Additionally, we discuss methods to tamper with the telemetry providers of EDRs, allowing an adversary to perform a more stealth attack.


2000 ◽  
Vol 14 (1) ◽  
pp. 1-10 ◽  
Author(s):  
Joni Kettunen ◽  
Niklas Ravaja ◽  
Liisa Keltikangas-Järvinen

Abstract We examined the use of smoothing to enhance the detection of response coupling from the activity of different response systems. Three different types of moving average smoothers were applied to both simulated interbeat interval (IBI) and electrodermal activity (EDA) time series and to empirical IBI, EDA, and facial electromyography time series. The results indicated that progressive smoothing increased the efficiency of the detection of response coupling but did not increase the probability of Type I error. The power of the smoothing methods depended on the response characteristics. The benefits and use of the smoothing methods to extract information from psychophysiological time series are discussed.


2010 ◽  
Vol 15 (2) ◽  
pp. 142-151 ◽  
Author(s):  
Wondimu Ahmed ◽  
Greetje van der Werf ◽  
Alexander Minnaert

In this article, we report on a multimethod qualitative study designed to explore the emotional experiences of students in the classroom setting. The purpose of the study was threefold: (1) to explore the correspondence among nonverbal expressions, subjective feelings, and physiological reactivity (heart rate changes) of students’ emotions in the classroom; (2) to examine the relationship between students’ emotions and their competence and value appraisals; and (3) to determine whether task difficulty matters in emotional experiences. We used multiple methods (nonverbal coding scheme, video stimulated recall interview, and heart rate monitoring) to acquire data on emotional experiences of six grade 7 students. Concurrent correspondence analyses of the emotional indices revealed that coherence between emotional response systems, although apparent, is not conclusive. The relationship between appraisals and emotions was evident, but the effect of task difficulty appears to be minimal.


2008 ◽  
Author(s):  
Katherine A. Becker ◽  
Jeana L. Magyar-Moe ◽  
Christina A. Burek ◽  
Amber K. McDougal ◽  
Autumn N. McKeel

2012 ◽  
Author(s):  
Megan E. Gregory ◽  
Elizabeth H. Lazzara ◽  
Ashley M. Hughes ◽  
Lauren E. Benishek ◽  
Eduardo Salas

Author(s):  
R.K. Jain ◽  
T. Malik ◽  
T.R. Lundquist ◽  
C.-C. Tsao ◽  
W.J. Walecki

Abstract Novel Fabry Perot [1] fringe analysis techniques for monitoring the etching process with a coaxial photon-ion column [2] in the Credence OptiFIB are reported. Presently the primary application of these techniques in circuit edit is in trenching either from the front side or from the backside of a device. Optical fringes are observed in reflection geometry through the imaging system when the trench floor is thin and semi-transparent. The observed fringes result from optical interference in the etalon formed between the trench floor (Si in the case of backside trenching) and the circuitry layer beyond the trench floor. In-situ real-time thickness measurements and slope correction techniques are proposed that improve endpoint detection and control planarity of the trench floor. For successful through silicon edits, reliable endpoint detection and co-planarity of a local trench is important. Reliable endpoint detection prevents milling through bulk silicon and damaging active circuitry. Uneven trench floor thickness results in premature endpoint detection with sufficient thickness remaining in only part of the trench area. Good co-planarity of the trench floor also minimizes variability in the aspect ratios of the edit holes, hence increasing success rates in circuit edit.


Sign in / Sign up

Export Citation Format

Share Document