Research output per year
Research output per year
- 1 - 50 out of 64 results
Search results
-
2024
Anti-Cheat: Attacks and the Effectiveness of Client-Side Defences
Collins, S., Poulopoulos, A., Muench, M. & Chothia, T., 18 Oct 2024, (Unpublished).Research output: Contribution to conference (unpublished) › Paper › peer-review
File266 Downloads (Pure) -
Teaching Adversarial Thinking by Having Students Circumvent Exam Rules
Bowden, M., Chothia, T., Clee, A., Collins, S., Henes, J. & Oswald, D., 4 Jun 2024, (Accepted/In press) The 4th Annual Advances in Cyber Security Education: CSE-Connect . (Springer Lecture Notes in Networks and Systems).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
8 Downloads (Pure) -
2023
Symbolic Modelling of Remote Attestation Protocols for Device and App Integrity on Android
Aldoseri, A., Chothia, T., Moreira-Sanchez, J. & Oswald, D., 10 Jul 2023, ASIA CCS '23: Proceedings of the 2023 ACM on Asia Conference on Computer and Communications Security. Liu, J., Xiang, Y., Nepal, S. & Tsudik, G. (eds.). Association for Computing Machinery (ACM), p. 218–231 14 p.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile178 Downloads (Pure) -
2022
Cyber security in the rail sector - an integrated approach
Thomas, R. J., Chothia, T. & Ordean, M., 4 Feb 2022, (Accepted/In press) World Congress on Rail Research.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile267 Downloads (Pure) -
Practical EMV relay protection
Radu, A. I., Chothia, T., Newton, C. J. P., Boureanu, I. & Chen, L., 27 Jul 2022, Proceedings - 43rd IEEE Symposium on Security and Privacy, SP 2022. Institute of Electrical and Electronics Engineers (IEEE), p. 1737-1756 20 p. 9833642. (Proceedings - IEEE Symposium on Security and Privacy).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile213 Downloads (Pure) -
The Closer You Look, The More You Learn: A Grey-box Approach to Protocol State Machine Learning
McMahon Stone, C., Thomas, S. L., Vanhoef, M., Henderson, J., Bailluet, N. & Chothia, T., 7 Nov 2022, CCS '22: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security. New York: Association for Computing Machinery , p. 2265-2278 14 p. (Proceedings of the ACM Conference on Computer and Communications Security).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile136 Downloads (Pure) -
2020
Catch me if you can: an in-depth study of CVE discovery time and inconsistencies for managing risks in critical infrastructures
Thomas, R. J., Gardiner, J., Chothia, T., Samanis, E., Perrett, J. & Rashid, A., 9 Nov 2020, CPSIOTSEC'20: Proceedings of the 2020 Joint Workshop on CPS&IoT Security and Privacy. Association for Computing Machinery (ACM), p. 49-60 12 p.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile518 Downloads (Pure) -
Learning from Vulnerabilities - Categorising, Understanding and Detecting Weaknesses in Industrial Control Systems
Thomas, R. J. & Chothia, T., 17 Dec 2020, Computer Security - ESORICS 2020 International Workshops, CyberICPS, SECPRE, and ADIoT, 2020, Revised Selected Papers. Katsikas, S., Cuppens, F., Cuppens, N., Lambrinoudakis, C., Kalloniatis, C., Mylopoulos, J., Antón, A., Gritzalis, S., Meng, W. & Furnell, S. (eds.). Springer, p. 100-116 17 p. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); vol. 12501 LNCS).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile1 Citation (Scopus)345 Downloads (Pure) -
Modelling of 802.11 4-Way Handshake Attacks and Analysis of Security Properties
Singh, R. R., Moreira-Sanchez, J., Chothia, T. & Ryan, M., 16 Sept 2020, STM 2020: Security and Trust Management . Springer, p. 3 21 p.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open Access -
Security Analysis and Implementation of Relay-Resistant Contactless Payments
Boureanu, I., Chothia, T., Debant, A. & Delaune, S., 2 Nov 2020, CCS '20: Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security. Association for Computing Machinery (ACM), p. 879-898 20 p. (Proceedings of the ACM Conference on Computer and Communications Security).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
1 Citation (Scopus) -
2019
Breaking all the things: a systematic survey of firmware extraction and modification techniques for IoT devices
Vasile, S., Oswald, D. & Chothia, T., 7 Mar 2019, (E-pub ahead of print) CARDIS 2018: Smart Card Research and Advanced Applications. Springer, p. 171-185 15 p. (Lecture Notes in Computer Science).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile5 Citations (Scopus)1038 Downloads (Pure) -
Choose Your Pwn Adventure: Adding Competition and Storytelling to an Introductory Cybersecurity Course
Chothia, T., Novakovic, C., Radu, A. I. & Thomas, R. J., 27 Apr 2019, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). Springer Verlag, p. 141-172 32 p. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); vol. 11345 LNCS).Research output: Chapter in Book/Report/Conference proceeding › Chapter
Open AccessFile3 Citations (Scopus)861 Downloads (Pure) -
Short paper: making contactless EMV robust against rogue readers colluding with relay attackers
Chothia, T., Boureanu, I. & Chen, L., 22 Feb 2019, Proceedings of the 23rd International Conference on Financial Cryptography and Data Security (FC'19). 10 p.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile244 Downloads (Pure) -
Short Paper: Making Contactless EMV Robust Against Rogue Readers Colluding with Relay Attackers
Chothia, T., Boureanu, I. & Chen, L., 30 Sept 2019, Financial Cryptography and Data Security: 23rd International Conference, FC 2019, Revised Selected Papers. Goldberg, I. & Moore, T. (eds.). Springer, p. 222-233 12 p. (Lecture Notes in Computer Science; vol. 11598).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
1 Citation (Scopus) -
Time protection: the missing OS abstraction
Ge, Q., Yarom, Y., Chothia, T. & Heiser, G., 25 Mar 2019, EuroSys '19: Proceedings of the Fourteenth EuroSys Conference 2019. Association for Computing Machinery (ACM), p. 1-17 17 p. 1Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile16 Citations (Scopus)571 Downloads (Pure) -
2018
A better understanding of machine learning malware misclassifcation
Alruhaily, N., Chothia, T. & Bordbar, B., 1 Jan 2018, Information Systems Security and Privacy - 3rd International Conference, ICISSP 2017, Revised Selected Papers. Mori, P., Furnell, S. & Camp, O. (eds.). Springer Verlag, p. 35-58 24 p. (Communications in Computer and Information Science; vol. 867).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
-
Extending Automated Protocol State Learning for the 802.11 4-Way Handshake
Chothia, T., McMahon Stone, C. & De Ruiter, J., 8 Aug 2018, Computer Security: 23rd European Symposium on Research in Computer Security, ESORICS 2018, Barcelona, Spain, September 3-7, 2018, Proceedings, Part I. Lopez, J., Zhou, J. & Soriano, M. (eds.). 1 ed. Springer, p. 325-345 21 p. (Lecture Notes in Computer Science; vol. 11098).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
10 Citations (Scopus) -
Modelling and analysis of a hierarchy of distance bounding attacks
Chothia, T., De Ruiter, J. & Smyth, B., 17 Aug 2018, 27th USENIX Security Symposium (USENIX Security 18). USENIX Association, p. 1563-1580 18 p.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile16 Citations (Scopus)80 Downloads (Pure) -
Phishing attacks: Learning by doing
Chothia, T., Paiu, S. I. & Oultram, M., 2018.Research output: Contribution to conference (unpublished) › Paper › peer-review
3 Citations (Scopus) -
2017
A market-based approach for detecting malware in the cloud via introspection
Alruhaily, N., Mera-Gómez, C., Chothia, T. & Bahsoon, R., 2017, Service-Oriented Computing - 15th International Conference, ICSOC 2017, Proceedings. Maximilien, M., Vallecillo, A., Wang, J. & Oriol, M. (eds.). Springer Verlag, p. 722-730 9 p. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); vol. 10601 LNCS).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
-
An attack against message authentication in the ERTMS train to trackside communication protocols
Chothia, T., Ordean, M., De Ruiter, J. & Thomas, R. J., 2 Apr 2017, ASIA CCS '17: Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security. New York, NY, USA: Association for Computing Machinery , p. 743-756Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile5 Citations (Scopus)435 Downloads (Pure) -
HumIDIFy: A Tool for Hidden Functionality Detection in Firmware
Thomas, S., Garcia, F. D. & Chothia, T., 2017, 14th Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA '17), Proceedings. Springer, p. 279-300 22 p. (Lecture Notes in Computer Science; vol. 10327).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile14 Citations (Scopus)381 Downloads (Pure) -
Jail, Hero or Drug Lord? Turning a Cyber Security Course Into an 11 Week Choose Your Own Adventure Story
Chothia, T., Holdcroft, S., Radu, A. & Thomas, R., 15 Aug 2017, 2017 USENIX Workshop on Advances in Security Education (ASE 17). Vancouver, BC: USENIX AssociationResearch output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile15 Citations (Scopus)101 Downloads (Pure) -
Spinner: Semi-Automatic Detection of Pinning without Hostname Verification (or why 10M bank users were vulnerable)
McMahon Stone, C., Chothia, T. & Garcia, F. D., 4 Dec 2017, Proceedings of 33rd Annual Computer Security Applications Conference (ACSAC 2017). Association for Computing Machinery , p. 176-188 13 p.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile6 Citations (Scopus)416 Downloads (Pure) -
Stringer: measuring the importance of static data comparisons to detect backdoors and undocumented functionality
Thomas, S. L., Chothia, T. & Garcia, F. D., 12 Aug 2017, (E-pub ahead of print) Computer Security - ESORICS 2017: 22nd European Symposium on Research in Computer Security, Oslo, Norway, September 11-15, 2017, Proceedings, Part II. Foley, S. N., Gollmann, D. & Snekkenes, E. (eds.). Springer, p. 513-531 18 p. (Lecture Notes in Computer Science).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile10 Citations (Scopus)381 Downloads (Pure) -
Towards an understanding of the misclassification rates of machine learning-based malware detection systems
Alruhaily, N., Bordbar, B. & Chothia, T., 19 Feb 2017, ICISSP 2017 - Proceedings of the 3rd International Conference on Information Systems Security and Privacy. Mori , P., Furnell, S. & Camp, O. (eds.). SciTePress, Vol. 2017-January. p. 101-112 12 p.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open Access1 Citation (Scopus) -
TRAKS: A Universal Key Management Scheme for ERTMS
Thomas, R., Ordean, M., Chothia, T. & De Ruiter, J., 4 Dec 2017, ACSAC 2017 Proceedings of the 33rd Annual Computer Security Applications Conference. Association for Computing Machinery (ACM), p. 327-338Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile2 Citations (Scopus)368 Downloads (Pure) -
Types for Location and Data Security in Cloud Environments
Gazeau, I., Chothia, T. & Duggan, D., 28 Sept 2017, (E-pub ahead of print) 2017 IEEE 30th Computer Security Foundations Symposium (CSF). IEEE Computer Society Press, 16 p.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile2 Citations (Scopus)236 Downloads (Pure) -
Why banker Bob (still) can’t get TLS right: A Security Analysis of TLS in Leading UK Banking Apps
Chothia, T., Garcia, F., Heppel, C. & McMahon Stone, C., 23 Dec 2017, (E-pub ahead of print) Financial Cryptography and Data Security: 21st International Conference, FC 2017, Sliema, Malta, April 3-7, 2017, Revised Selected Papers. Kiayias, A. (ed.). Springer, p. 579-597 18 p. (Lecture Notes in Computer Science; vol. 10322).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile3 Citations (Scopus)493 Downloads (Pure) -
2016
A Formal Security Analysis of ERTMS Train to Trackside Protocols
Chothia, T., De Ruiter, J. & Thomas, R. J., 15 Jun 2016, Reliability, Safety, and Security of Railway Systems. Modelling, Analysis, Verification, and Certification. Springer, p. 53-68 Chapter 4. (Lecture Notes in Computer Science; vol. 9707).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile3 Citations (Scopus)413 Downloads (Pure) -
Asset-centric security-aware service selection: cloud storage and app markets
Tziakouris, G., Zinonos, M., Chothia, T. & Bahsoon, R., 6 Oct 2016, 2016 IEEE International Congress on Big Data (BigData Congress). Pu, C., Fox, G. & Damiani, E. (eds.). Institute of Electrical and Electronics Engineers (IEEE), p. 327-332 6 p. 7584956Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile2 Citations (Scopus)404 Downloads (Pure) -
Compositional schedulability analysis of real-time actor-based systems
Mahdi Jaghoori, M., De Boer, F., Longuet, D., Chothia, T. & Sirjani, M., 25 Jan 2016, (E-pub ahead of print) In: Acta Informatica. p. 1-36 36 p.Research output: Contribution to journal › Article › peer-review
Open AccessFile3 Citations (Scopus)146 Downloads (Pure) -
Learning from others’ mistakes: penetration testing IoT devices in the classroom
Chothia, T. & De Ruiter, J., 9 Aug 2016.Research output: Contribution to conference (unpublished) › Paper › peer-review
Open Access7 Citations (Scopus) -
On the (in)security of the latest generation implantable cardiac defibrillators and how to secure them
Marin, E., Singelée, D., Garcia, F. D., Chothia, T., Willems, R. & Preneel, B., 5 Dec 2016, ACSAC '16: Proceedings of the 32nd Annual Conference on Computer Security Applications. Association for Computing Machinery , p. 226-236Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
28 Citations (Scopus) -
Thwarting market specific attacks in cloud
Tziakouris, G., Bahsoon, R., Chothia, T. & Buuya, R., 3 Jul 2016, Proceedings of the 9th IEEE 2015 International Conference on Cloud Computing (CLOUD 2016). IEEE Computer Society Press, p. 35-42 8 p.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile204 Downloads (Pure) -
2015
Analysis of Mobility Algorithms for Forensic Virtual Machine Based Malware Detection
Chothia, T., Alruhaily, N. & Bordbar, B., 3 Dec 2015.Research output: Contribution to conference (unpublished) › Paper › peer-review
1 Citation (Scopus) -
An Offline Capture The Flag-Style Virtual Machine and an Assessment of Its Value for Cybersecurity Education
Chothia, T. & Novakovic, C., 11 Aug 2015.Research output: Contribution to conference (unpublished) › Paper › peer-review
Open AccessFile37 Citations (Scopus)423 Downloads (Pure) -
Automatically calculating quantitative integrity measures for imperative programs
Chothia, T., Novakovic, C. & Singh, R. R., 2015, Data Privacy Management, Autonomous Spontaneous Security, and Security Assurance : 9th International Workshop, DPM 2014, 7th International Workshop, SETOP 2014, and 3rd International Workshop, QASA 2014, Wroclaw, Poland, September 10-11, 2014. Revised Selected Papers. Garcia-Alfaro, J., Herrera-Joancomartí, J. & Lupu, E. (eds.). Springer, Vol. 8872. p. 250-265 16 p. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); vol. 8872).Research output: Chapter in Book/Report/Conference proceeding › Chapter
-
Automatically checking commitment protocols in ProVerif without false attacks
Chothia, T., Smyth, B. & Staite, C., 11 Apr 2015, Principles of Security and Trust : 4th International Conference, POST 2015, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2015, London, UK, April 11-18, 2015, Proceedings. Focardi, R. & Myers , A. (eds.). Springer, Vol. 9036 . p. 137-155 (Lecture Notes in Computer Science; vol. 9036).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
Open AccessFile8 Citations (Scopus)161 Downloads (Pure) -
Calculating Quantitative Integrity and Secrecy for Imperative Programs
Chothia, T., Novakovic, C. & Singh, R. R., 1 Apr 2015, In: International Journal of Secure Software Engineering. 6, 2, p. 23-46Research output: Contribution to journal › Article › peer-review
-
Relay Cost Bounding for Contactless EMV Payments
Chothia, T., Garcia, F., De Ruiter, J., van den Breekel, J. & Thompson, M., 16 Jul 2015, Financial Cryptography and Data Security: 19th International Conference, FC 2015, San Juan, Puerto Rico, January 26-30, 2015, Revised Selected Papers. Böhme , R. & Okamoto , T. (eds.). Springer, Vol. 8975 LNCS. p. 189-206 (Lecture Notes in Computer Science; vol. 8975).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
23 Citations (Scopus) -
2014
LeakWatch: Estimating information leakage from java programs
Chothia, T., Kawamoto, Y. & Novakovic, C., 2014, Computer Security - ESORICS 2014 : 19th European Symposium on Research in Computer Security, Wroclaw, Poland, September 7-11, 2014. Proceedings, Part II. Kutyłowski, M. & Vaidya , J. (eds.). PART 2 ed. Springer, Vol. 8713 LNCS. p. 219-236 18 p. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); vol. 8713 LNCS, no. PART 2).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
27 Citations (Scopus) -
2013
A tool for estimating information leakage
Chothia, T., Kawamoto, Y. & Novakovic, C., 12 Aug 2013, Computer Aided Verification - 25th International Conference, CAV 2013, Proceedings. p. 690-695 6 p. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); vol. 8044 LNCS).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
23 Citations (Scopus) -
Probabilistic point-to-point information leakage
Chothia, T., Kawamoto, Y., Novakovic, C. & Parker, D., 9 Oct 2013, Proceedings - 2013 IEEE 26th Computer Security Foundations Symposium, CSF 2013. p. 193-205 13 p. 6595829Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
20 Citations (Scopus) -
2012
SCAIL: An integrated Starcraft AI system
Young, J., Smith, F., Atkinson, C., Poyner, K. & Chothia, T., 1 Dec 2012, 2012 IEEE Conference on Computational Intelligence and Games, CIG 2012. p. 438-445 8 p. 6374188Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
9 Citations (Scopus) -
The Unbearable Lightness of Monitoring: Indirect and Direct Peer Monitoring in BitTorrent
Chothia, T., Cova, M., Novakovic, C. & Toro, C., 2012, Security and Privacy in Communication Networks: 8th International ICST Conference, SecureComm 2012, Padua, Italy, September 3-5, 2012. Revised Selected Papers. Keromytis, A. & Di Pietro, R. (eds.). Springer, p. 185-202 (Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering ; vol. 106).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
File2 Citations (Scopus)366 Downloads (Pure) -
2011
A Statistical Test for Information Leaks Using Continuous Mutual Information
Chothia, T. & Guha, A., 29 Jun 2011, p. 177-190. 14 p.Research output: Contribution to conference (unpublished) › Paper
25 Citations (Scopus) -
2010
Analysing Unlinkability and Anonymity Using the Applied Pi Calculus
Arapinis, M., Chothia, T., Ritter, E. & Ryan, M., 19 Jul 2010, p. 107-121. 15 p.Research output: Contribution to conference (unpublished) › Paper
82 Citations (Scopus) -
A Traceability Attack against e-Passports
Chothia, T., Smirnov, V. & Radu, S., 1 Jan 2010, Financial Cryptography and Data Security: 14th International Conference, FC 2010, Tenerife, Canary Islands, January 25-28, 2010, Revised Selected Papers. Sion, R. (ed.). Springer, p. 20-34 15 p. (Lecture Notes in Computer Science; vol. 6052).Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
43 Citations (Scopus) -
Modular Schedulability Analysis of Concurrent Objects in Creol
de Boer, F., Chothia, T., Jaghoori, M., Arbab, F. & Sirjani, M., 25 Jan 2010, p. 212-227. 16 p.Research output: Contribution to conference (unpublished) › Paper
12 Citations (Scopus)