Computer Security and Digital Forensics Research

Immuno-inspired Web Intrusion Detection

This work draws inspiration from the human immune system for web intrusion detection as a precursor of autonomic response in self-protecting systems. The work is carried out in collaboration with Marc Roper.

The work has proposed Distress Detection, a novel web intrusion detection technique inspired by the Danger Theory model for the activation of the adaptive immune system. The approach focuses on the detection of suspicious HTTP requests that result in supicious behaviour with respect to a particular attack objective. Distress Detection is introduced in the PhD thesis of Mark Vella.

A brief description of Distress Detection can be found in the poster abstract published at RAID 2012.

A less technical description of Distress Detection can be found in the poster presentated at the University of Stratchlyde Research Day 2012.

An analysis of the approapriateness of Danger Theory for web intrusion detection can be found in the paper published at ICARIS 2010.

The work is also looking at the challenges of web intrusion detection system evaluation. This is part of the PhD research of Panayiotis Kotsopoulos.

Usable Authentication

This work focuses on addressing the usability issues of current authentication techniques. The work has proposed a novel autentication mechanism based on electronic personal history data. The work is carried out in collaboration with Ann Nosseir of the British University in Egypt.

The mechanism is described in the paper published Enterprise Information Systems, LNIP, vol. 73. The paper is an extended version of the paper published at ICEIS 2010.

An implementation of the mechanism in the context of a smart environment is described in the paper published at NordiCHI 2006.

Digital Forensics

This work focuses on addressing the challenges to digital forensics posed by the large volumes of data typical in most current investigations. The work examines the role that similarity hashes can play in addressing these challenges. This work is carried out in collaboration with Changyu Dong. This is part of the PhD research of Richard Harker.

Accountable Cloud Computing

This work focuses on improving the trustworthiness of cloud computing systems. The work examines how accountability mechanisms and techniques can make the operation of cloud computing systems more transparent and as a result increase their trustworthiness. The work is carried out in collaboration with Changyu Dong. A PhD studentship is currently available for this research.

Last modified: Monday, January 28, 2013