h1

h2

h3

h4

h5
h6

SAPPAN

Sharing and Automation for Privacy Preserving Attack Neutralization

CoordinatorRWTH Aachen University ; CESNET ZAJMOVE SDRUZENI PRAVNICKYCH OSOB ; Masaryk University ; DREAMLAB TECHNOLOGIES AG ; F-SECURE OYJ ; University of Stuttgart ; FRAUNHOFER GESELLSCHAFT ZUR FOERDERUNG DER ANGEWANDTEN FORSCHUNG E.V. ; HEWLETT-PACKARD GALWAY LIMITED
Grant period2019-05-01 - 2022-04-30
Funding bodyEuropean Union
Call numberH2020-SU-ICT-2018
Grant number833418
IdentifierG:(EU-Grant)833418

Note: SAPPAN aims to develop a platform for sharing and automation to enable privacy preserving and efficient response and recovery utilizing advanced data analysis and machine learning. SAPPAN will provide a cyber threat intelligence system that decreases the effort required by a security analyst to find optimal responses to and ways to recover from an attack. SAPPAN will enable this within a single organization as well as across organisations through novel models for privacy-preserving data processing and sharing. It will enable utilizing external experts for intrusion detection and sharing of knowledge on response and recovery actions while respecting the privacy and confidentiality requirements of individuals and organizations. SAPPAN will enable a European level perspective on advanced cyber security threats detection, response, and recovery making four key contributions that go beyond existing approaches: (1) privacy-preserving aggregation and data analytics including advanced client-side abstractions; (2) federated threat detection based on sharing of anonymised data and sharing of trained machine learning models; (3) standardisation of knowledge in the context of incident response and recovery to enable reuse and sharing; (4) visual, interactive support for Security Operation Center operators. SAPPAN aims to provide solutions for public international institutions and multinational companies who want to enrich their Situational Awareness by sharing cyber security intelligence as well as solutions for small and midsize companies enabling them to outsource intrusion detection. SAPPAN will be demonstrated in the relevant environments of 2 multinational companies, 1 National Research and Education Network (NREN) and 2 Computer Security Incident Response Teams (CSIRT). The consortium consists of 1 NREN, 3 multinational companies, 3 universities and 1 research institute so as to maximise the technical and societal impact, the dissemination and uptake of the results.
     

Recent Publications

All known publications ...
Download: BibTeX | EndNote XML,  Text | RIS | 

http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png Dissertation / PhD Thesis  ;  ;
Machine learning for domain generation algorithm classification
Aachen : RWTH Aachen University 1 Online-Ressource : Illustrationen () [10.18154/RWTH-2025-07743] = Dissertation, RWTH Aachen University, 2025  GO OpenAccess  Download fulltext Files BibTeX | EndNote: XML, Text | RIS

http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png Journal Article  ;  ;  ;  ;  ;  ;  ;  ;
On collaboration and automation in the context of threat detection and response with privacy-preserving features
Digital threats 6(1), 1-36 () [10.1145/3707651]  GO OpenAccess  Download fulltext Files BibTeX | EndNote: XML, Text | RIS

http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png Journal Article/Contribution to a book  ;
Bloom Encodings in DGA Detection: Improving Machine Learning Privacy by Building on Privacy-Preserving Record Linkage
Journal of universal computer science : J.UCS 30(9), 1224-1243 () [10.3897/jucs.134762] special issue: "Fighting Cybersecurity Risks from a Multidisciplinary Perspective / Steffen Wendzel, Aleksandra Mileva, Virginia N. L. Franqueira, Martin Gilje Jaatun"  GO OpenAccess  Download fulltext Files BibTeX | EndNote: XML, Text | RIS

http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png Contribution to a book/Contribution to a conference proceedings  ;
DGA Detection Using Similarity-Preserving Bloom Encodings
Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference / Edited by Aleksandra Mileva, Steffen Wendzel, Virginia Franqueira
European Interdisciplinary Cybersecurity Conference, EICC 2023, StavangerStavanger, Norway, 14 Jun 2023 - 15 Jun 20232023-06-142023-06-15
New York,NY,United States : Association for Computing Machinery 116-120 () [10.1145/3590777.3590795]  GO OpenAccess  Download fulltext Files BibTeX | EndNote: XML, Text | RIS

http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png Contribution to a book/Contribution to a conference proceedings  ;  ;  ;  ;
SASP: a Semantic web-based Approach for management of Sharable cybersecurity Playbooks
Proceedings of the 17th International Conference on Availability, Reliability and Security, ARES ' 22
17. International Conference on Availability, Reliability and Security, ARES 2022, ViennaVienna, Austria,
New York, NY, USA : ACM () [10.1145/3538969.3544478]  GO OpenAccess  Download fulltext Files BibTeX | EndNote: XML, Text | RIS

http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png Contribution to a book/Contribution to a conference proceedings  ;  ;
Accurate Real-Time Labeling of Application Traffic
Proceedings of the 47th IEEE Conference on Local Computer Networks : LCN 2022 : September 26-29, 2022, hybrid hosted in Edmonton, AB, Canada / general chair: Lyes Khoukhi ; editors: Sharief Oteafy, Eyuphan Bulut, and Florian Tschorsch ; IEEE, IEEE Computer Society, IEEE Computer Society, TCCC - Technical Committee on Computer Communications
47. IEEE Conference on Local Computer Networks, LCN 2022, Edmonton, ABEdmonton, AB, Canada, 26 Sep 2022 - 29 Sep 20222022-09-262022-09-29
Piscataway, NJ : IEEE 291-294 () [10.1109/LCN53696.2022.9843419]  GO  Download fulltext Files BibTeX | EndNote: XML, Text | RIS

http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png Contribution to a book/Contribution to a conference proceedings  ;  ;
Detecting Unknown DGAs without Context Information
Proceedings of the 17th International Conference on Availability, Reliability and Security
17. International Conference on Availability, Reliability and Security, ARES 2022, ViennaVienna, Austria, 23 Aug 2022 - 26 Aug 20222022-08-232022-08-26
New York,NY,United States : Association for Computing Machinery, ACM Other conferences 29, 12 Seiten () [10.1145/3538969.3538990]  GO  Download fulltext Files BibTeX | EndNote: XML, Text | RIS

http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png Contribution to a book/Contribution to a conference proceedings  ;  ;  ;
The More, the Better? A Study on Collaborative Machine Learning for DGA Detection
Proceedings of the 3rd Workshop on Cyber-Security Arms Race / Chen, Liqun
3. Workshop on Cyber-Security Arms Race, CYSARM '21, onlineonline, 19 Nov 2021 - 19 Nov 20212021-11-192021-11-19
New York,NY : ACM, ACM Conferences 1-12 () [10.1145/3474374.3486915]  GO  Download fulltext Files BibTeX | EndNote: XML, Text | RIS

http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png Contribution to a book/Contribution to a conference proceedings  ;  ;  ;
Towards Privacy-Preserving Classification-as-a-Service for DGA Detection
2021 18th International Conference on Privacy, Security and Trust (PST) / Mahsa Mohaghegh and Hossein Sarrafzadeh (PST2021 general chairs)
18. International Conference on Privacy, Security and Trust, PST 2021, onlineonline, 13 Dec 2021 - 15 Dec 20212021-12-132021-12-15
Piscataway, NJ : IEEE 1-10 () [10.1109/PST52912.2021.9647755]  GO  Download fulltext Files BibTeX | EndNote: XML, Text | RIS

http://join2-wiki.gsi.de/foswiki/pub/Main/Artwork/join2_logo100x88.png Contribution to a book/Contribution to a conference proceedings  ;  ;
Sharing FANCI Features : A Privacy Analysis of Feature Extraction for DGA Detection
CYBER 2021 : the Sixth International Conference on Cyber-Technologies and Cyber-Systems : October 3-7, 2021, Barcelona, Spain / IARIA ; CYBER 2021 editors: Steve Chan (Decision Engineering Analysis Laboratory, USA), Joshua A. Sipper (Cyber Warfare Studies, Air Force Cyber College, USA)
6. International Conference on Cyber-Technologies and Cyber-Systems, CYBER 2021, BarcelonaBarcelona, Spain, 3 Oct 2021 - 7 Oct 20212021-10-032021-10-07
Barcelona : IARIA XPS Press : 6th, 58-64 ()  GO   Download fulltextFulltext BibTeX | EndNote: XML, Text | RIS

All known publications ...
Download: BibTeX | EndNote XML,  Text | RIS | 


 Record created 2020-01-11, last modified 2023-02-21



Rate this document:

Rate this document:
1
2
3
 
(Not yet reviewed)