7th Workshop on Cyber Security Experimentation & Test

CSET focuses on the science of cyber security evaluation, as well as experimentation, measurement, metrics, data, and simulations as those subjects relate to computer and network security and privacy.

The day-long program includes:

• Paper presentations on exploit testing and quantitative security evaluation metrics
• Morning Panel Discussion on “Cybersecurity Experimentation of the Future”
• Closing Panel Discussion on “Human Engagement Challenges in Cyber Testing and Training”

8:30 a.m.–9:00 a.m.  Continental Breakfast

9:00 a.m.–11:00 a.m.

Novel Approaches to Exploit Testing

TESTREX: a Testbed for Repeatable Exploits

Stanislav Dashevskyi and Daniel Ricardo dos Santos, University of Trento and Fondazione Bruno Kessler; Fabio Massacci,University of Trento; Antonino Sabetta, SAP Labs

Safe and Automated Live Malware Experimentation on Public Testbeds

Abdulla Alwabel, Hao Shi, Genevieve Bartlett, and Jelena Mirkovic, USC/Information Sciences Institut

Large-Scale Evaluation of a Vulnerability Analysis Framework

Azzedine Benameur, Nathan S. Evans, and Matthew Elder, SymantecSimulating Malicious

Insiders in Real Host-Monitored User Data

Brian Lindauer, Kurt Wallnau, and Michael Theis, Carnegie Mellon University; Robert Durst, Eric Renouf, Terrance Champion, and Christian Petersen, Skaion Corp.

11:00 a.m.–11:30 a.m.  Break with Refreshments

Panel: Cybersecurity Experimentation of the Future (CEF)

12:30 p.m.–2:00 p.m.  Lunch

2:00 p.m.–3:30 p.m. 

Metrics for Quantatitive Security Evaluation

Effective Entropy: Security-Centric Metric for Memory Randomization Techniques

William Herlands, Thomas Hobson, and Paula J. Donovan, MIT Lincoln Laboratory

DACSA: A Decoupled Architecture for Cloud Security Analysis

Jason Gionta, North Carolina State University; Ahmed Azab, Samsung Electronics Co., Ltd.; William Enck and Peng Ning, North Carolina State University; Xiaolan Zhang, Google Inc.

A Metric for the Evaluation and Comparison of Keylogger Performance

Tobias Fiebig, Janis Danisevskis, and Marta Piekarska, Technische Universität Berlin

3:30 p.m.–4:00 p.m.  Break with Refreshments

4:00 p.m.–5:30 p.m.

Panel: Human Engagment Challenges in Cyber Testing and Training

Computer Security Clinical Trials: Lessons Learned from a 4-month Pilot Study

Fanny Lalonde Levesque and Jose M. Fernandez, Ecole Polytechnique de Montreal

EDURange: A Cloud Based Framework for Teaching Cybersecurity Analysis Skills

Stefan Boesen and Richard Weiss, The Evergreen State College; Michael E. Locasto and James Sullivan, University of Calgary;Jens Mache and Erik Nilsen, Lewis and Clark College

Four-Week Summer Program in Cyber Security for High School Students: Practice and Experience Report

Melissa Danforth and Charles Lam, California State University, Bakersfield