Blog Archivi - Page 2 of 3

22Mar 2018 by Letizia Clementi

I’m not malicious, detection of evasive Android malware

The increasing popularity of the smartphones attracted lots “bad actors” that wants to spread malicious software into the ecosystem for profit. To avoid being detected and maximize profit, malware uses evasive techniques. We propose an approach to combat evasive malware. By Chengyu Zheng PhD student @Politecnico di Milano How to avoid being detected With over 500 million devices and an estimated 84% market share, Android-based devices are the main target for cyber-criminals. In addition to the alarming amount of malware families and samples, evasive techniques used by malwares are becoming more and more sophisticated. With the high amount of new applications being released every month, “app store” maintainer are struggling to find a reliable solutions to analyze apps in order to recognize and isolate malicious ones. Techniques used to analyze…

08Mar 2018 by Letizia Clementi

FROST: a common backend to accelerate Domain Specific Languages on FPGA

Domain Specific Languages are gaining more and more interest thanks to the significant level of performance they can reach on different architectures. FROST is a common backend able to accelerate on FPGA applications developed in different DSLs. By Emanuele Del Sozzo Ph.D. student @ Politecnico di Milano Due to the reaching of the end of Dennard scaling and Moore’s law, we are experiencing a growing interest towards Heterogeneous System Architectures (HSAs) as a promising solution to boost performance and, at the same time, reduce power consumption. The combination of different hardware accelerators, like GPUs, FPGAs, and ASICs, along with CPUs, allows to choose the most suitable architecture for a specific task, and, for this reason, many high-performance systems are currently taking advantage of heterogeneity. [caption id="attachment_506" align="aligncenter" width="300"] Example…

01Mar 2018 by Letizia Clementi

Breaking… the laws of robotics: attacking industrial robots

Industrial robots are everywhere: what happens if they get compromised? Is this hard? Are they attractive for attackers? How can we improve their security? To answer these questions, last year we studied the security landscape of an industrial robot and we analysed (and compromised) a widespread robot. By Marcello Pogliani PhD student at the NECSTLab, working on Systems Security Industrial robots are drastically evolving: on one side, “caged” giant robots are being complemented by smaller, “collaborative” models designed to share the workspace with human workers; on the other side, they are more “intelligent”, for example, by means of an improved interconnection for tasks such as remote maintenance, and integration with information systems. This means that robots, once “air-gapped”, are now exposed to hostile avenues. What happens (Skynet aside) if…

20Feb 2018 by Laura Nacci

Accelerating Machine Learning: the hard case of generic models

Following the spreading of applications powered by Machine Learning models, the issues arised on how to engineer their development and deployment. This is particularly problematic when the applications should run under stringent performance requirements and in a complex environment like a cloud infrastructure with diverse hardware resources (CPUs, FPGAs, etc.). We performed initial work on this issue and proposed an approach that achieved a 3x speedup over the common case, suggesting practices that pave the way for developing more systematic guidelines and tools. By Alberto Scolari PhD Student @ Politecnico di Milano, working on reconfigurable computing systems at NECSTLab Operational-izing ML: system issues Machine Learning (ML) models are spreading inside companies, as a basis for their business. Nonetheless, applying ML to your business requires theoretical and technical efforts. As willing-to-be system architects,…

13Feb 2018 by Laura Nacci

Internet banking fraud analysis and detection

The significant growth of online banking frauds, fueled by the underground economy of malware, raised the need for effective defense systems. As a consequence, in last the years, banks have upgraded their security measures to protect online transactions from frauds. We propose a novel approach, Banksealer, that models user’s behavior through his or her interaction with the online banking services from different perspectives but with the common goal of recognizing fraudulent activities. By Michele Carminati Postdoctoral Researcher @ Politecnico di Milano, working on System Security at NECSTLab. Over the years, Internet banking has grown in popularity. Unfortunately, this has led to an increase of frauds perpetrated through cyber-attacks, resulting in worldwide substantial financial losses. According to Kaspersky Lab, financial malware is evolving through the collaboration between malware creators and…

31Jan 2018 by Laura Nacci

Smart wearables: how to stop worrying about the data and love self-tracking

310 millions wearable devices sold this year, 2 billion people will be using apps to monitor their bodies, by 2019. Everything can be tracked and measured: heart rate, hours of sleep, food calories, exercise, weight... Yet, the majority of users still struggle to make sense of data and abandon them. We propose novel approaches that get back on the Self in “quantified self” and transform self-tracking in actionable empower. By Luca Cerina Research Assistant @ Politecnico di Milano, working on wearable devices and biomed applications at NECSTLab. The unmet promise In the recent years, the market for self-tracking apps and wearable devices skyrocketed, with industries and media sharing promises of Health and Wellness waiting just a click away from us, preaching the advent of data-sharing products that will solve…

18Jan 2018 by Laura Nacci

The CAOS framework: democratize the acceleration of compute intensive applications on FPGA

The increasing demand for computing power in fields as Biology, Machine Learning and Physics is pushing the adoption of reconfigurable hardware as FPGA in order to keep up with the required performance level at a sustainable power consumption. CAOS is a framework to help the application designer in identifying acceleration opportunities and guides through the implementation of the final FPGA-based system. By Marco Rabozzi PhD Student @ Politecnico di Milano, working on reconfigurable computing systems at NECSTLab As of today, the progress in many fields of the science is somewhat connected to the amount of available computing power that we have. For instance, higher amount of computing power translates into the capability of simulate a larger amount of neurons and synopsis within a brain, simulate the behavior of more complex physical…

10Jan 2018 by Laura Nacci No Comments

Do you WannaCry? Protecting from Modern Ransomware Attacks

Infamous ransomware families, malicious programs that encrypt victims’ files preventing legitimate access until a ransom is paid, had a drastic impact in the past years. We proposed a novel approach, ShieldFS, that is able to detect malicious behaviors and revert the effects of ransomware attacks, which means no files lost for the end users! By Andrea Continella PhD Student @ Politecnico di Milano, soon joining the SecLab @ University of California, Santa Barbara as a Postdoc researcher. In the last year, ransomware has been one the most dangerous Internet threat. Preventive and reactive security measures can only partially mitigate the damage caused by modern ransomware attacks. The remarkable amount of illicit profit and the cybercriminals' increasing interest in ransomware schemes demonstrate that current defense solutions are failing, and a large number…

19Oct 2017 by Laura Nacci

“Hackathon on Rare Diseases” – Winner projects

On 30 September 2017 the projects "Spy:hunt, cyber-physical gaming platform for hospitalized kids" (by Daniele Enoletto, Chiara Di Vece, Filippo Bracco and Riccardo Vailati) and "Preventable, a device and an app service aimed to prevent illness attacks or recidivism"(by Shrine Graai, Luca Cerina, Luca Paccani, Philip Grasselli) won the “Hackathon on rare diseases” organized by Giorgia Zunino at the Health Forum in Florence. The teams were a mix of young NECSTLab engineers and LABA designers (from Brescia) who had been working for two days to find new ideas that could help to improve prevention, quality of life and research for the rare diseases. Winners abstract: SPY:HUNT More than 70% of people affected by rare diseases are children. This condition often forces them to endure long and frequent therapy sessions that…

19Oct 2017 by Laura Nacci

“Switch2Product Innovation Challenge” – NECST Winner

DockerCap's project by Rolando Brondolin has won the first award of the “Switch2Product Innovation Challenge” (category: “Idee Imprenditoriali"), an idea by PoliHub, Deloitte Italia and The Technology Transfer office of Politecnico di Milano, that was created to enhance research-driven technologies, develop new entrepreneurship and promote innovative business solutions. Project’s abstract: The exponential growth of the cloud-based solutions offered both by market leaders and startups is leading to a renewed interest on techniques able to manage and optimize cloud-based applications. The Docker container technology, in particular, proposes novel challenges in an extremely open market, from the correct performance management, applications metering and monitoring and power-aware optimizations. DockerCap optimizes power consumption of infrastructures and applications, still guaranteeing the performance the applications and customers requires.