Roderik Ploszek

Representing dynamic malware behavior in a semantically precise yet practical manner remains a challenge in cyber threat intelligence. Although MAEC (Malware Attribute Enumeration and Characterization) and STIX (Structured Threat Information eXpression) provide widely used vocabularies for malware analysis, they often blur key ontological distinctions by conflating malware artifacts, capabilities, and runtime events. Using the Unified Foundational Ontology (UFO) as a theoretical framework, we analyze the standards MAEC (Malware Attribute Enumeration and Characterization) and STIX (Structured Threat Information eXpression) constructs and identify ontological mismatches that hinder coherent representation and reasoning about execution. To address these issues, we propose MAECO-Lite, a lightweight, modular ontology for dynamic malware analysis. MAECO-Lite models samples, processes, actions, system artifacts, and MITRE ATT&CK techniques, while clearly separating enduring entities from runtime events. An initial evaluation using description logic concept learning demonstrates improved learning performance, indicating that ontologically grounded modeling can enhance both semantic clarity and computational effectiveness.

The need to mitigate malware attacks cannot be overemphasized, as they pose serious threats to the critical information assets in cyberspace. Understanding and utilizing appropriate malware features is a game changer for implementing a high-performance malware detection system. Static analysis has been applied to malware features, but it has limitations in detecting obfuscated and evasive malware. The lack of a complete understanding of malware behavior underscores the need for dynamic analysis, which involves executing malware in an isolated environment to analyse its behaviour at runtime to mitigate attacks. Many existing works in the area of Malware analysis fail to sufficiently explore dynamic malware features, which is the basis for building a high performance malware detection system. This paper provides a detailed and comprehensive overview of the state-of-the-art dynamic malware features relevant for robust malware detection or classification. We systematically reviewed literature on dynamic Malware analysis and the features they utilize for machine learning-based malware analysis. The study also highlights the performance, contributions and limitations of various machine learning techniques proposed for dynamic malware analysis. It also identified and discussed different tools for dynamic malware analysis. This work not only serves as a compendium on the state-of-the-art in dynamic malware analysis but also provides a step-by-step framework for performing dynamic malware analysis. The improved taxonomy of malware analysis presented in the paper addressed contradictions in existing literature on malware analysis. In general, this paper provides trends and future directions in dynamic malware analysis to offer useful support for further research.

The scripts deal with cybercrime as a complex phenomenon at the interface of information technology and law. They provide an overview of the basic concepts and typologies of cybercrime, including phenomena such as hacking, phishing, malware, spoofing, social engineering and cyberterrorism. Special attention is paid to cybersecurity issues and the legal framework in the national and international context. The aim of the scripts is to provide students and professionals with an interdisciplinary understanding of the legal, technical and social aspects of cybercrime.

The topic of this contribution is the practical use of secret sharing schemes in securing private data. In the first part, we focus on the security model and the overview of the available solutions. In the second part, we describe our solution for storing sensitive data in commercial cloud storage systems, an application called Datachest. The application uploads the data in encrypted form. Cryptographic keys are divided into shares. Each cloud receives one share. This solution improves the security of users’ sensitive data in the cloud. In the final part, we explore the ramifications of secret sharing on the security and management of IoT devices, especially home appliances.

Internet of Things connects the physical and cybernetic world. As such, security issues of IoT devices are especially damaging and need to be addressed. In this treatise, we overview current security issues of IoT with the perspective of future threats. We identify three main trends that need to be specifically addressed: security issues of the integration of IoT with cloud and blockchains, the rapid changes in cryptography due to quantum computing, and finally the rise of artificial intelligence and evolution methods in the scope of security of IoT. We give an overview of the identified threats and propose solutions for securing the IoT in the future.