This course teaches learners how to conduct automated evasion attacks and fingerprinting using Blackbox Differential Automata Learning. The learning outcomes include understanding the importance of differential testing in evaluating web security products, learning about Symbolic Finite Automata (SFA), and mastering the process of generating program fingerprints. The course employs a teaching method that combines theoretical explanations with practical examples and demonstrations. It is designed for individuals interested in cybersecurity, particularly those with a background in computer science or information security.
Automated Evasion Attacks and Fingerprinting Using Blackbox Differential Automata Learning
Association for Computing Machinery (ACM) via YouTube
Overview
Syllabus
Intro
Motivation
Evaluating Web Security Products
Why Differential Testing
Why not Differential Testing
Overview
Symbolic Finite Automata (SFA)
Learning Symbolic Automata
Why Differential Automata Learning
Bootstrapping SFA Learning
Difference Analysis
Generating Program Fingerprints
Fingerprint Tree
Evaluation Of Bootstrapping Algorithm
Differences in TCP/IP Implementations
Mac OSX TCP/IP State Machine
Conclusions
Taught by
ACM CCS
