arXiv.itsnick.co

an independent field guide to 23 million papers from arXiv & OpenAlex — not affiliated with arXiv.org

Author

Said Varlioglu

14 papers · 2020–2026

2020: 72021: 22022: 12023: 12024: 12025: 12026: 1
2020peak 7 in 20202026

Frequent co-authors

Papers

showing 1–14 of 14 RSS

Is Cryptojacking Dead after Coinhive Shutdown?

Said Varlioglu, Bilal Gonen, Murat Ozer +1 more

cs.CR · · cited 36× · arXiv ↗ · more like this ·

Cryptojacking is the exploitation of victims' computer resources to mine for cryptocurrency using malicious scripts. It has become popular after 2017 when attackers started to exploit legal mining scripts, especially Coinhive scripts. Coinhive was actually a legal mining service that provided scripts and servers for in-browser mining activities. Nevertheless, over 10 million web users had been victims every month before the Coinhive shutdown that happened in Mar 2019. This paper explores the new era of the cryptojacking world after Coinhive discontinued its service. We aimed to see whether and how attackers continue cryptojacking, generate new malicious scripts, and developed new methods. We used a capable cryptojacking detector named CMTracker that proposed by Hong et al. in 2018. We automatically and manually examined 2770 websites that had been detected by CMTracker before the…

The Dangerous Combo: Fileless Malware and Cryptojacking

Said Varlioglu, Nelly Elsayed, Zag ElSayed +1 more

cs.CR · · cited 30× · arXiv ↗ · more like this ·

Fileless malware and cryptojacking attacks have appeared independently as the new alarming threats in 2017. After 2020, fileless attacks have been devastating for victim organizations with low-observable characteristics. Also, the amount of unauthorized cryptocurrency mining has increased after 2019. Adversaries have started to merge these two different cyberattacks to gain more invisibility and profit under "Fileless Cryptojacking." This paper aims to provide a literature review in academic papers and industry reports for this new threat. Additionally, we present a new threat hunting-oriented DFIR approach with the best practices derived from field experience as well as the literature. Last, this paper reviews the fundamentals of the fileless threat that can also help ransomware researchers examine similar patterns.

Cloud Incident Response: Challenges and Opportunities

Murat Özer, Said Varlioglu, Bilal Gonen +3 more

Computer Networks and Communications · · cited 14× · DOI ↗ · more like this ·

Many organizations migrate their on-premise infrastructure to the cloud for its known advantages such as low cost and flexibility. However, a dilemma appears that despite the increased usage of cloud computing among small and midsize businesses, the reported number of cyber attacks does not reduce and even astronomically increases. Recent studies explain the source of this dilemma as having scarce familiarity with cloud computing. Scholars basically stress that cloud computing offers better malware and DDoS attack protection; however, limited knowledge of cloud computing infrastructure and the complex nature of cloud systems contribute to the high number of cyber attacks. In this context, this study attempts to add one more step to the traditional incident response plan to adapt it to cloud computing. In addition, the current study introduces certain solutions to gather dispersed data…

Digital Forensics and Incident Response (DFIR) Challenges in IoT Platforms

Cornelius Itodo, Said Varlioglu, Zag ElSayed

Information Systems · · cited 13× · DOI ↗ · more like this ·

The rapid progress experienced in the Internet of Things (IoT) space is one that has introduced new and unique challenges for cybersecurity and IoT-Forensics. One of these problems is how digital forensics and incident response (DFIR) are handled in IoT. Since enormous users use IoT platforms to accomplish their day to day task, massive amounts of data streams are transferred with limited hardware resources; conducting DFIR needs a new approach to mitigate digital evidence and incident response challenges owing to the facts that there are no unified standard or classified principles for IoT forensics. Today's IoT DFIR relies on self-defined best practices and experiences. Given these challenges, IoT-related incidents need a more structured approach in identifying problems of DFIR. In this paper, we examined the major DFIR challenges in IoT by exploring the different phases involved in a…

A Prevention and a Traction System for Ransomware Attacks

Murat Ozer, Said Varlioglu, Bilal Gonen +1 more

cs.CR · · cited 13× · arXiv ↗ · more like this ·

Over the past three years, especially following WannaCry malware, ransomware has become one of the biggest concerns for private businesses, state, and local government agencies. According to Homeland Security statistics, 1.5 million ransomware attacks have occurred per year since 2016. Cybercriminals often use creative methods to inject their malware into the target machines and use sophisticated cryptographic techniques to hold hostage victims' files and programs unless a certain amount of equivalent Bitcoin is paid. The return to the cybercriminals is so high (estimated \$1 billion in 2019) without any cost because of the advanced anonymity provided by cryptocurrencies, especially Bitcoin \cite{Paquet-Clouston2019}. Given this context, this study first discusses the current state of ransomware, detection, and prevention systems. Second, we propose a global ransomware center to better…

Developing Cybersecurity Workforce: Introducing CyberSec Labs for Industry Standard Cybersecurity Training

Yasin Köse, Murat Özer, Mehmet F. Bastug +3 more

Information Systems · 2021 International Conference on Computational Science and Computational Intelligence (CSCI) · · cited 5× · DOI ↗ · more like this ·

In recent years, widespread internet usage, increasing numbers of IoT devices, and vast data on social media have increased cyber attack vectors. Parallel to this trend, the demand for the cyber security workforce has augmented; however, employers could not fill these positions due to the shortage in the field. This anomaly, in turn, has placed companies in a vulnerable situation by being exposed to an increased level of cyber security threats/incidents. Relevant authorities underscore the importance of a comprehensive cybersecurity workforce framework to overcome this problem. Given this context, this study offers a CyberSec Labs framework to improve the skills of potential cybersecurity actors. The framework extensively benefits from hands-on exercises like cloud computing and networking, OSINT, data-driven cybersecurity approach, vulnerability and penetration test analysis, and…

The Pulse of Fileless Cryptojacking Attacks: Malicious PowerShell Scripts

Said Varlioglu, Nelly Elsayed, Eva Ruhsar Varlioglu +2 more

cs.CR · · cited 4× · arXiv ↗ · more like this ·

Fileless malware predominantly relies on PowerShell scripts, leveraging the native capabilities of Windows systems to execute stealthy attacks that leave no traces on the victim's system. The effectiveness of the fileless method lies in its ability to remain operational on victim endpoints through memory execution, even if the attacks are detected, and the original malicious scripts are removed. Threat actors have increasingly utilized this technique, particularly since 2017, to conduct cryptojacking attacks. With the emergence of new Remote Code Execution (RCE) vulnerabilities in ubiquitous libraries, widespread cryptocurrency mining attacks have become prevalent, often employing fileless techniques. This paper provides a comprehensive analysis of PowerShell scripts of fileless cryptojacking, dissecting the common malicious patterns based on the MITRE ATT&CK framework.

Creating A Real-Time Geocoding System: Implications of Open Source for the Public Safety

Murat Özer, Michael Zidar, Rustu Deryol +3 more

Geography, Planning and Development · · cited 4× · DOI ↗ · more like this ·

Today, maps are important components of public safety. Collecting geographic information data enables any public safety agency to smartly allocate their limited resources to those places where the public safety needs are the greatest. However, the current address geocoding applications are generally static, requiring specifically assigned personnel to geocode the addresses using a geographic information system (GIS) software. Real-time geocoding services like Google Maps are an alternative to these static systems by offering real-time geocoding capabilities; however, these closed systems usually come with a price that many agencies cannot afford. Given this context, we developed a public safety geocoding system using available open-source data and systems to enable any public safety agency to continuously enjoy the power of geographic information systems for their smart decision-making…

Identifying Information Technology Research Trends through Text Mining of NSF Awards

Said Varlioglu, Hazem Said, Murat Ozer +1 more

cs.DL · · cited 0× · arXiv ↗ · more like this ·

Information Technology (IT) is recognized as an independent and unique research field. However, there has been ambiguity and difficulty in identifying and differentiating IT research from other close variations. Given this context, this paper aimed to explore the roots of the Information Technology (IT) research domain by conducting a large-scale text mining analysis of 50,780 abstracts from awarded NSF CISE grants from 1985 to 2024. We categorized the awards based on their program content, labeling human-centric programs as IT research programs and infrastructure-centric programs as other research programs based on the IT definitions in the literature. This novel approach helped us identify the core concepts of IT research and compare the similarities and differences between IT research and other research areas. The results showed that IT differentiates itself from other close…

Explaining the Relationship between Internet and Democracy in Partly Free Countries Using Machine Learning Models

Mustafa Sagir, Said Varlioglu

cs.CY · · cited 0× · arXiv ↗ · more like this ·

Previous studies have offered a variety of explanations on the relationship between democracy and the internet. However, most of these studies concentrate on regions, specific states or authoritarian regimes. No study has investigated the influence of the internet in partly free countries defined by the Freedom House. Moreover, very little is known about the effects of online censorship on the development, stagnation, or decline of democracy. Drawing upon the International Telecommunication Union, Freedom House, and World Bank databases and using machine learning methods, this study sheds new light on the effects of the internet on democratization in partly free countries. The findings suggest that internet penetration and online censorship both have a negative impact on democracy scores and the internet's effect on democracy scores is conditioned by online censorship. Moreover, results…

Plunge into the Underworld: A Survey on Emergence of Darknet

Victor Adewopo, Bilal Gonen, Said Varlioglu +1 more

cs.CR · · cited 0× · arXiv ↗ · more like this ·

The availability of sophisticated technologies and methods of perpetrating criminogenic activities in the cyberspace is a pertinent societal problem. Darknet is an encrypted network technology that uses the internet infrastructure and can only be accessed using special network configuration and software tools to access its contents which are not indexed by search engines. Over the years darknets traditionally are used for criminogenic activities and famously acclaimed to promote cybercrime, procurements of illegal drugs, arms deals, and cryptocurrency markets. In countries with oppressive regimes, censorship of digital communications, and strict policies prompted journalists and freedom fighters to seek freedom using darknet technologies anonymously while others simply exploit it for illegal activities. Recently, MIT's Lincoln Laboratory of Artificial Intelligence augmented a tool that…

Detecting Fileless Cryptojacking in PowerShell Using AST-Enhanced CodeBERT Models

Said Varlioglu, Nelly Elsayed, Murat Ozer +2 more

cs.CR · · arXiv ↗ · more like this ·

With the emergence of remote code execution (RCE) vulnerabilities in ubiquitous libraries and advanced social engineering techniques, threat actors have started conducting widespread fileless cryptojacking attacks. These attacks have become effective with stealthy techniques based on PowerShell-based exploitation in Windows OS environments. Even if attacks are detected and malicious scripts removed, processes may remain operational on victim endpoints, creating a significant challenge for detection mechanisms. In this paper, we conducted an experimental study with a collected dataset on detecting PowerShell-based fileless cryptojacking scripts. The results showed that Abstract Syntax Tree (AST)-based fine-tuned CodeBERT achieved a high recall rate, proving the importance of the use of AST integration and fine-tuned pre-trained models for programming language.

Exploring the Journey to Drug Overdose: Applying the Journey to Crime Framework to Drug Sales Locations and Overdose Death Locations

Murat Ozer, Ismail Onat, Halil Akbas +3 more

cs.SI · · arXiv ↗ · more like this ·

Drug overdose is a pressing public health concern in the United States, resulting in a significant number of fatalities each year. In this study, we employ the Journey to Crime (JTC) framework borrowed from the field of environmental criminology to examine the association between drug sales locations and overdose death locations. In this research, our objective is to elucidate the trajectory of overdose victims to overdose locations, aiming to enhance the distribution of overdose services and interventions. To the best of our knowledge, no previous studies have applied the JTC framework to investigate drug overdose deaths. By scrutinizing data obtained from the Hamilton County, OH Coroners, and the Cincinnati Police Department, we endeavor to explore the plausible correlation between overdose deaths and drug sales locations. Our findings underscore the necessity of implementing a…

A Rule-Based Model for Victim Prediction

Murat Ozer, Nelly Elsayed, Said Varlioglu +2 more

cs.AI · · arXiv ↗ · more like this ·

In this paper, we proposed a novel automated model, called Vulnerability Index for Population at Risk (VIPAR) scores, to identify rare populations for their future shooting victimizations. Likewise, the focused deterrence approach identifies vulnerable individuals and offers certain types of treatments (e.g., outreach services) to prevent violence in communities. The proposed rule-based engine model is the first AI-based model for victim prediction. This paper aims to compare the list of focused deterrence strategy with the VIPAR score list regarding their predictive power for the future shooting victimizations. Drawing on the criminological studies, the model uses age, past criminal history, and peer influence as the main predictors of future violence. Social network analysis is employed to measure the influence of peers on the outcome variable. The model also uses logistic regression…