Machine Learning, Python, Slips, Stratosphere Linux IPS
Stratosphere IPS
HTTPS Anomaly Detection in Slips: Adaptive ...

The new HTTPS anomaly detection module in Slips builds per-host adaptive baselines in traffic time, then detects deviations at two levels: per-flow (for bytes to known servers) and per-hour (for host behavior like new servers, unique servers, JA3 changes, and flow volume). It uses online statistics and z-scores for transparent scoring, plus controlled adaptation states (training_fit, drift_update, suspicious_update) to keep learning while reducing poisoning risk.
The result is explainable, operational evidence in clear human text: what changed, confidence, and why it is anomalous.

HTTPS Anomaly Detection in Slips: Adaptive Baselines for Real Traffic
Education, publications, Python, Slips, Stratosphere Linux IPS
Stratosphere IPS
Rethinking Cybersecurity Defense: Principles ...

Our research identifies sixteen fundamental principles of biological immunity and translates them into cybersecurity defense architectures that emphasize multi-dimensional coordination over single- point tactics.

Rethinking Cybersecurity Defense: Principles from Biological Immunity
Maria Rigaki
AI Attackers in Your Pocket: How Small Language ...

We are pleased to announce the publication of our latest paper, “Building adaptive and transparent cyber agents with local language models,” in the Journal of Expert Systems with Applications.

Slips
Stratosphere IPS
How Well Do LLMs Perform on a Raspberry Pi 5?

Can a Raspberry Pi 5 run Large Language Models? In this post, we share the results of our experiments, analyzing how LLMs perform on this low-cost hardware and exploring the challenges and performance trade-offs.

How Well Do LLMs Perform on a Raspberry Pi 5?
Stratosphere IPS
Introducing ARACNE, a new LLM-based shell ...

The complete automation of cyber-attacks has become one of the areas of greatest interest since the introduction of Large Language Models (LLMs) to the public. The creation of attacking LLM agents that can act independently is among the most popular options. 

In this blog, we introduce a brand-new agent: ARACNE. We also share the results of attack tests and what they mean in terms of the agent’s current capabilities.

Introducing ARACNE, a new LLM-based shell pentesting agent

Czech Technical University in Prague’s "Introduction to Security" Class is now a Free Online Course!

Czech Technical University in Prague’s "Introduction to Security" Class is now a Free Online Course!

We are thrilled to announce that, for the first time, the Czech Technical University in Prague is offering the "Introduction to Security" course as a Massive Open Online Course!

Towards Better Understanding of Cybercrime: The Role of Fine-Tuned LLMs in Translation

Towards Better Understanding of Cybercrime: The Role of Fine-Tuned LLMs in Translation

Our paper explores the use of Large Language Models as mechanisms to translate public hacktivists messages from Russian to English as a way to address all these problems. We show how our method can achieve high-fidelity translations and significantly reduce costs by a factor ranging from 430 to 23,000 compared to a human translator.

Best Short Paper Award at AD&D Workshop EURO S&P!

Best Short Paper Award at AD&D Workshop EURO S&P!

We are thrilled to announce that our student, Muris Sladić, won the Best Short Paper Award at the 3rd Workshop on Active Defense and Deception (AD&D) last week. The workshop took place in Vienna, as part of the EURO S&P Annual conference.

Shoutout To NLnet Foundation, Our Continuous Supporter!

Shoutout To NLnet Foundation, Our Continuous Supporter!

Since the start of the Stratosphere Laboratory more than 11 years ago, we have always struggled to fund our free software development projects that were aimed at helping the privacy and security of the Internet. And this is where the NLnet foundation came to help us.

Introducing StratoCyberLab: A Local Cyber Range To Help You Get Your Cyber Skills to The Next Level

Introducing StratoCyberLab: A Local Cyber Range To Help You Get Your Cyber Skills to The Next Level

We are thrilled to announce the launching of StratoCyberLab, a cyber range that can be used by students to learn and test their skills through realistic cybersecurity scenarios. The students can run all the challenges locally through a unified web interface. Our platform is not just a learning environment; it includes an assistant AI to guide newcomers, making the complex world of cybersecurity more accessible than ever.

Participation in ICAART 2024, Rome

Participation in ICAART 2024, Rome

Last week in Rome, our team was happy to participate with two papers in the 16th International Conference on Agents and Artificial Intelligence (ICAART).

Protecting the civil society through high quality research