itrust Abstractions Lab (ALab)
Abstractions Lab provides solutions aimed at ensuring the trustworthiness and security of digital systems by advancing the state-of-the-art and applying novel results from computer science and mathematics for the design, development, and analysis of conceptual solutions as well as concrete tools for secure software and cyber physical systems.
Our philosophy is rooted in the belief that correct and secure systems are built on a solid mathematical foundation, with cryptography and formal methods forming its main pillars. This allows systems with well-specified security goals, to be designed, analyzed, and proven secure under all modelled circumstances in well-defined scenarios.
We are a small team of computer scientists, mathematicians and software engineers passionate about computer science and mathematics, and their application to information security. We specialize in classical/(post-)quantum cryptography, applied logic, software security, artificial intelligence and cyber-physical system security.
- IDPS-ESCAPE presenter: Arash
- SATRAP presenter: Itzel
Session
This workshop offers a hands-on presentation of two open-source tools from the CyFORT project, bridging the gap between state-of-the-art academic research and real-world SOC/CSIRT operations: IDPS-ESCAPE, a SOAR platform with an AI-driven anomaly detection toolbox (ADBox), and SATRAP, a platform for computer-aided analysis of Cyber Threat Intelligence (CTI) assisted by logic-based automated reasoning.
Participants will learn how to integrate an open-source SIEM (Wazuh) with ADBox and its Multivariate Time-Series Anomaly Detection via Graph Attention Networks (MTAD-GAT) algorithm, as well as how to configure anomaly detectors by training new ML models and using them on SIEM-level ingested data to respond to adversarial attacks, and automate response workflows. They will also gain hands-on experience setting up a CTI knowledge base and streamlining CTI analysis investigations using the CTI Analysis Toolbox of SATRAP.