@inbook {780,
	title = {Reconnaisance},
	booktitle = {Cyber-Security Threats, Actors, and Dynamic Mitigation},
	year = {2020},
	publisher = {CRC Press},
	organization = {CRC Press},
	abstract = {<p>Reconnaissance is the phase of gathering information about an organization{\textquoteright}s network and computing devices. This information includes both technical characteristics, such as IP addresses and software, and non-technical aspects, such as people operating the devices and the business value of tangible or intangible assets associated with the computing infrastructure. This information allows attackers to better understand their target and prepare elaborate attack plans. The reconnaissance phase is itself divided in a number of subphases, and each subphase is supported by a multitude of tools. In this chapter, we firstly describe in more detail the reconnaissance phase, while subsequently we present the different subphases and the methods and tools supporting each one, providing specific examples of how reconnaissance actions are performed. The information presented in this chapter can be used by organizations{\textquoteright} cyber-security officers to identify weaknesses in the organizations{\textquoteright} security plan implementations and take appropriate mitigation measures.</p>
},
	keywords = {Actors, Cyber-Security Threats, Dynamic Mitigation, Reconnaissance},
	author = {Mathas, Christos-Minas and Vassilakis, Costas},
	editor = {Nicholas Kolokotronis and Stavros Shiaeles}
}
@conference {Kolokotronis2019IEEESrv,
	title = {On Blockchain Architectures for Trust-based Collaborative Intrusion Detection},
	booktitle = {Proceedings of the 1st IEEE Services Workshop on Cyber Security and Resilience in the Internet Of Things, within IEEE Services 2019},
	year = {2019},
	publisher = {IEEE},
	organization = {IEEE},
	abstract = {This paper considers the use of novel technologies for mitigating attacks that aim at compromising intrusion detection systems (IDSs). Solutions based on collaborative intrusion detection networks (CIDNs) could increase the resilience against such attacks as they allow IDS nodes to gain knowledge from each other by sharing information. However, despite the vast research in this area, trust management issues still pose significant challenges and recent works investigate whether these could be addressed by relying on blockchain and related distributed ledger technologies. Towards that direction, the paper proposes the use of a trust-based blockchain in CIDNs, referred to as trust-chain, to protect the integrity of the information shared among the CIDN peers, enhance their accountability, and secure their collaboration by thwarting insider attacks. A consensus protocol is proposed for CIDNs, which is a combination of a proof-of-stake and proof-of-work protocols, to enable collaborative IDS nodes to maintain a reliable and tampered-resistant trust-chain.},
	keywords = {blockchain, collaborative intrusion detection, insider threats, security, trust management},
	author = {Nicholas Kolokotronis and Sotirios Brotsis and Georgios Germanos and Costas Vassilakis and Stavros Shiaeles}
}
