@conference {800,
	title = {Understanding and mitigating banking trojans: From Zeus to Emotet},
	booktitle = {Proceedings of the 2021 IEEE International Conference on Cyber Security and Resilience},
	year = {2021},
	publisher = {IEEE},
	organization = {IEEE},
	abstract = {<p>Banking Trojans came a long way in the past decade, and the recent case of Emotet showed their enduring relevance. The evolution of the modern computing landscape can be traced through Emotet and Zeus, both representative examples from the end of the past decade. As an example of earlier malware, Zeus only needed to employ simple anti-analysis techniques to stay undetected; while the more recent Emotet had to constantly evolve to stay a step ahead. Current host-based antimalware solutions face an increasing number of obstacles to perform their function. A multi-layer approach to network security is necessary for network-based intrusion response systems to secure modern networks of heterogeneous devices. A system based on a combination of a graphical network security model and a game theoretic model of cyber attacks was tested on a testbed with Windows machines infected with Trojans; experimental results showed that the proposed system effectively blocked Trojans{\textquoteright} network communications effectively preventing data leakage and yielding encouraging results for future work.</p>
},
	keywords = {Cyber security, Graphical security models, Intrusion response systems, Malware analysis, Reverse engineering},
	author = {Grammatikakis, Konstantinos-Panagiotis and Koufos, Ioannis and Kolokotronis, Nicholas and Vassilakis, Costas and Shiaeles, Stavros}
}
@article {Vassilakis2009325,
	title = {A heuristics-based approach to reverse engineering of electronic services},
	journal = {Information and Software Technology},
	volume = {51},
	number = {2},
	year = {2009},
	note = {cited By (since 1996) 1},
	pages = {325-336},
	abstract = {Since the beginning of the electronic era, public administrations and enterprises have been developing services, through which citizens, businesses and customers can conduct their transactions with the offering entity. Each electronic service contains a substantial amount of knowledge in the form help texts, rules of use or legislation excerpts, examples, validation checks, etc. This knowledge has been extracted from domain experts when the services were developed, especially in the phases of analysis and design, and was subsequently translated into software. In the latter format though, knowledge cannot be readily used in organizational processes, such as knowledge sharing and development of new services. In this paper, we present an approach for reverse engineering electronic services in order to create knowledge items of high levels of abstraction, which can be used in knowledge sharing environments as well as in service development platforms. The proposed approach has been implemented and configured to generate artifacts for the SmartGov service development platform. Finally, an evaluation of the proposed approach is presented to assess its efficiency regarding various aspects of the reverse engineering process. Β{\textcopyright} 2008 Elsevier B.V. All rights reserved.},
	keywords = {Analysis and designs, Domain experts, e-government, electronic services, Government data processing, Help texts, In services, Knowledge engineering, Knowledge sharing, Levels of abstractions, Management, New services, Organizational knowledge, Organizational processes, Public administrations, Reengineering, Reverse engineering, Reverse engineering processes, Service developments, Validation checks},
	doi = {10.1016/j.infsof.2008.04.003},
	url = {http://www.scopus.com/inward/record.url?eid=2-s2.0-56949100815\&partnerID=40\&md5=223ff82eddd9005b8e6f7fac1aa9c810},
	author = {Costas Vassilakis and Giorgos Lepouras and Akrivi Katifori}
}
