@conference {799,
	title = {Cyber-Security Training Evaluation Metrics},
	booktitle = {Proceedings of the 2021 IEEE International Conference on Cyber Security and Resilience},
	year = {2021},
	publisher = {IEEE},
	organization = {IEEE},
	abstract = {<p>Cyber-security training has evolved into an imperative need, aiming to provide cyber-security professionals with the knowledge and skills required to confront cyber-attacks that are increasing in number and sophistication. Training activities are typically associated with evaluation means, aimed to assess the extent to which the trainee has acquired the knowledge and skills whose development is targeted by the training programme, while cyber-security awareness and skill level evaluation means may be used to support additional security-related aspects of organizations. In this paper, we review trainee performance assessment metrics in cyber-security training, aiming to assist designers of cyber-security training activities to identify the mostprominent trainee performance assessment means for their training programmes, while additional research directions involving cyber-security training evaluation metrics are also identified.</p>
},
	keywords = {Cyber-ranges, Cyber-security training, Evaluation, Gamification, Scoring},
	author = {Koutsouris, Nikolaos and Vassilakis, Costas and Kolokotronis, Nicholas}
}
@conference {800,
	title = {Understanding and mitigating banking trojans: From Zeus to Emotet},
	booktitle = {Proceedings of the 2021 IEEE International Conference on Cyber Security and Resilience},
	year = {2021},
	publisher = {IEEE},
	organization = {IEEE},
	abstract = {<p>Banking Trojans came a long way in the past decade, and the recent case of Emotet showed their enduring relevance. The evolution of the modern computing landscape can be traced through Emotet and Zeus, both representative examples from the end of the past decade. As an example of earlier malware, Zeus only needed to employ simple anti-analysis techniques to stay undetected; while the more recent Emotet had to constantly evolve to stay a step ahead. Current host-based antimalware solutions face an increasing number of obstacles to perform their function. A multi-layer approach to network security is necessary for network-based intrusion response systems to secure modern networks of heterogeneous devices. A system based on a combination of a graphical network security model and a game theoretic model of cyber attacks was tested on a testbed with Windows machines infected with Trojans; experimental results showed that the proposed system effectively blocked Trojans{\textquoteright} network communications effectively preventing data leakage and yielding encouraging results for future work.</p>
},
	keywords = {Cyber security, Graphical security models, Intrusion response systems, Malware analysis, Reverse engineering},
	author = {Grammatikakis, Konstantinos-Panagiotis and Koufos, Ioannis and Kolokotronis, Nicholas and Vassilakis, Costas and Shiaeles, Stavros}
}
