IronNetInjector: Weaponizing .NET Dynamic Language Runtime Engines

As adversaries evolve their Tactics, Techniques, and Procedures (TTPs) to stay ahead of defenders, Microsoft’s .NET Framework emerges as a common component found in the tradecraft of many contemporary Advanced Persistent Threats (APTs), whether through PowerShell or C#. Because of .NET’s ease of use and availability on every recent Windows system, it is at the forefront of modern TTPs and is a primary means of exploitation. This article considers the .NET Dynamic Language Runtime as an attack vector, and how APTs have utilized it for offensive purposes. The technique under scrutiny is Bring Your Own Interpreter (BYOI), which is the ability of developers to embed dynamic languages into .NET using an engine. The focus of this analysis is an adversarial use case in which APT Turla utilized BYOI as an evasion technique, using an IronPython .NET Injector named IronNetInjector. This research analyzes IronNetInjector and how it was used to reflectively load .NET assemblies. It also evaluates the role of Antimalware Scan Interface (AMSI) in defending Windows. Due to AMSI being at the core of Windows malware mitigation, this article further evaluates the memory patching bypass technique by demonstrating a novel AMSI bypass method in IronPython using Platform Invoke (P/Invoke)

The AFIT ENgineer, Volume 5, Issue 3

This issue of The AFIT ENgineer has a special extended section devoted to AFIT\u27s Cyber Education program. The section includes two student-authored research briefs. Also: Moving AFIT\u27s Education Mission Forward Hypersonic Short Course Hosted at AFIT Faculty Academic Promotions Two AFIT material science articles featured on journal covers

Drones for parcel and passenger transportation: A literature review

Delivery drones and ‘air taxis’ are currently among the most intensely discussed emerging technologies, likely to expand mobility into the ‘third dimension’ of low-level airspace. This paper presents a systematic literature review of 111 interdisciplinary publications (2013 - 03/2019). The review systematizes the current socio-technical debate on civil drones for transportation purposes allowing for a (critical) interim assessment. To guide the review process four dimensions of analysis were defined. A total of 2581 relevant quotations were subdivided into anticipated barriers (426), potential problems (1037), proposed solutions (737) and expected benefits (381). We found that the debate is characterized by predominantly technical and regulatory problems and barriers which are considered to prevent or impede the use of drones for parcel and passengers transportation. At the same time, definite economic expectations are juxtaposed with quite complex and differentiated concerns regarding societal and environmental impacts. Scrutinizing the most prevalent transportation-related promises of traffic reduction, travel time saving and environmental relief we found that there is a strong need to provide scientific evidence for the promises linked to the use of drones for transportation. We conclude that the debate on drones for transportation needs further qualification, emphasizing societal benefits and public involvement more strongly.TU Berlin, Open-Access-Mittel - 201

R&D collaboration networks in the European FrameworkProgrammes: Data processing, network construction and selected results

We describe the construction of a large and novel data set on R&D collaboration networks in the first five EU Framework Programmes (FPs), examine key features and provide economic interpretations for our findings. The data set is based on publicly available raw data that pre-sents numerous challenges. We critically examine the different problems and detail how we have dealt with them. We describe how we construct networks from the processed data. The resulting networks display properties typical for large complex networks, including scale-free degree distributions and the small-world property. The former indicates the presence of net-work hubs, which we identify. Theoretical work shows the latter to be beneficial for knowl-edge creation and diffusion. Structural features are remarkably similar across FPs, indicating similar network formation mechanisms despite changes in governance rules. Several findings point towards the existence of a stable core of interlinked actors since the early FPs with inte-gration increasing over time. This core consists mainly of universities and research organisa-tions. The paper concludes with an agenda for future research.R&D collaboration, EU Framework Programmes, complex networks, small world effect, knowledge creation, knowledge diffusion, European Research Area

Dagstuhl News January - December 2000

"Dagstuhl News" is a publication edited especially for the members of the Foundation "Informatikzentrum Schloss Dagstuhl" to thank them for their support. The News give a summary of the scientific work being done in Dagstuhl. Each Dagstuhl Seminar is presented by a small abstract describing the contents and scientific highlights of the seminar as well as the perspectives or challenges of the research topic

Review of Intelligent Control Systems with Robotics

Interactive between human and robot assumes a significant job in improving the productivity of the instrument in mechanical technology. Numerous intricate undertakings are cultivated continuously via self-sufficient versatile robots. Current automated control frameworks have upset the creation business, making them very adaptable and simple to utilize. This paper examines current and up and coming sorts of control frameworks and their execution in mechanical technology, and the job of AI in apply autonomy. It additionally expects to reveal insight into the different issues around the control frameworks and the various approaches to fix them. It additionally proposes the basics of apply autonomy control frameworks and various kinds of mechanical technology control frameworks. Each kind of control framework has its upsides and downsides which are talked about in this paper. Another kind of robot control framework that upgrades and difficulties the pursuit stage is man-made brainpower. A portion of the speculations utilized in man-made reasoning, for example, Artificial Intelligence (AI) such as fuzzy logic, neural network and genetic algorithm, are itemized in this paper. At long last, a portion of the joint efforts between mechanical autonomy, people, and innovation were referenced. Human coordinated effort, for example, Kinect signal acknowledgment utilized in games and versatile upper-arm-based robots utilized in the clinical field for individuals with inabilities. Later on, it is normal that the significance of different sensors will build, accordingly expanding the knowledge and activity of the robot in a modern domai

5th Data Science Symposium [Book of Abstracts]

Modern digital scientific workflows - often implying Big Data challenges - require data infrastructures and innovative data science methods across disciplines and technologies. Diverse activities within and outside HGF deal with these challenges, on all levels. The series of Data Science Symposia fosters knowledge exchange and collaboration in the Earth and Environment research community