2

Characterization and Evaluation of IoT Protocols for Data Exfiltration
We review the suitability of CoAP 1.0; MQTT 3.1.1 and 5.0; and AMQP 1.0 protocols for exfiltrating data. For each protocol, we review its specification and calculate the overhead and available space to exfiltrate data in each protocol message
Daniel Uroz, Ricardo J. Rodríguez
PDF Cite Code DOI
On Challenges in Verifying Trusted Executable Files in Memory Forensics
We investigate the limitations that memory forensics imposed to the digital signature verification process of Windows PE signed files, obtained from a memory dump
Daniel Uroz, Ricardo J. Rodríguez
PDF Cite Code Slides DOI
Characteristics and Detectability of Windows Auto-Start Extensibility Points in Memory Forensics
We propose a taxonomy of the Windows ASEPs, considering the features that are used or abused by malware to achieve persistence.
Daniel Uroz, Ricardo J. Rodríguez
PDF Cite Code Slides DOI