Exploitation and Sanitization of Hidden Data in PDF Files: Do Security Agencies Sanitize Their PDF Files?

Adhatarao, Supriya; Lauradoux, Cédric

doi:10.1145/3437880.3460405

Cited by 8 publications

(6 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…As such, the analysis of the threat landscape was used to clarify which systems/sensors are used for safe navigation and effective surveillance and to identify their vulnerabilities. Mandatory maritime sensors include radar and AIS, according to the SOLAS convention [37]. Therefore, to identify the relevant papers for maritime data fusion, the search criterion "radar and AIS fusion" was mainly utilized to discover the relations between radar and AIS in the context of data fusion.…”

Section: Findings Of the Literature Review Related To The Maritime Da...mentioning

confidence: 99%

Enhancing Maritime Cybersecurity through Operational Technology Sensor Data Fusion: A Comprehensive Survey and Analysis

Potamos,

Stavrou,

Stavrou

2024

Sensors

View full text Add to dashboard Cite

Cybersecurity is becoming an increasingly important aspect in ensuring maritime data protection and operational continuity. Ships, ports, surveillance and navigation systems, industrial technology, cargo, and logistics systems all contribute to a complex maritime environment with a significant cyberattack surface. To that aim, a wide range of cyberattacks in the maritime domain are possible, with the potential to infect vulnerable information and communication systems, compromising safety and security. The use of navigation and surveillance systems, which are considered as part of the maritime OT sensors, can improve maritime cyber situational awareness. This survey critically investigates whether the fusion of OT data, which are used to provide maritime situational awareness, may also improve the ability to detect cyberincidents in real time or near-real time. It includes a thorough analysis of the relevant literature, emphasizing RF but also other sensors, and data fusion approaches that can help improve maritime cybersecurity.

show abstract

Section: Findings Of the Literature Review Related To The Maritime Da...mentioning

confidence: 99%

Enhancing Maritime Cybersecurity through Operational Technology Sensor Data Fusion: A Comprehensive Survey and Analysis

Potamos,

Stavrou,

Stavrou

2024

Sensors

View full text Add to dashboard Cite

show abstract

Section: B Pdf Cdrmentioning

confidence: 99%

“…Others focus on privacy content in the file or sanitization [42]- [46]. Close related works [42], [47] focus on hidden data detection in PDF that can be used to collect threat intelligence on the entity that created the file. The extracted knowledge, such as printer names [47], internal domain names, operating systems, and personal information can be used against the organization.…”

Section: B Pdf Cdrmentioning

confidence: 99%

Content Disarm and Reconstruction of PDF Files

Dubin

2023

IEEE Access

View full text Add to dashboard Cite

Content Disarm and Reconstruction (CDR) is a zero-trust file methodology that proactively extracts threat attack vectors from documents and media files. While extensive literature on CDR emphasizes its importance, a detailed discussion of how the CDR process works, its effectiveness, and its drawbacks is not presented. Therefore, this paper presents PdfCDR, the first PDF CDR system in which the validation, the prevention rate, and the received visual similarity effect of disarming and reconstruction are presented and measured. Furthermore, PdfCDR suggests for the first time a novel method dealing with new emerging exploits by automatically converting detection rules to disarm and reconstruction rules. As a result, PdfCDR can prevent evasive attacks without any software upgrades and utilize the cyber security community knowledge to prevent cyber attacks as soon as they are advertised. The effectiveness of the novel PdfCDR against well-known PDF datasets shows that it disarmed not only the malicious components, but the reconstructed file is also usable and functional. However, since CDR relies on understanding the file format, any CDR solution should handle each supported file type separately due to the vast difference in each file format. Hence, this paper focuses on the Portable Document Format (PDF) file type that attackers commonly exploit. The results indicate that PdfCDR successfully CDR 90% of the malicious files while the remaining 10% were encrypted or had abnormal structures compared to the standard and were quarantined.

show abstract

“…In Santa Clara County, HIV diagnoses fell more than 30% from 162 in 2019 to 115 in 2020 [3,4], as a decline that became more evident during the COVID-19 pandemic. At the Crane Center, the County of Santa Clara Public Health Department (SCCPHD) express testing clinic that offers free, anonymous, and confidential HIV testing, the number of HIV tests were consistent from 2017 to 2019 (1,329-1,360 HIV tests annually), but dropped in 2020 to less than half the tests administered during the previous year (544 HIV tests).…”

Section: Introduction Hiv Epidemiology and Covid-19mentioning

confidence: 99%

HIV self-testing during COVID-19 in Santa Clara County, California, USA

Agroia,

Mousli

2024

HIV & AIDS Review

View full text Add to dashboard Cite

Introduction:During COVID-19, healthcare providers reported decreased testing volumes, which meant fewer people knew their HIV status. To improve testing volumes, The County of Santa Clara Public Health Department offered a pilot HIV self-testing (HIVST) program for eligible populations. Material and methods:The purpose of this study was to understand overall reach of the intervention and effectiveness of strategies used to raise the program awareness from November 2021 to August 2022, using an observational study design. Participants were recruited through both in-person and digital outreach methods. Individuals completed an online survey in order to participate in the study. Research team collected and analyzed all responses using descriptive analysis.Results: A total of 458 individuals participated in the program. Of participants 232 that responded to optional questions the majority (77%) were identifying as male and 7% identifying as transgender, gender non-binary, or genderqueer. Social media advertisements on gay dating apps and outreach at community events were identified as effective methods for increasing awareness. Of the total participants, 21% had never taken an HIV test before, 58% selected this program for convenience reasons, and 41% received pre-exposure prophylaxis (PrEP) services. Conclusions:HIVST programs have the potential to address barriers in accessing testing services. Healthcare providers are encouraged to offer HIVSTs as options for patients.

show abstract

Exploitation and Sanitization of Hidden Data in PDF Files: Do Security Agencies Sanitize Their PDF Files?

Cited by 8 publications

References 10 publications

Enhancing Maritime Cybersecurity through Operational Technology Sensor Data Fusion: A Comprehensive Survey and Analysis

Enhancing Maritime Cybersecurity through Operational Technology Sensor Data Fusion: A Comprehensive Survey and Analysis

Content Disarm and Reconstruction of PDF Files

HIV self-testing during COVID-19 in Santa Clara County, California, USA

Contact Info

Product

Resources

About