Tamas Lengyel

Alumni

now at Novetta, Senior Security Researcher

Research Interests

My research area revolves around intrusion detection, virtualization, memory forensics, malware analysis and reverse engineering. In particular, I'm working on developing a lightweight OS agnostic intrusion detection system using virtual machine introspecton (VMI) techniques. The goal is to develop a system that is stealthy, has limited performance impact and doesn't require in-guest agents. My prior research has focused on fusing memory forensics tools with virtualization technologies to develop highly scalable honeynet systems.

Publications

2018		Hiding in the Shadows: Empowering ARM for Stealthy Virtual Machine Introspection Annual Computer Security Applications Conference (ACSAC)
2016		Adaptive Semantics-Aware Malware Classification 13th Conference on Detection of Intrusions and Malware \& Vulnerability Assessment (DIMVA)
2015		CloudIDEA: A Malware Defense Architecture for Cloud Data Centers 5th International Symposium on Cloud Computing, Trusted Computing and Secure Virtual Infrastructures - Cloud and Trusted Computing (C&TC 2015)
		Virtual Machine Introspection with Xen on ARM 2nd Workshop on Security in highly connected IT systems (SHCIS)
		Internet-Scale File Analysis Black Hat - USA
2014		Virtual Machine Introspection with Xen on ARM -
		Code Validation for Modern OS Kernels Workshop on Malware Memory Forensics (MMF)
		Pitfalls of virtual machine introspection on modern hardware 1st Workshop on Malware Memory Forensics (MMF)
		Scalability, Fidelity and Stealth in the DRAKVUF Dynamic Malware Analysis System Proceedings of the 30th Annual Computer Security Applications Conference
		Multi-tiered Security Architecture for ARM via the Virtualization and Security Extensions 1st Workshop on Security in highly connected IT systems