BEGIN:VCALENDAR VERSION:2.0 PRODID:-//132.216.98.100//NONSGML kigkonsult.se iCalcreator 2.20.4// BEGIN:VEVENT UID:20250919T013641EDT-6473l742Oc@132.216.98.100 DTSTAMP:20250919T053641Z DESCRIPTION:Abstract:\n\nWith the unprecedented need for remote working and virtual retail\, there has been a worldwide surge in the adoption of clou d and edge computing. On the other hand\, the significant reliance on virt ual services has rendered the underlying cloud environments supporting tho se services an attractive target for cyber criminals. To address this\, th e main focus of my research is to enable effective and efficient investigat ion of security incidents and their root causes through provenance-based s olutions in virtualized environments including clouds\, containers\, netwo rk functions virtualization (NFV)\, etc. First\, I present DominoBlocker\, the first provenance analysis solution facilitating forensic investigatio n and prevention of security incidents in clouds by tracing the dependenci es between cloud management operations\, instead of low-level system calls . Second\, I present ProvTalk\, the first multi-level provenance system fo r NFV built for capturing the relationship between management operations a cross different levels of the NFV stack\, and increasing the interpretabil ity of the logged information by leveraging the inherent cross-level depen dencies. Third\, I present VinciDecoder\, a framework to automatically gen erate human readable forensic reports for security incidents using neural machine translation (NMT). Finally\, I will discuss my ongoing and future research plan on addressing some of the fundamental security challenges in virtualized environments through leveraging provenance analysis.\n\nBio: \n\nAzadeh Tabiban is currently a Ph.D. candidate at Concordia University (with Prof. Lingyu Wang and Prof. Makan Pourzandi)\, and she has been work ing as a research assistant on industry-sponsored projects since 2017. Her Ph.D. research focuses on provenance-based root cause analysis of securit y incidents in virtualized environments such as clouds\, containers\, and Network Functions Virtualization (NFV). Her recent work on provenance anal ysis for NFV has been accepted by\n\nNDSS’22 (a top-tier\, “Big 4” confere nce in security research\, acceptance ratio 16.2%\, as the only accepted w ork from Canada)\, and her work on provenance analysis in clouds has been published and selected as a best paper candidate at CNS’20. Her work has a lso led to a US patent application\, and several demos and presentations g iven at major industrial events. During her master’s study\, she worked as an Ericsson/Concordia Mitacs intern on cloud security auditing\, and she has co-authored publications at prestigious venues such as ESORICS’19 and Journal of Computer Security. She has also served as a guest lecturer and teaching assistant for many cybersecurity classes and as a research mentor for several graduate students.\n\nThis talk is free and open to all\n DTSTART:20220920T133000Z DTEND:20220920T150000Z LOCATION:Rm. 106\, Peel 3661\, CA\, QC\, Montreal\, H3A 1X1\, 3661 rue Peel SUMMARY:Job Talk: Provenance Analysis in Virtualized Environments URL:/sis/channels/event/job-talk-provenance-analysis-v irtualized-environments-341982 END:VEVENT END:VCALENDAR