Talal Halabi

Prof. Talal Halabi

orcid

Research Focus & Metrics

Academic Career Length

10Years (2017-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
1 September 2019 in Future Generation Computer Systems
Verified
Journal Article
Closed access
AAAdel Abusitta
Adel Abusitta
MBMartine Bellaiche
Martine Bellaiche
MDMichel Dagenais
Michel Dagenais
Talal HalabiTalal Halabi
Talal Halabi

1 May 2020
Verified
Conference Paper
Closed access
DTDharitri Tripathy
Dharitri Tripathy
RGRudrarajsinh Gohil
Rudrarajsinh Gohil
Talal HalabiTalal Halabi
Talal Halabi
Software as a Service (SaaS) has been adopted in a fast pace for applications and services to run on software cloud platform. However, the success of SaaS in cloud computing cannot obscure the security challenges faced by the web applications deployed on cloud SaaS. Like other web-based systems, cloud applications are prone to most of the common web attacks. The SQL injection attack is one of the most potential threat to a SaaS application. This may result in loss of sensitive and important data (e.g., financial, personal). Through this kind of attacks, the attacker can steal critical and confidential information to a business or an organization leading to high impact on tangible (e.g., data) and intangible (e.g., reputation) assets. The purpose of this research is to investigate the potential of using machine learning techniques for SQL injection detection on the application level. The algorithms to be tested are classifiers trained on different malicious and benign payloads. They take a payload as input and decide whether the input contains a malicious code or not. The results show that these algorithms can distinguish normal payloads from malicious payloads with a detection rate higher than 98%. The paper also compares the performance of different machine learning models in detecting SQL injection attacks.

14 January 2021 in IEEE Transactions on Reliability
Verified
Journal Article
Closed access
Talal HalabiTalal Halabi
Talal Halabi
OWOmar Abdel Wahab
Omar Abdel Wahab
RMRanwa Al Mallah
Ranwa Al Mallah
MZMohammad Zulkernine
Mohammad Zulkernine
Connected vehicles are essential for the deployment of intelligent transportation services. However, the high level of connectivity in today’s Internet of vehicles (IoV) and the extreme reliance on the data collected from the smart transportation infrastructure widen the space of security vulnerabilities, making the IoV a potential target for cyberattacks. This article investigates novel sophisticated ways to exploit the IoV and launch intelligent attacks on road traffic services by creating persistent impact and reducing detection chances. This article models the processes of attack and defense as a cybersecurity Stackelberg game leading to optimal mixed strategies for both the attackers and the IoV defense system, where the latter optimally deploys the available security resources within the transportation infrastructure to minimize the impact of attacks and improve their detection. The game is of Bayesian type and considers several types of data corruption attacks that occur according to a probability distribution that we determine based on a rigorous risk assessment approach. The results show that our game model and solution allow us to reduce the impact of advanced persistent threats compared to a uniform defense design that is indifferent to attackers’ strategies and types. The solution could be integrated into the design of IoV intrusion detection systems to increase their robustness.

1 June 2018 in Computers & Security
Verified
Journal Article
Closed access
Talal HalabiTalal Halabi
Talal Halabi
MBMartine Bellaiche
Martine Bellaiche

1 May 2019
Verified
Conference Paper
Closed access
Talal HalabiTalal Halabi
Talal Halabi
MZMohammad Zulkernine
Mohammad Zulkernine
The Internet of Vehicles (IoV) is an emerging computing paradigm that delivers intelligent transportation services. In an IoV system, the legitimacy, reliability, and accuracy of circulating data have a direct impact on decisions and operations, and eventually, public safety and economy. In this paper, we design a decentralized secure collaboration scheme that protects the vehicles in the IoV environment against the attacks on data integrity. First, the trustworthiness of the vehicles is computed based on their experience acquired from direct interactions using a Bayesian inference model. Then, based on the established trust relationships between the vehicles, we present a vehicular coalition formation approach that incorporates a hedonic cooperative game model, which aims at preventing malicious or faulty vehicles from joining benign vehicular collaborative communities. Simulation results show that the proposed scheme is highly resilient to data alteration and corruption attacks. The scheme also demonstrates to be scalable, and will ultimately allow the IoV entities and platform to derive optimal operative decisions on the fly.

1 April 2017 in Journal of Information Security and Applications
Verified
Journal Article
Closed access
Talal HalabiTalal Halabi
Talal Halabi
MBMartine Bellaiche
Martine Bellaiche