Flow-based Detection and Proxy-based Evasion of Encrypted Malware C2 Traffic. - Carlos Novo; Ricardo Morla (AISec@CCS, 2020)

Inferring Legacy IoT Device Behavior over a Layer 2 TLS Tunnel. - Rodrigo Caldas; Carlos Novo; Ricardo Morla; Luis Cruz 007; António Carvalho; David Campelo (CSNet, 2021)

An Outlook on using Packet Sampling in Flow-based C2 TLS Malware Traffic Detection. - Carlos Novo; João Marco C. Silva; Ricardo Morla (NoF, 2021)

Tweaking Metasploit to Evade Encrypted C2 Traffic Detection. - Gonçalo Xavier; Carlos Novo; Ricardo Morla (CoRR, 2022)

Extending C2 Traffic Detection Methodologies: From TLS 1.2 to TLS 1.3-enabled Malware. - Diogo Barradas; Carlos Novo; Bernardo Portela; Sofia Romeiro; Nuno Santos 001 (RAID, 2024)

HAL 9000: a Risk Manager for ITSs. - Tadeu Freitas; Carlos Novo; João Soares; Inês Dutra; Manuel Eduardo Correia; Behnam Shariati; Rolando Martins (TPS-ISA, 2024)

A Risk Manager for Intrusion Tolerant Systems: Enhancing HAL 9000 with New Scoring and Data Sources. - Tadeu Freitas; Carlos Novo; Inês Dutra; João Soares; Manuel Eduardo Correia; Benham Shariati; Rolando Martins (CoRR, 2025)