Dr Marco Cook

  • Research Associate (School of Computing Science)

email: Marco.Cook@glasgow.ac.uk

School of Computing Science, Sir Alwyn Williams Building

Import to contacts

ORCID iDhttps://orcid.org/0000-0002-5232-2381

Biography

I am a Research Associate within the School of Computing Science, and a member of the GLAsgow Systems Section (GLASS). My research focuses on the cyber security and resiliance of Critical National Infrastructure (CNI), giving particular attention to cyber-physical systems (CPS) and industrial technologies (e.g. Industrial Control Systems (ICS) and Programmable Logic Controllers (PLCs). Within the department, I am a member of the Netlab and Cyber Defence Lab groups.

I completed my PhD at the University of Glasgow in 2023, which was funded through an EPSRC iCASE studentship award, supported by the Defence Science and Technology Laboratory (Dstl) as the industrial partner. My PhD research explored anomaly detection and diagnosis for ICS, specifically in the context of digital forensics.

Research interests

Research Interests:

  • Cyber-Security
  • Industrial Control System (ICS) Security
  • Anomaly Detection
  • Digital Forensics
  • Security of Programmable Logic Controllers (PLCs)

Research groups

Publications

List by: Type | Date

Jump to: 2025 | 2024 | 2023 | 2022 | 2020 | 2017
Number of items: 14.

2025

Holik, F., Cook, M. M. , Shah, A. A. and Pezaros, D. (2025) Network-Wide Service Deployment Using Centrally Orchestrated, eBPF-Based Programmable Dataplanes. In: 2025 EuCNC & 6G Summit, Poznan, Poland, 03-06 Jun 2025, (Accepted for Publication)

Chyzy, J., Cook, M. M. and Pezaros, D. (2025) On the Cost of Asset Discovery Techniques for Industrial Control Systems. In: 8th IEEE Conference on Industrial Cyber-Physical Systems (ICPS), Emden, Germany, 12-15 May 2025, (Accepted for Publication)

Cook, M. M. and Pezaros, D. (2025) Artefact Provenance Graphs for Anomaly Inference in Industrial Control Systems. In: 40th International Conference on ICT Systems Security and Privacy Protection – IFIP SEC 2025, Maribor, Slovenia, 21-23 May 2025, (Accepted for Publication)

Holik, F., Cook, M. M. , Li, X., Shah, A. A. and Pezaros, D. (2025) Programmable data planes for increased digital resilience in OT networks. IEEE Communications Magazine, (doi: 10.1109/MCOM.001.2400446) (Early Online Publication)

Holik, F., Cook, M. M. and Pezaros, D. (2025) Resilient Network Architecture with eBPF-based Programmability and Centralised Orchestration. In: IEEE International Conference on Computer Communications (INFOCOM 2025), London, UK, 19-22 May 2025, (Accepted for Publication)

Holik, F., Cook, M. M. , Deol, B. S. , Shah, A. A. and Pezaros, D. P. (2025) Dashboard Orchestration of eBPF-based Programmable OT Networks. In: IEEE International Conference on Computer Communications (INFOCOM 2025), London, UK, 19-22 May 2025, (Accepted for Publication)

2024

Nahalka, M., Cook, M. M. and Pezaros, D. (2024) The Good, the Bad and the Ugly: Investigating the Effectiveness of Graph Deep Neural Networks for Anomaly Detection in Industrial Control Systems. In: IFIP International Internet of things (IoT) Conference, Nice, France, 6-8 November 2024, (Accepted for Publication)

Niu, X., Cook, M. and Pezaros, D. (2024) Examining the Suitability of Stream Ciphers for Modbus-TCP Encryption on Resource Constrained Devices. In: EuroSec '24, Athens, Greece, 22 Apr 2024, pp. 51-57. ISBN 9798400705427 (doi: 10.1145/3642974.3652287)

Feng, K., Cook, M. M. and Marnerides, A. K. (2024) Sizzler: Sequential fuzzing in Ladder diagrams for vulnerability detection and discovery in Programmable Logic Controllers. IEEE Transactions on Information Forensics and Security, 19, pp. 1660-1671. (doi: 10.1109/TIFS.2023.3340615)

2023

Cook, M. M. , Marnerides, A. K. and Pezaros, D. P. (2023) PLCPrint: fingerprinting memory attacks in programmable logic controllers. IEEE Transactions on Information Forensics and Security, (doi: 10.1109/TIFS.2023.3277688) (Early Online Publication)

Cook, M. M. , Marnerides, A. K. , Johnson, C. and Pezaros, D. (2023) A survey on industrial control system digital forensics: challenges, advances and future directions. IEEE Communications Surveys and Tutorials, (doi: 10.1109/COMST.2023.3264680) (Early Online Publication)

2022

Cook, M. , Paterson, C., Marnerides, A. K. and Pezaros, D. (2022) Anomaly Diagnosis in Cyber-Physical Systems. In: ICC 2022 - IEEE International Conference on Communications, Seoul, South Korea, 16-20 May 2022, ISBN 9781538683484 (doi: 10.1109/ICC45855.2022.9838968)

2020

Cook, M. , Stavrou, I., Dimmock, S. and Johnson, C. (2020) Introducing a Forensics Data Type Taxonomy of Acquirable Artefacts From Programmable Logic Controllers. In: 2020 International Conference on Cyber Security and Protection of Digital Services (Cyber Security), 15-19 Jun 2020, ISBN 9781728164281 (doi: 10.1109/CyberSecurity49315.2020.9138879)

2017

Johnson, C. W. , Saleem, M. H., Evangelopoulou, M. , Cook, M. , Harkness, R. and Barker, T. (2017) Defending Against Firmware Cyber Attacks on Safety-Critical Systems. Proceedings 35th International System Safety Conference, Albuquerque, NM, USA, 21-25 Aug 2017.

This list was generated on Mon Apr 21 06:29:46 2025 BST.
Jump to: Articles | Conference or Workshop Item | Conference Proceedings
Number of items: 14.

Articles

Holik, F., Cook, M. M. , Li, X., Shah, A. A. and Pezaros, D. (2025) Programmable data planes for increased digital resilience in OT networks. IEEE Communications Magazine, (doi: 10.1109/MCOM.001.2400446) (Early Online Publication)

Feng, K., Cook, M. M. and Marnerides, A. K. (2024) Sizzler: Sequential fuzzing in Ladder diagrams for vulnerability detection and discovery in Programmable Logic Controllers. IEEE Transactions on Information Forensics and Security, 19, pp. 1660-1671. (doi: 10.1109/TIFS.2023.3340615)

Cook, M. M. , Marnerides, A. K. and Pezaros, D. P. (2023) PLCPrint: fingerprinting memory attacks in programmable logic controllers. IEEE Transactions on Information Forensics and Security, (doi: 10.1109/TIFS.2023.3277688) (Early Online Publication)

Cook, M. M. , Marnerides, A. K. , Johnson, C. and Pezaros, D. (2023) A survey on industrial control system digital forensics: challenges, advances and future directions. IEEE Communications Surveys and Tutorials, (doi: 10.1109/COMST.2023.3264680) (Early Online Publication)

Conference or Workshop Item

Johnson, C. W. , Saleem, M. H., Evangelopoulou, M. , Cook, M. , Harkness, R. and Barker, T. (2017) Defending Against Firmware Cyber Attacks on Safety-Critical Systems. Proceedings 35th International System Safety Conference, Albuquerque, NM, USA, 21-25 Aug 2017.

Conference Proceedings

Holik, F., Cook, M. M. , Shah, A. A. and Pezaros, D. (2025) Network-Wide Service Deployment Using Centrally Orchestrated, eBPF-Based Programmable Dataplanes. In: 2025 EuCNC & 6G Summit, Poznan, Poland, 03-06 Jun 2025, (Accepted for Publication)

Chyzy, J., Cook, M. M. and Pezaros, D. (2025) On the Cost of Asset Discovery Techniques for Industrial Control Systems. In: 8th IEEE Conference on Industrial Cyber-Physical Systems (ICPS), Emden, Germany, 12-15 May 2025, (Accepted for Publication)

Cook, M. M. and Pezaros, D. (2025) Artefact Provenance Graphs for Anomaly Inference in Industrial Control Systems. In: 40th International Conference on ICT Systems Security and Privacy Protection – IFIP SEC 2025, Maribor, Slovenia, 21-23 May 2025, (Accepted for Publication)

Holik, F., Cook, M. M. and Pezaros, D. (2025) Resilient Network Architecture with eBPF-based Programmability and Centralised Orchestration. In: IEEE International Conference on Computer Communications (INFOCOM 2025), London, UK, 19-22 May 2025, (Accepted for Publication)

Holik, F., Cook, M. M. , Deol, B. S. , Shah, A. A. and Pezaros, D. P. (2025) Dashboard Orchestration of eBPF-based Programmable OT Networks. In: IEEE International Conference on Computer Communications (INFOCOM 2025), London, UK, 19-22 May 2025, (Accepted for Publication)

Nahalka, M., Cook, M. M. and Pezaros, D. (2024) The Good, the Bad and the Ugly: Investigating the Effectiveness of Graph Deep Neural Networks for Anomaly Detection in Industrial Control Systems. In: IFIP International Internet of things (IoT) Conference, Nice, France, 6-8 November 2024, (Accepted for Publication)

Niu, X., Cook, M. and Pezaros, D. (2024) Examining the Suitability of Stream Ciphers for Modbus-TCP Encryption on Resource Constrained Devices. In: EuroSec '24, Athens, Greece, 22 Apr 2024, pp. 51-57. ISBN 9798400705427 (doi: 10.1145/3642974.3652287)

Cook, M. , Paterson, C., Marnerides, A. K. and Pezaros, D. (2022) Anomaly Diagnosis in Cyber-Physical Systems. In: ICC 2022 - IEEE International Conference on Communications, Seoul, South Korea, 16-20 May 2022, ISBN 9781538683484 (doi: 10.1109/ICC45855.2022.9838968)

Cook, M. , Stavrou, I., Dimmock, S. and Johnson, C. (2020) Introducing a Forensics Data Type Taxonomy of Acquirable Artefacts From Programmable Logic Controllers. In: 2020 International Conference on Cyber Security and Protection of Digital Services (Cyber Security), 15-19 Jun 2020, ISBN 9781728164281 (doi: 10.1109/CyberSecurity49315.2020.9138879)

This list was generated on Mon Apr 21 06:29:46 2025 BST.

Supervision