presented at event International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020) Conference