Measurement and analysis of autonomous spreading malware in a university environment

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4579 LNCS, Issue , 2007, Pages 109-128

  Goebel, Jan ^a   Holz, Thorsten ^b   Willems, Carsten ^b  

^a RWTH AACHEN UNIVERSITY   (Germany)

^b UNIVERSITY OF MANNHEIM   (Germany)

Author keywords

Honeypots; Invasive software; Malware

Indexed keywords

BINARY SEQUENCES; INFORMATION ANALYSIS; INTERNET; REMOTE CONTROL;

HONEYPOTS; INVASIVE SOFTWARE; MALWARE;

COMPUTER VIRUSES;

EID: 37849044998     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-73614-1_7     Document Type: Conference Paper

References (21)

1. Baecher, P., Koetter, M., Holz, T., Dornseif, M., Freiling, F.C.: The nepenthes platform: An efficient approach to collect malware. In: Zamboni, D., Kruegel, C. (eds.) RAID 2006. LNCS, vol. 4219, pp. 165-184. Springer, Heidelberg (2006)
2. Barham, P., Dragovic, B., Fraser, K., Hand, S., Harris, T., Ho, A., Neugebauer, R., Pratt, I., Warfield, A.: Xen and the art of virtualization. In: Proceedings of the 19th ACM Symposium on Operating Systems Principles, pp. 164-177 (2003)
3. Cymru, T.: The underground economy: Priceless, login 31(6) (2007)
4. Grizzard, J.B., Sharma, V., Nunnery, C., Kang, B.B., Dagon, D.: Peer-to-peer botnets: Overview and case study. In: Proceedings of 1st Workshop on Hot Topics in Understanding Botnets (HotBots '07) (2007)
5. Kalafut, A., Acharya, A., Gupta, M.: A study of malware in peer-to-peer networks. In: IMC '06: Proceedings of the 6th ACM SIGCOMM Internet Measurement Conference, pp. 327-332 (2006)
6. Leita, C., Dacier, M., Massicotte, F.: Automatic handling of protocol dependencies and reaction to 0-day attacks with scriptgen based honeypots. In: Zamboni, D., Kruegel, C. (eds.) RAID 2006. LNCS, vol. 4219, pp. 185-205. Springer, Heidelberg (2006)
7. Moore, D., Paxson, V., Savage, S., Shannon, C., Staniford, S., Weaver, N.: Inside the slammer worm. IEEE Security and Privacy 1(4), 33-39 (2003)
8. Moore, D., Shannon, C., claffy, k: Code-red: A case study on the spread and victims of an internet worm. In: MW '02: Proceedings of the 2nd ACM SIGCOMM Workshop on Internet Measurment, pp. 273-284. ACM Press, New York (2002)
9. Moshchuk, A., Bragin, T., Gribble, S.D., Levy, H.M.: A crawler-based study of spyware in the web. In: Proceedings of 13th Network and Distributed System Security Symposium (NDSS'06) (2006)
10. BBC News. Criminals 'may overwhelm the web'. Internet Accessed February 2007 (February 2007) http://news.bbc.co.uk/1/hi/business/6298641.stm
11. Claus, R.F.: Overbeck. Efficient Observation of Botnets. Master's thesis, RWTH Aachen University (May 2007)
12. Rajab, M.A., Zarfoss, J., Monrose, F., Terzis, A.: A multifaceted approach to understanding the botnet phenomenon. In: IMC '06: Proceedings of the 6th ACM SIGCOMM Internet Measurement Conference, pp. 41-52 (2006)
13. Rajab, M.A., Zarfoss, J., Monrose, F., Terzis, A.: My botnet is bigger than yours (maybe, better than yours): Why size estimates remain challenging. In: Proceedings of 1st Workshop on Hot Topics in Understanding Botnets (HotBots '07) (2007)
14. Saroiu, S., Gribble, S.D., Levy, H.M.: Measurement and analysis of spyware in a university environment. In: Proceedings of Networked Systems Design and Implementation (NSDI'04), San Francisco, California, United States (2004)
15. Shin, S., Jung, J., Balakrishnan, H.: Malware prevalence in the kazaa file-sharing network. In: IMC '06: Proceedings of the 6th ACM SIGCOMM Internet Measurement Conference, pp. 333-338 (2006)
16. The Honeynet Project. Know Your Enemy: Tracking Botnets (March 2005) http://www.honeynet.org/papers/bots/
17. New York Times. Attack of the zombie computers is growing threat. Internet (January 2007) http://www.nytimes.com/2007/01/07/technology/07net.html
18. Wang, Y.-M., Beck, D., Jiang, X., Roussev, R., Verbowski, C., Chen, S., King, S.T.: Automated web patrol with strider honeymonkeys: Finding web sites that exploit browser vulnerabilities. In: Proceedings of 13th Network and Distributed System Security Symposium (NDSS'06) (2006)
19. McAfee Whitepaper. Adware and spyware: Unraveling the financial web. Internet: Accessed February 2007 (August 2006) http://www.mcafee.com/us/ local_content/white_papers/threat-center/wp_adware.pdf
20. Willems, C., Holz, T., Freiling, F.: CWSandbox: Towards automated dynamic binary analysis. IEEE Security and Privacy 5(2) (2007)
21. Yegneswaran, V., Barford, P., Ullrich, J.: Internet intrusions: Global characteristics and prevalence. In: SIGMETRICS '03: Proceedings of the 2003 ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems, pp. 138-147. ACM Press, New York (2003)