An empirical study of malware evolution

1st International Conference on Communication Systems and Networks and Workshops, COMSNETS 2009

Volumn , Issue , 2009, Pages

  Gupta, Archit ^a   Kuppili, Pavan ^a   Akella, Aditya ^a   Barford, Paul ^a  

^a UNIVERSITY OF WISCONSIN MADISON   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DRILL-DOWN; EMPIRICAL STUDIES; INHERITANCE RELATIONSHIPS; MALCODE; MALWARE; PRUNING TECHNIQUES; TEMPORAL INFORMATION;

COMMUNICATION SYSTEMS;

COMPUTER CRIME;

EID: 66549101391     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/COMSNETS.2009.4808876     Document Type: Conference Paper

References (29)

1. Malware Evolution Research at UW-Madison. http://www.cs.wisc.edu/~archit/ projects/malware/.
2. The Honeynet Project, http://project.honeynet.org, 2003.
3. ExtPhr32-Frequent phrase extraction tool. http://instruct.uwo.ca/gplis/ 677/extphr32/extphr32.htm, 2005.
4. Regmon. http://www.sysinternals.com, 2005.
5. The SoftlCE Driver Suite, http://www.compuware.com, 2005.
6. Zotob and Mytob were originated by Russian hacker. http://www.crime- research.org/news/30.08.2005/1462/, 2005.
7. Malware dangers grow as e-criminals pool resources. http://www.itweek.co. Uk/itweek/news/2160344/malware-dangers- grow-criminals, 2006.
8. The IDA Pro Disassembler and Debugger. http://www.datarescue.com, 2007.
9. H. Ahonen-Myka. Mining All Maximal Frequent Word Sequences in a Set of Sentences. In Proceedings of ACM International conference on Information and Knowledge Management, New York, NY, October 2005.
10. P. Barford and V. Yegneswaran. An Inside Look at Botnets, volume 27 of Advances in Information Security, Malware Detection. Springer, 2007.
11. M. Eichin and J. Rochlis. With Microscope and Tweezers: An Analysis of the Internet Virus of November 1988. In Proceedings of IEEE Security and Privacy, Oakland, CA, June 1989.
12. S. Forrest, S. Hofmeyr, A. Somayaji, and T. Longstaff. A Sense of Self for Unix Processes. In Proceedings of IEEE Security and Privacy, Oakland, CA, June 1996.
13. F. Freiling, T. Holz, and G. Wicherski. Botnet Tracking: Exploring a Root-Cause Methodology to Prevent Distributed Denial-of-Service Attacks. In Proceedings of The 10th European Symposium on Research in Computer Security (ESORICS 05, September 2005.
14. J. Kephart and S. White. Directed-Graph Empdemiological Models of Computer Viruses. In Proceedings of IEEE Security and Privacy, Oakland, CA, June 1991.
15. A. Kumar, V. Paxson, and N. Weaver. Exploiting Underlying Structure for Detailed Reconstruction of an Internet Scale Event. In Proceedings of ACM Internet Measurement Conference, Berkeley, CA, November 2005.
16. J. Ma, J. Dunagan, H. Wang, S. Savage, and G. Voelker. Finding Diversity in Remote Code Injection Exploits. In Proceedings of ACM Internet Measurement Conference, Rio de Janeiro, Brazil, October 2006.
17. McAfee. Avert labs threat library, http://vil.nai.com, 2007.
18. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Stanifor, and N. Weaver. The Spread of the Sapphire/Slammer Worm. http://www.caida.org/outreach/papers/ 2003/sapphire/sapphire.html.
19. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Stanifor, and N. Weaver. Inside the Slammer Worm. In Proceedings of IEEE Security and Privacy, Oakland, CA, June 2003.
20. D. Moore, C. Shannon, and J. Brown. Code Red: A Case Study on the Spread and Victims of an Internet Worm. In Proceedings of ACM SIGCOMM Internet Measurement Workshop, Marseille, France, November 2002.
21. D. Moore, G. Voelker, and S. Savage. Inferring Internet Denial of Service Activity. In Proceedings of the 2001 USENIX Security Symposium, Washington D.C., August 2001.
22. R. Pang, V. Yegneswaran, P. Barford, v. Paxson, and L. Peterson. Characteristics of Internet Background Radiation. In Proceedings of ACM Internet Measurement Conference, Taormina, Italy, October 2004.
23. M. Rajab, J. Zarfoss, F. Monrose, and A. Terzis. A Multifaceted Approach to Understanding the Botnet Phenomenon. In Proceedings of ACM Internet Measurement Conference, November 2006.
24. Sophos. Threat analysis, http://www.sophos.com/security/analysis, 2007.
25. Symantec. Enterprise support knowledgebase. http://www.symantec.com, 2007.
26. P. Szor. The Art of Computer Virus Research and Defense. Addison Wesley, 2005.
27. J. Ullrich. Dshield. http://www.dshield.org, 2005.
28. V. Yegneswaran, P. Barford, and J. Ullrich. Internet Intrusions: Global Characteristics and Prevalence. In Proceedings of ACM SIGMETRICS, San Diego, CA, June 2003.
29. M. Zaki. SPADE: An Efficient Algorithm for Mining Frequent Sequences. Machine Learning, 42(1), 2001.