A case study on asprox infection dynamics

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5587 LNCS, Issue , 2009, Pages 1-20

  Shin, Youngsang ^a   Myers, Steven ^b   Gupta, Minaxi ^a  

^a INDIANA UNIVERSITY   (United States)

^b INDIANA UNIVERSITY   (United States)

Author keywords

Asprox; Malware; Security; SQL Injection

Indexed keywords

ASPROX; INFECTION DYNAMICS; MALWARE; MALWARES; REAL WORLD DATA; SECURITY; SQL INJECTION; WEB SERVERS;

WEB SERVICES;

COMPUTER CRIME;

EID: 70350646591     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-02918-9_1     Document Type: Conference Paper

References (24)

1. Stewart, J.: Danmec/Asprox SQL Injection Attack Tool Analysis, http://www.secureworks.com/research/threats/danmecasprox
2. The Times: Asprox computer virus infects key government and consumer websites, http://technology.timesonline.co.uk/tol/news/tech and web/the web/article4381034.ece
3. CyberInsecure.com: Asprox botnet mass attack hits governmental, healthcare, and top business websites, http://cyberinsecure.com/asprox-botnet- mass-attack-hits-governmental-healthcare-and-top-business-websites/
4. Amazon.com, Inc.: Alexa web information service, AWIS (2008), http://aws.amazon.com/awis
5. Cisco News: ASPROX SQL Injection Attacks - Block them using a Cisco router (July 2008), http://cisconews.co.uk/2008/07/09/asprox-sql-injection- attacks-block-them-using-a-cisco-router
6. Zino, M.: ASCII Encoded/Binary string automated SQL injection attack, http://www.bloombit.com/Articles/2008/05/ASCII-Encoded-Binary-String-Automated- SQL-Injection.aspx
7. Hexasoft Development Sdn. Bhd.: IP2Location geolocation service (February 2008), http://www.ip2location.com/
8. Anderson, D.S., Fleizach, C., Savage, S., Voelker, G.M.: Spamscatter: Characterizing internet scam hosting infrastructure. In: USENIX Security (2007)
9. Google: Google AJAX Search API, http://code.google.com/apis/ajaxsearch/
10. Yahoo: Web Search APIs from Yahoo! Search, http://developer.yahoo.com/ search/web/
11. Danchev, D.: Sony PlayStation's site SQL injected, redirecting to rogue security software (July 2008), http://blogs.zdnet.com/security/?p=1394
12. McGrath, D.K., Gupta, M.: Behind Phishing: An Examination of the Phisher Modi Operandi. In: USENIX Workshop on Large-Scale Exploits and Emergent Threats (2008)
13. Holz, T., Gorecki, C., Rieck, K., Freiling, F.C.: Measuring and Detecting Fast-Flux Service Networks. In: NDSS (2008)
14. Bailey, M., Cooke, E., Jahanian, F., Watson, D.: The Blaster Worm: Then and Now. In: IEEE Security and Privacy (2005)
15. Xie, Y., Yu, F., Achan, K., Panigrahy, R., Hulten, G., Osipkov, I.: Spamming Botnets: Signatures and Characteristics. In: ACM SIGCOMM (2008)
16. Rajab, M.A., Zarfoss, J., Monrose, F., Terzis, A.: A Multifaced Approach to Understanding the Botnet Phenomenon. In: ACM IMC (2006)
17. Zhuang, L., Dunagan, J., Simon, D.R., Wang, H.J., Tygar, J.D.: Characterizing Botnets from Email Spam Records. In: USENIX Workshop on Large-Scale Exploits and Emergent Threats (2008)
18. Holz, T., Steiner, M., Dahl, F., Biersack, E., Freiling, F.: Measurements and Mitigation of Peer-to-Peer-based botnets: A Case Study on Storm Worm. In: USENIX Workshop on Large-Scale Exploits and Emergent Threats, LEET (2008)
19. Brown, D.: Anatomy of the Asprox Bonet. ToorCon X - San Diego (September 2008)
20. McMillan, R.: 'Rock Phish' blamed for surge in phishing (December 2006), http://www.infoworld.com/article/06/12/12/HNrockphish-1.html
21. Bandhakavi, S., Bisht, P., Madhusudan, P., Venkatakrishnan, V.N.: CANDID: Preventing SQL Injection Attacks using Dynamic Candidate Evaluations. In: CCS (2007)
22. The Honeynet Project: Know Your Enemy: Fast-Flux Service Networks (July 2007), http://www.honeynet.org/papers/ff/
23. Nazario, J., Holz, T.: As the net churns: Fast-flux botnet observations. In: International Conference on Malicious and Unwanted Software, MALWARE (2008)
24. Passerini, E., Paleari, R., Martignoni, L., Bruschi, D.: Fluxor: detecting and monitoring fast-flux service networks. In: Zamboni, D. (ed.) DIMVA 2008. LNCS, vol. 5137, pp. 186-206. Springer, Heidelberg (2008)