FIRE: FInding Rogue nEtworks

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2009, Pages 231-240

  Stone Gross, Brett ^a   Kruegel, Christopher ^a   Almeroth, Kevin ^a   Moser, Andreas ^b   Kirda, Engin ^c  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b VIENNA UNIVERSITY OF TECHNOLOGY   (Austria)

^c EURECOM   (France)

Author keywords

[No Author keywords available]

Indexed keywords

BUSINESS NETWORKS; COMMUNICATION CHANNEL; FIBER NETWORKS; FINANCIAL GAINS; MALICIOUS ACTIVITIES; MALICIOUS BEHAVIOR; PHISHING;

COMPUTER APPLICATIONS; CRIME; INTERNET SERVICE PROVIDERS; SOCIETIES AND INSTITUTIONS; WORLD WIDE WEB;

INTERNET;

EID: 77950794331     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2009.29     Document Type: Conference Paper

References (26)

1. J. Armin, G. Bruen, G. Feezel, P. Ferguson, M. Jonkman, and J. McQuaid. McColo - Cyber Crime USA. http://hostexploit.com/downloads/ Hostexploit%20Cyber%20Crime%20USA%20v%202.0%201108.pdf, 2008.
2. J. Armin, P. Ferguson, G. Bruen, G. Feezel, M. Jonkman, and J. McQuaid. McColo - Cyber Crime USA Supplement. http://hostexploit.com/downloads/ Hostexploit McColo supplement 111808.pdf, 2008.
3. J. Armin, J. McQuaid, and M. Jonkman. Atrivo - Cyber Crime USA. http://hostexploit.com/downloads/Atrivowhitepaper082808ac.pdf, 2008.
4. U. Bayer, C. Kruegel, and E. Kirda. TTAnalyze: A Tool for Analyzing Malware. In EICAR Conference, 2006.
5. D. Bizeul. Russian Business Network Study. http://www.bizeul.org/files/ RBN study.pdf, 2007.
6. Z. Chen, C. Ji, and P. Barford. Spatial Temporal Characteristics of Internet Malicious Sources. In Infocomm Mini-Conference, 2008.
7. M. Collins, T. Shimeall, S. Faber, J. Janies, R. Weaver, and M. D. Shon. Using Uncleanliness to Predict Future Botnet Addresses. In ACM Internet Measurement Conference (IMC), 2007.
8. D. Danchev. The Malicious ISPs You Rarely See in Any Report. http://ddanchev.blogspot.com/2008/06/malicious-isps-you-rarely-see-in-any.html, 2008.
9. D. Danchev. GazTransitStroy/GazTranZitStroy Rubbing Shoulders with Petersburg Internet Network LLC. http://ddanchev.blogspot.com/2009/06/ gaztransitstroygaztranzitstroy-rubbing.html, 2009.
10. dn1nj4. The Shadowserver Foundation: RBN "Rizing". http://www.shadowserver.org/wiki/uploads/Information/RBN-Rizing.pdf, 2008.
11. D. Glosser. DNS-BH - Malware Domain Blocklist. http://malwaredomains.com/ , 2008.
12. D. Goodin. 40,000 sites hit by PC-pwning hack attack. http://www.theregister.co.uk/2009/06/02/beladen-mass-website-infection/, 2009.
13. V. Hanna. Spamhaus: Cybercrime's U.S. Hosts. http://www.spamhaus.org/ news.lasso?article=636, 2008.
14. B. Huffaker. CAIDA: AS ranking. http://as-rank.caida.org/, 2008.
15. G. Inc. http://google.com/safebrowsing/diagnostic?site=AS:27715, 2009.
16. B. Krebs. Taking on the Russian Business Network. http://voices. washingtonpost.com/securityfix/2007/10/taking-on-the-russian-business.html, 2007.
17. B. Krebs. Report Slams U.S. Host as Major Source of Badware. http://voices.washingtonpost.com/securityfix/2008/08/report slams-us-host-as- major.html, 2008.
18. B. Krebs. FTC Sues, Shuts Down N. Calif. Web Hosting Firm. http://voices.washingtonpost.com/securityfix/2009/06/ftc-sues-shuts-down-n- calif-we.html, 2009.
19. PhishTank. Clearinghouse for phishing data on the Internet. http://www.phishtank.com, 2008.
20. M. Rajab, F. Monrose, and A. Terzis. Fast and Evasive Attacks: Highlighting the Challenges Ahead. In International Symposium on Recent Advances in Intrusion Detection (RAID), 2006.
21. C. Seifert. Capture-HPC - Honeypot Client. https://projects.honeynet.org/ capture-hpc, 2008.
22. Shadowserver. ASN Botnet Stats. http://www.shadowserver.org/wiki/pmwiki. php/Stats/ASN, 2009.
23. SpamCop. Blocking List. http://www.spamcop.net/bl.shtml, 2008.
24. Spamhaus. Zen: Comprehensive DNSBL. http://www.spamhaus.org/zen/, 2008.
25. Wepawet. http://wepawet.iseclab.org/, 2009.
26. ZeuSTracker. https://zeustracker.abuse.ch/statistic.php, 2009.