Analyzing and detecting malicious flash advertisements

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2009, Pages 363-372

  Ford, Sean ^a   Cova, Marco ^a   Kruegel, Christopher ^a   Vigna, Giovanni ^a  

^a University of California   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DYNAMIC CONTENT; FALSE POSITIVE; JAVASCRIPT; MALICIOUS BEHAVIOR; MALWARES; REAL-WORLD; SCRIPTING LANGUAGES; WEB-BASED INTERFACE;

COMPUTER CRIME;

JAVA PROGRAMMING LANGUAGE;

EID: 77950809482     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2009.41     Document Type: Conference Paper

References (17)

1. YouTube, "YouTube Fact Sheet," http://www.youtube.com/t/-fact sheet.
2. Adobe Systems Inc, "Flash Player Statistics," http://www.adobe.com/products/player-census/flashplayer/.
3. M. Polychronakis, P. Mavrommatis, and N. Provos, "Ghost turns zombie: exploring the life cycle of web-based malware," in LEET'08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats. Berkeley, CA, USA: USENIX Association, 2008, pp. 1-8.
4. S. Hardmeier, "Spyware Sucks," http://msmvps.com/spywaresucks/.
5. Alexa Internet, Inc, "Alexa Top 500 Global Sites," http://alexa.com/topsites/.
6. Adobe Systems Inc, "SWF file format specification," http://www.adobe.com/devnet/swf/.
7. CVE MITRE, "CVE-2007-0071," http://cve.mitre.org/cgi-bin/ cvename.cgi?name=CVE-2007-0071.
8. M. Dowd, "Application-Specific Attacks: Leveraging the ActionScript Virtual Machine," http://documents.iss.net/whitepapers/IBM X-Force WP final.pdf, 2008.
9. I. Kogan, "flasm," http://www.nowrap.de/flasm.html.
10. -, "flare," http://www.nowrap.de/flare.html.
11. Adobe Labs and Mozilla, "Mozilla Tamarin," http://www.mozilla. org/projects/tamarin/.
12. "Gnash Project," http://www.gnashdev.org/.
13. "DNS-BH - Malware Domain Blocklist," http://www.malwaredomains. com/.
14. Hispasec Sistemas, "VirusTotal," http://www.virustotal.com/.
15. S. Loirat, "adopstools," http://www.adopstools.net/.
16. Hewlett-Packard Development Company, "SWFScan," https://h30406.www3.hp.com/campaigns/2009/wwcampaign/1-5TUVE/index.php?key=swf\ &jumpid=go/swfscan.
17. S. D. Paola, "SWFIntruder," http://code.google.com/p/ swfintruder/wiki/SWFIntruder.