Peering through the iframe

Proceedings - IEEE INFOCOM

Volumn , Issue , 2011, Pages 411-415

  Stone Gross, Brett ^a   Cova, Marco ^b   Kruegel, Christopher ^a   Vigna, Giovanni ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b UNIVERSITY OF BIRMINGHAM   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

I-FRAME; MALWARES; MODUS OPERANDI; SOFTWARE COMPONENT;

COMPUTER CRIME; INTERNET; USER INTERFACES;

TELECOMMUNICATION NETWORKS;

EID: 79960849179     PISSN: 0743166X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFCOM.2011.5935193     Document Type: Conference Paper

References (15)

1. A. Barth, C. Jackson, and J. Mitchell. Robust Defenses for Cross-Site Request Forgery. In Proceedings of the ACM Conference on Computer and Communications Security (CCS), 2008.
2. CONTEXTin.com. URLclassifier-Classify a Web Page Using Advanced Semantic Analysis. http://www.urlclassifier.com/URLClassifierWS.
3. M. Cova, C. Kruegel, and G. Vigna. Detection and Analysis of Driveby-Download Attacks and Malicious JavaScript Code. In Proceedings of the World Wide Web Conference (WWW), 2010.
4. T. Duebendorfer and S. Frei. Why Silent Updates Boost Security. Technical report, ETH Zurich, 2009.
5. M. Egele, P. Wurzinger, C. Kruegel, and E. Kirda. Defending Browsers against Drive-by Downloads: Mitigating Heap-Spraying Code Injection Attacks. In Proceedings of the Conference on Detection of Intrusions and Malware and Vulnerability Assessment (DIMVA), 2009.
6. P. Kleissner. Analysis of Sinowal. http://web17.webbpro.de/index.php? page=analysis-of-sinowal, 2008.
7. J. Ma, L. Saul, S. Savage, and G. Voelker. Beyond Blacklists: Learning to Detect Malicious Web Sites from Suspicious URLs. In ACM SIGKDD Conference, 2009.
8. Microsoft Corporation. Security Development Lifecycle (SDL). http://msdn.microsoft.com/en-us/security/cc448177.aspx, 2009.
9. Netscape. ODP-Open Directory Project. http://www.dmoz.org.
10. M. Polychronakis, P. Mavrommatis, and N. Provos. Ghost Turns Zombie: Exploring the Life Cycle of Web-based Malware. In Proceedings of the USENIX Workshop on Large-Scale Exploits and Emergent Threats, 2008.
11. N. Provos, P. Mavrommatis, M. Rajab, and F. Monrose. All Your iFRAMEs Point to Us. In Proceedings of the USENlX Security Symposium, 2008.
12. N. Provos, D. McNamee, P. Mavrommatis, K. Wang, and N. Modadugu. The Ghost in the Browser: Analysis of Web-based Malware. In Proceedings of the USENIX Workshop on Hot Topics in Understanding Botnet, 2007.
13. P. Ratanaworabhan, B. Livshits, and B. Zorn. Nozzle: A Defense Against Heap-spraying Code Injection Attacks. In Proceedings of the USENlX Security Symposium, 2009.
14. B. Stone-Gross, M. Cova, L. Cavallaro, R. Gilbert, M. Szydlowski, R. Kemmerer, C. Kruegel, and G. Vigna. Your Botnet is My Botnet: Analysis of a Botnet Takeover. In Proceedings of the ACM Conference on Computer and Communications Security (CCS), 2009.
15. YoM. Wang, D. Beck, X. Jiang, R. Roussev, C. Verbowski, S. Chen, and S. King. Automated Web Patrol with Strider HoneyMonkeys: Finding Web Sites That Exploit Browser Vulnerabilities. In Proceedings of the Symposium on Network and Distributed System Security (NDSS), 2006.