A pattern recognition system for malicious PDF files detection

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 7376 LNAI, Issue , 2012, Pages 510-524

  Maiorca, Davide ^a   Giacinto, Giorgio ^a   Corona, Igino ^a  

^a UNIVERSITY OF CAGLIARI   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

ANTI VIRUS; FEATURE EXTRACTOR; PDF FILES; PLUG-INS; RESEARCH TOOLS;

LEARNING SYSTEMS; PATTERN RECOGNITION SYSTEMS; SECURITY OF DATA;

DATA MINING;

EID: 84864937789     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-31537-4_40     Document Type: Conference Paper

References (19)

1. Wepawet, http://wepawet.iseclab.org/
2. IBM : IBM X-Force 2010 Mid-Year Trend and Risk Report (2010)
3. Symantec : Symantec Global Internet Security Threat Report. Trends for 2009 (2010)
4. Parker, T.: Navigating the Internal Structure of a PDF Document, http://www.planetpdf.com
5. Decalage: PDF Security Isseues, http://www.decalage.info
6. Ogorkiewicz, M., Frej, P.: Analysis of Buffer Overflow Attacks (2004), http://www.windowsecurity.com
7. Ramachandran, V.: Buffer Overflow Primer Video Series, http://www.securitytube.net
8. Ratanaworabhan, P., Livshits, B., Zorn, B.: NOZZLE: A Defense Against Heapspraying Code Injection Attacks. In: SSYM 2009 Proceedings of the 18th Conference on USENIX Security Symposium (2009)
9. Bania, P.: JIT Spraying and Mitigations. CoRR (2010)
10. Stevens, D.: PDF tools, http://blog.didierstevens.com/programs/pdf-tools/
11. Contagio, http://contagiodump.blogspot.com/
12. Cova, M., http://www.cs.bham.ac.uk/~covam/blog/pdf/
13. Dixon, B., http://blog.9bplus.com
14. Willems, C., Holz, T., Freiling, F.: Toward Automated Dynamic Malware Analysis Using CWSandbox. Journal IEEE Security and Privacy Archive 5(2) (2007)
15. Cova, M., Kruegel, C., Vigna, G.: Detection and Analysis of Drive-by-Downloads Attacks and Malicious Javascript Code. In: Proceedings of International World Wide Web Conference, WWW 2010 (2010)
16. Tzermias, Z., Sykiotakis, G., Polychronakis, M., Markatos, E.P.: Combining Static and Dynamic Analysis for the Detection of Malicious Documents. In: EUROSEC 2011 Proceedings of the Fourth European Workshop on System Security (2011)
17. Laskov, P., Šrndić, N.: Static Detection of Malicious JavaScript-Bearing PDF Documents. In: Annual Computer Security Applications Conference (2011)
18. Yahoo, http://www.yahoo.com
19. Virus Total, http://www.virustotal.com/