Targeted attacks detection with SPuNge

2013 11th Annual Conference on Privacy, Security and Trust, PST 2013

Volumn , Issue , 2013, Pages 185-194

  Balduzzi, Marco ^a   Ciangaglini, Vincenzo ^a   McArdle, Robert ^a  

^a TREND MICRO INC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANTIVIRUS VENDORS; CORRELATION TECHNIQUES; CYBERCRIME; MALWARES; SECURITY EXPERTS;

COMPUTER CRIME;

EID: 84884992369     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PST.2013.6596053     Document Type: Conference Paper

References (17)

1. AlienVault and Kaspersky. Operation Red October. http://news.softpedia. com/news/AlienVault-and-Kaspersky-Help-Organizations-Neutralize-Red-October- Attack-322919. shtml.
2. M. Antonakakis, R. Perdisci, Y. Nadji, N. Vasiloglou, S. Abu-Nimeh, W. Lee, and D. Dagon. From throw-away traffic to bots: detecting the rise of dga-based malware. In Proceedings of the 21st USENIX conference on Security symposium, 2012.
3. U. Bayer, P. M. Comparetti, C. Hlauschek, C. Kruegel, and E. Kirda. Scalable, behavior-based malware clustering. In Proceedings of the Network and Distributed System Security Symposium, NDSS 2009, San Diego, California, USA, 2009.
4. J. Carr. RBN Connection to Kaspersky's Red October Espionage Network. http://jeffreycarr.blogspot.ca/2013/01/rbn-connection-to-kasperskys-red.html.
5. G. Gu, R. Perdisci, J. Zhang, and W. Lee. Botminer: clustering analysis of network traffic for protocol-and structure-independent botnet detection. In Proceedings of the 17th conference on Security symposium, 2008.
6. J. Hernandez. Typo squatting, The Threat Network Defense Teams Overlook. http://www.academia.edu/818541/TypoSquatting-Malicious Domains Malware Domains Part Of The Miasmatic Threat.
7. A. K. Jain, M. N. Murty, and P. J. Flynn. Data clustering: a review. ACM Comput. Surv., 1999.
8. M. Jakobsson, P. Finn, and N. Johnson. Why and how to perform fraud experiments. Security Privacy, IEEE, 2008.
9. M. Jakobsson and J. Ratkiewicz. Designing ethical phishing experiments: a study of (rot13) ronl query features. In Proceedings of the 15th international conference on World Wide Web, 2006.
10. M. Lee and D. Lewis. Clustering disparate attacks: mapping the activities of the advanced persistent threat. http://www.academia.edu/2352875/CLUSTERING DISPARATE ATTACKS MAPPING THE ACTIVITIES OF THE ADVANCED PERSISTENT THREAT.
11. S.-T. Liu, Y.-M. Chen, and H.-C. Hung. N-victims: An approach to determine n-victims for apt investigations. In Information Security Applications. 2012.
12. T. Micro. IXESHE, Targeting East Asian Governments and Electronics Companies. http://www.trendmicro.com/cloud-content/us/pdfs/security- intelligence/white-papers/wp ixeshe.pdf.
13. D. Pelleg and A. W. Moore. X-means: Extending k-means with efficient estimation of the number of clusters. In Proceedings of the Seventeenth International Conference on Machine Learning, 2000.
14. R. Perdisci, W. Lee, and N. Feamster. Behavioral clustering of httpbased malware and signature generation using malicious network traces. In Proceedings of the 7th USENIX conference on Networked systems design and implementation, 2010.
15. Symantec. Anatomy of a Data Breach. http://www.symantec.com/articles/ article.jsp?aid=20091023 anatomy of a data breach.
16. O. Thonnard, L. Bilge, G. O'Gorman, S. Kiernan, and M. Lee. Industrial espionage and targeted attacks: Understanding the characteristics of an escalating threat. In Research in Attacks, Intrusions, and Defenses. 2012.
17. T.-F. Yen and M. K. Reiter. Traffic aggregation for malware detection. In Proceedings of the 5th international conference on Detection of Intrusions and Malware, and Vulnerability Assessment, 2008.