Rethinking antivirus: Executable analysis in the network cloud

2nd USENIX Workshop on Hot Topics in Security, HotSec 2007

Volumn , Issue , 2007, Pages

  Oberheide, Jon ^a   Cooke, Evan ^a   Jahanian, Farnam ^a  

^a UNIVERSITY OF MICHIGAN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SOFTWARE; ENGINES;

ANTI-VIRUS ENGINES; ANTIVIRUS SOFTWARES; BEHAVIORAL SIMULATION; DETECTION COVERAGE; ENTERPRISE NETWORKS; MALICIOUS EXECUTABLES; MULTIPLE DETECTION ENGINES; SECURITY MECHANISM;

COMPUTER VIRUSES;

EID: 84924626503     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. Michael Bailey, Jon Oberheide, Jon Andersen, Z. Morley Mao, Farnam Jahanian, and Jose Nazario. Automated classification and analysis of internet malware. To appear in Proceedings of the 10th International Symposium on Recent Advances in Intrusion Detection (RAID'07).
2. Barracuda Networks. Barracuda spam firewall. http://www. barracudanetworks.com, 2007.
3. Carsten Willems and Thorsten Holz. Cwsandbox. http://www. cwsandbox.org/, 2007.
4. Cloudmark. Cloudmark authority anti-virus. http://www. cloudmark.com, 2007.
5. Abhishek Kumar, Vern Paxson, and Nicholas Weaver. Exploiting underlying structure for detailed reconstruction of an internetscale event. Proceedings of the USENIX/ACM Internet Measurement Conference, October 2005.
6. Microsoft. Microsoft security intelligence report: July-december 2006. http://www.microsoft.com/technet/security/ default.mspx, May 2007.
7. Arbor Networks. Arbor malware library (AML). http://www. arbornetworks.com, 2007.
8. Norman Solutions. Norman sandbox whitepaper. http://download.norman.no/whitepapers/ whitepaper Norman SandBox.pdf, 2003.
9. Paul Bacher and Markus Kotter and Georg Wicherski. The mwcollect alliance. http://www.mwcollect.org, 2007.
10. Honeynet Project. Know Your Enemy: Learning with VMware. 2003.
11. Niels Provos. Spybye. http://www.monkey.org/_provos/ spybye, 2007.
12. Paul Royal, Mitch Halpin, David Dagon, Robert Edmonds, and Wenke Lee. PolyUnpack: Automating the Hidden-Code Extraction of Unpack-Executing Malware. In The 22th Annual Computer Security Applications Conference (ACSAC 2006), Miami Beach, FL, December 2006.
13. Symantec Corporation. Symantec security advisory (sym06- 010). http://www.symantec.com/avcenter/security/ Content/2006.05.25.html, 2006.
14. Michael Vrable, Justin Ma, Jay Chen, David Moore, Erik Vandekieft, Alex C. Snoeren, Geoffrey M. Voelker, and Stefan Savage. Scalability, fidelity and containment in the Potemkin virtual honeyfarm. In Proceedings of the 20th ACM Symposium on Operating System Principles (SOSP), Brighton, UK, October 2005.