A crowdsourcing approach to protect against novel malware threats

2014 22nd Telecommunications Forum, TELFOR 2014 - Proceedings of Papers

Volumn , Issue , 2014, Pages 1063-1066

  Christoforidis, Christoforos ^a   Vlachos, Vasileios ^a   Androulidakis, Iosif ^b  

^a Technological Educational Institute of Thebaly   (Greece)

^b UNIVERSITY OF IOANNINA   (Greece)

Author keywords

collaborative intelligence; JXTA; peer To peer; windows; Worm protection

Indexed keywords

CROWDSOURCING; DECISION MAKING; DISTRIBUTED COMPUTER SYSTEMS; MALWARE; WINDOWS;

CLIENT APPLICATIONS; COLLABORATIVE INTELLIGENCE; INFORMATION ACCURACY; INTERNET WORM; JXTA; PEER TO PEER; WORM ATTACK; WORM PROTECTION;

COMPUTER CRIME;

EID: 84962293469     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/TELFOR.2014.7034590     Document Type: Conference Paper

References (42)

1. E. Spafford, "The internet worm program: an analysis, " SIGCOMM Comput.Commun. Rev., vol.19, pp. 17-57, January 1989.
2. V. Vlachos, S. Androutsellis-Theotokis, and D. Spinellis, "Security Applications of Peer-To-Peer Networks, " Computer Networks, vol. 45, no. 2, pp 195-205, June 2004.
3. M. Duigou. (2004, June 24). Project JXTA [Online]. Available: http://tools.ietf.org/html/draft-duigou-jxta-protocols-05
4. Project Kenai [Online]. Available: https://jxse.kenai.com/Tutorials/Tutorials.html
5. P. Porras, P and P. Neumann, "EMERALD: Event monitoring enabling responses to anomalous live disturbances, " in Proc. Nat. Information Systems Security Conf., 1997.
6. P. Neumann and P. Porras, "Experience with EMERALD to date, " in 1st USENIX Workshop Intrusion Detection and Network Monitoring, Santa Clara, California, pp. 73-80, 1999.
7. G. Vigna and R. A. Kemmerer, "Netstat: A network-based intrusion detection system, " Journal of Computer Security, vol. 7, 1999.
8. B. Chun, J. Lee, and H. Weatherspoon, "Netbait: a distributed worm detection service, " 2003.
9. C. Papadopoulos, R. Lindell, J. Mehringer, A. Hubain, and R. Govindan, "Coback: Coordinated supprebion of simultaneous attacks, " in DARPA Information Survivability Conf. and Expo., vol. 1, pp. 2-13, Washington DC, April 2003.
10. R. Janakiraman and M. Zhang, "Indra: a peer-To-peer approach to network intrusion detection and prevention, " in Proc. 12th IEEE International Workshops Enabling Technologies, 2003.
11. M. Cai, K. Hwang, Y. Kwok, S. Song, and Y. Chen. "Collaborative internet worm Containment, " IEEE Security & Privacy, vol. 3, no. 3, pp. 25-33, 2005.
12. D. Dash, B. Kveton, J. Agosta, E. Schooler, J. Chandrashekar, A. Bachrach, and A. Newman, "When gobip is good: Distributed probabilistic inference for detection of slow network intrusions, " in Proc. Nat. Conf. Artificial Intelligence, vol. 21, pp. 1115. Cambridge MA, London, 2006.
13. C. Fung, O. Baysal, J. Zhang, I. Aib, and R. Boutaba, "Trust management for host-based collaborative intrusion detection, " in 19th IFIP/IEEE Int. Workshop Distributed Systems, 2008.
14. Z. Zhong, L. Ramaswamy, and K. Li, "Alpacas: A large-scale privacy-Aware collaborative anti-spam system, " in INFOCOM 2008 27th Conf. Computer Communications IEEE, pp. 556-564, 2008.
15. D. Polla, J. McConnell, T. Johnson, J. Marconi, D. Tobin, and D. Frincke, "A framework for cooperative intrusion detection", in Proc. 21st Nat. Information Systems Security Conf., pp. 361-373, 1998.
16. V. Yegneswaran, P. Barford, and S. Jha, "Global intrusion detection in the domino overlay system, " in Proc. Network and Distributed System Security Symp., 2004.
17. M. Locasto, J. Parekh, A. Keromytis, and S. Stolfo, "Towards collaborative security and P2P intrusion detection, " in Proc. 6th Ann. IEEE SMC, pp. 333-339, 2005.
18. Ghosh and S. Sen, "Agent-based distributed intrusion alert system, " in Proc. 6th Int. Workshop Distributed Computing, Springer, 2004.
19. Z. Li, Y. Chen, and A. Beach, "Towards scalable and robust distributed intrusion alert fusion with good load balancing, " in Proc. 2006 SIGCOMM Workshop Large-scale Attack Defense, pp. 115-122, ACM New York, NY, USA, 2006.
20. G. Bakos and V. Berk, "Early detection of internet worm activity by metering icmp destination unreachable mebages, " in Proc. SPIE Aerosense, 2002.
21. J. Ullrich. DShield [Online]. Available: http://www.dshield.org/indexd.html.
22. SANS Internet Storm Center (ISC) [Online]. Available: http://isc.sans.org/.
23. F. Cuppens and A. Miege, "Alert correlation in a cooperative intrusion detection framework, " in 2002 IEEE Symp. Security and Privacy, pp. 202-215, 2002
24. What is SmartScreen Filter? [Online]. Available: http://www.microsoft.com/security/filters/smartscreen.aspx.
25. C. V. Zhou, C. Leckie and S. Karunasekera, "Collaborative detection of fastflux phishing domains, " Journal of Networks, vol. 4, pp. 75-84, February 2009.
26. A. Oliner, A. Kulkarni, and A. Aiken, "Community Epidemic Detection Using Time-Correlated Anomalies, " in Proc. 13th Int. Conf. Recent Advances in Intrusion Detection, Springer-Verlag Berlin, Heidelberg, 2010
27. M. Roesch. The SNORT Network Intrusion Detection System [Online]. Available: http://www.snort.org
28. V. Paxson, "BRO: A System for Detecting Network Intruders in Real Time, " in Proc. 7th USENIX Security Symp., 1998.
29. H. Wang, C. Guo, D. Simon, and A. Zugenmaier, "Shield: Vulnerability-Driven Network Filter for Preventing Known Vulnerability Exploits, " in Proc. ACM SIGCOMM Conf., 2004
30. C. Kreibich and J. Crowcroft, "Honeycomb-Creating Intrusion Detection Signatures Using Honeypots, " in ACM Workshop Hot Topics in Networks, Boston, MA, 2003.
31. K. Wang and S. Stolfo, "Anomalous payload-based network intrusion detection, " in Proc. RAID'2004, 2004.
32. K. Kim and B. Karp, "Autograph: Toward Automated Distributed Worm Distribution, " in Proc. USENIX Security Symp., 2004.
33. J. Newsome, B. Karp, and D. Song, "Polygraph: Automatically Generating Signatures for Polymorphic Worms, " in 2005 IEEE Symp. Security and Privacy, Oakland, CA, 2005.
34. Z. Li, M. Sanghi, Y. Chen, M. Kao, and B. Chavez, "Hamsa: Fast Signature Generation for Zero-day Polymorphic Worms with Provable Attack Resistance, " in 2006 IEEE Symp. Security and Privacy, Oakland, CA, 2006.
35. S. Singh, C. Estan, G. Varghese, and S. Savage, "Automated Worm Fingerprinting, " in 6th Symp. Operating Systems Design and Implementation, 2004.
36. M. Cai and K. Hwang, "Fast Internet Worm Containment", in 2005 IEEE Symp. Security and Privacy, 2005
37. R. Sandhu and Z. Xinwen, "Peer-To-Peer Acceb Control Architecture Using Trusted Computing Technology, " in Proc. SACMAT05, Stockholm, Sweden, 2005
38. D. Whyte, E. Kranakis, and P. van Oorschot, "DNS based detection of scanning worms in an enterprise network, " in Proc. 12th Ann. Network and Distributed System Security Symp., 2005
39. Y. Feng, D. Haixin, L. Xing, "Modeling and analyzing interaction between worm and antiworm in network worm spread, " Science in China Series E, vol. 34, no. 8, pp 841-856, 2004
40. L. Zhou, L. Zhang, F. McSherry, N. Immorlica, M. Costa, and S. Chien, "A first look at Peer-To-Peer Worms: Threats and Defense, " in Proc. Peer-To-Peer Systems 4th Int. Workshop, NY, USA, pp. 24-35, 2005
41. F. Jianming, H. Zhiyi, C. Binglan, and C. Jingsong, "Containing Worm Based on Immune-group in Scale-free P2P, " in Proc. 1st Int. Conf. Complex Systems and Applications, Huhhot, China, pp. 945-949, 2006
42. CCITT, "The directory authentication framework. Recommendation, "1988.