A view on current malware behaviors

LEET 2009 - 2nd USENIX Workshop on Large-Scale Exploits and Emergent Threats: Botnets, Spyware, Worms, and More

Volumn , Issue , 2009, Pages

  Bayer, Ulrich ^a   Habibi, Imam ^b   Balzarotti, Davide ^b   Kirda, Engin ^b   Kruegel, Christopher ^c  

^a VIENNA UNIVERSITY OF TECHNOLOGY   (Austria)

^b EURECOM   (France)

^c UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BOTNET; COMPUTER VIRUSES;

CONTROLLED ENVIRONMENT; DYNAMIC MALWARE ANALYSIS; MALICIOUS BEHAVIOR; MALWARE BEHAVIORS; NETWORK TRAFFIC; SECURITY ORGANIZATIONS; SYSTEM MONITORS; SYSTEM SERVICES;

DATA FLOW ANALYSIS;

EID: 85084096603     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. ANUBIS. http://anubis.iseclab.org, 2009.
2. Forum Posting - Detection of Sandboxes. http://www.opensc.ws/snippets/3558-detect-5-different-sandboxes.html, 2009.
3. P. Baecher, M. Koetter, T. Holz, M. Dornseif, and F. Freiling. The Nepenthes Platform: An Efficient Approach To Collect Malware. In Recent Advances in Intrusion Detection (RAID), 2006.
4. U. Bayer, P. M. Comparetti, C. Hlauschek, C. Kruegel, and E. Kirda. Scalable, Behavior-Based Malware Clustering. In Symposium on Network and Distributed System Security (NDSS), 2009.
5. U. Bayer, C. Kruegel, and E. Kirda. TTAnalyze: A Tool for Analyzing Malware. In 15th European Institute for Computer Antivirus Research (EICAR 2006) Annual Conference, April 2006.
6. F. Bellard. Qemu, a Fast and Portable Dynamic Translator. In Usenix Annual Technical Conference, 2005.
7. M. Christodorescu and S. Jha. Static Analysis of Executables to Detect Malicious Patterns. In Usenix Security Symposium, 2003.
8. M. Egele, C. Kruegel, E. Kirda, H. Yin, and D. Song. Dynamic Spyware Analysis. In Usenix Annual Technical Conference, 2007.
9. P. Ferrie. Attacks on more virtual machine emulators.
10. G. Gu, P. Porras, V. Yegneswaran, M. Fong, and W. Lee. BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation. In 16th Usenix Security Symposium, 2007.
11. N. P. Michalis Polychronakis, Panayiotis Mavrommatis. Ghost Turns Zombie: Exploring the Life Cycle of Web-based Malware. In Workshop on Large-Scale Exploits and Emergent Threats (LEET), 2008.
12. Microsoft PECOFF. Microsoft Portable Executable and Common Object File Format Specification. http://www.microsoft.com/whdc/system/platform/firmware/PECOFF.mspx, 2000.
13. D. Moore, C. Shannon, and k claffy. Code-Red: A case study on the spread and victims of an Internet worm. In ACM Internet Measurement Workshop, 2002.
14. A. Moshchuk, T. Bragin, S. Gribble, and H. Levy. A Crawler-based Study of Spyware on the Web. In Network and Distributed Systems Security Symposium (NDSS), 2006.
15. T. Ormandy. An empirical study into the security exposure to hosts of hostile virtualized environments.
16. N. Provos, P. Mavrommatis, M. Rajab, and F. Monrose. All Your iFrames Point to Us. In Usenix Security Symposium, 2008.
17. M. Rajab, J. Zarfoss, F. Monrose, and A. Terzis. A Multifaceted Approach to Understanding the Botnet Phenomenon. In Internet Measurement Conference (IMC), 2006.
18. L. Spitzner. Honeypots: Tracking Hackers. Addison-Wesley, 2002.
19. H. Yin, D. Song, M. Egele, C. Kruegel, and E. Kirda. Panorama: Capturing System-wide Information Flow for Malware Detection and Analysis. In ACM Conference on Computer and Communication Security (CCS), 2007.