Putting out a hit: Crowdsourcing malware installs

5th USENIX Workshop on Offensive Technologies, WOOT 2011

Volumn , Issue , 2011, Pages

  Kanich, Chris ^a   Checkoway, Stephen ^a   Mowery, Keaton ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMMERCE; COMPUTER VIRUSES; CROWDSOURCING;

ANTI VIRUS; BROWSER SECURITY; HUMAN INTELLIGENCE; MECHANICAL TURKS; MONETARY REWARDS; PLUG-INS;

SALES;

EID: 85084160426     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (30)

1. Mustafa Acer and Collin Jackson. Critical vulnerability in browser security metrics. In Collin Jackson, editor, Proceedings of W2SP 2010. IEEE Computer Society, May 2010.
2. Gaurav Aggarwal, Elie Bursztein, Collin Jackson, and Dan Boneh. An analysis of private browsing modes in modern browsers. In Ian Goldberg, editor, Proceedings of USENIX Security 2010. USENIX, August 2010.
3. Amazon Mechanical Turk General Policies. https://www.mturk.com/mturk/help?helpPage=policies.
4. Amazon Mechanical Turk Participation Agreement, April 2009. https://www.mturk.com/mturk/conditionsofuse.
5. David W. Baker, Steven M. Christey, William H. Hill, and David E. Mann. The development of a common enumeration of vulnerabilities and exposures. In Deborah Frincke and Ming-Yuh Huang, editors, Proceedings of RAID 1999. IBM BRS/SANS, September 1999.
6. Adam Barth, Collin Jackson, and John C. Mitchell. Robust defenses for cross-site request forgery. In Paul Syverson and Somesh Jha, editors, Proceedings of CCS 2008. ACM, October 2008.
7. Juan Caballero, Chris Grier, Christian Kreibich, and Vern Paxson. Measuring pay-per-install: The commoditization of malware distribution. In David Wagner, editor, Proceedings of USENIX Security 2011. USENIX, August 2011. To appear.
8. Lydia B. Chilton, John J. Horton, Robert C Miller, and Shiri Azenkot. Task search in a human computation market. In Raman Chandrasekar et al., editor, Proceedings of HCOMP 2010, pages 1–9. ACM, July 2010.
9. Nicolas Christin, Serge Egelman, Timothy Vidas, and Jens Grossklags. It’s all about the Benjamins: An empirical study on incentivizing users to ignore security advice. In George Danezis, editor, Proceedings of FC 2011. IFCA, February 2011.
10. Jia Deng, Wei Dong, Richard Socher, Li jia Li, Kai Li, and Li Fei-fei. Imagenet: A large-scale hierarchical image database. In Irfan Essa, Sing Bing Kang, and Marc Pollefeys, editors, Proceedings of CVPR 2009. IEEE Computer Society, June 2009.
11. Peter Eckersley. How unique is your browser? In Mikhail Atallah and Nick Hopper, editors, Proceedings of PETS 2010, pages 1–18. Springer, July 2010.
12. Ali Farhadi, Ian Endres, Derek Hoiem, and David Forsyth. Describing objects by their attributes. In Irfan Essa, Sing Bing Kang, and Marc Pollefeys, editors, Proceedings of CVPR 2009. IEEE Computer Society, June 2009.
13. Jason Franklin, Vern Paxson, Adrian Perrig, and Stefan Savage. An inquiry into the nature and causes of the wealth of internet miscreants. In Proceedings of CCS 2007, pages 375–388. ACM, October 2007.
14. Eric Gerds. Browser plugin detection with PluginDetect, March 2011. http://www.pinlady.net/PluginDetect/.
15. Lin-Shung Huang, Eric Y. Chen, Adam Barth, Eric Rescorla, and Collin Jackson. Talking to yourself for fun and profit. In Helen J. Wang, editor, Proceedings of W2SP 2011. IEEE Computer Society, May 2011.
16. Panagiotis G. Ipeirotis. Demographics of mechanical turk. CeDER Working Papers CeDER-10-01, Stern School of Business, March 2010.
17. Panos Ipeirotis. Mechanical turk: Now with 40.92% spam. http://behind-the-enemy-lines.blogspot.com/2010/12/mechanical-turk-now-with-4092-spam.html, December 2010.
18. Collin Jackson, Adam Barth, Andrew Bortz, Wei-dong Shao, and Dan Boneh. Protecting browsers from DNS rebinding attacks. In Sabrina De Capitani di Vimercati and Paul Syverson, editors, Proceedings of CCS 2007. ACM, October 2007.
19. Kimberly. Cpalead sneaks into Amazon Mechanical Turk marketplace, August 2010. Online: http://stopmalvertising.com/spamscams/cpalead-sneaks-into-amazonmechanical-turk-marketplace.html.
20. Nicholas Kolakowski. Amazon.com advocates crowdsourcing, Mechanical Turk in NYC. eWeek.com, November 2009.
21. Gabriele Paolacci, Jesse Chandler, and Panagiotis G. Ipeirotis. Running experiments on amazon mechanical turk. Judgment and Decision Making, 5(5), August 2010.
22. Jason Pontin. Artificial intelligence, with help from the humans. New York Times, March 2007.
23. Joel Ross, Lilly Irani, M. Six Silberman Andrew Zaldivar, and Bill Tomlinson. Who are the crowdworkers?: Shifting demographics in Mechanical Turk. In Proceedings of CHI EA 2010, pages 2863–2872. ACM, April 2010.
24. Paul Ruvolo, Jacob Whitehill, and Javier R. Movellan. Exploiting structure in crowdsourcing tasks via latent factor models. Technical Report TR2010.01, Machine Perception Laboratory, 2010.
25. M. Six Silberman, Lilly Irani, and Joel Ross. Ethics and tactics of professional crowdwork. XRDS, 17 (2):39–43, December 2010.
26. Kevin Stevens. The underground economy of the pay-per-install (PPI) business, September 2009. http://www.secureworks.com/research/threats/ppi.
27. Paul Stone. Next generation clickjacking. Presented at BlackHat Europe 2010, April 2010.
28. Peter Welinder, Steve Branson, Takeshi Mita, Catherine Wah, Florian Schroff, Serge Belongie, and Pietro Perona. Caltech-UCSD birds 200. Technical Report CNS-TR-2010-001, California Institute of Technology, 2010.
29. Gilbert Wondracek, Thorsten Holz, Christian Plazer, Engin Kirda, and Christopher Kruegel. Is the internet for porn? an insight into the ouline adult industry. In Tyler Moore, editor, Proceedings of WEIS 2010. ACM, June 2010.
30. Qing Zhang, Thomas Ristenpart, Stefan Savage, and Geoffrey M. Voelker. Got traffic? An evaluation of click traffic providers. In Carlos Castillo et al., editor, Proceedings of WebQuality 2011. WICOW/AIRWeb, March 2011.