Large-Scale Detection and Measurement of Malicious Content - Couverture souple

Göbel, Jan Gerrit

Couverture souple

ISBN 10 : 383812720X ISBN 13 : 9783838127200

Editeur : Sudwestdeutscher Verlag Fur Hochschulschriften AG, 2011

Synopsis

Many different network and host-based security solutions have been developed in the past to counter the threat of autonomously spreading malware. Among the most common detection techniques for such attacks are network traffic analysis and the so-called honeypots. In this thesis, we introduce two new malware detection sensors that make use of the above mentioned techniques. The first sensor called Rishi, passively monitors network traffic to automatically detect bot infected machines. The second sensor called Amun follows the concept of honeypots and detects malware through the emulation of vulnerabilities in network services that are commonly exploited. Both sensors were operated for two years and collected valuable data on autonomously spreading malware in the Internet.From this data we were able to, for example, study the change in exploit behavior and derive predictions about preferred targets of todays' malware.

A propos du livre

À propos de l'auteur

He studied computer since at RWTH Aachen University and wrote his diploma thesis on "Advanced Honeynet-based Intrusion Detection". Finally, he finished his Ph.D. at University of Mannheim, researching in the area of honeypots, botnets, spam, and malware analysis.

Détails de l'édition

• Éditeur: Sudwestdeutscher Verlag Fur Hochschulschriften AG
• Date d'édition: 2011
• Langue: anglais
• ISBN 10: 383812720X
• ISBN 13: 9783838127200
• Reliure: Broché
• Nombre de pages: 236
• Coordonnées du fabricant: non disponible
• Personne responsable: non disponible