Carsten Willems

发表

Chapter 6 – Ourmon: Overview and Installation

Craig A. Schiller, Jim Binkley, David Harley, 2007 .

Chapter 1 – Botnets: A Call to Action

Craig A. Schiller, Jim Binkley, David Harley, 2007 .

Down to the bare metal: using processor features for binary analysis

Carsten Willems, Thorsten Holz, Amit Vasudevan, 2012, ACSAC '12.

Reverse Code Engineering — State of the Art and Countermeasures

Felix C. Freiling, Carsten Willems, 2012, it Inf. Technol..

Chapter 2 – Botnets Overview

Craig A. Schiller, Jim Binkley, Gadi Evron, 2007 .

Practical Timing Side Channel Attacks against Kernel Space ASLR

Carsten Willems, Thorsten Holz, Ralf Hund, 2013, 2013 IEEE Symposium on Security and Privacy.

Internals of Windows Memory Management (not only) for Malware Analysis

Carsten Willems, 2011 .

Das Internet-Malware-Analyse-System (InMAS)

Felix C. Freiling, Carsten Willems, Thorsten Holz, 2011, Datenschutz und Datensicherheit - DuD.

Automated Identification of Cryptographic Primitives in Binary Programs

Carsten Willems, Thorsten Holz, Felix Gröbert, 2011, RAID.

Chapter 8 – IRC and Botnets

Michael Cross, Craig A. Schiller, Jim Binkley, 2007 .

Chapter 7 – Ourmon: Anomaly Detection Tools

Michael Cross, Craig A. Schiller, Jim Binkley, 2007 .

Alternative Botnet C&Cs

Craig A. Schiller, Jim Binkley, Gadi Evron, 2007 .

Chapter 12 – Responding to Botnets

Craig A. Schiller, Jim Binkley, David Harley, 2007 .

A Malware Instruction Set for Behavior-Based Analysis

Carsten Willems, Konrad Rieck, Thorsten Holz, 2010, Sicherheit.

Using memory management to detect and extract illegitimate code for malware analysis

Felix C. Freiling, Carsten Willems, Thorsten Holz, 2012, ACSAC '12.

Analyse und Vergleich von BckR2D2-I und II

Andreas Dewald, Felix C. Freiling, Thomas Schreck, 2012, Sicherheit.

Chapter 9 – Advanced Ourmon Techniques

Michael Cross, Craig A. Schiller, Jim Binkley, 2007 .

Toward Automated Dynamic Malware Analysis Using CWSandbox

Felix C. Freiling, Carsten Willems, Thorsten Holz, 2007, IEEE Secur. Priv..

Learning and Classification of Malware Behavior

Carsten Willems, Konrad Rieck, Thorsten Holz, 2008, DIMVA.

The InMAS Approach

Felix C. Freiling, Carsten Willems, Christian Gorecki, 2010 .

CXPInspector: Hypervisor-Based, Hardware-Assisted System Monitoring

Carsten Willems, Ralf Hund, Thorsten Holz, 2012 .

Don't Trust Satellite Phones: A Security Analysis of Two Satphone Standards

Christof Paar, Carsten Willems, Thorsten Holz, 2012, 2012 IEEE Symposium on Security and Privacy.

Measurement and Analysis of Autonomous Spreading Malware in a University Environment

Carsten Willems, Thorsten Holz, Jan Göbel, 2007, DIMVA.

Chapter 5 – Botnet Detection: Tools and Techniques

Michael Cross, Craig A. Schiller, Jim Binkley, 2007 .

Automatic analysis of malware behavior using machine learning

Carsten Willems, Konrad Rieck, Thorsten Holz, 2011, J. Comput. Secur..

An experimental security analysis of two satphone standards

Christof Paar, Carsten Willems, Thorsten Holz, 2013, TSEC.

Chapter 10 – Using Sandbox Tools for Botnets

Michael Cross, Craig A. Schiller, Jim Binkley, 2007 .

Chapter 4 – Common Botnets

Craig A. Schiller, Jim Binkley, David Harley, 2007 .

Chapter 11 – Intelligence Resources

Craig A. Schiller, Jim Binkley, David Harley, 2007 .

Forschungsberichte der Fakultät IV – Elektrotechnik und Informatik Automatic Analysis of Malware Behavior using Machine Learning

Carsten Willems, Konrad Rieck, Thorsten Holz, 2009 .