Effective and Efficient Malware Detection at the End Host
暂无分享,去创建一个
Christopher Krügel | Engin Kirda | XiaoFeng Wang | Xiao-yong Zhou | Paolo Milani Comparetti | Clemens Kolbitsch | Christopher Krügel | Xiaofeng Wang | E. Kirda | Clemens Kolbitsch | Xiao-yong Zhou | P. M. Comparetti | C. Kolbitsch
[1] A. Turing. On Computable Numbers, with an Application to the Entscheidungsproblem. , 1937 .
[2] James P Anderson,et al. Computer Security Technology Planning Study , 1972 .
[3] Peter J. Denning,et al. Certification of programs for secure information flow , 1977, CACM.
[4] Jeffrey D. Ullman,et al. Introduction to Automata Theory, Languages and Computation , 1979 .
[5] B. D. GOLD,et al. A security retrofit of VM/370 , 1979, 1979 International Workshop on Managing Requirements Knowledge (MARK).
[6] Richard A. Kemmerer,et al. Shared resource matrix methodology: an approach to identifying storage and timing channels , 1983, TOCS.
[7] Joseph Robert Horgan,et al. Dynamic program slicing , 1990, PLDI '90.
[8] Jonathan T. Trostle. Multiple Trojan horse systems and covert channel analysis , 1991, Proceedings Computer Security Foundations Workshop IV.
[9] Matt Blaze,et al. A cryptographic file system for UNIX , 1993, CCS '93.
[10] Ira S. Moskowitz,et al. A pump for rapid, reliable, secure communication , 1993, CCS '93.
[11] Randy Browne. An entropy conservation law for testing the completeness of covert channel analysis , 1994, CCS '94.
[12] Ira S. Moskowitz,et al. Simple timing channels , 1994, Proceedings of 1994 IEEE Computer Society Symposium on Research in Security and Privacy.
[13] David W. Binkley,et al. Program slicing , 2008, 2008 Frontiers of Software Maintenance.
[14] Stephanie Forrest,et al. A sense of self for Unix processes , 1996, Proceedings 1996 IEEE Symposium on Security and Privacy.
[15] Scott Devine,et al. Disco: running commodity operating systems on scalable multiprocessors , 1997, TOCS.
[16] Vern Paxson,et al. Bro: a system for detecting network intruders in real-time , 1998, Comput. Networks.
[17] Andrew C. Myers,et al. JFlow: practical mostly-static information flow control , 1999, POPL '99.
[18] Mendel Rosenblum,et al. Cellular disco: resource management using virtual clusters on shared-memory multiprocessors , 2000, TOCS.
[19] David A. Wagner,et al. Intrusion detection via static analysis , 2001, Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001.
[20] Derek Bruening,et al. Secure Execution via Program Shepherding , 2002, USENIX Security Symposium.
[21] David A. Wagner,et al. Tweakable Block Ciphers , 2002, CRYPTO.
[22] L. Spitzner,et al. Honeypots: Tracking Hackers , 2002 .
[23] Carl A. Waldspurger,et al. Memory resource management in VMware ESX server , 2002, OSDI '02.
[24] Tal Garfinkel,et al. Terra: a virtual machine-based platform for trusted computing , 2003, SOSP '03.
[25] Somesh Jha,et al. Static Analysis of Executables to Detect Malicious Patterns , 2003, USENIX Security Symposium.
[26] Tal Garfinkel,et al. A Virtual Machine Introspection Based Architecture for Intrusion Detection , 2003, NDSS.
[27] Xiangyu Zhang,et al. Precise dynamic slicing algorithms , 2003, 25th International Conference on Software Engineering, 2003. Proceedings..
[28] Trent Jaeger,et al. Analyzing Integrity Protection in the SELinux Example Policy , 2003, USENIX Security Symposium.
[29] 王莹. 使用Security—Enhanced Linux增强系统安全 , 2003 .
[30] Trent Jaeger,et al. Design and Implementation of a TCG-based Integrity Measurement Architecture , 2004, USENIX Security Symposium.
[31] Michael Pilato. Version Control with Subversion , 2004 .
[32] Salvatore J. Stolfo,et al. Anomalous Payload-Based Network Intrusion Detection , 2004, RAID.
[33] George Varghese,et al. Automated Worm Fingerprinting , 2004, OSDI.
[34] Christopher Krügel,et al. Detecting kernel-level rootkits through binary analysis , 2004, 20th Annual Computer Security Applications Conference.
[35] Somesh Jha,et al. Testing malware detectors , 2004, ISSTA '04.
[36] Stefan Katzenbeisser,et al. Detecting Malicious Code by Model Checking , 2005, DIMVA.
[37] Somesh Jha,et al. Semantics-aware malware detection , 2005, 2005 IEEE Symposium on Security and Privacy (S&P'05).
[38] Christopher Krügel,et al. Polymorphic Worm Detection Using Structural Information of Executables , 2005, RAID.
[39] Yi-Min Wang,et al. Detecting stealth software with Strider GhostBuster , 2005, 2005 International Conference on Dependable Systems and Networks (DSN'05).
[40] Tal Garfinkel,et al. When Virtual Is Harder than Real: Security Challenges in Virtual Machine Based Computing Environments , 2005, HotOS.
[41] James Newsome,et al. Polygraph: automatically generating signatures for polymorphic worms , 2005, 2005 IEEE Symposium on Security and Privacy (S&P'05).
[42] Zhenkai Liang,et al. One-Way Isolation: An Effective Approach for Realizing Safe Execution Environments , 2005, NDSS.
[43] Greg Hoglund,et al. Rootkits: Subverting the Windows Kernel , 2005 .
[44] Colin Percival. CACHE MISSING FOR FUN AND PROFIT , 2005 .
[45] Peter Szor,et al. The Art of Computer Virus Research and Defense , 2005 .
[46] Ke Wang,et al. Fileprints: identifying file types by n-gram analysis , 2005, Proceedings from the Sixth Annual IEEE SMC Information Assurance Workshop.
[47] Christopher Krügel,et al. Automating Mimicry Attacks Using Static Binary Analysis , 2005, USENIX Security Symposium.
[48] Wenke Lee,et al. Polymorphic Blending Attacks , 2006, USENIX Security Symposium.
[49] U. Bayer,et al. TTAnalyze: A Tool for Analyzing Malware , 2006 .
[50] Miguel Castro,et al. Securing software by enforcing data-flow integrity , 2006, OSDI '06.
[51] Amit Vasudevan,et al. Cobra: fine-grained malware analysis using stealth localized-executions , 2006, 2006 IEEE Symposium on Security and Privacy (S&P'06).
[52] Ruby B. Lee,et al. Covert and Side Channels Due to Processor Architecture , 2006, 2006 22nd Annual Computer Security Applications Conference (ACSAC'06).
[53] Christopher Krügel,et al. Behavior-based Spyware Detection , 2006, USENIX Security Symposium.
[54] Hao Wang,et al. NetSpy: Automatic Generation of Spyware Signatures for NIDS , 2006, 2006 22nd Annual Computer Security Applications Conference (ACSAC'06).
[55] Mattia Monga,et al. Detecting Self-mutating Malware Using Control-Flow Graph Matching , 2006, DIMVA.
[56] Felix C. Freiling,et al. The Nepenthes Platform: An Efficient Approach to Collect Malware , 2006, RAID.
[57] Andreas Terzis,et al. A multifaceted approach to understanding the botnet phenomenon , 2006, IMC '06.
[58] Wenke Lee,et al. PolyUnpack: Automating the Hidden-Code Extraction of Unpack-Executing Malware , 2006, 2006 22nd Annual Computer Security Applications Conference (ACSAC'06).
[59] Steven D. Gribble,et al. A Crawler-based Study of Spyware in the Web , 2006, NDSS.
[60] Xuxian Jiang,et al. Automated Web Patrol with Strider HoneyMonkeys: Finding Web Sites That Exploit Browser Vulnerabilities , 2006, NDSS.
[61] Salvatore J. Stolfo,et al. A Study of Malcode-Bearing Documents , 2007, DIMVA.
[62] Guofei Gu,et al. A Taxonomy of Botnet Structures , 2007, Twenty-Third Annual Computer Security Applications Conference (ACSAC 2007).
[63] Zhuoqing Morley Mao,et al. Automated Classification and Analysis of Internet Malware , 2007, RAID.
[64] Arati Baliga,et al. Lurking in the Shadows: Identifying Systemic Threats to Kernel Data , 2007, 2007 IEEE Symposium on Security and Privacy (SP '07).
[65] Dawn Song,et al. Rosetta: Extracting Protocol Semantics using Binary Analysis with Applications to Protocol Replay and NATRewriting , 2007 .
[66] Heng Yin,et al. Dynamic Spyware Analysis , 2007, USENIX Annual Technical Conference.
[67] Heng Yin,et al. Panorama: capturing system-wide information flow for malware detection and analysis , 2007, CCS '07.
[68] Christopher Krügel,et al. Limits of Static Analysis for Malware Detection , 2007, Twenty-Third Annual Computer Security Applications Conference (ACSAC 2007).
[69] Christopher Krügel,et al. Detecting System Emulators , 2007, ISC.
[70] Adrian Perrig,et al. SecVisor: a tiny hypervisor to provide lifetime kernel code integrity for commodity OSes , 2007, SOSP.
[71] John C. Mitchell,et al. Characterizing Bots' Remote Control Behavior , 2007, DIMVA.
[72] Dinakar Dhurjati,et al. Secure virtual architecture: a safe execution environment for commodity operating systems , 2007, SOSP.
[73] Felix C. Freiling,et al. Toward Automated Dynamic Malware Analysis Using CWSandbox , 2007, IEEE Secur. Priv..
[74] Michael W. Hicks,et al. Automated detection of persistent kernel control-flow attacks , 2007, CCS '07.
[75] Vinod Yegneswaran,et al. BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation , 2007, USENIX Security Symposium.
[76] Hovav Shacham,et al. The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86) , 2007, CCS '07.
[77] Bruce Schneier,et al. Defeating Encrypted and Deniable File Systems: TrueCrypt v5.1a and the Case of the Tattling OS and Applications , 2008, HotSec.
[78] Arvind Seshadri,et al. Attacking , Repairing , and Verifying SecVisor : A Retrospective on the Security of a Hypervisor , 2008 .
[79] Niels Provos,et al. Ghost Turns Zombie: Exploring the Life Cycle of Web-based Malware , 2008, LEET.
[80] Michael K. Reiter,et al. Traffic Aggregation for Malware Detection , 2008, DIMVA.
[81] Xuxian Jiang,et al. Guest-Transparent Prevention of Kernel Rootkits with VMM-Based Memory Shadowing , 2008, RAID.
[82] Zhenkai Liang,et al. AGIS: Towards automatic generation of infection signatures , 2008, 2008 IEEE International Conference on Dependable Systems and Networks With FTCS and DCC (DSN).
[83] Samuel T. King,et al. Digging for Data Structures , 2008, OSDI.
[84] Niels Provos,et al. All Your iFRAMEs Point to Us , 2008, USENIX Security Symposium.
[85] Somesh Jha,et al. A Layered Architecture for Detecting Malicious Behaviors , 2008, RAID.
[86] Niels Provos,et al. To Catch a Predator: A Natural Language Approach for Eliciting Malicious Payloads , 2008, USENIX Security Symposium.
[87] Carsten Willems,et al. Learning and Classification of Malware Behavior , 2008, DIMVA.
[88] Hovav Shacham,et al. When good instructions go bad: generalizing return-oriented programming to RISC , 2008, CCS.
[89] Xiaoxin Chen,et al. Overshadow: a virtualization-based approach to retrofitting protection in commodity operating systems , 2008, ASPLOS.
[90] Somesh Jha,et al. Mining specifications of malicious behavior , 2008, ISEC '08.
[91] Guofei Gu,et al. BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection , 2008, USENIX Security Symposium.
[92] Mihai Budiu,et al. Control-flow integrity principles, implementations, and applications , 2009, TSEC.
[93] Ariel J. Feldman,et al. Lest we remember: cold-boot attacks on encryption keys , 2008, CACM.
[94] Christopher Krügel,et al. Scalable, Behavior-Based Malware Clustering , 2009, NDSS.
[95] Matt Zandstra,et al. Version Control with Subversion , 2010 .