DIMVA
2010
13 years 4 months ago
2010
Abstract. In the escalating arms race between malicious code and security tools designed to analyze it, detect it or mitigate its impact, malicious code running inside the operatin...
DIMVA
2009
13 years 5 months ago
2009
DIMVA
2009
13 years 5 months ago
2009
Drive-by download attacks are among the most common methods for spreading malware today. These attacks typically exploit memory corruption vulnerabilities in web browsers and brows...
DIMVA
2009
13 years 5 months ago
2009
DIMVA
2009
13 years 5 months ago
2009
Remote code-injection attacks are one of the most frequently used attacking vectors in computer security. To detect and analyze injected code (often called shellcode), some researc...
DIMVA
2009
13 years 5 months ago
2009
Abstract. Many systems have been introduced to detect software intrusions by comparing the outputs and behavior of diverse replicas when they are processing the same, potentially m...
DIMVA
2009
13 years 5 months ago
2009
We demonstrate that the browser implementation used at a host can be passively identified with significant precision and recall, using only coarse summaries of web traffic to and f...
DIMVA
2009
13 years 5 months ago
2009
DIMVA
2009
13 years 5 months ago
2009
The use of dynamic access control policies for threat response adapts local response decisions to high level system constraints. However, security policies are often carefully tigh...
DIMVA
2009
13 years 5 months ago
2009
Abstract. The Asprox infection weaves a complex chain of dependencies involving bots that perform SQL injections on vulnerable web servers, and visitors whose machines get compromi...