Malware pandemics - Revision history

Eric.freyssinet at 14:35, 31 July 2015

2015-07-31T14:35:43Z

← Older revision		Revision as of 14:35, 31 July 2015
Line 5:		Line 5:
	\|Date=2010-09-01		\|Date=2010-09-01
	\|Editor=Office of Naval Research		\|Editor=Office of Naval Research
	\|Link=http://www.dtic.mil/cgi-bin/GetTRDoc?AD=ADA531166 ~~www.dtic.mil~~		\|Link=http://www.dtic.mil/cgi-bin/GetTRDoc?AD=ADA531166
	\|Author=Philip Porras, Hassen Saidi, Vinod Yegneswaran,		\|Author=Philip Porras, Hassen Saidi, Vinod Yegneswaran,
	\|Abstract=This final technical report summarizes the research activities and technical results produced by SHI International for the ONR research project. The key objective of this project is to develop a principled approach toward understanding the structural and dynamic properties of large-scale malware pandemics in the Internet. In particular, there is an emphasis on studying the structural properties		\|Abstract=This final technical report summarizes the research activities and technical results produced by SHI International for the ONR research project. The key objective of this project is to develop a principled approach toward understanding the structural and dynamic properties of large-scale malware pandemics in the Internet. In particular, there is an emphasis on studying the structural properties

Eric.freyssinet at 14:35, 31 July 2015

2015-07-31T14:35:21Z

← Older revision		Revision as of 14:35, 31 July 2015
Line 1:		Line 1:
	{{Publication		{{Publication
	\|~~Image~~=		\|Botnet=Conficker, IKee.B (botnet),
	\|~~Legend~~=		\|Malware=Conficker (bot), IKee.B,
	\|~~Document~~=		\|Year=2010
	\|~~Licence~~=		\|Date=2010-09-01
	\|~~Video~~=		\|Editor=Office of Naval Research
	\|Link=http://www.dtic.mil/cgi-bin/GetTRDoc?AD=ADA531166 www.dtic.mil		\|Link=http://www.dtic.mil/cgi-bin/GetTRDoc?AD=ADA531166 www.dtic.mil
	\|Author=Philip Porras, Hassen Saidi, Vinod Yegneswaran,		\|Author=Philip Porras, Hassen Saidi, Vinod Yegneswaran,
	~~\|NomRevue=Office of Naval Research Final Report for 2010~~		\|Abstract=This final technical report summarizes the research activities and technical results produced by SHI International for the ONR research project. The key objective of this project is to develop a principled approach toward understanding the structural and dynamic properties of large-scale malware pandemics in the Internet. In particular, there is an emphasis on studying the structural properties
	~~\|Date=1 septembre 2010~~
	~~\|Editor=Office of Naval Research~~
	~~\|Year=2010~~
	~~\|Page=~~
	\|Abstract=This final technical report summarizes the research activities and technical results produced by SHI
	International for the ONR research project. The key objective of this project is to develop a principled approach toward understanding the structural and dynamic properties of large-scale malware
	pandemics in the Internet. In particular, there is an emphasis on studying the structural properties
	(network address translation (NATs), proxies, dynamic host configuration protocol DHCP effects)		(network address translation (NATs), proxies, dynamic host configuration protocol DHCP effects)
	and dynamic properties (pandemic evolution), and how these properties evolve during the different		and dynamic properties (pandemic evolution), and how these properties evolve during the different
Line 28:		Line 21:
	latest offerings in smartphone malware. and its implications demonstrate the potential extension of		latest offerings in smartphone malware. and its implications demonstrate the potential extension of
	crimeware to this valuable new frontier of handheld consumer devices.		crimeware to this valuable new frontier of handheld consumer devices.
	\|~~Botnet~~=~~Conficker, IKee.B (botnet),~~		\|Document=
	\|~~Malware~~=~~Conficker (bot), IKee.B,~~		\|Licence=
			\|Video=
			\|NomRevue=Office of Naval Research Final Report for 2010
			\|Page=
	}}		}}

Eric.freyssinet: 1 revision imported

2015-02-07T14:22:38Z

1 revision imported

← Older revision		Revision as of 14:22, 7 February 2015
(No difference)

Eric.freyssinet at 15:13, 29 January 2012

2012-01-29T15:13:48Z

New page

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=http://www.dtic.mil/cgi-bin/GetTRDoc?AD=ADA531166 www.dtic.mil
|Author=Philip Porras, Hassen Saidi, Vinod Yegneswaran,
|NomRevue=Office of Naval Research Final Report for 2010
|Date=1 septembre 2010
|Editor=Office of Naval Research
|Year=2010
|Page=
|Abstract=This final technical report summarizes the research activities and technical results produced by SHI
International for the ONR research project. The key objective of this project is to develop a principled approach toward understanding the structural and dynamic properties of large-scale malware
pandemics in the Internet. In particular, there is an emphasis on studying the structural properties
(network address translation (NATs), proxies, dynamic host configuration protocol DHCP effects)
and dynamic properties (pandemic evolution), and how these properties evolve during the different
phases of a malware life cycle. We conducted an in-depth reverse engineering of the peer-to-peer
(P2P) protocol of Conficker and published this in the form of a web report [28]. Our efforts toward
developing now techniques for tracking the structural properties of the Conficker population (sucfa
as percent of NAT and DHCP hosts) and building epidemic models for predicting the long-term
influence of worms such as Conficker are detailed in this report. We also conducted an in-depth
analysis of the iKee.B (dull) Apple iPhone bot client, captured on November 25, 2009. This mobile
botnet was released throughout several countries in Europe, with the initial purpose of coordinating
its infected iPhones via a Lithuanian botnet server. Our report details the logic and function of
iKee's scripts, its configuration files, and its two binary executables, which we have reverse engineered to an approximation of their C source code implementation. The iKee bot is one of the
latest offerings in smartphone malware. and its implications demonstrate the potential extension of
crimeware to this valuable new frontier of handheld consumer devices.
|Botnet=Conficker, IKee.B (botnet),
|Malware=Conficker (bot), IKee.B,
}}