SGNET: a worldwide deployable framework to support the analysis of malware threat models

(Publication) Google search: [1]

SGNET: a worldwide deployable framework to support the analysis of malware threat models
Botnet
Malware
Botnet/malware group
Exploit kits
Services
Feature
Distribution vector
Target
Origin
Campaign
Operation/Working group
Vulnerability
CCProtocol
Date	2008 / 2008
Editor/Conference
Link	http://www.eurecom.fr/fr/publication/2445 www.eurecom.fr (www.eurecom.fr Archive copy)
Author	Marc Dacier, Corrado Leita
Type

Abstract

“ The dependability community has expressed a growing interest in the recent years for the effects of malicious, external, operational faults in computing systems, ie. intrusions. The term intrusion tolerance has been introduced to emphasize the need to go beyond what classical fault tolerant systems were able to offer. Unfortunately, as opposed to well understood accidental faults, the domain is still lacking sound data sets and models to offer rationales in the design of intrusion tolerant solutions. In this paper, we describe a framework similar in its spirit to so called honeyfarms but built in a way that makes its large-scale deployment easily feasible. Furthermore, it offers a very rich level of interaction with the attackers without suffering from the drawbacks of expensive high interaction systems. The system is described, a prototype is presented as well as some preliminary results that highlight the feasibility as well as

the usefulness of the approach.

Bibtex

 @misc{2008BFR962,
   editor = {},
   author = {Marc Dacier, Corrado Leita},
   title = {SGNET: a worldwide deployable framework to support the analysis of malware threat models},
   date = {19},
   month = Apr,
   year = {2008},
   howpublished = {\url{http://www.eurecom.fr/fr/publication/2445 www.eurecom.fr}},
 }