Malware distributed collection and pre-classification system using honeypot technology

Nenhuma Miniatura disponível

Data

2009-06-15

Autores

Orientador

Coorientador

Pós-graduação

Curso de graduação

Título da Revista

ISSN da Revista

Título de Volume

Editor

Tipo

Trabalho apresentado em evento

Direito de acesso

Acesso abertoAcesso Aberto

Resumo

Malware has become a major threat in the last years due to the ease of spread through the Internet. Malware detection has become difficult with the use of compression, polymorphic methods and techniques to detect and disable security software. Those and other obfuscation techniques pose a problem for detection and classification schemes that analyze malware behavior. In this paper we propose a distributed architecture to improve malware collection using different honeypot technologies to increase the variety of malware collected. We also present a daemon tool developed to grab malware distributed through spam and a pre-classification technique that uses antivirus technology to separate malware in generic classes. © 2009 SPIE.

Descrição

Palavras-chave

Honeyclients, Honeypots, Information systems security, Malicious software, Malware collection, Computer software, Information management, Information systems, Internet, Intrusion detection, Mining, Computer crime

Idioma

Inglês

Como citar

Proceedings of SPIE - The International Society for Optical Engineering, v. 7344.

URI

http://hdl.handle.net/11449/71036

Itens relacionados

Financiadores

Coleções

Artigos