2018 13th International Conference on Malicious and Unwanted Software (MALWARE)最新文献_第2页

Android Malware Detection Using Step-Size Based Multi-layered Vector Space Models 基于步长多层向量空间模型的Android恶意软件检测

2018 13th International Conference on Malicious and Unwanted Software (MALWARE) Pub Date : 2018-10-01 DOI: 10.1109/MALWARE.2018.8659372

Colby Parker, J. McDonald, T. Johnsten, Ryan G. Benton

{"title":"Android Malware Detection Using Step-Size Based Multi-layered Vector Space Models","authors":"Colby Parker, J. McDonald, T. Johnsten, Ryan G. Benton","doi":"10.1109/MALWARE.2018.8659372","DOIUrl":"https://doi.org/10.1109/MALWARE.2018.8659372","url":null,"abstract":"With computer software becoming more important and prolific in today’s world, malicious software (malware) continues to be one of its greatest security threats. Alongside this trend, smartphones and mobile devices have become the prominent method for accessing the Internet and its vast resources of information and business applications. With the amount and variety of Android based devices increasing daily, the need for better and more accurate malware detection approaches for the Android platform also increases. In this paper, we explore whether a data mining technique originally developed to detect malware on a Windows operating system can be utilized to detect malware in Android mobile devices. In addition, we propose a novel algorithm for detecting malware on Android that relies on step sizes and a simplified multi-layer vector space (MLVS) model. We compare the effectiveness of these two techniques, with the goal of determining optimal step sizes for our modified MLVS (MMLVS) approach to detect Android malware. Our results show that the two methods are able to correctly classify the samples as malware or uninfected with strong accuracy. In addition, we identify key elements that need to be address to permit further improvement within Android environments.","PeriodicalId":200928,"journal":{"name":"2018 13th International Conference on Malicious and Unwanted Software (MALWARE)","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122082485","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Resilience of Pruned Neural Network Against Poisoning Attack 修剪神经网络抗中毒攻击的弹性

2018 13th International Conference on Malicious and Unwanted Software (MALWARE) Pub Date : 2018-10-01 DOI: 10.1109/MALWARE.2018.8659362

Bingyin Zhao, Yingjie Lao

引用次数: 7

PRAST: Using Logic Bombs to Exploit the Android Permission Model and a Module Based Solution PRAST:利用逻辑炸弹开发Android权限模型及基于模块的解决方案

2018 13th International Conference on Malicious and Unwanted Software (MALWARE) Pub Date : 2018-10-01 DOI: 10.1109/MALWARE.2018.8659369

Ramon P. Medina, Elijah B. Neundorfer, Radhouane Chouchane, Alfredo J. Perez

{"title":"PRAST: Using Logic Bombs to Exploit the Android Permission Model and a Module Based Solution","authors":"Ramon P. Medina, Elijah B. Neundorfer, Radhouane Chouchane, Alfredo J. Perez","doi":"10.1109/MALWARE.2018.8659369","DOIUrl":"https://doi.org/10.1109/MALWARE.2018.8659369","url":null,"abstract":"Android security implements a permission model to protect a user’s most sensitive data. These permissions regulate an app’s access to different aspects of the device, however, a fatal flaw of Android’s permission model is that it relies on the discretion of the user to determine which apps are granted permissions and which are not with limited assistance in their choice from the device. As a result, a specialized type of malware known as a logic bomb has affected Android devices. These logic bombs are designed to execute malicious code when activated by triggers, and can be designed to take advantage of users who poorly vet their applications or even hide themselves inside applications that appear to be benign. On Android, logic bombs usually carry out malicious intent by violating permissions, using a permission for some activity the user never intended. We have found 18 different permissions that applications can violate to carry out some form of malicious intent, and have developed an app, called HyenaDroid, to violate each of these permissions and create logic bombs. This provides evidence that the current Android security revolving around permissions is in need of either an update to the permissions model, or an additional system to assist the user with navigating the Android permissions model. Our research also proposes such a system, PRAST. PRAST is designed as a modular system, combining a level of efficiency that can be run during the download on an Android device, along with the effectiveness and accuracy of external analysis systems.","PeriodicalId":200928,"journal":{"name":"2018 13th International Conference on Malicious and Unwanted Software (MALWARE)","volume":"66 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114909135","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

An adversarial coupon-collector model of asynchronous moving-target defense against botnet reconnaissance* 针对僵尸网络侦察的异步移动目标防御的对抗性优惠券收集器模型*

2018 13th International Conference on Malicious and Unwanted Software (MALWARE) Pub Date : 2018-10-01 DOI: 10.1109/MALWARE.2018.8659359

G. Kesidis, Y. Shan, D. Fleck, A. Stavrou, T. Konstantopoulos

引用次数: 2

MALWARE 2018 Committees 恶意软件2018委员会

2018 13th International Conference on Malicious and Unwanted Software (MALWARE) Pub Date : 2018-10-01 DOI: 10.1109/malware.2018.8659352

引用次数: 0

Unmasking Criminal Enterprises: An Analysis of Bitcoin Transactions 揭露犯罪企业:比特币交易分析

2018 13th International Conference on Malicious and Unwanted Software (MALWARE) Pub Date : 2018-10-01 DOI: 10.1109/MALWARE.2018.8659357

Jon Oakley, C. Worley, Lu Yu, R. Brooks, A. Skjellum

引用次数: 2

[Copyright notice] (版权)

2018 13th International Conference on Malicious and Unwanted Software (MALWARE) Pub Date : 2018-10-01 DOI: 10.1109/malware.2018.8659353

引用次数: 0

METICS: A Holistic Cyber Physical System Model for IEEE 14-bus Power System Security METICS: IEEE 14总线电力系统安全的整体网络物理系统模型

2018 13th International Conference on Malicious and Unwanted Software (MALWARE) Pub Date : 2018-10-01 DOI: 10.1109/MALWARE.2018.8659367

Ananth A. Jillepalli, D. Leon, B. Johnson, Y. Chakhchoukh, I. A. Oyewumi, M. Ashrafuzzaman, Frederick T. Sheldon, J. Alves-Foss, M. Haney

{"title":"METICS: A Holistic Cyber Physical System Model for IEEE 14-bus Power System Security","authors":"Ananth A. Jillepalli, D. Leon, B. Johnson, Y. Chakhchoukh, I. A. Oyewumi, M. Ashrafuzzaman, Frederick T. Sheldon, J. Alves-Foss, M. Haney","doi":"10.1109/MALWARE.2018.8659367","DOIUrl":"https://doi.org/10.1109/MALWARE.2018.8659367","url":null,"abstract":"The electric power research and education communities and industry have been successfully sharing and using common IEEE Bus power system models for many years. This has enabled researchers, engineers, and educators to better communicate their findings and comparatively validate power analysis solutions using a common model set. However, today’s power systems are Cyber Physical Systems (CPS), that embed digital Operational Technology subsystems and networks (OT) and are also connected to Information Technology (IT) systems and networks. A set of freely accessible models, similar to the IEEE Bus model set, which includes the OT and IT subsystems, does not currently exist. We present METICS: Models for ExTensIble Cyber-physical system Security. Project METICS is our endeavor to create a set of free and holistic Cyber Physical System (CPS) models. In this paper, we introduce a model for an electric power CPS, based on the IEEE 14-bus system, that also includes the cyber, control, and corporate IT subsystems. Common holistic system models such as the one presented in this paper can enable: CPS modeling and analysis tool testing and validation, comparative, cross-disciplinary and cross-project solution evaluations, and CPS instruction. We are using this model for evaluating cyber-security solutions for Smart Grid CPS using adversarial and machine learning approaches. People who would like to use or improve upon these models are encouraged to visit the project page at github.com/METICS-CPS.","PeriodicalId":200928,"journal":{"name":"2018 13th International Conference on Malicious and Unwanted Software (MALWARE)","volume":"20 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126877596","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Attacking OMG Data Distribution Service (DDS) Based Real-Time Mission Critical Distributed Systems 攻击基于OMG数据分发服务(DDS)的实时关键任务分布式系统

2018 13th International Conference on Malicious and Unwanted Software (MALWARE) Pub Date : 2018-10-01 DOI: 10.1109/MALWARE.2018.8659368

M. Michaud, T. Dean, Sylvain P. Leblanc

引用次数: 14

PIDS: A Behavioral Framework for Analysis and Detection of Network Printer Attacks 一种分析和检测网络打印机攻击的行为框架

2018 13th International Conference on Malicious and Unwanted Software (MALWARE) Pub Date : 2018-06-27 DOI: 10.1109/MALWARE.2018.8659371

Asaf Hecht, Adi Sagi, Y. Elovici

引用次数: 1