Detection of Intrusions and Malware, and Vulnerability Assessment

1. Front Matter

   PDF

2. Malware I

   1. Using File Relationships in Malware Classification

      • Nikos Karampatziakis, Jack W. Stokes, Anil Thomas, Mady Marinescu

      Pages 1-20

   2. Understanding DMA Malware

      • Patrick Stewin, Iurii Bystrov

      Pages 21-41

   3. Large-Scale Analysis of Malware Downloaders

      • Christian Rossow, Christian Dietrich, Herbert Bos

      Pages 42-61

3. Mobile Security

   1. Juxtapp: A Scalable System for Detecting Code Reuse among Android Applications

      • Steve Hanna, Ling Huang, Edward Wu, Saung Li, Charles Chen, Dawn Song

      Pages 62-81

   2. ADAM: An Automatic and Extensible Platform to Stress Test Android Anti-virus Systems

      • Min Zheng, Patrick P. C. Lee, John C. S. Lui

      Pages 82-101

4. Malware II

   1. A Static, Packer-Agnostic Filter to Detect Similar Malware Samples

      • Grégoire Jacob, Paolo Milani Comparetti, Matthias Neugschwandtner, Christopher Kruegel, Giovanni Vigna

      Pages 102-122

   2. Experiments with Malware Visualization

      • Yongzheng Wu, Roland H. C. Yap

      Pages 123-133

   3. Tracking Memory Writes for Malware Classification and Code Reuse Identification

      • André Ricardo Abed Grégio, Paulo Lício de Geus, Christopher Kruegel, Giovanni Vigna

      Pages 134-143

5. Secure Design

   1. System-Level Support for Intrusion Recovery

      • Andrei Bacs, Remco Vermeulen, Asia Slowinska, Herbert Bos

      Pages 144-163

   2. NetGator: Malware Detection Using Program Interactive Challenges

      • Brian Schulte, Haris Andrianakis, Kun Sun, Angelos Stavrou

      Pages 164-183

   3. SmartProxy: Secure Smartphone-Assisted Login on Compromised Machines

      • Johannes Hoffmann, Sebastian Uellenbeck, Thorsten Holz

      Pages 184-203

6. IDS

   1. BISSAM: Automatic Vulnerability Identification of Office Documents

      • Thomas Schreck, Stefan Berger, Jan Göbel

      Pages 204-213

   2. Self-organized Collaboration of Distributed IDS Sensors

      • Karel Bartos, Martin Rehak, Michal Svoboda

      Pages 214-231

   3. Shedding Light on Log Correlation in Network Forensics Analysis

      • Elias Raftopoulos, Matthias Egli, Xenofontas Dimitropoulos

      Pages 232-241

7. Back Matter

   PDF

This book constitutes the refereed post-proceedings of the 9th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, DIMVA 2012, held in Heraklion, Crete, Greece, in July 2012. The 10 revised full papers presented together with 4 short papers were carefully reviewed and selected from 44 submissions. The papers are organized in topical sections on malware, mobile security, secure design, and intrusion detection systems (IDS).

• code reuse
• intrusion recovery
• malware classification
• mobile devices
• network forensics

• Department C, HFT Stuttgart, Stuttgart, Germany

  Ulrich Flegel

• Department of Computer Science, Foundation for Research and Technology – Hellas (FORTH), Heraklion, Greece

  Evangelos Markatos

• College of Computer and Information Science, Northeastern University, Boston, USA

  William Robertson

Policies and ethics