Research in Attacks, Intrusions, and Defenses

1. Front Matter

   PDF

2. Hardware-Level Security

   1. A Primitive for Revealing Stealthy Peripheral-Based Attacks on the Computing Platform’s Main Memory

      • Patrick Stewin

      Pages 1-20

   2. Hypervisor Memory Forensics

      • Mariano Graziano, Andrea Lanzi, Davide Balzarotti

      Pages 21-40

3. Server-Level and OS-Level Security

   1. Server-Side Code Injection Attacks: A Historical Perspective

      • Jakob Fritz, Corrado Leita, Michalis Polychronakis

      Pages 41-61

   2. Check My Profile: Leveraging Static Analysis for Fast and Accurate Detection of ROP Gadgets

      • Blaine Stancill, Kevin Z. Snow, Nathan Otterness, Fabian Monrose, Lucas Davi, Ahmad-Reza Sadeghi

      Pages 62-81

   3. Systematic Analysis of Defenses against Return-Oriented Programming

      • Richard Skowyra, Kelly Casteel, Hamed Okhravi, Nickolai Zeldovich, William Streilein

      Pages 82-102

   4. SILVER: Fine-Grained and Transparent Protection Domain Primitives in Commodity OS Kernel

      • Xi Xiong, Peng Liu

      Pages 103-122

4. Malware

   1. API Chaser: Anti-analysis Resistant Malware Analyzer

      • Yuhei Kawakoya, Makoto Iwamura, Eitaro Shioji, Takeo Hariu

      Pages 123-143

   2. FIRMA: Malware Clustering and Network Signature Generation with Mixed Network Behaviors

      • M. Zubair Rafique, Juan Caballero

      Pages 144-163

   3. Deobfuscating Embedded Malware Using Probable-Plaintext Attacks

      • Christian Wressnegger, Frank Boldewin, Konrad Rieck

      Pages 164-183

   4. Detecting Traditional Packers, Decisively

      • Denis Bueno, Kevin J. Compton, Karem A. Sakallah, Michael Bailey

      Pages 184-203

5. Authentication and Credential Attacks

   1. Side-Channel Attacks on the Yubikey 2 One-Time Password Generator

      • David Oswald, Bastian Richter, Christof Paar

      Pages 204-222

   2. Active Credential Leakage for Observing Web-Based Attack Cycle

      • Mitsuaki Akiyama, Takeshi Yagi, Kazufumi Aoki, Takeo Hariu, Youki Kadobayashi

      Pages 223-243

6. Web and Network Privacy and Security

   1. Behavior Decomposition: Aspect-Level Browser Extension Clustering and Its Security Implications

      • Bin Zhao, Peng Liu

      Pages 244-264

   2. Tamper-Resistant LikeJacking Protection

      • Martin Johns, Sebastian Lekies

      Pages 265-285

   3. Deconstructing the Assessment of Anomaly-based Intrusion Detectors

      • Arun Viswanathan, Kymie Tan, Clifford Neuman

      Pages 286-306

7. Mobile Security

   1. Practical Context-Aware Permission Control for Hybrid Mobile Applications

      • Kapil Singh

      Pages 307-327

   2. Understanding SMS Spam in a Large Cellular Network: Characteristics, Strategies and Defenses

      • Nan Jiang, Yu Jin, Ann Skudlark, Zhi-Li Zhang

      Pages 328-347

   3. Mobile Malware Detection Based on Energy Fingerprints — A Dead End?

      • Johannes Hoffmann, Stephan Neumann, Thorsten Holz

      Pages 348-368

8. Cloud and Anonymity Networks I

   1. Holiday Pictures or Blockbuster Movies? Insights into Copyright Infringement in User Uploads to One-Click File Hosters

      • Tobias Lauinger, Kaan Onarlioglu, Abdelberi Chaabane, Engin Kirda, William Robertson, Mohamed Ali Kaafar

      Pages 369-389

This book constitutes the proceedings of the 16th International Symposium on Research in Attacks, Intrusions and Defenses, former Recent Advances in Intrusion Detection, RAID 2013, held in Rodney Bay, St. Lucia in October 2013. The volume contains 22 full papers that were carefully reviewed and selected from 95 submissions, as well as 10 poster papers selected from the 23 submissions. The papers address all current topics in computer security ranged from hardware-level security, server, web, mobile, and cloud-based security, malware analysis, and web and network privacy.

• cloud computing
• computer networks
• computer security
• mobile authentication
• server-side attacks

• Department of Computer Science, Columbia University, USA

  Salvatore J. Stolfo

• Department of Computer Science, George Mason University, Fairfax, USA

  Angelos Stavrou

• Department of Computer Science, Portland State University, Portland, USA

  Charles V. Wright

Policies and ethics