Detection of Intrusions and Malware, and Vulnerability Assessment

1. Front Matter

   PDF

2. Network Security I

   1. Protecting against DNS Reflection Attacks with Bloom Filters

      • Sebastiano Di Paola, Dario Lombardo

      Pages 1-16

   2. Effective Network Vulnerability Assessment through Model Abstraction

      • Su Zhang, Xinming Ou, John Homer

      Pages 17-34

   3. Decoy Document Deployment for Effective Masquerade Attack Detection

      • Malek Ben Salem, Salvatore J. Stolfo

      Pages 35-54

3. Attacks

   1. Reverse Social Engineering Attacks in Online Social Networks

      • Danesh Irani, Marco Balduzzi, Davide Balzarotti, Engin Kirda, Calton Pu

      Pages 55-74

   2. Timing Attacks on PIN Input in VoIP Networks (Short Paper)

      • Ge Zhang, Simone Fischer-Hübner

      Pages 75-84

4. Web Security

   1. Biting the Hand That Serves You: A Closer Look at Client-Side Flash Proxies for Cross-Domain Requests

      • Martin Johns, Sebastian Lekies

      Pages 85-103

   2. Mitigating Cross-Site Form History Spamming Attacks with Domain-Based Ranking

      • Chuan Yue

      Pages 104-123

   3. Escape from Monkey Island: Evading High-Interaction Honeyclients

      • Alexandros Kapravelos, Marco Cova, Christopher Kruegel, Giovanni Vigna

      Pages 124-143

5. Network Security II

   1. An Assessment of Overt Malicious Activity Manifest in Residential Networks

      • Gregor Maier, Anja Feldmann, Vern Paxson, Robin Sommer, Matthias Vallentin

      Pages 144-163

   2. What’s Clicking What? Techniques and Innovations of Today’s Clickbots

      • Brad Miller, Paul Pearce, Chris Grier, Christian Kreibich, Vern Paxson

      Pages 164-183

   3. MISHIMA: Multilateration of Internet Hosts Hidden Using Malicious Fast-Flux Agents (Short Paper)

      • Greg Banks, Aristide Fattori, Richard Kemmerer, Christopher Kruegel, Giovanni Vigna

      Pages 184-193

6. Host Security

   1. Code Pointer Masking: Hardening Applications against Code Injection Attacks

      • Pieter Philippaerts, Yves Younan, Stijn Muylle, Frank Piessens, Sven Lachmund, Thomas Walter

      Pages 194-213

   2. Operating System Interface Obfuscation and the Revealing of Hidden Operations

      • Abhinav Srivastava, Andrea Lanzi, Jonathon Giffin, Davide Balzarotti

      Pages 214-233

7. Back Matter

   PDF

This book constitutes the refereed proceedings of the 8th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, DIMVA 2011, held in Amsterdam, the Netherlands, in July 2011. The 11 full papers presented together with two short papers were carefully reviewed and selected from 41intial submissions. The papers are organized in topical sections on network security, attacks, Web security, and host security.

• enterprise network security
• privacy
• quantitative vulnerability assessment
• social engineering
• social networks
• algorithm analysis and problem complexity

• Ar-beits-grup-pe "Em-bed-ded Mal-wa-re", Ruhr-Uni-ver-si-tät Bo-chum, Bochum, Germany

  Thorsten Holz

• Vrije Universiteit Amsterdam, Amsterdam, The Netherlands

  Herbert Bos

Policies and ethics