Detection of Intrusions and Malware, and Vulnerability Assessment: 4th International Conference, DIMVA 2007 Lucerne, Switzerland, July 12-13, 2007 Proceedings

Mike Ter Louw, Jin Soon Lim, V. N. Venkatakrishnan (auth.), Bernhard M. Hämmerli, Robin Sommer (eds.)3540736131, 9783540736134

This book constitutes the refereed proceedings of the 4th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, DIMVA 2007, held in Lucerne, Switzerland in July 2007.

The 14 revised full papers presented were carefully reviewed and selected from 57 submissions. The papers are organized in topical sections on Web security, intrusion detection, traffic analysis, network security, and host security.

---

Table of contents :
Front Matter….Pages –
Extensible Web Browser Security….Pages 1-19
On the Effectiveness of Techniques to Detect Phishing Sites….Pages 20-39
Protecting the Intranet Against “JavaScript Malware” and Related Attacks….Pages 40-59
On the Effects of Learning Set Corruption in Anomaly-Based Detection of Web Defacements….Pages 60-78
Intrusion Detection as Passive Testing: Linguistic Support with TTCN-3 (Extended Abstract)….Pages 79-88
Characterizing Bots’ Remote Control Behavior….Pages 89-108
Measurement and Analysis of Autonomous Spreading Malware in a University Environment….Pages 109-128
Passive Monitoring of DNS Anomalies….Pages 129-139
Characterizing Dark DNS Behavior….Pages 140-156
Distributed Evasive Scan Techniques and Countermeasures….Pages 157-174
On the Adaptive Real-Time Detection of Fast-Propagating Network Worms….Pages 175-192
Targeting Physically Addressable Memory….Pages 193-212
Static Analysis on x86 Executables for Preventing Automatic Mimicry Attacks….Pages 213-230
A Study of Malcode-Bearing Documents….Pages 231-250
Back Matter….Pages –