Matches in SemOpenAlex for { <https://semopenalex.org/work/W2145802904> ?p ?o ?g. }
- W2145802904 abstract "We propose a novel approach to infer protocol state machines in the realistic high-latency network setting, and apply it to the analysis of botnet Command and Control (C &C) protocols. Our proposed techniques enable an order of magnitude reduction in the number of queries and time needed to learn a botnet C &C protocol compared to classic algorithms (from days to hours for inferring the MegaD C &C protocol). We also show that the computed protocol state machines enable formal analysis for botnet defense, including finding the weakest links in a protocol, uncovering protocol design flaws, inferring the existence of unobservable communication back-channels among botnet servers, and finding deviations of protocol implementations which can be used for fingerprinting. We validate our technique by inferring the protocol state-machine from Postfix's SMTP implementation and comparing the inferred state-machine to the SMTP standard. Further, our experimental results offer new insights into MegaD's C &C, showing our technique can be used as a powerful tool for defense against botnets." @default.
- W2145802904 created "2016-06-24" @default.
- W2145802904 creator A5003750869 @default.
- W2145802904 creator A5019426968 @default.
- W2145802904 creator A5054036050 @default.
- W2145802904 creator A5074305067 @default.
- W2145802904 date "2010-10-04" @default.
- W2145802904 modified "2023-10-01" @default.
- W2145802904 title "Inference and analysis of formal models of botnet command and control protocols" @default.
- W2145802904 cites W1503669439 @default.
- W2145802904 cites W1529010373 @default.
- W2145802904 cites W1989445634 @default.
- W2145802904 cites W2013887890 @default.
- W2145802904 cites W2017603160 @default.
- W2145802904 cites W2049867480 @default.
- W2145802904 cites W2069560114 @default.
- W2145802904 cites W2075773711 @default.
- W2145802904 cites W2080028974 @default.
- W2145802904 cites W2102671922 @default.
- W2145802904 cites W2115675703 @default.
- W2145802904 cites W2116861015 @default.
- W2145802904 cites W2140839850 @default.
- W2145802904 cites W2149706766 @default.
- W2145802904 cites W2149792581 @default.
- W2145802904 cites W2156453323 @default.
- W2145802904 cites W4206688049 @default.
- W2145802904 cites W4250353368 @default.
- W2145802904 doi "https://doi.org/10.1145/1866307.1866355" @default.
- W2145802904 hasPublicationYear "2010" @default.
- W2145802904 type Work @default.
- W2145802904 sameAs 2145802904 @default.
- W2145802904 citedByCount "131" @default.
- W2145802904 countsByYear W21458029042012 @default.
- W2145802904 countsByYear W21458029042013 @default.
- W2145802904 countsByYear W21458029042014 @default.
- W2145802904 countsByYear W21458029042015 @default.
- W2145802904 countsByYear W21458029042016 @default.
- W2145802904 countsByYear W21458029042017 @default.
- W2145802904 countsByYear W21458029042018 @default.
- W2145802904 countsByYear W21458029042019 @default.
- W2145802904 countsByYear W21458029042020 @default.
- W2145802904 countsByYear W21458029042021 @default.
- W2145802904 countsByYear W21458029042022 @default.
- W2145802904 countsByYear W21458029042023 @default.
- W2145802904 crossrefType "proceedings-article" @default.
- W2145802904 hasAuthorship W2145802904A5003750869 @default.
- W2145802904 hasAuthorship W2145802904A5019426968 @default.
- W2145802904 hasAuthorship W2145802904A5054036050 @default.
- W2145802904 hasAuthorship W2145802904A5074305067 @default.
- W2145802904 hasBestOaLocation W21458029042 @default.
- W2145802904 hasConcept C110875604 @default.
- W2145802904 hasConcept C111472728 @default.
- W2145802904 hasConcept C111919701 @default.
- W2145802904 hasConcept C11413529 @default.
- W2145802904 hasConcept C138885662 @default.
- W2145802904 hasConcept C142724271 @default.
- W2145802904 hasConcept C167822520 @default.
- W2145802904 hasConcept C204787440 @default.
- W2145802904 hasConcept C22735295 @default.
- W2145802904 hasConcept C2780385302 @default.
- W2145802904 hasConcept C2780695315 @default.
- W2145802904 hasConcept C31258907 @default.
- W2145802904 hasConcept C41008148 @default.
- W2145802904 hasConcept C506615639 @default.
- W2145802904 hasConcept C71924100 @default.
- W2145802904 hasConcept C76155785 @default.
- W2145802904 hasConcept C93996380 @default.
- W2145802904 hasConceptScore W2145802904C110875604 @default.
- W2145802904 hasConceptScore W2145802904C111472728 @default.
- W2145802904 hasConceptScore W2145802904C111919701 @default.
- W2145802904 hasConceptScore W2145802904C11413529 @default.
- W2145802904 hasConceptScore W2145802904C138885662 @default.
- W2145802904 hasConceptScore W2145802904C142724271 @default.
- W2145802904 hasConceptScore W2145802904C167822520 @default.
- W2145802904 hasConceptScore W2145802904C204787440 @default.
- W2145802904 hasConceptScore W2145802904C22735295 @default.
- W2145802904 hasConceptScore W2145802904C2780385302 @default.
- W2145802904 hasConceptScore W2145802904C2780695315 @default.
- W2145802904 hasConceptScore W2145802904C31258907 @default.
- W2145802904 hasConceptScore W2145802904C41008148 @default.
- W2145802904 hasConceptScore W2145802904C506615639 @default.
- W2145802904 hasConceptScore W2145802904C71924100 @default.
- W2145802904 hasConceptScore W2145802904C76155785 @default.
- W2145802904 hasConceptScore W2145802904C93996380 @default.
- W2145802904 hasLocation W21458029041 @default.
- W2145802904 hasLocation W21458029042 @default.
- W2145802904 hasOpenAccess W2145802904 @default.
- W2145802904 hasPrimaryLocation W21458029041 @default.
- W2145802904 hasRelatedWork W1999120560 @default.
- W2145802904 hasRelatedWork W2054298352 @default.
- W2145802904 hasRelatedWork W2577643777 @default.
- W2145802904 hasRelatedWork W2587571599 @default.
- W2145802904 hasRelatedWork W2883490043 @default.
- W2145802904 hasRelatedWork W2926623002 @default.
- W2145802904 hasRelatedWork W2934080905 @default.
- W2145802904 hasRelatedWork W3004371238 @default.
- W2145802904 hasRelatedWork W4211045552 @default.
- W2145802904 hasRelatedWork W4376881352 @default.
- W2145802904 isParatext "false" @default.
- W2145802904 isRetracted "false" @default.