Matches in SemOpenAlex for { <https://semopenalex.org/work/W2964833395> ?p ?o ?g. }
Showing items 1 to 88 of
88
with 100 items per page.
- W2964833395 abstract "Malware writers frequently try to hide the activities of their agents within tunnelled traffic. Within the Kill Chain model the infection time is often measured in seconds, and if the infection is not detected and blocked, the malware agent, such as a bot, will often then set up a secret channel to communicate with its controller. In the case of ransomware the communicated payload may include the encryption key used for the infected host to register its infection. As a malware infection can spread across a network in seconds, it is often important to detect its activities on the air, in memory and at-rest. Malware increasingly uses encrypted channels for communicating with their controllers. This paper presents a new approach to discovering the cryptographic artefacts of real malware clients that use cryptographic libraries of the Microsoft Windows operating system. This enables malware secret communications to be discovered without any prior malware knowledge." @default.
- W2964833395 created "2019-08-13" @default.
- W2964833395 creator A5044811454 @default.
- W2964833395 creator A5050277773 @default.
- W2964833395 creator A5068020099 @default.
- W2964833395 creator A5081603602 @default.
- W2964833395 date "2019-07-27" @default.
- W2964833395 modified "2023-09-27" @default.
- W2964833395 title "Discovering Encrypted Bot and Ransomware Payloads Through Memory Inspection Without A Priori Knowledge" @default.
- W2964833395 cites W1583098994 @default.
- W2964833395 cites W1988070923 @default.
- W2964833395 cites W2087740020 @default.
- W2964833395 cites W2119359024 @default.
- W2964833395 cites W2140607115 @default.
- W2964833395 cites W2324374191 @default.
- W2964833395 cites W2466070119 @default.
- W2964833395 cites W2552539265 @default.
- W2964833395 cites W2553476679 @default.
- W2964833395 cites W2625118300 @default.
- W2964833395 cites W2766288825 @default.
- W2964833395 cites W2783300127 @default.
- W2964833395 cites W2811249246 @default.
- W2964833395 cites W2898946784 @default.
- W2964833395 cites W2912711574 @default.
- W2964833395 cites W2963065250 @default.
- W2964833395 cites W2912970344 @default.
- W2964833395 hasPublicationYear "2019" @default.
- W2964833395 type Work @default.
- W2964833395 sameAs 2964833395 @default.
- W2964833395 citedByCount "0" @default.
- W2964833395 crossrefType "posted-content" @default.
- W2964833395 hasAuthorship W2964833395A5044811454 @default.
- W2964833395 hasAuthorship W2964833395A5050277773 @default.
- W2964833395 hasAuthorship W2964833395A5068020099 @default.
- W2964833395 hasAuthorship W2964833395A5081603602 @default.
- W2964833395 hasConcept C134066672 @default.
- W2964833395 hasConcept C148730421 @default.
- W2964833395 hasConcept C158379750 @default.
- W2964833395 hasConcept C177264268 @default.
- W2964833395 hasConcept C178489894 @default.
- W2964833395 hasConcept C199360897 @default.
- W2964833395 hasConcept C26517878 @default.
- W2964833395 hasConcept C2777667771 @default.
- W2964833395 hasConcept C2779395397 @default.
- W2964833395 hasConcept C38652104 @default.
- W2964833395 hasConcept C41008148 @default.
- W2964833395 hasConcept C541664917 @default.
- W2964833395 hasConcept C84525096 @default.
- W2964833395 hasConceptScore W2964833395C134066672 @default.
- W2964833395 hasConceptScore W2964833395C148730421 @default.
- W2964833395 hasConceptScore W2964833395C158379750 @default.
- W2964833395 hasConceptScore W2964833395C177264268 @default.
- W2964833395 hasConceptScore W2964833395C178489894 @default.
- W2964833395 hasConceptScore W2964833395C199360897 @default.
- W2964833395 hasConceptScore W2964833395C26517878 @default.
- W2964833395 hasConceptScore W2964833395C2777667771 @default.
- W2964833395 hasConceptScore W2964833395C2779395397 @default.
- W2964833395 hasConceptScore W2964833395C38652104 @default.
- W2964833395 hasConceptScore W2964833395C41008148 @default.
- W2964833395 hasConceptScore W2964833395C541664917 @default.
- W2964833395 hasConceptScore W2964833395C84525096 @default.
- W2964833395 hasLocation W29648333951 @default.
- W2964833395 hasOpenAccess W2964833395 @default.
- W2964833395 hasPrimaryLocation W29648333951 @default.
- W2964833395 hasRelatedWork W1545903856 @default.
- W2964833395 hasRelatedWork W1956767865 @default.
- W2964833395 hasRelatedWork W2092915750 @default.
- W2964833395 hasRelatedWork W2119521622 @default.
- W2964833395 hasRelatedWork W2276743533 @default.
- W2964833395 hasRelatedWork W2342877402 @default.
- W2964833395 hasRelatedWork W2482641477 @default.
- W2964833395 hasRelatedWork W2598838216 @default.
- W2964833395 hasRelatedWork W2740113232 @default.
- W2964833395 hasRelatedWork W2786537196 @default.
- W2964833395 hasRelatedWork W2857214792 @default.
- W2964833395 hasRelatedWork W2885931936 @default.
- W2964833395 hasRelatedWork W2890191084 @default.
- W2964833395 hasRelatedWork W2902184924 @default.
- W2964833395 hasRelatedWork W2915926703 @default.
- W2964833395 hasRelatedWork W2920868102 @default.
- W2964833395 hasRelatedWork W2966448719 @default.
- W2964833395 hasRelatedWork W3158755254 @default.
- W2964833395 hasRelatedWork W2566356607 @default.
- W2964833395 hasRelatedWork W2845354788 @default.
- W2964833395 isParatext "false" @default.
- W2964833395 isRetracted "false" @default.
- W2964833395 magId "2964833395" @default.
- W2964833395 workType "article" @default.