Matches in SemOpenAlex for { <https://semopenalex.org/work/W4307020417> ?p ?o ?g. }
Showing items 1 to 73 of
73
with 100 items per page.
- W4307020417 abstract "Where are the IoT C2 servers located? What vulnerabilities does IoT malware try to exploit? What DDoS attacks are launched in practice? In this work, we conduct a large scale study to answer these questions. Specifically, we collect and dynamically analyze 1447 malware binaries on the day that they become publicly known between March 2021 and March 2022 from VirusTotal and MalwareBazaar. By doing this, we are able to observe and profile their behavior at the network level including: (a) C2 communication, (b) proliferation, and (c) issued DDoS attacks. Our comprehensive study provides the following key observations. First, we quantify the elusive behavior of C2 servers: 91% of the time a server does not respond to a second probe four hours after a successful probe. In addition, we find that 15% of the live servers that we find are not known by threat intelligence feeds available on VirusTotal. Second, we find that the IoT malware relies on fairly old vulnerabilities in its proliferation. Our binaries attempt to exploit 12 different vulnerabilities with 9 of them more than 4 years old, while the most recent one was 5 months old. Third, we observe the launch of 42 DDoS attacks that span 8 types of attacks, with two types of attacks targeting gaming servers. The promising results indicate the significant value of using a dynamic analysis approach that includes active measurements and probing towards detecting and containing IoT botnets." @default.
- W4307020417 created "2022-10-22" @default.
- W4307020417 creator A5018876909 @default.
- W4307020417 creator A5035781581 @default.
- W4307020417 date "2022-10-25" @default.
- W4307020417 modified "2023-10-16" @default.
- W4307020417 title "MalNet" @default.
- W4307020417 cites W2054897983 @default.
- W4307020417 cites W2075986968 @default.
- W4307020417 cites W2507466050 @default.
- W4307020417 cites W2576376563 @default.
- W4307020417 cites W2584658892 @default.
- W4307020417 cites W2762279010 @default.
- W4307020417 cites W2794801050 @default.
- W4307020417 cites W2890859663 @default.
- W4307020417 cites W2912095101 @default.
- W4307020417 cites W2947969447 @default.
- W4307020417 cites W2973936959 @default.
- W4307020417 cites W3008949272 @default.
- W4307020417 cites W3045898733 @default.
- W4307020417 cites W3081118847 @default.
- W4307020417 cites W3109112485 @default.
- W4307020417 cites W3111533025 @default.
- W4307020417 cites W3113371616 @default.
- W4307020417 cites W3211825719 @default.
- W4307020417 cites W4281386688 @default.
- W4307020417 cites W1975745448 @default.
- W4307020417 doi "https://doi.org/10.1145/3517745.3561463" @default.
- W4307020417 hasPublicationYear "2022" @default.
- W4307020417 type Work @default.
- W4307020417 citedByCount "0" @default.
- W4307020417 crossrefType "proceedings-article" @default.
- W4307020417 hasAuthorship W4307020417A5018876909 @default.
- W4307020417 hasAuthorship W4307020417A5035781581 @default.
- W4307020417 hasBestOaLocation W43070204171 @default.
- W4307020417 hasConcept C110875604 @default.
- W4307020417 hasConcept C136764020 @default.
- W4307020417 hasConcept C165696696 @default.
- W4307020417 hasConcept C22735295 @default.
- W4307020417 hasConcept C26517878 @default.
- W4307020417 hasConcept C31258907 @default.
- W4307020417 hasConcept C38652104 @default.
- W4307020417 hasConcept C38822068 @default.
- W4307020417 hasConcept C41008148 @default.
- W4307020417 hasConcept C541664917 @default.
- W4307020417 hasConcept C93996380 @default.
- W4307020417 hasConceptScore W4307020417C110875604 @default.
- W4307020417 hasConceptScore W4307020417C136764020 @default.
- W4307020417 hasConceptScore W4307020417C165696696 @default.
- W4307020417 hasConceptScore W4307020417C22735295 @default.
- W4307020417 hasConceptScore W4307020417C26517878 @default.
- W4307020417 hasConceptScore W4307020417C31258907 @default.
- W4307020417 hasConceptScore W4307020417C38652104 @default.
- W4307020417 hasConceptScore W4307020417C38822068 @default.
- W4307020417 hasConceptScore W4307020417C41008148 @default.
- W4307020417 hasConceptScore W4307020417C541664917 @default.
- W4307020417 hasConceptScore W4307020417C93996380 @default.
- W4307020417 hasLocation W43070204171 @default.
- W4307020417 hasOpenAccess W4307020417 @default.
- W4307020417 hasPrimaryLocation W43070204171 @default.
- W4307020417 hasRelatedWork W1668107731 @default.
- W4307020417 hasRelatedWork W1995336485 @default.
- W4307020417 hasRelatedWork W2902215642 @default.
- W4307020417 hasRelatedWork W2929621094 @default.
- W4307020417 hasRelatedWork W3005900565 @default.
- W4307020417 hasRelatedWork W3205452250 @default.
- W4307020417 hasRelatedWork W4214805991 @default.
- W4307020417 hasRelatedWork W4251539596 @default.
- W4307020417 hasRelatedWork W4301600663 @default.
- W4307020417 hasRelatedWork W4312429596 @default.
- W4307020417 isParatext "false" @default.
- W4307020417 isRetracted "false" @default.
- W4307020417 workType "article" @default.