dc.contributor.author | Galteland, Herman | |
dc.contributor.author | Gjøsteen, Kristian | |
dc.date.accessioned | 2017-08-18T07:07:18Z | |
dc.date.available | 2017-08-18T07:07:18Z | |
dc.date.created | 2017-01-09T10:03:10Z | |
dc.date.issued | 2017 | |
dc.identifier.citation | Lecture Notes in Computer Science. 2017, 233-251. | nb_NO |
dc.identifier.issn | 0302-9743 | |
dc.identifier.uri | http://hdl.handle.net/11250/2451076 | |
dc.description.abstract | A malware author constructing malware wishes to infect a specific location in the network. The author will then infect n initial nodes with n different variations of his malicious code. The malware continues to infect subsequent nodes in the network by making similar copies of itself. An analyst defending M nodes in the network observes N infected nodes with some malware and wants to know if any sample is targeting any of his nodes. To reduce his work, the analyst need only look at unique malware samples. We show that by encrypting the malware payload and using rerandomization to replicate malware, we can make the N observed malware samples distinct and increase the analyst’s work factor substantially. | nb_NO |
dc.language.iso | eng | nb_NO |
dc.publisher | Springer Verlag | nb_NO |
dc.subject | Kryptografi | nb_NO |
dc.subject | Cryptography | nb_NO |
dc.title | Malware, Encryption, and Rerandomization - Everything is Under Attack | nb_NO |
dc.type | Journal article | nb_NO |
dc.type | Peer reviewed | nb_NO |
dc.description.version | acceptedVersion | nb_NO |
dc.subject.nsi | VDP::Anvendt matematikk: 413 | nb_NO |
dc.subject.nsi | VDP::Applied mathematics: 413 | nb_NO |
dc.source.pagenumber | 233-251 | nb_NO |
dc.source.journal | Lecture Notes in Computer Science | nb_NO |
dc.identifier.doi | 10.1007/978-3-319-61273-7_12 | |
dc.identifier.cristin | 1423028 | |
dc.description.localcode | © Springer International Publishing AG 2017. The final publication is available at Springer via http://dx.doi.org/978-3-319-61273-7_12 | nb_NO |
cristin.unitcode | 194,63,15,0 | |
cristin.unitname | Institutt for matematiske fag | |
cristin.ispublished | true | |
cristin.fulltext | original | |
cristin.qualitycode | 1 | |