Title :
Server-side script polumorphism: Techniques of analysis and defense
Abstract :
It is said that more than 50% of web-based malware originates in malicious IFRAME injection attacks. But what is behind those pesky URLs? A while back, it was an easy task to find out - the code behind it was plain or just slightly obfuscated. Lately though, script encryption routines have become more and more elegant and sophisticated. As attackers deploy exploits for a wide range of vulnerable components, it becomes not only an issue of evading security products, but also a way of protecting intellectual property (0-day vulnerabilities are a ldquovaluablerdquo asset).
Keywords :
cryptography; industrial property; invasive software; Web-based malware; intellectual property protection; malicious IFRAME injection attacks; script encryption routines; server-side script polymorphism; Cryptography; Intellectual property; Protection; Security; Uniform resource locators;
Conference_Titel :
Malicious and Unwanted Software, 2008. MALWARE 2008. 3rd International Conference on
Conference_Location :
Fairfax, VI
Print_ISBN :
978-1-4244-3288-2
Electronic_ISBN :
978-1-4244-3289-9
DOI :
10.1109/MALWARE.2008.4690852
