NDLI: Server-side detection of malware infection

Please wait, while we are loading the content...

Laissez-faire file sharing: access control designed for individuals at the endpoints

What is the shape of your security policy?: security as a classification problem

Generative usability: security and user centered design beyond the appliance

Quis Custodiet ipsos Custodes?: a new paradigm for analyzing security paradigms with appreciation to the Roman poet Juvenal

Musipass: authenticating me softly with "my" song

A reinforcement model for collaborative security and Its formal analysis

Fluid information systems

So long, and no thanks for the externalities: the rational rejection of security advice by users

Server-side detection of malware infection

Quantified security is a weak hypothesis: a critical survey of results and assumptions

The sisterhood of the traveling packets

Securing data through avoidance routing

Server-side detection of malware infection

Content Provider	ACM Digital Library
Author	Jakobsson, Markus Juels, Ari
Abstract	We review the intertwined problems of malware and online fraud, and argue that the fact that service providers often are nancially responsible for fraud causes a relative lack of incentives for clients to manage their own security well. This suggests the need for a server-side tool to determine the security posture of clients before letting them transact. We introduce an exceedingly lightweight audit mechanism to address this need -- permitting for post-mortem infection analysis -- and prove its security properties based on standard cryptographic hardness assumptions. We describe a deployment architecture that aligns the incentives of participants in order to facilitate quick adoption and widespread use of the technology. Our approach is exible enough to protect even low-end computing devices like mobile handsets, which future malware will target heavily, but whose power and bandwidth limitations result in poor effectiveness for traditional anti-virus solutions. A contribution of independent potential value is the enabling of a centralized analysis of malware-related events, which promises to extend the power of detection in comparison to what today's decentralized paradigm allows.
Starting Page	11
Ending Page	22
Page Count	12
File Format	PDF
ISBN	9781605588452
DOI	10.1145/1719030.1719033
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2009-09-08
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Infection Audit Retroactive Post-mortem Malware Fraud Anti-virus Detection Incentive compatible Mobile Cell phone
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in