NDLI: RevProbe: detecting silent reverse proxies in malicious server infrastructures

Please wait, while we are loading the content...

Formal security analysis of smart embedded systems

ELAR: extremely lightweight auditing and repairing for cloud security

Decomposition of MAC address structure for granular device inference

Life-experience passwords (LEPs)

Catching predators at watering holes: finding and understanding strategically compromised websites

Code obfuscation against symbolic execution attacks

On the (in)security of the latest generation implantable cardiac defibrillators and how to secure them

Theft-resilient mobile wallets: transparently authenticating NFC users with tapping gesture biometrics

Practical and secure dynamic searchable encryption via oblivious access on distributed data structure

ShieldFS: a self-healing, ransomware-aware filesystem

You can promote, but you can't hide: large-scale abused app detection in mobile app stores

Inferring browser activity and status through remote monitoring of storage usage

VTPin: practical VTable hijacking protection for binaries

Reliably determining data leakage in the presence of strong attackers

A security analysis of automated chinese turing tests

Spicy: a unified deep packet inspection framework for safely dissecting all your data

An ultra-lightweight white-box encryption scheme for securing resource-constrained IoT devices

Pileus: protecting user resources from vulnerable cloud services

Timing-based reconnaissance and defense in software-defined networks

Using image saliency and regions of interest to encourage stronger graphical passwords

The Achilles heel of OAuth: a multi-platform study of OAuth-based authentication

VulPecker: an automated vulnerability detection system based on code similarity analysis

Multi-receiver GPS spoofing detection: error models and realization

Gametrics: towards attack-resilient behavioral authentication with simple cognitive games

CoKey: fast token-based cooperative cryptography

Cypider: building community-based cyber-defense infrastructure for android malware detection

Swords and shields: a study of mobile game hacks and existing defenses

Amplifying side channels through performance degradation

LMP: light-weighted memory protection with hardware assistance

Sanitizing data is not enough!: towards sanitizing structural artifacts in flash media

The cross domain desktop compositor: using hardware-based video compositing for a multi-level secure user interface

Trace-free memory data structure forensics via past inference and future speculations

A multi-cloud based privacy-preserving data publishing scheme for the internet of things

Bootstrapping and maintaining trust in the cloud

RevProbe: detecting silent reverse proxies in malicious server infrastructures

CPAC: securing critical infrastructure with cyber-physical access control

Adaptive encrypted traffic fingerprinting with bi-directional dependence

EvilCoder: automated bug insertion

Location-enhanced authentication using the IoT: because you cannot be in two places at once

Device fingerprinting for augmenting web authentication: classification and analysis of methods

The cloudier side of cryptographic end-to-end verifiable voting: a security analysis of Helios

Intelligent, automated red team emulation

Understanding and defending the binder attack surface in Android

Efficient, adversarial neighbor discovery using logical channels on Microsoft Azure

FASE: functionality-aware security enforcement

Auror: defending against poisoning attacks in collaborative deep learning systems

CASTLE: CA signing in a touch-less environment

HERCULE: attack story reconstruction via community discovery on correlated log graph

RevProbe: detecting silent reverse proxies in malicious server infrastructures

Content Provider	ACM Digital Library
Author	Caballero, Juan Munir, Rana Faisal Tanoli, Irfan Khan Nappa, Antonio Kreibich, Christian
Abstract	Web service operators set up reverse proxies to interpose the communication between clients and origin servers for load-balancing traffic across servers, caching content, and filtering attacks. Silent reverse proxies, which do not reveal their proxy role to the client, are of particular interest since malicious infrastructures can use them to hide the existence of the origin servers, adding an indirection layer that helps protecting origin servers from identification and take-downs. We present RevProbe, a state-of-the-art tool for automatically detecting silent reverse proxies and identifying the server infrastructure behind them. RevProbe uses active probing to send requests to a target IP address and analyzes the responses looking for discrepancies indicating that the IP address corresponds to a reverse proxy. We extensively test RevProbe showing that it significantly outperforms existing tools. Then, we apply RevProbe to perform the first study on the usage of silent reverse proxies in both benign and malicious Web services. RevProbe identifies that 12% of malicious IP addresses correspond to reverse proxies, furthermore 85% of those are silent (compared to 52% for benign reverse proxies).
Starting Page	101
Ending Page	112
Page Count	12
File Format	PDF
ISBN	9781450347716
DOI	10.1145/2991079.2991093
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-12-05
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Web load balancers Active probing Reverse proxies
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in