Detection of Intrusions and Malware, and Vulnerability Assessment: 14th International Conference, DIMVA 2017, Bonn, Germany, July 6-7, 2017, Proceedings

DescriptionThis book constitutes the refereed proceedings of the 14th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, DIMVA 2017, held in Bonn, Germany, in July 2017.The 18 revised full papers included in this book were carefully reviewed and selected from 67 submissions. They present topics such as enclaves and isolation; malware analysis; cyber-physical systems; detection and protection; code analysis; and web security.Table of ContentsEnclaves and IsolationMalware Guard Extension: Using SGX to Conceal Cache Attacks – Michael Schwarz, Samuel Weiser, Daniel Gruss, Clémentine Maurice, Stefan MangardOn the Trade-Offs in Oblivious Execution Techniques – Shruti Tople, Prateek SaxenaMemPatrol: Reliable Sideline Integrity Monitoring for High-Performance Systems – Myoung Jin Nam, Wonhong Nam, Jin-Young Choi, Periklis AkritidisMalware AnalysisMeasuring and Defeating Anti-Instrumentation-Equipped Malware – Mario Polino, Andrea Continella, Sebastiano Mariani, Stefano D’Alessio, Lorenzo Fontana, Fabio Gritti et al.DynODet: Detecting Dynamic Obfuscation in Malware – Danny Kim, Amir Majlesi-Kupaei, Julien Roy, Kapil Anand, Khaled ElWazeer, Daniel Buettner et al.Finding the Needle: A Study of the PE32 Rich Header and Respective Malware Triage – George D. Webster, Bojan Kolosnjaji, Christian von Pentz, Julian Kirsch, Zachary D. Hanif, Apostolis Zarras et al.Cyber-physical SystemsLast Line of Defense: A Novel IDS Approach Against Advanced Threats in Industrial Control Systems – Mark Luchs, Christian DoerrLED-it-GO: Leaking (A Lot of) Data from Air-Gapped Computers via the (Small) Hard Drive LED – Mordechai Guri, Boris Zadov, Yuval EloviciA Stealth, Selective, Link-Layer Denial-of-Service Attack Against Automotive Networks – Andrea Palanca, Eric Evenchick, Federico Maggi, Stefano ZaneroDetection and ProtectionQuincy: Detecting Host-Based Code Injection Attacks in Memory Dumps – Thomas Barabosch, Niklas Bergmann, Adrian Dombeck, Elmar PadillaSPEAKER: Split-Phase Execution of Application Containers – Lingguang Lei, Jianhua Sun, Kun Sun, Chris Shenefiel, Rui Ma, Yuewu Wang et al.Deep Ground Truth Analysis of Current Android Malware – Fengguo Wei, Yuping Li, Sankardas Roy, Xinming Ou, Wu ZhouCode AnalysisHumIDIFy: A Tool for Hidden Functionality Detection in Firmware – Sam L. Thomas, Flavio D. Garcia, Tom ChothiaBinShape: Scalable and Robust Binary Library Function Identification Using Function Shape – Paria Shirani, Lingyu Wang, Mourad DebbabiWeb SecurityOn the Privacy Impacts of Publicly Leaked Password Databases – Olivier Heen, Christoph NeumannUnsupervised Detection of APT C&C Channels using Web Request Graphs – Pavlos Lamprakis, Ruggiero Dargenio, David Gugelmann, Vincent Lenders, Markus Happe, Laurent VanbeverMeasuring Network Reputation in the Ad-Bidding Process – Yizheng Chen, Yacin Nadji, Rosa Romero-Gómez, Manos Antonakakis, David DagonEditors BiographyMichalis Polychronakis Stony Brook University, Stony Brook, USAMichael Meier University of Bonn and Fraunhofer FKIE, Bonn, Germany