Research Overview
Malicious software attacks, including worms, spyware and botnets, are becoming a growing security concern. Although first-generation defenses have shown promise, attackers are also evolving, thus requiring vigilance as well as research in countering threats and making systems more secure.
Our current research revolves around three major problems in this area: defending against high-end threats such as fast-spreading and polymorphic worms, developing a rapid automated reaction capability against zero-day attacks, and examining new forms of attacks and new breeding grounds for malware, such as wireless and mobile networks.
Selected Recent Publications
- "Proximity Breeds Danger: Emerging Threats in Metro-area Wireless Networks"
P. Akritidis, W.Y. Chin, V.T. Lam, S. Sidiroglou, K.G. Anagnostakis
in Proc. of USENIX Security 2007, August 2007
- "Puppetnets: Misusing Web Browsers as a Distributed Attack Infrastructure"
V.T. Lam, S. Antonatos, P. Akritidis, K. G. Anagnostakis
in Proc. of ACM CCS 2006, November 2006
- "Network-Level Polymorphic Shellcode Detection Using Emulation"
M. Polychronakis, K. G. Anagnostakis, E. P. Markatos
in Proc. of DIMVA 2006, July 2006
-
"An Active Splitter Architecture for Intrusion Detection and Prevention"
K. Xinidis, I. Charitakis, S. Antonatos, K. G. Anagnostakis and E. P. Markatos
in IEEE Transactions on Dependable and Secure Computing, vol.3, no.1, Jan-Mar 2006
-
"Defending against Hitlist Worms using Network Address Space Randomization"
S. Antonatos, P. Akritidis, E. Markatos, K. G. Anagnostakis
in Proc. of ACM WORM'05, November 2005
- "Detecting Targeted Attacks Using Shadow Honeypots"
K. G. Anagnostakis, S. Siridoglou, P. Akritidis, K. Xinidis, E. Markatos, A. Keromytis
in Proc. of USENIX Security'05, August 2005