Client-Honeypots

Exploring Malicious Websites
1. Auflage 2010
ISBN: 978-3-486-70526-3
Verlag: De Gruyter

Buch, Englisch, 214 Seiten, Format (B × H): 170 mm x 240 mm, Gewicht: 457 g

With the increasing resilience of operating systems towards automated attacks, the application layer has come into the focus of criminals. Specially prepared websites in the World Wide Web compromise visitors by exploiting vulnerabilities in web browsers, emails with attached files exploit common email applications, and embedded links in instant messenger or Twitter messages lead to malware contaminated sites. This book introduces a new weapon in computer warfare which helps to collect more information about malicious websites, client-side exploits, attackers, and their proceeding. Client honeypots are a new technique to study malware that targets user client applications, like web browsers, email clients, or instant messengers. We introduce some of the more well-known client honeypots, how they work, and how they can be used to secure a computer network. Furthermore, the authors show a few of the most frequently used client application exploits and how they can be examined to get more information about the underground economy.

Zielgruppe

Through its practical approach with many examples, this volume wi

Autoren/Hrsg.

Dewald, Andreas

Göbel, Jan Gerrit

Fachgebiete

• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Computerkriminalität & Hacking

Über Autor(innen)

Jan Göbel is a Ph.D. student at the Laboratory for Dependable Distributed Systems at the University of Mannheim, Germany. He developed the low-interaction server honeypot Amun and the bot detection software Rishi. He also implemented the high-interaction client honeypot prototype Ramsis. He is a member of the German Honeynet Project and one of the founders of Pi-One, a German security company. Currently, his work focusses on spam detection, bots/botnets, honeypots, and malware in general. He regularly blogs at http://zeroq.kulando.de.
Alle Titel dieser Person anzeigen

Andreas Dewald is Ph.D. student and research assistant at the Laboratory for Dependable Distributed Systems of Prof. Dr.-Ing. Felix C. Freiling at the University of Mannheim. His research topics are digital forensics, education in digital forensics and cybercrime investigation and the analysis of malicious websites (especially JavaScript). He is the author of ADSandbox, an analysis system for malicious websites that focusses on the detection of attacks through JavaScript.