Detection of Intrusions and Malware, and Vulnerability Assessment: 16th International Conference, DIMVA 2019, Gothenburg, Sweden, June 19–20, 2019, Proceedings

Description

This book constitutes the proceedings of the 16th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, DIMVA 2019, held in Gothenburg, Sweden, in June 2019. The 23 full papers presented in this volume were carefully reviewed and selected from 80 submissions. The contributions were organized in topical sections named: wild wild web; cyber-physical systems; malware; software security and binary analysis; network security; and attack mitigation. Front Matter ....Pages i-xv Front Matter ....Pages 1-1 Wild Extensions: Discovering and Analyzing Unlisted Chrome Extensions (Aidan Beggs, Alexandros Kapravelos)....Pages 3-22 New Kid on the Web: A Study on the Prevalence of WebAssembly in the Wild (Marius Musch, Christian Wressnegger, Martin Johns, Konrad Rieck)....Pages 23-42 Morellian Analysis for Browsers: Making Web Authentication Stronger with Canvas Fingerprinting (Pierre Laperdrix, Gildas Avoine, Benoit Baudry, Nick Nikiforakis)....Pages 43-66 On the Perils of Leaking Referrers in Online Collaboration Services (Beliz Kaleli, Manuel Egele, Gianluca Stringhini)....Pages 67-85 Front Matter ....Pages 87-87 Detecting, Fingerprinting and Tracking Reconnaissance Campaigns Targeting Industrial Control Systems (Olivier Cabana, Amr M. Youssef, Mourad Debbabi, Bernard Lebel, Marthe Kassouf, Basile L. Agba)....Pages 89-108 Overshadow PLC to Detect Remote Control-Logic Injection Attacks (Hyunguk Yoo, Sushma Kalle, Jared Smith, Irfan Ahmed)....Pages 109-132 A Security Evaluation of Industrial Radio Remote Controllers (Federico Maggi, Marco Balduzzi, Jonathan Andersson, Philippe Lin, Stephen Hilt, Akira Urano et al.)....Pages 133-153 Understanding the Security of Traffic Signal Infrastructure (Zhenyu Ning, Fengwei Zhang, Stephen Remias)....Pages 154-174 Front Matter ....Pages 175-175 Practical Enclave Malware with Intel SGX (Michael Schwarz, Samuel Weiser, Daniel Gruss)....Pages 177-196 How Does Malware Use RDTSC? A Study on Operations Executed by Malware with CPU Cycle Measurement (Yoshihiro Oyama)....Pages 197-218 On Deception-Based Protection Against Cryptographic Ransomware (Ziya Alper Genç, Gabriele Lenzini, Daniele Sgandurra)....Pages 219-239 PowerDrive: Accurate De-obfuscation and Analysis of PowerShell Malware (Denis Ugarte, Davide Maiorca, Fabrizio Cara, Giorgio Giacinto)....Pages 240-259 Front Matter ....Pages 261-261 Memory Categorization: Separating Attacker-Controlled Data (Matthias Neugschwandtner, Alessandro Sorniotti, Anil Kurmus)....Pages 263-287 TypeMiner: Recovering Types in Binary Programs Using Machine Learning (Alwin Maier, Hugo Gascon, Christian Wressnegger, Konrad Rieck)....Pages 288-308 SAFE: Self-Attentive Function Embeddings for Binary Similarity (Luca Massarelli, Giuseppe Antonio Di Luna, Fabio Petroni, Roberto Baldoni, Leonardo Querzoni)....Pages 309-329 Triggerflow: Regression Testing by Advanced Execution Path Inspection (Iaroslav Gridin, Cesar Pereida García, Nicola Tuveri, Billy Bob Brumley)....Pages 330-350 Front Matter ....Pages 351-351 Large-Scale Analysis of Infrastructure-Leaking DNS Servers (Dennis Tatang, Carl Schneider, Thorsten Holz)....Pages 353-373 Security in Plain TXT (Adam Portier, Henry Carter, Charles Lever)....Pages 374-395 No Need to Marry to Change Your Name! Attacking Profinet IO Automation Networks Using DCP (Stefan Mehner, Hartmut König)....Pages 396-414 DPX: Data-Plane eXtensions for SDN Security Service Instantiation (Taejune Park, Yeonkeun Kim, Vinod Yegneswaran, Phillip Porras, Zhaoyan Xu, KyoungSoo Park et al.)....Pages 415-437 Front Matter ....Pages 439-439 Practical Password Hardening Based on TLS (Constantinos Diomedous, Elias Athanasopoulos)....Pages 441-460 Role Inference + Anomaly Detection = Situational Awareness in BACnet Networks (Davide Fauri, Michail Kapsalakis, Daniel Ricardo dos Santos, Elisa Costante, Jerry den Hartog, Sandro Etalle)....Pages 461-481 BinTrimmer: Towards Static Binary Debloating Through Abstract Interpretation (Nilo Redini, Ruoyu Wang, Aravind Machiry, Yan Shoshitaishvili, Giovanni Vigna, Christopher Kruegel)....Pages 482-501 Back Matter ....Pages 503-504