资源描述:
《a study of malware propagation via online social networking》由会员上传分享,免费在线阅读,更多相关内容在工程资料-天天文库。
1、AStudyofMalwarePropagationviaOnlineSocialNetworkingMohammadRezaFaghaniandUyenTrangNguyenAbstractThepopularityofonlinesocialnetworks(OSNs)haveattractedmalwarecreatorswhowoulduseOSNsasaplatformtopropagateautomatedwormsfromoneuser’scomputertoanother’s.Ontheotherhand,thetopico
2、fmalwarepropaga-tioninOSNshasonlybeeninvestigatedrecently.Inthischapter,wediscussrecentadvancesonthetopicofmalwarepropagationbywayofonlinesocialnetworking.Inparticular,wepresentthreemalwarepropagationtechniquesinOSNs,namelycrosssitescripting(XSS),Trojanandclickjackingtypes
3、,andtheircharacteristicsviaanalyticalmodelsandsimulations.KeywordsMalwarepropagation·Onlinesocialnetworks·XSSworm1IntroductionOnlinesocialnetworks(OSNs)suchasFacebook,TwitterandMySpacehavepro-videdhundredsofmillionsofpeopleworldwidewithameanstoconnectandcom-municatewiththe
4、irfriends,familyandcolleaguesgeographicallydistributedallaroundtheworld.ThepopularityandwidespreadusageofOSNshavealsoattractedattackersandhackerswhowoulduseOSNsasaplatformtopropagateautomatedwormsfromoneuser’scomputertoanother’s.Thepopulationofpotentialvictimsofweb-basedma
5、lwareismuchlargerthanthatofothertypesofwormsduetothepopularityoftheworldwideweb.Inad-dition,web-basedwormsarenotbannedthroughwebproxiesandnetworkaddresstranslation(NAT)processes.Researchhasshownthatweb-basedmalwarecanprop-agatemuchfasterthantraditionalmalware[13].Asamatter
6、offact,thefirstOSNwormthathitMySpacein2005byexploitingacrosssitescriptingvulnerabilityinaMySpacewebapplicationinfectedaboutonemillionvictimswithin24hours[13].M.R.Faghani(B)·U.T.NguyenYorkUniversity,DepartmentofComputerScienceandEngineering,Toronto,ONM3J1P3,Canadae-mail:fagh
7、ani@cse.yorku.caU.T.Nguyene-mail:utn@cse.yorku.caT.Özyeretal.(eds.),MiningSocialNetworksandSecurityInformatics,243LectureNotesinSocialNetworks,DOI10.1007/978-94-007-6359-3_13,©SpringerScience+BusinessMediaDordrecht2013244M.R.FaghaniandU.T.NguyenFig.1Totalnumberofinfections
8、causedbydifferentcomputerwormsin20hoursAsFig.1shows,thisworm,whichwasnamedSamy,propagated