This paper intends to illustrate the usefulness of deploying multiple simple honeypot sensors
in a large variety of locations. Indeed, a permanent identification of anomalies that occur on …

AntiVirus (AV) products use multiple components to detect malware. A component which is
found in virtually all AVs is the signature-based detection engine: this component assigns a …

Proactive cyber-security tools provide basic protection as today's cyber-criminals utilize
legitimate traffic to perform attacks and remain concealed quite often until it is too late. As …

Protecting computer and information systems from security attacks is becoming an
increasingly important task for system administrators. Honeypots are a technology often …

Monitoring the Internet reveals incessant activity, that has been referred to as background
radiation. In this paper, we propose an original approach that makes use of packet inter …

In this paper we report results of an empirical analysis of the detection capabilities of 9
AntiVirus (AV) products when they were subjected to 3605 malware samples collected on an …

JIT compilers produce fast code, whereas interpreters are easy to port between
architectures. We propose to combine the advantages of these language implementation …

This work builds upon the Leurré. com infrastructure and the Scriptgen technology. Leurré.
com is a worldwide distributed setup of low interaction honeypots whereas Scriptgen is a …

The purpose of this study is to understand observed behavior and to diagnose and find
solutions to issues encountered in organizational computer security using a systemic …

We present in this paper SGNET, a distributed framework to collect information on Internet
attacks, with special attention to self-propagating malware and code injections. This …