VirusTotal is the most widely used online scanning service in both academia and industry.
However, it is known that the results returned by antivirus engines are often inconsistent and …

VirusTotal provides malware labels from a large set of anti-malware engines, and is heavily
used by researchers for malware annotation and system evaluation. Since different engines …

VirusTotal is the largest online anti-malware scanning service. It is widely used by security
researchers for labeling malware data or serving as a comparison baseline. However …

This work explores authoritative DNS (AuthDNS) as a new measurement perspective for
studying the large-scale epidemiology of the malware ecosystem—when and where …

Both the operational and academic security communities have used dynamic analysis
sandboxes to execute malware samples for roughly a decade. Network information derived …

A malware goes through multiple stages in its life-cycle at the target machine before
mounting its expected attack. The entire life-cycle can span anywhere from a few weeks to …

Enterprise networks are in constant danger of being breached by cyber-attackers, but
making the decision about what security tools to deploy to mitigate this risk requires carefully …

The evolution of malware has long plagued machine learning-based detection systems, as
malware authors develop innovative strategies to evade detection and chase profits. This …

We present a longitudinal measurement of malicious file distribution on the Web. Following
a data-driven approach, we identify network infrastructures and the files that they download …

Malware remains an important security threat, as miscreants continue to deliver a variety of
malicious programs to hosts around the world. At the heart of all the malware delivery …