Anti-virus vendors are confronted with a multitude of potentially malicious samples today.
Receiving thousands of new samples every day is not uncommon. The signatures that …

Today, the Internet security community largely emphasizes cyberspace monitoring for the
purpose of generating cyber intelligence. In this paper, we present a survey on darknet. The …

The amount of time in which a sample is executed is one of the key parameters of a malware
analysis sandbox. Setting the threshold too high hinders the scalability and reduces the …

As the malware research field became more established over the last two decades, new
research questions arose, such as how to make malware research reproducible, how to …

Bots often are detected by their communication with a command and control (C&C)
infrastructure. To evade detection, botmasters are increasingly obfuscating C&C …

The majority of recent cyber incidents have been caused by malware. According to a report
by Symantec, an average of one million malicious codes is found daily. Automated static and …

This paper focuses on the containment and control of the network interaction generated by
malware samples in dynamic analysis environments. A currently unsolved problem consists …

Low-interaction honeyclients employ static detection techniques such as signatures,
heuristic or anomaly detection in the identification of malicious websites. They are …

Antimalware application is one of the most important research issues in the area of cyber
security threat. Nowadays, because hackers continuously develop novel techniques to …

Aiming at the difficulty of unknown Trojan detection in the APT flooding situation, an
improved detecting method has been proposed. The basic idea of this method originates …