- Title
- A simple and novel technique for counteracting exploit kits
- Creator
- Min, Byungho; Varadharajan, Vijay
- Publisher Link
- http://dx.doi.org/10th International Conference on Security and Privacy in Communication Networks. International Conference on Security and Privacy in Communication Networks: 10th International ICST Conference, SecureComm 2014 Beijing, China, September 24 – 26, 2014 Revised Selected Papers, Part I (Beijing, China 24-26 September, 2014) p. 259-277
- Publisher Link
- http://dx.doi.org/10.1007/978-3-319-23829-6_19
- Publisher
- Springer
- Resource Type
- conference paper
- Date
- 2015
- Description
- Exploit kits have become a major cyber threat over the last few years. They are widely used in both massive and highly targeted cyber attack operations. The exploit kits make use of multiple exploits for major web browsers like Internet Explorer and popular browser plugins such as Adobe Flash and Reader. In this paper, a proactive approach to preventing this prevalent cyber threat from triggering their exploits is proposed. The suggested new technique called AFFAF proactively protects vulnerable systems using a fundamental characteristic of the exploit kits. Specifically, it utilises version information of web browsers and browser plugins. AFFAF is a zero-configuration solution, which means that users do not need to configure anything after installing it. In addition, it is an easy-to-employ methodology from the perspective of plugin developers. We have implemented a lightweight prototype and have shown that AFFAF enabled vulnerable systems can counteract 50 real-world and one locally deployed exploit kit URLs. Tested exploit kits include popular and well-maintained ones such as Blackhole 2.0, Redkit, Sakura, Cool and Bleeding Life 2. We have also demonstrated that the false positive rate of AFFAF is virtually zero, and it is robust enough to be effective against real web browser plugin scanners.
- Subject
- exploit kit; malware; web browser security
- Identifier
- http://hdl.handle.net/1959.13/1357019
- Identifier
- uon:31852
- Identifier
- ISBN:9783319238289
- Language
- eng
- Reviewed
- Hits: 1032
- Visitors: 1026
- Downloads: 0
| Thumbnail | File | Description | Size | Format |
|---|