Before we knew it: an empirical study of zero-day attacks in the real world

By Leyla Bilge, Tudor Dumitras. Conference on Computer and Communications Security, 2012

727 citations recorded by the source corpus.

Subfields: Computer Networks and Communications, Information Systems, Signal Processing

View Paper: https://www.semanticscholar.org/paper/0ebb041524a751276219a396c634da15742a6e6a

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

In Information Systems

In Signal Processing

Citations in the corpus

Internet of Things (IoT) Security Intelligence: A Comprehensive Overview, Machine Learning Solutions and Research Directions (2022, background): “addition, Zero-day attack [27] [33] [126] that is used to refer to the threat posed by an unknown security [127] [95], are considered as the serious potential security threats.”
UNICORN: Runtime Provenance-Based Detector for Advanced Persistent Threats (2020, background): “Detectors dependent on malware signatures are blind to attacks that exploit new vulnerabilities [20].”
Detecting and Preventing Cyber Insider Threats: A Survey (2018, background): “advantage of a certain known or unknown (zero-day [29]) vulnerability to launch a buffer overflow attack.”
AI-Driven Cybersecurity: An Overview, Security Intelligence Modeling and Research Directions (2021, background): “Zero-day attack Is considered as the threat of an unknown security vulnerability [27, 28]”
Security of smart manufacturing systems (2018, background): “The average duration of zero-day attacks is 312 days; however, for some it has taken 30 months to discover the attack, fix the code and distribute a software patch [33].”
On the feasibility of online malware detection with performance counters (2013, background): “This system is reported to be eﬀec-tive against polymorphic and metamorphic viruses but does not work against non-executable threats such as malicious pdfs and doc ﬁles [8].”
Passban IDS: An Intelligent Anomaly-Based Intrusion Detection System for IoT Edge Devices (2020, background): “This is not a secondary problem, as some studies report that it could take up to one year to investigate the characteristics of a speciﬁc attack [13].”
Vulnerability Disclosure in the Age of Social Media: Exploiting Twitter for Predicting Real-World Exploits (2015, background): “We do not consider the detection of zeroday attacks [32], which exploit vulnerabilities before their public disclosure; instead, we focus on detecting the use of exploits against known vulnerabilities.”
IoT Elements, Layered Architectures and Security Issues: A Comprehensive Survey (2018, background): “This security hole is exploited by the attacker to take control without user’s consent and without their knowledge [55,56].”