Argos: an emulator for fingerprinting zero-day attacks for advertised honeypots with automatic signature generation
By Georgios Portokalidis, Asia Slowinska, Herbert Bos. European Conference on Computer Systems, 2006
342 citations recorded by the source corpus.
Subfields: Artificial Intelligence, Computer Networks and Communications, Signal Processing
View Paper: https://www.semanticscholar.org/paper/807d685a83eabd0176ae54854b557abfd99035af
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Artificial Intelligence
- Engin Kirda
- Christopher Krügel
- Dawn Song
- Heng Yin
- Paolo Milani Comparetti
- Zhenkai Liang
- Qing-Long Han
- Jun Zhang
In Computer Networks and Communications
- Engin Kirda
- Christopher Krügel
- Paolo Milani Comparetti
- Heng Yin
- Dawn Song
- Qing-Long Han
- Yang Xiang
- Ulrich Bayer
In Signal Processing
- Engin Kirda
- Christopher Krügel
- Paolo Milani Comparetti
- Heng Yin
- Lok K. Yan
- Dawn Song
- Zhenkai Liang
- Ulrich Bayer
Citations in the corpus
- Polyglot: automatic extraction of protocol message format using dynamic binary analysis (2007, methodology): “The execution monitor implements dynamic taint analysis [13, 14, 15, 28, 34, 35].”
- Scalable, Behavior-Based Malware Clustering (2009, methodology): “For example, it has been successfully applied to the detection of exploits that hijack the control flow of a program and, in some cases, automatic signature generation against detected threats [23, 39, 41].”
- Software Vulnerability Detection Using Deep Neural Networks: A Survey (2020, methodology): “Dynamic analysis includes fuzz testing [81], [103] and taint analysis [74], [82] and often have issues with low code coverage.”
- Debugging in the (very) large: ten years of implementation and experience (2009, background): “Vigilante [9] and Argos [27] suppress failures on some computers by detecting security exploits on other computers and generating filters to block bad input or executions.”
- DroidScope: Seamlessly Reconstructing the OS and Dalvik Semantic Views for Dynamic Android Malware Analysis (2012, background): “In particular, much work has leveraged virtualization techniques, either whole-system software emulation or hardware virtualization, to introspect and analyze illicit activities within the virtual machine [11, 15, 18, 31, 33, 39, 37].”
- Taxonomy and Survey of Collaborative Intrusion Detection (2015, methodology): “2006], its successor Dionaea,3 the Kippo4 SSH honeypot, and Argos [Portokalidis et al. 2006] as a secure system emulator.”