Topic

Date

Presenters

Code Injection

StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks

On the Effectiveness of Address-Space Randomization

Race Conditions

TOCTTOU Vulnerabilities in UNIX-Style File Systems: An Anatomical Study

Portably Solving File TOCTTOU Races with Hardness Amplification

Botnet Detection

Wide Scale Botnet Detection and Characterization

BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation

Botnet Detection

A Multifaceted Approach to Understanding the Botnet Phenomenon

BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection

Malware

Panaroma: Capturing System-wide Information Flow for Malware Detection and Analysis

TightLip: Keeping Applications from Spilling the Beans

Malware

Exploring Multiple Execution Paths for Malware Analysis

BitScope: Automatically Dissecting Malicious Binaries

Malware

A Look In the Mirror: Attacks on Package Managers

BootJacker: Compromising Computers using Forced Restarts

Code Injection

Code Injection Attacks on Harvard-Architecture Devices

When Good Instructions Go Bad: Generalizing Return-Oriented Programming to RISC

WiFi

Security Analysis and Improvements for IEEE802.11i

Proximity breeds Danger: Emerging Threats in Metro-area Wireless Networks

Traceback

Network Support for IP Traceback

Cancelled

Traceback & DDoS

Advanced and Authenticated Marking Schemes for IP Traceback

SIFF: A Stateless Internet Flow Filter to Mitigate DDoS Flooding Attacks

Traceback

ClearShot: Eavesdropping Keyboard Input from Video

Compromising Reflections -or- How to Read LCD Monitors Around the Corner

Web Hacks

All Your iFRAMEs Point to Us

Securing Frame Communication in Browsers

Botnets And M. Payloads

Measurement and Classification of Humans and Bots in Internet Chat

To Catch a Predator: A Natural Language Approach for Eliciting Malicious Payloads

CloudAV and CSRF

CloudAV: N-Version Antivirus in the Network Cloud

Robust Defenses for Cross-Site Request Forgery

Web Security

SOMA: Mutual Approval for Included Content in Web Pages

OMash: Enabling Secure Web Mashups via Object Abstractions

Botnets And Spam

Characterizing Botnets from Email Spam Records

Peeking into Spammer Behavior from a Unique Vantage Point

Worms and Spam

Catching Instant Messaging Worms with Change-Point Detection Techniques

Exploiting Machine Learning to Subvert Your Spam Filter

Worms and Botnets

Measurements and Mitigation of Peer-to-Peer-based Botnets: A Case Study on Storm Worm

The Heisenbot Uncertainty Problem: Challenges in Separating Bots from Chaff

Rootkits

Guest-Transparent Prevention of Kernel Rootkits with VMM-based Memory Shadowing

Countering Persistent Kernel Rootkits Through Systematic Hook Discovery

SPAM

Spamscatter: Characterizing Internet Scam Hosting Infrastructure

On the Spam Campaign Trail