SGNET: Implementation insights

Corrado Leita, Marc Dacier

Research output: Chapter in Book/Report/Conference proceedingConference contribution

10 Scopus citations

Abstract

We present in this paper SGNET, a distributed framework to collect information on Internet attacks, with special attention to self-propagating malware and code injections. This framework is the result of our latest research work on the so-called ScriptGen technology. It is characterized by several unique characteristics that may allow it to provide in the future an extremely interesting perspective on the Internet attacks. In order to make it possible, we need to spread its observation points as much as possible to obtain a complete view on the different blocks of the IP space. We present here an overview of the characteristics of its design with special focus on the possibility to expand it and improve it with additional functional blocks. The SGNET is in fact an open initiative, integrating together tools produced by different research teams such as Argos (VU Amsterdam), Nepenthes, Anubis (TU Wien) and VirusTotal (Hispasec Sistemas). Everybody is welcome and encouraged to participate to this initiative, by hosting observation points and/or by extending this framework with additional modules. ©2008 IEEE.
Original languageEnglish (US)
Title of host publicationNOMS 2008 - IEEE/IFIP Network Operations and Management Symposium: Pervasive Management for Ubiquitous Networks and Services
Pages1075-1078
Number of pages4
DOIs
StatePublished - Sep 22 2008
Externally publishedYes

Fingerprint

Dive into the research topics of 'SGNET: Implementation insights'. Together they form a unique fingerprint.

Cite this