Monkey Spider: Monitoring of Malicious Websites

Wednesday, December 13. 2006
Yesterday, another student of mine gave a talk about his ongoing diploma thesis. Ali Ikinci presented his project "Monkey Spider", which tries to find malicious web sites in the World Wide Web. The project is some kind of low-interaction honeyclient that crawls the Web and then examines the downloaded content. Similar to "A Crawler-based Study of Spyware on the Web", we try to find malicious content on the Internet. We also use Heritrix, but instead of only using malware scanners, we also use CWSandbox to detect latest threats. In addition, we do not only scan executables, but all other files in order to find - for example - malicious WMF files or images...

The presentation on Monkey Spider is available.