USENIX Security'08
Monday, July 28. 2008
This week, the 17th USENIX Security Symposium takes place in San Jose, CA. Unfortunately I can not attend this year :-( But there are many interesting papers you should check out, for example:
The full papers will be available a few days after the conference took place. A really good conference this year with an exciting program! Looking forward to attend next year :-)
- All Your iFRAMEs Point to Us by Provos et al. analyzes the threat by malicious iframes injected into websites
- Lest We Remember: Cold Boot Attacks on Encryption Keys by Halderman et al. is the paper about the now famous cold boot attack, for which the full source code was released last week by Jacob Appelbaum at The Last HOPE in New York City
- CloudAV: N-Version Antivirus in the Network Cloud by Oberheide et al. deals with n-version AV-scanning (basically examining a given sample with n AV-scanners and behavior-analysis tools like CWSandbox or Norman Sandbox), thereby improving detection rates
- BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection by Gu et al. shows how botnets can be detected by correlating netflow data, finding similar behavior within the network traffic
- Hypervisor Support for Identifying Covertly Executing Binaries by Litty et al. introduces a system to detect malicious code with the help of a hypervisor built on top of Xen.
- And many others
The full papers will be available a few days after the conference took place. A really good conference this year with an exciting program! Looking forward to attend next year :-)


