Forensic Analysis of Configuration-based Attacks
Muhammad Adil Inam, Wajih Ul Hassan, Ali Mumin Ahad, Adam Bates, Rashid Tahir, Tianyin Xu, Fareed Zaffar
Abstract
Causality analysis is an effective technique for investigating and detecting cyber attacks. However, by focusing on auditing at the Operating System level, existing causal analysis techniques lack visibility into important application-level semantics, such as configuration changes that control application runtime behavior. This leads to incorrect attack attribution and half-baked tracebacks.
Topics & Concepts
Computer scienceAdvanced Malware Detection Techniques