14532 research outputs found
Sort by
Professionalization as an Innovation ―Case study of Hematopoietic Cell Transplant Coordinator―
Get PDF横浜国立大学博士（経営学
Study on the learning effects of ecomuseum in a suburban residential city - A case study in Chigasaki city, Kanagawa prefecture -
Get PDF横浜国立大学博士（工学）この学位論文の全文は、中央図書館で平日17時までに申請することで閲覧が可能です
The 'Transformation' of the Self-Defense Forces' Overseas Deployment Policy: State Behavior in Pursuit of Norms-mediated Interests and Power
No full text横浜国立大学博士（学術）この学位論文の全文は、中央図書館で平日17時までに申請することで閲覧が可能です
Customized Malware: Identifying Target Systems Using Personally Identifiable Information
Get PDFGiven the increasing popularity of sandbox analysis, malware authors have adapted sandbox evasion functionalities into modern malware. In addition, attackers can create Customized Malware that hide their malicious payload until the identifier of the target-specific system can be verified. In this paper, we propose an attack scenario in which adversaries can leverage publicly available personally identifiable information present in the target system as specific identifiers. The proposed attack scenario can be used in targeted attacks, especially against hosts that store business email addresses on personal computers (PCs). We investigated a set of desktop applications and specified 18 popular applications that store email addresses in their related files or directories. We also implemented a survey tool to access these applications and record whether email addresses were found. We then asked nine laboratory members and staff if the target-specific email address was found and if we could extract the same email address from each PC with 16 applications. Finally, we implemented a dummy malware sample that searches for the target host's email address from the executing environment and denies unpacking the malicious payload if the mark does not exist. The experiment results demonstrate that two modern mal ware security appliances did not detect the prototype sample. To defend against the proposed attack, we discuss countermeasures from both the sandbox and user perspective. We contacted security vendors to allow them to prepare for such attacks and provided POC programs.2024 IEEE 48th Annual Computers, Software, and Applications Conference (COMPSAC)
Osaka University Nakanoshima Center
2-4 July 202
