{"id":97,"date":"2020-05-29T21:59:53","date_gmt":"2020-05-29T13:59:53","guid":{"rendered":"https:\/\/blog.secdr.org\/?p=97"},"modified":"2020-05-29T21:59:53","modified_gmt":"2020-05-29T13:59:53","slug":"dimva-2020-%e8%ae%ba%e6%96%87%e5%bd%95%e7%94%a8%e5%88%97%e8%a1%a8","status":"publish","type":"post","link":"https:\/\/blog.secdr.org\/?p=97","title":{"rendered":"DIMVA 2020 \u8bba\u6587\u5f55\u7528\u5217\u8868"},"content":{"rendered":"\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1343\" height=\"570\" src=\"https:\/\/blog.secdr.org\/wp-content\/uploads\/2020\/05\/QQ\u622a\u56fe20200529215747.jpg\" alt=\"\" class=\"wp-image-98\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Detection of Intrusions and Malware &amp; Vulnerability Assessment(DIMVA)\u662f&nbsp;<strong>CCF C&nbsp;<\/strong>\u7c7b\u4f1a\u8bae\uff0c\u4e00\u76f4\u4ee5\u6765\u4f1a\u8bae\u4fa7\u91cd\u7814\u7a76\u5165\u4fb5\u68c0\u6d4b\u3001\u6076\u610f\u5206\u6790\u3001\u6f0f\u6d1e\u8bc4\u4f30\u7b49\u65b9\u9762\u7684\u4e13\u9898\u4f1a\u8bae\uff0c\u5176\u8bba\u6587\u8d44\u6599\u548c\u7814\u7a76\u70b9\u5f80\u5f80\u5177\u6709\u5b9e\u9645\u5e94\u7528\u4ef7\u503c\u30022020\u5e74DIMVA\u63a5\u6536\u4e8613\u7bc7\u8bba\u6587(2019\u5e74:23, 2018\u5e74:18\u7bc7)\uff0c\u5f55\u7528\u738726%(2019\u5e74:26.74%, 2018\u5e74:32.14%)\uff0c\u5f55\u7528\u8bba\u6587\u6807\u9898\u5982\u4e0b\uff1a<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Vulnerability discovery and analysis<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022Automated CPE labeling of CVE summaries with Machine Learning<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Emil W\u00e5reus and Martin Hell<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022ackstabber&#8217;s Knife Collection: A Review of Open Source Software Supply Chain Attacks<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Marc Ohm, Henrik Plate, Arnold Sykosch, and Michael Meier<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022Putting Attacks in Context: A Building Automation Testbed for Impact Assessment from the Victim\u2019s Perspective<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Herson Esquivel-Vargas, Marco Caselli, Geert Jan Laanstra, and Andreas Peter<\/p><\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">Attacks<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022Fast and Furious: Outrunning Windows Kernel Notification Routines from User-Mode<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Pierre Ciholas, Jose Miguel Such, Angelos K. Marnerides, Benjamin Green, Jiajie Zhang, and Utz Roedig<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022HAEPG: An Automatic Multi-hop Exploitation Generation Framework<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Zixuan Zhao, Yan Wang, and Xiaorui Gong<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022Understanding Android VoIP Security: A System-level Vulnerability Assessment<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>En He, Daoyuan Wu, and Robert H. Deng<\/p><\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">Web security<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022Web Runner 2049: Evaluating Third-Party Anti-bot Services<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Babak Amin Azad, Oleksii Starov, Pierre Laperdrix, and Nick Nikiforakis<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022Short Paper &#8211; Taming The Shape Shifter: Detecting Anti-fingerprinting Browsers<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Babak Amin Azad, Oleksii Starov, Pierre Laperdrix, and Nick Nikiforakis<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022It Never Rains but It Pours: Analyzing and Detecting Fake Removal Information Advertisement Sites<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Takashi Koide, Daiki Chiba, Mitsuaki Akiyama, Katsunari Yoshioka, and Tsutomu Matsumoto<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022On the Security of Application Installers &amp; Online Software Repositories<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Marcus Botacin, Giovanni Bert\u00e3o, Paulo de Geus, Andr\u00e9 Gr\u00e9gio, Christopher Kruegel, and Giovanni Vigna<\/p><\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">Detection and containment<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022Distributed Heterogeneous N-Variant Execution<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Alexios Voulimeneas, Dokyung Song, Fabian Parzefall, Yeoul Na, Per Larsen, Michael Franz, and Stijn Volckaer<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022Sec2graph: Network Attack Detection based on Novelty Detection on Graph Structured Data<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Laetitia Leichtnam, Eric Totel, Nicolas Prigent, and Ludovic M\u00e9<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u2022Efficient Context-Sensitive CFI Enforcement through a Hardware Monitor<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Sadullah Canakci, Leila Delshadtehrani, Boyou Zhou, Ajay Joshi, and Manuel Egele<\/p><\/blockquote>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>\u4f1a\u8bae\u4e3b\u9875<\/strong><\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><a href=\"https:\/\/dimva2020.campus.ciencias.ulisboa.pt\">https:\/\/dimva2020.campus.ciencias.ulisboa.pt<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5ef6\u4f38\u9605\u8bfb\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a target=\"_blank\" href=\"http:\/\/mp.weixin.qq.com\/s?__biz=MzU5MTM5MTQ2MA==&amp;mid=2247484327&amp;idx=1&amp;sn=e0955ebd41f2b47d2d3ad91d8f1fba97&amp;chksm=fe2efc2cc959753a319af6352e1cd495165e663c010ab25851cb84feda0f4cc7cfc0d1c32b43&amp;scene=21#wechat_redirect\" rel=\"noreferrer noopener\">DIMVA 2019 \u8bba\u6587\u5f55\u7528\u5217\u8868<\/a><\/li><li><a target=\"_blank\" href=\"http:\/\/mp.weixin.qq.com\/s?__biz=MzU5MTM5MTQ2MA==&amp;mid=2247483811&amp;idx=1&amp;sn=5d929e29d670f6e1fb8f23e4b4dc73cb&amp;chksm=fe2efe28c959773eadd7c9a6f8c86efe35628717cbf9c0ce74d5edf42656de4c8b128a62fc5d&amp;scene=21#wechat_redirect\" rel=\"noreferrer noopener\">DIMVA 2018\u8bba\u6587\u5f55\u7528\u5217\u8868<\/a><br><\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><a rel=\"noreferrer noopener\" target=\"_blank\" href=\"http:\/\/mp.weixin.qq.com\/s?__biz=MzU5MTM5MTQ2MA==&amp;mid=2247484475&amp;idx=1&amp;sn=2c91c6a161d1c5bc3b424de3bccaaee0&amp;chksm=fe2efbb0c95972a67513c3340c98e20c752ca06d8575838c1af65fc2d6ddebd7f486aa75f6c3&amp;scene=21#wechat_redirect\">\u5b89\u5168\u5b66\u672f\u5708\u62db\u52df\u961f\u53cb-ing<\/a>, \u6709\u5174\u8da3\u52a0\u5165\u5b66\u672f\u5708\u7684\u8bf7\u8054\u7cfbsecdr#qq.com<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"453\" height=\"160\" src=\"https:\/\/blog.secdr.org\/wp-content\/uploads\/2020\/03\/aboutabout.png\" alt=\"\" class=\"wp-image-32\"\/><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Detection of Intrusions and Malware &#038; Vulnerability Assessment(DIMVA)\u662f CCF C \u7c7b\u4f1a\u8bae\uff0c\u4e00\u76f4\u4ee5\u6765\u4f1a\u8bae\u4fa7\u91cd\u7814\u7a76\u5165\u4fb5\u68c0\u6d4b\u3001\u6076\u610f\u5206\u6790\u3001\u6f0f\u6d1e\u8bc4\u4f30\u7b49\u65b9\u9762\u7684\u4e13\u9898\u4f1a\u8bae\uff0c\u5176\u8bba\u6587\u8d44\u6599\u548c\u7814\u7a76\u70b9\u5f80\u5f80\u5177\u6709\u5b9e\u9645\u5e94\u7528\u4ef7\u503c\u3002<\/p>\n","protected":false},"author":1,"featured_media":98,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[37,49,52,51,50],"class_list":["post-97","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-accepted_list","tag-37","tag-dimva","tag-52","tag-51","tag-50"],"_links":{"self":[{"href":"https:\/\/blog.secdr.org\/index.php?rest_route=\/wp\/v2\/posts\/97","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.secdr.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.secdr.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.secdr.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.secdr.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=97"}],"version-history":[{"count":1,"href":"https:\/\/blog.secdr.org\/index.php?rest_route=\/wp\/v2\/posts\/97\/revisions"}],"predecessor-version":[{"id":99,"href":"https:\/\/blog.secdr.org\/index.php?rest_route=\/wp\/v2\/posts\/97\/revisions\/99"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.secdr.org\/index.php?rest_route=\/wp\/v2\/media\/98"}],"wp:attachment":[{"href":"https:\/\/blog.secdr.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=97"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.secdr.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=97"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.secdr.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=97"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}