Macroscopic View of Malware in Home Networks

Alessandro Finamore (1) , Sabyasachi Saha (2) , Gaspar Modelo-Howard (2) , Sung-Ju Lee (2) , Enrico Bocchi (1, 3, 4, 5) , Luigi Grimaudo (1) , M. Mellia (1) , Elena Baralis (1)

1 Polito - Politecnico di Torino = Polytechnic of Turin
2 Symantec Corporation
3 LINCS - Laboratory of Information, Network and Communication Sciences
4 RMS - Réseaux, Mobilité et Services
5 INFRES - Département Informatique et Réseaux

Malicious activities on the Web are increasingly threatening users in the Internet. Home networks are one of the prime targets of the attackers to host malwares, commonly exploited as a stepping stone to further launch a variety of attacks. Due to diversification, existing security solutions often fail to detect malicious activities which remain hidden and pose threats to users security and privacy. Characterizing behavioral patterns of known malwares can help to improve the classification accuracy of known threats. More important, since different malwares can share some commonalities, study the behavior of known malwares can enable the detection of previously unknown malicious activities. We pose the research question if it is possible to characterize such behavioral patterns analyzing the traffic from known infected clients. In this paper, we present our quest to discover such characterizations. Results show that commonalities arise but their identification may require some ingenuity. Also, more malicious activities can be found out from this analysis.

Domains: Computer Science [cs]; Networking and Internet Architecture [cs.NI]

Alessandro Finamore, Sabyasachi Saha, Gaspar Modelo-Howard, Sung-Ju Lee, Enrico Bocchi, et al.. Macroscopic View of Malware in Home Networks. 12th Annual IEEE Consumer Communications & Networking Conference (IEEE CCNC'15), Jan 2015, Las Vegas, United States. pp.262 - 266, ⟨10.1109/CCNC.2015.7157987⟩. ⟨hal-01351253⟩