Practical Experiences with Purenet, a Self-Learning Malware Prevention System - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

Practical Experiences with Purenet, a Self-Learning Malware Prevention System

Alapan Arnab
  • Fonction : Auteur
  • PersonId : 1015545
Tobias Martin
  • Fonction : Auteur
  • PersonId : 1015546
Andrew Hutchison
  • Fonction : Auteur
  • PersonId : 1015547

Résumé

This paper introduces Purenet, which is a self-learning malware detection system aimed at avoiding zero-day attacks and other delays in patching application systems when attacks are identified. The concept and architecture of Purenet are described, specifically positioning anomaly detection as the system enabler. Deployment of the system in an operational environment is discussed, and associated recommendations and findings are presented based on this. Findings from the prototype include various considerations which should influence the design of such security software including latency considerations, multi protocol support, cloud anti-malware integration, resource requirement issues, reporting, base platform hardening and SIEM integration.
Fichier principal
Vignette du fichier
978-3-642-19228-9_6_Chapter.pdf (510.69 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01581334 , version 1 (04-09-2017)

Licence

Paternité

Identifiants

Citer

Alapan Arnab, Tobias Martin, Andrew Hutchison. Practical Experiences with Purenet, a Self-Learning Malware Prevention System. 1st Open Research Problems in Network Security (iNetSec), Mar 2010, Sofia, Bulgaria. pp.56-69, ⟨10.1007/978-3-642-19228-9_6⟩. ⟨hal-01581334⟩
67 Consultations
61 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More