{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T07:46:29Z","timestamp":1742975189628,"version":"3.40.3"},"publisher-location":"Cham","reference-count":35,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319941462"},{"type":"electronic","value":"9783319941479"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-319-94147-9_18","type":"book-chapter","created":{"date-parts":[[2018,6,16]],"date-time":"2018-06-16T03:40:43Z","timestamp":1529120443000},"page":"227-242","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Detection in the Dark \u2013 Exploiting XSS Vulnerability in C&C Panels to Detect Malwares"],"prefix":"10.1007","author":[{"given":"Shay","family":"Nachum","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Assaf","family":"Schuster","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Opher","family":"Etzion","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,6,17]]},"reference":[{"key":"18_CR1","doi-asserted-by":"publisher","first-page":"25","DOI":"10.5120\/11480-7108","volume":"67","author":"I Saeed","year":"2013","unstructured":"Saeed, I., Selamat, A., Abuagoub, A., Abdulaziz, S.: A survey on malware and malware detection systems. Int. J. Comput. Appl. 67, 25\u201332 (2013). https:\/\/doi.org\/10.5120\/11480-7108","journal-title":"Int. J. Comput. Appl."},{"key":"18_CR2","doi-asserted-by":"publisher","unstructured":"Feily, M., Shahrestani, A., Ramadass, S.: A survey of botnet and botnet detection. In: Proceedings of 2009 3rd International Conference on Emerging Security Information, Systems and Technologies, SECURWARE 2009, pp. 268\u2013273 (2009). https:\/\/doi.org\/10.1109\/securware.2009.48","DOI":"10.1109\/securware.2009.48"},{"key":"18_CR3","unstructured":"Cyber Kill Chain\u00ae. https:\/\/www.lockheedmartin.com\/en-us\/capabilities\/cyber\/cyber-kill-chain.html"},{"key":"18_CR4","unstructured":"Cross-site Scripting (XSS) \u2013 OWASP. https:\/\/www.owasp.org\/index.php\/Cross-site_Scripting_(XSS)"},{"key":"18_CR5","unstructured":"Sood, A.K.: Exploiting fundamental weaknesses in botnet Command and Control (C & C) panels. Presented at the 2014 (2014)"},{"key":"18_CR6","unstructured":"Sood, A.K.: Malware at Stake: For Fun - XSS in ICE IX C&C Panel. https:\/\/secniche.blogspot.co.il\/2012\/06\/for-fun-xss-in-ice-ix-bot-admin-panel.html"},{"key":"18_CR7","unstructured":"Phase Bot \u2013 Exploiting C&C Panel | MalwareTech. https:\/\/www.malwaretech.com\/2014\/12\/phase-bot-exploiting-c-pane.html"},{"key":"18_CR8","unstructured":"Wallace, B.: A Study in Bots: Dexter. https:\/\/blog.cylance.com\/a-study-in-bots-dexter-pos-botnet-malware"},{"key":"18_CR9","doi-asserted-by":"publisher","unstructured":"Watkins, L., Silberberg, K., Morales, J.A., Robinson, W.H.: Using inherent command and control vulnerabilities to halt DDoS attacks. In: 2015 10th International Conference on Malicious Unwanted Software, MALWARE 2015, pp. 3\u201310 (2016). https:\/\/doi.org\/10.1109\/malware.2015.7413679","DOI":"10.1109\/malware.2015.7413679"},{"key":"18_CR10","unstructured":"Goodin, D.: White hats publish DDoS hijacking manual, turn tables on attackers | Ars Technica. https:\/\/arstechnica.com\/information-technology\/2012\/08\/ddos-take-down-manual\/"},{"key":"18_CR11","unstructured":"Goodin, D.: Zeus botnets\u2019 Achilles\u2019 Heel makes infiltration easy \u2022 The Register. http:\/\/www.theregister.co.uk\/2010\/09\/27\/zeus_botnet_hijacking"},{"key":"18_CR12","unstructured":"Grange, W.: Digital Vengeance: Exploiting the Most Notorious C & C Toolkits Ethics of Hacking back (2017)"},{"key":"18_CR13","series-title":"Network Security","volume-title":"The Virtual Battlefield: Perspectives on Cyber Warfare","author":"K Geers","year":"2009","unstructured":"Geers, K., Czosseck, C.: The Virtual Battlefield: Perspectives on Cyber Warfare. Network Security. IOS Press, Amsterdam (2009). 305 pages"},{"key":"18_CR14","unstructured":"Dereszowski, A.: Targeted attacks: from being a victim to counter attacking, pp. 1\u201328 (2010)"},{"key":"18_CR15","unstructured":"Rascagn\u00e8res, P.: Public document APT1: technical backstage malware analysis. General Information History, pp. 1\u201348 (2013)"},{"key":"18_CR16","unstructured":"Denbow, S., Hertz, J.: Pest control: taming the rats (2012)"},{"key":"18_CR17","unstructured":"Eisenbarth, M., Jones, J.: BladeRunner: adventures in tracking botnets. In: Botconf (2013)"},{"key":"18_CR18","unstructured":"Gundert, L.: Proactive Threat Identification Neutralizes Remote Access Trojan Efficacy (2015)"},{"key":"18_CR19","unstructured":"Singel, R.: Security Guru Gives Hackers a Taste of Their Own Medicine | WIRED. https:\/\/www.wired.com\/2008\/04\/researcher-demo\/"},{"key":"18_CR20","doi-asserted-by":"publisher","unstructured":"Watkins, L., Kawka, C., Corbett, C., Robinson, W.H.: Fighting banking botnets by exploiting inherent command and control vulnerabilities. In: Proceedings of the 9th IEEE International Conference on Malicious Unwanted Software, MALCON 2014, pp. 93\u2013100 (2014). https:\/\/doi.org\/10.1109\/malware.2014.6999411","DOI":"10.1109\/malware.2014.6999411"},{"key":"18_CR21","unstructured":"Application Verifier | Microsoft Docs. https:\/\/docs.microsoft.com\/en-us\/windows-hardware\/drivers\/debugger\/application-verifier"},{"key":"18_CR22","unstructured":"Kageyu, T.: MinHook - The Minimalistic x86\/x64 API Hooking Library. https:\/\/www.codeproject.com\/Articles\/44326\/MinHook-The-Minimalistic-x-x-API-Hooking-Libra"},{"key":"18_CR23","unstructured":"Kovacs, E.: Alleged Author of MegalodonHTTP Malware Arrested | SecurityWeek.Com. https:\/\/www.securityweek.com\/alleged-author-megalodonhttp-malware-arrested"},{"key":"18_CR24","unstructured":"Dexter (malware). https:\/\/en.wikipedia.org\/wiki\/Dexter_(malware)"},{"key":"18_CR25","unstructured":"Wallace, B.: A Study in Bots: DiamondFox. https:\/\/www.cylance.com\/a-study-in-bots-diamondfox"},{"key":"18_CR26","unstructured":"PHP: mysql_real_escape_string \u2013 Manual. http:\/\/php.net\/manual\/en\/function.mysql-real-escape-string.php"},{"key":"18_CR27","unstructured":"PHP: htmlentities \u2013 Manual. http:\/\/php.net\/manual\/en\/function.htmlentities.php"},{"key":"18_CR28","unstructured":"Top 10-2017 Top 10 \u2013 OWASP. https:\/\/www.owasp.org\/index.php\/Top_10-2017_Top_10"},{"key":"18_CR29","unstructured":"Agmon, O., Posener, B.E., Schuster, A., Mu, A.: Ginseng: Market-Driven Memory Allocation"},{"key":"18_CR30","doi-asserted-by":"publisher","unstructured":"Sharfman, I., Schuster, A., Keren, D.: Shape sensitive geometric monitoring categories and subject descriptors. In: PODS (2008). https:\/\/doi.org\/10.1145\/1376916.1376958","DOI":"10.1145\/1376916.1376958"},{"key":"18_CR31","doi-asserted-by":"crossref","unstructured":"Friedman, A., Keren, D.: Privacy-preserving distributed stream monitoring. In: NDSS, pp. 23\u201326 (2014)","DOI":"10.14722\/ndss.2014.23128"},{"key":"18_CR32","doi-asserted-by":"publisher","unstructured":"Ben-Yehuda, O.A., Ben-Yehuda, M., Schuster, A., Tsafrir, D.: The Resource-as-a-Service (RaaS) cloud. Commun. ACM 57, 76\u201384. https:\/\/doi.org\/10.1145\/2627422","DOI":"10.1145\/2627422"},{"key":"18_CR33","doi-asserted-by":"publisher","unstructured":"Gilburd, B., Schuster, A., Wolff, R.: k-TTP: a new privacy model for large-scale distributed environments. In: Proceedings of the Tenth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 563\u2013568 (2004). https:\/\/doi.org\/10.1145\/1014052.1014120","DOI":"10.1145\/1014052.1014120"},{"key":"18_CR34","unstructured":"Schuster, A., Wolff, R., Gilburd, B.: Privacy-preserving association rule mining in large-scale distributed systems. In: Proceedings of Cluster Computing and Grid, pp. 1\u20138 (2004)"},{"key":"18_CR35","doi-asserted-by":"publisher","unstructured":"Verner, U., Schuster, A., Silberstein, M., Mendelson, A.: Scheduling processing of real-time data streams on heterogeneous multi-GPU systems. In: Proceedings of the 5th Annual International Systems and Storage Conference - SYSTOR 2012, pp. 1\u201312 (2012). https:\/\/doi.org\/10.1145\/2367589.2367596","DOI":"10.1145\/2367589.2367596"}],"container-title":["Lecture Notes in Computer Science","Cyber Security Cryptography and Machine Learning"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-94147-9_18","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,7]],"date-time":"2024-03-07T15:38:32Z","timestamp":1709825912000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-94147-9_18"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783319941462","9783319941479"],"references-count":35,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-94147-9_18","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2018]]},"assertion":[{"value":"17 June 2018","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CSCML","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Cyber Security Cryptography and Machine Learning","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Beer-Sheva","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Israel","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 June 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 June 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"cscml2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.cs.bgu.ac.il\/~fradmin\/cscml18\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Open","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"55","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"16","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"29% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}