<?xml version="1.0" encoding="utf-8" ?>

<rss version="2.0" 
   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
   xmlns:admin="http://webns.net/mvcb/"
   xmlns:dc="http://purl.org/dc/elements/1.1/"
   xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
   xmlns:wfw="http://wellformedweb.org/CommentAPI/"
   xmlns:content="http://purl.org/rss/1.0/modules/content/"
   >
<channel>
    <title>Niels Provos (Entries tagged as research)</title>
    <link>http://www.provos.org/</link>
    <description>systrace, spybye and other things.</description>
    <dc:language>en</dc:language>
    <generator>Serendipity 1.3.1 - http://www.s9y.org/</generator>
    
    

<item>
    <title>LEET '10 Call for Papers</title>
    <link>http://www.provos.org/index.php?/archives/74-LEET-10-Call-for-Papers.html</link>
            <category>Malware</category>
            <category>News</category>
            <category>Security</category>
            <category>SpyBye</category>
            <category>Systrace</category>
    
    <comments>http://www.provos.org/index.php?/archives/74-LEET-10-Call-for-Papers.html#comments</comments>
    <wfw:comment>http://www.provos.org/wfwcomment.php?cid=74</wfw:comment>

    <slash:comments>0</slash:comments>
    <wfw:commentRss>http://www.provos.org/rss.php?version=2.0&amp;type=comments&amp;cid=74</wfw:commentRss>
    

    <author>nospam@example.com (Niels Provos)</author>
    <content:encoded>
    The call for papers for the &lt;strong&gt;3rd USENIX Workshop on Large-Scale Exploits and Emergent Threats&lt;/strong&gt; (LEET &#039;10) Botnets, Spyware, Worms, and More just went out.   It will be held on &lt;strong&gt;April 27, 2010&lt;/strong&gt; in San Jose, CA.&lt;br /&gt;
&lt;br /&gt;
&lt;a href=&quot;http://www.usenix.org/event/leet10/cfp/&quot;&gt;LEET &#039;10&lt;/a&gt; will be co-located with the 7th USENIX Symposium on Networked Systems Design and Implementation (NSDI &#039;10), which will take place April 28–30, 2010.&lt;br /&gt;
&lt;br /&gt;
&lt;strong&gt;Important Dates&lt;/strong&gt;&lt;br /&gt;
&lt;ul&gt;&lt;li&gt;Submissions due: Thursday, February 25, 2010, 11:59 p.m. PST&lt;/li&gt;&lt;li&gt;Notification of acceptance: Wednesday, March 24, 2010&lt;/li&gt;&lt;li&gt;Final papers due: Monday, April 5, 2010&lt;/li&gt;&lt;/ul&gt;&lt;br /&gt;
&lt;strong&gt;Workshop Organizers&lt;/strong&gt;&lt;br /&gt;
&lt;em&gt;Program Chair&lt;/em&gt;&lt;ul&gt;&lt;li&gt;Michael Bailey, University of Michigan&lt;/li&gt;&lt;/ul&gt;&lt;em&gt;Program Committee&lt;/em&gt;&lt;ul&gt;&lt;li&gt;Dan Boneh, Stanford University&lt;/li&gt;&lt;li&gt;Nick Feamster, Georgia Institute of Technology&lt;/li&gt;&lt;li&gt;Jaeyeon Jung, Intel Labs, Seattle&lt;/li&gt;&lt;li&gt;Christian Kreibich, International Computer Science Institute&lt;/li&gt;&lt;li&gt;Patrick McDaniel, Pennsylvania State University&lt;/li&gt;&lt;li&gt;Fabian Monrose, University of North Carolina, Chapel Hill&lt;/li&gt;&lt;li&gt;Jose Nazario, Arbor Networks, Inc.&lt;/li&gt;&lt;li&gt;Stefan Savage, University of California, San Diego&lt;/li&gt;&lt;li&gt;Matt Williamson, AVG Technologies&lt;/li&gt;&lt;li&gt;Yinglian Xie, Microsoft Research&lt;/li&gt;&lt;li&gt;Vinod Yegneswaran, SRI International&lt;/li&gt;&lt;br /&gt;
&lt;/ul&gt;Go submit your work! 
    </content:encoded>

    <pubDate>Sat, 29 Aug 2009 12:35:46 -0700</pubDate>
    <guid isPermaLink="false">http://www.provos.org/index.php?/archives/74-guid.html</guid>
    <category>cfp</category>
<category>malware</category>
<category>research</category>
<category>security</category>

</item>
<item>
    <title>LEET '09 Call for Papers</title>
    <link>http://www.provos.org/index.php?/archives/52-LEET-09-Call-for-Papers.html</link>
            <category>News</category>
            <category>Security</category>
            <category>Systrace</category>
    
    <comments>http://www.provos.org/index.php?/archives/52-LEET-09-Call-for-Papers.html#comments</comments>
    <wfw:comment>http://www.provos.org/wfwcomment.php?cid=52</wfw:comment>

    <slash:comments>0</slash:comments>
    <wfw:commentRss>http://www.provos.org/rss.php?version=2.0&amp;type=comments&amp;cid=52</wfw:commentRss>
    

    <author>nospam@example.com (Niels Provos)</author>
    <content:encoded>
    The &lt;a href=&quot;http://www.usenix.org/event/leet09/cfp/&quot;&gt;CfP&lt;/a&gt; for the 2nd USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET &#039;09): Botnets, Spyware, Worms, and More is up at:&lt;br /&gt;
&lt;br /&gt;
&lt;dl&gt;&lt;dd&gt;&lt;a href=&quot;http://www.usenix.org/event/leet09/cfp/&quot;&gt;http://www.usenix.org/event/leet09/cfp/&lt;/a&gt;.&lt;/dd&gt;&lt;/dl&gt;&lt;br /&gt;
LEET &#039;09 will be held on April 21, 2009 in Boston, MA immediately before the 6th USENIX Symposium on Networked Systems Design and Implementation (NSDI &#039;09), which will take place April 22–24, 2009. &lt;br /&gt;
&lt;br /&gt;
&lt;strong&gt;Important Dates&lt;/strong&gt;&lt;br /&gt;
&lt;ul&gt;&lt;li&gt;Submissions due: January 16, 2009, 11:59 p.m. EST&lt;/li&gt;&lt;li&gt;Notification of acceptance: March 2, 2009&lt;/li&gt;&lt;li&gt;Electronic files due: March 30, 2009&lt;/li&gt;&lt;/ul&gt;&lt;br /&gt;
This will be the second edition of LEET, which had evolved from the combination of two other successful workshops, the ACM Workshop on Recurring Malcode (WORM) and the USENIX Workshop on Hot Topics in Understanding Botnets (HotBots). These two workshops have each dealt with aspects of this problem. However, while papers relating to both worms and botnets are explicitly solicited, LEET has a broader charter than its predecessors. We encourage submissions of papers that focus on any aspect of the underlying mechanisms used to compromise and control hosts, the large-scale &quot;applications&quot; being perpetrated upon this framework, or the social and economic networks driving these threats. 
    </content:encoded>

    <pubDate>Wed, 12 Nov 2008 18:48:12 -0800</pubDate>
    <guid isPermaLink="false">http://www.provos.org/index.php?/archives/52-guid.html</guid>
    <category>cfp</category>
<category>research</category>
<category>security</category>
<category>usenix</category>

</item>
<item>
    <title>The Ghost In The Browser</title>
    <link>http://www.provos.org/index.php?/archives/17-The-Ghost-In-The-Browser.html</link>
            <category>Malware</category>
            <category>SpyBye</category>
    
    <comments>http://www.provos.org/index.php?/archives/17-The-Ghost-In-The-Browser.html#comments</comments>
    <wfw:comment>http://www.provos.org/wfwcomment.php?cid=17</wfw:comment>

    <slash:comments>0</slash:comments>
    <wfw:commentRss>http://www.provos.org/rss.php?version=2.0&amp;type=comments&amp;cid=17</wfw:commentRss>
    

    <author>nospam@example.com (Niels Provos)</author>
    <content:encoded>
            During &lt;a href=&quot;http://www.usenix.org/events/hotbots07/tech/&quot;&gt;HotBots&lt;/a&gt; last month, I presented a paper on a systematic approach for detecting malware on the web called &quot;&lt;a href=http://www.usenix.org/events/hotbots07/tech/full_papers/provos/provos.pdf&gt;The Ghost In The Browser&lt;/a&gt;&quot;.  The paper enumerates all the different ways in which a web page can become malicious and contains some measurements on the prevalance of drive-by-downloads; an in depth analysis of 4.5 million URLs detected 450,000 that were surreptitiously installing malware.  All the more reason for tools such as SpyBye.  Fortunately, I am not the only one working on such tools.   Christian Seifert from the New Zealand Honeypot Alliance recently announced a &lt;a href=http://www.nz-honeynet.org/cwebservice.php&gt;web interface&lt;/a&gt; to their Capture honey client which runs a browser against URLs specified by you.  In a similar vein, &lt;a href=http://www.cs.vu.nl/~herbertb/misc/shelia/&gt;Shelia&lt;/a&gt; is a tool that scans your mail folder and follows URLs contained in it for malware and exploits.   
    </content:encoded>

    <pubDate>Wed, 09 May 2007 19:27:43 -0700</pubDate>
    <guid isPermaLink="false">http://www.provos.org/index.php?/archives/17-guid.html</guid>
    <category>malware</category>
<category>research</category>
<category>security</category>

</item>

</channel>
</rss>