Research in Attacks, Intrusions, and Defenses: 20th International Symposium, RAID 2017, Atlanta, GA, USA, September 18–20, 2017, Proceedings

Front Matter ....Pages I-XIII
Front Matter ....Pages 1-1
 VDF: Targeted Evolutionary Fuzz Testing of Virtual Devices  (Andrew Henderson, Heng Yin, Guang Jin, Hao Han, Hongmei Deng)....Pages 3-25
 Static Program Analysis as a Fuzzing Aid  (Bhargava Shastry, Markus Leutner, Tobias Fiebig, Kashyap Thimmaraju, Fabian Yamaguchi, Konrad Rieck et al.)....Pages 26-47
 Breaking Fitness Records Without Moving: Reverse Engineering and Spoofing Fitbit  (Hossein Fereidooni, Jiska Classen, Tom Spink, Paul Patras, Markus Miettinen, Ahmad-Reza Sadeghi et al.)....Pages 48-69
Front Matter ....Pages 71-71
 Lens on the Endpoint: Hunting for Malicious Software Through Endpoint Data Analysis  (Ahmet Salih Buyukkayhan, Alina Oprea, Zhou Li, William Robertson)....Pages 73-97
 Redemption: Real-Time Protection Against Ransomware at End-Hosts  (Amin Kharraz, Engin Kirda)....Pages 98-119
 ILAB: An Interactive Labelling Strategy for Intrusion Detection  (Anaël Beaugnon, Pierre Chifflier, Francis Bach)....Pages 120-140
Front Matter ....Pages 141-141
 Precisely and Scalably Vetting JavaScript Bridge in Android Hybrid Apps  (Guangliang Yang, Abner Mendoza, Jialong Zhang, Guofei Gu)....Pages 143-166
 Filtering for Malice Through the Data Ocean: Large-Scale PHA Install Detection at the Communication Service Provider Level  (Kai Chen, Tongxin Li, Bin Ma, Peng Wang, XiaoFeng Wang, Peiyuan Zong)....Pages 167-191
 Android Malware Clustering Through Malicious Payload Mining  (Yuping Li, Jiyong Jang, Xin Hu, Xinming Ou)....Pages 192-214
Front Matter ....Pages 215-215
 Stealth Loader: Trace-Free Program Loading for API Obfuscation  (Yuhei Kawakoya, Eitaro Shioji, Yuto Otsuki, Makoto Iwamura, Takeshi Yada)....Pages 217-237
 LAZARUS: Practical Side-Channel Resilient Kernel-Space Randomization  (David Gens, Orlando Arias, Dean Sullivan, Christopher Liebchen, Yier Jin, Ahmad-Reza Sadeghi)....Pages 238-258
 CFI CaRE: Hardware-Supported Call and Return Enforcement for Commercial Microcontrollers  (Thomas Nyman, Jan-Erik Ekberg, Lucas Davi, N. Asokan)....Pages 259-284
Front Matter ....Pages 285-285
 Mining on Someone Else’s Dime: Mitigating Covert Mining Operations in Clouds and Enterprises  (Rashid Tahir, Muhammad Huzaifa, Anupam Das, Mohammad Ahmad, Carl Gunter, Fareed Zaffar et al.)....Pages 287-310
 BEADS: Automated Attack Discovery in OpenFlow-Based SDN Systems  (Samuel Jero, Xiangyu Bu, Cristina Nita-Rotaru, Hamed Okhravi, Richard Skowyra, Sonia Fahmy)....Pages 311-333
 Trapped by the UI: The Android Case  (Efthimios Alepis, Constantinos Patsakis)....Pages 334-354
Front Matter ....Pages 355-355
 Sgx-Lapd: Thwarting Controlled Side Channel Attacks via Enclave Verifiable Page Faults  (Yangchun Fu, Erick Bauman, Raul Quinonez, Zhiqiang Lin)....Pages 357-380
 Secure In-Cache Execution  (Yue Chen, Mustakimur Khandaker, Zhi Wang)....Pages 381-402
 Scotch: Combining Software Guard Extensions and System Management Mode to Monitor Cloud Resource Usage  (Kevin Leach, Fengwei Zhang, Westley Weimer)....Pages 403-424
Front Matter ....Pages 425-425
 Linking Amplification DDoS Attacks to Booter Services  (Johannes Krupp, Mohammad Karami, Christian Rossow, Damon McCoy, Michael Backes)....Pages 427-449
 Practical and Accurate Runtime Application Protection Against DoS Attacks  (Mohamed Elsabagh, Dan Fleck, Angelos Stavrou, Michael Kaplan, Thomas Bowen)....Pages 450-471
 Exploring the Ecosystem of Malicious Domain Registrations in the .eu TLD  (Thomas Vissers, Jan Spooren, Pieter Agten, Dirk Jumpertz, Peter Janssen, Marc Van Wesemael et al.)....Pages 472-493
Back Matter ....Pages 495-496