Crypto Virology Seminar.PPT - 123SeminarsOnly

Countermeasures
BBackups k
Anti‐virus software : Implement mechanisms
to detect viruses immediately after
infiltration.
Access control to cryptographic tools
If strong crypto ciphers and random number
generators are available to user processes, then
they are available to viruses.
On‐line proactive anti‐viral measures –
theoretic for now now.
References
Cryptovirology: Extortion‐Based Security Threats and
Countermeasures
Cryptanalysis of the Gpcode.ak ransomware virus, Eran Tromer ,
MIT
An Analysis of Conficker's Logic and Rendezvous Points: Phillip
Porras, Hassen Saidi, and Vinod Yegneswaran
http://mtc.sri.com/Conficker
CConficker fi k C Analysis: A l i Philli Phillip PPorras, HHassen Sidi Saidi, and d Vi Vinod d
Yegneswaran
http://www.viruslist.com/en/viruses/encyclopedia?virusid=313
444
http://en.wikipedia.org/wiki/Gpcode
How to Withstand mobile virus attacks by Ostrovsky and Yung.
37
39
Conclusion
CCryptographic hi tools l can bbe used d to create a
new class of viruses: Cryptoviruses
Author h need d not bbe aware of f underlying d l
cryptography –use available functions
Gives the virus writer an extortion method
Better to make attacks publicly known than to
wait for attacks to occur
38