SEISMIC: SEcure In-lined Script Monitors for Interrupting Cryptojacks
SEISMIC: SEcure In-lined Script Monitors for Interrupting Cryptojacks
复制标题
SEISMIC：用于中断 Cryptojack 的安全内联脚本监视器
DOI：
10.1007/978-3-319-98989-1_7
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
S. Hao
中科院分区：
文献类型：
--
作者：
Wenhao Wang;Benjamin Ferrell;Xiaoyang Xu;Kevin W. Hamlen;S. Hao
根据语义签名匹配，提出了一种检测和中断未经授权的基于浏览器的加密态的方法。该方法解决了一波新浪的加密劫持攻击，包括XSS辅助，Web小工具探索伪造的采矿。评估表明，该方法比当前的静态代码分析防御能力更强大，后者容易受到代码混淆攻击的影响。基于衬里参考监视的实现提供了一种浏览器 - 无形部署策略，该策略适用于没有专门硬件或操作系统的平均最终用户系统。
A method of detecting and interrupting unauthorized, browser-based cryptomining is proposed, based on semantic signature-matching. The approach addresses a new wave of cryptojacking attacks, including XSS-assisted, web gadget-exploiting counterfeit mining. Evaluation shows that the approach is more robust than current static code analysis defenses, which are susceptible to code obfuscation attacks. An implementation based on in-lined reference monitoring offers a browser-agnostic deployment strategy that is applicable to average end-user systems without specialized hardware or operating systems.