SBIR Phase I: SpiderWeb - Self-Healing Networks for Spyware Detection

SBIR 第一阶段：SpiderWeb - 用于间谍软件检测的自我修复网络

• 批准号: 0638170
• 负责人: Hao Wang
• 金额: --
• 依托单位: NOVASHIELD, Inc.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-01-01 至 2007-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0638170&HistoricalAwards=false
• 关键词: SBIR; Phase; SpiderWeb; Self; Healing

This Small Business Innovation Research Phase I project aims to design and develop a novel solution that addresses the spyware problem; one of the fastest growing security threats today. To address the growing spyware epidemic, this effort proposes a solution that can: (1) detect previously unseen spyware, and (2) automatically generate signatures for a newly detected spyware so that all other computers within a same network (e.g., a corporate network) can automatically gain protection from the new spyware. Two key challenges that must be addressed include: how to efficiently detect spyware behavior, and how to automatically generate succinct spyware signatures and propagate the information to other computers.Recent studies have suggested that the anti-spyware market is expected to expand from $12 million in 2003 to more than $300 million in 2008 with significant growth potential in the future. As part of the commercialization strategy, this effort plans to leverage the capability of the proposed system with two existing open-source based products: ClamAV and Snort.

这个小型企业创新研究阶段I项目旨在设计和开发一种解决间谍软件问题的新颖解决方案。当今增长最快的安全威胁之一。 为了解决日益增长的间谍软件流行病，这项工作提出了一种可以：（1）检测以前看不见的间谍软件，（2）自动为新检测到的间谍软件生成签名，以便同一网络中的所有其他计算机（例如，公司网络）可以自动从新的Spyware中获得保护。 必须解决的两个关键挑战包括：如何有效地检测间谍软件的行为，以及如何自动产生简洁的间谍软件签名并将信息传播到其他计算机中。当时的研究表明，预计反间谍市场将从2003年的1200万美元扩展到2008年的3亿美元，并在未来具有巨大的增长潜力。 作为商业化策略的一部分，这项工作计划利用两种现有的基于开源的产品来利用拟议系统的能力：Clamav和Snort。