SBIR Phase I: SpiderWeb - Self-Healing Networks for Spyware Detection

SBIR 第一阶段：SpiderWeb - 用于间谍软件检测的自我修复网络

• 批准号: 0638170
• 负责人: Hao Wang
• 金额: --
• 依托单位: NOVASHIELD, Inc.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-01-01 至 2007-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0638170&HistoricalAwards=false
• 关键词: SBIR; Phase; SpiderWeb; Self; Healing

This Small Business Innovation Research Phase I project aims to design and develop a novel solution that addresses the spyware problem; one of the fastest growing security threats today. To address the growing spyware epidemic, this effort proposes a solution that can: (1) detect previously unseen spyware, and (2) automatically generate signatures for a newly detected spyware so that all other computers within a same network (e.g., a corporate network) can automatically gain protection from the new spyware. Two key challenges that must be addressed include: how to efficiently detect spyware behavior, and how to automatically generate succinct spyware signatures and propagate the information to other computers.Recent studies have suggested that the anti-spyware market is expected to expand from $12 million in 2003 to more than $300 million in 2008 with significant growth potential in the future. As part of the commercialization strategy, this effort plans to leverage the capability of the proposed system with two existing open-source based products: ClamAV and Snort.

这个小型企业创新研究第一阶段项目旨在设计和开发一种新的解决方案，以解决间谍软件问题；间谍软件问题是当今增长最快的安全威胁之一。为了应对日益增长的间谍软件流行，这项工作提出了一种解决方案，该解决方案可以：(1)检测以前未见的间谍软件，以及(2)自动为新检测到的间谍软件生成签名，以便同一网络(例如，公司网络)内的所有其他计算机可以自动获得对新间谍软件的保护。必须解决的两个关键挑战包括：如何有效地检测间谍软件行为，以及如何自动生成简洁的间谍软件签名并将信息传播到其他计算机。最近的研究表明，反间谍软件市场预计将从2003年的1200万美元扩大到2008年的3亿美元以上，未来有巨大的增长潜力。作为商业化战略的一部分，这项工作计划利用提议的系统与两个现有的基于开放源码的产品：ClamAV和Snort的能力。