Network in Internet and Mobile Malicious Software (NIMBUS)

互联网和移动恶意软件中的网络 (NIMBUS)

• 批准号: EP/K003445/1
• 负责人: Sakir Sezer
• 金额: $ 12.79万
• 依托单位: Queen's University Belfast
• 依托单位国家: 英国
• 项目类别: Research Grant
• 财政年份: 2012
• 资助国家: 英国
• 起止时间: 2012 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=EP%2FK003445%2F1
• 关键词: Network; Internet; Mobile; Malicious; Software

The transformation of communication and computing technologies in terms of accessibility, ubiquity, mobility and coverage, has enabled new opportunities for personalised on-demand communication (e.g. Facebook, Twitter). This is in addition to new market places for e-commerce and e-businesses, personalised platforms for e-governments and a vast range of new user-centric applications and services. The number of mobile apps (iPhone, Android) taking advantage of the cloud infrastructure has risen beyond several hundred thousand, reshaping the way we communicate and socialise. This shift in communication technology and services has also led to the emergence of unforeseen types of security and privacy threats with social, economic and political incentives, resulting in major research challenges in terms of the protection and security of information assets in storage and transmission. Therefore, Digital Security is vital in ensuring the UK is a safe place to do business, can act as a source of competitive advantage for foreign direct investment and provide a platform for SMEs and large corporations alike to develop products that use or supply this security market.Recent years have seen a massive growth in malware, fuelled by the evolution of the Internet and the migration from malware written by hobbyists to professionally devised malware developed by rogue corporations and organized criminals, primarily targeted for financial or political gain. In 2010, Symantec identified more than 240 million new malicious programs; albeit that many of these are variants of existing malware. Another report, suggests that the actual malware family count is between 1,000 and 3,000.The detection of malware is a major and ongoing problem. The battle against malware has escalated over the past decade as malware has evolved from simple programs that had little ability to evade detection, the main objective of which was to cause havoc, to more complex programs that target profit and deploy sophisticated evasion techniques.The focus of the NIMBUS network of researchers is to act as a catalyst to develop a balanced programme of both blue skies research and near term applied research that will assist in the fight against cyber crime in the UK. Malware related cyber threats are global in nature, hence it is essential that an international approach is taken to address these issues. Only a global network of centers of excellence is expected to provide the essential breadth and depth of know-how and the necessary critical mass of specialist competencies for resolving major Cyber Security challenges. NIMBUS will act as the UK's interface to international engagements with research networks in Europe, US and Asia.

通信和计算技术在可访问性、普遍性、移动性和覆盖范围方面的转变为个性化按需通信（例如Facebook、Twitter）带来了新的机会。除此之外，电子商务和电子商务的新市场、电子政府的个性化平台以及大量以用户为中心的新应用程序和服务。利用云基础设施的移动的应用程序（iPhone、Android）数量已超过数十万，重塑了我们沟通和社交的方式。通信技术和服务的这一转变还导致出现了具有社会、经济和政治动机的不可预见的安全和隐私威胁，从而在存储和传输中的信息资产的保护和安全方面带来了重大的研究挑战。因此，数字安全对于确保英国是一个安全的商业场所至关重要，可以作为外国直接投资的竞争优势来源，并为中小企业和大型企业提供平台，以开发使用或供应此安全市场的产品。近年来，恶意软件的大量增长，互联网的发展以及从业余爱好者编写的恶意软件到流氓公司和有组织犯罪分子开发的专业设计的恶意软件的迁移，主要针对经济或政治利益。2010年，赛门铁克发现了超过2.4亿个新的恶意程序;尽管其中许多是现有恶意软件的变体。另一份报告表明，实际的恶意软件家族数量在1,000到3,000之间。恶意软件的检测是一个主要的和持续的问题。在过去的十年里，随着恶意软件从几乎没有能力逃避检测的简单程序演变而来，对抗恶意软件的斗争已经升级，其主要目标是造成破坏，到更复杂的计划，目标是利润和部署先进的规避技术。NIMBUS研究人员网络的重点是作为一个催化剂，制定一个平衡的计划，既蓝天研究和短期应用研究这将有助于打击英国的网络犯罪。恶意软件相关的网络威胁是全球性的，因此采取国际方法来解决这些问题至关重要。只有全球卓越中心网络才能提供必要的知识广度和深度，以及解决重大网络安全挑战所需的专业能力。NIMBUS将作为英国与欧洲，美国和亚洲研究网络的国际合作的接口。

项目成果

Evolution of ransomware

• DOI: 10.1049/iet-net.2017.0207
• 发表时间: 2018-08
• 期刊: IET Networks
• 影响因子: 1.4
• 作者: Philip O'Kane;S. Sezer;Domhnall Carlin

Dynamic Analysis of Ran-somware using Opcodes and Opcode Categories

使用操作码和操作码类别动态分析 Ran-somware

• DOI: 10.22619/ijcsa.2018.100121
• 发表时间: 2018
• 期刊: International Journal on Cyber Situational Awareness
• 作者: Carlin D

Secure virtualised environment

安全的虚拟化环境

• DOI: 10.1109/icitst.2014.7038788
• 发表时间: 2014
• 作者: Chouhan P

N-opcode analysis for android malware classification and categorization

• DOI: 10.1109/cybersecpods.2016.7502343
• 发表时间: 2016-07
• 期刊: 2016 International Conference On Cyber Security And Protection Of Digital Services (Cyber Security)
• 作者: Boojoong Kang;S. Yerima;K. Mclaughlin;S. Sezer

Detecting obfuscated malware using reduced opcode set and optimised runtime trace

• DOI: 10.1186/s13388-016-0027-2
• 发表时间: 2016-05
• 期刊: Security Informatics
• 作者: Philip O'Kane;S. Sezer;K. Mclaughlin