2010 Articles

Evaluation of a Spyware Detection System Using Thin Client Computing

Pappas, Vasileios; Bowen, Brian M.; Keromytis, Angelos D.

In previous work, we introduced a bait injection system designed to delude and detect crimeware by forcing it to reveal itself during the exploitation of monitored information. Although effective as a technique, our original system was practically limited, as it was implemented in a personal VM environment. In this paper, we extend our system by applying it to thin-clien to demonstrate how the approach can be used in a large-scale deployment. Adapting our system to such an environment revealed a number of challenging issues, such as scalability, portability, and choice of physical communication means. We provide implementation details, as well as experimental results that demonstrate the scalability and effectiveness of our system.