Revealing and Analysing Modem Malware

• Authors: ČELEDA Pavel; KREJČÍ Radek; KRMÍČEK Vojtěch
• Year of publication: 2012
• Type: Article in Proceedings
• Conference: 2012 IEEE International Conference on Communications (ICC)
• MU Faculty or unit: Institute of Computer Science
• Doi: http://dx.doi.org/10.1109/ICC.2012.6364598
• Field: Informatics
• Keywords: modem; malware; botnet; Linux; MIPSel; security; monitoring; network; NetFlow; ISP

Attached files

• embedded-malware.pdf

• Description: In this paper, we provide a formal description of modem malware life cycle. It is included a description of the modem malware evolution (history). We propose a set of techniques to perform detailed analysis of infected modem. We report on modem malware network activities in campus network and we propose NetFlow based detection method to reveal the modem malware spreading.

Related projects

• CYBER - Security of Czech Army Information and Communication Systems - On-line Monitoring, Visualization and Packet Filtration. Computer Incident Response Capability Development in the Cyber Defence Environment