Drive-By Download Attacks: A Comparative Study

Aditya K. Sood; Sherali Zeadally

doi:10.1109/MITP.2016.85

Drive-By Download Attacks: A Comparative Study

Aditya K. Sood, Sherali Zeadally

School of Information Science

Research output: Contribution to journal › Article › peer-review

17 Scopus citations

Abstract

Malware authors are exploiting browsers in a stealthy manner to distribute infectious code on the Internet. Drive-by download attacks are a prominent attack method in support of this cause. During such attacks, well-designed automated applications called browser exploit packs (BEPs) are deployed on infected servers. The authors' feature-oriented study analyzes the built-in features provided by BEPs used in the successful execution of drive-by downloads.

Original language	English
Article number	7579103
Pages (from-to)	18-25
Number of pages	8
Journal	IT Professional
Volume	18
Issue number	5
DOIs	https://doi.org/10.1109/MITP.2016.85
State	Published - Sep 1 2016

Keywords

browser exploit packs (BEPs)
cybercrime
drive-by downloads
Internet computing
Internet security
targeted attacks

ASJC Scopus subject areas

Software
Hardware and Architecture
Computer Science Applications

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

10.1109/MITP.2016.85

Cite this

@article{ba77ad3cf43d40d69e8a86913b0dfcd2,

title = "Drive-By Download Attacks: A Comparative Study",

abstract = "Malware authors are exploiting browsers in a stealthy manner to distribute infectious code on the Internet. Drive-by download attacks are a prominent attack method in support of this cause. During such attacks, well-designed automated applications called browser exploit packs (BEPs) are deployed on infected servers. The authors' feature-oriented study analyzes the built-in features provided by BEPs used in the successful execution of drive-by downloads.",

keywords = "browser exploit packs (BEPs), cybercrime, drive-by downloads, Internet computing, Internet security, targeted attacks",

author = "Sood, {Aditya K.} and Sherali Zeadally",

year = "2016",

month = sep,

day = "1",

doi = "10.1109/MITP.2016.85",

language = "English",

volume = "18",

pages = "18--25",

number = "5",

}

TY - JOUR

T1 - Drive-By Download Attacks

T2 - A Comparative Study

AU - Sood, Aditya K.

AU - Zeadally, Sherali

PY - 2016/9/1

Y1 - 2016/9/1

N2 - Malware authors are exploiting browsers in a stealthy manner to distribute infectious code on the Internet. Drive-by download attacks are a prominent attack method in support of this cause. During such attacks, well-designed automated applications called browser exploit packs (BEPs) are deployed on infected servers. The authors' feature-oriented study analyzes the built-in features provided by BEPs used in the successful execution of drive-by downloads.

AB - Malware authors are exploiting browsers in a stealthy manner to distribute infectious code on the Internet. Drive-by download attacks are a prominent attack method in support of this cause. During such attacks, well-designed automated applications called browser exploit packs (BEPs) are deployed on infected servers. The authors' feature-oriented study analyzes the built-in features provided by BEPs used in the successful execution of drive-by downloads.

KW - browser exploit packs (BEPs)

KW - cybercrime

KW - drive-by downloads

KW - Internet computing

KW - Internet security

KW - targeted attacks

UR - http://www.scopus.com/inward/record.url?scp=84991455932&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84991455932&partnerID=8YFLogxK

U2 - 10.1109/MITP.2016.85

DO - 10.1109/MITP.2016.85

M3 - Article

AN - SCOPUS:84991455932

SN - 1520-9202

VL - 18

SP - 18

EP - 25

JO - IT Professional

JF - IT Professional

IS - 5

M1 - 7579103

ER -

Drive-By Download Attacks: A Comparative Study

Abstract

Keywords

ASJC Scopus subject areas

UN SDGs

Access to Document

Other files and links

Fingerprint

Cite this