PROMIS Letter of Interest - Revision history

Louridas: /* Description */

2007-09-26T20:03:37Z

Description

Louridas: /* Description */

2007-09-26T20:00:55Z

Description

← Older revision		Revision as of 22:00, 26 September 2007
Line 9:		Line 9:
	'''STREP proposal (FP7/ICT)'''		'''STREP proposal (FP7/ICT)'''

	'''Strategic Objective: ICT-SEC-2007.1.7: Critical Infrastructure Protection (Joint Call between ICT and Security Themes FP7-ICT-SEC-2007-1)'''~~<br/>~~		'''Strategic Objective: ICT-SEC-2007.1.7: Critical Infrastructure Protection (Joint Call between ICT and Security Themes FP7-ICT-SEC-2007-1)'''

	Recent worm epidemics showed that the existing centralized worm containment mechanisms are no longer		Recent worm epidemics showed that the existing centralized worm containment mechanisms are no longer
	adequate to protect vulnerable systems. ~~This~~ in ~~turn~~ ~~has~~ ~~resulted~~ to a ~~shift~~ ~~towards~~ ~~distributed~~		adequate to protect vulnerable systems. Although the homogeneity of computer systems offers some significant benefits,
		⚫	e.g., portability and the standardisation of software development, highly homogeneous environments
		⚫	make easy for malcode to propagate in less time than any traditional reaction is possible.
			This has resulted to a shift towards distributed
	cooperative systems that aim to safeguard and immunise the susceptible population by automatically		cooperative systems that aim to safeguard and immunise the susceptible population by automatically
			vaccinating them.
	vaccinating them. We present PROMIS, a P2P based algorithm that provides its participants with
	early information regarding the existence of a worm epidemic and lets them automatically adjust their
⚫	~~security~~ ~~level.~~ We ~~argue~~ ~~that our~~ approach is based on the principles of hygiene: ~~taking the basic~~
	precautions to avoid infection when an epidemic is on the rise.

		⚫	At the same time, there is a more balanced choice of software and hardware in critical infrastructures. In
	The homogeneity of most computer systems offers some significant benefits, regarding portability
		⚫	that case a system that is not vulnerable to a specific type of malware can extract valuable information
⚫	and the ~~standardization~~ of software development~~. On the other hand~~ highly ~~homogenous~~ environments
⚫	make easy for ~~rapid~~ malcode to propagate in less time than any traditional reaction is possible. ~~Probably~~
	we should pay more attention to the security disadvantages of that approach and start looking for other
	means to diminish these effects.

⚫	~~Fortunately~~, we ~~see~~ a more balanced choice of software and hardware in critical infrastructures. In
⚫	that case a system that is not vulnerable to a specific type of malware, can extract valuable information
	regarding the mechanisms of the specific attack and pass them to rest of the systems, before these		regarding the mechanisms of the specific attack and pass them to rest of the systems, before these
	systems get compromised. The systems, which participate in ~~our~~ proposed P2P network can thereafter,		systems get compromised. The systems, which will participate in a proposed P2P network can thereafter
	apply automatically, some predefined countermeasures, ~~(disabling~~ ~~the~~ ~~HTML~~ ~~preview~~ in ~~their~~ ~~e-mail~~		apply automatically some predefined countermeasures in order to avoid the consequences of
		⚫	a forthcoming malware epidemic. Our approach is based on the principles of hygiene:
	clients or increasing the security settings of their browser etc) in order to avoid the consequences of
	a forthcoming malware epidemic. We argue that our approach is based on the principles of hygiene:
	taking the basic precautions to avoid infection when an epidemic is on the rise.		taking the basic precautions to avoid infection when an epidemic is on the rise.

	To alleviate the effects of rapid malcode we propose a cooperative containment		Based on these principles, to alleviate the effects of rapid malcode we propose a cooperative containment
	algorithm PRoactive malware Identification System – PROMIS ~~and is~~		algorithm called PRoactive malware Identification System – PROMIS,
	based on a peer-to-peer (P2P) architecture to ~~provide~~ timely information to the		based on a peer-to-peer (P2P) architecture, which provides timely information to the
	members of a specially crafted P2P group.		members of a specially crafted P2P group. Members of the group then automatically adjust their security level.

	Theoretical research regarding our approach ~~have~~ already been published in		Theoretical research regarding our approach has already been published in

	* Vasileios Vlachos and Diomidis Spinellis. A PRoactive malware identification system based on the computer hygiene principles. ''Information Management and Computer Security'', 15(4):295–312, 2007 [http://dx.doi.org/10.1108/09685220710817815]		* Vasileios Vlachos and Diomidis Spinellis. A PRoactive malware identification system based on the computer hygiene principles. ''Information Management and Computer Security'', 15(4):295–312, 2007 [http://dx.doi.org/10.1108/09685220710817815]

	The simulations we performed in conjunction with ~~the~~ two early prototypes produced		The simulations we performed in conjunction with two early prototypes produced
	positive results. We are planning to build a stable PROMIS system using the		positive results. We are planning to build a stable PROMIS system using the
	experience gained from our past attempts and the experimental results of the		experience gained from our past attempts and the experimental results of the

Louridas: /* Description */

2007-09-26T19:52:32Z

Description

← Older revision		Revision as of 21:52, 26 September 2007
Line 11:		Line 11:
	'''Strategic Objective: ICT-SEC-2007.1.7: Critical Infrastructure Protection (Joint Call between ICT and Security Themes FP7-ICT-SEC-2007-1)'''<br/>		'''Strategic Objective: ICT-SEC-2007.1.7: Critical Infrastructure Protection (Joint Call between ICT and Security Themes FP7-ICT-SEC-2007-1)'''<br/>

	Recent worm epidemics ~~proved beyond any doubt~~ that the existing centralized worm containment ~~mech-~~		Recent worm epidemics showed that the existing centralized worm containment mechanisms are no longer
	~~anisms are no longer~~ adequate to protect vulnerable systems, ~~resulting~~ in a shift towards distributed		adequate to protect vulnerable systems. This in turn has resulted to a shift towards distributed
	cooperative systems that aim to safeguard and ~~immunize~~ the susceptible population by automatically		cooperative systems that aim to safeguard and immunise the susceptible population by automatically
	vaccinating them. We present PROMIS, a P2P based algorithm that provides its participants with		vaccinating them. We present PROMIS, a P2P based algorithm that provides its participants with
	early information regarding the existence of a worm epidemic and lets them automatically adjust their		early information regarding the existence of a worm epidemic and lets them automatically adjust their

Bkarak at 10:20, 17 September 2007

2007-09-17T10:20:47Z

← Older revision		Revision as of 12:20, 17 September 2007
Line 64:		Line 64:
	This proposal is initiated by the Software Engineering and Security Group of the Department of Management		This proposal is initiated by the Software Engineering and Security Group of the Department of Management
	Science and Technology of the Athens University of Economics and Business, directed by Diomidis		Science and Technology of the Athens University of Economics and Business, directed by Diomidis
	Spinellis ([http://www.dmst.aueb.gr/dds]).<br/>		Spinellis [http://www.dmst.aueb.gr/dds].<br/>
	<br/>		<br/>
	Our web site: [http://istlab.dmst.aueb.gr/sense]<br/>		Our web site: [http://istlab.dmst.aueb.gr/sense]<br/>

Bkarak at 10:20, 17 September 2007

2007-09-17T10:20:33Z

← Older revision		Revision as of 12:20, 17 September 2007
Line 64:		Line 64:
	This proposal is initiated by the Software Engineering and Security Group of the Department of Management		This proposal is initiated by the Software Engineering and Security Group of the Department of Management
	Science and Technology of the Athens University of Economics and Business, directed by Diomidis		Science and Technology of the Athens University of Economics and Business, directed by Diomidis
	Spinellis ([http://www.dmst.aueb.gr/dds ~~website~~]).<br/>		Spinellis ([http://www.dmst.aueb.gr/dds]).<br/>
	<br/>		<br/>
	Our web site: [http://istlab.dmst.aueb.gr/sense]<br/>		Our web site: [http://istlab.dmst.aueb.gr/sense]<br/>

Bkarak at 10:03, 17 September 2007

2007-09-17T10:03:54Z

← Older revision		Revision as of 12:03, 17 September 2007
Line 42:		Line 42:

	* Vasileios Vlachos and Diomidis Spinellis. A PRoactive malware identification system based on the computer hygiene principles. ''Information Management and Computer Security'', 15(4):295–312, 2007 [http://dx.doi.org/10.1108/09685220710817815]		* Vasileios Vlachos and Diomidis Spinellis. A PRoactive malware identification system based on the computer hygiene principles. ''Information Management and Computer Security'', 15(4):295–312, 2007 [http://dx.doi.org/10.1108/09685220710817815]

			The simulations we performed in conjunction with the two early prototypes produced
			positive results. We are planning to build a stable PROMIS system using the
			experience gained from our past attempts and the experimental results of the
			simulation. This project aims to:

			* Conduct research, extending the findings of PROMIS algorithm, discovering innovative methods to identify malware and to protect critical infrastructures
			* Design and build a fully functional PROMIS system running in windows and linux operating system

	The project's software deliverables will be available for internal use by the project's partners and in the future could become part of or form the basis of novel products and business solutions. Scientific contributions will be exploited by means of journal articles and conference publications. Licensing and commercial exploitation of research results will be discussed during the proposal preparation phase.		The project's software deliverables will be available for internal use by the project's partners and in the future could become part of or form the basis of novel products and business solutions. Scientific contributions will be exploited by means of journal articles and conference publications. Licensing and commercial exploitation of research results will be discussed during the proposal preparation phase.

Bkarak at 09:57, 17 September 2007

2007-09-17T09:57:28Z

@@ Line 33: / Line 33: @@
 a forthcoming malware epidemic. We argue that our approach is based on the principles of hygiene:
 taking the basic precautions to avoid infection when an epidemic is on the rise.
 ==What we need from you==

Bkarak at 09:45, 17 September 2007

2007-09-17T09:45:40Z

← Older revision		Revision as of 11:45, 17 September 2007
Line 47:		Line 47:
	Spinellis ([http://www.dmst.aueb.gr/dds website]).<br/>		Spinellis ([http://www.dmst.aueb.gr/dds website]).<br/>
	<br/>		<br/>
	Our web site: [http://istlab.dmst.aueb.gr/sense]		Our web site: [http://istlab.dmst.aueb.gr/sense]<br/>
	Contact us by email at [bkarak@aueb.gr].		Contact us by email at bkarak@aueb.gr.

Bkarak at 09:45, 17 September 2007

2007-09-17T09:45:13Z

← Older revision		Revision as of 11:45, 17 September 2007
Line 3:		Line 3:
	'''NAME''' A PROactive Malware Identification System based on Peer-to-Peer Networks		'''NAME''' A PROactive Malware Identification System based on Peer-to-Peer Networks

	[http://gaijin.dmst.aueb.gr/repository/promis/partner-invitation/promis.pdf pdf version here]		[http://gaijin.dmst.aueb.gr/repository/promis/partner-invitation/promis.pdf pdf version here] (needs authentication)

	==Description==		==Description==
Line 42:		Line 42:

	==Further information and communication==		==Further information and communication==

			This proposal is initiated by the Software Engineering and Security Group of the Department of Management
			Science and Technology of the Athens University of Economics and Business, directed by Diomidis
			Spinellis ([http://www.dmst.aueb.gr/dds website]).<br/>
			<br/>
			Our web site: [http://istlab.dmst.aueb.gr/sense]
			Contact us by email at [bkarak@aueb.gr].

Bkarak at 09:43, 17 September 2007

2007-09-17T09:43:32Z

← Older revision		Revision as of 11:43, 17 September 2007
Line 1:		Line 1:
	'''ACRONYM''' PROMIS		'''ACRONYM''' PROMIS

	'''NAME''' A PROactive Malware ~~Identi�cation~~ System based on Peer-to-Peer Networks		'''NAME''' A PROactive Malware Identification System based on Peer-to-Peer Networks

	[http://gaijin.dmst.aueb.gr/repository/promis/partner-invitation/promis.pdf pdf version here]		[http://gaijin.dmst.aueb.gr/repository/promis/partner-invitation/promis.pdf pdf version here]
Line 36:		Line 36:
	==What we need from you==		==What we need from you==

	The PROMIS project is a research proposal being submitted for the ~~�rst~~ time. We plan to carry out		The PROMIS project is a research proposal being submitted for the first time. We plan to carry out
	the major parts of the write-up using our own resources, although help from partners will be greatly		the major parts of the write-up using our own resources, although help from partners will be greatly
	appreciated. We expect our partners to contribute their opinions in areas of their particular expertise		appreciated. We expect our partners to contribute their opinions in areas of their particular expertise

← Older revision		Revision as of 22:03, 26 September 2007
Line 22:		Line 22:
	that case a system that is not vulnerable to a specific type of malware can extract valuable information		that case a system that is not vulnerable to a specific type of malware can extract valuable information
	regarding the mechanisms of the specific attack and pass them to rest of the systems, before these		regarding the mechanisms of the specific attack and pass them to rest of the systems, before these
	systems get compromised. The systems, which will participate in a proposed P2P network can thereafter		systems get compromised. The systems, which will participate in a proposed Peer-to-Peer (P2P) network can thereafter
	apply automatically some predefined countermeasures in order to avoid the consequences of		apply automatically some predefined countermeasures in order to avoid the consequences of
	a forthcoming malware epidemic. Our approach is based on the principles of hygiene:		a forthcoming malware epidemic. Our approach is based on the principles of hygiene:
Line 28:		Line 28:

	Based on these principles, to alleviate the effects of rapid malcode we propose a cooperative containment		Based on these principles, to alleviate the effects of rapid malcode we propose a cooperative containment
	algorithm called ~~PRoactive~~ ~~malware~~ Identification System – PROMIS,		algorithm called PROactive Malware Identification System – PROMIS,
	based on a ~~peer-to-peer (~~P2P) architecture, which provides timely information to the		based on a P2P architecture, which provides timely information to the
	members of a specially crafted P2P group. Members of the group then automatically adjust their security level.		members of a specially crafted P2P group. Members of the group then automatically adjust their security level.

Line 38:		Line 38:
	The simulations we performed in conjunction with two early prototypes produced		The simulations we performed in conjunction with two early prototypes produced
	positive results. We are planning to build a stable PROMIS system using the		positive results. We are planning to build a stable PROMIS system using the
	experience gained from our ~~past~~ attempts and the experimental results of the		experience gained from our attempts and the experimental results of the
	simulation. This project aims to:		simulation. This project aims to:

	* Conduct research, extending the findings of PROMIS algorithm, discovering innovative methods to identify malware and to protect critical infrastructures		* Conduct research, extending the findings of the PROMIS algorithm, discovering innovative methods to identify malware and to protect critical infrastructures

	* Design and build a fully functional PROMIS system running in ~~windows~~ and ~~linux~~ operating ~~system~~		* Design and build a fully functional PROMIS system running in the MS-Windows and GNU/Linux operating systems

	The project's software deliverables will be available for internal use by the project's partners and in the future could become part of or form the basis of novel products and business solutions. Scientific contributions will be exploited by means of journal articles and conference publications. Licensing and commercial exploitation of research results will be discussed during the proposal preparation phase.		The project's software deliverables will be available for internal use by the project's partners and in the future could become part of or form the basis of novel products and business solutions. Scientific contributions will be exploited by means of journal articles and conference publications. Licensing and commercial exploitation of research results will be discussed during the proposal preparation phase.