PROMIS Letter of Interest: Difference between revisions
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
'''ACRONYM''' PROMIS |
'''ACRONYM''' PROMIS |
||
'''NAME''' A PROactive Malware Identi�cation System based on Peer-to-Peer Networks |
|||
'''NAME''' |
|||
[http://gaijin.dmst.aueb.gr/repository/promis/partner-invitation/promis.pdf pdf version here] |
|||
==Description== |
==Description== |
||
| Line 17: | Line 19: | ||
precautions to avoid infection when an epidemic is on the rise. |
precautions to avoid infection when an epidemic is on the rise. |
||
The homogeneity of most computer systems |
The homogeneity of most computer systems offers some significant benefits, regarding portability |
||
and the standardization of software development. On the other hand highly homogenous environments |
and the standardization of software development. On the other hand highly homogenous environments |
||
make easy for rapid malcode to propagate in less time than any traditional reaction is possible. Probably |
make easy for rapid malcode to propagate in less time than any traditional reaction is possible. Probably |
||
we should pay more attention to the security disadvantages of that approach and start looking for other |
we should pay more attention to the security disadvantages of that approach and start looking for other |
||
means to diminish these |
means to diminish these effects. |
||
Fortunately, we see a more balanced choice of software and hardware in critical infrastructures. In |
Fortunately, we see a more balanced choice of software and hardware in critical infrastructures. In |
||
that case a system that is not vulnerable to a |
that case a system that is not vulnerable to a specific type of malware, can extract valuable information |
||
regarding the mechanisms of the |
regarding the mechanisms of the specific attack and pass them to rest of the systems, before these |
||
systems get compromised. The systems, which participate in our proposed P2P network can thereafter, |
systems get compromised. The systems, which participate in our proposed P2P network can thereafter, |
||
apply automatically, some |
apply automatically, some predefined countermeasures, (disabling the HTML preview in their e-mail |
||
clients or increasing the security settings of their browser etc) in order to avoid the consequences of |
clients or increasing the security settings of their browser etc) in order to avoid the consequences of |
||
a forthcoming malware epidemic. We argue that our approach is based on the principles of hygiene: |
a forthcoming malware epidemic. We argue that our approach is based on the principles of hygiene: |
||
| Line 34: | Line 36: | ||
==What we need from you== |
==What we need from you== |
||
The PROMIS project is a research proposal being submitted for the �rst time. We plan to carry out |
|||
the major parts of the write-up using our own resources, although help from partners will be greatly |
|||
appreciated. We expect our partners to contribute their opinions in areas of their particular expertise |
|||
and to formally review the proposal before it is being submitted. |
|||
==Further information and communication== |
==Further information and communication== |
||
Revision as of 11:43, 17 September 2007
ACRONYM PROMIS
NAME A PROactive Malware Identi�cation System based on Peer-to-Peer Networks
Description
STREP proposal (FP7/ICT)
Strategic Objective: ICT-SEC-2007.1.7: Critical Infrastructure Protection (Joint Call between ICT and Security Themes FP7-ICT-SEC-2007-1)
Recent worm epidemics proved beyond any doubt that the existing centralized worm containment mech- anisms are no longer adequate to protect vulnerable systems, resulting in a shift towards distributed cooperative systems that aim to safeguard and immunize the susceptible population by automatically vaccinating them. We present PROMIS, a P2P based algorithm that provides its participants with early information regarding the existence of a worm epidemic and lets them automatically adjust their security level. We argue that our approach is based on the principles of hygiene: taking the basic precautions to avoid infection when an epidemic is on the rise.
The homogeneity of most computer systems offers some significant benefits, regarding portability and the standardization of software development. On the other hand highly homogenous environments make easy for rapid malcode to propagate in less time than any traditional reaction is possible. Probably we should pay more attention to the security disadvantages of that approach and start looking for other means to diminish these effects.
Fortunately, we see a more balanced choice of software and hardware in critical infrastructures. In that case a system that is not vulnerable to a specific type of malware, can extract valuable information regarding the mechanisms of the specific attack and pass them to rest of the systems, before these systems get compromised. The systems, which participate in our proposed P2P network can thereafter, apply automatically, some predefined countermeasures, (disabling the HTML preview in their e-mail clients or increasing the security settings of their browser etc) in order to avoid the consequences of a forthcoming malware epidemic. We argue that our approach is based on the principles of hygiene: taking the basic precautions to avoid infection when an epidemic is on the rise.
What we need from you
The PROMIS project is a research proposal being submitted for the �rst time. We plan to carry out the major parts of the write-up using our own resources, although help from partners will be greatly appreciated. We expect our partners to contribute their opinions in areas of their particular expertise and to formally review the proposal before it is being submitted.
