Ulrich Bayer

• E-Mail
• Phone: +43 (1) 505 36 88
• Fax: +43 (1) 505 88 88

Publications

• Corrado Leita and Ulrich Bayer and Engin Kirda, "Exploiting diverse observation perspectives to get insights on the malware landscape," in Dependable Systems and Networks DSN, 2010. BibTeX
  @INPROCEEDINGS{Leita_Exploiting_diverse_observation_2010,
  Author = {Corrado Leita and Ulrich Bayer and Engin Kirda},
  sbahotlist = {true},
  title = {Exploiting diverse observation perspectives to get insights on the malware landscape},
  booktitle = {Dependable Systems and Networks DSN},
  year = {2010},
  month = {1},
  abstract = {We are witnessing an increasing complexity in the malware analysis scenario. The usage of polymorphic techniques generates a new challenge: it is often difficult to discern the instance of a known polymorphic malware from that of a newly encountered malware family, and to evaluate the impact of patching and code sharing among malware writers in order to prioritize analysis efforts. This paper offers an empirical study on the value of exploiting the complementarity of different information sources in studying malware relationships. By leveraging real-world data generated by a distributed honeypot deployment, we combine clustering techniques based on static and behavioral characteristics of the samples, and we show how this combination helps in detecting clustering anomalies. We also show how the different characteristics of the approaches can help, once combined, to underline relationships among different code variants. Finally, we highlight the importance of contextual information on malware propagation for getting a deeper understanding of the evolution and the economy of the different threats.},
  }
• Ulrich Bayer and Engin Kirda and Christopher Kruegel, "Improving the Efficiency of Dynamic Malware Analysis," in 25th Symposium On Applied Computing (SAC), Track on Information Security Research and Applications, 2010. BibTeX | PDF
  @INPROCEEDINGS{Bayer_ImprovingEfficiencyof_2010,
  Author = {Ulrich Bayer and Engin Kirda and Christopher Kruegel},
  title = {Improving the Efficiency of Dynamic Malware Analysis},
  booktitle = {25th Symposium On Applied Computing (SAC), Track on Information Security Research and Applications},
  year = {2010},
  month = {3},
  pdf = {Bayer_ImprovingEfficiencyof_2010.pdf},
  note = {Lusanne, Switzerland},
  }
• Engin Kirda and Ulrich Bayer and Corrado Leita, "Exploiting diverse observation perspectives to get insights on the malware landscape," in Dependable Systems and Networks (DSN) 2010 IEEE IFIP International Conference on, 2010, pp. 393-402. BibTeX | PDF
  @INPROCEEDINGS{leita2010exploiting,
  Author = {Engin Kirda and Ulrich Bayer and Corrado Leita},
  sbahotlist = {true},
  title = {Exploiting diverse observation perspectives to get insights on the malware landscape},
  booktitle = {Dependable Systems and Networks (DSN) 2010 IEEE IFIP International Conference on},
  year = {2010},
  month = {1},
  pdf = {dsn2010.pdf},
  pages = {393--402},
  }
• Christopher Kruegel and Engin Kirda and Ulrich Bayer and Davide Balzarotti and Imam Habibi, "Insights Into Current Malware Behavior," in 2nd USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), Boston, 2009. BibTeX | PDF
  @INPROCEEDINGS{Bayer_InsightsIntoCurrent_2009,
  Author = {Christopher Kruegel and Engin Kirda and Ulrich Bayer and Davide Balzarotti and Imam Habibi},
  title = {Insights Into Current Malware Behavior},
  booktitle = {2nd USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), Boston},
  year = {2009},
  month = {4},
  pdf = {Bayer_InsightsIntoCurrent_2009.pdf},
  }
• Christopher Kruegel and Engin Kirda and Paolo Milani Comparetti and Ulrich Bayer and Clemens Hlauschek, "Scalable, Behavior-Based Malware Clustering," in Proceedings of the 16th Annual Network and Distributed System Security Symposium (NDSS 2009), 2009. BibTeX | PDF
  @INPROCEEDINGS{Bayer_ScalableBehaviorBasedMalware_2009,
  Author = {Christopher Kruegel and Engin Kirda and Paolo Milani Comparetti and Ulrich Bayer and Clemens Hlauschek},
  sbahotlist = {true},
  title = {Scalable, Behavior-Based Malware Clustering},
  booktitle = {Proceedings of the 16th Annual Network and Distributed System Security Symposium (NDSS 2009)},
  year = {2009},
  month = {1},
  pdf = {Bayer_ScalableBehaviorBasedMalware_2009.pdf},
  }

View all publications