The Nepenthes Platform: An Efficient Approach to Collect Malware

摘要: Up to now, there is little empirically backed quantitative and qualitative knowledge about self-replicating malware publicly available. This hampers research in these topics because many counter-strategies against malware, e.g., network- host-based intrusion detection systems, need hard empirical data take full effect. We present the nepenthes platform, a framework for large-scale collection of information on wild. The basic principle emulate only vulnerable parts service. leads an efficient effective solution that offers advantages compared other honeypot-based solutions. Furthermore, flexible deployment solution, leading even better scalability. Using platform we several organizations were able greatly broaden basis available provide thousands samples previously unknown vendors IDS/anti-virus systems. improves rate this kind threat.