Two-Level Automated Approach for Defending Against Obfuscated Zero-Day Attacks

摘要: A zero-day attack is one that exploits a vulnerability for which no patch readily available and the developer or vendor may not be aware. They are very expensive powerful tools to defend against. Since known in advance, there reliable way guard against attacks before they happen. Attackers take advantage of unknown nature use them conjunction with highly sophisticated targeted achieve stealthiness respect standard intrusion detection techniques. This paper presents novel combination anomaly, behavior signature based techniques detecting such attacks. The proposed approach detects obfuscated two-level evaluation, generates new automatically updates other sensors by using push technology via global hotfix feature.