This book constitutes the refereed proceedings of the 5th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, DIMVA 2008, held in Paris, France in July 2008.

The 13 revised full papers presented together with one extended abstract were carefully reviewed and selected from 42 submissions. The papers are organized in topical sections on attack prevention, malware detection and prevention, attack techniques and vulnerability assessment, and intrusion detection and activity correlation.

Inhalt

Attack Prevention.- Data Space Randomization.- XSS-GUARD: Precise Dynamic Prevention of Cross-Site Scripting Attacks.- VeriKey: A Dynamic Certificate Verification System for Public Key Exchanges.- Malware Detection and Prevention (I).- Dynamic Binary Instrumentation-Based Framework for Malware Defense.- Embedded Malware Detection Using Markov n-Grams.- Learning and Classification of Malware Behavior.- Attack Techniques and Vulnerability Assessment.- On Race Vulnerabilities in Web Applications.- On the Limits of Information Flow Techniques for Malware Analysis and Containment.- Malware Detection and Prevention (II).- Expanding Malware Defense by Securing Software Installations.- FluXOR: Detecting and Monitoring Fast-Flux Service Networks.- Traffic Aggregation for Malware Detection.- Intrusion Detection and Activity Correlation.- The Contact Surface: A Technique for Exploring Internet Scale Emergent Behaviors.- The Quest for Multi-headed Worms.- A Tool for Offline and Live Testing of Evasion Resilience in Network Intrusion Detection Systems.