Watch Out! Doxware on The Way…

Routa Moussaileb (1) , Charles Berrti (1) , Guillaume Deboisdeffre (1) , Nora Cuppens (2) , Jean-Louis Lanet (3)

1 IMT Atlantique - IMT Atlantique
2 Lab-STICC - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance
3 CIDRE - Confidentialité, Intégrité, Disponibilité et Répartition

From spyware to ransomware to leakware, the world is on the verge of getting struck by a myriad of advanced attacks. Security re-searchers' main objective is protecting the assets that a person/company possesses. They are in a constant battle in this cyber war facing attackers' malicious intents. To compete in this arm race against security breaches, we propose an insight into plausible attacks especially Doxware (called also leakware). We present a quantification model that explores Windows file system in search of valuable data. It is based on some solutions provided in the literature for natural language processing such as term frequency-inverse document frequency (TF-IDF). The best top 15 file "contestants" will be then exfiltrated over the Internet to the attacker's server. Our approach delivers an observation of the evolution of malware throughout the last years. It enables users to prevent their sensitive information being exposed to potential risks.

Domaines: Cryptographie et sécurité [cs.CR]

Routa Moussaileb, Charles Berrti, Guillaume Deboisdeffre, Nora Cuppens, Jean-Louis Lanet. Watch Out! Doxware on The Way…. CRiSIS 2019 - 14th International Conference on Risks and Security of Internet and Systems, Oct 2019, Hammamet, Tunisia. ⟨hal-02313650⟩