Decoy: A Malware Collection System Based On Active Technology
Wei Jiang · Microcomputer Information · 2009
Current malware passive-collecting methods can’t fulfill the network security’s need. A malware collection method based on active technology is proposed; a malware auto -collection system using active principle and high -interaction honeypot is imple mented called Decoy. In order to lure malware, Decoy actively finds and visits doubtful aims, using browser as client software and using real-time inspecting method to collect malware. Decoy has a higher collection efficiency, which validated by experiment.