the cousins of stuxnet duqu, flame, and gaussstuxnet的表亲duqu、火焰和高斯.pdfVIP

Future Internet 2012, 4, 971-1003; doi:10.3390/fi4040971 OPEN ACCESS future internet ISSN 1999-5903 /journal/futureinternet Article The Cousins of Stuxnet: Duqu, Flame, and Gauss ´ ´ ´ ´ ´ ´ ´ ´ Boldizsar Bencsath , Gabor Pek , Levente Buttyan and Mark Felegyhazi Laboratory of Cryptography and System Security (CrySyS Lab), Department of Telecommunications, ´ Budapest University of Technology and Economics, Magyar tudosok krt 2, 1117 Budapest, Hungary; E-Mails: bencsath@crysys.hu (B.B.); pek@crysys.hu (G.P.); mfelegyhazi@crysys.hu (M.F.) MTA-BME Information Systems Research Group, Budapest University of Technology and ´ Economics, Magyar tudosok krt 2, 1117 Budapest, Hungary * Author to whom correspondence should be addressed; E-Mail: buttyan@crysys.hu; Tel.: +36-1-463-1803; Fax: +36-1-463-3266. Received: 18 September 2012; in revised form: 17 October 2012 / Accepted: 31 October 2012 / Published: 6 November 2012 Abstract: Stuxnet was the first targeted malware that received worldwide attention for causing physical damage in an industrial infrastructure seemingly isolated from the online world. Stuxnet was a powerful targeted cyber-attack, and soon other malware samples were discovered that belong to this family. In this paper, we will first present our analysis of Duqu, an information-collecting malware sharing striking similarities wi