SEISMIC: SEcure In-lined Script Monitors for Interrupting Cryptojacks

@inproceedings{Wang2018SEISMICSI,
  title={SEISMIC: SEcure In-lined Script Monitors for Interrupting Cryptojacks},
  author={Wenhao Wang and Benjamin Ferrell and Xiaoyang Xu and Kevin W. Hamlen and Shuang Hao},
  booktitle={ESORICS},
  year={2018}
}
Amethod of detecting and interrupting unauthorized, browserbased cryptomining is proposed, based on semantic signature-matching. The approach addresses a new wave of cryptojacking attacks, including XSS-assisted, web gadget-exploiting counterfeit mining. Evaluation shows that the approach is more robust than current static code analysis defenses, which are susceptible to code obfuscation attacks. An implementation based on in-lined reference monitoring offers a browser-agnostic deployment… CONTINUE READING
BETA

References

Publications referenced by this paper.
SHOWING 1-10 OF 52 REFERENCES

Stop coin mining in the browser with No Coin

R. Keramidas
  • https://ker.af/stopcoin-mining-in-the-browser-with-no-coin,
  • 2017
VIEW 6 EXCERPTS
HIGHLY INFLUENTIAL

Double-spending fast payments in bitcoin

  • ACM Conference on Computer and Communications Security
  • 2012
VIEW 5 EXCERPTS
HIGHLY INFLUENTIAL

Enforceable security policies

VIEW 7 EXCERPTS
HIGHLY INFLUENTIAL

(Short Paper) Towards More Reliable Bitcoin Timestamps

  • 2018 Crypto Valley Conference on Blockchain Technology (CVCBT)
  • 2018
VIEW 1 EXCERPT

In-browser mining: Coinhive and WebAssembly

R. Neumann, A. Toro
  • Forcepoint Security Labs,
  • 2018
VIEW 1 EXCERPT

Now even YouTube serves ads with CPU-draining cryptocurrency miners

D. Goodin
  • Ars Technica,
  • 2018
VIEW 2 EXCERPTS

Similar Papers

Loading similar papers…