Blog

Security Research

Novel Detection of Process Injection Using Network Anomalies

Ofir Shen is a Senior Security Researcher on the Akamai Hunt team. His area of expertise includes detection methodologies, incident response, and forensics.

Editorial and additional commentary by Tricia Howard

Executive summary

\r\n \r\n Akamai researchers have created a new technique for detecting process injection by analyzing network anomalies.

\r\n

\r\n Current detection mechanisms rely on host-based factors that can be bypassed by new attack techniques, which necessitates a new way to identify threats.

\r\n

\r\n As these attack techniques evolve, defense mechanisms must also evolve — with as few false positives as possible.

\r\n

\r\n A successful process injection attack can lead to numerous detrimental outcomes, including lateral movement , privilege escalation, and backdoor installation.

\r\n

\r\n Our detection methodology relies on observing the network behavior of a process, which makes it more…