剖析基于Web的加密劫持所使用的基础设施：一种测量视角
Dissecting the Infrastructure Used in Web-based Cryptojacking: A Measurement Perspective
AI总结：
本文从测量视角剖析基于Web的加密劫持基础设施，通过分析887个加密劫持网站及其DNS、注册商和恶意活动，揭示网站基础设施易受未授权挖矿滥用的脆弱性。
摘要：
本文对支撑加密劫持活动的基础设施进行了全面考察。分析阐明了恶意实体为未经授权进行加密货币挖矿而滥用计算资源所采用的方法、框架和技术。调查重点在于识别充当加密劫持活动平台的网站。研究编译并分析了一个包含887个此前已被识别为加密劫持网站的网站数据集，以对所观察到的攻击和恶意活动进行分类。研究进一步深入分析了与托管这些网站相关的DNS IP地址、注册商和名称服务器，以理解其结构和组成部分。研究识别出与这些网站相关的各种恶意软件和非法活动，表明存在通过受感染网站进行的未经授权的加密货币挖矿。研究结果凸显了网站基础设施对加密劫持的脆弱性。
英文摘要：
This paper conducts a comprehensive examination of the infrastructure supporting cryptojacking operations. The analysis elucidates the methodologies, frameworks, and technologies malicious entities employ to misuse computational resources for unauthorized cryptocurrency mining. The investigation focuses on identifying websites serving as platforms for cryptojacking activities. A dataset of 887 websites, previously identified as cryptojacking sites, was compiled and analyzed to categorize the attacks and malicious activities observed. The study further delves into the DNS IP addresses, registrars, and name servers associated with hosting these websites to understand their structure and components. Various malware and illicit activities linked to these sites were identified, indicating the presence of unauthorized cryptocurrency mining via compromised sites. The findings highlight the vulnerability of website infrastructures to cryptojacking.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
