As malware becomes pervasive and fast-evolving on the internet, it is important to not only detect malware as early as possible but also to determine which computer has been attacked. Among the various methods to find the malware, retrospective detection is a promising one. Once a threat is identified, it allows one to determine exactly which host has the threat by searching historical information. In the past, the huge volume of historical information represents an insurmountable barrier to such traces, but this barrier can be broken by cloud computing technologies.
No takes yet. Share an insight, caveat, or question.
Liu et al. (2011) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: