formularioHidden
formularioRDF
Login

Erregistratu

Edo nahiago baduzu...

 

Opcode-sequence-based Malware Detection

Inproceeding

In

ESSoS (), 2010 (), p. 35-43 , -.
Pisa
,
Italy
, 2010

Abstract

Malware is every malicious code that has the potential to harm any computer or network. The amount of malware is increasing faster every year and poses a serious security threat. Hence, malware detection has become a critical topic in computer security. Currently, signature-based detection is the most extended method within commer- cial antivirus. Although this method is still used on most popular com- mercial computer antivirus software, it can only achieve detection once the virus has already caused damage and it is registered. Therefore, it fails to detect new variations of known malware. In this paper, we pro- pose a new method to detect variants of known malware families. This method is based on the frequency of appearance of opcode sequences. Furthermore, we describe a method to mine the relevance of each opcode and, thereby, weigh each opcode sequence frequency. We show that this method provides an effective way to detect variants of known malware families.

Baliabide honi buruz...

Bisitak 291

Kategoriak: