Polymorphic malicious executable scanner by API sequence analysis

Proceedings - HIS'04: 4th International Conference on Hybrid Intelligent Systems

Volumn , Issue , 2005, Pages 378-383

  Xu, J Y ^a   Sung, A H ^a   Chavez, P ^a   Mukkamala, S ^a  

^a NEW MEXICO INSTITUTE OF MINING AND TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

API SEQUENCE ANALYSIS; MALWARE; POLYMORPHIC COMPUTER VIRUSES; PORTABLE EXECUTABLE CODE;

CODES (SYMBOLS); ERROR DETECTION; SOCIETIES AND INSTITUTIONS;

COMPUTER VIRUSES;

EID: 28344446955     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (12)

1. W.C. Wilson, "Activity Pattern Analysis by Means of Sequence-Alignment Methods", Environment and Planning, A (30): 1017-1038, 1998.
2. A. Strehl, and J. Ghosh, "Value-based Customer Grouping from Large Retail Datasets", Proc. SPIE Conference on Data Mining and Knowledge Discovery, Orlando, volume 4057, pages 33-42, April 2000.
3. M. Oberhumer, and L. Molnar, http://upx.sourceforge.net/.
4. M. Pierrek, "Inside Windows: An In-Depth Look into the Win32 Portable Executable File Format", MSDN Magazine, March 2002.
5. Microsoft Corporation, "Portable Executable Formats", Formats specification for Windows.
6. Intel Corporation, "IA-32 Intel® Architecture Software Developer's Manual, Volume 2A: Instruction Set Reference".
7. Symantec Cooperation, http://securityresponse.symantec.com.
8. A. Sung, J. Xu, P. Chavez, and S. Mukkamala, "Static Analyzer for Vicious Executables (SAVE)", 20th Annual Computer Security Applications Conference, December 6-10, 2004.
9. M. Christodorescu, and S. Jha, "Static Analysis of Executables to Detect Malicious Patterns", Proc. The Twelfth USENIX Security Symposium, Berkeley, CA, 2003.
10. F. Cohen, "Computer Viruses: Theory and Experiments", Computers and Security, Vol. 6: pp. 22-35, 1987.
11. D. Chess, and S. White, "An Undetectable Computer Virus", Virus Bulletin Conference, September 2000.
12. th International Workshops on Enterprise Security (WETICE'99), Stanford University, California, USA, June 16-18, 1999.