Using engine signature to detect metamorphic malware

Proceedings of the 4th ACM Workshop on Recurring Malcode, WORM'06. Co-located with the 13th ACM Conference on Computer and Communications Security, CCS'06

Volumn , Issue , 2006, Pages 73-78

  Chouchane, Mohamed R ^a   Lakhotia, Arun ^a  

^a University of Louisiana at Lafayette   (United States)

Author keywords

Metamorphic engine; Virus scanner

Indexed keywords

METAMORPHIC ENGINES; VIRUS SCANNERS;

ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; PARAMETER ESTIMATION; RAPID PROTOTYPING; SEARCH ENGINES;

COMPUTER SYSTEM FIREWALLS;

EID: 34547172114     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1179542.1179558     Document Type: Conference Paper

References (10)

1. Brushi, D., Martignoni, L., and Monga, M. Using Code Normalization for Fighting Self-Mutating Malware. In Proceedings of the International Symposium of Secure Software Engineering (Arlington, VA, 2006).
2. Chess, D. M., and White, S. R. An Undetectable Computer Virus. In Proceedings of Virus Bulletin Conference (2000).
3. Cohen, F. Computational Aspects of Computer Viruses. Computers & Security, 8 (1989), 325-344.
4. Christodorescu, M., Jha, S., Seshia, S. A., Song, D., and Bryant, R. E. Semantics-Aware Malware Detection. In Proceedings of the 2005 IEEE Symposium on Security and Privacy (S&P'05) (Oakland, CA, USA, May 8-11, 2005)
5. Karim, M. E., Walenstein, A., Lakhotia, A.,and Parida, L. Mal ware Phytogeny Generation using Permutations of Code. European Research Journal of Computer Virology 1, 1-2 (Nov. 2005) 13-23.
6. Krsul, I., Spafford, E. H. Authorship Analysis: Identifying The Author of a Program. Technical Report 96-052, 1996.
7. th Symposium on Recent Advances in Intrusion Detection (RAID) (Seattle, WA, USA, September 7-9, 2005).
8. Spinellis, D. Reliable Identification of Bounded-Length Viruses is NP-Complete. IEEE Transactions on Information Theory, 49, 1 (2003), 280-284.
9. Ször, P. The Art of Computer Virus Research and Defense. Symantec Press, 2005.
10. Walenstein, A., Mathur, R., Chouchane, M. R., and Lakhotia, A. Normalizing Metamorphic Malware Using Term Rewriting. In Proceedings of the Sixth IEEE International Workshop on Source Code Analysis and Manipulation (SCAM 2006) (Sheraton Society Hill, Philadelphia, PA, USA, 2006).