Dynamic detection of unknown malicious exécutables based on API interception

Proceedings - 2009 1st International Workshop on Database Technology and Applications, DBTA 2009

Volumn , Issue , 2009, Pages 329-332

  Chen, Fei ^a   Fu, Yan ^a  

^a UNIVERSITY OF ELECTRONIC SCIENCE AND TECHNOLOGY OF CHINA   (China)

Author keywords

API interception; Dynamic detection; Unknown malicious executables

Indexed keywords

API FUNCTION CALLS; API INTERCEPTION; APPLICATION PROGRAM INTERFACES; DYNAMIC DETECTION; MALICIOUS EXECUTABLES; NEW APPROACHES; SECURITY POLICY; UNKNOWN MALICIOUS EXECUTABLES;

APPLICATION PROGRAMMING INTERFACES (API);

COMPUTER VIRUSES;

EID: 70449427488     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DBTA.2009.127     Document Type: Conference Paper

References (13)

1. G. Jacob, H. Debar, and E. Filiol, "Behavior detection of mal. ware: from a survey toward an established taxonomy", Comput Virol, pp: 251-226,2008.
2. Stephen Cass, "Anatomy of malice", IEEE SPECTRUM, November. 2001.
3. [3] M. Schultz, E. Eskin, E. Zadok and S. Stolfo, "Data mining methods for detection of new malicious executables", Proceedings of the 2001 IEEE Symposium on Security and Privacy, Washington : IEEE Computer Society, pp. 38-49, 2001. (Pubitemid 32882625)
4. K. Rozinov, "Reverse code engineering: an in-depth analysis of the bagle virus", Aug. 2004.
5. M. Christodorescu, S. Jha, SA. Seshia, and D. Song, "Semanticsaware malware detection", IEEE Symposium on. Security and Privacy, 2005.
6. E. AI. Daoud, IH, Jebril and B. Zaqaibeh, "Computer virus strategies and detection method", Open Problems Compt. Math, Vol.1. No.2, Sep. 2008.
7. Szor. P, "The art of computer virus research, and defense", Addison Wesley Reading, 2005.
8. T. Brosch and M. Morgenstern, "Runtime packers: the hidden. problem", Proc. Black Hat USA, 2006.
9. Nwokedi Idike and Aditya P. Mathur, "A survey of malware detection technique", Purdue University, 2007.
10. Fred B. Schneider, "ACM transactions on information and system security", 3(1): pp.30-50, February. 2000.
11. VMware: server and desktop virtualization, http://www.vmware.com/, 2006.
12. J. Han and M. Kamber, Data Mining Concepts and Techniques, Morgan. Kaufmann Publishers, 2001.
13. iDefense Labs, http://labs.idefense.com/.