The design space of metamorphic malware

ICIW 2007: 2nd International Conference on i-Warfare and Security

Volumn , Issue , 2007, Pages 241-248

  Walenstein, Andrew ^a   Mathur, Rachit ^b   Chouchane, Mohamed ^a   Lakhotia, Arun ^a  

^a UNIVERSITY OF LOUISIANA AT LAFAYETTE   (United States)

^b McAfee Avert Labs   (United States)

Author keywords

Metamorphic malware; Virus scanner

Indexed keywords

COMPUTER SYSTEM FIREWALLS; DESIGN; SCANNING;

DEFENCE RESPONSE; DESIGN SPACES; MALWARES; METAMORPHIC MALWARE; VIRUS SCANNERS;

COMPUTER CRIME;

EID: 77955172895     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (20)

1. Bruschi, D., L. Martignoni, et al. (2006). Detecting Self-Mutating Malware Using Control Flow Graph Matching. Proceedings of the Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA), IEEE Computer Society.
2. Bruschi, D., L. Martignoni, et al. (2006). Using Code Normalization for Fighting Self-Mutating Malware. Proceedings od the International Symposium of Secure Software Engineering, IEEE Computer Society.
3. Driller, M. (2002) Metamorphism in practice or "How I made MetaPHOR and what I've learnt". VX Heavens. http://vx.netlux.org/lib/vmd01.html.
4. Dube, T. E., K. S. Edge, et al. (2006). Metamorphism: A Software Protection Mechanism. International Conference on Inforfmation Warfare (ICIW2006), University of Maryland Eastern Shore, USA.
5. Edge, K.S., Dube, T.E., et al. (2006). A Taxonomy of Protection Used in Computer Viruses and Their Application to Software Protection, International Conference on Inforfmation Warfare (ICIW2006), University of Maryland Eastern Shore, USA.
6. Jha, C. M., S. Seshia, et al. (2005). Semantics-Aware Malware Detection. IEEE Symposium on Security and Privacy: 32-46.
7. Jordon, M. (2002). Dealing with metamorphism. Virus Bulletin: 4-6.
8. Kruegel, C., E. Kirda, et al. (2005). Polymorphic Worm Detection Using Structural Information of Executables. Proceedings of the International Symposium on Recent Advances in Intrusion Detection (RAID), Springer-Verlag.
9. Lakhotia, A. and J.-C. Deprez (1998). Restructuring Programs by Tucking Statements into Functions. Journal of Information & Software Technology 40: 677-689.
10. Lakhotia, A., A. Kapoor, et al. (2004). Are Metamorphic Viruses Really Invincible? - Part I. Virus Bulletin: 5-7.
11. Lakhotia, A., A. Kapoor, et al. (2005). Are Metamorphic Viruses Really Invincible? - Part II. Virus Bulletin: 9-12.
12. Lakhotia, A. and M. Mohammed (2004). Imposing Order on Program Statements and its implication to AV Scanner. Proceedings of 11th IEEE Working Conference on Reverse Engineering, Delft, The Netherlands, IEEE Computer Society Press, Los Alamitos, CA.
13. Linn, C. and S. Debray (2003). Obfuscation of Executable Code to Improve Resistance to Static Disassembly. Conference on Computer and Communications Security, Washington D.C., USA, ACM: Association for Computing Machinery.
14. Singh, P. K. (2002). A Physiological Decomposition of Virus and Worm Programs. Center for Advanced Computer Studies, University of Louisiana, Lafayette.
15. Stepan, A. E. (2005). Defeating Polymorphism: Beyond Emulation. Virus Bulletin Conference.
16. Ször, P. and P. Ferrie (2001). Hunting for metamorphic. Virus Bulletin Conference, Prague, Czech Republic.
17. Vecna (1998). Miss Lexotan 8, 29A E-Zine.
18. Walenstein, A., R. Mathur, et al. (2006). Normalizing Metamorphic Malware Using Term Rewriting. Sixth IEEE International Workshop on Source Code Analysis and Manipulation (SCAM 2006).
19. ZOmbie. About reversing. VX Heavens. http://vx.netlux.org/lib/vzo14.html.
20. ZOmbie. Some ideas about metamorphism. VX Heavens. http://vx.netlux.org/lib/vzo20.html.