Malware detection using assembly and API call sequences

Journal in Computer Virology

Volumn 7, Issue 2, 2011, Pages 107-119

  Shankarapani, Madhu K ^a   Ramamoorthy, Subbu ^a   Movva, Ram S ^a   Mukkamala, Srinivas ^a  

^a NEW MEXICO INSTITUTE OF MINING AND TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANTI VIRUS; ANTIVIRUS SOFTWARES; API CALLS; ASSEMBLY FUNCTIONS; DETECTION ALGORITHM; DETECTION PERFORMANCE; EXECUTABLES; FALSE POSITIVE; INFORMATION ASSURANCE; MALICIOUS CODES; MALWARE DETECTION; MALWARES; MATRIX; METAMORPHIC VERSIONS; NETWORK FUNCTIONS; QUANTITATIVE MEASURES; SIMILARITY ANALYSIS; SIMILARITY MEASURE; SIMILARITY SCORES; SOURCE CODES; STATIC ANALYZERS;

CRYPTOGRAPHY; SECURITY OF DATA;

COMPUTER VIRUSES;

EID: 79955114244     PISSN: 17729890     EISSN: 17729904     Source Type: Journal    
DOI: 10.1007/s11416-010-0141-5     Document Type: Article

References (11)

1. Christodorescu, M., Jha, S.: Static analysis of executables to detect malicious patterns. 12th USENIX Security Symposium. http://www. cs. wisc. edu/wisa/papers/security03/cj03. pdf, August 2003.
2. Dullien, T., Rolles, R.: Graph-based comparison of executable objects. IEEE Conference on Detection of Intrusions and Malware & Vulnerability Assessment (DIMVA-2004), pp. 161-173.
3. Hofmeyr S. A., Somayaji A., Forrest S.: Intrusion detection using sequences of system calls. J. Comput. Secur. 6, 151-180 (1998).
4. Wespi, A., Debar, H.: Building an intrusion-detection system to detect suspicious process behavior. Rec. Adv. Intrusion Detect. (1999).
5. Wespi, A., Dacier, M., Debar, H.: Intrusion Detection Using Variable-Length Audit Trail Patterns. Rec. Adv. Intrusion Detect. 110-129 (2000).
6. Kang, D.-K., Fuller, D., Honavar, V.: Learning classifiers for misuse and anomaly detection using a bag of system calls representation. Proceedings of the 6th IEEE Systems, Man, and Cybernetics Workshop (IAW 05), West Point, NY, IEEE, pp. 118-125 (2005).
7. Dictionary, http://dictionary. reference. com/search?q=obfuscation, November 2005.
8. Collberg, C., Thomborson, C.: Watermarking, tamper-proofing, and obfuscation-tools for software protection. IEEE Transactions on Software Engineering, pp. 701-746, August 2002.
9. Collberg, C., Thomborson, C., Low, D.: A Taxonomy of Obfuscating Transformations Technical Report 148, July
10. Sung, A. H., Xu, J., Chavez, P., Mukkamala, S.: Static analyzer for vicious executables (SAVE). Proceedings of 20th Annual Computer Security Applications Conference (ACSAC), pp. 326-334, IEEE Computer Society Press, ISBN 0-7695-2252-1 (2004).
11. Wilson W. C.: Activity Pattern Analysis by means of Sequence-Alignment Methods. J. Environ. Plan. 30, 1017-1038 (1998).