Towards efficient analysis for malware in the wild

IEEE International Conference on Communications

Volumn , Issue , 2011, Pages

  Iwamura, Makoto ^a   Itoh, Mitsutaka ^a   Muraoka, Yoichi ^b  

^a NTT CORPORATION   (Japan)

^b WASEDA UNIVERSITY   (Japan)

Author keywords

disassembly; malware classification; unpacking

Indexed keywords

BINARY STREAMS; CLASSIFICATION SYSTEM; DISASSEMBLY; EFFICIENT ANALYSIS; LONGEST COMMON SUBSEQUENCES; MACHINE CODES; MALWARE ANALYSIS; MALWARES; NOVEL TECHNIQUES; UNPACKING;

COMPUTER CRIME;

EID: 80052143641     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/icc.2011.5963469     Document Type: Conference Paper

References (19)

1. H. Flake, Automated Unpacking and Malware Classification, Black Hat Japan 2007, 2007.
2. Y. Song, M. E. Locasto, A. Stavrou, A. D. Keromytis, S. J. Stolfo, On the infeasibility of modeling polymorphic shellcode, Proceedings of the 14th ACM conference on Computer and communications security, pp. 541-551, 2007.
3. R. Lyda, J. Hamrock, Using entropy analysis to find encrypted and packed malware, IEEE Security and Privacy, v.5, n.2, pp. 40-45, 2007.
4. M. Bailey, J. Oberheide, J. Andersen, Z. Morley Mao, F. Jahanian, J. Nazario, Automated classification and analysis of internet malware, RAID 2007, pp. 178-197, 2007.
5. M. E. Karim, A. Walenstein, A. Lakhotia, and L. Parida, Malware phylogeny generation using permutations of code. European Research Journal of Computer Virology 1, 1-2 (Nov. 2005) pp. 13-23.
6. M. Gheorghescu. An automated virus classification system. In Proc. Virus Bulletin Conf., pp.294-299, October 2005.
7. Vinod P., Vijay Laxmi, Manoj Singh Gaur, G. V. S. S. Phani Kumar, Yadvendra S. Chundawat, Static CFG analyzer for metamorphic Malware code. SIN 2009, pp. 225-228, 2009.
8. E. Carrera and G. Erdelyi, Digital Genome Mapping - Advanced Binary Malware Analysis, In Proc. Virus Bulletin Conf., pp. 187-197, 2004.
9. R. A. Wagner and M. J. Fischer, The String-to-String Correction Problem, Journal of the ACM (JACM), v.21 n.1, pp. 168-173, 1974.
10. M. Crochemore, C. S. Iliopoulos, and Y. J. Pinzon, Speeding-up Hirschberg and Hunt-Szymanski LCS algorithms, String Processing and Information Retrieval, pp. 59-67, 2001.
11. Intel Corporation. Intel 64 and IA-32 Architectures Software Developer's Manual. http://www.intel.com/products/processor/manuals/.
12. I. V. Popov, S. K. Debray, and G. R. Andrews, Binary obfuscation using signals. In Proc. of the 16th Conf. on USENIX Security Symposium, pp. 275-290, 2007.
13. B. Schwarz, S. Debray, and G. Andrews, Disassembly of executable code revisited, WCRE '02: Proceedings of the Ninth Working Conference on Reverse Engineering, 2002.
14. OllyBonE, http://www.joestewart.org/ollybone/.
15. D. Quist and V. Smith, Covert Debugging: Circumventing Software Armoring, Blackhat USA 2007 / Defcon 15, 2007.
16. VMware: Virtualization via Hypervisor, Virtual Machine & Server Consolidation - VMware, http://www.vmware.com/.
17. Tron: He Fights for the User Alan Bradley, http://www.openrce.org/ repositories/users/AlanBradley/Tron-TC8.pdf.
18. F. Guo, P. Ferrie, and T. Chiueh, A Study of the Packer Problem and Its Solutions, RAID 2008, pp. 98-115, 2008.
19. D. M. Hillis, D. Zwickl, and R. Gutell, Tree of Life, http://www.zo.utexas.edu/faculty/antisense/DownloadfilesToL.html.