Malware classification using instruction frequencies

Proceedings of the 2011 ACM Research in Applied Computation Symposium, RACS 2011

Volumn , Issue , 2011, Pages 298-300

  Han, Kyoung Soo ^a   Kang, Boojoong ^a   Im, Eul Gyu ^a  

^a Hanyang University   (South Korea)

Author keywords

instruction frequency; malware analysis; malware classification

Indexed keywords

ANTI-VIRUS PROGRAMS; BINARY ANALYSIS; CLASSIFICATION METHODS; INSTRUCTION FREQUENCY; MALWARE ANALYSIS; MALWARE DETECTION; MALWARES; SIGNATURE DETECTION;

COMPUTER CRIME;

EID: 84857278570     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2103380.2103441     Document Type: Conference Paper

References (10)

1. Tian, R., Batten, L., Islam, R. and Versteeg, S. 2009. An automated classification system based on the strings of trojan and virus families, In Proceedings of the 4th International conference on malicious and unwanted software.
2. Tian, R., Batten L. M. and Versteeg, S. C. 2008. Function length as a tool for malware classification, In Proceedings of the MALWARE 2008.
3. Peisert, S., Bishop, M., Karin, S. and Marzullo, K. 2007. Analysis of computer intrusions using sequences of function calls. IEEE Transactions on dependable and secure computing, Vol. 4, No. 2, pp. 137-150. (Pubitemid 46788338)
4. Gheorghescu, M. 2005. An automated virus classification system. In Proceedings of the Virus Bulletin Conference (Oct. 2005), pp. 294-300.
5. Bailey, M., Oberheide, J., Andersen, J., Mao, Z. M., Jahanian, F. and Nazario, J. 2007. Automated classification and analysis of Internet malware. Springer-Verlag, LNCS Vol. 4637, pp. 178-197.
6. Flake, H. 2004. Structural comparison of executable objects. In Proceedings of the detection of intrusions and malware and vulnerability assessment, pp. 161-173.
7. Kapoor, A. and Spurlock, J. 2006. Binary feature extraction and comparison. In Proceedings of the AVAR 2006.
8. Sathyanarayan, S., Kohli, P. and Bruhadeshwar, B. 2008. Signature generation and detection of malware families. In Proceedings of the ACISP 2008.
9. Cristianini, N. and Shawe-Taylor, J. 2000. An introduction to Support vector machines and other kernel-based learning methods. Cambridge University Press.
10. IDA Pro, available at http://www.hex-rays.com/idapro/