Efficient malware detection using model-checking

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 7436 LNCS, Issue , 2012, Pages 418-433

  Song, Fu ^a   Touili, Tayssir ^a  

^a UNIVERSITÉ PARIS DIDEROT   (France)

Author keywords

[No Author keywords available]

Indexed keywords

MALICIOUS BEHAVIOR; MALWARE DETECTION; MALWARES; MEMORY LOCATIONS; PROGRAM MODELS; PUSHDOWN SYSTEMS; ROBUST TECHNIQUE;

ABSTRACTING; MODEL CHECKING;

COMPUTER CRIME;

EID: 84865960635     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-32759-9_34     Document Type: Conference Paper

References (25)

1. Avast. Free avast antivirus, http://www.avast.com, Version 6.0.1367
2. Avira, http://www.avira.com, Version 12.0.0.849
3. Babić, D., Reynaud, D., Song, D.: Malware Analysis with Tree Automata Inference. In: Gopalakrishnan, G., Qadeer, S. (eds.) CAV 2011. LNCS, vol. 6806, pp. 116-131. Springer, Heidelberg (2011)
4. Balakrishnan, G., Reps, T., Kidd, N., Lal, A., Lim, J.,Melski, D., Gruian, R., Yong, S., Chen, C.-H., Teitelbaum, T.:Model Checking x86 Executables with CodeSurfer/x86 and WPDS++. In: Etessami, K., Rajamani, S.K. (eds.) CAV 2005. LNCS, vol. 3576, pp. 158-163. Springer, Heidelberg (2005)
5. Bergeron, J., Debbabi, M., Desharnais, J., Erhioui,M., Lavoie, Y., Tawbi, N.: Static detection of malicious code in executable programs. In: SREIS (2001)
6. Bonfante, G., Kaczmarek, M., Marion, J.-Y.: Architecture of a Morphological Malware Detector. Journal in Computer Virology 5, 263-270 (2009)
7. Christodorescu, M., Jha, S.: Static analysis of executables to detect malicious patterns. In: 12th USENIX Security Symposium, pp. 169-186 (2003)
8. Christodorescu, M., Jha, S., Seshia, S.A., Song, D.X., Bryant, R.E.: Semantics-aware malware detection. In: IEEE Symposium on Security and Privacy, pp. 32-46 (2005)
9. Eric, S.: 10 most destructive computer worms and viruses ever (2010), http://wildammo.com/2010/10/12/10-most-destructive-computer-worms-and-viruses- ever
10. Esparza, J., Schwoon, S.: A BDD-Based Model Checker for Recursive Programs. In: Berry, G., Comon, H., Finkel, A. (eds.) CAV 2001. LNCS, vol. 2102, pp. 324-336. Springer, Heidelberg (2001)
11. Gostev, A.: Kaspersky security bulletin, malware evolution. Kaspersky Lab ZAO (2010), http://www.securelist.com/en/analysis/204792161/Kaspersky-Security- Bulletin-Malware-Evolution-2010
12. Heavens, V.: http://vx.netlux.org
13. Hex-Rays. IDAPro (2011)
14. Holzer, A., Kinder, J., Veith, H.: Using Verification Technology to Specify and Detect Malware. In: Moreno Díaz, R., Pichler, F., Quesada Arencibia, A. (eds.) EUROCAST 2007. LNCS, vol. 4739, pp. 497-504. Springer, Heidelberg (2007)
15. Kaspersky, http://www.kaspersky.com, Version 12.0.0.374
16. Kinder, J., Katzenbeisser, S., Schallhart, C., Veith, H.: Detecting Malicious Code by Model Checking. In: Julisch, K., Kruegel, C. (eds.) DIMVA 2005. LNCS, vol. 3548, pp. 174-187. Springer, Heidelberg (2005)
17. Kinder, J., Katzenbeisser, S., Schallhart, C., Veith, H.: Proactive detection of computer worms using model checking. IEEE Trans. on Dependable and Secure Computing 7(4) (2010)
18. Kinder, J., Veith, H.: Jakstab: A Static Analysis Platform for Binaries. In: Gupta, A., Malik, S. (eds.) CAV 2008. LNCS, vol. 5123, pp. 423-427. Springer, Heidelberg (2008)
19. Lakhotia, A., Boccardo, D.R., Singh, A., Manacero, A.: Context-sensitive analysis of obfuscated x86 executables. In: PEPM (2010)
20. Lakhotia, A., Kumar, E.U., Venable, M.: A method for detecting obfuscated calls in malicious binaries. IEEE Trans. Software Eng. 31(11) (2005)
21. Qihoo 360, http://www.360.cn
22. Singh, P.K., Lakhotia, A.: Static verification of worm and virus behavior in binary executables using model checking. In: IAW, pp. 298-300 (2003)
23. Song, F., Touili, T.: Efficient Malware detection using model-checking. Research report (2012), http://www.liafa.jussieu.fr/-song/full.pdf
24. Song, F., Touili, T.: Pushdown Model Checking for Malware Detection. In: Flanagan, C., König, B. (eds.) TACAS 2012. LNCS, vol. 7214, pp. 110-125. Springer, Heidelberg (2012)
25. Wong, W.: Analysis and detection of metamorphic computer viruses. Master's thesis, San Jose State University (2006)