Visualization of shared system call sequence relationships in large malware corpora

ACM International Conference Proceeding Series

Volumn , Issue , 2012, Pages 33-40

  Saxe, Josh ^a   Mentis, David ^a   Greamo, Chris ^a  

^a Invincea Labs   (United States)

Author keywords

Computer security; Data mining; Data visualization; Malware

Indexed keywords

BEHAVIORAL TRAITS; BOOLEAN VECTORS; DATA SETS; INTERACTIVE DISPLAY; JACCARD INDEX; LOCAL SIMILARITY; MALWARES; REDUCED-DIMENSIONAL; SIMILARITY MATRIX; SYSTEM CALLS; SYSTEM-CALL SEQUENCE; VARIABLE LENGTH;

DATA MINING; DATA VISUALIZATION; GRAPHICAL USER INTERFACES; HEURISTIC ALGORITHMS; SECURITY OF DATA; SEMANTICS; VISUALIZATION;

COMPUTER CRIME;

EID: 84869049724     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2379690.2379695     Document Type: Conference Paper

References (8)

1. A.-T. Institute, "AV-Test Statistics Report," 2012. [Online]. Available: http://www.av-test.org/en/statistics/malware/.
2. "QEMU," 1 June 2012. [Online]. Available: http://wiki.qemu.org/ Main-Page. [Accessed 1 June 2012].
3. M. Russinovich and B. Cogswell, "Microsoft TechNet," Microsoft, 1 6 2012. [Online]. Available: http://technet.microsoft.com/enus/sysinternals/ bb896645.aspx. [Accessed 1 6 2012].
4. P. R. H. S. Christopher D. Manning, 2008. Introduction to Information Retrieval, Cambridge University Press, 2008.
5. G. Conti, E. Dean, M. Sinda, B. Sangster and J. Goodall, 2008. Visual Reverse Engineering of Binary and Data Files. Visualization for Computer Security, Springer Berlin / Heidelberg, 2008, pp. 1-17.
6. P. H. Trinius and J. a. F. T. Gobel, 2009. Visual analysis of malware behavior using treemaps and thread graphs. In Proceedings of the International Workshop on Visualization for Cyber Security (VizSec 2009).
7. D. Quist, 2009. Visualizing compiled executables for malware analysis. In Proceedings of the International Workshop on Visualization for Cyber Security (VizSec 2009).
8. C. Storlie, S. V. Weil, D. Quist, B. Anderson, 2012. Stochastic Identification and Clustering of Malware with Dynamic Traces. Malware Technical Exchange Meeting 2012.