ARIGUMA code analyzer: Efficient variant detection by identifying common instruction sequences in malware families

Proceedings - International Computer Software and Applications Conference

Volumn , Issue , 2013, Pages 11-20

  Zhong, Yang ^a   Yamaki, Hirofumi ^a   Yamaguchi, Yukiko ^a   Takakura, Hiroki ^a  

^a NAGOYA UNIVERSITY   (Japan)

Author keywords

Incremental clustering; LCS; Malware classification; Static analysis

Indexed keywords

APPLICATION PROGRAMS; CODES (SYMBOLS); COMPUTER CRIME; COST BENEFIT ANALYSIS; COSTS; MALWARE; PATTERN RECOGNITION;

ACCURACY OF CLASSIFICATIONS; CALCULATING SIMILARITIES; CYCLOMATIC COMPLEXITY; INCREMENTAL CLUSTERING; LONGEST COMMON SUBSEQUENCES; MALWARE CLASSIFICATIONS; PROGRAM CLASSIFICATIONS; SIMILARITY CALCULATION;

STATIC ANALYSIS;

EID: 84891301295     PISSN: 07303157     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/COMPSAC.2013.6     Document Type: Conference Paper

References (18)

1. M. Bailey, J. Oberheide, J. Andersen, Z.M. Mao, F. Jahanian, and J. Nazario. Automated classification and analysis of internet malware. In Proceedings of the 10th international conference on Recent advances in intrusion detection, pp. 178-197. Springer-Verlag, 2007.
2. I. Santos, Y. Penya, J. Devesa, and P. Bringas. N-gramsbased file signatures for malware detection. In Proceedings of the 11th International Conference on Enterprise Information Systems (ICEIS), pp. 317-320. AIDSS, 2009.
3. M.E. Karim, A. Walenstein, A. Lakhotia, and L. Parida. Malware phylogeny generation using permutations of code. In Journal in Computer Virology, Vol. 1, pp. 13-23. Springer, 2005.
4. M. Iwamura, M. Itoh, and Y. Muraoka. Towards efficient analysis for malware in the wild. In Communications (ICC), 2011 IEEE International Conference, pp. 1-6. IEEE, 2011.
5. M. Crochemore, C.S. Iliopoulos, Y.J. Pinzon, et al. Speedingup hirschberg and hunt-szymanski lcs algorithms. In Fundamenta Informaticae, Vol. 56, pp. 89-103. IOS Press, 2003.
6. X. Hu, T. Chiueh, and K.G. Shin. Large-scale malware indexing using function-call graphs. In Proceedings of the 16th ACM conference on Computer and communications security, pp. 611-620. ACM, 2009.
7. J. Kinable and O. Kostakis. Malware classification based on call graph clustering. In Journal in Computer Virology, Vol. 7, pp. 233-245. Springer, 2011.
8. J. Mayrand, C. Leblanc, and E.M. Merlo. Experiment on the automatic detection of function clones in a software system using metrics. In Software Maintenance 1996, Proceedings., International Conference, pp. 244-253. IEEE, 1996.
9. T.J. McCabe. A complexity measure. In Software Engineering, IEEE Transactions on, Vol. 4, pp. 308-320. IEEE, 1976.
10. Sergios Theodoridis and Konstantinos Koutroumbas. Pattern recognition, fourth edition. pp. 627-652. Academic Press, 2008.
11. AV Hall. Methods for demonstrating resemblance in taxonomy and ecology. In Nature, Vol. 214, pp. 830-831, 1967.
12. P. Trahanias and E. Skordalakis. An efficient sequential clustering method. In Pattern recognition, Vol. 22, pp. 449-453. Elsevier, 1989.
13. D.S. Hirschberg. A linear space algorithm for computing maximal common subsequences. In Communications of the ACM, Vol. 18, pp. 341-343. ACM, 1975.
14. Self Reference. Statistical analysis of honeypot data and building of kyoto 2006+ dataset for nids evaluation. In Proceedings of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security, pp. 29-36. ACM, 2011.
15. Okubo R, Morii M, Isawa R, Inoue D, and Nakao K. Function estimation method for malwares based on part of binary code. In Computer Security Symposium, pp. 9-14. IPSJ, 2012.
16. R. Tian, L. Batten, R. Islam, and S. Versteeg. An automated classification system based on the strings of trojan and virus families. In Malicious and Unwanted Software (MALWARE), 2009 4th International Conference on, pp. 23-30. IEEE, 2009.
17. Usui T, Shigematsu K, Takeda K, and Murai J. Malware classification based on svm and labeling by api's tendency. In Computer Security Symposium, pp. 797-802. IPSJ, 2011.
18. T. Fawcett. Roc graphs: Notes and practical considerations for researchers. In Machine Learning, Vol. 31, pp. 1-38, 2004.