Automatic Malware Analysis: An Emulator Based Approach

✍ Scribed by Heng Yin, Dawn Song (auth.)

• Publisher: Springer-Verlag New York
• Year: 2013
• Tongue: English
• Leaves: 82
• Series: SpringerBriefs in Computer Science
• Edition: 1
• Category: Library

✦ Synopsis

Malicious software (i.e., malware) has become a severe threat to interconnected computer systems for decades and has caused billions of dollars damages each year. A large volume of new malware samples are discovered daily. Even worse, malware is rapidly evolving becoming more sophisticated and evasive to strike against current malware analysis and defense systems.

Automatic Malware Analysis presents a virtualized malware analysis framework that addresses common challenges in malware analysis. In regards to this new analysis framework, a series of analysis techniques for automatic malware analysis is developed. These techniques capture intrinsic characteristics of malware, and are well suited for dealing with new malware samples and attack mechanisms.

✦ Table of Contents

Front Matter....Pages i-ix
Introduction....Pages 1-4
Dynamic Binary Analysis Platform....Pages 5-16
Hidden Code Extraction....Pages 17-26
Privacy-breaching Behavior Analysis....Pages 27-42
Hooking Behavior Analysis....Pages 43-58
Analysis of Trigger Conditions and Hidden Behaviors....Pages 59-67
Concluding Remarks....Pages 69-73

✦ Subjects

Systems and Data Security; Data Encryption; Data Structures, Cryptology and Information Theory; Information Systems and Communication Service; Information Systems Applications (incl. Internet)