DocumentCode
3095450
Title
An approach for malware behavior identification and classification
Author
Zolkipli, Mohamad Fadli ; Jantan, Aman
Author_Institution
Sch. of Comput. Sci., Univ. Sains Malaysia, Penang, Malaysia
Volume
1
fYear
2011
fDate
11-13 March 2011
Firstpage
191
Lastpage
194
Abstract
Malware is one of the major security threats that can break computer operation. However, commercial anti-virus or anti-spyware that used signature-based matching to detects malware cannot solve that kind of threats. Nowadays malware writers try to avoid detection by using several techniques such as polymorphic, metamorphic and also hiding technique. In order to overcome that issue, we proposed a new framework for malware behavior identification and classification that apply dynamic approach. This framework consists of two major processes such as behavior identification and malware classification. These two major processes will integrate together as interrelated process in our proposed framework. Result from this study is a new framework that able to identify and classify malware based on it behaviors.
Keywords
computer viruses; data encapsulation; digital signatures; antispyware; antivirus; hiding technique; malware behavior classification; malware behavior identification; metamorphic technique; polymorphic technique; security threats; signature-based matching; Computer architecture; Computer science; Computers; Malware; Operating systems; Virtual machining; behavior analysis; computer security; malware; malware classification;
fLanguage
English
Publisher
ieee
Conference_Titel
Computer Research and Development (ICCRD), 2011 3rd International Conference on
Conference_Location
Shanghai
Print_ISBN
978-1-61284-839-6
Type
conf
DOI
10.1109/ICCRD.2011.5764001
Filename
5764001
Link To Document