DocumentCode :
1885868
Title :
Malware self protection mechanism issues in conducting malware behaviour analysis in a virtual environment as compared to a real environment
Author :
Alsagoff, Syed Nasir
Author_Institution :
Fac. of Sci. & Defence Technol., Nat. Defence Univ. of Malaysia, Malaysia
Volume :
3
fYear :
2010
fDate :
15-17 June 2010
Firstpage :
1326
Lastpage :
1331
Abstract :
Malware writers are constantly trying to defeat and hinder malware analysis with malware self protection mechanism. There are two main methods of malware analysis which are reverse engineering and behaviour analysis. Reverse engineering consists of static and dynamic code analysis. Behaviour analysis studies the malware´s interaction in and out of the infected host. Behaviour analysis will always be a faster method compared to reverse engineering due to its more visual approach. This study will analyse issues related to malware self protection mechanism in conducting malware behaviour analysis in a virtual environment as compared to a real environment and suggestion(s), on how to overcome the problem.
Keywords :
invasive software; reverse engineering; behaviour analysis; dynamic code analysis; malware behaviour analysis; malware self protection mechanism; malware writers; reverse engineering; static code analysis; virtual environment; Hard disks; Hardware; Image restoration; Malware; Reverse engineering; Software; Virtual environment;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Information Technology (ITSim), 2010 International Symposium in
Conference_Location :
Kuala Lumpur
ISSN :
2155-897
Print_ISBN :
978-1-4244-6715-0
Type :
conf
DOI :
10.1109/ITSIM.2010.5561600
Filename :
5561600
Link To Document :
بازگشت