G. McGraw

Helmut Veith

Johannes Kinder

Mihai Christodorescu

P. Beaucamps

S. Muchnick

Somesh Jha

Stefan Katzenbeisser

Crossref

Software transformations to improve malware detection

Malware is code designed for a malicious purpose, such as obtaining root privilege on a host. A malware detector identifies malware and thus prevents it from adversely affecting a host. In order to evade detection, malware writers use various obfuscation techniques to transform their malware. There is strong evidence that commercial malware detectors are susceptible to these evasion tactics. In this paper, we describe the design and implementation of a malware transformer that reverses the obfuscations performed by a malware writer. Our experimental evaluation demonstrates that this malware transformer can drastically improve the detection rates of commercial malware detectors

Christodorescu, Mihai

Jha, Somesh

Kinder, Johannes

Katzenbeisser, Stefan

Veith, Helmut

Royal Holloway - Pure

Infoscience - École polytechnique fédérale de Lausanne

http://infoscience.epfl.ch/record/167539/files/jicv07.pdf

Software transformations to improve malware detection

Abstract

Similar works

Full text

Available Versions

Crossref

Royal Holloway - Pure

Infoscience - École polytechnique fédérale de Lausanne