Similarity calculation method for user-define functions to detect malware variants
- Authors
- Kim, Taeguen; Park, Jung Bin; Cho, In Gyeom; Im, Eul Gyu; Kang, Boojoong; Kang, Sooyong
- Issue Date
- Oct-2014
- Publisher
- Association for Computing Machinery, Inc
- Keywords
- Malware analysis; Smith-Waterman algorithm; Static analysis
- Citation
- Proceedings of the 2014 Research in Adaptive and Convergent Systems, RACS 2014, pp.236 - 241
- Indexed
- SCOPUS
- Journal Title
- Proceedings of the 2014 Research in Adaptive and Convergent Systems, RACS 2014
- Start Page
- 236
- End Page
- 241
- URI
- https://scholarworks.bwise.kr/hanyang/handle/2021.sw.hanyang/158945
- DOI
- 10.1145/2663761.2664222
- ISSN
- 0000-0000
- Abstract
- The number of malware has sharply increased over years, and it caused various damages on computing systems and data. In this paper, we propose techniques to detect malware variants. Malware authors usually reuse malware modules when they generate new malware or malware variants. Therefore, malware variants have common code for some functions in their binary files. We focused on this common code in this research, and proposed the techniques to detect malware variants through similarity calculation of user-defined function. Since many malware variants evade malware detection system by transforming their static signatures, to cope with this problem, we applied pattern matching algorithms for DNA variations in Bioinformatics to similarity calculation of malware binary files. Since the pattern matching algorithm we used provides the local alignment function, small modification of functions can be overcome. Experimental results show that our proposed method can detect malware similarity and it is more resilient than other methods.
- Files in This Item
-
Go to Link
- Appears in
Collections - 서울 공과대학 > 서울 컴퓨터소프트웨어학부 > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholarworks.bwise.kr/hanyang/handle/2021.sw.hanyang/158945)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.