Poster: Obfuscation Revealed - Using Electromagnetic Emanation to Identify and Classify Malware - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Poster Année : 2021

Poster: Obfuscation Revealed - Using Electromagnetic Emanation to Identify and Classify Malware

Résumé

In this poster we present a novel approach of using side channel information to identify the kinds of malware threats that are targeting IoT devices. Although in the presence of obfuscation techniques that can prevent static or symbolic binary analysis, a malware researcher may obtain detailed information about malware type and identification using our method by leveraging side channel by electromagnetism rather than software-layer malware analysis. By capturing 100,000 measurement traces from an IoT system infected with different malware samples, we can obtain this information without altering the actual hardware. As a result, it can be implemented without any overhead, regardless of the resources available. Furthermore, our method has the advantage of non-trivial for malware authors to avoid. We were able to distinguish malware families based on side-channel knowledge without being able to see what exact hardware was involved. We were able to predict three generic malware forms (and one benign class) with a 99.89% percent accuracy in our tests. Furthermore, our results show that we are able to classify altered malware samples with unseen obfuscation techniques during the training phase, and to determine what kind of obfuscations, which makes our approach particularly useful for malware analysts.
Fichier principal
Vignette du fichier
Poster_Euro_S_P_2021.pdf (5.36 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03458819 , version 1 (02-02-2022)

Identifiants

Citer

Duy-Phuc Pham, Damien Marion, Annelie Heuser. Poster: Obfuscation Revealed - Using Electromagnetic Emanation to Identify and Classify Malware. EuroS&P 2021 - 6th IEEE European Symposium on Security and Privacy, Sep 2021, online, Austria. pp.1-1, 2021, ⟨10.1109/eurosp51992.2021.00055⟩. ⟨hal-03458819⟩
69 Consultations
60 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More