Server-Side Dynamic Code Analysis - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2009

Server-Side Dynamic Code Analysis

Résumé

The common use of packers is a real challenge for the anti-virus community. Indeed, a static signature analysis can usually only detect and sometimes remove known packers if a specific unpacking routine has been programmed manually. Generic unpacking does not solve the problem due to its limited effectiveness. Additionally, the important number of binaries to scan on a daily basis makes automated analysis necessary in order to protect information systems. In this context, we propose a taxonomy of self-modifying behaviors, a generic method to detect them in potentially malicious samples and a scalable architecture for the distributed analysis of a high volume of binaries.
Fichier principal
Vignette du fichier
Server-Side_Dynamic_Code_Analysis.pdf (89.17 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

inria-00425554 , version 1 (22-10-2009)

Identifiants

  • HAL Id : inria-00425554 , version 1

Citer

Wadie Guizani, Jean-Yves Marion, Daniel Reynaud. Server-Side Dynamic Code Analysis. 4th International Conference on Malicious and Unwanted Software - Malware 2009, Fernando C. Colon Osorio, Oct 2009, Montréal, Canada. pp.55-62. ⟨inria-00425554⟩
93 Consultations
301 Téléchargements

Partager

Gmail Facebook X LinkedIn More