.png){kind=icon}
返回
Auditing Anti-Malware Tools by Evolving Android Malware and Dynamic Loading Technique
.png){kind=icon}
OA
AI
DOI：10.1109/TIFS.2017.2661723.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Although a previous paper shows that existing antimalware tools (AMTs) may have high detection rate, the report is based on existing malware and thus it does not imply that AMTs can effectively deal with future malware. It is desirable to have an alternative way of auditing AMTs. In our previous paper, we use malware samples from android malware collection GENOME to summarize a malware meta-model for modularizing the common attack behaviors and evasion techniques in reusable features. We then combine different features with an evolutionary algorithm, in which way we evolve malware for variants. Previous results have shown that the existing AMTs only exhibit detection rate of 20%-30% for 10 000 evolved malware variants. In this paper, based on the modularized attack features, we apply the dynamic code generation and loading techniques to produce malware, so that we can audit the AMTs at runtime. We implement our approach, named MYSTIQUE-S, as a service-oriented malware generation system. MYSTIQUE-S automatically selects attack features under various user scenarios and delivers the corresponding malicious payloads at runtime. Relying on dynamic code binding (via service) and loading (via reflection) techniques, MYSTIQUE-S enables dynamic execution of payloads on user devices at runtime. Experimental results on real-world devices show that existing AMTs are incapable of detecting most of our generated malware. Last, we propose the enhancements for existing AMTs.
Keyword:
Android feature model
defense capability
malware generation
dynamic loading
linear programming
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
8
论文数:
5.3K
被引数:
2.3W
机构
引用论文
Directed Self‐Assembly of Chiral, Optically Active Macrocyclic Tetranuclear Molecular Squares手性，光学活性大环四核分子正方形的定向自组装
PREAI
分享收藏Enhanced photocurrent response on a CdTe incorporated coordination polymer based on 3-(3-(1H-imidazol-1-yl)phenyl)-5-(4-(1H-imidazol-1-yl)phenyl)-1-methyl-1H-1,2,4-triazole.png)
RSC Advances
RSC AdvancesIF0
PREAI
分享收藏分享收藏
查看更多内容