.png){kind=icon}
返回
Efficient dynamic malware analysis using virtual time control mechanics
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2017.11.010.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Efficient detection of stealthy malware attacks in suspicious files is very challenging as dynamic malware analysis is time consuming. This paper proposes a virtual time control mechanics based method to overcome the challenge. The proposed method utilizes a modified Xen hypervisor, in which a virtual clock source is generated according to a predefined speed ratio, such that sandbox systems running on the modified hypervisor can be accelerated. Thus, it does not modify operating system kernels nor intercept system function calls, and is therefore compatible with various operating systems. Further, it utilizes an entropy-based measure that adjusts its execution time according to various malware inputs as an early termination criterion. The results of experiments conducted to verify the efficacy of the proposed method indicate that it speeds up the system timer and significantly increases the logged record size by up to 42% or obtains the same log size within a shorter period compared with conventional sandboxes. Thus, the proposed virtual time control mechanics-based method efficiently detects nontrivial anomalous codes that may be neglected by conventional sandboxing techniques. (C) 2017 Elsevier Ltd. All rights reserved.
Keyword:
Dynamic analysis
Virtual time control
Information entropy
Anti-analysis
Hypervisor
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
分享收藏A set of robust fluorescent peptide probes for quantification of Cu(ii) binding affinities in the micromolar to femtomolar range.png)
Metallomics
OAAI
MetallomicsIF0
OAAI分享收藏Mobile Loops and Electrostatic Interactions Maintain the Flexible Tail Tube of Bacteriophage LambdaOAAI
OAAI分享收藏分享收藏
查看更多内容