.png){kind=icon}
返回
Proactive Detection of Computer Worms Using Model Checking
.png){kind=icon}
OA
AI
DOI：10.1109/TDSC.2008.74.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Although recent estimates are speaking of 200,000 different viruses, worms, and Trojan horses, the majority of them are variants of previously existing malware. As these variants mostly differ in their binary representation rather than their functionality, they can be recognized by analyzing the program behavior, even though they are not covered by the signature databases of current antivirus tools. Proactive malware detectors mitigate this risk by detection procedures that use a single signature to detect whole classes of functionally related malware without signature updates. It is evident that the quality of proactive detection procedures depends on their ability to analyze the semantics of the binary. In this paper, we propose the use of model checking-a well-established software verification technique-for proactive malware detection. We describe a tool that extracts an annotated control flow graph from the binary and automatically verifies it against a formal malware specification. To this end, we introduce the new specification language CTPL, which balances the high expressive power needed for malware signatures with efficient model checking algorithms. Our experiments demonstrate that our technique indeed is able to recognize variants of existing malware with a low risk of false positives.
Keyword:
Invasive software
model checking
期刊
IF:
7.5
论文数:
2.5K
被引数:
9.6K
机构
引用论文
gp120-Induced Neurotoxicity in Hippocampal Pyramidal Neuron Cultures: Protective Action of TGF-β1
OAAI
OAAI分享收藏Synthesis and pharmacological evaluation of some new tetrahydroisoquinoline derivatives inhibiting dopamine uptake and/or possessing a dopaminomimetic property一些抑制多巴胺摄取和/或具有多巴胺模拟特性的新型四氢异喹啉衍生物的合成和药理学评价
PREAI
分享收藏Peroxo complexes of chromium(VI), molybdenum(VI), tungsten(VI) and zirconium(IV) ions containing tridentate and quadridentate neutral ligands.png)
Polyhedron
PolyhedronIF0
PREAI
分享收藏
查看更多内容