Framework for understanding intention-unbreakable malware

doi:10.1007/s11432-021-3567-y

Framework for understanding intention-unbreakable malware

2023-03-27

0

PRE

AI

DOI：10.1007/s11432-021-3567-y

Original

Original request for help

Save

Abstract

En 中文

The anti-analysis technology of malware has always been the focus in the cyberspace security field. As malware analysis techniques evolve, malware writers continually employ sophisticated anti-reverse engineering techniques to defeat and evade state-of-the-art analyzers. Therefore, to prepare for unknown attacks, studying malware analysis techniques is insufficient. More importantly, we should study new anti-analysis techniques for malware. This paper expands the concept of anti-analysis malware and defines a type of intention-unbreakable malware (IUM). To help defenders fully understand and establish a defense system against the new security threats, this paper systematically discusses IUM from the perspectives of threat discovery, threat modeling, attribute analysis, and threat assessment; in addition, this study also provides the PoC implementations of IUM and demonstrates how attackers can use this type of malware to evade advanced security analysis, that is, accurate identification of target (class) victims and intention concealment in reaching non-target (class) victims. Finally, this paper provides several mitigation directions for combating IUM.

Keywords:

malware

unbreakable property

modeling mechanism

accurate identification

intention concealment

Framework for understanding intention-unbreakable malware

Abstract

Journal

Organization