arrow
Return

Optimizing symbolic execution for malware behavior classification

delete2020-06-01
delete19
delete
OA
AI
S
Stefano Sebastio *
E
Eduard Baranov
F
Fabrizio Biondi
O
Olivier Decourbe
T
Thomas Given-Wilson
A
Axel Legay
C
Cassius Puodzius
J
Jean Quilbeuf
DOI:10.1016/j.cose.2020.101775delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
Increasingly software correctness, reliability, and security is being analyzed using tools that combine various formal and heuristic approaches. Often such analysis becomes expensive in terms of time and at the cost of high quality results. In this experience report we explore the tuning and optimization of the tools underlying binary malware detection and classification. We identify heuristics and SMT solver tactics for the effective symbolic execution of binary files. We combine these with effective heuristics for the construction of behavioral signatures of programs that can be used for a supervised learning multi-class malware classifier. Further, a set of experiments following the full-factorial design allowed us to identify the correlations between heuristics and the overall performance of the classifier. (C) 2020 Elsevier Ltd. All rights reserved.
Keywords:
Malware classification
Empirical studies
SMT solving
Behavior graphs
Symbolic execution
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

C
Computers and Security
IF:
5.4
Papers:
4.6K
Citations:
1.4W

Organization

I
Inria
Scholars:
3.5K
Papers: 2.5K
Citations: 343
U
universite catholique louvain
Scholars:
2.0W
Papers: 1.7W
Citations: 21
C
cisco systems inc
Scholars:
383
Papers: 354
Citations: 0
researcher View more organizations
Cited Papers

Cited Papers

Classification of malware based on integrated static and dynamic features
err2013-03-01
err190
PREAI
errIslam, Rafiqul; Tian, Ronghua; Batten, Lynn M.; Versteeg, Steve
errShare
errSave
A malware detection method based on family behavior graph
err2018-03-01
err91
PREAI
errDing, Yuxin; Xia, Xiaoling; Chen, Sheng; Li, Ye
errShare
errSave
errShare
errSave
Uniformity in dynamic baroreflex regulation of left and right cardiac sympathetic nerve activities
err2003-06-01
err0
PREAI
errToru Kawada; Kazunori Uemura; Koji Kashihara; Yintie Jin; Meihua Li; Can Zheng; Masaru Sugimachi; Kenji Sunagawa
errShare
errSave
A set of robust fluorescent peptide probes for quantification of Cu(ii) binding affinities in the micromolar to femtomolar range
err2015-01-01
err0
errOAAI
errTessa R. Young; Chathuri J. K. Wijekoon; Benjamin Spyrou; Paul S. Donnelly; Anthony G. Wedd; Zhiguang Xiao
errShare
errSave
Ternary chalcogenide-based photoelectrochemical cells III. n-CuIn5S8/aqueous polysulfide
err1984-10-01
err0
PREAI
errGeulah Dagan; Saburo Endo; Gary Hodes; George Sawatzky; David Cahen
errShare
errSave
A rare presentation of necrotizing sarcoidosis
err2022-05-10
err0
errOAAI
errNirali Sheth; Umaima Dhamrah; Branden Ireifej; David Song; Penpa Bhuti; Jagbir Singh; Henry Fan; Sibghatallah Ummar; Vikash Jaiswal; Nishan Babu Pokhrel
errShare
errSave
Android Malware Detection via Graphlet Sampling
err2019-12-01
err21
errOAAI
errGao, Tianchong; Peng, Wei; Sisodia, Devkishen; Saha, Tanay Kumar; Li, Feng; Hasan, Mohammad
errShare
errSave
researcher View more