Publication Type : Conference Paper
Publisher : 2020 International Conference on Emerging Trends in Information Technology and Engineering (ic-ETITE)
Source : 2020 International Conference on Emerging Trends in Information Technology and Engineering (ic-ETITE) (2020)
Url : https://ieeexplore.ieee.org/abstract/document/9077838
Keywords : Analysis Aware Malware, anti-malware programs, appropriate identifications, computing system, invasive software, malware, Malware analysis, malware analysts, malware authors, malware dropper, malware variant resistant, modern analysis techniques, mysterious programs, Preventive measures, Proactive Malware Research, program diagnostics, Reverse engineering, Split Personality Malware, split-personality malware variant, subverting techniques, traditional analysis techniques, traditional malware analysis techniques, word malware
Campus : Coimbatore
School : School of Engineering
Department : Computer Science
Year : 2020
Abstract : In today's world, the word malware is synonymous with mysterious programs that spread havoc and sow destruction upon the computing system it infects. These malware are analyzed and understood by malware analysts who reverse engineer the program in an effort to understand it and provide appropriate identifications or signatures that enable anti-malware programs to effectively combat and resolve threats. Malware authors develop ways to circumvent or prevent this analysis of their code thus rendering preventive measures ineffective. This paper discusses existing analysis subverting techniques and how they are overcome by modern analysis techniques. Further, this paper proposes a new method to resist traditional malware analysis techniques by creating a split-personality malware variant that uses a technique known as shadow attack. The proposal is validated by creating a malware dropper and testing this dropper in controlled laboratory conditions as a part of the concept of proactive defense.
Cite this Research Publication : Ritwik Murali, Ravi, A., and Agarwal, H., “A Malware Variant Resistant To Traditional Analysis Techniques”, in 2020 International Conference on Emerging Trends in Information Technology and Engineering (ic-ETITE), 2020.