Malware Detection by Static Checking and Dynamic Analysis of Executables

Deepti Vidyarthi, S.P. Choudhary, Subrata Rakshit and C.R.S. Kumar
Additional contact information
Deepti Vidyarthi: Defence Institute of Advanced Technology, Pune, India
S.P. Choudhary: Defence Institute of Advanced Technology, Pune, India
Subrata Rakshit: Center of Artificial Intelligence & Robotics, Bangalore, India
C.R.S. Kumar: Defence Institute of Advanced Technology, Pune, India

International Journal of Information Security and Privacy (IJISP), 2017, vol. 11, issue 3, 29-41

Abstract: The advanced malware continue to be a challenge in digital world that signature-based detection techniques fail to conquer. The malware use many anti-detection techniques to mutate. Thus no virus scanner can claim complete malware detection even for known malware. Static and dynamic analysis techniques focus upon different kinds of malware such as Evasive or Metamorphic malware. This paper proposes a comprehensive approach that combines static checking and dynamic analysis for malware detection. Static analysis is used to check the specific code characteristics. Dynamic analysis is used to analyze the runtime behavior of malware. The authors propose a framework for the automated analysis of an executable's behavior using text mining. Text mining of dynamic attributes identifies the important features for classifying the executable as benign and malware. The synergistic combination proposed in this paper allows detection of not only known variants of malware but even the obfuscated, packed and unknown malware variants and malware evasive to dynamic analysis.

Date: 2017
References: Add references at CitEc
Citations:

Downloads: (external link)
http://services.igi-global.com/resolvedoi/resolve. ... 018/IJISP.2017070103 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:igg:jisp00:v:11:y:2017:i:3:p:29-41

Access Statistics for this article

International Journal of Information Security and Privacy (IJISP) is currently edited by Yassine Maleh

More articles in International Journal of Information Security and Privacy (IJISP) from IGI Global
Bibliographic data for series maintained by Journal Editor ().