Atjaunināt sīkdatņu piekrišanu

Automatic Malware Analysis: An Emulator Based Approach 2013 ed. [Mīkstie vāki]

  • Formāts: Paperback / softback, 73 pages, height x width: 235x155 mm, weight: 454 g, 15 Illustrations, black and white; IX, 73 p. 15 illus., 1 Paperback / softback
  • Sērija : SpringerBriefs in Computer Science
  • Izdošanas datums: 14-Sep-2012
  • Izdevniecība: Springer-Verlag New York Inc.
  • ISBN-10: 1461455227
  • ISBN-13: 9781461455226
  • Mīkstie vāki
  • Cena: 46,91 €*
  • * ši ir gala cena, t.i., netiek piemērotas nekādas papildus atlaides
  • Standarta cena: 55,19 €
  • Ietaupiet 15%
  • Grāmatu piegādes laiks ir 3-4 nedēļas, ja grāmata ir uz vietas izdevniecības noliktavā. Ja izdevējam nepieciešams publicēt jaunu tirāžu, grāmatas piegāde var aizkavēties.
  • Daudzums:
  • Ielikt grozā
  • Piegādes laiks - 4-6 nedēļas
  • Pievienot vēlmju sarakstam
  • Formāts: Paperback / softback, 73 pages, height x width: 235x155 mm, weight: 454 g, 15 Illustrations, black and white; IX, 73 p. 15 illus., 1 Paperback / softback
  • Sērija : SpringerBriefs in Computer Science
  • Izdošanas datums: 14-Sep-2012
  • Izdevniecība: Springer-Verlag New York Inc.
  • ISBN-10: 1461455227
  • ISBN-13: 9781461455226
Malicious software (i.e., malware) has become a severe threat to interconnected computer systems for decades and has caused billions of dollars damages each year. A large volume of new malware samples are discovered daily. Even worse, malware is rapidly evolving becoming more sophisticated and evasive to strike against current malware analysis and defense systems. 

Automatic Malware Analysis presents a virtualized malware analysis framework that addresses common challenges in malware analysis. In regards to this new analysis framework, a series of analysis techniques for automatic malware analysis is developed. These techniques capture intrinsic characteristics of malware, and are well suited for dealing with new malware samples and attack mechanisms.

Recenzijas

From the reviews:

The authors present their architecture for dynamic binary analysis of malware. The authors do this quite well. Each chapter ends with a chapter summary and extensive references. the book presents a good concise explanation of the proposed architecture for automated detection of malware. It makes a useful little brief for quickly coming to grips with the basics of how malware works. (David B. Henderson, Computing Reviews, May, 2013)

1 Introduction
1(4)
1.1 Malware is a Persistent and Growing Threat
1(1)
1.2 We Need Automatic Malware Analysis
1(1)
1.3 Current Malware Analysis Techniques are Limited
2(1)
1.4 Our Approach
2(1)
1.5 Our Contribution
3(2)
References
3(2)
2 Dynamic Binary Analysis Platform
5(12)
2.1 New Analysis Architecture
5(1)
2.2 Semantics Extractor
6(2)
2.2.1 Process and Module Information
7(1)
2.2.2 Thread Information
7(1)
2.2.3 Symbol Information
7(1)
2.2.4 Function Call Context
8(1)
2.3 Annotative Execution Engine
8(5)
2.3.1 Shadow Flag Analysis
9(1)
2.3.2 Taint Analysis
9(1)
2.3.3 Symbolic Execution
10(3)
2.4 TEMU APIs
13(1)
2.5 Related Work
14(1)
2.6 Summary
15(2)
References
15(2)
3 Hidden Code Extraction
17(10)
3.1 Background and Problem Scope
17(1)
3.2 Approach Overview
18(1)
3.3 System Implementation
19(1)
3.4 Evaluation
20(3)
3.4.1 Extracting from Synthetic Samples
20(2)
3.4.2 Extracting from Malware Samples
22(1)
3.4.3 Performance Overhead
23(1)
3.5 Related Work
23(2)
3.6 Summary
25(2)
References
25(2)
4 Privacy-breaching Behavior Analysis
27(16)
4.1 Background and Problem Scope
27(1)
4.2 Approach Overview
28(1)
4.3 System Design and Implementation
29(6)
4.3.1 Test Engine
30(1)
4.3.2 Taint Engine
30(2)
4.3.3 Malware Detection Engine
32(2)
4.3.4 Malware Analysis Engine
34(1)
4.4 Evaluation
35(4)
4.4.1 Malware Detection
35(2)
4.4.2 Malware Analysis
37(2)
4.4.3 Performance Overhead
39(1)
4.5 Related Work
39(1)
4.6 Summary
40(3)
References
41(2)
5 Hooking Behavior Analysis
43(16)
5.1 Background of Hooking Attacks
43(1)
5.2 Problem Statement
43(2)
5.3 Our Technique
45(1)
5.4 System Design and Implementation
46(6)
5.4.1 Hook Detector
47(2)
5.4.2 Hook Analyzer
49(3)
5.5 Evaluation
52(5)
5.5.1 Summarized Result
52(3)
5.5.2 Detailed Result for Uay backdoor
55(2)
5.6 Related Work
57(1)
5.7 Summary
57(2)
References
58(1)
6 Analysis of Trigger Conditions and Hidden Behaviors
59(10)
6.1 Background, Problem Scope and Approach Overview
59(1)
6.2 System Design and Implementation
60(1)
6.3 Evaluation
61(3)
6.4 Related Work
64(1)
6.5 Summary
65(4)
References
66(3)
7 Concluding Remarks
69
7.1 Discussion and Future Work
69(3)
7.1.1 Detecting, Evading and Subverting the Analysis Platform
69(1)
7.1.2 Limitations of Dynamic Analysis
70(1)
7.1.3 Limitations of Taint Analysis
71(1)
7.2 Conclusion
72
References
72