A Static Method for Detection of Information Theft Malware

Existing techniques based on behavior semantics for informationtheft malware detection have the main shortcomings of low pathcoverage and disability of finding hidden malicious behaviors. Inthis paper we propose a static method for the detection ofinformation theft malware to overcome these shortcomings. It isparticularly efficienct for inter-procedure taint analysis, and itis suitable for complicated malware detection, such as Trojan andBot. Its static style makes it able to find hidden maliciousbehaviors. We also present an implementation of our method thatworks on x86 executables and a set of experimental studies validateits good efficiency and effectiveness.