Referenced Items are not available for this document.
In this paper, we present a novel approach for the detection and signature extraction for a subclass of polymorphic computer viruses. Our detection scheme offers 0 false negative and a very low false positives detection rate. We use context-free grammars as viral signatures, and design a process able to extract this signature from a single sample of a virus. Signature extraction is achieved through a light manual information gathering process, followed by an automatic static analysis of the binary code of the virus mutation engine.
Published in:
Network and System Security (NSS), 2011 5th International Conference on
Date of Conference: 6-8 Sept. 2011
- Page(s):
- 41 - 48
- Print ISBN:
- 978-1-4577-0458-1
- INSPEC Accession Number:
- 12342890
- Conference Location :
- Milan
- Digital Object Identifier :
- 10.1109/ICNSS.2011.6059958
- Product Type:
- Conference Publications
About IEEE Xplore | Contact | Help | Terms of Use | Nondiscrimination Policy | Site Map | Privacy & Opting Out of Cookies
A not-for-profit organization, IEEE is the world's largest professional association for the advancement of technology.
© Copyright 2013 IEEE - All rights reserved. Use of this web site signifies your agreement to the terms and conditions.
