Static Analysis and Clustering of Malware Applying Text Based Search

Mudhi Mohammed Aljamea; Costas Iliopoulos; Richard Edward Overill; Vida Ghanaei

Static Analysis and Clustering of Malware Applying Text Based Search

Mudhi Mohammed Aljamea, Costas Iliopoulos, Richard Edward Overill, Vida Ghanaei

Research output: Chapter in Book/Report/Conference proceeding › Chapter › peer-review

Abstract

Malware is computer software with the harmful intension to both computers and networks. Anti-virus companies receive extensive amount of malware variants daily, therefore there is an essential need to automatically cluster malware variants into their corresponding family in order to reduce the effort and time on manual analysis. As malware variants which belong to the same family, share certain amount of code, we classify them into the same cluster based on the shared features that we extract from them. In this paper we propose a static analysis approach using text based search technique, control flow graph, hashing, and machine learning to cluster malware variants accordingly. However, this is an on going work, but we will be able to explain our methodology and the preliminary results achieved.

Original language	English
Title of host publication	Citeseer
Publisher	Citeseer
Pages	188-193
ISBN (Electronic)	978-0-9891305-1-6
Publication status	Published - 2013

Keywords

Text based search, code normalization, control flow graph, hashing, malicious shared code, and machine learning

Cite this

@inbook{b3115318cc7f477f8ea9bc35f3faedf9,

title = "Static Analysis and Clustering of Malware Applying Text Based Search",

abstract = "Malware is computer software with the harmful intension to both computers and networks. Anti-virus companies receive extensive amount of malware variants daily, therefore there is an essential need to automatically cluster malware variants into their corresponding family in order to reduce the effort and time on manual analysis. As malware variants which belong to the same family, share certain amount of code, we classify them into the same cluster based on the shared features that we extract from them. In this paper we propose a static analysis approach using text based search technique, control flow graph, hashing, and machine learning to cluster malware variants accordingly. However, this is an on going work, but we will be able to explain our methodology and the preliminary results achieved.",

keywords = "Text based search, code normalization, control flow graph, hashing, malicious shared code, and machine learning",

author = "Aljamea, {Mudhi Mohammed} and Costas Iliopoulos and Overill, {Richard Edward} and Vida Ghanaei",

year = "2013",

language = "English",

pages = "188--193",

booktitle = "Citeseer",

publisher = "Citeseer",

}

TY - CHAP

T1 - Static Analysis and Clustering of Malware Applying Text Based Search

AU - Aljamea, Mudhi Mohammed

AU - Iliopoulos, Costas

AU - Overill, Richard Edward

AU - Ghanaei, Vida

PY - 2013

Y1 - 2013

N2 - Malware is computer software with the harmful intension to both computers and networks. Anti-virus companies receive extensive amount of malware variants daily, therefore there is an essential need to automatically cluster malware variants into their corresponding family in order to reduce the effort and time on manual analysis. As malware variants which belong to the same family, share certain amount of code, we classify them into the same cluster based on the shared features that we extract from them. In this paper we propose a static analysis approach using text based search technique, control flow graph, hashing, and machine learning to cluster malware variants accordingly. However, this is an on going work, but we will be able to explain our methodology and the preliminary results achieved.

AB - Malware is computer software with the harmful intension to both computers and networks. Anti-virus companies receive extensive amount of malware variants daily, therefore there is an essential need to automatically cluster malware variants into their corresponding family in order to reduce the effort and time on manual analysis. As malware variants which belong to the same family, share certain amount of code, we classify them into the same cluster based on the shared features that we extract from them. In this paper we propose a static analysis approach using text based search technique, control flow graph, hashing, and machine learning to cluster malware variants accordingly. However, this is an on going work, but we will be able to explain our methodology and the preliminary results achieved.

KW - Text based search, code normalization, control flow graph, hashing, malicious shared code, and machine learning

M3 - Chapter

SP - 188

EP - 193

BT - Citeseer

PB - Citeseer

ER -

Static Analysis and Clustering of Malware Applying Text Based Search

Abstract

Keywords

Fingerprint

Cite this