Luis Miras & Ken Steele - SourceForge
Static Malware Detection
Luis Miras & Ken Steele
Goals
? Stimulate research in static binary analysis for malware detection purposes
? Provide a toolset for exploration of Portable Executables
? Show consequences of not blocking packed/compressed executables at the gateway.
? Provide a mechanism to aid in mitigating 0day "mass mailer" worms.
Philosophy of Detection
? Signature based
? Pros
? Concise
? Cons
? Update game
? Heuristics
? Pros
? Adaptable to new attacks
? Cons
? False positives
Our Approach
? Python PE parsing library ? Why Python? ? Packer Detection
? Signature (complete) ? Heuristics (in progress)
? Block "mass mailer" worms at the MTA
? Scan all attachments (extensions don't matter)
? Exit when not PE
? No patch for stupidity
Agenda
? Email Worm Overview ? PE File Format Overview ? Packer Overview ? Packer Detection ? Library and Tools ? Demos ? Future Roadmap ? Other Research ? Resources ? Questions
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- luis miras ken steele sourceforge
- product specification
- symantec intelligence symantec intelligence report
- 6 8 0 j 6 6
- proceedings of fedsm 02 fedsm2002 31337 fedsm2002 31337
- title read and interpret working drawings and
- cryptographic attacks
- cryptographic hashes
- manuscript print and the english renaissance lyric
- 32 Ë7 67 Ï1 17 5 5 6 26
Related searches
- luis maldonado train
- ken roberts commodity trading courses
- luis maldonado guitarist
- what happened to ken roberts
- luis maldonado facebook
- ken burns ww2 documentary
- ken burns the war episodes
- ken burns the war pbs
- the war ken burns dvd
- ken burns the war netflix
- ken burns the war online free
- best ken burns documentaries