Large scale Malware analysis

Malware overview reports are valuable information to understand threats behavior and develop proper countermeasures. Currently, most of these studies are focused on either fine-grained, individual sample analysis or coarse-grained landscapes. On the one hand, only the first allows professionals to h...

Full description

Saved in:
Bibliographic Details
Main Authors: Bertão, Giovanni, Geus, Paulo Licio de
Format: Online
Language:English
Published: Universidade Estadual de Campinas 2019
Subjects:
Online Access:https://econtents.sbu.unicamp.br/eventos/index.php/pibic/article/view/543
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Malware overview reports are valuable information to understand threats behavior and develop proper countermeasures. Currently, most of these studies are focused on either fine-grained, individual sample analysis or coarse-grained landscapes. On the one hand, only the first allows professionals to handle specific security breaches. On the other hand, only the second allows understanding threat scenario as a whole. We claim that a complete security treatment is only possible when combining both approaches. Therefore, this work presents an analysis of a large malware dataset, showing the distinctions between coarse-grained and fine-grained analysis results. It presents both a general threat scenario based on coarse-grained results as well as it details fine-grained results to identify particular malicious constructions to anticipate incident response of future threats.
ISSN:2596-1969