Management of the Results of Automated Malware Analysis

摘要：

A variety of malware are created and distributed rapidly with technical development and popularization of the Internet. The automated malware analysis techniques are being actively studied to quickly cope with the rapidly increasing malware. The data gathered by automated malware analysis are used to classify and identify unknown malware in anti-virus companies and related organizations. To manage the results of automated malware analysis efficiently, a database design considering relationships between the behaviors and characteristics of malware is needed. In this paper, we propose a database design that can store the results of automated malware analysis based on PE (Portable Executable) files which are the most used in Windows OS.

关键词： matware mahvare management automated analysis

作者: Hong-Koo Kang Joo-Hyung Oh Chae-Tae Im Hyun-Cheol Jeong

作者单位: Convergence Security R&D Team Korea Internet & Security Agency, KISA Seoul, Korea

会议类型: 国际会议

会议名称: 2010 Third Pacific-Asia Conference on Web Mining and Web-based Application(2010年第三届web挖掘和基于web应用亚太会议 WMWA 2010)

会议地点: 桂林

会议语种:英文

页码: 273-276

在线出版日期: 2010-11-17（万方平台首次上网日期，不代表论文的发表时间）