Matches in SemOpenAlex for { <https://semopenalex.org/work/W2298300311> ?p ?o ?g. }
Showing items 1 to 82 of
82
with 100 items per page.
- W2298300311 abstract "A morphing malware is malicious software that uses a code morphing program, or morphing engine, to transform its own code into a morphed variant. The goal of this transformation is to evade recognition by malware detectors. This dissertation proposes and evaluates a new method for detecting morphed malware variants. The method uses information about the morphing engine to recognize variants created by that engine. In particular, it is shown that implementation of the requirements of good design practices of morphing malware can be capitalized upon to efficiently discriminate programs generated by a morphing engine implementing these requirements from programs that have not been generated by the engine. Exact recognition techniques implementing this method are proposed and shown to be computationally costly. Approximate efficient variations on these techniques are then proposed and successfully evaluated to recognize programs generated by a real world morphing engine, W32. Evo1. Finally, the variation of a malware's instruction distribution underlying a probabilistic morphing engine is modeled as a Markov chain. Techniques from Markov chain theory are suggested to enable the use, for detection purposes, of the distribution of the instruction-frequency vectors of the various generations of variants of morphed malware generated by a probabilistic morphing engine." @default.
- W2298300311 created "2016-06-24" @default.
- W2298300311 creator A5005097571 @default.
- W2298300311 creator A5082761515 @default.
- W2298300311 date "2008-01-01" @default.
- W2298300311 modified "2023-09-23" @default.
- W2298300311 title "Approximate detection of machine-morphed variants of malicious programs" @default.
- W2298300311 cites W1517901482 @default.
- W2298300311 cites W1595564425 @default.
- W2298300311 cites W162399341 @default.
- W2298300311 cites W1992572515 @default.
- W2298300311 cites W2011039300 @default.
- W2298300311 cites W2026576099 @default.
- W2298300311 cites W2062616915 @default.
- W2298300311 cites W2122471594 @default.
- W2298300311 cites W2122686415 @default.
- W2298300311 cites W2145056020 @default.
- W2298300311 cites W2146567535 @default.
- W2298300311 cites W2147116116 @default.
- W2298300311 cites W2182951193 @default.
- W2298300311 hasPublicationYear "2008" @default.
- W2298300311 type Work @default.
- W2298300311 sameAs 2298300311 @default.
- W2298300311 citedByCount "1" @default.
- W2298300311 crossrefType "journal-article" @default.
- W2298300311 hasAuthorship W2298300311A5005097571 @default.
- W2298300311 hasAuthorship W2298300311A5082761515 @default.
- W2298300311 hasConcept C119857082 @default.
- W2298300311 hasConcept C124101348 @default.
- W2298300311 hasConcept C154945302 @default.
- W2298300311 hasConcept C177264268 @default.
- W2298300311 hasConcept C199360897 @default.
- W2298300311 hasConcept C23224414 @default.
- W2298300311 hasConcept C2776760102 @default.
- W2298300311 hasConcept C2779395397 @default.
- W2298300311 hasConcept C38652104 @default.
- W2298300311 hasConcept C41008148 @default.
- W2298300311 hasConcept C49937458 @default.
- W2298300311 hasConcept C50637493 @default.
- W2298300311 hasConcept C541664917 @default.
- W2298300311 hasConcept C98763669 @default.
- W2298300311 hasConceptScore W2298300311C119857082 @default.
- W2298300311 hasConceptScore W2298300311C124101348 @default.
- W2298300311 hasConceptScore W2298300311C154945302 @default.
- W2298300311 hasConceptScore W2298300311C177264268 @default.
- W2298300311 hasConceptScore W2298300311C199360897 @default.
- W2298300311 hasConceptScore W2298300311C23224414 @default.
- W2298300311 hasConceptScore W2298300311C2776760102 @default.
- W2298300311 hasConceptScore W2298300311C2779395397 @default.
- W2298300311 hasConceptScore W2298300311C38652104 @default.
- W2298300311 hasConceptScore W2298300311C41008148 @default.
- W2298300311 hasConceptScore W2298300311C49937458 @default.
- W2298300311 hasConceptScore W2298300311C50637493 @default.
- W2298300311 hasConceptScore W2298300311C541664917 @default.
- W2298300311 hasConceptScore W2298300311C98763669 @default.
- W2298300311 hasLocation W22983003111 @default.
- W2298300311 hasOpenAccess W2298300311 @default.
- W2298300311 hasPrimaryLocation W22983003111 @default.
- W2298300311 hasRelatedWork W169303955 @default.
- W2298300311 hasRelatedWork W1855034413 @default.
- W2298300311 hasRelatedWork W2021436318 @default.
- W2298300311 hasRelatedWork W2030806251 @default.
- W2298300311 hasRelatedWork W2031484555 @default.
- W2298300311 hasRelatedWork W2048849611 @default.
- W2298300311 hasRelatedWork W2056127986 @default.
- W2298300311 hasRelatedWork W2091088253 @default.
- W2298300311 hasRelatedWork W2102249298 @default.
- W2298300311 hasRelatedWork W2142515469 @default.
- W2298300311 hasRelatedWork W2354069150 @default.
- W2298300311 hasRelatedWork W2547841473 @default.
- W2298300311 hasRelatedWork W2600031682 @default.
- W2298300311 hasRelatedWork W2679944888 @default.
- W2298300311 hasRelatedWork W2738506631 @default.
- W2298300311 hasRelatedWork W280584339 @default.
- W2298300311 hasRelatedWork W2887787078 @default.
- W2298300311 hasRelatedWork W3003663951 @default.
- W2298300311 hasRelatedWork W3135732819 @default.
- W2298300311 hasRelatedWork W1994747466 @default.
- W2298300311 isParatext "false" @default.
- W2298300311 isRetracted "false" @default.
- W2298300311 magId "2298300311" @default.
- W2298300311 workType "article" @default.