Matches in SemOpenAlex for { <https://semopenalex.org/work/W2950996872> ?p ?o ?g. }
Showing items 1 to 74 of
74
with 100 items per page.
- W2950996872 endingPage "257" @default.
- W2950996872 startingPage "249" @default.
- W2950996872 abstract "With macOS increasing popularity, the number, and variety of macOS malware are rising as well. Yet, very few tools exist for dynamic analysis of macOS malware. In this paper, we propose a macOS malware analysis framework called Mac-A-Mal. We develop a kernel extension to monitor malware behavior and mitigate several anti-evasion techniques used in the wild. Our framework exploits the macOS features of XPC service invocation that typically escape traditional mechanisms for detection of children processes. Performance benchmarks show that our system is comparable with professional tools and able to withstand VM detection. By using Mac-A-Mal, we discovered 71 unknown adware samples (8 of them using valid distribution certificates), 2 keyloggers, and 1 previously unseen trojan involved in the APT32 OceanLotus." @default.
- W2950996872 created "2019-06-27" @default.
- W2950996872 creator A5048571806 @default.
- W2950996872 creator A5080304452 @default.
- W2950996872 creator A5085639552 @default.
- W2950996872 date "2019-06-20" @default.
- W2950996872 modified "2023-09-26" @default.
- W2950996872 title "Mac-A-Mal: macOS malware analysis framework resistant to anti evasion techniques" @default.
- W2950996872 cites W1422754336 @default.
- W2950996872 cites W1983133445 @default.
- W2950996872 cites W2077090601 @default.
- W2950996872 cites W2766123777 @default.
- W2950996872 doi "https://doi.org/10.1007/s11416-019-00335-w" @default.
- W2950996872 hasPublicationYear "2019" @default.
- W2950996872 type Work @default.
- W2950996872 sameAs 2950996872 @default.
- W2950996872 citedByCount "3" @default.
- W2950996872 countsByYear W29509968722022 @default.
- W2950996872 crossrefType "journal-article" @default.
- W2950996872 hasAuthorship W2950996872A5048571806 @default.
- W2950996872 hasAuthorship W2950996872A5080304452 @default.
- W2950996872 hasAuthorship W2950996872A5085639552 @default.
- W2950996872 hasBestOaLocation W29509968721 @default.
- W2950996872 hasConcept C111919701 @default.
- W2950996872 hasConcept C136197465 @default.
- W2950996872 hasConcept C154945302 @default.
- W2950996872 hasConcept C174333608 @default.
- W2950996872 hasConcept C203014093 @default.
- W2950996872 hasConcept C2777904410 @default.
- W2950996872 hasConcept C2779395397 @default.
- W2950996872 hasConcept C2781251061 @default.
- W2950996872 hasConcept C38652104 @default.
- W2950996872 hasConcept C41008148 @default.
- W2950996872 hasConcept C515153823 @default.
- W2950996872 hasConcept C541664917 @default.
- W2950996872 hasConcept C86803240 @default.
- W2950996872 hasConcept C8891405 @default.
- W2950996872 hasConceptScore W2950996872C111919701 @default.
- W2950996872 hasConceptScore W2950996872C136197465 @default.
- W2950996872 hasConceptScore W2950996872C154945302 @default.
- W2950996872 hasConceptScore W2950996872C174333608 @default.
- W2950996872 hasConceptScore W2950996872C203014093 @default.
- W2950996872 hasConceptScore W2950996872C2777904410 @default.
- W2950996872 hasConceptScore W2950996872C2779395397 @default.
- W2950996872 hasConceptScore W2950996872C2781251061 @default.
- W2950996872 hasConceptScore W2950996872C38652104 @default.
- W2950996872 hasConceptScore W2950996872C41008148 @default.
- W2950996872 hasConceptScore W2950996872C515153823 @default.
- W2950996872 hasConceptScore W2950996872C541664917 @default.
- W2950996872 hasConceptScore W2950996872C86803240 @default.
- W2950996872 hasConceptScore W2950996872C8891405 @default.
- W2950996872 hasFunder F4320338337 @default.
- W2950996872 hasIssue "4" @default.
- W2950996872 hasLocation W29509968721 @default.
- W2950996872 hasLocation W29509968722 @default.
- W2950996872 hasOpenAccess W2950996872 @default.
- W2950996872 hasPrimaryLocation W29509968721 @default.
- W2950996872 hasRelatedWork W108952153 @default.
- W2950996872 hasRelatedWork W2470029541 @default.
- W2950996872 hasRelatedWork W2547946241 @default.
- W2950996872 hasRelatedWork W2883902095 @default.
- W2950996872 hasRelatedWork W2899560833 @default.
- W2950996872 hasRelatedWork W2903774454 @default.
- W2950996872 hasRelatedWork W2919574310 @default.
- W2950996872 hasRelatedWork W3014124958 @default.
- W2950996872 hasRelatedWork W4297965683 @default.
- W2950996872 hasRelatedWork W4310805820 @default.
- W2950996872 hasVolume "15" @default.
- W2950996872 isParatext "false" @default.
- W2950996872 isRetracted "false" @default.
- W2950996872 magId "2950996872" @default.
- W2950996872 workType "article" @default.