Dynamic Analysis of Malicious Code

By Ulrich Bayer, Andreas Moser, Christopher Krügel, Engin Kirda. Journal in Computer Virology, 2006

349 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Software, Signal Processing

View Paper: https://www.semanticscholar.org/paper/0e4a3b6e4235152593113f976f1311392dd3e84c

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Software

In Signal Processing

Citations in the corpus

A Survey on Malware Detection Using Data Mining Techniques (2017, methodology): “— Emulator: TTAnalyze [Bayer et al. 2006a] is a QEMU-based dynamic malware analysis framework that monitors Windows API calls and Windows native system calls, as well as function call parameters.”
All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (but Might Have Been Afraid to Ask) (2010, methodology): “Taint analysis and forward symbolic execution are used to analyze how information flows through a malware binary [5, 6, 64], explore trigger-based behavior [11, 44], and detect emulators [57].”
Measurements and Mitigation of Peer-to-Peer-based Botnets: A Case Study on Storm Worm (2008, methodology): “Furthermore, we present two different ways to disrupt the communication channel between controller and compromised machines in order to mitigate the botnet and evaluate the effectiveness of these mechanisms.”
Automatic analysis of malware behavior using machine learning (2011, neutral): “For monitoring the behavior of executable binaries, multiple different methods exist from which the majority is based on the interception of system calls (e.g., [6,7, 14,69]).”
Malware Analysis and Classification: A Survey (2014, background): “Software that “deliberately fulfills the harmful intent of an attacker” is referred to as malicious software or malware [1].”
Learning and Classification of Malware Behavior (2008, background): “Dynamic malware analysis techniques have previously focused on obtaining reliable and accurate information on execution of malicious programs [5] [6] [11] [24] [39] [40].”
Dynamic Malware Analysis in the Modern Era—A State of the Art Survey (2019, methodology): “TTAnalyze [56] is an analysis tool extending the QEMU emulator with an in-guest component referred to as Inside the Matrix ( InsideTM ), which translates virtual addresses to physical ones.”
A Malware Instruction Set for Behavior-Based Analysis (2010, background): “But there are also comprehensive analysis suites, which perform an overall monitoring of all of the malware's operations [2] [12] [14].”