Art

J-GLOBAL ID：201302210663245430   Reference number：13A0529643

Catching the Behavioral Differences between Multiple Executions for Malware Detection

不正ソフトウェア検出のための複数実行間の挙動相違捕捉

Author (5)： KASAMA Takahiro (National Inst. of Information and Communications Technol.) ,  KASAMA Takahiro (Yokohama National Univ.) ,  YOSHIOKA Katsunari (Yokohama National Univ.) ,  INOUE Daisuke (National Inst. of Information and Communications Technol.) ,  MATSUMOTO Tsutomu (Yokohama National Univ.)
Material： IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences (Institute of Electronics, Information and Communication Engineers)  (IEICE Trans Fundam Electron Commun Comput Sci (Inst Electron Inf Commun Eng))
Volume： E96-A  Issue： 1  Page： 225-232 (J-STAGE)  Publication year： 2013 
JST Material Number： F0699C  ISSN： 0916-8508  Document type： Article
Article type： 原著論文  Country of issue： Japan (JPN)  Language： ENGLISH (EN)

Thesaurus term： *software ,  *detection ,  instruction control ,  *behavior ,  signal constellation ,  computer program ,  detection efficiency ,  error rate ,  antivirus software ,  instruction execution
Semi thesaurus term： false positive rate ,  signal constellation ,  *malware ,  *fraud detection

JST classification (2)： Data protection  (JD01020V) ,  Computer system development  (JD02010R)

Reference (19)：

• [1] D. Balzarotti, M. Cova, C. Karlberger, C. Kruegel, E. Kirda, and G. Vigna, “Efficient detection of split personalities in malware,” Proc. 17th Annual Network and Distributed System Security Symposium (NDSS 2010), 2010.
• [2] U. Bayer, C. Kruegel, and E. Kirda, “TTAnalyze: A tool for analyzing malware,” Proc. 15th Annual Conference of the European Institute for Computer Antivirus Research (EICAR), 2006.
• [3] D. Inoue, K. Yoshioka, M. Eto, Y. Hoshizawa, and K. Nakao, “Automated malware analysis system and its sandbox for revealing malware's internal and external activities,” IEICE Trans. Inf. & Syst., vol.E92-D, no.5, pp.945-954, May 2009.
• [4] T. Kasama, K. Yoshioka, D. Inoue, M. Eto, K. Nakao, and T. Matsumoto, “Consideration on malware execution time for malware sandbox analysis,” 2009 Symposium on Cryptography and Information Security (SCIS2009), 2009.
• [5] N. Kawaguchi, T. Yoda, T. Kawaguchi, M. Terada, T. Kasagi, Y. Hoshizawa, M. Eto, D. Inoue, and K. Nakao, “Analyzing CCC DATASet 2010 using user support system against malware,” IPSJ anti Malware engineering WorkShop 2010 (MWS2010), Session 2A1-2, 2010.

Terms in the title (4)： 不正ソフトウェア ,  挙動 ,  相違 ,  捕捉