Framework for understanding intention-unbreakable malware

查看全文 作　　者：Tiantian [1]JI;Binxing [1]FANG;Xiang [2]CUI;Zhongru [3]WANG;Peng [1]LIAO;Shouyou [1,4]SONG

机构地区：[1]Key Laboratory of Trustworthy Distributed Computing and Service(BUPT),Ministry of Education,Beijing University of Posts and Telecommunications,Beijing 100876,China;[2]Cyberspace Institute of Advanced Technology,Guangzhou University,Guangzhou 510006,China;[3]Chinese Academy of Cyberspace Studies,Beijing 100010,China;[4]Beijing DigApis Technology Co.,Ltd.,Beijing 100081,China

出　　处：《Science China(Information Sciences)》索引2023年第66卷第4期,共19页

基　　金：supported by Key-Area Research and Development Program of Guangdong Province(Grant Nos.2019B010136003,2019B010137004);National Key Research and Development Plan of China(Grant No.2019YFA0706404)。 摘　　要：The anti-analysis technology of malware has always been the focus in the cyberspace security field.As malware analysis techniques evolve,malware writers continually employ sophisticated anti-reverse engineering techniques to defeat and evade state-of-the-art analyzers.Therefore,to prepare for unknown attacks,studying malware analysis techniques is insufficient.More importantly,we should study new antianalysis techniques for malware.This paper expands the concept of anti-analysis malware and defines a type of intention-unbreakable malware(IUM).To help defenders fully understand and establish a defense system against the new security threats,this paper systematically discusses IUM from the perspectives of threat discovery,threat modeling,attribute analysis,and threat assessment;in addition,this study also provides the Po C implementations of IUM and demonstrates how attackers can use this type of malware to evade advanced security analysis,that is,accurate identification of target(class)victims and intention concealment in reaching non-target(class)victims.Finally,this paper provides several mitigation directions for combating IUM. 关键词：MALWARE unbreakable property modeling mechanism accurate identification intention concealment

相关文献

参考文献（47）
引证文献（2）
耦合文献（0）

参考文献(47)

引证文献(2)

互联网出版许可证新出网证(渝)字10号全国400电话 - 免长途话费

Framework for understanding intention-unbreakable malware

参考文献(47)

引证文献(2)

用户提示