A Development of Malware Detection Tool based on Signature Patterns

Woo Chong Woo; 하경휘

Journal of The Korea Society of Computer and Information

Abbr : JKSCI
2005, 10(6), pp.127-136
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science

Woo Chong Woo ¹, 하경휘 ²

¹국민대학교
²국민대학교

ABSTRACT

Recently, the damages occurring from the malware are increasing rapidly, regardless of continuous development of commercial vaccines. Generally, the vaccine detects well-known malware effectively, but it becomes helpless without any information against the unknown ones. Also, the malware generates its variations fast enough, so that the vaccine always gets behind in its updates. In this paper, we are describing a design and development of malware detection tool, which can detect such malware effectively. We first analyze the general functionality of the malware, and then extracts specific signatures. Such that, we can actively cope with a malware, which may come in previous type, a new type, and any of its mutations also.
KEYWORDS

Malware, Malware, Detection Tool, Signature Patterns
REFERENCES (14)

[journal] / 2003 / “침입기법을 응용한 침입자 역추적 시스템 설계에 관한 연구” 한국 컴퓨터정보학회 논문지 제8권제3호 8(3)

[journal] / 2003 / “이동에이전트를 이용한 침입탐지 모델의 제안” 한국 컴퓨터정보학회 논문지 제9권제1호 9(1)

[journal] / 2003 / Available at http//b2b

[journal] / 1996 / Available at http

[journal] / 1997 / ” Proceedings of the 7th international Virus Bulletin Conference

[journal] / 2000 / Script-Based Mobile Threats

[journal] / 1995 / “Dynamic detection and classification of computer viruses using general behavior patterns” / 5th International Virus Bulletin Conference

[journal] / 2001 / Heuristic Engines / 11th Internation Virus Bulletin Conference

[journal] / 2003 / “A Taxonomy of Computer Worms” ACM CCS Workshop on Rapid Malcode

[journal] / 1988 / The Internet Worm Program: An Analysis

[journal] / 2004 / “Advanced communication techniques of remote access Trojan horses on windows operation systems” Available at http

[journal] / 2003 / Malware: Fighting Malicious Cod / Prentice Hall PTR

[journal] / 2001 / Virus Protection for Windows”

[journal] / 1999 / Available at http
KCI Citation (4)

KJC Korea
Journal Central

Statistics

Tools