Malware analysis method using visualization of binary files

Authors:
KyoungSoo Han;Jae Hyun Lim;Eul Gyu Im
Affiliations:
Hanyang University, Seoul, Korea;Hanyang University, Seoul, Korea;Hanyang University, Seoul, Korea
Venue:
Proceedings of the 2013 Research in Adaptive and Convergent Systems
Year:
2013

Citing 18
Cited 0

A novel vector-based approach to color image retrieval using a vector angular-based distance measure

Computer Vision and Image Understanding - Special issue on content-based access for image and video libraries
Similarity estimation techniques from rounding algorithms

STOC '02 Proceedings of the thiry-fourth annual ACM symposium on Theory of computing
Modeling the Shape of the Scene: A Holistic Representation of the Spatial Envelope

International Journal of Computer Vision
Context-based vision system for place and object recognition

ICCV '03 Proceedings of the Ninth IEEE International Conference on Computer Vision - Volume 2
Testing malware detectors

ISSTA '04 Proceedings of the 2004 ACM SIGSOFT international symposium on Software testing and analysis
Static Analyzer of Vicious Executables (SAVE)

ACSAC '04 Proceedings of the 20th Annual Computer Security Applications Conference
Opcodes as predictor for malware

International Journal of Electronic Security and Digital Forensics
Visual Reverse Engineering of Binary and Data Files

VizSec '08 Proceedings of the 5th international workshop on Visualization for Computer Security
The IDA Pro Book: The Unofficial Guide to the World's Most Popular Disassembler

The IDA Pro Book: The Unofficial Guide to the World's Most Popular Disassembler
Malware detection using statistical analysis of byte-level file content

Proceedings of the ACM SIGKDD Workshop on CyberSecurity and Intelligence Informatics
A Fast Flowgraph Based Classification System for Packed and Polymorphic Malware on the Endhost

AINA '10 Proceedings of the 2010 24th IEEE International Conference on Advanced Information Networking and Applications
Malware images: visualization and automatic classification

Proceedings of the 8th International Symposium on Visualization for Cyber Security
A comparative assessment of malware classification using binary texture analysis and dynamic analysis

Proceedings of the 4th ACM workshop on Security and artificial intelligence
Malware classification based on call graph clustering

Journal in Computer Virology
Idea: opcode-sequence-based malware detection

ESSoS'10 Proceedings of the Second international conference on Engineering Secure Software and Systems
Visualization of shared system call sequence relationships in large malware corpora

Proceedings of the Ninth International Symposium on Visualization for Cyber Security
Improving malware classification: bridging the static/dynamic gap

Proceedings of the 5th ACM workshop on Security and artificial intelligence
Malware classification method via binary content comparison

Proceedings of the 2012 ACM Research in Applied Computation Symposium

Quantified Score

Hi-index	0.00

Visualization

Abstract

Malware authors have been generating and disseminating malware variants through various ways, such as reusing modules or using automated malware generation tools. With the help of the malware generation techniques, the number of malware keeps increasing every year. Therefore, new malware analysis techniques are needed to reduce malware analysis overheads. Recently several malware visualization methods were proposed to help malware analysts. In this paper, we proposed a novel method to visually analyze malware by transforming malware binary information into image matrices. Our experimental results show that the image matrices of malware can effectively classify malware families.