Developing malware evaluation infrastructure
Developing malware evaluation infrastructure
复制标题
开发恶意软件评估基础设施
DOI：
--
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
Amadeusz Kosik
中科院分区：
文献类型：
--
作者：
Krzysztof Cabaj;P. Gawkowski;Konrad Grochowski;Amadeusz Kosik
恶意软件评估是安全的关键因素。它应该是安全和准确的。当代的恶意软件是非常复杂的。通常，它使用复杂的分布式基础设施，对其进行调查是一项非常具有挑战性的任务。本文介绍了恶意软件测试平台的开发及其基础设施评估。基于对后续CryptoWall代分析的实际经验，介绍了MESS评估系统。讨论了一组丰富的分析结果。提出了一种新的恶意软件伪迹分析的可视化方法。
Malware evaluation is a key factor in security. It supposed to be safe and accurate. The contemporary malware is very sophisticated. Usually it uses complex distributed infrastructure an investigation of which is a very challenging task. In the paper, the development of the testbeds toward malware and its infrastructure evaluation is presented. Based on the real-life experience with the subsequent CryptoWall generations analysis, the MESS evaluation system is introduced. A rich set of analytical results is discussed. A new methods of visualization for malware artefacts analysis are given.