Automatic Dynamic Analyzer for Malware by System Call Tracing using Virtualization Technology

点击翻译按钮获取中文摘要

Nowadays our society depends on computers and networks deeply. It is very difficult to keep them safe completely. Its one big reason is that new kinds of malware appear everyday. To achieve their safety, we need to quickly know what threat malwares cause. Then we need to propose a countermeasure against them. In this research subject, the goal is to establish a method to quick analysis of malwares, using virtualization technology. As the result, we have developed system call tracer named Alkanet. It can do it more quickly than other methods. It also has a resistance facility against anti-debug function of malwares. Furthermore we developed various analyzing tools for Alkanet, which enable to know easily what the malwares cause.