Automatic Dynamic Analyzer for Malware by System Call Tracing using Virtualization Technology

如今，我们的社会深深地依赖于计算机和网络。要完全保证它们的安全是非常困难的。一个重要的原因是每天都有新的恶意软件出现。为了确保他们的安全，我们需要快速了解恶意软件造成的威胁。那我们就得提出对付他们的对策。本课题的研究目标是利用虚拟化技术，建立一种快速分析恶意软件的方法。因此，我们开发了系统调用跟踪器Alkanet。它可以比其他方法更快地完成。它还具有抵抗恶意软件的反调试功能。此外，我们还为Alkanet开发了各种分析工具，可以轻松了解恶意软件的原因。

Nowadays our society depends on computers and networks deeply. It is very difficult to keep them safe completely. Its one big reason is that new kinds of malware appear everyday. To achieve their safety, we need to quickly know what threat malwares cause. Then we need to propose a countermeasure against them. In this research subject, the goal is to establish a method to quick analysis of malwares, using virtualization technology. As the result, we have developed system call tracer named Alkanet. It can do it more quickly than other methods. It also has a resistance facility against anti-debug function of malwares. Furthermore we developed various analyzing tools for Alkanet, which enable to know easily what the malwares cause.