Knowledge Network Node
Journal of Tsinghua University(Science and Technology). 2019, (01) Core

Malware visualization and automatic classification with enhanced information densityChinese Full TextEnglish Full Text (MT)

LIU Yashu;WANG Zhihai;HOU Yueran;YAN Hanbing;School of Computer and Information Technology,Beijing Jiaotong University;School of Electrical and Information Engineering,Beijing University of Civil Engineering and Architecture;Institute of Network Technology,Beijing University of Posts and Telecommunication;National Computer Network Emergency Response Technical Team/Coordination Center of China;

Abstract: The development of computers and networking has been accompanied by exponential increases in the amount of malware which greatly threaten cyber space applications. This study combines the reverse analysis of malicious codes with a visualization method in a method that visualizes operating code sequences extracted from the ".text"section of portable and excutable（PE）files.This method not only improves the efficiency of malware,but also solves the difficulty of simHash similarity measurements.Tests show that this method identifies more effective features with higher information densities.This method is more efficient and has better classification accuracy than traditional malware visualization methods.
Keywords：

malware visualization; simHash; image texture;

  • DOI：

    10.16511/j.cnki.qhdxxb.2018.22.054

  • Series：

  • Subject：

  • Classification Code：

    TP309

Download the mobile appuse the app to scan this coderead the article.

Tips: Please download CAJViewer to view CAJ format full text.

Download: 356 Page: 9-14 Pagecount: 6 Size: 823K

Related Literature
  • Similar Article
  • Reader Recommendation
  • Associated Author