DETECTION OF GLOBAL METAMORPHIC MALWARE VARIANTS USING CONTROL AND DATA FLOW ANALYSIS
    2.
    发明公开
    DETECTION OF GLOBAL METAMORPHIC MALWARE VARIANTS USING CONTROL AND DATA FLOW ANALYSIS 审中-公开
    控制与数据流分析检测GLOBAL变质恶意软件类型

    公开(公告)号:EP2553581A1

    公开(公告)日:2013-02-06

    申请号:EP11760299.5

    申请日:2011-03-25

    发明人: AGRAWAL, Hira

    IPC分类号: G06F11/30

    摘要: Malware feature extraction derives semantic summaries of executable malware using global, inter-procedural program analysis techniques. A combination of global, inter-procedural program analysis techniques constructs semantic summaries of malware which automatically detect and discard any noise introduced by transformations and capture the essence of the underlying computations in a succinct form. This is achieved in two ways. First, global control flow analysis techniques are used to derive a high level representation of malware code that, for instance, removes the effects of subroutine calls. Second, global data flow analysis techniques are employed to detect and remove all spurious elements of malware that do not contribute towards its underlying computation, thereby preventing the resulting summaries from being "corrupted" with unnecessary, extraneous elements.