A static heuristic approach to detecting malware targets. Issue 17 (8th April 2015)

• Record Type: Journal Article
• Authors: Zakeri, Mohaddeseh; Faraji Daneshgar, Fatemeh; Abbaspour, Maghsoud
• Is Part Of: Security and communication networks. Volume 8:Issue 17(2015)
• Page Start: 3015
• Page End: 3027
• Publication Date: 2015-04-08
• Subjects: Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1002/sec.1228
• Languages: English
• ISSNs: 1939-0114

Abstract

<abstract abstract-type="main"> <title>Abstract</title> <p>Nowadays malware writers usually employ several obfuscation techniques to evade detection. The number of variants detected each day has been increasing significantly. Unfortunately traditional detection approaches such as signature scanning are becoming inefficient to detect such malwares. Researches show that these obfuscations make some anomalies in Portable Executable files. In this paper, by focusing on important static heuristic features and fuzzy classification algorithms, we tried to detect malwares and packed files. In addition, we used preprocessing to evade anomaly exceptions in benign files that improved our detection results. The experimental results, using over 63 000 file samples, indicate that the proposed detector achieves high detection results with low false positive and false negative rates. Furthermore, our experimental results on new malware samples that had been undetectable for many years by antivirus products and new custom packers, show that our system works well with new and unknown samples too. Copyright © 2015 John Wiley &amp; Sons, Ltd.</p> </abstract>