A stress testing web-based framework for automated malware analysis. Issue 6 (18th August 2017)

• Record Type: Journal Article
• Authors: Kaur, Gurdip; Dhir, Renu; Singh, Maninder
• Is Part Of: Journal of information & optimization sciences. Volume 38:Issue 6(2017)
• Page Start: 937
• Page End: 944
• Publication Date: 2017-08-18
• Subjects: Polymorphic malware -- stress testing -- static analysis -- dynamic analysis -- web-based framework -- sandbox environment; 68N99; Electronic data processing -- Periodicals; Information science -- Periodicals; Mathematical optimization -- Periodicals; 519.6
• DOI: 10.1080/02522667.2017.1372139
• Languages: English
• ISSNs: 0252-2667

Abstract

Abstract: Polymorphic malware pose a serious threat to cyber security especially if it is a zeroday. They are self-mutating and change their signatures at every run. Due to their dynamic behavior at execution time, antivirus solutions may not be able to detect them. Thus, it is utmost important to detect and analyze these malware samples. To address it, we created a polymorphic malware, analyzed it in a sandbox (a web-based framework to perform live code analysis in a controlled/isolated environment) and finally tested the framework. The framework analyzes files, registry keys, network traffic and behavior of PE (Portable Executable) file and helps to detect if it is packed or not. We used stress testing technique to test the framework for efficiency in successfully analyzing N malware samples in first attempt.