Investigation of bypassing malware defences and malware detections

Citation

Daryabar, Farid and Dehghantanha, Ali and Udzir, Nur Izura (2011) Investigation of bypassing malware defences and malware detections. In: 7th International Conference on Information Assurance and Security (IAS 2011), 5-8 Dec. 2011, Melaka, Malaysia. (pp. 173-178).

Abstract

Nowadays, malware incident is one of the most expensive damages caused by attackers. Malwares are caused different attacks, so considerations and implementations of malware defences for internal networks are important. In this papers, different techniques such as repacking, reverse engineering and hex editing for bypassing host-based Anti Virus (AV) signatures are illustrated, and the description and comparison of different channels and methods when malware might reach the host from outside the networks are demonstrated. After that, bypassing HTTP/SSL and SMTP malware defences as channels are discussed. Finally, as it is important to find and detect new and unknown malware before the malware gets in to the victims, a new malware detection technique base on honeynet systems is surveyed.

Download File

Text (Abstract)
Investigation of bypassing malware defences and malware detections.pdf
Download (34kB)

Additional Metadata

Item Type:	Conference or Workshop Item (Paper)
Divisions:	Faculty of Computer Science and Information Technology
DOI Number:	https://doi.org/10.1109/ISIAS.2011.6122815
Publisher:	IEEE
Keywords:	Malware defences; Bypassing malware; Honeynet; Anti viruses; Penetration testing
Depositing User:	Nabilah Mustapa
Date Deposited:	05 Aug 2020 07:19
Last Modified:	05 Aug 2020 07:19
Altmetrics:	http://www.altmetric.com/details.php?domain=psasir.upm.edu.my&doi=10.1109/ISIAS.2011.6122815
URI:	http://psasir.upm.edu.my/id/eprint/45376
Statistic Details:	View Download Statistic

Actions (login required)

View Item