Skip to Main content Skip to Navigation
New interface
Theses

Unveiling and mitigating common pitfalls in malware analysis

Abstract : As the importance of computer systems in modern-day societies grows, so does the damage that malicious software causes. The security industry and malware authors engaged in an arms race, in which the first creates better detection systems while the second try to evade them. In fact, any wrong assumption (no matter how subtle) in the design of an anti-malware tool may create new avenues for evading detection. This thesis focuses on two often overlooked aspects of modern malware analysis techniques: the use of API-level information to encode malicious behavior and the reimplementation of parsing routines for executable file formats in security-oriented tools. We show that taking advantage of these practices is possible on a large and automated scale. Moreover, we study the feasibility of fixing these problems at their roots, measuring the difficulties that anti-malware architects may encounter and providing strategies to solve them.
Document type :
Theses
Complete list of metadata

https://theses.hal.science/tel-03783495
Contributor : ABES STAR :  Contact
Submitted on : Thursday, September 22, 2022 - 11:19:41 AM
Last modification on : Monday, September 26, 2022 - 4:26:56 PM

File

NISI_Dario_these_2021.pdf
Version validated by the jury (STAR)

Identifiers

  • HAL Id : tel-03783495, version 1

Citation

Dario Nisi. Unveiling and mitigating common pitfalls in malware analysis. Cryptography and Security [cs.CR]. Sorbonne Université, 2021. English. ⟨NNT : 2021SORUS528⟩. ⟨tel-03783495⟩

Share

Metrics

Record views

16

Files downloads

13