Skip to Main content Skip to Navigation
New interface

Unveiling and mitigating common pitfalls in malware analysis

Abstract : As the importance of computer systems in modern-day societies grows, so does the damage that malicious software causes. The security industry and malware authors engaged in an arms race, in which the first creates better detection systems while the second try to evade them. In fact, any wrong assumption (no matter how subtle) in the design of an anti-malware tool may create new avenues for evading detection. This thesis focuses on two often overlooked aspects of modern malware analysis techniques: the use of API-level information to encode malicious behavior and the reimplementation of parsing routines for executable file formats in security-oriented tools. We show that taking advantage of these practices is possible on a large and automated scale. Moreover, we study the feasibility of fixing these problems at their roots, measuring the difficulties that anti-malware architects may encounter and providing strategies to solve them.
Document type :
Complete list of metadata
Contributor : ABES STAR :  Contact
Submitted on : Thursday, September 22, 2022 - 11:19:41 AM
Last modification on : Monday, September 26, 2022 - 4:26:56 PM


Version validated by the jury (STAR)


  • HAL Id : tel-03783495, version 1


Dario Nisi. Unveiling and mitigating common pitfalls in malware analysis. Cryptography and Security [cs.CR]. Sorbonne Université, 2021. English. ⟨NNT : 2021SORUS528⟩. ⟨tel-03783495⟩



Record views


Files downloads