恶意软件领域中系统范围传播的特征
A characterisation of system-wide propagation in the malware landscape
摘要:
在恶意软件中经常观察到系统范围的传播,并且有几个资源,如博客文章等,详细介绍了所使用的一些技术。然而,目前还没有关于这个问题的全面研究,系统范围内恶意软件传播的全部程度仍然未知。在本文中,我们对许多真实世界的样本进行了系统的研究,以全面地分析恶意软件环境中的系统范围内的传播,目标是使用详细而精确的分析来获得高级视图。我们通过收集各种恶意软件样本,在我们的Minerva恶意软件分析框架中进行分析,然后提取大量关于结果的统计数据来实现这一目标。我们使用这些结果提供了一个深入的讨论集中在四个主要的研究问题。
英文摘要:
System-wide propagation is frequently observed in malware, and there are several resources, like blog posts and similar, that detail some of the techniques used. However, there is currently no thorough study on the subject at large, and the full extent of system-wide malware propagation remains unknown. In this paper, we perform a systematic study on many real-world samples to comprehensively characterise system-wide propagation within the malware landscape and the goal is to use detailed and precise analyses to derive high-level views. We achieve this by collecting a diverse set of malware samples, analyse them in our Minerva malware analysis framework and then extract vast amounts of statistics about the results. We use these results to provide an in-depth discussion centred on four main research questions.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。