In this article a new technique is proposed for detection of polymorphic malware based on image processing. With the proliferation of polymorphic malware, the efficacy of signature-based static analysis systems is greatly reduced. This survey is based on the comparison of the images developed from malware samples binary code. With the advent of image processing applications for binary code analysis, numerous features could be extracted for comparing malware isomorphs. Based on these features, we have been capable of detecting malware isomporphs with an unprecedented accuracy. Most often, malware samples binaries are packed. Using our proposed method, we have been capable of detecting the unique similarity between executables packed with a same packer.
- John Aycock, “Computer Viruses and Malware”, US, Springer, 2007.##
- Mojtaba Eskandari, Sattar Hashemi, “Metamorphic Malware Detection using Control Flow Graph Mining”, IJCSNS International Journal of Computer Science and Network Security, VOL.11 No.12, December 2011.##
- Kent Griffin, Scott Schneider, Xin Hu, Tzi-cker Chiueh, “Automatic Generation of String Signatures for Malware Detection”, Symantec Research Laboratories, Springer, pp. 101-120, Berlin, 2009.##
- Mamoun Alazab, Robert Layton, Sitalakshmi Venkataraman, Paul Watters, “Malware Detection Based on Structural and Behavioural Features of API Calls”, 1st International Cyber Resilience Conference, pp. 68-73, Perth Western Australia, August 2010.##
- Babak Bashari Rad, Maslin Masrom, “Metamorphic Virus Detection in Portable Executables Using Opcodes Statistical Feature”, Proceeding of the International Conference on Advance Science, Engineering and Information Technology Malaysia, January 2011.##
- Liu Wu ; Network Res. Center, Tsinghua Univ., Beijing, China ; Ren Ping ; Liu Ke ; Duan Hai-xin, “Behavior-Based Malware Analysis and Detection”, Complexity and Data Mining (IWCDM), pp. 39-42, Nanjing, September 2011.##
- Aude Oliva, Antonio Torralba, "Modeling the Shape of the Scene: A Holistic Representatio of the Spatial Envelope", International Journal of Computer Vision 42(3), pp. 145–175, 2001.##
- Gregory Conti, Erik Dean, Matthew Sinda, and Benjamin Sangster, "Visual Reverse Engineering of Binary and Data Files", Springer, pp. 1–17, 2008.##
- Kyoung Soo Han, Jae Hyun Lim, Boojoong Kang, Eul Gyu Im, "Malware analysis using visualized images and entropy graphs", Springer, Int. J. Inf. Secur, 2014.##
- KyoungSoo Han, BooJoong Kang, and Eul Gyu Im, "Malware Analysis Using Visualized Image Matrices", Hindawi, the Scientific World Journal, Volume 2014, Article ID 132713, pp. 15.##
)
