Characterizing kernel malware behavior with kernel data access patterns
Published in Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security • Mar 22, 2011
NobleIDNI4P74W19R78S86
Authors:,,
Junghwan Rhee
Zhiqiang Lin
Dongyan Xu
Abstract
Characterizing malware behavior using its control flow faces several challenges, such as obfuscations in static analysis and the behavior variations in dynamic analysis. This paper introduces a new approach to characterizing kernel malware's behavior by using kernel data access patterns unique to th...
Finding related papers...
Discussions
(0)No comments yet
Be the first to share your thoughts!