GET THE APP

..

Journal of Forensic Research

ISSN: 2157-7145

Open Access

Ehud Gudes


Israel

Publications
  • Research Article
    NewApproach for Detecting Unknown Malicious Executables
    Author(s): Boris Rozenberg, Ehud Gudes, Yuval Elovici and Yuval FledelBoris Rozenberg, Ehud Gudes, Yuval Elovici and Yuval Fledel

    We present a method for detecting new malicious executables, which comprise the following steps: (a) in an offline training phase, finding a set of system call sequences that are characteristic only to malicious files, when such malicious files are executed, and storing said sequences in a database; (b) in a real time detection phase, for each running executable, continuously monitoring its issued system calls and comparing with the stored sequences of system calls within the database to determine whether there exists a match between a portion of the sequence of the run-time system calls and one or more of the database sequences, and when such a match is found, declaring said executable as malicious. We have evaluated our method and the preliminary results are promising and justify the use of system calls sequences for the purpose of detection of new malicious executables.. Read More»
    DOI: 10.4172/2157-7145.1000112

    Abstract PDF

Relevant Topics

Google Scholar citation report
Citations: 1817

Journal of Forensic Research received 1817 citations as per Google Scholar report

Journal of Forensic Research peer review process verified at publons

Indexed In

 
arrow_upward arrow_upward