Toward Automatic Discovery of Malware Signature for Anti-Virus Cloud Computing

Wei Yan; Erik Wu

Complex Sciences. First International Conference, Complex 2009, Shanghai, China, February 23-25, 2009. Revised Papers, Part 1

Research Article

Toward Automatic Discovery of Malware Signature for Anti-Virus Cloud Computing

Download

497 downloads

Cite: BibTeX Plain Text

@INPROCEEDINGS{10.1007/978-3-642-02466-5_70,
    author={Wei Yan and Erik Wu},
    title={Toward Automatic Discovery of Malware Signature for Anti-Virus Cloud Computing},
    proceedings={Complex Sciences. First International Conference, Complex 2009, Shanghai, China, February 23-25, 2009. Revised Papers, Part 1},
    proceedings_a={COMPLEX PART 1},
    year={2012},
    month={5},
    keywords={anti-virus network security malware cloud computing},
    doi={10.1007/978-3-642-02466-5_70}
}

Wei Yan
Erik Wu
Year: 2012
Toward Automatic Discovery of Malware Signature for Anti-Virus Cloud Computing
COMPLEX PART 1
Springer
DOI: 10.1007/978-3-642-02466-5_70

Wei Yan¹, Erik Wu¹

1: Trend Micro, Inc.

Abstract

Security vendors are facing a serious problem of defeating the complexity of malwares. With the popularity and the variety of zero-day malware over the Internet, generating their signatures for detecting via anti-virus (AV) scan engines becomes an important reactive security function. However, AV security products consume much of the PC memory and resources due to their large signature files. AV cloud computing becomes a popular solution for this problem. In this paper, a novel Automatic Malware Signature Discovery System for AV cloud (AMSDS) is proposed to generate malware signatures from both static and dynamic aspects. Our experiments on millions-scale samples suggest that AMSDS outperforms most state-of-the-art automatic signature generation techniques of both industry and academia.

Keywords: anti-virus network security malware cloud computing

Published: 2012-05-11

: http://dx.doi.org/10.1007/978-3-642-02466-5_70