Complex Sciences. First International Conference, Complex 2009, Shanghai, China, February 23-25, 2009. Revised Papers, Part 1

Research Article

Toward Automatic Discovery of Malware Signature for Anti-Virus Cloud Computing

Download
506 downloads
  • @INPROCEEDINGS{10.1007/978-3-642-02466-5_70,
        author={Wei Yan and Erik Wu},
        title={Toward Automatic Discovery of Malware Signature for Anti-Virus Cloud Computing},
        proceedings={Complex Sciences. First International Conference, Complex 2009, Shanghai, China, February 23-25, 2009. Revised Papers, Part 1},
        proceedings_a={COMPLEX PART 1},
        year={2012},
        month={5},
        keywords={anti-virus network security malware cloud computing},
        doi={10.1007/978-3-642-02466-5_70}
    }
    
  • Wei Yan
    Erik Wu
    Year: 2012
    Toward Automatic Discovery of Malware Signature for Anti-Virus Cloud Computing
    COMPLEX PART 1
    Springer
    DOI: 10.1007/978-3-642-02466-5_70
Wei Yan1, Erik Wu1
  • 1: Trend Micro, Inc.

Abstract

Security vendors are facing a serious problem of defeating the complexity of malwares. With the popularity and the variety of zero-day malware over the Internet, generating their signatures for detecting via anti-virus (AV) scan engines becomes an important reactive security function. However, AV security products consume much of the PC memory and resources due to their large signature files. AV cloud computing becomes a popular solution for this problem. In this paper, a novel Automatic Malware Signature Discovery System for AV cloud (AMSDS) is proposed to generate malware signatures from both static and dynamic aspects. Our experiments on millions-scale samples suggest that AMSDS outperforms most state-of-the-art automatic signature generation techniques of both industry and academia.