moving anti-malware research forward (fraser)

Approved for Public Release, Distribution Unlimited.

Tim Fraser Program Manager, Information Innovation Office

DARPA Cyber Colloquium Arlington, VA

November 7, 2011

Moving Anti-Malware Research Forward

The boundary between malicious and benign is fractally complex

• We and our adversaries are both exploring the boundary

• Their costs are low • Ours are high

(Source: Sentar Inc.’s MATCH project.)

Leveling the Playing Field with Automation

WANTED: Breakthroughs in Deep Program Analysis

Reduce Human Analysis Time – Reduce Costs

Cyber Genome Reuse resembles heredity Extract lineage graphs Do profiling and forecasting

Program:

Insight:

Approach:

Application:

APAC Analyses can now scale Define and demonstrate properties Certify mobile applications

SeL4 9KLOC [Klein 2009]

Linux 6MLOC [Dillig 2008]

DARPA Program Analysis Challenge

A second way to participate in the APAC effort Open to all comers

A chance to prove your program analysis chops

Win cash

Early 2013

E-mail ProgramAnalysisChallenge@DARPA.mil

• DARPA provides a set of mobile applications

• Bring your own tools

• Set time limit

• Compete to label each app as malicious or benign most accurately

moving anti-malware research forward (fraser)

Technology

malwarebytes anti-malware unmanaged client administrator...

an introduction to keyloggers, rats and malware€¦ ·...

threat bulletin fileless malware the stealth attacker ·...

malware review - cofense · a payload malware or a separate...

tools and techniques for cleaning malware incidents ·...

practical malware analysis: ch 11: malware behavior

malware analysis and antivirus technologies: kernel malware...

malware and anti-malware (fun with trojans) - z....

malware campaign targeting latam and spanish banks ·...

using optimization algorithms for malware...

android malware exposed-evolution of android malware

the evolution of malware & future malware mitigation

metamorphic malware 1 metamorphic malware research

setting goals and moving forward - fraser health goals...

chapter 8 malware - ftms · – boot virus – logic bomb...

malware analysis workshop june 5, 2012 - ccdcoe · malware...

advanced malware analysis training session6 malware sandbox...

improving accuracy of malware detection by …...ffri, inc....

reversing malware analysis trainingpart9 advanced malware...

part 4: malware functionality chapter 11: malware behavior...