moving anti-malware research forward (fraser)

Click here to load reader

Upload: michael-scovetta

Post on 20-May-2015

741 views

Category:

Technology

3 download

Report

Download

Embed Size (px):

DESCRIPTION

Presentation from the Colloquium on Future Directions in Cyber Security on Nov 7, 2011.

TRANSCRIPT

Page 1: Moving Anti-Malware Research Forward (Fraser)

Approved for Public Release, Distribution Unlimited.

Tim Fraser Program Manager, Information Innovation Office

DARPA Cyber Colloquium Arlington, VA

November 7, 2011

Moving Anti-Malware Research Forward

The boundary between malicious and benign is fractally complex

• We and our adversaries are both exploring the boundary

• Their costs are low • Ours are high

(Source: Sentar Inc.’s MATCH project.)

Leveling the Playing Field with Automation

Approved for Public Release, Distribution Unlimited.

Page 3: Moving Anti-Malware Research Forward (Fraser)

WANTED: Breakthroughs in Deep Program Analysis

Reduce Human Analysis Time – Reduce Costs

Cyber Genome Reuse resembles heredity Extract lineage graphs Do profiling and forecasting

Program:

Insight:

Approach:

Application:

APAC Analyses can now scale Define and demonstrate properties Certify mobile applications

SeL4 9KLOC [Klein 2009]

Linux 6MLOC [Dillig 2008]

Approved for Public Release, Distribution Unlimited.

Page 4: Moving Anti-Malware Research Forward (Fraser)

DARPA Program Analysis Challenge

A second way to participate in the APAC effort Open to all comers

A chance to prove your program analysis chops

Win cash

Early 2013

E-mail [email protected]

• DARPA provides a set of mobile applications

• Bring your own tools

• Set time limit

• Compete to label each app as malicious or benign most accurately

Approved for Public Release, Distribution Unlimited.

mailto:[email protected]

Malware Analysis Analysis.pdf · Definisi Malware Analysis • What is a malware? • Malware (malicious software) ... Malware Sinkronisasi Token • Pelaku: Zeus Banking Trojan •

Intrusion Detection and Malware Analysis - Malware collection

Malwarebytes Anti-Malware Unmanaged Client Administrator Guide · Anti-Malware Unmanaged Client Administrator Guide 2 Introduction Malwarebytes Anti-Malware is a next-generation anti-malware

Threat Bulletin Fileless Malware The Stealth Attacker · Threat Bulletin See. Control. Secure. Fileless Malware - The Stealth Attacker Fileless malware (FM), aka “non-malware”,

Fraser Lowlands - PATTERNS OF WORK · South Delta’s neighbourhoods. New Life for Brownfield sites: Industry is moving East and leaving brownfield sites along the Fraser River Sustainable

Moving Promising Technologies off the Shelf · 2019. 12. 12. · Stelvia Matos, Simon Fraser University and Vernon Bachor, Simon Fraser University Executive Summary This Policy Brief

HTA-T07R Malware Hunting with the Sysinternals Toolsindex-of.co.uk/Malware/hta-t07r-license-to-kill-malware-hunting-with... · malware Professional antimalware analysis requires years

Introduction to Mobile Malware. Outline ➢ Introduction ➢ Types of Malware ➢ Malware examples ➢ How Malware Spreads ➢ Prevention ➢ AndroRAT Hands-on Lab

Metamorphic Malware 1 Metamorphic Malware Research

Malware and anti-malware (fun with Trojans) - Z. …z.cliffe.schreuders.org/edu/FS/Malware and anti-malware... · 2014-04-02 · Malware and anti-malware (fun with Trojans) ... with

MALWARE REVIEW - Cofense · a payload malware or a separate loader application that would retrieve subsequent malware payloads. Crafting PowerShell content to deliver malware requires

An Introduction To Keyloggers, RATS And Malware€¦ · Malware Malware has been a problem for ages, Malware is short form of malicious software. A Malware is basically a program

Malware - courses.cs.washington.edu · 2015. 5. 15. · Malware • Malicious’code’often’masquerades’as’good’ software’or’attaches’itself’to’good’software’

Android Malware Exposed-Evolution of Android Malware

A NEW H-R HYBRID MOVING MESH - LEVEL SET METHODbwo/papers/bwo_thesis.pdf · A NEW H-R HYBRID MOVING MESH - LEVEL SET METHOD by Benjamin Ong B.Sc., Simon Fraser University, 2000 a

MALWARES MALWARE REVIEWED ISE DE Malware Reviewed · MALWARES There are public reports about spreading of malware named as ServHelper malware. It is a backdoor malware used by attacker

Open Source Malware Lab - 0x7e0.bsidesljubljana.si · 3 All material confidential and proprietary Why Do I Need A Malware Analysis Lab? • Malware Research • Automated Malware

Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware … · 2011-08-16 · Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware

Malware Detection with Malware Images using …cosc.canterbury.ac.nz/research/reports/HonsReps/2018/...Malware Detection with Malware Images using Deep Learning Techniques by Ke HE

THE EVOLUTION OF MALWARE & FUTURE MALWARE MITIGATION

Malware Slums: Measurement and Analysis of Malware on ...homepage.cs.uiowa.edu/~mshafiq/files/malware... · Malware Slums: Measurement and Analysis of Malware on Trafﬁc Exchanges

Reversing malware analysis trainingpart9 advanced malware analysis

MALWARE CAMPAIGN TARGETING LATAM AND SPANISH BANKS · Malware Campaign Targeting LATAM Spanish Banks MALWARE CAMPAIGN TARGETING LATAM AND SPANISH BANKS. 2 Malware Campaign Targeting

Malware Analysis Without Looking At Assembly Codegauss.ececs.uc.edu/Courses/c5155/pdf/malware-analysis.pdf · 2015. 11. 20. · Malware Analysis Malware typically employs encryption:

The power of cyber protection fileCyBrave Certified Malware Analysis Investigator (CCMAI|CCMAIE) Malware Analysis Investigator Entry Level Malware Analysis Investigator Malware Analysis

Windows Malware Firewall: Remove Windows Malware Firewall

Part 4: Malware Functionality Chapter 11: Malware Behavior Chapter 12: Covert Malware Launching Chapter 13: Data Encoding Chapter 14: Malware-focused Network

Tools and techniques for cleaning malware incidents · Tools and techniques for cleaning malware incidents Martin Overton – IBM Security Services Malware/Anti-Malware SME, Forensics,

Chapter 8 Malware - FTMS · – Boot virus – Logic Bomb virus – Directory virus – Resident virus. CSCA0101 Computing Basics 8 Malware Types of Malware ... Malware Types of Malware

Malware Economics and its Implication to Anti-Malware ... · Malware Economics and its Implication to Anti-Malware Situational Awareness Arun Lakhotia, Univ of Louisiana-Lafayette

SANS ISC - cert.br · “Malware development is accelerating due to efficient and open collaboration, moving from months and years to weeks and days”

Improving accuracy of malware detection by …...FFRI, Inc. Background – malware and its detection 4 Increasing malware Targeted Attack (Unknown malware) Malware generators Obfuscators

Ch 12: Covert Malware Launching - samsclass.info · Practical Malware Analysis Ch 12: Covert Malware Launching Last revised: 4-10-17. Hiding Malware • Malware used to be visible

Malware & Anti-Malware

Practical Malware Analysis: Ch 11: Malware Behavior