On Analysis and Effectiveness of Signature Based in Detecting Metamorphic Virus

Imran Edzereiq, Kamarudin and Syahrizal Azmir, Md Sharif and Tutut, Herawan (2013) On Analysis and Effectiveness of Signature Based in Detecting Metamorphic Virus. International Journal of Security and Its Applications, 7 (4). pp. 375-385. (Published)

PDF On_Analysis_and_Effectiveness_of_Signature_Based_in_Detecting_Metamorphic_Virus.pdf - Published Version Restricted to Repository staff only Download (329kB) | Request a copy

Abstract

Computer viruses and other forms of malware have viewed as a threat to any software system. They have the capability to deliver a malicious infection. A common technique that virus writers use to avoid detection is to enable the virus to change itself by having some kind of selfmodifying code. This kind of virus is commonly known as a metamorphic virus, and can be particularly difficult to detect. Metamorphic viruses have a potential to avoid any signaturebased detection schemes by implementing code obfuscation techniques in an effort to defeat it. In metamorphic virus, if dead code is added and the control flow is changed sufficiently by inserting jump statements, the virus cannot be detected. In this paper we first developed a code obfuscation engine. We then used this engine to create metamorphic variants of a seed virus and performed the validity of the statement about metamorphic viruses and signature based detectors. Last but not least, we have propose a profile which enclose the information about the existing metamorphic viruses infection.

Item Type:	Article
Uncontrolled Keywords:	Viruses; Metamorphic viruses; Signature based detectors
Subjects:	Q Science > QA Mathematics > QA76 Computer software
Faculty/Division:	Faculty of Computer System And Software Engineering
Depositing User:	Mrs. Neng Sury Sulaiman
Date Deposited:	19 Jan 2016 08:17
Last Modified:	22 Jan 2018 02:04
URI:	http://umpir.ump.edu.my/id/eprint/6307
Download Statistic:	View Download Statistics

Actions (login required)

View Item