Analysis and effectiveness of signature based in detecting metamorphic virus

Computer viruses and other forms of malware have viewed as a threat to any software system. A computer virus is a piece of software which takes advantage of known weaknesses in a software system. It has the capability to deliver a malicious infection. A common technique that virus writers use to avo...

Full description

Saved in:

Bibliographic Details
Main Author:	Md. Sharif, Syahrizal Azmir
Format:	Thesis
Language:	English
Published:	2010
Subjects:	QA75 Electronic computers Computer science
Online Access:	http://eprints.utm.my/id/eprint/12075/6/SyahrizalAzmirSharifMFSKSM2010.pdf
Tags:	Add Tag No Tags, Be the first to tag this record!

id	my-utm-ep.12075
record_format	uketd_dc
spelling	my-utm-ep.120752017-09-28T04:27:44Z Analysis and effectiveness of signature based in detecting metamorphic virus 2010-04 Md. Sharif, Syahrizal Azmir QA75 Electronic computers. Computer science Computer viruses and other forms of malware have viewed as a threat to any software system. A computer virus is a piece of software which takes advantage of known weaknesses in a software system. It has the capability to deliver a malicious infection. A common technique that virus writers use to avoid detection is to enable the virus to change itself by having some kind of self-modifying code. This kind of virus is commonly known as a metamorphic virus, and can be particularly difficult to detect. As being discussed, metamorphic viruses have a potential to avoid any signature-based detection schemes by implementing code obfuscation techniques in an effort to defeat it. In metamorphic virus, if dead code is added and the control flow is changed sufficiently by inserting jump statements, the virus cannot be detected. In this project we first developed a code obfuscation engine. We then used this engine to create metamorphic variants of a seed virus and performed the validity of the statement about metamorphic viruses and signature based detectors. Last but not least, we have propose a profile which enclose the information about the existing metamorphic viruses infection. 2010-04 Thesis http://eprints.utm.my/id/eprint/12075/ http://eprints.utm.my/id/eprint/12075/6/SyahrizalAzmirSharifMFSKSM2010.pdf application/pdf en public masters Universiti Teknologi Malaysia, Faculty of Computer Science and Information Systems Faculty of Computer Science and Information System
institution	Universiti Teknologi Malaysia
collection	UTM Institutional Repository
language	English
topic	QA75 Electronic computers Computer science
spellingShingle	QA75 Electronic computers Computer science Md. Sharif, Syahrizal Azmir Analysis and effectiveness of signature based in detecting metamorphic virus
description	Computer viruses and other forms of malware have viewed as a threat to any software system. A computer virus is a piece of software which takes advantage of known weaknesses in a software system. It has the capability to deliver a malicious infection. A common technique that virus writers use to avoid detection is to enable the virus to change itself by having some kind of self-modifying code. This kind of virus is commonly known as a metamorphic virus, and can be particularly difficult to detect. As being discussed, metamorphic viruses have a potential to avoid any signature-based detection schemes by implementing code obfuscation techniques in an effort to defeat it. In metamorphic virus, if dead code is added and the control flow is changed sufficiently by inserting jump statements, the virus cannot be detected. In this project we first developed a code obfuscation engine. We then used this engine to create metamorphic variants of a seed virus and performed the validity of the statement about metamorphic viruses and signature based detectors. Last but not least, we have propose a profile which enclose the information about the existing metamorphic viruses infection.
format	Thesis
qualification_level	Master's degree
author	Md. Sharif, Syahrizal Azmir
author_facet	Md. Sharif, Syahrizal Azmir
author_sort	Md. Sharif, Syahrizal Azmir
title	Analysis and effectiveness of signature based in detecting metamorphic virus
title_short	Analysis and effectiveness of signature based in detecting metamorphic virus
title_full	Analysis and effectiveness of signature based in detecting metamorphic virus
title_fullStr	Analysis and effectiveness of signature based in detecting metamorphic virus
title_full_unstemmed	Analysis and effectiveness of signature based in detecting metamorphic virus
title_sort	analysis and effectiveness of signature based in detecting metamorphic virus
granting_institution	Universiti Teknologi Malaysia, Faculty of Computer Science and Information Systems
granting_department	Faculty of Computer Science and Information System
publishDate	2010
url	http://eprints.utm.my/id/eprint/12075/6/SyahrizalAzmirSharifMFSKSM2010.pdf
_version_	1747814894701379584

Analysis and effectiveness of signature based in detecting metamorphic virus

Similar Items