Farm: An automated malware analysis environment

Author

Van Randwyk, J. ; Chiang, Ken ; Lloyd, Levi ; Vanderveen, Keith

Author_Institution

Sandia Nat. Labs., Livermore, CA

fYear

2008

fDate

13-16 Oct. 2008

Firstpage

321

Lastpage

325

Abstract

We present the forensic analysis repository for malware (FARM), a system for automating malware analysis. FARM leverages existing dynamic and static analysis tools and is designed in a modular fashion to provide future extensibility. We present our motivations for designing the system and give an overview of the system architecture. We also present several common scenarios that detail uses for FARM as well as illustrate how automated malware analysis saves time. Finally, we discuss future development of this tool.

Keywords

data privacy; invasive software; automated malware analysis; computer systems security; forensic analysis repository; malicious software attacks; malware attacks; network intrusion detection technology; system architecture; virus protection; Computer architecture; Computer networks; Computer security; Forensics; Operating systems; Performance analysis; Personnel; Protection; Protocols; Reverse engineering; Computer systems security and privacy; Network intrusion detection technology and virus protection;

fLanguage

English

Publisher

ieee

Conference_Titel

Security Technology, 2008. ICCST 2008. 42nd Annual IEEE International Carnahan Conference on

Conference_Location

Prague

Print_ISBN

978-1-4244-1816-9

Electronic_ISBN

978-1-4244-1817-6

Type

conf

DOI

10.1109/CCST.2008.4751322

Filename

4751322