Title :
Visualization techniques for efficient malware detection
Author :
Donahue, Jeff ; Paturi, Anand ; Mukkamala, Srinivas
Author_Institution :
Comput. Anal. & Network Enterprise Solutions, LLC, Albuqeurque, NM, USA
Abstract :
Traditional tools for reverse engineering of binary and PE files are limited to heavy text base output, thus requiring skilled analysts to use them. In this paper, we present techniques that will visualize PE files, which will help analysts with basic skills to quickly understand their underlying structure. We also present Markov Byte Plot-based techniques to identify packed malware and discuss how our techniques can aid cybersecurity community for better enumeration of malicious software.
Keywords :
Markov processes; data visualisation; invasive software; reverse engineering; Markov byte plot-based techniques; PE files; binary files; cybersecurity community; malicious software; malware detection; reverse engineering; text base output; visualization techniques; Encoding; Malware; Markov processes; Navigation; Reverse engineering; Visualization;
Conference_Titel :
Intelligence and Security Informatics (ISI), 2013 IEEE International Conference on
Conference_Location :
Seattle, WA
Print_ISBN :
978-1-4673-6214-6
DOI :
10.1109/ISI.2013.6578845