AUTOVAC: Towards Automatically Extracting System Resource Constraints and Generating Vaccines for Malware Immunization

Malware often contains many system-resource sensitive condition checks to avoid any duplicate infection, make sure to obtain required resources, or try to infect only targeted computers, etc. If the authors are able to extract the system resource constraints from malware code, and manipulate the environment state as vaccines, they would then be able to immunize a computer from infections. Towards this end, this paper provides the first systematic study and presents a prototype system, AUTOVAC, for automatically extracting the system resource constraints from malware code and generating vaccines based on the system resource conditions.

Provided by: Texas A&M International University Topic: Virtualization Date Added: Apr 2013 Format: PDF

Find By Topic