AUTOVAC: Towards Automatically Extracting System Resource Constraints and Generating Vaccines for Malware Immunization

Provided by: Texas A&M International University
Topic: Virtualization
Format: PDF
Malware often contains many system-resource sensitive condition checks to avoid any duplicate infection, make sure to obtain required resources, or try to infect only targeted computers, etc. If the authors are able to extract the system resource constraints from malware code, and manipulate the environment state as vaccines, they would then be able to immunize a computer from infections. Towards this end, this paper provides the first systematic study and presents a prototype system, AUTOVAC, for automatically extracting the system resource constraints from malware code and generating vaccines based on the system resource conditions.

Find By Topic