Constructing Polymorphic Virus Analysis System Using Behavior Detection Approach

The current antivirus products were only able to detect the existence of viruses, but it could not record the activity or behavior of viruses. Inability of antivirus to record the viruses' behavior made difficult certain users who want to know the behavior of viruses as well as to know the cate...

Full description

Saved in:
Bibliographic Details
Main Author: Fauzi Adi, Rafrastara
Format: Thesis
Language:English
Published: 2010
Subjects:
Online Access:http://eprints.utem.edu.my/id/eprint/15266/1/Constructing%20Polymorphic%20Virus%20Analysis%20System%20Using%20Behavior%20Detection%20Approach.pdf
Tags: Add Tag
No Tags, Be the first to tag this record!
id my-utem-ep.15266
record_format uketd_dc
spelling my-utem-ep.152662015-11-24T05:20:44Z Constructing Polymorphic Virus Analysis System Using Behavior Detection Approach 2010 Fauzi Adi, Rafrastara Q Science (General) QA Mathematics The current antivirus products were only able to detect the existence of viruses, but it could not record the activity or behavior of viruses. Inability of antivirus to record the viruses' behavior made difficult certain users who want to know the behavior of viruses as well as to know the category or classification of certain viruses. Actually, there were several architectures or tools proposed, but they still could not answer the needs of those certain users who want to know the classification of virus that they test.In this project, we studied the current types of viruses as well as current virus monitoring and analysis system. This study came up with the problems that become basic of this research.Here, we proposed an architecture and a system, which are able to monitor the viruses' behavior and classify those viruses whether as a traditional or polymorphic virus. Preliminary research was conducted to get the current virus behaviors and to find out the certain parameters, which are usually used by viruses to attack the computer target. Finally, we applied "test bed environment" to test our system by rel easing several viruses in a real environment, and attempt to capture their behaviors. These activities were followed by generating the conclusion that the tested or monitored virus is classified as a traditional or polymorphic virus. 2010 Thesis http://eprints.utem.edu.my/id/eprint/15266/ http://eprints.utem.edu.my/id/eprint/15266/1/Constructing%20Polymorphic%20Virus%20Analysis%20System%20Using%20Behavior%20Detection%20Approach.pdf text en validuser http://library.utem.edu.my:8000/elmu/index.jsp?module=webopac-d&action=fullDisplayRetriever.jsp&szMaterialNo=0000063239 masters UTeM Faculty Of Information And Communication Technology
institution Universiti Teknikal Malaysia Melaka
collection UTeM Repository
language English
topic Q Science (General)
QA Mathematics
spellingShingle Q Science (General)
QA Mathematics
Fauzi Adi, Rafrastara
Constructing Polymorphic Virus Analysis System Using Behavior Detection Approach
description The current antivirus products were only able to detect the existence of viruses, but it could not record the activity or behavior of viruses. Inability of antivirus to record the viruses' behavior made difficult certain users who want to know the behavior of viruses as well as to know the category or classification of certain viruses. Actually, there were several architectures or tools proposed, but they still could not answer the needs of those certain users who want to know the classification of virus that they test.In this project, we studied the current types of viruses as well as current virus monitoring and analysis system. This study came up with the problems that become basic of this research.Here, we proposed an architecture and a system, which are able to monitor the viruses' behavior and classify those viruses whether as a traditional or polymorphic virus. Preliminary research was conducted to get the current virus behaviors and to find out the certain parameters, which are usually used by viruses to attack the computer target. Finally, we applied "test bed environment" to test our system by rel easing several viruses in a real environment, and attempt to capture their behaviors. These activities were followed by generating the conclusion that the tested or monitored virus is classified as a traditional or polymorphic virus.
format Thesis
qualification_level Master's degree
author Fauzi Adi, Rafrastara
author_facet Fauzi Adi, Rafrastara
author_sort Fauzi Adi, Rafrastara
title Constructing Polymorphic Virus Analysis System Using Behavior Detection Approach
title_short Constructing Polymorphic Virus Analysis System Using Behavior Detection Approach
title_full Constructing Polymorphic Virus Analysis System Using Behavior Detection Approach
title_fullStr Constructing Polymorphic Virus Analysis System Using Behavior Detection Approach
title_full_unstemmed Constructing Polymorphic Virus Analysis System Using Behavior Detection Approach
title_sort constructing polymorphic virus analysis system using behavior detection approach
granting_institution UTeM
granting_department Faculty Of Information And Communication Technology
publishDate 2010
url http://eprints.utem.edu.my/id/eprint/15266/1/Constructing%20Polymorphic%20Virus%20Analysis%20System%20Using%20Behavior%20Detection%20Approach.pdf
_version_ 1747833867749818368