Detecting Unknown Massive Mailing Viruses Using Proactive Methods

The detection of unknown viruses is beyond the capability of many existing virus detection approaches. In this paper, we show how proactive customization of system behaviors can be used to improve the detection rate of unknown malicious executables. Two general proactive methods, behavior skewing and cordoning, and their application in BESIDES, a prototype system that detects unknown massive mailing viruses, are presented.

• Type: Conference
• Year: 2004
• Where: RAID
• Authors: Ruiqi Hu, Aloysius K. Mok
• Keywords: RAID 2004, Unknown Malicious Executables, Unknown Viruses, Virus Detection Approaches