109 search results - page 16 / 22 » Using IRP for Malware Detection |
CEAS
2008
Springer
14 years 11 months ago
2008
Springer
Over the past 5 years, spam sending technology has improved dramatically. Static messages sent opportunistically through misconfigured hosts have evolved into dynamically generate...
131
click to vote
WCRE
2010
IEEE
14 years 7 months ago
2010
IEEE
—An important application of binary-level reverse engineering is in reconstructing the internal logic of computer malware. Most malware code is distributed in encrypted (or “pa...
RAID
2009
Springer
15 years 4 months ago
2009
Springer
In this paper, we present an accurate and realtime PE-Miner framework that automatically extracts distinguishing features from portable executables (PE) to detect zero-day (i.e. pr...
ACSAC
2005
IEEE
15 years 3 months ago
2005
IEEE
Microscopic analysis of malicious code (malware) requires the aid of a variety of powerful tools. Chief among them is a debugger that enables runtime binary analysis at an instruc...
ICISC
2007
14 years 11 months ago
2007
VMM (virtual machine monitor) based system provides the useful inspection and interposition of guest OS. With proper modification of guest OS, we can obtain event-driven memory sn...