Formalization of Viruses and Malware Through Process Algebras

Abstract—Abstract virology has seen the apparition of successive viral models, all based on Turing-equivalent formalisms. Considering recent malware, these are only partially covered because functional formalisms do not support interactive computations. This article provides a basis for a unified malware model, founded on the Join-Calculus. In terms of expressiveness, the process-based model supports the fundamental notion of self-replication but also interactions, concurrency and nontermination to cover evolved malware. In terms of protection, detection undecidability and prevention by isolation still hold. Additional results are established: calculus fragments where detection is decidable, definition of a non-infection property, potential solutions to restrict propagation. Keywords-malware, process algebra, detection, prevention

• Type: Conference
• Year: 2010
• Where: IEEEARES
• Authors: Grégoire Jacob, Eric Filiol, Hervé Debar
• Keywords: IEEEARES 2010, Security Privacy, Successive Viral Models, Turing-equivalent Formalisms, Unified Malware Model