Detecting Self-mutating Malware Using Control-Flow Graph Matching

Next generation malware will by be characterized by the intense use of polymorphic and metamorphic techniques aimed at circumventing the current malware detectors, based on pattern matching. In order to deal with this new kind of threat novel techniques have to be devised for the realization of malware detectors. Recent papers started to address such issue and this paper represents a further contribution in such a field. More precisely in this paper we propose a strategy for the detection of malicious codes that adopt the most evolved self-mutation techniques; we also provide experimental data supporting the validity of such a strategy.

• Type: Conference
• Year: 2006
• Where: DIMVA
• Authors: Danilo Bruschi, Lorenzo Martignoni, Mattia Monga
• Keywords: Current Malware Detectors, DIMVA 2006, DIMVA 2007, Malware Detectors, Metamorphic Techniques