The Experts below are selected from a list of 7005 Experts worldwide ranked by ideXlab platform
Ankur Singh Bist - One of the best experts on this subject based on the ideXlab platform.
-
TECHNOLOGY Data Mining Techniques for Computer Virus Detection
2014Co-Authors: Ankur Singh BistAbstract:Computer Viruses are big threat to Computer world, researchers doing work in this area have made various efforts in the direction of classification and detection methods of these Viruses. Graph mining and system call arrangement are some latest research activities in this field. The computability theory and the semi computable functions are quite important in our context of analyzing malicious activity. A mathematical model like random access stored program machine with the association of attached background is used by Ferenc Leitold while explaining modeling of Viruses in his paper. Computer Viruses like polymorphic Viruses and metamorphic Viruses use more efficient techniques for their evolution so it is required to use strong models to understand their evolution and then apply detection followed by the process of removal. Code Emulation is one the strongest way to analyze Computer Viruses but the anti-emulation activities made by virus designers are working against it. This paper explains the data mining techniques that are used for detection of Computer Viruses in better manner
-
Detection of Logic Bombs
2014Co-Authors: Ankur Singh BistAbstract:Computer Viruses are big threat to Computer world; researchers doing work in this area have made various efforts in the direction of classification and detection methods of these Viruses. Graph mining, system call arrangement and CFG analysis are some latest research activities in this field. The computability theory and the semi computable functions are quite important in our context of analyzing malicious activities. A mathematical model like random access stored program machine with the association of attached background is used by Ferenc Leitold while explaining modeling of Viruses in his paper. Computer Viruses like polymorphic Viruses and metamorphic Viruses use more efficient techniques for their evolution so it is required to use strong models for understanding their evolution and then apply detection followed by the process of removal. Code Emulation is one of the strongest ways to analyze Computer Viruses but the anti-emulation activities made by virus designers are also active. This paper involves the study of logic bombs
-
TECHNOLOGY Spyware Detection Techniques
2014Co-Authors: Ankur Singh BistAbstract:Computer Viruses are big threat to Computer world; researchers doing work in this area have made various efforts in the direction of classification and detection methods of these Viruses. Graph mining, system call arrangement and CFG analysis are some latest research activities in this field. The computability theory and the semi computable functions are quite important in our context of analyzing malicious activities. A mathematical model like random access stored program machine with the association of attached background is used by Ferenc Leitold while explaining modeling of Viruses in his paper. Computer Viruses like polymorphic Viruses and metamorphic Viruses use more efficient techniques for their evolution so it is required to use strong models for understanding their evolution and then apply detection followed by the process of removal. Code Emulation is one of the strongest ways to analyze Computer Viruses but the anti-emulation activities made by virus designers are also active. This paper involves the study of spywares
-
TECHNOLOGY Hashing Techniques for Computer Virus Detection
2014Co-Authors: Ankur Singh BistAbstract:Computer Viruses are big threat to Computer world; researchers doing work in this area have made various efforts in the direction of classification and detection methods of these Viruses. Graph mining, system call arrangement and CFG analysis are some latest research activities in this field. The computability theory and the semi computable functions are quite important in our context of analyzing malicious activities. A mathematical model like random access stored program machine with the association of attached background is used by Ferenc Leitold while explaining modeling of Viruses in his paper. Computer Viruses like polymorphic Viruses and metamorphic Viruses use more efficient techniques for their evolution so it is required to use strong models for understanding their evolution and then apply detection followed by the process of removal. Code Emulation is one of the strongest ways to analyze Computer Viruses but the anti-emulation activities made by virus designers are also active. This paper involves the hashing techniques used for detection of Computer Viruses in better manner
-
TECHNOLOGY Malicious Code Analysis using Metalanguage
2014Co-Authors: Ankur Singh BistAbstract:Computer Viruses are big threat to Computer world; researchers doing work in this area have made various efforts in the direction of classification and detection methods of these Viruses. Graph mining, system call arrangement and graphical analysis are some latest research activities in this field. The computability theory and the semi computable computable functions are quite important in our context of analyzing malicious activity. A mathematical model like random access stored program machine with the association attached background is used by Ferenc Leitold while explaining modeling of Viruses in his paper. Computer Viruses like polymorphic Viruses and metamorphic Viruses are using more efficient techniques for their evolution so it is required to use strong models to understand their evolution and then apply detection followed by the process of removal. Code Emulation is one of the strongest ways to analyze Computer Viruses but the anti-emulation activities made by virus designers are also active. Metalanguage and metaprogramming are used to analyze the malicious codes
Tadashi Inoue - One of the best experts on this subject based on the ideXlab platform.
-
a tool for analyzing and detecting malicious mobile code
International Conference on Software Engineering, 2006Co-Authors: Akira Mori, Tomonori Izumida, Toshimi Sawada, Tadashi InoueAbstract:We present a tool for analysis and detection of malicious mobile code such as Computer Viruses and internet worms based on the combined use of code simulation, static code analysis, and OS execution emulation. Unlike traditional anti-virus methods, the tool directly inspects the code and identifies commonly found malicious behaviors such as mass mailing, self duplication, and registry overwrite without relying on ``pattern files'' that contain ``signatures'' of previously captured samples. The prohibited behaviors are defined separately as security policies at the level of API library function calls in a state-transition like language. The tool also features data flow analysis based on static single assignment forms, which are useful in tracing various values stored in registers and memory locations. The current tool targets at Win32 binary programs on Intel IA32 architectures and can detect most email Virusesslash worms that had spread in the wild in recent years.
Alessandro Vespignani - One of the best experts on this subject based on the ideXlab platform.
-
epidemic spreading in scale free networks
Physical Review Letters, 2001Co-Authors: Romualdo Pastorsatorras, Alessandro VespignaniAbstract:The Internet has a very complex connectivity recently modeled by the class of scale-free networks. This feature, which appears to be very efficient for a communications network, favors at the same time the spreading of Computer Viruses. We analyze real data from Computer virus infections and find the average lifetime and persistence of viral strains on the Internet. We define a dynamical model for the spreading of infections on scale-free networks, finding the absence of an epidemic threshold and its associated critical behavior. This new epidemiological framework rationalizes data of Computer Viruses and could help in the understanding of other spreading phenomena on communication and social networks.
M M Williamson - One of the best experts on this subject based on the ideXlab platform.
-
throttling Viruses restricting propagation to defeat malicious mobile code
Annual Computer Security Applications Conference, 2002Co-Authors: M M WilliamsonAbstract:Modern Computer Viruses spread incredibly quickly, far faster than human-mediated responses. This greatly increases the damage that they cause. This paper presents an approach to restricting this high speed propagation automatically. The approach is based on the observation that during virus propagation, an infected machine will connect to as many different machines as fast as possible. An uninfected machine has a different behaviour: connections are made at a lower rate, and are locally correlated (repeat connections to recently accessed machines are likely). This paper describes a simple technique to limit the rate of connections to "new" machines that is remarkably effective at both slowing and halting virus propagation without affecting normal traffic. Results of applying the filter to Web browsing data are included. The paper concludes by suggesting an implementation and discussing the potential and limitations of this approach.
Akira Mori - One of the best experts on this subject based on the ideXlab platform.
-
a tool for analyzing and detecting malicious mobile code
International Conference on Software Engineering, 2006Co-Authors: Akira Mori, Tomonori Izumida, Toshimi Sawada, Tadashi InoueAbstract:We present a tool for analysis and detection of malicious mobile code such as Computer Viruses and internet worms based on the combined use of code simulation, static code analysis, and OS execution emulation. Unlike traditional anti-virus methods, the tool directly inspects the code and identifies commonly found malicious behaviors such as mass mailing, self duplication, and registry overwrite without relying on ``pattern files'' that contain ``signatures'' of previously captured samples. The prohibited behaviors are defined separately as security policies at the level of API library function calls in a state-transition like language. The tool also features data flow analysis based on static single assignment forms, which are useful in tracing various values stored in registers and memory locations. The current tool targets at Win32 binary programs on Intel IA32 architectures and can detect most email Virusesslash worms that had spread in the wild in recent years.