Analysis and forensics for Behavior Characteristics of Malware in Internet

Abstract

All sorts of Malwares severely threaten users in Internet. These malwares do share some common characteristics, despite malware and its variants may vary a lot from content signatures. The common characteristics they shared can be used to reveal the real intent of malware. In this paper, we study on the behavior characteristics of malwares in Internet, and based on which we present the method to extract the Formal Malware Behavior Characteristics (MBC), and finally, we design and implement the formal Malware Behavior Characteristics (MBC) extraction method, and propose the malicious behavior characteristics based malware detection algorithm. Finally we designed and implemented the malware analysis and forensics system. And the experimental results show that it can detect newly appeared unknown malwares.