Главная
Study mode:
on
1
Introduction
2
Outline
3
Automation
4
Dynamic Analysis Techniques
5
The Environment
6
Current Evasion Techniques
7
Intuition Behind It
8
Features
9
Data Collection
10
Limitations
11
Methodology
12
Real Systems
13
Registry artifacts
14
Decision tree model
15
Evaluation
16
Claim Age
17
Content Measure
Description:
Explore a novel class of sandbox evasion techniques that exploit "wear and tear" artifacts to detect artificial malware analysis environments. Examine how malware can determine if a system is real or artificial with high accuracy by analyzing indicators of normal use over time. Learn about the methodology, data collection, and evaluation of this approach using decision tree models based on registry artifacts. Understand the implications for malware detection systems and potential defenses against these evasion tactics. Gain insights into creating more realistic sandbox environments that mimic the age and usage patterns of genuine user devices.

Spotless Sandboxes: Evading Malware Analysis Systems Using Wear-and-Tear Artifacts

IEEE
Add to list
0:00 / 0:00