Using code normalization for fighting self-mutating malware

Danilo Bruschi, Lorenzo Martignoni, Mattia Monga · 2006

Self mutating malware has been introduced by computer virus writers who, in ’90s, started to write polymorphic and metamorphic viruses in order to defeat anti-virus products. In this paper we present a novel approach for dealing with self mutating code which could represent the basis for a new detection strategy for this type of malware. A tool prototype has been implemented in order to validate the idea and the results are quite encouraging, and indicate that it could represent a new strategy for detecting this kind of malware. 1

Read the paper · More papers on PaperTik