A Keylogger Detection Using Dynamic API Inspection
Takaaki Matsumoto, Tomohiro Takami, Koichi Suzuki, Tatsuya Baba, Shusuke Maeda, Tadanori Mizuno, Masakatsu Nishigaki · IPSJ SIG Notes · 2006
††† †† ††† This paper proposes a keylogger detection scheme by monitoring APIs employed by keylogger to capture user’s keyboard input. API inspection is one of efficient ways for keylogger detection, since the use of keyboard-input-related APIs is a typical behavior found in keyloggers. To achieve this, we create a DLL which can detect the use of these APIs. By executing a program with the DLL, we can check whether the program includes any of these APIs or not. This paper carries out basic experiments to evaluate its detection rate, false detection rate and overhead.