A methodology for studying untrusted software: with application to the real case of the WinSatan tojan
Julio Cesar Hernandez-Castro, Javier Cámara, Arturo Ribagorda Garnacho, B. Ramos Alvarez, A. Muñoz Cuenca · ;login:: the magazine of USENIX & SAGE · 2000
The authors present a general methodology for studying untrusted software that is particularly suitable for the analysis of dangerous software (viruses, worms, and trojans). In many cases, it is useful to learn exactly what untrusted software does on a computer. This methodology is demostrated with our work on the recent trojan called WinSatan.