An Security Analysis Method on the Anti-Virus Software Upgrade Process
Jianmin Fu · Journal of Wuhan University · 2015
This paper presents a hybrid security analysis method on the anti-virus software upgrade process.Though exploiting the network packet interception,monitoring system,static analysis to get useful information for the sake of dynamic analysis,the anti-virus software upgrade process will be analyzed clearly and the vulnerabilities may be located.Both vulnerabilities of key compromise and invalid validation logic in four pieces of common anti-virus software has been located with this method,and these results prove its efficiency.Finally the security proposals are presented,such as DNS protection,SSL protocol encryption,network data signature and file digital signature.