Automated Testing of Detection and Remediation of Malicious Software
Riku Peltonen · Theseus (Ammattikorkeakoulujen) · 2017
The aim of this thesis was to design and implement a system for automated testing of anti-malware products and technologies against real malicious software. It combines the common methodologies of automated software testing with the special considerations related to handling and analysis of malware. The thesis starts with background research in the domain of malware and anti-malware, describing the common methods malicious software uses to infect computer systems, and how anti-malware software attempts to counteract them. Further information is provided on how to automate the testing of different anti-malware techniques and features against different malware infection scenarios. A suitable architecture for the system, and the technologies used to implement it, are drafted and evaluated, followed by detailed steps on how each functional part of the system was implemented. The automated tests and their coverage are described in detail, including how malware is used, detected and remediated in the test environment.