Behavior-Obfuscation Resistance Malware Detection
Binlin Cheng, Jinjun Liu, Jie‐Jie Chen, Shudong Shi, Xufu Peng, Zhang Xingwen, Haiqing Hai · The Computer Journal · 2019
Abstract Malware brings a big security threat on the Internet today. With the great increasing malware attacks. Behavior-based detection approaches are one of the major method to detect zero-day malware. Such approaches often use API calls to represent the behavior of malware. Unfortunately, behavior-based approaches suffer from behavior obfuscation attacks. In this paper, we propose a novel malware detection approach that is both effective and efficient. First, we abstract the API call to object operation. And then we generate the object operation dependency graph based on these object operations. Our approach use dependency graph to represent the behavior of malware. The evaluation results show that our approach can provide a complete resistance to all types of behavior obfuscation attacks, and outperforms existing behavior-based approaches in terms of better effectiveness and efficiency.