An improved process supervision and control method for malware detection
Joint Authors
Shamshirsaz, Behnam
Asghari, Sayyid Amir
Marvasti, Muhammad Rida Binesh
Source
The International Arab Journal of Information Technology
Issue
Vol. 19, Issue 4 (31 Jul. 2022), pp.652-659, 8 p.
Publisher
Zarqa University Deanship of Scientific Research
Publication Date
2022-07-31
Country of Publication
Jordan
No. of Pages
8
Main Subjects
Information Technology and Computer Science
Abstract EN
Most modern-day malware detection methods and algorithms are based on prior knowledge of malware specifications.
Discovering new malwares by solely relying on computer based automatic solutions with no human intervention currently appears out of reach.
Many malwares never decode harmful parts of their code until the triggering of a specific event.
Others detect virtual machine or sandbox environments and hide their true nature.
Detecting these kinds of malwares-specifically multi evented ones-are nearly impossible for fully automatic detection methods.
Previous research found that about 75% of malwares studied did not react in a fully automatic environment without user intervention thus being undetectable.
This paper introduces a near automated solution to detect malwares quickly by relying on a supervision and control method based on user level capabilities of the operating system.
Improving on previous methods, this research can replace the need for debugging new malwares in almost all aspects.
This solution forces malwares in automated environments to activate and be discoverable.
Researcher intervention during malware code execution along with the malware’s intent over calling sensitive operating system functions and parameters aid this process.
Since operating system functions are virtualized malwares are incapable of physically harming the system during execution.
The solution reached 98% overall accuracy in conjunction with reducing code size by 80% in comparison with similar techniques, improving simplicity and reliability.
American Psychological Association (APA)
Shamshirsaz, Behnam& Asghari, Sayyid Amir& Marvasti, Muhammad Rida Binesh. 2022. An improved process supervision and control method for malware detection. The International Arab Journal of Information Technology،Vol. 19, no. 4, pp.652-659.
https://search.emarefa.net/detail/BIM-1437336
Modern Language Association (MLA)
Shamshirsaz, Behnam…[et al.]. An improved process supervision and control method for malware detection. The International Arab Journal of Information Technology Vol. 19, no. 4 (Jul. 2022), pp.652-659.
https://search.emarefa.net/detail/BIM-1437336
American Medical Association (AMA)
Shamshirsaz, Behnam& Asghari, Sayyid Amir& Marvasti, Muhammad Rida Binesh. An improved process supervision and control method for malware detection. The International Arab Journal of Information Technology. 2022. Vol. 19, no. 4, pp.652-659.
https://search.emarefa.net/detail/BIM-1437336
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references : p. 657-658
Record ID
BIM-1437336