PackGenome: Automatically Generating Robust YARA Rules for Accurate Malware Packer Detection-Reference-Cited by-同舟云学术

PackGenome: Automatically Generating Robust YARA Rules for Accurate Malware Packer Detection

Published:2023-11-15 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security
language:
Short-container-title:

Author:

Li Shijia¹^ORCID,Ming Jiang²^ORCID,Qiu Pengda¹^ORCID,Chen Qiyuan¹^ORCID,Liu Lanqing¹^ORCID,Bao Huaifeng³^ORCID,Wang Qiang³^ORCID,Jia Chunfu¹^ORCID

Affiliation:

1. Nankai University, TKLNDST, & DISSEC, Tianjin, China

2. Tulane University, New Orleans, LA, USA

3. SKLOIS, IIE, Beijing, China

Funder

Tianjin Research Innovation Project for Postgraduate Students

National Natural Science Foundation of China

National Key R&D Program of China

Natural Science Foundation of Tianjin

National Science Foundation (NSF)

Carol Lavin Bernick Faculty Grant

Fundamental Research Funds for the Central Universities of China

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3576915.3616625

Reference65 articles.

1. Trivikram Muralidharan, Aviad Cohen, Noa Gerson, and Nir Nissim. 2022. File Packing from the Malware Perspective: Techniques, Analysis Approaches, and Directions for Enhancements. ACM Computing Surveys (CSUR), Vol. 55 (April 2022), 1--45.

2. Binary-code obfuscations in prevalent packer tools

3. An Inside Look into the Practice of Malware Analysis

4. Xabier Ugarte-Pedrero, Davide Balzarotti, Igor Santos, and Pablo G. Bringas. 2015. SoK: Deep Packer Inspection: A Longitudinal Study of the Complexity of Run-Time Packers. In Proceedings of the 36th IEEE Symposium on Security and Privacy (S&P). IEEE, 659--673.

5. Exploring the Long Tail of (Malicious) Software Downloads