| Paper Abstract and Keywords |
| Presentation |
2005-05-13 09:00
Design and implementation of the system for supporting computer virus analysis
Sachihiro Ichikawa (The Univ. of Tokushima), Yoshiaki Shiraishi (Kinki Univ.), Masakatu Morii (Kobe Univ.) |
| Abstract |
(in Japanese) |
(See Japanese page) |
| (in English) |
This paper presents a design and implementation of automatic virus analysis support system. Shortening of virus analysis is needed to minimize damage by virus with a difficult analysis or with fast infection speed.It is expected that not a binary or disassemble code but a doubtful code expanded on memory is helpful for automating and shortening of virus analysis. We take the following approach: 1) execution of a doubtful code on a virtual environment; 2) dumping the object code on memory; 3) disassemble of the dumped code; 4) analysis of the assembly code. By the above approach, we realize a system for supporting computer virus analysis. Although it has been difficult to automate analysis, the system can automatically output a result as same as the technical details
of security response issued by vaccine vendor. In addition, the system can shorten analysis of virus including one with a difficult analysis. |
| Keyword |
(in Japanese) |
(See Japanese page) |
| (in English) |
computer virus / analysis / memory dump / support system / / / / |
| Reference Info. |
IEICE Tech. Rep., vol. 105, May 2005. |
| Paper # |
|
| Date of Issue |
2005-05-06 (OIS) |
| ISSN |
Print edition: ISSN 0913-5685 |
| Download PDF |
|
| Conference Information |
| Committee |
LOIS |
| Conference Date |
2005-05-12 - 2005-05-13 |
| Place (in Japanese) |
(See Japanese page) |
| Place (in English) |
Sunport Hall Takamatsu |
| Topics (in Japanese) |
(See Japanese page) |
| Topics (in English) |
|
| Paper Information |
| Registration To |
LOIS |
| Conference Code |
2005-05-OIS |
| Language |
Japanese |
| Title (in Japanese) |
(See Japanese page) |
| Sub Title (in Japanese) |
(See Japanese page) |
| Title (in English) |
Design and implementation of the system for supporting computer virus analysis |
| Sub Title (in English) |
|
| Keyword(1) |
computer virus |
| Keyword(2) |
analysis |
| Keyword(3) |
memory dump |
| Keyword(4) |
support system |
| Keyword(5) |
|
| Keyword(6) |
|
| Keyword(7) |
|
| Keyword(8) |
|
| 1st Author's Name |
Sachihiro Ichikawa |
| 1st Author's Affiliation |
The University of Tokushima (The Univ. of Tokushima) |
| 2nd Author's Name |
Yoshiaki Shiraishi |
| 2nd Author's Affiliation |
kinki University (Kinki Univ.) |
| 3rd Author's Name |
Masakatu Morii |
| 3rd Author's Affiliation |
Kobe University (Kobe Univ.) |
| 4th Author's Name |
|
| 4th Author's Affiliation |
() |
| 5th Author's Name |
|
| 5th Author's Affiliation |
() |
| 6th Author's Name |
|
| 6th Author's Affiliation |
() |
| 7th Author's Name |
|
| 7th Author's Affiliation |
() |
| 8th Author's Name |
|
| 8th Author's Affiliation |
() |
| 9th Author's Name |
|
| 9th Author's Affiliation |
() |
| 10th Author's Name |
|
| 10th Author's Affiliation |
() |
| 11th Author's Name |
|
| 11th Author's Affiliation |
() |
| 12th Author's Name |
|
| 12th Author's Affiliation |
() |
| 13th Author's Name |
|
| 13th Author's Affiliation |
() |
| 14th Author's Name |
|
| 14th Author's Affiliation |
() |
| 15th Author's Name |
|
| 15th Author's Affiliation |
() |
| 16th Author's Name |
|
| 16th Author's Affiliation |
() |
| 17th Author's Name |
|
| 17th Author's Affiliation |
() |
| 18th Author's Name |
|
| 18th Author's Affiliation |
() |
| 19th Author's Name |
|
| 19th Author's Affiliation |
() |
| 20th Author's Name |
|
| 20th Author's Affiliation |
() |
| Speaker |
Author-1 |
| Date Time |
2005-05-13 09:00:00 |
| Presentation Time |
30 minutes |
| Registration for |
LOIS |
| Paper # |
OIS2005-7 |
| Volume (vol) |
vol.105 |
| Number (no) |
no.41 |
| Page |
pp.1-6 |
| #Pages |
6 |
| Date of Issue |
2005-05-06 (OIS) |