Behavioral Malware Detection Expert System – Tarantula

摘要: The number of new malware samples and their complexity is increasing rapidly because which protecting the system with signature based detection has become increasingly challenging task. In this work we present a novel behaviour-based expert named tarantula makes use suspicious behaviour rules to detect malicious activity on system. our research, observed that targets critical resources such as files registry operating in order execute; shield itself propagate other hosts. We identified Microsoft Windows evolved at granular level. These behavioural are enforced using monitoring enforcement layer. Through extensive experimentation testing, conclude tool high rate very less overhead false positives. implementation details prototype (Tarantula) developed for XP Vista systems also provided.