FCScan: A New Lightweight and Effective Approach for Detecting Malicious Content in Electronic Documents

摘要: Electronic documents, such as PDF and Microsoft Office have become an ubiquitous attack vector in recent years, especially complex attacks performed by Advanced Persistent Threats. Current security measures are not effective protecting users endpoints, either because they based on static checks analysis that attackers can bypass circumvent, or require CPUintensive is usually off-loaded external systems, which cannot replicate all of the actual parameters intended victim. We present a lightweight system perform detection malware electronic documents real-time at endpoint. To show effectiveness our approach, we implemented tested prototype Adobe Acrobat Reader.