PDF Scrutinizer: Detecting JavaScript-based attacks in PDF documents

摘要: For a long time PDF documents have arrived in the everyday life of average computer user, corporate businesses and critical structures, as authorities military. Due to its wide spread general, because out-of-date versions readers are quite common, using has become popular malware distribution strategy. In this context, malicious useful features: they trustworthy, attacks can be camouflaged by inconspicuous document content, but still, often download install undetected firewall anti-virus software. paper we present Scrutinizer, detection analysis tool. We use static, well as, dynamic techniques detect behavior an emulated environment. evaluate quality performance tool with from wild, show that Scrutinizer reliably detects current documents, while keeping low false-positive rate reasonable runtime performance.