Bytecode Heuristic Signatures for Detecting Malware Behavior

摘要: For a long time, the most important approach for detecting malicious applications was use of static, hash-based signatures. This provides fast response has low performance overhead and is very stable due to its simplicity. However, with rapid growth in number malware, as well their increased complexity terms polymorphism evasion, era reactive security solutions started fade favor new, proactive approaches such behavior based detection. We propose novel that uses an interpreter virtual machine run heuristics from bytecode signatures, thus combining advantages detection those Based on our approximation, using this we succeeded reduce by 85% time required update solution detect new threats, while continuing benefit versatility heuristics.