Trending Bestseller

Behavior-Based Spyware Detection

No reviews yet Write a Review
Paperback / softback
14 May 2008
RRP: $64.03
$62.75
Ships in 3-5 business days

Delivery estimate

Hurry up! Current stock:
Generating good signatures for the current anti-spyware toolkits and deploying them in a timely fashion is a demanding task. Even if the signatures are up-to-date, signature based detection techniques usually suffer from the inability to detect novel and unknown threats. We believe that behavior-based approaches are capable of overcoming this drawback. To this end, we implemented TQAna. Our tool is based on taint analysis and function call hooking to provide dynamic analysis that is carried out on an emulated system. Taint analysis, as implemented with TQAna, provides the ability to track data throughout the whole system on hardware level. The observed functions cover most aspects of the Windows operating system, such as network-, and file system access, shared memory, or the dynamic loader. This book addresses system and security researchers in the fields of operating systems and malicious software analysis.

You Can Find This Title In

    Product Details
    ISBN-13
    9783639022063
    Author
    Manuel Egele
    Publisher
    KS OmniScriptum Publishing
    Published
    14 May 2008
    Format
    Paperback / softback

    This product hasn't received any reviews yet. Be the first to review this product!

    RRP: $64.03
    $62.75
    Ships in 3-5 business days

    Delivery estimate

    Hurry up! Current stock:

    Behavior-Based Spyware Detection

    RRP: $64.03
    $62.75

    Description

    Generating good signatures for the current anti-spyware toolkits and deploying them in a timely fashion is a demanding task. Even if the signatures are up-to-date, signature based detection techniques usually suffer from the inability to detect novel and unknown threats. We believe that behavior-based approaches are capable of overcoming this drawback. To this end, we implemented TQAna. Our tool is based on taint analysis and function call hooking to provide dynamic analysis that is carried out on an emulated system. Taint analysis, as implemented with TQAna, provides the ability to track data throughout the whole system on hardware level. The observed functions cover most aspects of the Windows operating system, such as network-, and file system access, shared memory, or the dynamic loader. This book addresses system and security researchers in the fields of operating systems and malicious software analysis.

    You Can Find This Title In

      This Title Is Categorised As