Abstract:Our society is rapidly moving towards the digital age, which has led to a sharp increase in IoT networks and devices. This growth requires more network security professionals, who are focused on protecting IoT systems. One crucial task is to analyze malicious software to gain a deeper understanding of its functionalities and response methods. However, malware analysis is a complex process that requires the use of various analysis tools, including advanced reverse engineering techniques. For beginners, parsing complex binary data can be particularly challenging as they may be strange with these tools and the basic principles of analysis. Even for experienced analysts, understanding reverse engineering binary files and assembly lists is daunting.Facing these challenges, we propose a two-fold solution. Firstly, we create a detailed list of analysis tools and construct a malware analysis framework aimed at simplifying the analysis process. The framework will list the key data points that need to be addressed in the analysis, providing analysts with the tools and information needed for effective malware analysis. Secondly, we will demonstrate that advanced analysis techniques by providing analysis scripts which automate the reverse engineering process in malware analysis. To evaluate the accuracy of our behavior classification system, we will use our framework and analysis scripts to analyze known malware samples. Then, we will compare the accuracy of script-based analysis results and evaluate their ability to identify malicious software behavior. Our research results indicate that by following our framework and using our scripts, we can detect over 80% critical malware behaviors in known samples, which highlights the potential of simplifying the process of malware analysis, making it easier to learn and implement.

Malware detection based on ontology

Ontology-based knowledge representation for malware individuals and families.

A malware detection framework based on kolmogorov complexity

Using Ontologies to Perform Threat Analysis and Develop Defensive Strategies for Mobile Security

A Behavior-Based Approach For Malware Detection

Behavior-Based Malware Analysis and Detection

MALOnt: An Ontology for Malware Threat Intelligence

Discovering Malicious Signatures in Software from Structural Interactions

Automatic Detection and Analysis Towards Malicious Behavior in IoT Malware

Malware Detection Method Based On The Control-Flow Construct Feature Of Software

Automatic Malware Classification and New Malware Detection Using Machine Learning

Approach For Malware Identification Using Dynamic Behaviour And Outcome Triggering

A Malware Detection Method Based on Family Behavior Graph

A Survey on Malware Detection and Analysis

Learning And Applying Ontology For Machine Learning In Cyber Attack Detection

From Big Data to Knowledge: A Spatio-Temporal Approach to Malware Detection

A Practical Taint-Based Malware Detection

Research of Malware Detection Approach for Android

Semantics-based Malware Detector for Obfuscated Malware

Malware Characteristics and Threats on the Internet Ecosystem

Machine Learning for Analyzing Malware.