Abstract:Our society is rapidly moving towards the digital age, which has led to a sharp increase in IoT networks and devices. This growth requires more network security professionals, who are focused on protecting IoT systems. One crucial task is to analyze malicious software to gain a deeper understanding of its functionalities and response methods. However, malware analysis is a complex process that requires the use of various analysis tools, including advanced reverse engineering techniques. For beginners, parsing complex binary data can be particularly challenging as they may be strange with these tools and the basic principles of analysis. Even for experienced analysts, understanding reverse engineering binary files and assembly lists is daunting.Facing these challenges, we propose a two-fold solution. Firstly, we create a detailed list of analysis tools and construct a malware analysis framework aimed at simplifying the analysis process. The framework will list the key data points that need to be addressed in the analysis, providing analysts with the tools and information needed for effective malware analysis. Secondly, we will demonstrate that advanced analysis techniques by providing analysis scripts which automate the reverse engineering process in malware analysis. To evaluate the accuracy of our behavior classification system, we will use our framework and analysis scripts to analyze known malware samples. Then, we will compare the accuracy of script-based analysis results and evaluate their ability to identify malicious software behavior. Our research results indicate that by following our framework and using our scripts, we can detect over 80% critical malware behaviors in known samples, which highlights the potential of simplifying the process of malware analysis, making it easier to learn and implement.

Improving Robustness in IoT Malware Detection through Execution Order Analysis

Automatic Detection and Analysis Towards Malicious Behavior in IoT Malware

Efficient Detection and Classification of Internet-of-Things Malware Based on Byte Sequences from Executable Files

On the Robustness of Machine Learning Based Malware Detection Algorithms

Machine learning-based malware detection for IoT devices using control-flow data

Malware Evasion Attacks Against IoT and Other Devices: an Empirical Study

Enhancing IoT Malware Detection through Adaptive Model Parallelism and Resource Optimization

Adversarial Samples on Android Malware Detection Systems for IoT Systems.

A Hybrid Optimization Model for Efficient Detection and Classification of Malware in the Internet of Things

Towards Adversarial Realism and Robust Learning for IoT Intrusion Detection and Classification

Automated Poisoning Attacks and Defenses in Malware Detection Systems: An Adversarial Machine Learning Approach

Hardening Malware Detection Systems Against Cyber Maneuvers: An Adversarial Machine Learning Approach.

Machine Learning-Based Malware Detection for IoT Devices: Understanding the Evolving Threat Landscape and Strategies for Protection

Enhancing Deep Neural Networks Against Adversarial Malware Examples.

Enhancing Robustness of Deep Neural Networks Against Adversarial Malware Samples: Principles, Framework, and AICS'2019 Challenge.

Enhancing Smart IoT Malware Detection: A GhostNet-based Hybrid Approach

Exploit Internal Structural Information for IoT Malware Detection Based on Hierarchical Transformer Model

Automatic Analysis Architecture of IoT Malware Samples

Comprehensive Botnet Detection by Mitigating Adversarial Attacks, Navigating the Subtleties of Perturbation Distances and Fortifying Predictions with Conformal Layers

Optimizing Malware Detection in IoT Networks: Leveraging Resource-Aware Distributed Computing for Enhanced Security

Understanding Internet of Things malware by analyzing endpoints in their static artifacts