Certificação

termination.). In order to tackle the recent most virulent attacks and vulnerabilities, we show how the precision of malware/intrusion detection/identification systems depends on the ease with which one can automate the discovering of non trivial invariants in the application. 2.2 Malware and Virus Charaterisation A malware is a program that has malicious intent. Examples of such programs include viruses, trojans horses, and worms. These malicious intent are structured by a three recurrent behavior: 1) following some infection strategies, 2) executing a set of malicious actions, procedures which is called the malware payload, Type Virus Worm Spyware Adware Trojan Back Door Rabbit Logic Bomb Active Propa. yes yes no no no no yes no Inst. Evolution Context-free no yes yes yes no partially yes partially 3 Q UASI -S TATIC B INARY A NALYSIS TABLE 1 Charaterisation for malware types. 3) evaluating some boolean control conditions, called triggers to defined when the payload will be activate. A classification of malware with respect to their goals and propagation methods is proposed in [23]. Also, [24] [25] shown that the research security community will deeply need a mathematical formalisms that could serve as scientific basis for the classification of malware. We could distinguish three properties that charaterise a class of a considered malware: A malware could be propagate passively or actively using self-instance replication and/or self-modification…