Portal de Periódicos da CAPES

Artigo Acesso aberto Produção Nacional

BIBTEX RIS

Malware distributed collection and pre-classification system using honeypot technology

2009; SPIE; Volume: 7344; Linguagem: Inglês

10.1117/12.818310

1996-756X

André Grégio, Isabela L. Oliveira, Rafael Santos, Adriano Mauro Cansian, Paulo Lício de Geus,

Internet Traffic Analysis and Secure E-voting

Malware has become a major threat in the last years due to the ease of spread through the Internet. Malware detection has become difficult with the use of compression, polymorphic methods and techniques to detect and disable security software. Those and other obfuscation techniques pose a problem for detection and classification schemes that analyze malware behavior. In this paper we propose a distributed architecture to improve malware collection using different honeypot technologies to increase the variety of malware collected. We also present a daemon tool developed to grab malware distributed through spam and a pre-classification technique that uses antivirus technology to separate malware in generic classes.