Poly-meta-morphic malware looks different each time it is stored on di.docx
- 1. Poly/meta-morphic malware looks different each time it is stored on disk or executed. Consider the challenges of detecting such malware. Please respond to the following: •   What is one approach to detect poly/meta-morphic malware? Your answer may address malware statically stored on disk or running in memory, and you may describe a publicly known solution or propose something novel. •   What are the limitations of the method you described? Solution Malware is a one type of software which can harm the computer’s operating system and may also can steal the personal information from the computer, malware can be made by using any programming language by the programmer. It is very difficult to define a malware with a single term or a single name. A malware can be consider as a malicious software or malcode or as a malicious code .Malware do the bulk of the intrusive activities on a system and that spreads itself across the hosts in a network. Malware is defined as software performing actions intended by an attacker, mostly with malicious intentions of stealing information, identity or other resources in the computing systems.There are different types of malware like adware, bots, Trojan horses, viruses, bugs, rootkits, spyware and worms. However, attributable to the technology advancement many malware writers try to use higher concealment techniques to avoid detection. The concealment technique is created with the combination of previous behaviour therefore on attack and at identical time to avoid the signature-based detection. In this, several common techniques that are commonly used like as polymorphic and metamorphic. Stealth Malware Malware creators’ initial tries therefore on turn tail from redounded to appear of stealing techniques. Stealth virus is prepared to cover its signs and traces. Virus normally changes and modifies info resources on the system. For example, a file-hosted virus would possibly append its own code to the tip of Associate in possible file. If Associate in application examines the infected file, it'll discover the being code inside the file and catch the virus.
- 2. clustering approach to identify and group harmful programs or apps samples that show almost the same behavior.almost the same behavior . This approach also energetic/changing analysis to get the execution traces of harmful programs or apps programs using automated tools. This approach is used to boost the efficiency of dynamic malware analysis systems . It is a large sort of latest malicious files presently appears. It’s because of mutations of only variety of malware programs. The projected system avoids analyzing malware binaries that just represent mutated instances of already analyzed polymorphic malware. It drastically decrease the quantity of some time required for analyzing a set of malware programs.