In reverse engineering technology combined with information visualization technology to detect Malware on API Function Call and System Call Mechanism

• Main Authors: CHEN, HSUAN-CHI, 陳炫錡
• Other Authors: KOO,TUNG-MING
• Format: Others
• Language: zh-TW
• Published: 2017
• Online Access: http://ndltd.ncl.edu.tw/handle/bwhyeb

碩士 === 國立雲林科技大學 === 資訊管理系 === 105 === Information crimes rise due to the rapid development, popularization and, application of computer and network. The defense mechanism and the analysis research can’t catch up the Malware attack in the countries and regions with the sharp growth rate.This paper identifies a method of static analysis of Malware with PE file type in Windows operating system, which obtains the API and uses the combination of Function call and Sytem call as normal software (Benign) and malware (Malware) The graphic is generated by the technology of information visualization, and displayed through the adjustment of different colors, shapes, branches, etc. It is not only to find out the visual characteristics of the normal software (benign) and malware (Malware) classification efficiency, but also to look for Malware attack techniques and the malicious writing style of designers (hackers).