Detecting Packed Executables using Steganalysis

Colin Burgess; Fatih Kurugollu; Sakir Sezer; Keiran  McLaughlin

doi:10.1109/EUVIP.2014.7018361

Detecting Packed Executables using Steganalysis

Colin Burgess, Fatih Kurugollu, Sakir Sezer, Keiran McLaughlin

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

6 Citations (Scopus)

Abstract

This paper proposes a novel method of detecting packed executable files using steganalysis, primarily targeting the detection of obfuscated malware through packing. Considering that over 80% of malware in the wild is packed, detection accuracy and low false negative rates are important properties of malware detection methods. Experimental results outlined in this paper reveal that the proposed approach achieving an overall detection accuracy of greater than 99%, a false negative rate of 1% and a false positive rate of 0%.

Original language	English
Title of host publication	5th European Workshop on Visual Information Processing (EUVIP)
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	101-105
Number of pages	5
ISBN (Electronic)	978-1-4799-4572-6
ISBN (Print)	9781479945719
DOIs	https://doi.org/10.1109/EUVIP.2014.7018361
Publication status	Published - Dec 2014
Event	5th European Workshop on Visual Information Processing, EUVIP 2014 - Paris, France Duration: 10 Dec 2014 → 12 Dec 2014

Conference

Conference	5th European Workshop on Visual Information Processing, EUVIP 2014
Country/Territory	France
City	Paris
Period	10/12/2014 → 12/12/2014

Access to Document

10.1109/EUVIP.2014.7018361

Cite this

@inproceedings{c9002d820f144d51bd82334409ace1ab,

title = "Detecting Packed Executables using Steganalysis",

abstract = "This paper proposes a novel method of detecting packed executable files using steganalysis, primarily targeting the detection of obfuscated malware through packing. Considering that over 80% of malware in the wild is packed, detection accuracy and low false negative rates are important properties of malware detection methods. Experimental results outlined in this paper reveal that the proposed approach achieving an overall detection accuracy of greater than 99%, a false negative rate of 1% and a false positive rate of 0%.",

author = "Colin Burgess and Fatih Kurugollu and Sakir Sezer and Keiran McLaughlin",

year = "2014",

month = dec,

doi = "10.1109/EUVIP.2014.7018361",

language = "English",

isbn = "9781479945719",

pages = "101--105",

booktitle = "5th European Workshop on Visual Information Processing (EUVIP)",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

address = "United States",

note = "5th European Workshop on Visual Information Processing, EUVIP 2014 ; Conference date: 10-12-2014 Through 12-12-2014",

}

Burgess, C, Kurugollu, F, Sezer, S & McLaughlin, K 2014, Detecting Packed Executables using Steganalysis. in 5th European Workshop on Visual Information Processing (EUVIP). Institute of Electrical and Electronics Engineers Inc., pp. 101-105, 5th European Workshop on Visual Information Processing, EUVIP 2014, Paris, France, 10/12/2014. https://doi.org/10.1109/EUVIP.2014.7018361

TY - GEN

T1 - Detecting Packed Executables using Steganalysis

AU - Burgess, Colin

AU - Kurugollu, Fatih

AU - Sezer, Sakir

AU - McLaughlin, Keiran

PY - 2014/12

Y1 - 2014/12

N2 - This paper proposes a novel method of detecting packed executable files using steganalysis, primarily targeting the detection of obfuscated malware through packing. Considering that over 80% of malware in the wild is packed, detection accuracy and low false negative rates are important properties of malware detection methods. Experimental results outlined in this paper reveal that the proposed approach achieving an overall detection accuracy of greater than 99%, a false negative rate of 1% and a false positive rate of 0%.

AB - This paper proposes a novel method of detecting packed executable files using steganalysis, primarily targeting the detection of obfuscated malware through packing. Considering that over 80% of malware in the wild is packed, detection accuracy and low false negative rates are important properties of malware detection methods. Experimental results outlined in this paper reveal that the proposed approach achieving an overall detection accuracy of greater than 99%, a false negative rate of 1% and a false positive rate of 0%.

U2 - 10.1109/EUVIP.2014.7018361

DO - 10.1109/EUVIP.2014.7018361

M3 - Conference contribution

SN - 9781479945719

SP - 101

EP - 105

BT - 5th European Workshop on Visual Information Processing (EUVIP)

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 5th European Workshop on Visual Information Processing, EUVIP 2014

Y2 - 10 December 2014 through 12 December 2014

ER -

Detecting Packed Executables using Steganalysis

Abstract

Conference

Access to Document

Fingerprint

Cite this