metamorphic malware detection technology based on aggregating emerging patterns
Obfuscating technology is used widely in metamorphic malware and most of current detection methods fail to completely identify such ever-increasingly covert metamorphic malware. In this paper, system call sequences in the process of software execution are researched and metamorphic malware detection method based on aggregating emerging patterns is proposed. Experimental results show most metamorphic malware can be detected effectively by this method and it has higher detection rate and lower false alarm rate when the minimum support and growth rate thresholds are set reasonably.
metamorphic malware emerging patterns system call software security