The Center for Education and Research in Information Assurance and Security (CERIAS)

The Center for Education and Research in
Information Assurance and Security (CERIAS)

Basic Dynamic Processes Analysis of Malware in Hypervisors Type I & II

Download

Download PDF Document
PDF

Author

Ibrahim Waziri Jr, Sam Liles

Tech report number

CERIAS TR 2015-9

Entry type

article

Abstract

In this paper, we compare, analyze and study the behavior of a malware processes within both Type 1 & Type 2 virtualized environments. In other to achieve this we to set up two different virtualized environments and thoroughly analyze each malware processes behavior. The goal is to see if there is a difference between the behaviors of malware within the 2 different architectures. At the end we achieve a result and realized there is no significant difference on how malware processes run and behave on either virtualized environment. However our study is limited to basic analysis using basic tools. An advance analysis with more sophisticated tools could prove otherwise.

Download

PDF

Date

2015 – 5 – 18

Institution

Purdue University

Key alpha

Waziri Jr

School

Purdue University

Affiliation

CERIAS

Publication Date

2015-05-18

BibTex-formatted data

To refer to this entry, you may select and copy the text below and paste it into your BibTex document. Note that the text may not contain all macros that BibTex supports.