Thesis Details

Extraction of Static Features from Binary Applications for Malware Analysis

Bachelor's Thesis Student: Pružinec Jakub Academic Year: 2018/2019 Supervisor: Kolář Dušan, doc. Dr. Ing.

Czech title

Extrakce statických rysů z binárních aplikací za účelem analýzy malwaru

Language

English

Abstract

Forms of malware are changing and evolving on daily basis, therefore it is necessary to continuously create, update, and improve methods for malware analysis. One of possible approaches to fighting malware is to classify it based on certain static characteristics. This thesis deals with design and extraction of these features from binary executables. Goal of this work is to enrich a static feature extraction tool by extracting new features and verifying their effectiveness in malware classification. The tool is developed in cooperation with Avast Software, where it is used in a clustering system.

Keywords

Reverse engineering, malware, static analysis, Avast

Department

Department of Information Systems FIT BUT

Degree Programme

Information Technology

Files

Status

defended, grade A

Date

11 June 2019

Reviewer

Hanáček Petr, doc. Dr. Ing.

Committee

Kolář Dušan, doc. Dr. Ing. (DIFS FIT BUT), předseda
Bařina David, Ing., Ph.D. (DCGM FIT BUT), člen
Hrubý Martin, Ing., Ph.D. (DITS FIT BUT), člen
Kořenek Jan, doc. Ing., Ph.D. (DCSY FIT BUT), člen
Zendulka Jaroslav, doc. Ing., CSc. (DIFS FIT BUT), člen

Citation

PRUŽINEC, Jakub. Extraction of Static Features from Binary Applications for Malware Analysis. Brno, 2019. Bachelor's Thesis. Brno University of Technology, Faculty of Information Technology. 2019-06-11. Supervised by Kolář Dušan. Available from: https://www.fit.vut.cz/study/thesis/22056/

BibTeX

@bachelorsthesis{FITBT22056,
    author = "Jakub Pru\v{z}inec",
    type = "Bachelor's thesis",
    title = "Extraction of Static Features from Binary Applications for Malware Analysis",
    school = "Brno University of Technology, Faculty of Information Technology",
    year = 2019,
    location = "Brno, CZ",
    language = "english",
    url = "https://www.fit.vut.cz/study/thesis/22056/"
}

Theses