论文部分内容阅读
Dynamic malware analysis is the technique to analyse malicious behaviors through execution of the binary.The technique commonly uses virtualization as a platform to create controlled environment.In general, virtualization technologies are not designed specifically for malware analysis and it can expose vulnerabilities which could be exploited by the malware writers.Recently modern malware often apply avoidance technique which is anti-virtualization in order to avoid analysis process in virtual environment.In this paper, we propose secure environment platform as an alternative to the controlled environment.Secure environment platform able to protect core operating system and configuration on a host from malware infection.The platform use DeepFreeze tool that has kernel-level features to restore clean state on host system.Experiment shows that the secure environment platform is a possible solution on malware behavior analysis that can ensure analysiss host remains in a normal state after analysis process com pleted.