The latest concept in malware

[soja_a]

From a recent Usenix paper, the latest in malware concepts: stitching malware

together from benign binaries, thereby evading current generation malware detection
software. Cutely, they've named their approach Frankenstein:
<https://www.usenix.org/conference/woot12/frankenstein-stitching-malware-benign-binaries>

soja_a

[Big Bad Bob]

Post by soja_a

From a recent Usenix paper, the latest in malware concepts: stitching malware

together from benign binaries, thereby evading current generation malware detection
<https://www.usenix.org/conference/woot12/frankenstein-stitching-malware-benign-binaries>
soja_a

to detect things like this, you'd need to have a virus 'signature'
that's based on the 'glue' that holds the parts together. but yeah.

[Bodo Eggert]

Post by soja_a

From a recent Usenix paper, the latest in malware concepts: stitching malware

together from benign binaries, thereby evading current generation malware
<https://www.usenix.org/conference/woot12/frankenstein-stitching-malware-

benign-binaries>

Sounds much like using system libraries, just with non-library binaries.