Skip to Main content Skip to Navigation

Malicious Codes Detection in Distributed Environments

Abstract : The thesis consists in two principal parts: the first one discusses the message for- mat extraction and the second one discusses the behavioral obfuscation of malwares and the detection. In the first part, we study the problem of “binary code coverage” and “input message format extraction”. For the first problem, we propose a new technique based on “smart” dynamic tainting analysis and reverse execution. For the second one, we propose a new method using an idea of classifying input message values by the corresponding execution traces received by executing the program with these input values. In the second part, we propose an abstract model for system calls interactions between malwares and the operating system at a host. We show that, in many cases, the behaviors of a malicious program can imitate ones of a benign program, and in these cases a behavioral detector cannot distinguish between the two programs
Document type :
Complete list of metadata

Cited literature [150 references]  Display  Hide  Download
Contributor : Thèses UL Connect in order to contact the contributor
Submitted on : Thursday, March 29, 2018 - 1:21:27 PM
Last modification on : Saturday, October 16, 2021 - 11:26:08 AM


Files produced by the author(s)


  • HAL Id : tel-01751547, version 1



Thanh Dinh Ta. Malicious Codes Detection in Distributed Environments. Other [cs.OH]. Université de Lorraine, 2015. English. ⟨NNT : 2015LORR0040⟩. ⟨tel-01751547⟩



Record views


Files downloads