Skip to main content
Article
Hunting for metamorphic engines
Journal in Computer Virology (2006)
  • Wing Wong, San Jose State University
  • Mark Stamp, San Jose State University
Abstract

In this paper, we analyze several metamorphic virus generators. We define a similarity index and use it to precisely quantify the degree of metamorphism that each generator produces. Then we present a detector based on hidden Markov models and we consider a simpler detection method based on our similarity index. Both of these techniques detect all of the metamorphic viruses in our test set with extremely high accuracy. In addition, we show that popular commercial virus scanners do not detect the highly metamorphic virus variants in our test set.

Keywords
  • metamorphic engines,
  • computer virology,
  • viruses,
  • hidden markov movels,
  • virus generators
Disciplines
Publication Date
2006
Publisher Statement
SJSU users: use the following link to login and access the article via SJSU databases
Citation Information
Wing Wong and Mark Stamp. "Hunting for metamorphic engines" Journal in Computer Virology Vol. 2 Iss. 3 (2006)
Available at: http://works.bepress.com/mark_stamp/28/