Portable Malware Scanner Based on Embedded Devices

Abstract

The high number of malware attacks and the increasing use of physical storage media in Indonesia is the perfect combinations that support baiting attacks. This attack can target anyone, from individuals, organizations, and even government institutions. To avoid damage caused by malware inserted into a malicious USB drive, specific devices are needed, including software and hardware, to detect the USB drive before connecting it to the user's device. This study aims to build a portable malware detection device. Fulfillment of conformity criteria is carried out by conducting unit testing, integration testing, user acceptance testing, and system testing. The GUI-based application is implemented on the Raspberry Pi 4 by utilizing the Clam antivirus (ClamAV) signature database to detect malware on the sample USB drive. This malware scanner comprises 5 classes with 31 functions and is displayed on 5 interfaces. Malware samples used consisted of the Win.Packed.Generic-9795615-0, Win.Virus.Virlock-6804475-0, and Win.Worm.Chir-2282 viruses. There are six samples of USB drives with different storage sizes and brands for testing. The results of the tests showing the results as expected at 99.8%. We obtained speeds ranging from 0.842 MB/s to 0.883 MB/s during 60 times scanning experiments on six samples of USB drives. The tests show that malware and the different USB drive types do not affect the resulting scan speed.