Luis Miguel Rojas Aguilera, E. Souto, Gilbert Breves Martins
{"title":"Improving the detection of metamorphic malware through data dependency graphs indexing","authors":"Luis Miguel Rojas Aguilera, E. Souto, Gilbert Breves Martins","doi":"10.17648/ENIGMA.V4I1.65","DOIUrl":"https://doi.org/10.17648/ENIGMA.V4I1.65","url":null,"abstract":"Metamorphism have been successfully used in original malicious code to the creation and proliferation of new malware instances, making them harder to detect. This work presents an approach that identifies metamorphic malware through data dependency graphs comparison. Features are extracted on data dependency graphs to build an index that is used to determine which malware family a suspicious code belongs to. Experimental results on 3045 samples of metamorphic malware showed that our proposed approach obtained accuracy rate higher than most commercial anti-malware tools.","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"146 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-07-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123819349","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
L. S. Medeiros, Fabio Zuvanov, Flávio Luis de Mello, E. Strauss
{"title":"IoT Information Security Evaluation for Developers and Users","authors":"L. S. Medeiros, Fabio Zuvanov, Flávio Luis de Mello, E. Strauss","doi":"10.17648/ENIGMA.V4I1.63","DOIUrl":"https://doi.org/10.17648/ENIGMA.V4I1.63","url":null,"abstract":"The accelerated growth of Internet of Things (IoT) exposes many unsecured issues related to design and usage of devices leading to a new technological security paradigm. This paper presents an evaluation method and corrective actions to be carried out in order to make the usage of IoT devices safer. This method combines both the developer’s perspective and user’s perspective, thus differing from current guides. The proposed evaluation method is divided by categories, each one composed of security control clauses and their corresponding action recommendation. The user perspective of such evaluation method was applied into a service company, and the developer perspective into an IoT device manufacturer. These experiments produced useful perceptions on such view points. The evaluation provided an opportunity to enhance manufacturer security awareness and improve user experience with IoT devices.","PeriodicalId":122084,"journal":{"name":"Journal of Information Security and Cryptography (Enigma)","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2018-07-21","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128459040","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}