Management of the Results of Automated Malware Analysis

摘要

A variety of malware are created and distributed rapidly with technical development and popularization of the Internet. The automated malware analysis techniques are being actively studied to quickly cope with the rapidly increasing malware. The data gathered by automated malware analysis are used to classify and identify unknown malware in anti-virus companies and related organizations. To manage the results of automated malware analysis efficiently, a database design considering relationships between the behaviors and characteristics of malware is needed. In this paper, we propose a database design that can store the results of automated malware analysis based on PE (Portable Executable) files which are the most used in Windows OS.