Characterizing and Prioritizing Malicious Code Transcript Part 1: Identify Characteristics of Destructive Behavior

Abstract

Julia Allen: Welcome to CERT's Podcast Series: Security for Business Leaders. The CERT Division is part of the Software Engineering Institute. We are a federally funded research and development center at Carnegie Mellon University in Pittsburgh, Pennsylvania. You can find out more about us at cert.org. Show notes for today's conversation are available at the podcast website. My name is Julia Allen. I'm a principal researcher at CERT working on operational resilience. I'm very pleased today to welcome Jose Morales. Jose is a senior member of the technical staff at CERT, working in malicious software research with the Forensics, Operations, and Investigations group. And I think you'll find today's subject pretty compelling. We are going to be talking about results that Jose and his research team have produced that describe an automated approach that can help malicious code or malware analysts determine which malware is the most severe, the most malicious, and thus should be the highest priority when it comes to analysis and action. This is particularly critical today given the growth in new malware strains that are released on a daily basis, estimated by some as much as 150,000. And Jose's team has also recently published two blog posts on the SEI website, and we'll include links to these in the show notes for more details.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Jan 01, 2014
Accession Number
AD1147173

Entities

People

  • Jose Morales
  • Julia H. Allen

Organizations

  • Carnegie Mellon University

Tags

Communities of Interest

  • Cyber

DTIC Thesaurus Topics

  • Abstracts
  • Accuracy
  • Advanced Persistent Threat
  • Algorithms
  • Code Injection
  • Computer Programming
  • Copyrights
  • Detection
  • Environment
  • Infection
  • Machine Learning
  • Malware
  • Online Communications
  • Operating Systems
  • Software Development
  • Training
  • Transient Response Analysis
  • Universities

Readers

  • Cybersecurity.
  • Defense Technology Research and Development.
  • Research Science/Academic Research

Technology Areas

  • Cyber