[go: up one dir, main page]
Scribd
Upload
12 views2 pages

Malware and DF

The document discusses two papers on malware analysis and its significance in digital forensics, highlighting the need for understanding malware behavior to protect organizations from cyber threats. It introduces a malware analysis tool called 'Taiwan Malware Analysis' that detects various types of malware and provides analysis reports. Additionally, it outlines the digital forensic investigation process, which includes acquiring, authenticating, and analyzing digital evidence to maintain its integrity and validity.

Uploaded by

Waqar Roy
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
12 views2 pages

Malware and DF

The document discusses two papers on malware analysis and its significance in digital forensics, highlighting the need for understanding malware behavior to protect organizations from cyber threats. It introduces a malware analysis tool called 'Taiwan Malware Analysis' that detects various types of malware and provides analysis reports. Additionally, it outlines the digital forensic investigation process, which includes acquiring, authenticating, and analyzing digital evidence to maintain its integrity and validity.

Uploaded by

Waqar Roy
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

Title: Digital Forensic & Malware

Analysis
Paper #1:
New Malware Analysis Method on Digital Forensics

Authors:
Sunghyuck Hong and Sungjin Lee
Publication: 2018

Paper #2:
Malware Analysis & its Application to Digital Forensics

Authors:
Gursimran Kaur, Bharti Nagpal
Publication: 2018

Name: Muhammad Waqar


ID: 12626
Course: Cyber Security
Date: Feb | 03 | 25

Summary:

Malware is an executable code or script that disrupts the system and gains sensitive information
using a vulnerability in the system. Malware is an umbrella term used for many malicious
activities. It emphasizes the necessity of malware and understanding the malware behaviour. So
that the organization can be protected from the cyber threats and cyber attacks. According to
the 2011 report, most of the attacks and threats were worms and Trojans. The paper has
created and introduced a malware analysis tool “Taiwan Malware Analysis” which detects
malware and creates an analysis report. The author did a sample test and found the following
result:

AhnLab-V3 ​ ​ ->​ Win-Trojan/Scar.2971136


Avast​ ​ ​ ->​ Win32 Malware-gen
Kaspersky ​ ​ ->​ Trojan.Win32.Scar.dsjn
McAfee ​ ​ ->​ Artemis!EC71A93DFCD4
nProtect ​ ​ ->​ Backdoor/W32.Agent.2971136
ViRobot ​ ​ ->​ Trojan.Win32.Scar.2971136
Paper #2

Forensic Science is a broad term used to investigate an attack and find and collect some
evidence about the attack. Malware is a malicious software that spreads in a network and
infects computer systems, the damage is estimated at more than 10 million dollars per year,
identified by the research groups like CART, TWGDE, DFRWS, and NIJ, etc. Digital forensics is
evidence that is found after the crime. Malware focuses on compromising the system,
Confidentiality, Integrity, and Availability (CIA).
The process of Digital Forensic Investigation is mentioned below:

Acquiring: Conquering the digital evidence carefully, so the integrity of the evidence can be
maintained.
Authenticating: Examining the validating of evidence, whether it is valid to use or not.
Analyzing: Close examination of data to sort out the case.

You might also like