Malware data collection using Cuckoo Sandbox

Muhammad, Ahmad Fikri and Mohd Fuzi, Mohd Faris and Hajimia, Hafizah (2023) Malware data collection using Cuckoo Sandbox. In: Research Exhibition in Mathematics and Computer Sciences (REMACS 6.0). Faculty of Computer and Mathematical Sciences, UiTM Cawangan Perlis, pp. 57-58. ISBN 978-629-97440-5-4

Abstract

As the threat landscape continues to evolve, the need for effective malware analysis and detection techniques becomes increasingly crucial. Cuckoo Sandbox is an open-source automated malware analysis system that allows for the execution of suspicious files and the collection of comprehensive data on their behaviour. Cuckoo Sandbox able to run malware samples for analysis, running them in a controlled environment, and monitoring their activities. Furthermore, the objectives of this project is to presents the diverse range of data collected by Cuckoo Sandbox during the analysis process. This includes system call traces, network traffic, registry modifications, file system changes, and screenshots, among other valuable information. The results of the analysis was successfully analysed and can be used for malware analyst and researcher. It emphasizes the significance of this rich dataset in understanding the behaviour and capabilities of malware. It highlighted the importance of robust data collection techniques in combating the ever-growing threat of malware in today's digital landscape.

Metadata

Item Type: Book Section
Creators:
Creators
Email / ID Num.
Muhammad, Ahmad Fikri
UNSPECIFIED
Mohd Fuzi, Mohd Faris
UNSPECIFIED
Hajimia, Hafizah
UNSPECIFIED
Subjects: T Technology > TK Electrical engineering. Electronics. Nuclear engineering > Telecommunication > Computer networks. General works. Traffic monitoring > Intrusion detection systems (Computer security). Computer network security. Hackers
Divisions: Universiti Teknologi MARA, Perlis > Arau Campus > Faculty of Computer and Mathematical Sciences
Page Range: pp. 57-58
Keywords: Data collection, Cuckoo Sandbox, behaviour
Date: 2023
URI: https://ir.uitm.edu.my/id/eprint/138286
Edit Item
Edit Item

Download

[thumbnail of 138286.pdf] Text
138286.pdf

Download (51kB)

ID Number

138286

Indexing

Statistic

Statistic details