抄録
L-025
Malware visualization based on the behavior and its classification
◎浦辻和也(愛媛大)・松重雄大(神戸大)・甲斐 博(愛媛大)・森井昌克(神戸大)
We consider a malware visualization scheme based on malware behaviors. Our purpose is to understand intuitively malware’s characteristics from the visualization. The behaviors are obtained from the "Technical Details" of the Security Response in the Symantec's webpage. We classified them into 4 categories, such as manipulation activities, subversive activities, information collection activities, infection activities. We collect words, which describe malware behaviors, from the Technical Details, then associate them with the categories. Then, we constructed malware models using word frequency arise in the categories. In this paper, we propose malware visualization models and a method for their automated creation.