Hypervisor-assisted dynamic malware analysis

Abstract Malware analysis is a task of utmost importance in cyber-security. Two approaches exist for malware analysis: static and dynamic. Modern uses an abundance techniques to evade both dynamic tools. Current solutions either make modifications the running or use higher privilege component that does actual analysis. The former can be easily detected by sophisticated while latter often induces significant performance overhead. We propose method performs within context OS itself. Furthermore, camouflaged hypervisor, which makes it completely transparent its applications. evaluation system’s efficiency suggests induced overhead negligible.