Metamorphic Malware Detection using Heuristic Signature
Present day malicious programs are comes with dynamic packing capability which helps them to evade detection from traditional anti-malware scanner who works on OpCode pattern matching technique. The metamorphic engine resides in malware, changes the structure of malware, which changes OpCode hence the previous signature will not work for the new variant. Here we are using a bioinformatics technique of signature alignment, to generate a heuristic signature, based on the previous database of malware. We made a signature set of malicious (single MSA signature) and benign file (group signature) and computed a threshold to detect malwares. Proposed method calculates to predict the signatures, of the metamorphic malware variants. This method showed a good result with high true positive and low false positive ratio.