KUBO: a framework for automated efficacy testing of anti-virus behavioral detection with procedure-based malware emulation

• Main Authors: Pružinec, Jakub, Nguyen, Quynh Anh, Baldwin, Adrian, Griffin, Jonathan, Liu, Yang
• Other Authors: School of Computer Science and Engineering
• Format: Conference or Workshop Item
• Language: English
• Published: 2023
• Subjects: Engineering::Computer science and engineering; Malware; Anti-Virus Testing
• Online Access: https://hdl.handle.net/10356/171747
• Institution: Nanyang Technological University

Traditional testing of Anti-Virus (AV) products is usually performed on a curated set of malware samples. While this approach can evaluate an AV's overall performance on known threats, it fails to provide details on the coverage of exact attack techniques used by adversaries and malware. Such c...