TIGP (SNHCC)--Malicious Behavior Discovery with Open Source Intelligence and Obfuscation Resilience
- 講者黃意婷 教授 (國立臺灣科技大學電機系)
邀請人:TIGP (SNHCC) - 時間2022-12-26 (Mon.) 14:00 ~ 16:00
- 地點資訊所新館106演講廳
摘要
Cyber threats are one of the most pressing issues in the digital age. There has been a consensus on deploying a proactive defense to effectively detect and respond to adversary threats. The key to success is understanding the characteristics of malware, including their activities and manipulated resources on the target machines. In this talk, I will share my experience in malware behavior analysis (MAMBA) using MITRE ATT&CK framework, and introduce two ongoing work on extending MAMBA for withstanding obfuscated behaviors and API locating.