Heuristics Analysis of Malwares

Guided By, Presented By,

Prabha Sir Drisya S (p3mca12016)
Parvathi M (p3mca12026)
Abstract
Heuristic analysis is a method employed by many computer antivirus
programs designed to detect previously unknown computer viruses and
new variants of viruses.

Heuristic analysis is an expert based analysis that determines the
susceptibility of a system towards particular threat/risk using various
decision rules or weighing methods.
Most antivirus programs that utilize heuristic analysis perform this function by
executing the programming commands of a questionable program or script
within a specialized virtual machine, thereby allowing the anti-virus program to
internally simulate what would happen if the suspicious file were to be executed
while keeping the suspicious code isolated from the real-world machine.
It then analyzes the commands monitoring for common viral activities such as
replication, file overwrites, memory changes and attempts to hide the existence
of the suspicious file. If one or more virus-like actions are detected, the
suspicious file is flagged as a potential virus, and the user alerted.
Base Paper