Detection of encrypted executable files based on entropy analysis to determine the randomness measure of byte sequences

A method has been proposed for identifying malicious programs that use encryption as a disguise. In this paper, a modification of the statistical spectral test based on entropy analysis has been described.

Saved in:
Bibliographic Details
Published in:Automatic control and computer sciences 2017-12, Vol.51 (8), p.915-920
Main Authors: Alekseev, I. V., Platonov, V. V.
Format: Article
Language:English
Subjects:
Computer Science
Control Structures and Microprogramming
Encryption
Entropy
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:A method has been proposed for identifying malicious programs that use encryption as a disguise. In this paper, a modification of the statistical spectral test based on entropy analysis has been described.
ISSN:0146-4116
1558-108X
DOI:10.3103/S0146411617080041