A Malware Behavior Analysis Method based on Coupling Degree

摘要

Aiming at the malware obfuscation technique, a new software behavior analysis method is proposed in the paper. The instruction coupling degree is calculated through mapping and associating the code analysis and log analysis to judge whether the instructions belong to the same behavior and then obtain the instruction information and operation process of different behaviors. The experiment proves that the method can effectively avoid the interference caused by the obfuscation techniques with the characteristics of good fault tolerance and high analysis accuracy.