Implementation of a Laboratory for Malware Analysis

Abstract

Worldwide infections and attacks by malicious code are growing exponentially; according to Kaspersky reports that in 2020, an average of 360,000 new malicious files were found per day, which infect devices such as computers, mobile phones, and key technological infrastructure for organizations. The objective of this experimental pilot was to implement a virtual laboratory that allows malware analysis in order to achieve a better understanding of the internal mechanisms of its operation, due to the fact that one of the main threats on the network is infection by malicious code. The methodology selected to achieve this objective was based on systematic approach to malware analysis (SAMA), which provided an effective guide throughout the malware analysis cycle despite its complexity, thus achieving the creation of the virtual laboratory in Windows, Linux, and Android operating system environments, which will allow the prospective establishment of defense techniques to protect various existing operating systems.