How Good Are Malware Detectors at Remediating Infected Systems?

  • Emanuele Passerini
  • Roberto Paleari
  • Lorenzo Martignoni
Conference paper

DOI: 10.1007/978-3-642-02918-9_2

Part of the Lecture Notes in Computer Science book series (LNCS, volume 5587)
Cite this paper as:
Passerini E., Paleari R., Martignoni L. (2009) How Good Are Malware Detectors at Remediating Infected Systems?. In: Flegel U., Bruschi D. (eds) Detection of Intrusions and Malware, and Vulnerability Assessment. DIMVA 2009. Lecture Notes in Computer Science, vol 5587. Springer, Berlin, Heidelberg

Abstract

Malware detectors are applications that attempt to identify and block malicious programs. Unfortunately, malware detectors might not always be able to preemptively block a malicious program from infecting the system (e.g., when the signatures database is not promptly updated). In these situations, the only way to eradicate the infection without having to reinstall the entire system is to rely on the remediation capabilities of the detectors. Therefore, it is essential to evaluate the efficacy and accuracy of anti-malware software in such situations. This paper presents a testing methodology to assess the quality (completeness) of the remediation procedures used by malware detectors to revert the effect of an infection from a compromised system. To evaluate the efficacy of our testing methodology, we developed a prototype and used it to test six of the top-rated commercial malware detectors currently available on the market. The results of our evaluation witness that in many situations the tested malware detectors fail to completely remove the effects of an infection.

Keywords

Malware malware detection software testing 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2009

Authors and Affiliations

  • Emanuele Passerini
    • 1
  • Roberto Paleari
    • 1
  • Lorenzo Martignoni
    • 1
  1. 1.Università degli Studi di MilanoItaly

Personalised recommendations