Designing flexible sandboxing solutions to adapt to new malware trends
Computer Fraud & Security, 2018 (2):
5 - 9 (2018)DOI: https://doi.org/10.1016/S1361-3723(18)30013-7
Abstract
Every day, security organisations analyse thousands of new files and URLs, identifying the harmful ones to constantly improve their knowledge of computer threats. It is hard to guess whether a file or URL could be harmful or not without executing it, and executing unknown malicious software is dangerous. Every day, security organisations analyse thousands of new files and URLs, identifying the harmful ones to constantly improve their knowledge of threats. Matteo Cafasso and Mathieu Tarral of F-Secure explore design patterns and technologies for this kind of analysis, and look at an architectural design aiming to produce a flexible and maintainable sandboxing platform. They also discuss the introduction of a software development kit (SDK).