Malware analysis system, malware analysis method, and malware analysis program
AssigneeNippon Telegraph and Telephone Corporation
InventorsTomonori IKUSE, Kazufumi AOKI, Takeo HARIU
Life of this patent
Estimating the term…
Abstract
A malware analysis system includes a preliminary analysis unit, a determination unit, and a designation unit. The preliminary analysis unit executes malware obtained as a candidate for an analyzing subject to obtain information related to communication transmitted from the malware. The determination unit determines whether the malware is handled as an analyzing subject based on information obtained by the preliminary analysis unit. The designation unit designates an analyzing order with respect to malware having been determined by the determination unit as an analyzing subject based on information obtained by the preliminary analysis unit.
Claims8
A malware analysis system comprising:
- a preliminary analysis unit that executes malware obtained as a candidate for an analyzing subject to obtain information related to communication transmitted from the malware;
- a determination unit that determines whether the malware is handled as an analyzing subject based on information obtained by the preliminary analysis unit;
- and
- a designation unit that designates an analyzing order with respect to malware having been determined by the determination unit as an analyzing subject based on information obtained by the preliminary analysis unit.
A malware analysis method comprising:
- a preliminary analyzing step of executing malware obtained as a candidate for an analyzing subject and obtaining information related to communication transmitted from the malware;
- a determining step of determining whether the malware is handled as an analyzing subject based on information obtained at the preliminary analyzing step;
- and
- a designating step of designating an analyzing order with respect to malware having been determined at the determining step as an analyzing subject.
A non-transitory computer-readable medium having stored a malware analysis program causing a computer to execute a process comprising:
- a preliminary analyzing step of executing malware obtained as a candidate for an analyzing subject and obtaining information related to communication transmitted from the malware;
- a determining step of determining whether the malware is handled as an analyzing subject based on information obtained at the preliminary analyzing step;
- and
- a designating step of designating an analyzing order with respect to malware having been determined at the determining step as an analyzing subject based on information obtained at the preliminary analyzing step.
Dependencies are inferred from the claim text.