Recently, as the rapid development of the Internet enabled easy downloading of diverse files, the number of cases of file download from unreliable paths has been increasing. This situation is advantageous in that accessibility to information is improved while being disadvantageous in that there is no defense against exposure to malware. The present paper proposes a method of judging whether programs are malicious based on Cuckoo Sandbox, which is a dynamic malware analysis system and classify the programs by comparing malware programs collected and classified in advance based on the dynamic API call counts of the programs.

Authors and Affiliations

1. Department of Computer Engineering, Yeungnam University, Gyeongsan, Gyeongbuk, 38541, South Korea

   Jihun Kim, Seungwon Lee & Jonghee M. Youn

2. Department of Multimedia Engineering, Hanbat National University, Daejeon, 34158, South Korea

   Haechul Choi

Corresponding author

Correspondence toJonghee M. Youn.

Editors and Affiliations

1. Computer Science and Engineering, Seoul National University of Science and Technology, Seoul, Korea (Republic of)

   James J. (Jong Hyuk) Park

2. Department of Computer Science, Georgia State University, Atlanta, Georgia, USA

   Yi Pan

3. Computer Science and Engineering, Gangneung-Wonju National University, Wonju, Korea (Republic of)

   Gangman Yi

4. University Salerno, Fisciano, Italy

   Vincenzo Loia

Reprints and permissions

© 2017 Springer Nature Singapore Pte Ltd.

Policies and ethics