Metamorphism as a Software Protection for Non-Malicious Code

Bibliographic Details
Title:	Metamorphism as a Software Protection for Non-Malicious Code
Authors:	Dube, Thomas E.
Source:	Theses and Dissertations
Publisher Information:	AFIT Scholar
Publication Year:	2006
Collection:	AFTI Scholar (Air Force Institute of Technology)
Subject Terms:	Software protection, Reverse engineering--Computer programs, Computer viruses, Software Engineering
Description:	Most organizations are aware that threats from trusted insiders pose a great risk to their organization and are very difficult to protect against. Auditing is recognized as an effective technique to detect malicious insider activities. However, current auditing methods are typically applied with a one-size-fits-all approach and may not be an appropriate mitigation strategy, especially towards insider threats. This research develops a 4-step methodology for designing a customized auditing template for a Microsoft Windows XP operating system. Two tailoring methods are presented which evaluate both by category and by configuration. Also developed are various metrics and weighting factors as a mechanism to evaluate auditing effectiveness for the purpose of optimizing the template according to organizational security requirements. Various industry standard auditing templates are evaluated against a custom designed template. Results indicate that a customized auditing template tailored for an insider threat scenario is more effective at detecting insider malicious activities.
Document Type:	text
File Description:	application/pdf
Language:	unknown
Relation:	https://scholar.afit.edu/etd/3469; https://scholar.afit.edu/context/etd/article/4470/viewcontent/AFIT_GIA_ENG_06_04_Dube_T.pdf
Availability:	https://scholar.afit.edu/etd/3469 https://scholar.afit.edu/context/etd/article/4470/viewcontent/AFIT_GIA_ENG_06_04_Dube_T.pdf
Accession Number:	edsbas.7870C9B
Database:	BASE

View record from BASE

Be the first to leave a comment!