« Ransom malware from Russia
A link between developers and end-users »

Zheng™ File Analysis

May 15th, 2009

I am proud to announce the official release of our File Analysis service, using our heuristic engine, nicknamed Zheng™.

I have been working with several people that have contributed to this project and I must say I have been very impressed by their expertise.

As Manager of our SWAT Team I have always been interested in innovative and creative ideas. That is one of our strengths as a young company, to always be pushing the boundaries and achieve the best level of service.

I, myself, am young to this industry. It has been roughly 4 years now but I have seen many trends in the security field. It all started with the spyware and adware craze… and along the way Botnets have taken over the stage with the Storm Worm for example.

Another drastic change is in the number of malware samples we see each day. This number has skyrocketed and shown the limitations of current Anti-Virus products.

Signature-based scanning is proven and solid, but it simply cannot keep up with the volume of samples. New methods have to be employed to detect malware.

If you look closely, those millions of threats do have things in common. Actually most of them are variants of each other. Capitalizing on that, it is possible to detect automatically generated malware that normally evades MD5 checks, for example.

Our team is working on several different techniques and algorithms. From the scientist’s point of view, to the software developper’s implementation.

There are many challenges along the way. Those make the research projects all the more fascinating and mind-boggling. We know we have to think fast though, otherwise we would be trailing behind.

So, today, we are presenting a great milestone in our research and we encourage you to give it a try and tell us what you think.

Thanks!

zheng

Jerome

    This entry was posted on Friday, May 15th, 2009 at 1:46 pm and is filed under Research. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

    Comments:

    • (0) comments
    • |
    • Add your comments




RSS feed to this site Twitter Linkedin YouTube Channel

 

RSS feed to this site Jerome Segura is a Security Analyst working at ParetoLogic.

You can contact him at:
MalwareDiaries Email

 

Pages

  • Live Malware Map
  • VB2009 pictures
  • Zheng™ Technology
  • About
  • Contact Us



Security Software

  • XoftSpySE Anti-Spyware
  • Anti-Virus PLUS
  • Privacy Controls



Malware Top 10

  • Koobface Worm
  • DNS Changer Trojan
  • Fake Alert Trojan
  • Windows System Suite
  • Smart Protector
  • Home Antivirus 2010
  • PC Antispyware 2010
  • System Security
  • AVCare
  • Perfect Defender 2009



Archives

  • November 2009
  • October 2009
  • September 2009
  • August 2009
  • July 2009
  • June 2009
  • May 2009
  • April 2009
  • March 2009
  • February 2009
  • January 2009
  • December 2008
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008
  • March 2008



Categories

  • Adware (1)
  • Banker Trojans (3)
  • Botnets (2)
  • Conferences (4)
  • DDos (1)
  • Exploits (33)
  • Fake codecs (30)
  • IM threats (1)
  • Interviews (5)
  • Keyloggers (1)
  • Mac security (15)
  • Malware Trends (67)
  • Phishing (7)
  • Podcast (1)
  • ransomware (1)
  • Research (33)
  • Rogue software (47)
  • Rootkits (2)
  • scams (3)
  • Social Networking (4)
  • Uncategorized (109)
  • Wireless Security (1)
  • world map (1)



 
 
 

© 2009 ParetoLogic Inc.