Sandbox prototype -installation auditing system

Abstract

Today internet users face a very difficult situation, everyday users need to download and install software from internet and it is difficult to assess the integrity of these software. Naïve users are deceived into installation of malicious programs. These Programs mislead the user from their true intent, they behave as benign while they often steal personal information, which leads to real world problems. Currently, there are two ways to conduct Malware Analysis. In Static Malware Analysis a given sample is analyzed without execution in the real environment. The most common technique to perform static analysis are signature-based Antivirus tools. The antivirus tools detect malicious software by scanning the given sample against available known set of signatures. Another technique that is used for malware analysis is Dynamic Malware Analysis. In dynamic analysis a given sample is executed in a controlled environment and the actions performed by the sample are monitored for behavioral analysis. SandMal is an application that is developed, and this project report presents an overview of the system. The intended audience of SandMal application are common internet users. The designed system will help a common internet user to upload a file to the system before they install on their personal computer. This system will install the malicious files on the server and compile the behavioral report of the sample. This behavior report will be sent back to the user that can analyze the report. i