More about HKUST
Malware Detection, Classification, Disarm and Defense with Application of Machine Learning, Natural Language Processing and Fuzzing Techniques
PhD Qualifying Examination Title: "Malware Detection, Classification, Disarm and Defense with Application of Machine Learning, Natural Language Processing and Fuzzing Techniques" by Mr. Anthony Cheuk Tung LAI Abstract: In the last two decades, cyber security incident and attack have been dealt with various methods. Most of these defense methods are highly dependent on security vendors’ products, such as malware quarantine with anti-virus software[MAL2] and attack traffic blocking via intrusion prevention system and firewall. However, these methods could still suffer from sophisticated cyber attacks, including Advanced Persistent Threat (APT)[MAL19] and data exfiltration through common network protocols like Domain Name Service (DNS), which are highly stealthy and difficult to detect due to code obfuscation and manipulation of vulnerabilities of different technologies. In addition, legitimate data flow and system process may be halted by these defense methods. Therefore, cyber security incident detection has been an ongoing research area. In this survey report, we will exhibit popular analysis methods of cyber attack and malware via static analysis and dynamic analysis, as well as code analysis for vulnerability identification and malware disarm. We will also discuss the detection methods for unknown attack and malware with the application of machine learning and natural language processing. Keywords: Cyber Threat, Cyber Attack, Malware, Machine Learning, Natural Language Processing, Code Analysis, Fuzzing, Vulnerability, Reverse Engineering, Bug Hunting, Exploitability Date: Monday, 13 August 2018 Time: 3:00pm - 5:00pm Venue: Room 3494 Lifts 25/26 Committee Members: Dr. Jogesh Muppala (Supervisor) Prof. Shing-Chi Cheung (Chairperson) Dr. Tao Wang Prof. Dit-Yan Yeung Dr. Ricci Ieong **** ALL are Welcome ****