Transient Cryptographic Secrets with Multiple Rounds and Automatic Detection Using Dynamic Analysis

Malware is a term used to a wide variety of forms of hostile or intrusive software including computer viruses, Trojan horses, worms, ransom ware, spyware, adware and other malicious programs. It can take the form of executable codes, scripts, active contents and other software. Nowadays malwares try to hide themselves from being analyzed by using several cryptographic operations. Cryptography is an art of combining mathematics, security, and engineering. It is very hard to implement effectively even though it is the core technique for protecting systems. Effective malware analysis and defense always have been a tedious task because of the use of cryptographic algorithms and cryptographic secrets inside the malware binary. Thus a framework is developed called “Cipher X-ray� which is binary analysis framework that is used to recover the cryptographic secrets. The mechanism is based upon avalanche effect in cryptography that can able to pinpoint exactly where the data modification is happened and extended to analyze the encryption of files than documents. Intermediate node analyzing is also included in order to improve the accuracy checking. The same work can be carried out when different types of files having encrypted or encrypted multiple times with another conditions.