A Study on Malware Profiling and Result Visualization Design Framework

Abstract

Advanced persistent threats increase significantly every year, and the scope of those attacks is expanding
from a simple cyber area to national core infrastructures (e.g., communication facilities, power plant, etc.) and
industries. Those attacks are mostly caused by the malicious code of the same attacker, and similar types/variants are
then distributed continuously. Hence, this paper proposes a framework for malicious code profiling design and result
visualization. The framework can classify a large amount of incoming malicious code into similar type groups with
common properties and identify the correlation among those data through visualization, in order to effectively respond to
cyber breach incidents quickly.