Name: Malware Detection in Virtualization Environment: Detecting Process Injection in Virtualized Environment using VM Introspection and Memory Forensics (en Inglés)
SKU: 66855173
Price: 42.44 USD
Availability: InStock
Author: Tank, Darshan
ISBN: 9789999331340

portada Malware Detection in Virtualization Environment: Detecting Process Injection in Virtualized Environment using VM Introspection and Memory Forensics (en Inglés)

Malware Detection in Virtualization Environment: Detecting Process Injection in Virtualized Environment using VM Introspection and Memory Forensics (en Inglés)

Formato

Libro Físico

Editorial

Eliva Press

Autor

Tank, Darshan

Idioma

Inglés

N° páginas

Encuadernación

Tapa Blanda

Dimensiones

22.9x15.2x0.2 cm

ISBN13

9789999331340

Malware Detection in Virtualization Environment: Detecting Process Injection in Virtualized Environment using VM Introspection and Memory Forensics (en Inglés)

Tank, Darshan (Autor) · Eliva Press · Tapa Blanda

Libro Nuevo Importado

Envío: 16 a 22 días háb.

$ 94.31$ 42.44

-55%

Costos de importación incluídos en el precio ✅

Libro Nuevo

Quedan 50 unidades

$ 42.44

Llega entre el 24 Sep y el 06 Oct a Quito, Pichincha. Seleccionar ubicación

Agregar a lista de deseos

Reseña del libro "Malware Detection in Virtualization Environment: Detecting Process Injection in Virtualized Environment using VM Introspection and Memory Forensics (en Inglés)"

Sophisticated malware frequently employs advanced evasion techniques to remain undetected by traditional security mechanisms. One of the most commonly used tactics is process injection, where malicious code is covertly inserted into the address space of legitimate processes. This allows the malware to operate under the guise of trusted applications, making detection significantly more challenging. In response to this issue, the present study introduces a novel detection methodology that functions entirely outside the virtual machine (out-of-VM). This technique leverages advanced memory introspection to identify and analyze different forms of process injection within virtualized environments. Notably, the approach is agentless, meaning it does not require any software to be installed within the guest VM, thereby eliminating the risk of the detection system itself being compromised or bypassed by the malware. Instead, it analyzes memory from the hypervisor level, providing a more secure and isolated vantage point. Experimental evaluations validate the effectiveness of the proposed method, demonstrating superior performance when compared to existing detection frameworks. Specifically, the method achieves higher detection accuracy, with more true positives and fewer false positives. It is capable of precisely identifying injected memory regions and detecting a broader spectrum of malware types, thereby outperforming current state-of-the-art solutions across all major evaluation metrics.