HI,
I am currently studying computer forensics and am in my final year, but I was wondering would the title "virus signature analysis" apply more to a disseration or a program, because I was under the impression that virus hash signatures are random on creation not predefined.
Please post your views on my theory.
Thanks
There is a LOAD of research in this area aready.
But "virus signature analysis" ……….
Perhaps
"virus signature analysis on embedded devices"
"virus signature analysis on embedded hardware"
"virus signature analysis on cloud computing"
or
"The use of heuristics within virus signature analysis on embedded devices"
etc …. see above
you need a title less than 12 words, that really gets people interest.
As regards "impression that virus hash signatures are random on creation not predefined" , they only become pre-defined once there is more than one instance of exactly the same virus segment (note the word 'segment')
You only "Hash" part of the virus, generally a part that does not change, hence the term" mutating viri" which try to change their own code to hide from this detection method.
C.
ok thanks for your help