Gizli kum bahçesi ile kötücül yazılım analizi

Malware is one of the biggest problems of the world of bits and bytes. Generallymalware does activities a user normally does not do, such as becoming part of avirtual army or submitting confidential data of the user to the malware author.There are publicly available analysis services for unknown binaries. Sandbox analysisis performed by execution of an untrusted binary in an isolated environment.It is a very common technique for malware research. Publicly available sandboxanalysis platforms help users to see traces of the execution without harming theirsystem. Also it helps owners of the sandbox to collect malware and makes thejob of analysts easier. One major problem of the public sandbox testing is thatmalware authors can also benefit from analysis of sandboxes. If they can identifysandbox systems they can hide malicious behavior. This thesis presents the publiclyused Anubis sandbox, detection mechanisms used against Anubis[3], furtherpossible detection mechanisms and our efforts for hiding fingerprint of Anubisfrom malware and decreasing the resulting false negative rates for the malwaredetection.