A Multi-Layered Technique for Fileless Malware Detection and Mitigation

Abstract

Anti-Viruses are programmed to detect and mitigate any suspicious program from the computer system by effective scanning of files system. Attackers are also using specially crafted techniques to breach a computer system. In fileless attack, the attacker load and execute malicious code directly into the system memory without effecting any file on the computer system. By this they also gain persistence within the computer system. Fileless malware are deadliest in nature as their detection is not quite easy. Fileless malware can be of multiple components or part. Even the first part cannot be malicious, but the reaming’s can be. Traditionally signature-based analysis techniques are employed by different anti viruses to counter such threats. Fileless malware can evade antiviruses techniques this poses a serious threat to individual or organization. Thus, to detect and mitigate the fileless malware a three-layered based technique is proposed in this research along with the experiment, result, and evaluation.