From: Erik Hitipeuw To: Date: Fri, 13 Oct 2006 09:34:45 +0200 Subject: Lecture Dr. Arun Lakhotia [REMINDER] Dear all, I send you the following announcement and invitation on behalf of prof. dr. Paul Klint ----------------------------------------------- You are cordially invited to the following lecture: Title: Using term rewriting and all that for detecting metamorphic malware Speaker: Dr. Arun Lakhotia (Univ. of Louisiana) Date: Friday, October 13 2006 Time: 11:00 Venue: Instituut voor Informatica, Science Park Amsterdam, Kruislaan 403, 1098 SJ Amsterdam Room: F0.13 For a map and details see: http://www.science.uva.nl/organisatie/object.cfm/objectid=FDF073CD-26E8-453C-88CCAB50AEE78065 Abstract: Program analysis techniques, including term rewriting, have been invented and improved in the context of developing tools that aid programmers, such as compilers. These techniques are now being called upon to aid security analysts, this time to sniff out malicious programs. We have been investigating the use of program analysis techniques for the detection of metamorphic malware, malicious programs that transform themselves as they propagate. In this talk we will present our results of using term rewriting techniques to convert a metamorphic instance to its normal form. The experience gives some insight in new issues that come up with term rewriting and other analysis techniques are applied on malicious programs. About the speaker: Dr. Arun Lakhotia is a Professor of Computer Science at the Center for Advanced Computer Studies in the University of Louisiana at Lafayette. His research interest includes developing technologies to detect and defend against malware. His research has led to new ways to counter metamorphic viruses, to deobfuscate code, and to detect new viruses by comparing their code with previously known viruses. Dr. Lakhotia teaches a course on malware analysis and has given tutorial on the subject in IEEE Working Conference in Reverse Engineering. He is the recipient of the 2004 Louisiana Governor's University Technology Leader of the Year award. -- Erik Hitipeuw, Informatics Institute Computing, Systems architecture, Programming Laboratory [CSP Lab] - section computational science - programming research group - contact master grid computing http://www.science.uva.nl/grid/ Tel 020 5257462 Fax 020 5257419