ASParseV3: Auto-Static Parser and Customizable Visualizer
摘要
As hackers create and develop new malware daily, defensive methods and tools are needed to prevent such attacks. Static analysis is one of the most common techniques used to analyze, detect, and classify different types of malware. However, there is a lack of comprehensive static analysis tools that handle the new software and the malware that affects them. This chapter discusses the importance of static analysis in terms of feature extraction, dataset generation, and malware analysis systems by introducing the third version of the Android automatic Static Parsing tool (ASParse-V3) and its integration with other detection techniques. In addition to comprehensively comparing static analysis and parsing tools, this chapter shows the main characteristics and services offered by the ASParse tool through a case study of analyzing benign and malicious apps. ASParse tool can (a) scan files of any type, (b) using, adding, or removing features/keywords, (c) analyzing many files/directories simultaneously, (d) generating datasets with different formats, (e) visualizing the results using different customized dashboards, and (f) supporting different types of operating systems.