The present application provides a kind of
malware analysis
system and method, belong to
malware analysis field.The
system includes: sample acquisition module, for utilizing multiple acquisition methods to collect
malware samples, and the malware samples are stored;
Threat intelligence integration module, for utilizing multiple platforms to collect
threat intelligence, and the
threat intelligence is integrated and stored;Automated analysis module, utilizes automated analysis tool, combines analysis process and automated process, generates the automated analysis result of malware;Result
verification module, utilizes selected
verification method, combines multiple
verification indexes, and the credibility of automated analysis result is checked;And
report generation module, generates corresponding defense measures, generates
malware analysis report.The present application improves the update speed of
threat intelligence and the detection efficiency of new malware, reduces the
false alarm rate, improves the determination accuracy, shortens the
deployment time of defense measures, and reduces the amount of manual operation.