Automatic public malware analysis services provide controlled, isolated and virtual environments to analyse malicious software samples. Unfortunately, malware is currently incorporating techniques to recognize execution onto a virtual or sandbox environment; when an analysis environment is detected, malware behaves as a benign application or even shows no activity. In this work, we present an empirical study and characterization of automatic PMAS, considering 26 different services. We also show a set of features that allow to easily fingerprint these services as analysis (...) environments; the lower the unlikeability of these features, the easier for us to fingerprint the analysis service they belong to. Finally, we propose a method for these analysis services to counter or at least mitigate our proposal. (shrink)

An essential requirement for increasing human confidence in computer systems is knowing an event’s origin. Therefore, it is necessary to have an efficient method to record such information. It is especially challenging in robotics, where unexpected behaviours can have unpredictable consequences, endangering the interests of people or even their safety. Furthermore, to analyse an incident’s cause or anticipate future behaviours, we must identify the events that cause a specific action. Although it is common to use logging systems for such purposes, (...) issues such as partial recording of events, unhelpful data or the impact on robot performance suggest conceiving new accountability solutions that assist when determining the responsible entities or the provenance of specific information. This paper presents a general-purpose approach to developing an accountability system for autonomous robots. It consists of four main components: a system event logger, a message producer, a distributed event streaming platform and a database. Our proposal is completely decoupled from the monitored system and allows real-time analysis, improving flexibility, besides system protection and transparency. Finally, the need to reduce the impact of the audit process and logging tasks on robot performance has promoted the development of different assessment scenarios to determine the best strategy for providing accounting services. (shrink)