Browse Definitions:
Definition

malware testing

Contributor(s): Ivy Wigmore

Malware testing is the practice of subjecting malicious programs to software testing tools and antivirus programs designed for legitimate applications. 

Malicious software developers want their products to meet a lot of the same requirements that other software should meet. It's not desirable, for example, for either type of program to crash user computers or applications. 

In the case of regular software, causing crashes indicates that the software is not functional. If malware crashes user systems, on the other hand, the larger concern is that the cause of the crash will be detected, eradicated and reported. Running smoothly without causing problems is generally the ideal for malware as much as it is for any software because anything that causes problems is likely to be investigated.

Brandon Dixon, an independent researcher, reported that two high-profile nation state hacking teams were using Google's VirusTotal website to improve their malware. VirusTotal is a free service that allows any user to submit a program for testing. The site aggregates over three dozen antivirus scanners from Symantec, Kaspersky Lab, F-Secure and others. Dixon had been tracking submissions to the site for some time. 

To test their malware, the hacking teams repeatedly submitted programs to the site attempting to ensure they can evade detection by antivirus software. When a program failed to get through antivirus, they would tweak the code and resubmit until the malware was able to pass undetected. 

This was last updated in September 2014

Continue Reading About malware testing

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

SearchCompliance

  • smart contract

    A smart contract, also known as a cryptocontract, is a computer program that directly controls the transfer of digital currencies...

  • risk map (risk heat map)

    A risk map, also known as a risk heat map, is a data visualization tool for communicating specific risks an organization faces. A...

  • internal audit (IA)

    An internal audit (IA) is an organizational initiative to monitor and analyze its own business operations in order to determine ...

SearchSecurity

  • evil maid attack

    An evil maid attack is a security exploit that targets a computing device that has been shut down and left unattended.  An evil ...

  • Common Body of Knowledge (CBK)

    In security, Common Body of Knowledge (CBK) is a comprehensive framework of all the relevant subjects a security professional ...

  • rootkit

    A rootkit is a program or, more often, a collection of software tools that gives a threat actor remote access to and control over...

SearchHealthIT

  • value-based healthcare

    Value-based healthcare, also known as value-based care, is a payment model that rewards healthcare providers for providing ...

  • health informatics

    Health informatics is the practice of acquiring, studying and managing health data and applying medical concepts in conjunction ...

  • clinical trial

    A clinical trial, also known as a clinical research study, is a protocol to evaluate the effects and efficacy of experimental ...

SearchDisasterRecovery

  • crisis communication

    Crisis communication is a method of corresponding with people and organizations during a disruptive event to provide them with ...

  • Zerto

    Zerto is a storage software vendor that specializes in enterprise-class business continuity and disaster recovery in virtual and ...

  • crisis management plan (CMP)

    A crisis management plan (CMP) is a document that outlines the processes an organization will use to respond to a critical ...

SearchStorage

  • hard disk

    A hard disk is part of a unit -- often called a disk drive, hard drive or hard disk drive -- that stores and provides relatively ...

  • cache memory

    Cache memory, also called CPU memory, is high-speed static random access memory (SRAM) that a computer microprocessor can access ...

  • RAID 10 (RAID 1+0)

    RAID 10, also known as RAID 1+0, is a RAID configuration that combines disk mirroring and disk striping to protect data.

SearchSolidStateStorage

  • hybrid hard disk drive (HDD)

    A hybrid hard disk drive is an electromechanical spinning hard disk that contains some amount of NAND Flash memory.

Close