Year: 2025
Type: conference-paper
Abstract: The cybersecurity landscape is continually evolving, driven by sophisticated threats that challenge traditional defensive measures. Among these, fileless malware poses a unique threat due to its ability to reside entirely in the memory space. Traditional antivirus software primarily relies on identifying malicious files on disk, a technique inherently ineffective against memory-resident malware, as signature-based approaches cannot directly inspect code residing in memory. The prevalence of Linux-based systems, particularly in cloud environments and IoT devices, has prompted a rise in the occurrence of fileless malware targeting these platforms as well. As a result, defenders struggle to detect threats that leave no trace on disk and abuse trusted processes during execution, requiring new methods that look beyond file-based detection.
Author: Oksana Khomenko
Institution: Taras Shevchenko National University of Kyiv
Language: English
Subfield: Signal Processing
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
OpenAlex ID: W4411765779