Heartbeat Malware Detection

Abstract

Legacy signature or heuristics-based solutions for malware infections and cyber-attacks are unable to keep up with the flood of new polymorphic malware samples, or to address the powerful and stealthy tactics of kernel-level rootkits. Heartbeat responds to this problem by focusing instead on the physical behavior of the device being protected, under the hypothesis that malware infection will produce a measurable change in the power consumption state of a device that can be picked up by an outside detector.