ITU-T X.1218 PDF

This Recommendation analyses threats related to unknown malwares and specifies requirements of unknown malware detection based on dynamic behaviour analysis.

This Recommendation covers:

– Analysis of threat scenarios related to unknown malwares, such as targeted/customized malwares; and

– Requirements of unknown malware detection based on dynamic behaviour analysis in a sandbox environment.

This Recommendation does not analyse the content of the detected object but only its executing related behaviours, for example calls of system level application programming interfaces (APIs), etc.