PDF files are considered to be safe for the static file format. On the other hand, PDF files can be executed using various codes as a malware. Previous researches have conducted to find the PDF format used as a malware, have not extracted the features of PDF. In this paper, we find the features of the new malware using actual PDF malware files, then investigate to find the useful features to detect malware. Finally, we examine the usefulness to detect real malware document in terms of the malfunction and proposed features.
['Mai Iwamoto', 'Shunsuke Oshima', 'Takuo Nakashima']
A Study of Malicious PDF Detection Technique