Proving Malware Freedom with Zero Knowledge Michael Raymond Advisor: Dr. Xiang Fu
Motivation


Our Vision Email comes with a proof -- I am free of virus! ● Proof size: 288 Bytes ● Verification time: 2ms ● Regardless of executable size

But How???
Malware Detection Automata Searches a given file for Malware: 1.Derived from Aho-Corasick (AC) string matching algorithm 2.Is a Deterministic Finite Automata (DFA) 3.Utilizes ClamAV virus signature database



AC-DFA

Z ero K nowledge S uccinct N on-interactive Ar gument of K nowledge Source
Distributed

Framework
So where does this leave us?

Does anyone have any questions?
THANKS!