What is one limitation of tools that perform automated dynamic malware analysis?
Automated dynamic analysis relies on the behavior observed during execution, so incomplete coverage or evasion can miss malicious activity, producing false negatives. Its detection logic can also incorrectly classify benign activity as malicious, producing false positives.
Community Discussion