Question

Which of the following is the MOST secure method to perform dynamic analysis of malware that can sense when it is in a virtual environment? (choose one and why)

1. Place the malware on an isolated virtual server disconnected from the network.
2. Place the malware in a virtual server that is running Windows and is connected to the network.
3. Place the malware on a virtual server connected to a VLAN.
4. Place the malware on a virtual server running SIFT and begin analysis.

Answer 1

Answer)
The following is the MOST secure method for performing the dynamic analysis of the malware as mentioned above:

Place the malware on an isolated virtual server disconnected from the network.

For dynamically analyzing the malware which can sense when it is in the virtual environment, we can place the malware in the isolated virtual server disconnected from the network, where the malware will be unable to contact and establish communication to detect any status of the environment it is in, thus prompting us to dynamically analyze.