Using Hyper-V Sockets for Real-time Data Extraction from a Malware Analysis Sandbox

István-Attila Császár; Radu-Marian Portase; Adrian Coleşa; Adrian Groza

doi:10.1109/aqtr70159.2026.11577802

Home/Archive/arXiv

arXiv · 2608.30383

Using Hyper-V Sockets for Real-time Data Extraction from a Malware Analysis Sandbox

István-Attila Császár·Radu-Marian Portase·Adrian Coleşa·Adrian Groza

View original source ↗Read source document ↗Export metadata ↓

Abstract

We present how Hyper-V sockets can be used as a real-time communication channel for a malware analysis sandbox. We show that, compared to WinSock TCP sockets, Hyper-V sockets are not subject to TCP/IP-layer blocking and are not enumerated by common TCP connection listing tools. We compare the throughput of the two communication channels as a function of buffer size.

Explore related subjects

cs.CR

Keep this discovery

BibTeX RIS

István-Attila Császár, Radu-Marian Portase, Adrian Coleşa, Adrian Groza. 2026-08-31. Using Hyper-V Sockets for Real-time Data Extraction from a Malware Analysis Sandbox. https://doi.org/10.1109/aqtr70159.2026.11577802

Cite the original work for its findings. Save a collection to share your selection of sources.

Discover connections

cs.CR subject

Connections use source metadata and explicit phrase matches, not verified experimental comparisons.

KEEP EXPLORING

Related discoveries

arXiv2026

The Impact of Magma: A Ground-Truth Fuzzing Benchmark

Magma is an open-source and ground-truth fuzzing benchmark that enables uniform fuzzer evaluation and comparison. Magma was originally released with a research paper published at ACM SIGMETRICS 2021. This short paper explains the motivation, the design, and the impact of Magma, with a description of extensions to the original benchmark.

cs.CR↗

arXiv2026

High-Dimensional Deterministic Secure Quantum Communication with Reed-Solomon Erasure Coding

Deterministic Secure Quantum Communication (DSQC) is a quantum cryptographic technique engineered to transfer a message through a quantum channel, requiring an auxiliary classical channel for eavesdropping verification and decoding, but without prior key distribution. This article presents a theoretical high-dimensional prepare and measure DSQC protocol using the Reed-Solomon erasure coding to ensure data resilience to noise. This protocol offers the following benefits: it eliminates the need for quantum memory or entanglement, it can be built with commercially available technology, and its higher capacity improves the overall transmission rate.

quant-ph↗

arXiv2026

A New Algebraic Algorithm for LWE

The Learning With Errors (LWE) problem, introduced by Regev in 2005, is central to modern cryptography and post-quantum security. The algorithms to solve the search version of the problem, Search-LWE, can be broadly categorised into algebraic, combinatorial and lattice-based. In this work we propose a new algebraic algorithm for the Search-LWE problem. At a high level, the algorithm combines linear-algebraic techniques with S-polynomial-based methods from Groebner basis computation. We provide a direct complexity analysis of our algorithm, avoiding semi-regularity assumptions and complexity bounds derived from the degree of regularity. Our algorithm achieves a polynomial improvement in complexity over prior results that use Groebner basis methods to solve Search-LWE.

cs.CR↗