Author : Sangwon Na 1
Date of Publication :11th September 2023
Abstract: In case of forgery by including hidden information in MS-Office digital document, the computer system may be malfunctioned by malware or shell code hidden in the digital document. If a malicious code is hidden in the official legal documents by corrupting the OOXML-based structural of MS-Office serial digital files, it may be possible to be infected by ransomware hidden inside of MS-Office files. Therefore, it is necessary to analyze corruption of OOXML-based MS-Office files. In this paper, we examine the weaknesses of the existing OOXML-based MS-Office file structure, and analyze how concealment and forgery are performed on MS-Office digital documents. We designed and implemented an ML based hidden data detection method for proactively responding ransomware attack on exploiting MS-Office security vulnerabilities.
Reference :