I would like to know the importance of Theoritical CS/Formal methods in Malware research. Due to the large volume of new malware variants received per day (~50,000 samples/day according to McAfee), malware researchers are heavily dependent on dynamic analysis (i.e. running the samples in a sandbox and monitoring their behavior) and moving away from static analysis and Reverse engineering as these approaches are very time consuming and sometimes becomes very challenging due to obfuscation/encryption.
I found a very useful talk (BlackHat 2010) by Greg Hoglund on
Malware attribution where the speaker talks about the importance of bringing in the malware authors and their networks into the picture which gives valuable information than just analyzing the binary itself.
My question is:
If malware researchers move towards analyzing the behavior of malware authors and their network, in the future, does theoretical CS/formal methods has any importance in malware research.