arrow
返回

Covert Computation Hiding code in code through compile-time obfuscation

delete2014-05-01
delete13
PRE
AI
S
Sebastian Schrittwieser *
S
Stefan Katzenbeisser
P
Peter Kieseberg
M
Markus Huber
M
Manuel Leithner
M
Martin Mulazzani
E
Edgar Weippl
DOI:10.1016/j.cose.2013.12.006delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Recently, the concept of semantic-aware malware detection has been proposed in the literature. Instead of relying on a syntactic analysis (i.e., comparison of a program to pregenerated signatures of malware samples), semantic-aware malware detection tries to model the effects a malware sample has on the machine. Thus, it does not depend on a specific syntactic implementation. For this purpose a model of the underlying machine is used. While it is possible to construct more and more precise models of hardware architectures, we show that there are ways to implement hidden functionality based on side effects in the microprocessor that are difficult to cover With a model. In this paper we give a comprehensive analysis of side effects in the x86 architecture and describe an implementation concept based on the idea of compile-time obfuscation, where obfuscating transformations are applied to the code at compile time. Finally, we provide an evaluation based on a prototype implementation to show the practicability of our approach and estimate complexity and space overhead using actual malware samples. (C) 2014 Elsevier Ltd. All rights reserved.
Keyword:
Code obfuscation
Side effect
Code steganography
Semantic-aware malware detection
Compile-time obfuscation
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

C
Computers and Security
IF:
5.4
论文数:
4.6K
被引数:
1.4W

机构

T
Technische Universitat Wien
学者数:
1.3W
论文数: 1.1W
被引数: 21
T
Technical University of Darmstadt
学者数:
1.3W
论文数: 10.0K
被引数: 1.2W
引用论文

引用论文

A set of robust fluorescent peptide probes for quantification of Cu(ii) binding affinities in the micromolar to femtomolar range
err2015-01-01
err0
errOAAI
errTessa R. Young; Chathuri J. K. Wijekoon; Benjamin Spyrou; Paul S. Donnelly; Anthony G. Wedd; Zhiguang Xiao
err分享
err收藏
Allosteric Regulation in Phosphofructokinase from the Extreme Thermophile Thermus thermophilus
err2013-12-27
err0
errOAAI
errMaria S. McGresham; Michelle Lovingshimer; Gregory D. Reinhart
err分享
err收藏
Computer virus - Coevolution
err1997-01-01
err108
errOAAI
errNachenberg, C
err分享
err收藏
Demonstration of Effective Control of Fast-Ion-Stabilized Sawteeth by Electron-Cyclotron Current Drive
err2009-03-19
err0
PREAI
errM. Lennholm; L.-G. Eriksson; F Turco; F. Bouquey; C. Darbos; R. Dumont; G. Giruzzi; M. Jung; R. Lambert; R. Magne; D. Molina; P. Moreau; F. Rimini; J-L. Segui; S. Song; E. Traisnel
err分享
err收藏
err分享
err收藏
没有更多内容