arrow
返回

Evaluating model checking for cyber threats code obfuscation identification

delete2018-09-01
delete23
PRE
AI
F
Fabio Martinelli
F
Francesco Mercaldo
V
Vittoria Nardone
A
Antonella Santone
A
Arun Kumar Sangaiah *
A
A. Cimitile
DOI:10.1016/j.jpdc.2018.04.008delete
delete原文链接
delete分享
delete收藏
摘要

摘要

En 中文
Code obfuscation is a set of transformations that make code programs harder to understand. The goal of code obfuscation is to make reverse engineering of programs infeasible, while maintaining the logic on the program. Originally, it has been used to protect intellectual property. However, recently code obfuscation has been also used by malware writers in order to make cyber threats easily able to evade antimalware scanners. As a matter of fact, metamorphic and polymorphic viruses exhibit the ability to obfuscate their code as they propagate. In this paper we propose a model checking-based approach which is able to identify the most widespread obfuscating techniques, without making any assumptions about the nature of the obfuscations used. We evaluate the proposed method on a real-world data set obtaining an accuracy equal to 0.9 in the identification of obfuscation techniques. (C) 2018 Elsevier Inc. All rights reserved.
Keyword:
Obfuscation
Android
Model checking
Formal methods
Malware
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

Journal of Parallel and Distributed Computing 封面图
Journal of Parallel and Distributed Computing
IF:
4
论文数:
3.8K
被引数:
4.8K

机构

I
istituto di informatica e telematica (iit-cnr)
学者数:
168
论文数: 147
被引数: 0
University of Sannio 封面图
University of Sannio
学者数:
2.3K
论文数: 2.2K
被引数: 2.3K
U
University of Molise
学者数:
2.6K
论文数: 2.6K
被引数: 2.8K
C
consiglio nazionale delle ricerche (cnr)
学者数:
6.2W
论文数: 5.7W
被引数: 48
学者 查看更多机构
引用论文

引用论文

Identifying Propagation Sources in Networks: State-of-the-Art and Comparative Studies
err2017-01-01
err160
PREAI
errJiang, Jiaojiao; Wen, Sheng; Yu, Shui; Xiang, Yang; Zhou, Wanlei
err分享
err收藏
Modeling Propagation Dynamics of Social Network Worms
err2013-08-01
err88
PREAI
errWen, Sheng; Zhou, Wei; Zhang, Jun; Xiang, Yang; Zhou, Wanlei; Jia, Weijia
err分享
err收藏
err分享
err收藏
Protecting Software through Obfuscation: Can It Keep Pace with Progress in Code Analysis?通过混淆保护软件: 它能否跟上代码分析的进度?
err2016-04-05
err135
errOAAI
errSchrittwieser, Sebastian; Katzenbeisser, Stefan; Kinder, Johannes; Merzdovnik, Georg; Weippl, Edgar
err分享
err收藏
err分享
err收藏
学者 查看更多内容