返回
Evaluating model checking for cyber threats code obfuscation identification
DOI:10.1016/j.jpdc.2018.04.008.png)
摘要
En 中文
Code obfuscation is a set of transformations that make code programs harder to understand. The goal of code obfuscation is to make reverse engineering of programs infeasible, while maintaining the logic on the program. Originally, it has been used to protect intellectual property. However, recently code obfuscation has been also used by malware writers in order to make cyber threats easily able to evade antimalware scanners. As a matter of fact, metamorphic and polymorphic viruses exhibit the ability to obfuscate their code as they propagate. In this paper we propose a model checking-based approach which is able to identify the most widespread obfuscating techniques, without making any assumptions about the nature of the obfuscations used. We evaluate the proposed method on a real-world data set obtaining an accuracy equal to 0.9 in the identification of obfuscation techniques. (C) 2018 Elsevier Inc. All rights reserved.
Keyword:
Obfuscation
Android
Model checking
Formal methods
Malware
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
4
论文数:
3.8K
被引数:
4.8K
机构
引用论文
Strong bound between trace distance and Hilbert-Schmidt distance for low-rank states低秩态的迹距与hilbert-schmidt距离之间的强界
Protecting Software through Obfuscation: Can It Keep Pace with Progress in Code Analysis?通过混淆保护软件: 它能否跟上代码分析的进度?


