A Generic Approach to Automatic Deobfuscation of Executable Code

Malicious software are usually obfuscated to avoid detection and resist analysis. When new malware is encountered, such obfuscations have to be penetrated or removed ("deobfuscated") in order to understand the internal logic of the code and devise countermeasures. This paper discusses a ge...

Full description

Bibliographic Details

Published in:	Proceedings - IEEE Symposium on Security and Privacy pp. 674 - 691
Main Authors:	Yadegari, Babak, Johannesmeyer, Brian, Whitely, Ben, Debray, Saumya
Format:	Conference Proceeding
Language:	English
Published:	IEEE 01.05.2015
Subjects:	Algorithm design and analysis Deobfuscation IP networks Libraries Programming Return Oriented Programming Reverse engineering Security Semantics Virtualization-Obfuscation
ISSN:	1081-6011
Online Access:	Get full text
Tags:	Add Tag No Tags, Be the first to tag this record!