Article
MSC:
68N15
Full entry |
PDF
(0.2 MB)
Feedback
PDF
(0.2 MB)
Feedback
Keywords:
obfuscation; source code; malware
obfuscation; source code; malware
Summary:
Obfuscation is a process that changes the code, but without any change to semantics. This process can be done on two levels. On the binary code level, where the instructions or control flow are modified, or on the source code level, where we can change only a structure of code to make it harder to read or we can make adjustments to reduce chance of successful reverse engineering.
References:
[1] Free Software Foundation, Inc.: Volatiles – Using the GNU Compiler Collection. 2010, http://gcc.gnu.org/onlinedocs/gcc/Volatiles.html
[2] Harbour, N.: Advanced Software Armoring and Polymorphic Kung-Fu. DEFCON 16, 2008.
[3] Intel: Intel Architecture Software Developer's Manual Volume 2: Instruction Set Reference. 1999, http://download.intel.com/design/intarch/manuals/24319101.pdf
[4] Karnik, A., Goswami, S., Guha, R.: Detecting Obfuscated Viruses Using Cosine Similarity Analysis. Modelling Simulation, 2007.
[5] Low, D.: Protecting Java code via code obfuscation. In: Crossroads – Special Issue on Robotics, 1998.
[6] Microsoft: MSDN Library. http://msdn.microsoft.com/en-us/library/ms123401.aspx
[7] Moser, A., Kruegel, Ch., Kirda, E.: Limits of static analysis for malware detection. In: Computer Security Applications Conference, 2007.
[8] Savarese, Ch., Hart, B.: The Caesar Cipher. 1999, http://www.cs.trincoll.edu/ crypto/historical/caesar.html.
Search
Partner of
