Automatic binary deobfuscation

Journal in Computer Virology

Volumn 6, Issue 3, 2010, Pages 261-276

  Guillot, Yoann ^a   Gazet, Alexandre ^a  

^a Sogeti/ESEC   (France)

Author keywords

[No Author keywords available]

Indexed keywords

CURRENT LIMITATION; FUTURE PROSPECTS; SEMANTIC ANALYSIS; SOFTWARE PROTECTION;

SOFTWARE PROTOTYPING;

EID: 77955174270     PISSN: 17729890     EISSN: 17729904     Source Type: Journal    
DOI: 10.1007/s11416-009-0126-4     Document Type: Article

References (17)

1. Guillot Y., Gazet A.: Semi-automatic binary protection tampering. J. Comput. Virol. 5(2), 119-150 (2009).
2. Guillot, Y.: Metasm. In: 5ème Symposium sur la Sécurité des Technologies de l'Information et des Communicatins (SSTIC'07). http://actes. sstic. org (2007).
3. Tip F.: A survey of program slicing techniques. J. Program. Lang. 3, 121-189 (1995).
4. Wroblewski, G.: General method of program code obfuscation (2002).
5. Beck, J., Eichmann, D.: Program and interface slicing for reverse engineering. In: In IEEE/ACM 15th Conference on Software Engineering (ICSE'93), pp. 509-518. IEEE Computer Society Press (1993).
6. Quist, D., Valsmith: Covert debugging-circumventing software armoring techniques (2007).
7. Bohne, L.: Pandora's bochs: automated malware unpacking (2008).
8. Kang, M. G., Poosankam, P., Yin, H.: Renovo: a hidden code extractor for packed executables (2007).
9. Perriot, F.: Defeating polymorphism through code optimization (2003).
10. Webster, M., Malcolm, G.: Detection of metamorphic and virtualization-based malware using algebraic specification. In: EICAR (2008).
11. Christodorescu, M., Kinder, J., Jha, S., Katzenbeisser, S., Veith, H.: Malware normalization. Technical Report 1539, University of Wisconsin, Madison, Wisconsin, USA (Nov 2005).
12. http://orange-bat.com
13. Futamura Y.: Partial evaluation of computation process-an approach to a compiler-compiler. Syst. Comput. Controls 2, 45-50 (1971).
14. Rolles, R.: Optimizing and compiling (2008).
15. Marlet, R.: Vers une formalisation de l'évaluation partielle. PhD thesis, L'Université de Nice - Sophia Antipolis, École Doctorale - Sciences pour l'Ingénieur (1994).
16. Hartmann, L., Jones, N. D., Simonsen, J. G.: Interpretive overhead and optimal specialisation.
17. Dullien, T., Porst, S.: Reil: a platform-independent intermediate representation of disassembled code for static code analysis. In: CanSecWest (2009).