Can I read Rule-based Anti-anti-debugging System on EtoBox?

Rule-based Anti-anti-debugging System by JaeKeun Lee; BooJoong Kang; Eul Gyu Im is a scholarly article available to read on EtoBox.

What is Rule-based Anti-anti-debugging System about?

Anti-debugging technology refers to various ways of preventing binary files from being analyzed in debuggers or other virtual machine environments. If binary files conceal or modify themself using anti-debugging techniques, analyzing these binary files becomes harder. There are some anti-anti-debugging techniques proposed so far, but malware developers make dynamic analysis difficult using various ways, such as execution time delay, debugger detection techniques and so on. In this paper, we propose a rule-based system that can avoid anti-debugging techniques in binary files, and showed several samples of antidebugging applications and how to detect and patch antidebugging techniques in common utilities or malicious code effectively.

Author

JaeKeun Lee; BooJoong Kang; Eul Gyu Im

Publisher

ACM

Published

2013

Language

EN