Earticle

초록

영어

Anti-debugging technology refers to various ways of preventing binary files from being analyzed in debuggers or other virtual machine environments. If binary files conceal or modify themself using anti-debugging techniques, analyzing these binary files becomes harder. There are some anti-anti-debugging techniques proposed so far, but malware developers make dynamic analysis difficult using various ways, such as execution time delay, debugger detection techniques and so on. In this paper, we propose a Evading Anti-debugging techniques method that can avoid anti-debugging techniques in binary files, and showed several samples of anti-debugging applications and how to detect and patch anti-debugging techniques in common utilities or malicious code effectively.

목차

Abstract
 1. Introduction
 2. Background
  2.1. Assembly Instruction
  2.2. Anti-debugging Techniques
 3. Related Work
 4. Our Proposed Method
  4.1. Evading Anti-anti-debugging Techniques Method Overview
  4.2. Rule Composition
  4.3. Anti-debugging Detection Algorithm
 5. Experiments
  5.1. Anti-debugging Patch Experiment
  5.2. Patch Verification Experiment
 6. Conclusion
 Acknowledgements
 References

키워드

저자

• JaeKeun Lee [ Department of Computer and Software, Hanyang University, Seoul, Korea ]
• BooJoong Kang [ Department of Computer and Software, Hanyang University, Seoul, Korea ]
• Eul Gyu Im [ Department of Computer and Software, Hanyang University, Seoul, Korea ]

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605