Earticle

초록

한국어

Jump displacement is regarded as part of instruction displacement, which can be used for code diversification and code randomization. In this paper, we implement jump displacement technique on benign PE (Portable Executable) files through IDA Pro 7.0 in Windows systems. We then evaluate the performance of Jump displacement technique. More specifically, we implement jump displacement technique on 30 benign PE files and perform evaluation of them through IDA Pro 7.0. Our evaluation results demonstrate that jump displacement can cause an increase in the number of anti-virus engines misclassifying benign PE files as malware. Moreover, we discern that the larger number of machine codes affected by jump displacement technique in benign PE files can lead to the higher chance that IDA Pro 7.0 fails to disassemble correctly benign PE files, leading to malfunction of benign PE files.

목차

Abstract
1. Introduction
2. Related Work
3. Implementation of Jump Displacement Technique on Benign PE files
4. Performance Evaluation
5. Conclusion
Acknowledgement
References

키워드

저자

• Jun-Won Ho [ Professor, Division of Intelligent Information Security, Seoul Women‘s University, South Korea ] Corresponding Author

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  The International Journal of Advanced Smart Convergence

• 간기

  계간

• pISSN

  2288-2847

• eISSN

  2288-2855

• 수록기간

  2012~2025

• 십진분류

  KDC 326 DDC 380