Automatic Detection and Bypassing of Anti-Debugging Techniques for Microsoft Windows Environments
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Park, Juhyun | - |
dc.contributor.author | Jang, Yun-Hwan | - |
dc.contributor.author | Hong, Soohwa | - |
dc.contributor.author | Park, Yongsu | - |
dc.date.accessioned | 2022-07-09T15:03:36Z | - |
dc.date.available | 2022-07-09T15:03:36Z | - |
dc.date.created | 2021-05-12 | - |
dc.date.issued | 2019-05 | - |
dc.identifier.issn | 1582-7445 | - |
dc.identifier.uri | https://scholarworks.bwise.kr/hanyang/handle/2021.sw.hanyang/147847 | - |
dc.description.abstract | In spite of recent remarkable advances in binary code analysis, adversaries are still using diverse anti-reversing techniques for obfuscating code and making analysis difficult. Unlike most of the previous work that relies on debugger-plugins for neutralizing anti-debugging techniques, we focus on the Pin, which is one of the most widely used DBI (Dynamic Binary Instrumentation) tools in 80x86 environments. In this paper, we present an automatic anti-debugging detection/bypassing scheme using the Pin. In order to evaluate the effectiveness of our algorithm, we conducted experiments on 17 most widely used (commercial) protectors, which results in bypassing all anti-debugging techniques automatically. Particularly, our experiment includes Safengine, which is one of the most complex commercial protectors and, to the best of our knowledge, it has not been successfully analyzed by academic researchers up to now. Also, experimental results show that the proposed scheme performs better than the most recent work, Apate. | - |
dc.language | 영어 | - |
dc.language.iso | en | - |
dc.publisher | UNIV SUCEAVA, FAC ELECTRICAL ENG | - |
dc.title | Automatic Detection and Bypassing of Anti-Debugging Techniques for Microsoft Windows Environments | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Park, Yongsu | - |
dc.identifier.doi | 10.4316/AECE.2019.02003 | - |
dc.identifier.scopusid | 2-s2.0-85066320679 | - |
dc.identifier.wosid | 000475806300003 | - |
dc.identifier.bibliographicCitation | ADVANCES IN ELECTRICAL AND COMPUTER ENGINEERING, v.19, no.2, pp.23 - 28 | - |
dc.relation.isPartOf | ADVANCES IN ELECTRICAL AND COMPUTER ENGINEERING | - |
dc.citation.title | ADVANCES IN ELECTRICAL AND COMPUTER ENGINEERING | - |
dc.citation.volume | 19 | - |
dc.citation.number | 2 | - |
dc.citation.startPage | 23 | - |
dc.citation.endPage | 28 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.isOpenAccess | Y | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalResearchArea | Engineering | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Artificial Intelligence | - |
dc.relation.journalWebOfScienceCategory | Engineering, Electrical & Electronic | - |
dc.subject.keywordAuthor | computer hacking | - |
dc.subject.keywordAuthor | computer security | - |
dc.subject.keywordAuthor | debugging | - |
dc.subject.keywordAuthor | reverse engineering | - |
dc.subject.keywordAuthor | software protection | - |
dc.identifier.url | https://aece.ro/abstractplus.php?year=2019&number=2&article=3 | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
222, Wangsimni-ro, Seongdong-gu, Seoul, 04763, Korea+82-2-2220-1365
COPYRIGHT © 2021 HANYANG UNIVERSITY.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.