Matches in SemOpenAlex for { <https://semopenalex.org/work/W2164777238> ?p ?o ?g. }
Showing items 1 to 75 of
75
with 100 items per page.
- W2164777238 abstract "The general method in which attackers obtain the control authority of the remote host is through the exploit code. As network security systems have mounted the desired signatures about exploits, they have reduced damage due to the spreading and reoccurrence of the exploits. However, to avoid signature-based detection techniques, exploits employing techniques such as polymorphism and metamorphism have become more prevalent. Especially in the case of polymorphism, because there are many automation engines even if there is no special knowledge in order to make various exploits easily, the polymorphism researches need to be more actively studied. We present a new static analysis method for detecting the decryption routine of polymorphic exploit code. Most of decryption routines store the program counter value of remote host on a stack and use the value as the address for accessing the memory that the encrypted original code is positioned. The proposed method traces the processing steps of decryption routine as using the static analysis method. In the results of experiment, the proposed method can detect polymorphic exploit codes that the static analysis resistant techniques are used, and shows more efficient than the emulation-based method in the processing performance." @default.
- W2164777238 created "2016-06-24" @default.
- W2164777238 creator A5033855588 @default.
- W2164777238 creator A5036411489 @default.
- W2164777238 creator A5055250606 @default.
- W2164777238 creator A5084175410 @default.
- W2164777238 date "2009-06-01" @default.
- W2164777238 modified "2023-10-16" @default.
- W2164777238 title "Lightweight Static Analysis to Detect Polymorphic Exploit Code with Static Analysis Resistant Technique" @default.
- W2164777238 cites W1485086418 @default.
- W2164777238 cites W1525958661 @default.
- W2164777238 cites W1587340728 @default.
- W2164777238 cites W1591237315 @default.
- W2164777238 cites W1594536929 @default.
- W2164777238 cites W1597305440 @default.
- W2164777238 cites W1671661096 @default.
- W2164777238 cites W2010440413 @default.
- W2164777238 cites W2034346354 @default.
- W2164777238 cites W2035247360 @default.
- W2164777238 cites W2116065364 @default.
- W2164777238 cites W2137786570 @default.
- W2164777238 cites W2146211060 @default.
- W2164777238 cites W2157153057 @default.
- W2164777238 cites W88694106 @default.
- W2164777238 cites W2468483608 @default.
- W2164777238 cites W2472222154 @default.
- W2164777238 doi "https://doi.org/10.1109/icc.2009.5199134" @default.
- W2164777238 hasPublicationYear "2009" @default.
- W2164777238 type Work @default.
- W2164777238 sameAs 2164777238 @default.
- W2164777238 citedByCount "0" @default.
- W2164777238 crossrefType "proceedings-article" @default.
- W2164777238 hasAuthorship W2164777238A5033855588 @default.
- W2164777238 hasAuthorship W2164777238A5036411489 @default.
- W2164777238 hasAuthorship W2164777238A5055250606 @default.
- W2164777238 hasAuthorship W2164777238A5084175410 @default.
- W2164777238 hasConcept C111919701 @default.
- W2164777238 hasConcept C148730421 @default.
- W2164777238 hasConcept C149810388 @default.
- W2164777238 hasConcept C162324750 @default.
- W2164777238 hasConcept C165696696 @default.
- W2164777238 hasConcept C199360897 @default.
- W2164777238 hasConcept C38652104 @default.
- W2164777238 hasConcept C40305131 @default.
- W2164777238 hasConcept C41008148 @default.
- W2164777238 hasConcept C50522688 @default.
- W2164777238 hasConcept C97686452 @default.
- W2164777238 hasConceptScore W2164777238C111919701 @default.
- W2164777238 hasConceptScore W2164777238C148730421 @default.
- W2164777238 hasConceptScore W2164777238C149810388 @default.
- W2164777238 hasConceptScore W2164777238C162324750 @default.
- W2164777238 hasConceptScore W2164777238C165696696 @default.
- W2164777238 hasConceptScore W2164777238C199360897 @default.
- W2164777238 hasConceptScore W2164777238C38652104 @default.
- W2164777238 hasConceptScore W2164777238C40305131 @default.
- W2164777238 hasConceptScore W2164777238C41008148 @default.
- W2164777238 hasConceptScore W2164777238C50522688 @default.
- W2164777238 hasConceptScore W2164777238C97686452 @default.
- W2164777238 hasLocation W21647772381 @default.
- W2164777238 hasOpenAccess W2164777238 @default.
- W2164777238 hasPrimaryLocation W21647772381 @default.
- W2164777238 hasRelatedWork W1538186256 @default.
- W2164777238 hasRelatedWork W1827256152 @default.
- W2164777238 hasRelatedWork W2060012464 @default.
- W2164777238 hasRelatedWork W2101310246 @default.
- W2164777238 hasRelatedWork W2164777238 @default.
- W2164777238 hasRelatedWork W22100177 @default.
- W2164777238 hasRelatedWork W2359916969 @default.
- W2164777238 hasRelatedWork W2559619994 @default.
- W2164777238 hasRelatedWork W2794285299 @default.
- W2164777238 hasRelatedWork W168720587 @default.
- W2164777238 isParatext "false" @default.
- W2164777238 isRetracted "false" @default.
- W2164777238 magId "2164777238" @default.
- W2164777238 workType "article" @default.