Matches in SemOpenAlex for { <https://semopenalex.org/work/W2811264191> ?p ?o ?g. }
Showing items 1 to 100 of
100
with 100 items per page.
- W2811264191 abstract "In benign programs, encryption is used to prevent sensitive data from being exposed. Malware, on the other hand, uses encryption to hide from analysis or perform malicious activities, e.g. ransomware. The challenge in detecting the presence of these cryptographic algorithms lies in the fact that it is generally not possible to identify the entire functionality of binary programs through static analysis. In this paper we present a novel approach for detecting specific cryptographic algorithms through control flow analysis based on symbolic execution. The control flow graph generated and symbolic execution done by the angr framework is used to search for loops. Nodes that are executed a certain number of times and in a specific order let us point out possible cryptographic activities. In the proof-of-concept implementation we were able to identify and differentiate DES, TripleDES and several variants of the AES algorithm. Our solution is able to detect the presence of these algorithms without access to the source code of the program. It also eliminates the need for a skilled operator to perform the analysis." @default.
- W2811264191 created "2018-07-10" @default.
- W2811264191 creator A5000806569 @default.
- W2811264191 creator A5013592673 @default.
- W2811264191 creator A5051433992 @default.
- W2811264191 creator A5055367812 @default.
- W2811264191 date "2017-07-01" @default.
- W2811264191 modified "2023-09-24" @default.
- W2811264191 title "Discovering Cryptographic Algorithms in Binary Code Through Loop Enumeration" @default.
- W2811264191 cites W1559833478 @default.
- W2811264191 cites W1710734607 @default.
- W2811264191 cites W19161399 @default.
- W2811264191 cites W1973403081 @default.
- W2811264191 cites W1974037404 @default.
- W2811264191 cites W2021436318 @default.
- W2811264191 cites W2024170198 @default.
- W2811264191 cites W2030906223 @default.
- W2811264191 cites W2066220442 @default.
- W2811264191 cites W2091939272 @default.
- W2811264191 cites W2111825754 @default.
- W2811264191 cites W2113864883 @default.
- W2811264191 cites W2120705432 @default.
- W2811264191 cites W2134633067 @default.
- W2811264191 cites W2140323279 @default.
- W2811264191 cites W2140564944 @default.
- W2811264191 cites W2156858199 @default.
- W2811264191 cites W2234839359 @default.
- W2811264191 cites W2308883347 @default.
- W2811264191 cites W2514974017 @default.
- W2811264191 doi "https://doi.org/10.1109/icssa.2017.22" @default.
- W2811264191 hasPublicationYear "2017" @default.
- W2811264191 type Work @default.
- W2811264191 sameAs 2811264191 @default.
- W2811264191 citedByCount "0" @default.
- W2811264191 crossrefType "proceedings-article" @default.
- W2811264191 hasAuthorship W2811264191A5000806569 @default.
- W2811264191 hasAuthorship W2811264191A5013592673 @default.
- W2811264191 hasAuthorship W2811264191A5051433992 @default.
- W2811264191 hasAuthorship W2811264191A5055367812 @default.
- W2811264191 hasConcept C11413529 @default.
- W2811264191 hasConcept C114614502 @default.
- W2811264191 hasConcept C148730421 @default.
- W2811264191 hasConcept C156340839 @default.
- W2811264191 hasConcept C15927051 @default.
- W2811264191 hasConcept C178489894 @default.
- W2811264191 hasConcept C199360897 @default.
- W2811264191 hasConcept C27458966 @default.
- W2811264191 hasConcept C2779395397 @default.
- W2811264191 hasConcept C33884865 @default.
- W2811264191 hasConcept C33923547 @default.
- W2811264191 hasConcept C38652104 @default.
- W2811264191 hasConcept C41008148 @default.
- W2811264191 hasConcept C541664917 @default.
- W2811264191 hasConcept C80444323 @default.
- W2811264191 hasConcept C84525096 @default.
- W2811264191 hasConcept C97686452 @default.
- W2811264191 hasConceptScore W2811264191C11413529 @default.
- W2811264191 hasConceptScore W2811264191C114614502 @default.
- W2811264191 hasConceptScore W2811264191C148730421 @default.
- W2811264191 hasConceptScore W2811264191C156340839 @default.
- W2811264191 hasConceptScore W2811264191C15927051 @default.
- W2811264191 hasConceptScore W2811264191C178489894 @default.
- W2811264191 hasConceptScore W2811264191C199360897 @default.
- W2811264191 hasConceptScore W2811264191C27458966 @default.
- W2811264191 hasConceptScore W2811264191C2779395397 @default.
- W2811264191 hasConceptScore W2811264191C33884865 @default.
- W2811264191 hasConceptScore W2811264191C33923547 @default.
- W2811264191 hasConceptScore W2811264191C38652104 @default.
- W2811264191 hasConceptScore W2811264191C41008148 @default.
- W2811264191 hasConceptScore W2811264191C541664917 @default.
- W2811264191 hasConceptScore W2811264191C80444323 @default.
- W2811264191 hasConceptScore W2811264191C84525096 @default.
- W2811264191 hasConceptScore W2811264191C97686452 @default.
- W2811264191 hasLocation W28112641911 @default.
- W2811264191 hasOpenAccess W2811264191 @default.
- W2811264191 hasPrimaryLocation W28112641911 @default.
- W2811264191 hasRelatedWork W126407768 @default.
- W2811264191 hasRelatedWork W2016793475 @default.
- W2811264191 hasRelatedWork W2039433315 @default.
- W2811264191 hasRelatedWork W2063021626 @default.
- W2811264191 hasRelatedWork W2065995359 @default.
- W2811264191 hasRelatedWork W22100177 @default.
- W2811264191 hasRelatedWork W2267598880 @default.
- W2811264191 hasRelatedWork W24706717 @default.
- W2811264191 hasRelatedWork W2604772494 @default.
- W2811264191 hasRelatedWork W2670925489 @default.
- W2811264191 hasRelatedWork W2725183405 @default.
- W2811264191 hasRelatedWork W2762032850 @default.
- W2811264191 hasRelatedWork W2769019964 @default.
- W2811264191 hasRelatedWork W2791774517 @default.
- W2811264191 hasRelatedWork W2980117201 @default.
- W2811264191 hasRelatedWork W3033579761 @default.
- W2811264191 hasRelatedWork W3084397815 @default.
- W2811264191 hasRelatedWork W3201031582 @default.
- W2811264191 hasRelatedWork W89505464 @default.
- W2811264191 hasRelatedWork W2822212831 @default.
- W2811264191 isParatext "false" @default.
- W2811264191 isRetracted "false" @default.
- W2811264191 magId "2811264191" @default.
- W2811264191 workType "article" @default.