Matches in SemOpenAlex for { <https://semopenalex.org/work/W2969421944> ?p ?o ?g. }
- W2969421944 abstract "Run time packing is a common approach malware use to obfuscate their payloads, and automatic unpacking is, therefore, highly relevant. The problem has received much attention, and so far, solutions based on dynamic analysis have been the most successful. Nevertheless, existing solutions lack in several areas, both conceptually and architecturally, because they focus on a limited part of the unpacking problem. These limitations significantly impact their applicability, and current unpackers have, therefore, experienced limited adoption. In this paper, we introduce a new tool, called Minerva, for effective automatic unpacking of malware samples. Minerva introduces a unified approach to precisely uncover execution waves in a packed malware sample and produce PE files that are well-suited for follow-up static analysis. At the core, Minerva deploys a novel information flow model of system-wide dynamically generated code, precise collection of API calls and a new approach for merging execution waves and API calls. Together, these novelties amplify the generality and precision of automatic unpacking and make the output of Minerva highly usable. We extensively evaluate Minerva against synthetic and real-world malware samples and show that our techniques significantly improve on several aspects compared to previous work." @default.
- W2969421944 created "2019-08-29" @default.
- W2969421944 creator A5007877883 @default.
- W2969421944 date "2019-08-24" @default.
- W2969421944 modified "2023-09-27" @default.
- W2969421944 title "Precise system-wide concatic malware unpacking." @default.
- W2969421944 cites W1508225132 @default.
- W2969421944 cites W1544225867 @default.
- W2969421944 cites W1548500763 @default.
- W2969421944 cites W1549813142 @default.
- W2969421944 cites W1564075167 @default.
- W2969421944 cites W1586598165 @default.
- W2969421944 cites W1604459715 @default.
- W2969421944 cites W165688198 @default.
- W2969421944 cites W181178495 @default.
- W2969421944 cites W1820253543 @default.
- W2969421944 cites W1892063863 @default.
- W2969421944 cites W2012737144 @default.
- W2969421944 cites W2059048359 @default.
- W2969421944 cites W2096921767 @default.
- W2969421944 cites W2126734536 @default.
- W2969421944 cites W2134312016 @default.
- W2969421944 cites W2140807364 @default.
- W2969421944 cites W2149668077 @default.
- W2969421944 cites W2151135920 @default.
- W2969421944 cites W2157768713 @default.
- W2969421944 cites W2159702664 @default.
- W2969421944 cites W2161563510 @default.
- W2969421944 cites W2162765234 @default.
- W2969421944 cites W2215262239 @default.
- W2969421944 cites W2470989862 @default.
- W2969421944 cites W2485666843 @default.
- W2969421944 cites W2620946705 @default.
- W2969421944 cites W2765653036 @default.
- W2969421944 cites W2891621711 @default.
- W2969421944 cites W2903710826 @default.
- W2969421944 cites W2922248686 @default.
- W2969421944 cites W2951063632 @default.
- W2969421944 cites W646354405 @default.
- W2969421944 cites W2468483608 @default.
- W2969421944 hasPublicationYear "2019" @default.
- W2969421944 type Work @default.
- W2969421944 sameAs 2969421944 @default.
- W2969421944 citedByCount "1" @default.
- W2969421944 countsByYear W29694219442019 @default.
- W2969421944 crossrefType "posted-content" @default.
- W2969421944 hasAuthorship W2969421944A5007877883 @default.
- W2969421944 hasConcept C120665830 @default.
- W2969421944 hasConcept C121332964 @default.
- W2969421944 hasConcept C136764020 @default.
- W2969421944 hasConcept C138885662 @default.
- W2969421944 hasConcept C15744967 @default.
- W2969421944 hasConcept C177264268 @default.
- W2969421944 hasConcept C192209626 @default.
- W2969421944 hasConcept C199360897 @default.
- W2969421944 hasConcept C2776760102 @default.
- W2969421944 hasConcept C2777256151 @default.
- W2969421944 hasConcept C2779395397 @default.
- W2969421944 hasConcept C2780615836 @default.
- W2969421944 hasConcept C2780767217 @default.
- W2969421944 hasConcept C38652104 @default.
- W2969421944 hasConcept C41008148 @default.
- W2969421944 hasConcept C41895202 @default.
- W2969421944 hasConcept C541664917 @default.
- W2969421944 hasConcept C542102704 @default.
- W2969421944 hasConceptScore W2969421944C120665830 @default.
- W2969421944 hasConceptScore W2969421944C121332964 @default.
- W2969421944 hasConceptScore W2969421944C136764020 @default.
- W2969421944 hasConceptScore W2969421944C138885662 @default.
- W2969421944 hasConceptScore W2969421944C15744967 @default.
- W2969421944 hasConceptScore W2969421944C177264268 @default.
- W2969421944 hasConceptScore W2969421944C192209626 @default.
- W2969421944 hasConceptScore W2969421944C199360897 @default.
- W2969421944 hasConceptScore W2969421944C2776760102 @default.
- W2969421944 hasConceptScore W2969421944C2777256151 @default.
- W2969421944 hasConceptScore W2969421944C2779395397 @default.
- W2969421944 hasConceptScore W2969421944C2780615836 @default.
- W2969421944 hasConceptScore W2969421944C2780767217 @default.
- W2969421944 hasConceptScore W2969421944C38652104 @default.
- W2969421944 hasConceptScore W2969421944C41008148 @default.
- W2969421944 hasConceptScore W2969421944C41895202 @default.
- W2969421944 hasConceptScore W2969421944C541664917 @default.
- W2969421944 hasConceptScore W2969421944C542102704 @default.
- W2969421944 hasLocation W29694219441 @default.
- W2969421944 hasOpenAccess W2969421944 @default.
- W2969421944 hasPrimaryLocation W29694219441 @default.
- W2969421944 hasRelatedWork W123981973 @default.
- W2969421944 hasRelatedWork W1833266457 @default.
- W2969421944 hasRelatedWork W2004652588 @default.
- W2969421944 hasRelatedWork W207341673 @default.
- W2969421944 hasRelatedWork W2125743503 @default.
- W2969421944 hasRelatedWork W2353699410 @default.
- W2969421944 hasRelatedWork W2356370762 @default.
- W2969421944 hasRelatedWork W2504756161 @default.
- W2969421944 hasRelatedWork W2593260544 @default.
- W2969421944 hasRelatedWork W268472369 @default.
- W2969421944 hasRelatedWork W2786564904 @default.
- W2969421944 hasRelatedWork W2795021372 @default.
- W2969421944 hasRelatedWork W2942644462 @default.
- W2969421944 hasRelatedWork W2946230252 @default.