Matches in SemOpenAlex for { <https://semopenalex.org/work/W4387025507> ?p ?o ?g. }
Showing items 1 to 98 of
98
with 100 items per page.
- W4387025507 abstract "Malware authors often use cryptographic tools such as XOR encryption and block ciphers like AES to obfuscate part of the malware to evade detection. Use of cryptography may give the impression that these obfuscation techniques have some provable guarantees of success. In this paper, we take a closer look at the use of cryptographic tools to obfuscate malware. We first find that most techniques are easy to defeat (in principle), since the decryption algorithm and the key is shipped within the program. In order to clearly define an obfuscation technique’s potential to evade detection we propose a principled definition of malware obfuscation, and then categorize instances of malware obfuscation that use cryptographic tools into those which evade detection and those which are detectable. We find that schemes that are hard to de-obfuscate necessarily rely on a construct based on environmental keying. We also show that cryptographic notions of obfuscation, e.g., indistinghuishability and virtual black box obfuscation, may not guarantee evasion detection under our model. However, they can be used in conjunction with environmental keying to produce hard to de-obfuscate version of programs." @default.
- W4387025507 created "2023-09-26" @default.
- W4387025507 creator A5005448584 @default.
- W4387025507 creator A5016391740 @default.
- W4387025507 creator A5016670591 @default.
- W4387025507 creator A5017495591 @default.
- W4387025507 creator A5037225578 @default.
- W4387025507 creator A5040251515 @default.
- W4387025507 creator A5049859678 @default.
- W4387025507 date "2023-09-25" @default.
- W4387025507 modified "2023-09-26" @default.
- W4387025507 title "Use of cryptography in malware obfuscation" @default.
- W4387025507 cites W1499934958 @default.
- W4387025507 cites W1505973206 @default.
- W4387025507 cites W1515180657 @default.
- W4387025507 cites W1570998442 @default.
- W4387025507 cites W1603256047 @default.
- W4387025507 cites W1760530029 @default.
- W4387025507 cites W1976817682 @default.
- W4387025507 cites W2006942880 @default.
- W4387025507 cites W2024170198 @default.
- W4387025507 cites W2049208027 @default.
- W4387025507 cites W2079558195 @default.
- W4387025507 cites W2106899448 @default.
- W4387025507 cites W2117030266 @default.
- W4387025507 cites W2133271279 @default.
- W4387025507 cites W2148888468 @default.
- W4387025507 cites W2150423842 @default.
- W4387025507 cites W2152313002 @default.
- W4387025507 cites W2159702664 @default.
- W4387025507 cites W2166561215 @default.
- W4387025507 cites W2167003418 @default.
- W4387025507 cites W2516445971 @default.
- W4387025507 cites W2603582418 @default.
- W4387025507 cites W2765638539 @default.
- W4387025507 cites W2794457305 @default.
- W4387025507 cites W2912711574 @default.
- W4387025507 cites W2962830343 @default.
- W4387025507 cites W2988961468 @default.
- W4387025507 cites W2997554149 @default.
- W4387025507 cites W3005977564 @default.
- W4387025507 cites W3013440967 @default.
- W4387025507 cites W3023495226 @default.
- W4387025507 cites W3082860856 @default.
- W4387025507 cites W3123127232 @default.
- W4387025507 cites W347692644 @default.
- W4387025507 cites W4205096886 @default.
- W4387025507 cites W4254268612 @default.
- W4387025507 cites W4298227433 @default.
- W4387025507 cites W57039937 @default.
- W4387025507 cites W7540341 @default.
- W4387025507 doi "https://doi.org/10.1007/s11416-023-00504-y" @default.
- W4387025507 hasPublicationYear "2023" @default.
- W4387025507 type Work @default.
- W4387025507 citedByCount "0" @default.
- W4387025507 crossrefType "journal-article" @default.
- W4387025507 hasAuthorship W4387025507A5005448584 @default.
- W4387025507 hasAuthorship W4387025507A5016391740 @default.
- W4387025507 hasAuthorship W4387025507A5016670591 @default.
- W4387025507 hasAuthorship W4387025507A5017495591 @default.
- W4387025507 hasAuthorship W4387025507A5037225578 @default.
- W4387025507 hasAuthorship W4387025507A5040251515 @default.
- W4387025507 hasAuthorship W4387025507A5049859678 @default.
- W4387025507 hasConcept C106544461 @default.
- W4387025507 hasConcept C148730421 @default.
- W4387025507 hasConcept C178489894 @default.
- W4387025507 hasConcept C181149355 @default.
- W4387025507 hasConcept C38652104 @default.
- W4387025507 hasConcept C40305131 @default.
- W4387025507 hasConcept C41008148 @default.
- W4387025507 hasConcept C541664917 @default.
- W4387025507 hasConcept C84525096 @default.
- W4387025507 hasConceptScore W4387025507C106544461 @default.
- W4387025507 hasConceptScore W4387025507C148730421 @default.
- W4387025507 hasConceptScore W4387025507C178489894 @default.
- W4387025507 hasConceptScore W4387025507C181149355 @default.
- W4387025507 hasConceptScore W4387025507C38652104 @default.
- W4387025507 hasConceptScore W4387025507C40305131 @default.
- W4387025507 hasConceptScore W4387025507C41008148 @default.
- W4387025507 hasConceptScore W4387025507C541664917 @default.
- W4387025507 hasConceptScore W4387025507C84525096 @default.
- W4387025507 hasFunder F4320335334 @default.
- W4387025507 hasLocation W43870255071 @default.
- W4387025507 hasOpenAccess W4387025507 @default.
- W4387025507 hasPrimaryLocation W43870255071 @default.
- W4387025507 hasRelatedWork W2470502009 @default.
- W4387025507 hasRelatedWork W2900235625 @default.
- W4387025507 hasRelatedWork W2995290701 @default.
- W4387025507 hasRelatedWork W3195170298 @default.
- W4387025507 hasRelatedWork W4310997822 @default.
- W4387025507 hasRelatedWork W4386029484 @default.
- W4387025507 hasRelatedWork W4386041582 @default.
- W4387025507 hasRelatedWork W4387025507 @default.
- W4387025507 hasRelatedWork W2322373077 @default.
- W4387025507 hasRelatedWork W2574384165 @default.
- W4387025507 isParatext "false" @default.
- W4387025507 isRetracted "false" @default.
- W4387025507 workType "article" @default.