Anti-Disassembly using Cryptographic Hash Functions

Simple item page
dc.contributor.authorAycock, Johneng
dc.contributor.authordeGraaf, Rennieeng
dc.contributor.authorJacobson Jr, Michaeleng
dc.date.accessioned2008-02-26T20:21:50Z
dc.date.available2008-02-26T20:21:50Z
dc.date.computerscience2005-07-18eng
dc.date.issued2005-07-18eng
dc.description.abstractComputer viruses sometimes employ coding techniques intended to make analysis difficult for anti-virus researchers; techniques to obscure code to impair static code analysis are called anti-disassembly techniques. We present a new method of anti-disassembly based on cryptographic hash functions which is portable, hard to analyze, and can be used to target particular computers or users. Furthermore, the obscured code is not available in any analyzable form, even an encrypted form, until it successfully runs. The method s viability has been empirically confirmed. We look at possible countermeasures for the basic anti-disassembly scheme, as well as variants scaled to use massive computational power.eng
dc.description.notesWe are currently acquiring citations for the work deposited into this collection. We recognize the distribution rights of this item may have been assigned to another entity, other than the author(s) of the work.If you can provide the citation for this work or you think you own the distribution rights to this work please contact the Institutional Repository Administrator at digitize@ucalgary.caeng
dc.identifier.department2005-793-24eng
dc.identifier.doihttp://dx.doi.org/10.11575/PRISM/30283
dc.identifier.urihttp://hdl.handle.net/1880/45373
dc.language.isoEngeng
dc.publisher.corporateUniversity of Calgaryeng
dc.publisher.facultyScienceeng
dc.subjectComputer Scienceeng
dc.titleAnti-Disassembly using Cryptographic Hash Functionseng
dc.typeunknown
thesis.degree.disciplineComputer Scienceeng
Files
Original bundle
Now showing 1 - 2 of 2
Thumbnail Image
Name:
2005-793-24.pdf
Size:
153.43 KB
Format:
Adobe Portable Document Format
Download
No Thumbnail Available
Name:
2005-793-24.ps
Size:
327.43 KB
Format:
Postscript Files
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.86 KB
Format:
Plain Text
Description:
Download
Collections
Science Research & Publications