Themida TIGER 시리즈 가상 머신의 가상 명령어 추출 방안 연구

키워드

참고문헌 (26)

1. "Malware and Attack Technologies Knowledge Area Issue" (2024)[URL]
2. "Themida: Advanced Windows software protection system" (2024)[URL]
3. "VMProtect: Complete solution to software protection" (2024)[URL]
4. "CodeVirtualizer:Total Obfuscation against Reverse En gineering" (2024)[URL]
5. Newsome, James, "Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software", NDSS, 5 (2005)
6. "Building an automated system to de-obfuscate an API wrapping of Themida v3.0 by a taint analysis" (2024)[URL]
7. Suk, Jae Hyuk, "UnThemida:Commercial obfuscation technique analysis with a fully obfuscated program", Software: Practice and Experience, 48(12), pp.2331~2349 (2018)
8. Suk, Jae Hyuk, "Analysis of virtualization obfuscated executable files and implementation of automatic analysis tool", Journal of the Korea Institute of Information Security &Cryptology, 23(4), pp.709~720 (2013)
9. Bell, James R, "Threaded code", Communications of the ACM, 16(6), pp.370~372 (1973)
10. J.H. Lee, "A Study on Analysis of Code Virtualization in Themida", Proceedings of the Conference on Information Security & Cryptology Summer, pp.537~540 (2017)
11. Sharif, Monirul, "Automatic reverse engineering of malware emulators", 2009 30th IEEE Symposium on Security and Privacy (2009), IEEE
12. Rolles, Rolf, "Unpacking Virtualization Obfuscators", WOOT, 9, pp.1~10 (2009)
13. Coogan, Kevin, "Deobfuscation of virtualizationobfuscated software: a semantics-base d approach", Proceedings of the 18th ACM conference on Computer and co mmunications security (2011)
14. Kinder, Johannes, "Towards static analysis of virtualization-obfuscated binaries", 2012 19th Working Conference on Reverse Engineering (2012), IEEE
15. Yadegari, Babak, "A generic approach to automatic deobfuscation of executable code", 2015 IEEE Symposium on Security and Privacy (2015), IEEE
16. "IDA Pro: A powerful disass embler and a versatile debugger" (2024)[URL]
17. Kalysch, Anatoli, "VMAttack: ̈deobfuscating virtualization-based packed binaries", Proceedings of the 12th International Conference on Availability, Reliability and Security (2017)
18. Xu, Dongpeng, "VMHunt: A verifiable approach to partially virtualized binary code simplification", Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security (2018)
19. "Tigress, Reverse Engineering Challenges" (2024)[URL]
20. Salwan, Jonathan, "Symbolic deobfuscation: From virtualized code back to the original", International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment (2018), Springer International Publishing
21. Lin, Jie, "VMRe: A reverse framework of virtual machine protection packed binaries", 2019IEEE Fourth International Conference on Data Science in Cyberspace (DSC) (2019), IEEE
22. "NoVmp: A static devirtualizer for VMProtect x64 3.x powered by VTIL" (2024)[URL]
23. "x64dbg: An open-source x64/x32 debugger for windows" (2024)[URL]
24. "Execution Trace Viewer: Too l for viewing and analyzing execution traces" (2024)[URL]
25. "ChatGPT" (2024)[URL]

관련 논문AI추천