Advanced Metamorphic Techniques in Computer Viruses

Philippe Beaucamps 1
1 CARTE - Theoretical adverse computations, and safety
Inria Nancy - Grand Est, LORIA - FM - Department of Formal Methods
Abstract : Nowadays viruses use polymorphic techniques to mutate their code on each replication, thus evading detection by antiviruses. However detection by emulation can defeat simple polymorphism: thus metamorphic techniques are used which thoroughly change the viral code, even after decryption. We briefly detail this evolution of virus protection techniques against detection and then study the MetaPHOR virus, today's most advanced metamorphic virus.
Type de document :
Communication dans un congrès
International Conference on Computer, Electrical, and Systems Science, and Engineering - CESSE'07, Nov 2007, Venice, Italy. 2007
Liste complète des métadonnées

Littérature citée [12 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/inria-00338066
Contributeur : Philippe Beaucamps <>
Soumis le : lundi 10 novembre 2008 - 21:49:30
Dernière modification le : jeudi 11 janvier 2018 - 06:21:25
Document(s) archivé(s) le : lundi 7 juin 2010 - 22:51:32

Fichiers

beaucamps07-metamorphism.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

  • HAL Id : inria-00338066, version 1

Collections

Citation

Philippe Beaucamps. Advanced Metamorphic Techniques in Computer Viruses. International Conference on Computer, Electrical, and Systems Science, and Engineering - CESSE'07, Nov 2007, Venice, Italy. 2007. 〈inria-00338066〉

Partager

Métriques

Consultations de la notice

353

Téléchargements de fichiers

2220