Contact
Comment faire ses achats
Livraison
Guide d'achat
Detecting and modeling polymorphic shellcode
Anglais
131 b
Livraison à Autriche
Jusqu'à 30 jours pour les retours
Les clients ont également acheté
/
Calendrier
76.89
€
/
Livre de poche
76.99
€
/
Livre de poche
25.29
€
/
Livre de poche
119.29
€
The problem of modeling and detecting polymorphic engines shellcode is adressed in this book. By polymorphic engines, we mean programs having the ability to transform any piece of malware into many instances consisting of different code but having the same functionality as the original malware. Typically, polymorphic engines work by encrypting the target malware using various encryption techniques and providing a decryption module in order to execute the newly encrypted instance. Moreover, those engines have the ability to mutate their decryption routine making them unique from one instance to another and hard to detect. We propose a new concept of signatures, shape signatures, which cope with the highly mutated nature of those engines. The shape signatures try to identify the constant part as well as the mutated part of the deciphering routines. This combination is able to cope with the highly mutated nature of those engines in a much more efficient way compared to traditional signatures used in most intrusion detection systems. We also aim at modeling those polymorphic engines by showing that they exhibit a specific byte composition.
À propos du livre
Anglais
Offrez ce livre dès aujourd'hui
C’est simple
1 Ajouter au panier et choisir l'option Livrer comme cadeau à la caisse. 2 Nous vous enverrons un bon d'achat 3 Le livre arrivera à l'adresse du destinataireCeci pourrait également vous intéresser
/
Livre de poche
44.69
€
/
Livre de poche
43.29
€
/
Livre de poche
27.89
€
Bonjour ! Je suis Libroamiko, votre conseiller littéraire.
Comment puis-je vous aider ?