Polymorphisme Viral sous Linux (Viral Polymorphism in Linux) - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Journal Articles GNU/Linux Magazine Year : 2007

Polymorphisme Viral sous Linux (Viral Polymorphism in Linux)

Abstract

Nowadays viruses use polymorphic techniques to mutate their code on each replication, thus evading detection by antiviruses. However detection by emulation can defeat simple polymorphism: thus metamorphic techniques are used which thoroughly change the viral code, even after decryption. We briefly detail this evolution of virus protection techniques against detection and then study the MetaPHOR virus, today's most advanced metamorphic virus.
No file

Dates and versions

inria-00338067 , version 1 (10-11-2008)

Identifiers

  • HAL Id : inria-00338067 , version 1

Cite

Philippe Beaucamps. Polymorphisme Viral sous Linux (Viral Polymorphism in Linux). GNU/Linux Magazine, 2007, Hors Série 32. ⟨inria-00338067⟩
92 View
0 Download

Share

Gmail Facebook X LinkedIn More