Server-Side Dynamic Code Analysis - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2009

Server-Side Dynamic Code Analysis


The common use of packers is a real challenge for the anti-virus community. Indeed, a static signature analysis can usually only detect and sometimes remove known packers if a specific unpacking routine has been programmed manually. Generic unpacking does not solve the problem due to its limited effectiveness. Additionally, the important number of binaries to scan on a daily basis makes automated analysis necessary in order to protect information systems. In this context, we propose a taxonomy of self-modifying behaviors, a generic method to detect them in potentially malicious samples and a scalable architecture for the distributed analysis of a high volume of binaries.
Fichier principal
Vignette du fichier
Server-Side_Dynamic_Code_Analysis.pdf (89.17 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

inria-00425554 , version 1 (22-10-2009)


  • HAL Id : inria-00425554 , version 1


Wadie Guizani, Jean-Yves Marion, Daniel Reynaud. Server-Side Dynamic Code Analysis. 4th International Conference on Malicious and Unwanted Software - Malware 2009, Fernando C. Colon Osorio, Oct 2009, Montréal, Canada. pp.55-62. ⟨inria-00425554⟩
89 View
275 Download


Gmail Facebook Twitter LinkedIn More